Report - www.surveymonkey.com/r/75YKQJF

Domain	Rank	First Seen	Last Seen	Sent	Received	IP
surveymonkey-assets.s3.amazonaws.com (1)	39104	2014-10-06T16:56:27Z	2023-03-28T18:00:10Z	455	14958	52.217.73.244
img-getpocket.cdn.mozilla.net (5)	1631	2018-06-22T01:36:00Z	2023-03-29T05:09:12Z	2705	47881	34.120.237.76
pixel-library.pmg.com (1)	unknown	2022-07-18T07:54:22Z	2023-03-29T10:23:44Z	370	10856	54.230.111.27
fonts.googleapis.com (4)	8877	2013-06-10T22:14:26Z	2023-03-29T10:13:53Z	1714	2520	142.250.74.74
r3.o.lencr.org (7)	344	2020-12-02T09:52:13Z	2023-03-29T05:09:11Z	2366	6204	23.33.119.27
firefox.settings.services.mozilla.com (2)	867	2020-06-04T22:08:41Z	2023-03-29T05:09:03Z	782	2372	35.241.9.150
prod.smassets.net (14)	16665	2020-03-07T21:11:30Z	2023-03-29T09:06:36Z	6328	109653	54.230.111.36
www.googletagmanager.com (1)	75	2013-05-22T04:07:37Z	2023-03-29T05:44:04Z	386	110484	142.250.74.168
ocsp.godaddy.com (1)	698	2012-05-20T21:28:57Z	2023-03-29T05:12:39Z	340	2286	192.124.249.22
rum-ingest.us1.signalfx.com (1)	50598	2021-04-11T00:32:58Z	2023-03-29T14:27:41Z	503	321	35.80.235.91
content-signature-2.cdn.mozilla.net (1)	1152	2020-11-03T13:26:46Z	2023-03-29T05:09:31Z	413	5882	34.160.144.191
ocsp.pki.goog (7)	175	2018-07-01T08:43:07Z	2023-03-29T05:09:04Z	2401	4895	142.250.74.163
www.surveymonkey.com (2)	12626	2012-05-22T09:41:35Z	2023-03-29T08:23:35Z	1240	3221	54.230.111.102
ocsp.r2m01.amazontrust.com (1)	unknown	2022-10-12T22:43:53Z	2023-03-29T09:11:41Z	350	946	54.230.80.227
cdn.smassets.net (1)	16930	2017-01-29T16:47:25Z	2023-03-29T09:06:36Z	416	1590	54.230.111.36
contile.services.mozilla.com (1)	1114	2021-05-27T20:32:35Z	2023-03-29T05:09:31Z	333	391	34.117.237.239
push.services.mozilla.com (1)	2140	2014-10-24T10:27:06Z	2023-03-29T05:09:32Z	606	127	54.201.249.32
secure.surveymonkey.com (1)	18739	2012-06-29T00:39:46Z	2023-03-29T09:48:18Z	619	495	54.230.111.36
alli-gateway.surveymonkey.com (1)	unknown	2022-08-24T20:16:39Z	2023-03-29T15:10:05Z	577	195	3.216.131.38
cdn.signalfx.com (1)	116247	2017-03-27T21:00:08Z	2023-03-29T10:08:51Z	430	704	54.230.111.17

	URL	IP	Response	Size
	r3.o.lencr.org/	23.33.119.27	200 OK	503
URL HTTP/1.1 r3.o.lencr.org/ IP 23.33.119.27:0 ASN #20940 Akamai International B.V. Magic data Size 503 Hash bea3185dd820a31c1981317f37c3456d 1a548a5d27270fc11df9011837a7149571cedd78 469b97bf9f57401b3c9571039483589f2815f4794212b75c7c85cfefe0ae71e9 HTTP Headers `POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Content-Type: application/ocsp-response Content-Length: 503 ETag: "469B97BF9F57401B3C9571039483589F2815F4794212B75C7C85CFEFE0AE71E9" Last-Modified: Wed, 22 Mar 2023 14:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=17978 Expires: Fri, 24 Mar 2023 02:29:20 GMT Date: Thu, 23 Mar 2023 21:29:42 GMT Connection: keep-alive`

	r3.o.lencr.org/	23.33.119.27	200 OK	503
URL HTTP/1.1 r3.o.lencr.org/ IP 23.33.119.27:0 ASN #20940 Akamai International B.V. Magic data Size 503 Hash 65fc860bc043f3fb83bdc3debdcd322d 418010755deae099ef1284e402813c5837a10f42 d93d50c523c7f735987aba09db628259441eb75efe713a2df3c214e1fb8b5171 HTTP Headers `POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Content-Type: application/ocsp-response Content-Length: 503 ETag: "D93D50C523C7F735987ABA09DB628259441EB75EFE713A2DF3C214E1FB8B5171" Last-Modified: Wed, 22 Mar 2023 05:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=11473 Expires: Fri, 24 Mar 2023 00:40:55 GMT Date: Thu, 23 Mar 2023 21:29:42 GMT Connection: keep-alive`

	firefox.settings.services.mozilla.com/v1/	35.241.9.150	200 OK	939
URL HTTP/2 firefox.settings.services.mozilla.com/v1/ IP 35.241.9.150:0 ASN #15169 GOOGLE Magic JSON data\012- , ASCII text, with very long lines (939), with no line terminators Size 939 Hash 4ad6984a756720fbfff47b37a75513a2 355e35258114452af8b9638985ed9d8ef3bf0aca 43181fccb10652c68cae86e5e32b4e8f426fb5ad49d8125cb99e072cff573cf5 HTTP Headers `GET /v1/ HTTP/1.1 Host: firefox.settings.services.mozilla.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site` `HTTP/2 200 OK access-control-allow-origin: * access-control-expose-headers: Retry-After, Content-Length, Alert, Content-Type, Backoff content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none'; strict-transport-security: max-age=31536000 x-content-type-options: nosniff content-length: 939 via: 1.1 google date: Thu, 23 Mar 2023 21:15:07 GMT content-type: application/json age: 875 cache-control: max-age=3600,public alt-svc: clear X-Firefox-Spdy: h2`

	r3.o.lencr.org/	23.33.119.27	200 OK	503
URL HTTP/1.1 r3.o.lencr.org/ IP 23.33.119.27:0 ASN #20940 Akamai International B.V. Magic data Size 503 Hash 51a5d4696a6090c295850554508b51ce c44e143c2223546e64b19f543b8101aaf3b11e97 8794223d5e8d4d276c35e2fdcc24bf99694240634dd749cd9b5bf874dec055cf HTTP Headers `POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Content-Type: application/ocsp-response Content-Length: 503 ETag: "8794223D5E8D4D276C35E2FDCC24BF99694240634DD749CD9B5BF874DEC055CF" Last-Modified: Wed, 22 Mar 2023 05:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=3152 Expires: Thu, 23 Mar 2023 22:22:14 GMT Date: Thu, 23 Mar 2023 21:29:42 GMT Connection: keep-alive`

	content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-04-30-16-53-14.chain	34.160.144.191	200 OK	5348
URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-04-30-16-53-14.chain IP 34.160.144.191:0 ASN #15169 GOOGLE Magic PEM certificate\012- , ASCII text Size 5348 Hash e7bace7c1e04d44012e37ddffe36e5d5 3ac8d7c0a9d3e3f0b28b2530c7b8d8407b4042c2 6b4f80f2e95b26f6122ea8dcd0ef8d762299be822c69e839fc37581ca2bcb5f2 HTTP Headers `GET /chains/remote-settings.content-signature.mozilla.org-2023-04-30-16-53-14.chain HTTP/1.1 Host: content-signature-2.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site` HTTP/2 200 OK x-amz-id-2: im0sEXPGY/Xw1hdEcrca+NT7i9Mgk64FqtfhJ3ZXSVLHKjth5cIfXASzWPc0Jc5DEUzgte1EDkc= x-amz-request-id: HM5E3E4EB4G6V6RM x-amz-server-side-encryption: AES256 content-disposition: attachment accept-ranges: bytes server: AmazonS3 content-length: 5348 via: 1.1 google date: Thu, 23 Mar 2023 21:00:06 GMT age: 1776 last-modified: Sat, 11 Mar 2023 16:53:15 GMT etag: "e7bace7c1e04d44012e37ddffe36e5d5" content-type: binary/octet-stream cache-control: public,max-age=3600 alt-svc: clear X-Firefox-Spdy: h2

	contile.services.mozilla.com/v1/tiles	34.117.237.239	200 OK	12
URL HTTP/2 contile.services.mozilla.com/v1/tiles IP 34.117.237.239:0 ASN #15169 GOOGLE Magic JSON data\012- , ASCII text, with no line terminators Size 12 Hash 23e88fb7b99543fb33315b29b1fad9d6 a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3 HTTP Headers `GET /v1/tiles HTTP/1.1 Host: contile.services.mozilla.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site` `HTTP/2 200 OK server: nginx date: Thu, 23 Mar 2023 21:29:43 GMT content-type: application/json content-length: 12 access-control-allow-credentials: true vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers access-control-expose-headers: content-type strict-transport-security: max-age=31536000 via: 1.1 google alt-svc: clear X-Firefox-Spdy: h2`

	ocsp.pki.goog/gts1c3	142.250.74.163	200 OK	471
URL HTTP/1.1 ocsp.pki.goog/gts1c3 IP 142.250.74.163:0 ASN #15169 GOOGLE Magic data Size 471 Hash 1d54d3c84e73cd1f00a835aa7616c399 e869898915967fb645a7ae3bd711a831329cc792 9cca1d2ea17f54a8688823e6fb8cbb7247c0a808808b382ffdda35b2770a26f8 HTTP Headers `POST /gts1c3 HTTP/1.1 Host: ocsp.pki.goog User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 83 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Content-Type: application/ocsp-response Date: Thu, 23 Mar 2023 21:29:43 GMT Cache-Control: public, max-age=14400 Server: ocsp_responder Content-Length: 471 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN`

	ocsp.pki.goog/gts1c3	142.250.74.163	200 OK	471
URL HTTP/1.1 ocsp.pki.goog/gts1c3 IP 142.250.74.163:0 ASN #15169 GOOGLE Magic data Size 471 Hash 1d54d3c84e73cd1f00a835aa7616c399 e869898915967fb645a7ae3bd711a831329cc792 9cca1d2ea17f54a8688823e6fb8cbb7247c0a808808b382ffdda35b2770a26f8 HTTP Headers `POST /gts1c3 HTTP/1.1 Host: ocsp.pki.goog User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 83 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Content-Type: application/ocsp-response Date: Thu, 23 Mar 2023 21:29:43 GMT Cache-Control: public, max-age=14400 Server: ocsp_responder Content-Length: 471 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN`

	ocsp.pki.goog/gts1c3	142.250.74.163	200 OK	471
URL HTTP/1.1 ocsp.pki.goog/gts1c3 IP 142.250.74.163:0 ASN #15169 GOOGLE Magic data Size 471 Hash 1d54d3c84e73cd1f00a835aa7616c399 e869898915967fb645a7ae3bd711a831329cc792 9cca1d2ea17f54a8688823e6fb8cbb7247c0a808808b382ffdda35b2770a26f8 HTTP Headers `POST /gts1c3 HTTP/1.1 Host: ocsp.pki.goog User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 83 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Content-Type: application/ocsp-response Date: Thu, 23 Mar 2023 21:29:43 GMT Cache-Control: public, max-age=14400 Server: ocsp_responder Content-Length: 471 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN`

	ocsp.pki.goog/gts1c3	142.250.74.163	200 OK	471
URL HTTP/1.1 ocsp.pki.goog/gts1c3 IP 142.250.74.163:0 ASN #15169 GOOGLE Magic data Size 471 Hash 1d54d3c84e73cd1f00a835aa7616c399 e869898915967fb645a7ae3bd711a831329cc792 9cca1d2ea17f54a8688823e6fb8cbb7247c0a808808b382ffdda35b2770a26f8 HTTP Headers `POST /gts1c3 HTTP/1.1 Host: ocsp.pki.goog User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 83 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Content-Type: application/ocsp-response Date: Thu, 23 Mar 2023 21:29:43 GMT Cache-Control: public, max-age=14400 Server: ocsp_responder Content-Length: 471 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN`

	ocsp.pki.goog/gts1c3	142.250.74.163	200 OK	471
URL HTTP/1.1 ocsp.pki.goog/gts1c3 IP 142.250.74.163:0 ASN #15169 GOOGLE Magic data Size 471 Hash 1d54d3c84e73cd1f00a835aa7616c399 e869898915967fb645a7ae3bd711a831329cc792 9cca1d2ea17f54a8688823e6fb8cbb7247c0a808808b382ffdda35b2770a26f8 HTTP Headers `POST /gts1c3 HTTP/1.1 Host: ocsp.pki.goog User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 83 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Content-Type: application/ocsp-response Date: Thu, 23 Mar 2023 21:29:43 GMT Cache-Control: public, max-age=14400 Server: ocsp_responder Content-Length: 471 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN`

	firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US	35.241.9.150	200 OK	329
URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US IP 35.241.9.150:0 ASN #15169 GOOGLE Magic JSON data\012- , ASCII text, with very long lines (329), with no line terminators Size 329 Hash 0333b0655111aa68de771adfcc4db243 63f295a144ac87a7c8e23417626724eeca68a7eb 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300 HTTP Headers `GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1 Host: firefox.settings.services.mozilla.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: application/json Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Content-Type: application/json Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site` HTTP/2 200 OK access-control-allow-origin: * access-control-expose-headers: ETag, Last-Modified, Retry-After, Content-Length, Alert, Cache-Control, Expires, Content-Type, Backoff, Pragma content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none'; strict-transport-security: max-age=31536000 x-content-type-options: nosniff content-length: 329 via: 1.1 google date: Thu, 23 Mar 2023 21:14:33 GMT age: 910 last-modified: Fri, 25 Mar 2022 17:45:46 GMT etag: "1648230346554" content-type: application/json cache-control: max-age=3600,public alt-svc: clear X-Firefox-Spdy: h2

	r3.o.lencr.org/	23.33.119.27	200 OK	503
URL HTTP/1.1 r3.o.lencr.org/ IP 23.33.119.27:0 ASN #20940 Akamai International B.V. Magic data Size 503 Hash 18b877ebbad1529e4bd91e12220d91c4 a3d64fb3d9cc1fe3a29b261c4ec9acfe134dfedc 7001d3ef847c7002ac15155f0dfcc0a369f19860e85c8e90530f1e7b2dd88f09 HTTP Headers `POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Content-Type: application/ocsp-response Content-Length: 503 ETag: "7001D3EF847C7002AC15155F0DFCC0A369F19860E85C8E90530F1E7B2DD88F09" Last-Modified: Wed, 22 Mar 2023 05:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=4160 Expires: Thu, 23 Mar 2023 22:39:03 GMT Date: Thu, 23 Mar 2023 21:29:43 GMT Connection: keep-alive`

	push.services.mozilla.com/	54.201.249.32	101 Switching Protocols	0
URL HTTP/1.1 push.services.mozilla.com/ IP 54.201.249.32:0 ASN #16509 AMAZON-02 Magic Size 0 Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers GET / HTTP/1.1 Host: push.services.mozilla.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Sec-WebSocket-Version: 13 Origin: wss://push.services.mozilla.com/ Sec-WebSocket-Protocol: push-notification Sec-WebSocket-Extensions: permessage-deflate Sec-WebSocket-Key: TEwdFr0PnyPU+bIj8Wjujw== Connection: keep-alive, Upgrade Sec-Fetch-Dest: websocket Sec-Fetch-Mode: websocket Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache Upgrade: websocket `HTTP/1.1 101 Switching Protocols Connection: Upgrade Upgrade: websocket Sec-WebSocket-Accept: 7Efz/PNHC2OQA/sue/rxk2NR1ws=`

	surveymonkey-assets.s3.amazonaws.com/survey/511380104/d0dbb1be-040a-4bbf-8e0b-0c9471dc1462.jpg	52.217.73.244	200 OK	14424
URL HTTP/1.1 surveymonkey-assets.s3.amazonaws.com/survey/511380104/d0dbb1be-040a-4bbf-8e0b-0c9471dc1462.jpg IP 52.217.73.244:0 ASN #16509 AMAZON-02 Magic JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 100", baseline, precision 8, 100x100, components 3\012- data Size 14424 Hash fb946f72e96172cc732feb0d1b9f1360 8b352cf08bf994c86e2cc284c206ffb79dfa0969 e2ad87449561efa207b50b2a65cd2a03e1557740131136ace94ee5ebd02aa0bc HTTP Headers `GET /survey/511380104/d0dbb1be-040a-4bbf-8e0b-0c9471dc1462.jpg HTTP/1.1 Host: surveymonkey-assets.s3.amazonaws.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://www.surveymonkey.com/ Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site` HTTP/1.1 200 OK x-amz-id-2: m28lZWJBqC+0pRatjNdIyKQ4Nn53AG7MhHEfbArInRCsiALAZspdYtn4chu0pKNlCmOYdhV9Mdo= x-amz-request-id: SYG00GS970WKD860 Date: Thu, 23 Mar 2023 21:29:44 GMT x-amz-replication-status: COMPLETED Last-Modified: Tue, 14 Mar 2023 19:11:46 GMT ETag: "fb946f72e96172cc732feb0d1b9f1360" x-amz-server-side-encryption: AES256 x-amz-meta-qqfilename: SIS-square-logo%20(1).jpg x-amz-version-id: xpkURmLIogXq.mbkQVkjNkvCUED9tKvP Accept-Ranges: bytes Content-Type: image/jpeg Server: AmazonS3 Content-Length: 14424

	ocsp.pki.goog/gts1c3	142.250.74.163	200 OK	472
URL HTTP/1.1 ocsp.pki.goog/gts1c3 IP 142.250.74.163:0 ASN #15169 GOOGLE Magic data Size 472 Hash a563513e8fb14fb6796ff13a072cd3db 3e1d51e451b3c450c1213d3fce208e84522b1511 78ecd87f634efd2b5b6644a9d97285807cb26452571be0cef89f6d84dd3b32c0 HTTP Headers `POST /gts1c3 HTTP/1.1 Host: ocsp.pki.goog User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 84 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Content-Type: application/ocsp-response Date: Thu, 23 Mar 2023 21:29:44 GMT Cache-Control: public, max-age=14400 Server: ocsp_responder Content-Length: 472 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN`

	prod.smassets.net/assets/responseweb/smlib.ui/5.3.0/assets/fonts/National2Web-Regular.woff2	54.230.111.36	200 OK	34775
URL HTTP/2 prod.smassets.net/assets/responseweb/smlib.ui/5.3.0/assets/fonts/National2Web-Regular.woff2 IP 54.230.111.36:0 ASN #16509 AMAZON-02 Magic Web Open Font Format (Version 2), TrueType, length 34775, version 1.0\012- data Size 34775 Hash 13244bd99451605c61b32c9617162c1f 0e76a3a33245d9276580c0b4d8ecac07d9936e66 c7e022d03458278aabb7ce6892ddeef5736041de037d0d64adedc2eb1d82850b HTTP Headers GET /assets/responseweb/smlib.ui/5.3.0/assets/fonts/National2Web-Regular.woff2 HTTP/1.1 Host: prod.smassets.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: identity Referer: https://prod.smassets.net/ Origin: https://www.surveymonkey.com Connection: keep-alive Sec-Fetch-Dest: font Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site TE: trailers HTTP/2 200 OK content-type: application/font-woff2 content-length: 34775 x-amz-id-2: ZddUltIK9QAy8J7bCmkziocydogakBncDUGP4t7J3h45AjzDaDpVySD8LwKHL4di/jBAOdf2WnU= x-amz-request-id: XFZY8VH3D156F5F6 x-amz-replication-status: COMPLETED last-modified: Thu, 09 Mar 2023 19:29:35 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: pRmv.YcFkyg4K2cxht6Vd9yM35sW.ZEI accept-ranges: bytes server: AmazonS3 access-control-allow-origin: * date: Thu, 23 Mar 2023 17:45:41 GMT etag: "13244bd99451605c61b32c9617162c1f" vary: Accept-Encoding x-cache: Hit from cloudfront via: 1.1 a2c3c8b833b34851dca4f7753ecaae58.cloudfront.net (CloudFront) x-amz-cf-pop: OSL50-P1 x-amz-cf-id: qXMyHBkPZ3LQO9UuCCZe0uQUnRNXYvZ-ASIV-SVyJCrHTAIjiQ5dIQ== age: 13444 x-xss-protection: 1; mode=block referrer-policy: strict-origin-when-cross-origin content-security-policy: default-src https: data: blob: 'unsafe-eval' 'unsafe-inline' https://www.google.com https://www.gstatic.com https://www.recaptcha.net https://api.amplitude.com wss://.hotjar.com wss://.qualified.com 'self'; upgrade-insecure-requests; frame-ancestors 'self' https://.zendesk.com https://.myshopify.com https://teams.microsoft.com https://.eloqua.com https://.surveymonkey.com https://.sharepoint.com https://.worldpay.com https://.cardinalcommerce.com https://.office.com https://.office365.com https://.microsoft365.com;report-uri https://csp.surveymonkey.com/report?e=true&c=prod&ar=true x-content-type-options: nosniff strict-transport-security: max-age=31536000; includeSubDomains cache-control: max-age=7884000, public X-Firefox-Spdy: h2

	prod.smassets.net/assets/responseweb/smlib.ui/5.3.0/assets/fonts/National2Web-Medium.woff2	54.230.111.36	200 OK	37339
URL HTTP/2 prod.smassets.net/assets/responseweb/smlib.ui/5.3.0/assets/fonts/National2Web-Medium.woff2 IP 54.230.111.36:0 ASN #16509 AMAZON-02 Magic Web Open Font Format (Version 2), TrueType, length 37339, version 1.0\012- data Size 37339 Hash 1ebab08781dd6eebbe312e6f97f6e26a e70a14ebabe5d90f7c1f06fb6a91e787575a6268 9d1ac6865e4ba78d64acb5316f123a17a0840cbd8439415a8a66440697524e99 HTTP Headers GET /assets/responseweb/smlib.ui/5.3.0/assets/fonts/National2Web-Medium.woff2 HTTP/1.1 Host: prod.smassets.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: identity Referer: https://prod.smassets.net/ Origin: https://www.surveymonkey.com Connection: keep-alive Sec-Fetch-Dest: font Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site TE: trailers HTTP/2 200 OK content-type: application/font-woff2 content-length: 37339 x-amz-id-2: d08Gzs3Gz3JroOflYy2MEGzh97+Cx9hTiGWBLQGfVYTlD/fONRNwuULMvLQnM+bGJCtfCKgRhT0= x-amz-request-id: 3PF805DYVZFPQFS5 x-amz-replication-status: COMPLETED last-modified: Thu, 09 Mar 2023 19:29:35 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: mdSiESTn11XvAlWraU0lrLsin.th0Ibn accept-ranges: bytes server: AmazonS3 access-control-allow-origin: * date: Thu, 23 Mar 2023 01:13:13 GMT etag: "1ebab08781dd6eebbe312e6f97f6e26a" vary: Accept-Encoding x-cache: Hit from cloudfront via: 1.1 a2c3c8b833b34851dca4f7753ecaae58.cloudfront.net (CloudFront) x-amz-cf-pop: OSL50-P1 x-amz-cf-id: ZHGOybeO8Lrf9g0AfBIALO10SnRne8ObLFBCeH41LVqj771q8jQ7vg== age: 72992 x-xss-protection: 1; mode=block referrer-policy: strict-origin-when-cross-origin content-security-policy: default-src https: data: blob: 'unsafe-eval' 'unsafe-inline' https://www.google.com https://www.gstatic.com https://www.recaptcha.net https://api.amplitude.com wss://.hotjar.com wss://.qualified.com 'self'; upgrade-insecure-requests; frame-ancestors 'self' https://.zendesk.com https://.myshopify.com https://teams.microsoft.com https://.eloqua.com https://.surveymonkey.com https://.sharepoint.com https://.worldpay.com https://.cardinalcommerce.com https://.office.com https://.office365.com https://.microsoft365.com;report-uri https://csp.surveymonkey.com/report?e=true&c=prod&ar=true x-content-type-options: nosniff strict-transport-security: max-age=31536000; includeSubDomains cache-control: max-age=7884000, public X-Firefox-Spdy: h2

	www.googletagmanager.com/gtm.js?id=GTM-NGMP3BG	142.250.74.168	200 OK	109836
URL HTTP/2 www.googletagmanager.com/gtm.js?id=GTM-NGMP3BG IP 142.250.74.168:0 ASN #15169 GOOGLE Magic ASCII text, with very long lines (40038) Size 109836 Hash f6f042dcb3aa3505ce23f57783021e23 ed46c24f6c423f6bdbc64268080d7d32c8a51eea 7b0df90c6d2baa12d3756ed7b97e59458c3814abddab985ba089e4593f9b9c9a HTTP Headers `GET /gtm.js?id=GTM-NGMP3BG HTTP/1.1 Host: www.googletagmanager.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://www.surveymonkey.com/ Connection: keep-alive Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site` HTTP/2 200 OK content-type: application/javascript; charset=UTF-8 access-control-allow-origin: * access-control-allow-credentials: true access-control-allow-headers: Cache-Control content-encoding: br vary: Accept-Encoding date: Thu, 23 Mar 2023 21:29:44 GMT expires: Thu, 23 Mar 2023 21:29:44 GMT cache-control: private, max-age=900 last-modified: Thu, 23 Mar 2023 21:00:00 GMT strict-transport-security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin server: Google Tag Manager content-length: 109836 x-xss-protection: 0 alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 X-Firefox-Spdy: h2

	ocsp.pki.goog/gts1c3	142.250.74.163	200 OK	472
URL HTTP/1.1 ocsp.pki.goog/gts1c3 IP 142.250.74.163:0 ASN #15169 GOOGLE Magic data Size 472 Hash a563513e8fb14fb6796ff13a072cd3db 3e1d51e451b3c450c1213d3fce208e84522b1511 78ecd87f634efd2b5b6644a9d97285807cb26452571be0cef89f6d84dd3b32c0 HTTP Headers `POST /gts1c3 HTTP/1.1 Host: ocsp.pki.goog User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 84 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Content-Type: application/ocsp-response Date: Thu, 23 Mar 2023 21:29:44 GMT Cache-Control: public, max-age=14400 Server: ocsp_responder Content-Length: 472 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN`

	www.surveymonkey.com/favicon1.ico	54.230.111.102	302 Found	138
URL HTTP/2 www.surveymonkey.com/favicon1.ico IP 54.230.111.102:0 ASN #16509 AMAZON-02 Magic HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators Size 138 Hash aff950cab4c0265e21d401db15f1026d f03e18461817f7a6546c8bf8fa8d686d7e30aca0 753e0dd54f28c4f7009b9c0b18a68aed175416bd8b7d134858264586eaac56f0 HTTP Headers GET /favicon1.ico HTTP/1.1 Host: www.surveymonkey.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://www.surveymonkey.com/r/75YKQJF Connection: keep-alive Cookie: _ga_JMDBBLT4C7=GS1.1.1654133888.1.0.1654133888.0; _ga=GA1.1.729600766.1654133888; ep201="33HeVUljMWKx8lNkKBwpfNtTQ00="; ep203="fOtIjVVdId65sJBOFGMjulPd9qg="; _splunk_rum_sid=%7B%22id%22%3A%22ea68da0036bddecc96a395dc416fad12%22%2C%22startTime%22%3A1679606993418%7D Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin TE: trailers HTTP/2 302 Found content-type: text/html content-length: 138 location: https://prod.smassets.net/assets/static/images/surveymonkey/favicon.ico date: Thu, 23 Mar 2023 21:29:44 GMT server: nginx referrer-policy: strict-origin-when-cross-origin strict-transport-security: max-age=31536000; includeSubDomains set-cookie: ep201="33HeVUljMWKx8lNkKBwpfNtTQ00="; Domain=.surveymonkey.com; expires=Thu, 23 Mar 2023 21:59:44 GMT; Path=/; SameSite=none; Secure ep203="fOtIjVVdId65sJBOFGMjulPd9qg="; Domain=.surveymonkey.com; expires=Wed, 21 Jun 2023 21:29:44 GMT; HttpOnly; Path=/; SameSite=none; Secure x-cache: Miss from cloudfront via: 1.1 d9fb4c3794a085bb4ee2c5798c2cb1b8.cloudfront.net (CloudFront) x-amz-cf-pop: OSL50-P1 x-amz-cf-id: 5NifLAJptgKcKJCu7l59wITRaHRLsMYIFQOr_ywYHQT16UT4qpan7g== X-Firefox-Spdy: h2

	prod.smassets.net/assets/static/images/surveymonkey/favicon.ico	54.230.111.36	200 OK	15086
URL HTTP/2 prod.smassets.net/assets/static/images/surveymonkey/favicon.ico IP 54.230.111.36:0 ASN #16509 AMAZON-02 Magic MS Windows icon resource - 3 icons, 48x48, 32 bits/pixel, 32x32, 32 bits/pixel\012- data Size 15086 Hash a6067504c77a4b664f99053cc97b2d61 172d55c94e6034b72b1928ccd4af7e2a2ee37ad7 5966dc861723432715747cca5f811f4ddb7ca67314a76f447bb553973f10dcf8 HTTP Headers `GET /assets/static/images/surveymonkey/favicon.ico HTTP/1.1 Host: prod.smassets.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://www.surveymonkey.com/ Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site TE: trailers` HTTP/2 200 OK content-type: image/x-icon content-length: 15086 x-amz-id-2: JYmG6r0OYwOKfMx/5aTdJ0DBdiEaS9Fnf32EI3gnI033pLtWzP0gTHhkXH0s9JbhX5d3MsO1iB4= x-amz-request-id: 8Y9SA9YCNET1264Z date: Thu, 23 Mar 2023 00:31:28 GMT x-amz-replication-status: COMPLETED last-modified: Thu, 25 Nov 2021 02:04:03 GMT etag: "a6067504c77a4b664f99053cc97b2d61" x-amz-server-side-encryption: AES256 x-amz-version-id: Q3FsCPn41jLhSlXW67nFM3KaDllFKg5d accept-ranges: bytes server: AmazonS3 access-control-allow-origin: * x-cache: Hit from cloudfront via: 1.1 a2c3c8b833b34851dca4f7753ecaae58.cloudfront.net (CloudFront) x-amz-cf-pop: OSL50-P1 x-amz-cf-id: mruPUktbB1IZ23K5ntZB_400T2k_jenmlRpOG_YwZCHKNYgAHfXKcg== age: 75497 x-xss-protection: 1; mode=block referrer-policy: strict-origin-when-cross-origin content-security-policy: default-src https: data: blob: 'unsafe-eval' 'unsafe-inline' https://www.google.com https://www.gstatic.com https://www.recaptcha.net https://api.amplitude.com wss://.hotjar.com wss://.qualified.com 'self'; upgrade-insecure-requests; frame-ancestors 'self' https://.zendesk.com https://.myshopify.com https://teams.microsoft.com https://.eloqua.com https://.surveymonkey.com https://.sharepoint.com https://.worldpay.com https://.cardinalcommerce.com https://.office.com https://.office365.com https://.microsoft365.com;report-uri https://csp.surveymonkey.com/report?e=true&c=prod&ar=true x-content-type-options: nosniff strict-transport-security: max-age=31536000; includeSubDomains cache-control: max-age=441504000, public X-Firefox-Spdy: h2

	r3.o.lencr.org/	23.33.119.27	200 OK	503
URL HTTP/1.1 r3.o.lencr.org/ IP 23.33.119.27:0 ASN #20940 Akamai International B.V. Magic data Size 503 Hash a0d3d7099bbc5fed74a6e78e1a3096bf 96afaf8b3ac053577c56aca5f4a20d8655ecb771 c8ff32c6809a506d4c656d3200dbfc6682c156c3de0647d13ab8f07a6f9a38ba HTTP Headers `POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Content-Type: application/ocsp-response Content-Length: 503 ETag: "C8FF32C6809A506D4C656D3200DBFC6682C156C3DE0647D13AB8F07A6F9A38BA" Last-Modified: Tue, 21 Mar 2023 15:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=2912 Expires: Thu, 23 Mar 2023 22:18:17 GMT Date: Thu, 23 Mar 2023 21:29:45 GMT Connection: keep-alive`

	r3.o.lencr.org/	23.33.119.27	200 OK	503
URL HTTP/1.1 r3.o.lencr.org/ IP 23.33.119.27:0 ASN #20940 Akamai International B.V. Magic data Size 503 Hash a0d3d7099bbc5fed74a6e78e1a3096bf 96afaf8b3ac053577c56aca5f4a20d8655ecb771 c8ff32c6809a506d4c656d3200dbfc6682c156c3de0647d13ab8f07a6f9a38ba HTTP Headers `POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Content-Type: application/ocsp-response Content-Length: 503 ETag: "C8FF32C6809A506D4C656D3200DBFC6682C156C3DE0647D13AB8F07A6F9A38BA" Last-Modified: Tue, 21 Mar 2023 15:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=2912 Expires: Thu, 23 Mar 2023 22:18:17 GMT Date: Thu, 23 Mar 2023 21:29:45 GMT Connection: keep-alive`

	r3.o.lencr.org/	23.33.119.27	200 OK	503
URL HTTP/1.1 r3.o.lencr.org/ IP 23.33.119.27:0 ASN #20940 Akamai International B.V. Magic data Size 503 Hash a0d3d7099bbc5fed74a6e78e1a3096bf 96afaf8b3ac053577c56aca5f4a20d8655ecb771 c8ff32c6809a506d4c656d3200dbfc6682c156c3de0647d13ab8f07a6f9a38ba HTTP Headers `POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Content-Type: application/ocsp-response Content-Length: 503 ETag: "C8FF32C6809A506D4C656D3200DBFC6682C156C3DE0647D13AB8F07A6F9A38BA" Last-Modified: Tue, 21 Mar 2023 15:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=2912 Expires: Thu, 23 Mar 2023 22:18:17 GMT Date: Thu, 23 Mar 2023 21:29:45 GMT Connection: keep-alive`

	ocsp.r2m01.amazontrust.com/	54.230.80.227	200 OK	471
URL HTTP/1.1 ocsp.r2m01.amazontrust.com/ IP 54.230.80.227:0 ASN #16509 AMAZON-02 Magic data Size 471 Hash 20366776f1b9cd41809af8b8c108166e 1c3d19b1ba5ddbca605d49c1c7e12deb908c6fe0 cad1eff8a297b6ecfc7b167b2e7ff2081ff9153c5b73e2374b0ef8d56a488658 HTTP Headers `POST / HTTP/1.1 Host: ocsp.r2m01.amazontrust.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 83 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Content-Type: application/ocsp-response Content-Length: 471 Connection: keep-alive Accept-Ranges: bytes Cache-Control: 'max-age=158059' Date: Thu, 23 Mar 2023 21:29:45 GMT Last-Modified: Thu, 23 Mar 2023 21:04:13 GMT Server: ECAcc (bsa/EB6C) X-Cache: Miss from cloudfront Via: 1.1 c26775cc34c23943f6f5cfc9a3da9b4a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: OSL50-P1 X-Amz-Cf-Id: xOz5gZU0xoxI0wVd6VP13ouAEaBCp_azdbNEjiK3mPvJtnfmJaBqTg== Age: 1532`

	img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc2f57fa6-bac5-42a3-be66-ebcc96d82ea2.jpeg	34.120.237.76	200 OK	10407
URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc2f57fa6-bac5-42a3-be66-ebcc96d82ea2.jpeg IP 34.120.237.76:0 ASN #15169 GOOGLE Magic JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size 10407 Hash 2062cf7a271d4ac7a04c0a746d443e07 3343851f2128c5f1fe4302c2aa53e8ce1fb661ac e479263c1742d2597cf8948ef059b0bc97dbb97f47bb5cafee3d4af12069d2ce HTTP Headers GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc2f57fa6-bac5-42a3-be66-ebcc96d82ea2.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site HTTP/2 200 OK server: nginx content-length: 10407 x-amzn-requestid: 87aba2e6-d7e8-4456-a12f-e05ac556b839 x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: CJqJhGnXIAMF1yA= x-content-type-options: nosniff x-amzn-trace-id: Root=1-641a23d6-2b6c3d62366f47f506ce8415;Sampled=0 x-amzn-remapped-date: Tue, 21 Mar 2023 21:38:30 GMT x-amz-cf-pop: SEA19-C1 x-cache: Hit from cloudfront x-amz-cf-id: lKww3e9Hvk0r0LPn7u6pu6Fx9V8RThNVxQEdyWVFAQdOun-53X-tLw== via: 1.1 b3cdce1c2fc39b89f45c98c417351f26.cloudfront.net (CloudFront), 1.1 aa623e134417515bd2496cb01d5e5626.cloudfront.net (CloudFront), 1.1 google date: Wed, 22 Mar 2023 21:49:35 GMT age: 85210 etag: "3343851f2128c5f1fe4302c2aa53e8ce1fb661ac" content-type: image/jpeg cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2

	img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F00ac1765-db6c-42e3-99bf-d857d27a34b9.jpeg	34.120.237.76	200 OK	5556
URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F00ac1765-db6c-42e3-99bf-d857d27a34b9.jpeg IP 34.120.237.76:0 ASN #15169 GOOGLE Magic JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size 5556 Hash c831201ad81f55c63c1b101ce854a810 0e9b952f6489f0a5f4862d3bea2fbe0ecdd379e5 c854489720d2ca4a95eef00addda0fcdaf481402d044df7725282654a97eb54a HTTP Headers GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F00ac1765-db6c-42e3-99bf-d857d27a34b9.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site HTTP/2 200 OK server: nginx content-length: 5556 x-amzn-requestid: 6b050645-14aa-47f7-b4a5-2e27abbe5115 x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: CM69eHE3IAMF0Yw= x-content-type-options: nosniff x-amzn-trace-id: Root=1-641b71ef-6ab2948e2bf2578f29798372;Sampled=0 x-amzn-remapped-date: Wed, 22 Mar 2023 21:23:59 GMT x-amz-cf-pop: SEA19-C1 x-cache: Hit from cloudfront x-amz-cf-id: CgU9j02Bnw0UdIwQ3sRCDvJoPitHIAUTRDhLH_PMXYlAPoAwSbv6Iw== via: 1.1 2dc111aa3ead15d061e41a423155a53a.cloudfront.net (CloudFront), 1.1 4d8620b80ebe37d366388e117039aa8e.cloudfront.net (CloudFront), 1.1 google date: Thu, 23 Mar 2023 05:35:55 GMT age: 57230 etag: "0e9b952f6489f0a5f4862d3bea2fbe0ecdd379e5" content-type: image/jpeg cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2

	img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F08561a1f-1d19-45db-be98-107d6b1ed25d.jpeg	34.120.237.76	200 OK	10480
URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F08561a1f-1d19-45db-be98-107d6b1ed25d.jpeg IP 34.120.237.76:0 ASN #15169 GOOGLE Magic JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size 10480 Hash 6f0b9e85381489dcf646c251722b21d4 5f7ea91288a2170bcabdca6be296718c4191eacd 911f803271ad9053ebac3787bdde9b75ec604acc6aa28692cc8e4c5c4fb61483 HTTP Headers GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F08561a1f-1d19-45db-be98-107d6b1ed25d.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site HTTP/2 200 OK server: nginx content-length: 10480 x-amzn-requestid: 58aa8272-4b4e-4a2f-9d6e-d47f70891c49 x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: CJptHG7JoAMFSwA= x-content-type-options: nosniff x-amzn-trace-id: Root=1-641a2320-2fd6502b1271d5c13b4ebbe9;Sampled=0 x-amzn-remapped-date: Tue, 21 Mar 2023 21:35:28 GMT x-amz-cf-pop: SEA19-C1, SEA19-C3 x-cache: Hit from cloudfront x-amz-cf-id: pFCYGtd2b7lK7OBFHjCsgqqLfhtMAQDB0vyYFyf1sv-3CkSHbEh3mA== via: 1.1 2241406ac19fffc8f35d6ddef8e22f56.cloudfront.net (CloudFront), 1.1 4c48e9fb20d53d40e9fe273dbdae1098.cloudfront.net (CloudFront), 1.1 google date: Wed, 22 Mar 2023 21:59:52 GMT age: 84593 etag: "5f7ea91288a2170bcabdca6be296718c4191eacd" content-type: image/jpeg cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2

	img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F22c3f36a-d800-4eab-8a32-e2b5ef86e386.jpeg	34.120.237.76	200 OK	9459
URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F22c3f36a-d800-4eab-8a32-e2b5ef86e386.jpeg IP 34.120.237.76:0 ASN #15169 GOOGLE Magic JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size 9459 Hash 412bd6aea60211324e649d7d920601d2 a813976bda850a584b5ab94d9a70bfe0da69aca0 d36ef17fc6ab3cd4e5e43836f7df2c6fdf1781f1bac73e42c9a09e8594f797f9 HTTP Headers GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F22c3f36a-d800-4eab-8a32-e2b5ef86e386.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site HTTP/2 200 OK server: nginx content-length: 9459 x-amzn-requestid: 1b374321-f2df-404f-ab91-4e73d830fac9 x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: CJqmAEhHoAMFgRQ= x-content-type-options: nosniff x-amzn-trace-id: Root=1-641a248c-217d81154ecfe0c44ca70432;Sampled=0 x-amzn-remapped-date: Tue, 21 Mar 2023 21:41:32 GMT x-amz-cf-pop: SEA19-C1, SEA19-C3 x-cache: Hit from cloudfront x-amz-cf-id: pvFey5NWlIqIXlHLMYSUiylATCU1ZxodOb6imsPCxrJDRscwky8dVQ== via: 1.1 8ae6af4d17aae7471e5fe2792eb6abcc.cloudfront.net (CloudFront), 1.1 6ca7826fb0f4c565b1af9c7737725c48.cloudfront.net (CloudFront), 1.1 google date: Wed, 22 Mar 2023 21:48:27 GMT age: 85278 etag: "a813976bda850a584b5ab94d9a70bfe0da69aca0" content-type: image/jpeg cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2

	img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5be1b286-007a-44a5-a6fd-872190ecfa0b.jpeg	34.120.237.76	200 OK	6692
URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5be1b286-007a-44a5-a6fd-872190ecfa0b.jpeg IP 34.120.237.76:0 ASN #15169 GOOGLE Magic JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size 6692 Hash c05bfdf1411a931d8ea9adc64b07bc74 156ef59e53564a4f2b27002b2695fafecd578d82 15d17c0df2d2b0625ecf5f576a7ff630ae8b923b28be354ad23aec6a284a801a HTTP Headers GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5be1b286-007a-44a5-a6fd-872190ecfa0b.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site HTTP/2 200 OK server: nginx content-length: 6692 x-amzn-requestid: 3a0f6a8d-89b1-43f4-8a15-8749bdbc047b x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: CM9d9FcOoAMFaFQ= x-content-type-options: nosniff x-amzn-trace-id: Root=1-641b75f2-3540256d6be3d4f85bba65ea;Sampled=0 x-amzn-remapped-date: Wed, 22 Mar 2023 21:41:06 GMT x-amz-cf-pop: SEA19-C1 x-cache: Hit from cloudfront x-amz-cf-id: Jj5lAwItWYm45j5kLqQnd3fhsiGsiuSiSVtrBUOolyHvPAmCc0S71A== via: 1.1 e92cc925fc8895560cd0628c67f58828.cloudfront.net (CloudFront), 1.1 b23fb37cd7fff033ab21e3284f558a28.cloudfront.net (CloudFront), 1.1 google date: Thu, 23 Mar 2023 07:54:24 GMT age: 48921 etag: "156ef59e53564a4f2b27002b2695fafecd578d82" content-type: image/jpeg cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2

	pixel-library.pmg.com/alli-lib	54.230.111.27	200 OK	10384
URL HTTP/2 pixel-library.pmg.com/alli-lib IP 54.230.111.27:0 ASN #16509 AMAZON-02 Magic data Size 10384 Hash ea56a4e9d61e35088c3a63b248ced377 f335be6755985d281b056c0269637cfaf7651d0f 712f48251496620ad2015696f136e45d8a9349c88c79c3000e9b3bb1c8e7d253 HTTP Headers `GET /alli-lib HTTP/1.1 Host: pixel-library.pmg.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://www.surveymonkey.com/ Connection: keep-alive Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site` `HTTP/2 200 OK content-type: application/javascript last-modified: Thu, 19 Jan 2023 15:01:10 GMT server: AmazonS3 content-encoding: gzip date: Thu, 23 Mar 2023 20:57:19 GMT etag: W/"e61a3d72fb0798893173918fad7cdcc9" vary: Accept-Encoding x-cache: Hit from cloudfront via: 1.1 5916f6b8d469d1bee1e905ff13761ebc.cloudfront.net (CloudFront) x-amz-cf-pop: OSL50-P1 x-amz-cf-id: SYFn08nCcZkcPPpl4s5eW73wYygBGb8SA4H9IsD0DkuDNW_hhk63kw== age: 1946 X-Firefox-Spdy: h2`

	alli-gateway.surveymonkey.com/pixel?pid=&event=init	3.216.131.38	200 OK	43
URL HTTP/2 alli-gateway.surveymonkey.com/pixel?pid=&event=init IP 3.216.131.38:0 ASN #14618 AMAZON-AES Magic GIF image data, version 89a, 1 x 1\012- data Size 43 Hash 57f187c7a868faeac558007a8eb6cb2e 11ab10ab109fdb53d91d444ac781101f5a6360c6 aa03dc59bdca72631d2301e4297cfa030bd31b907dc138e7b973d12311c90a22 HTTP Headers GET /pixel?pid=&event=init HTTP/1.1 Host: alli-gateway.surveymonkey.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://www.surveymonkey.com/ Connection: keep-alive Cookie: _ga_JMDBBLT4C7=GS1.1.1654133888.1.0.1654133888.0; _ga=GA1.1.729600766.1654133888; ep201="33HeVUljMWKx8lNkKBwpfNtTQ00="; ep203="fOtIjVVdId65sJBOFGMjulPd9qg=" Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-site `HTTP/2 200 OK date: Thu, 23 Mar 2023 21:29:45 GMT content-type: image/gif content-length: 43 apigw-requestid: CQOvfjvHoAMESnA= X-Firefox-Spdy: h2`

	ocsp.godaddy.com/	192.124.249.22	200 OK	1778
URL HTTP/1.1 ocsp.godaddy.com/ IP 192.124.249.22:0 ASN #30148 SUCURI-SEC Magic data Size 1778 Hash 14f28938fccd0af263c711ba6f75c233 eea3a89569952e68c7194381e95f019b5d1e9d1a 68860af6bed98018379ba39fbb0b2bdfb66cd773319022779cba1dea4656b581 HTTP Headers `POST / HTTP/1.1 Host: ocsp.godaddy.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 76 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: Sucuri/Cloudproxy Date: Thu, 23 Mar 2023 21:29:49 GMT Content-Type: application/ocsp-response Content-Length: 1778 Connection: keep-alive X-Sucuri-ID: 19022 Content-Transfer-Encoding: Binary Cache-Control: public, no-transform, must-revalidate Last-Modified: Thu, 23 Mar 2023 21:04:38 GMT Expires: Fri, 24 Mar 2023 21:04:38 GMT ETag: "eea3a89569952e68c7194381e95f019b5d1e9d1a" P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"`

	rum-ingest.us1.signalfx.com/v1/rum?auth=zc0197kWHeYhZNXuPUlB5w	35.80.235.91	200 OK	4
URL HTTP/2 rum-ingest.us1.signalfx.com/v1/rum?auth=zc0197kWHeYhZNXuPUlB5w IP 35.80.235.91:0 ASN #16509 AMAZON-02 Magic ASCII text, with no line terminators Size 4 Hash 5b3abf9c1aa7556c3a36fea4e695c5d2 3fd967d09a748e1f2b26d6fe562e7155aa87e9de 98c4922bb641c65c7a30b7bcafdf230b9b00b6693631c56146ab25b2786ee4a3 HTTP Headers `POST /v1/rum?auth=zc0197kWHeYhZNXuPUlB5w HTTP/1.1 Host: rum-ingest.us1.signalfx.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://www.surveymonkey.com/ Content-Type: text/plain;charset=UTF-8 Content-Length: 24606 Origin: https://www.surveymonkey.com Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site` `HTTP/2 200 OK access-control-allow-origin: https://www.surveymonkey.com content-type: application/json; charset=UTF-8 x-debug-id: 7800233265716228226 x-id: gdi-rum-674f4f6c76-xv9wc date: Thu, 23 Mar 2023 21:29:50 GMT content-length: 4 x-envoy-upstream-service-time: 2 server: istio-envoy X-Firefox-Spdy: h2`

	fonts.googleapis.com/earlyaccess/notosansjp.css	142.250.74.74	200 OK	0
URL HTTP/2 fonts.googleapis.com/earlyaccess/notosansjp.css IP 142.250.74.74:0 ASN #15169 GOOGLE Magic Size 0 Hash HTTP Headers `GET /earlyaccess/notosansjp.css HTTP/1.1 Host: fonts.googleapis.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/css,/;q=0.1 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://www.surveymonkey.com/ Connection: keep-alive Sec-Fetch-Dest: style Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site` HTTP/2 200 OK content-type: text/css; charset=utf-8 access-control-allow-origin: * timing-allow-origin: * link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin strict-transport-security: max-age=31536000 expires: Thu, 23 Mar 2023 21:29:43 GMT date: Thu, 23 Mar 2023 21:29:43 GMT cache-control: private, max-age=86400 cross-origin-opener-policy: same-origin-allow-popups cross-origin-resource-policy: cross-origin content-encoding: gzip server: ESF x-xss-protection: 0 x-frame-options: SAMEORIGIN x-content-type-options: nosniff alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 X-Firefox-Spdy: h2

	prod.smassets.net/assets/responseweb/responseweb-version-bundle-min.72993a8f.css	54.230.111.36	200 OK	0
URL HTTP/2 prod.smassets.net/assets/responseweb/responseweb-version-bundle-min.72993a8f.css IP 54.230.111.36:0 ASN #16509 AMAZON-02 Magic Size 0 Hash HTTP Headers `GET /assets/responseweb/responseweb-version-bundle-min.72993a8f.css HTTP/1.1 Host: prod.smassets.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/css,/;q=0.1 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://www.surveymonkey.com/ Connection: keep-alive Sec-Fetch-Dest: style Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site` HTTP/2 200 OK content-type: text/css x-amz-id-2: QHf1HykoL1+IqXYmnKD/I/SGCIs9YGItsUjwPLLy7h/n3apzoFlaPNCKMO691Xy1jZmIdcAr9Ok= x-amz-request-id: E29TDV2CQCZM5P7J x-amz-replication-status: COMPLETED last-modified: Thu, 09 Mar 2023 19:29:14 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: Q2KDLHLUw2PgiWEFC.G1LTmjSXhvHMT7 server: AmazonS3 access-control-allow-origin: * content-encoding: br date: Thu, 23 Mar 2023 01:43:56 GMT etag: W/"72993a8f5da8c699520b7b397c6e84f8" vary: Accept-Encoding x-cache: Hit from cloudfront via: 1.1 a2c3c8b833b34851dca4f7753ecaae58.cloudfront.net (CloudFront) x-amz-cf-pop: OSL50-P1 x-amz-cf-id: r37ErboTJ3UgsNSC4yhMS84ayAZ9PMdAjMuKYwlBW5g6d7qOwcm_QQ== age: 76108 x-xss-protection: 1; mode=block referrer-policy: strict-origin-when-cross-origin content-security-policy: default-src https: data: blob: 'unsafe-eval' 'unsafe-inline' https://www.google.com https://www.gstatic.com https://www.recaptcha.net https://api.amplitude.com wss://.hotjar.com wss://.qualified.com 'self'; upgrade-insecure-requests; frame-ancestors 'self' https://.zendesk.com https://.myshopify.com https://teams.microsoft.com https://.eloqua.com https://.surveymonkey.com https://.sharepoint.com https://.worldpay.com https://.cardinalcommerce.com https://.office.com https://.office365.com https://.microsoft365.com;report-uri https://csp.surveymonkey.com/report?e=true&c=prod&ar=true x-content-type-options: nosniff strict-transport-security: max-age=31536000; includeSubDomains cache-control: max-age=7884000, public X-Firefox-Spdy: h2

	prod.smassets.net/assets/responseweb/responseweb-jquery-bundle-min.91443e27.js	54.230.111.36	200 OK	0
URL HTTP/2 prod.smassets.net/assets/responseweb/responseweb-jquery-bundle-min.91443e27.js IP 54.230.111.36:0 ASN #16509 AMAZON-02 Magic Size 0 Hash HTTP Headers `GET /assets/responseweb/responseweb-jquery-bundle-min.91443e27.js HTTP/1.1 Host: prod.smassets.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://www.surveymonkey.com/ Connection: keep-alive Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site` HTTP/2 200 OK content-type: application/javascript x-amz-id-2: KKW/XlIhSx3XKB4gtITUWnj46pAMQufcqKgQcaoF18GLE2qziJM9iPFJ+um6rIa7NOhT2fWsXFg= x-amz-request-id: APJ3CGCZC2RZVYHH x-amz-replication-status: COMPLETED last-modified: Thu, 09 Mar 2023 19:29:48 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: hyoOVVH45CpY9yEjaan2.l9G6yQYfX4e server: AmazonS3 access-control-allow-origin: * content-encoding: br date: Thu, 23 Mar 2023 01:25:04 GMT etag: W/"91443e27e5f8bce4310d5ee9680cab3d" vary: Accept-Encoding x-cache: Hit from cloudfront via: 1.1 a2c3c8b833b34851dca4f7753ecaae58.cloudfront.net (CloudFront) x-amz-cf-pop: OSL50-P1 x-amz-cf-id: Ivk4ELb7PnDpSfymq_6hL1yCKD2MTqsx82oMa2AgY36BZ4hIzJedMA== age: 72994 x-xss-protection: 1; mode=block referrer-policy: strict-origin-when-cross-origin content-security-policy: default-src https: data: blob: 'unsafe-eval' 'unsafe-inline' https://www.google.com https://www.gstatic.com https://www.recaptcha.net https://api.amplitude.com wss://.hotjar.com wss://.qualified.com 'self'; upgrade-insecure-requests; frame-ancestors 'self' https://.zendesk.com https://.myshopify.com https://teams.microsoft.com https://.eloqua.com https://.surveymonkey.com https://.sharepoint.com https://.worldpay.com https://.cardinalcommerce.com https://.office.com https://.office365.com https://.microsoft365.com;report-uri https://csp.surveymonkey.com/report?e=true&c=prod&ar=true x-content-type-options: nosniff strict-transport-security: max-age=31536000; includeSubDomains cache-control: max-age=7884000, public X-Firefox-Spdy: h2

	cdn.signalfx.com/o11y-gdi-rum/latest/splunk-otel-web.js	54.230.111.17	200 OK	0
URL HTTP/2 cdn.signalfx.com/o11y-gdi-rum/latest/splunk-otel-web.js IP 54.230.111.17:0 ASN #16509 AMAZON-02 Magic Size 0 Hash HTTP Headers `GET /o11y-gdi-rum/latest/splunk-otel-web.js HTTP/1.1 Host: cdn.signalfx.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://www.surveymonkey.com/ Origin: https://www.surveymonkey.com Connection: keep-alive Sec-Fetch-Dest: script Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site` HTTP/2 200 OK content-type: application/javascript access-control-allow-origin: * access-control-allow-methods: GET access-control-max-age: 3000 last-modified: Wed, 11 Jan 2023 12:50:19 GMT x-amz-server-side-encryption: AES256 server: AmazonS3 content-encoding: gzip date: Thu, 23 Mar 2023 21:08:41 GMT cache-control: max-age=3600 etag: W/"930f1bc3802a070e5d8cdd0e8cc223e8" vary: Accept-Encoding,Origin,Access-Control-Request-Headers,Access-Control-Request-Method x-cache: Hit from cloudfront via: 1.1 5916f6b8d469d1bee1e905ff13761ebc.cloudfront.net (CloudFront) x-amz-cf-pop: OSL50-P1 x-amz-cf-id: uizsPdwr1jdIvCRngTTWeOIeKi8RZ3STX8EQ6mnIRPv-YCAB7WKX2A== age: 1266 X-Firefox-Spdy: h2

	fonts.googleapis.com/css?family=Roboto:300,400,700\|Merriweather:300,400,700\|Montserrat:400,700\|Lato:300,400,700\|Open+Sans:300,400,600,700\|Droid+Serif:400,700	142.250.74.74	200 OK	0
URL HTTP/2 fonts.googleapis.com/css?family=Roboto:300,400,700\|Merriweather:300,400,700\|Montserrat:400,700\|Lato:300,400,700\|Open+Sans:300,400,600,700\|Droid+Serif:400,700 IP 142.250.74.74:0 ASN #15169 GOOGLE Magic Size 0 Hash HTTP Headers `GET /css?family=Roboto:300,400,700\|Merriweather:300,400,700\|Montserrat:400,700\|Lato:300,400,700\|Open+Sans:300,400,600,700\|Droid+Serif:400,700 HTTP/1.1 Host: fonts.googleapis.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/css,/;q=0.1 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://www.surveymonkey.com/ Connection: keep-alive Sec-Fetch-Dest: style Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site` HTTP/2 200 OK content-type: text/css; charset=utf-8 access-control-allow-origin: * timing-allow-origin: * link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin strict-transport-security: max-age=31536000 expires: Thu, 23 Mar 2023 21:29:43 GMT date: Thu, 23 Mar 2023 21:29:43 GMT cache-control: private, max-age=86400 cross-origin-opener-policy: same-origin-allow-popups cross-origin-resource-policy: cross-origin content-encoding: gzip server: ESF x-xss-protection: 0 x-frame-options: SAMEORIGIN x-content-type-options: nosniff alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 X-Firefox-Spdy: h2

	prod.smassets.net/assets/responseweb/responseweb-ui_bundle-bundle-min.a165823c.js	54.230.111.36	200 OK	0
URL HTTP/2 prod.smassets.net/assets/responseweb/responseweb-ui_bundle-bundle-min.a165823c.js IP 54.230.111.36:0 ASN #16509 AMAZON-02 Magic Size 0 Hash HTTP Headers `GET /assets/responseweb/responseweb-ui_bundle-bundle-min.a165823c.js HTTP/1.1 Host: prod.smassets.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://www.surveymonkey.com/ Connection: keep-alive Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site TE: trailers` HTTP/2 200 OK content-type: application/javascript x-amz-id-2: 0PY648K+kTZyJREHAGTKtc2sdmL3JWXt3ICqmrjw/JGR9VpfKRlYs4dwwYp1nv2FsmXLXDNqKkc8esmrmbZasg== x-amz-request-id: H1KSTD9YQYF9AZRQ x-amz-replication-status: COMPLETED last-modified: Thu, 09 Mar 2023 19:29:49 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: wELehrfxz608fW2rnh863dNbpZ2QSkQn server: AmazonS3 access-control-allow-origin: * content-encoding: br date: Thu, 23 Mar 2023 00:08:21 GMT etag: W/"a165823ce19e210d098673cd3a500be3" vary: Accept-Encoding x-cache: Hit from cloudfront via: 1.1 a2c3c8b833b34851dca4f7753ecaae58.cloudfront.net (CloudFront) x-amz-cf-pop: OSL50-P1 x-amz-cf-id: tF72EEcizI5uOo1XW9djZ31R9LNjRN_V_nuMO2yonnSYxuWdg7aU2Q== age: 76883 x-xss-protection: 1; mode=block referrer-policy: strict-origin-when-cross-origin content-security-policy: default-src https: data: blob: 'unsafe-eval' 'unsafe-inline' https://www.google.com https://www.gstatic.com https://www.recaptcha.net https://api.amplitude.com wss://.hotjar.com wss://.qualified.com 'self'; upgrade-insecure-requests; frame-ancestors 'self' https://.zendesk.com https://.myshopify.com https://teams.microsoft.com https://.eloqua.com https://.surveymonkey.com https://.sharepoint.com https://.worldpay.com https://.cardinalcommerce.com https://.office.com https://.office365.com https://.microsoft365.com;report-uri https://csp.surveymonkey.com/report?e=true&c=prod&ar=true x-content-type-options: nosniff strict-transport-security: max-age=31536000; includeSubDomains cache-control: max-age=7884000, public X-Firefox-Spdy: h2

	prod.smassets.net/assets/responseweb/smlib.surveytemplates-survey_page-bundle-min.c64137b3.css	54.230.111.36	200 OK	0
URL HTTP/2 prod.smassets.net/assets/responseweb/smlib.surveytemplates-survey_page-bundle-min.c64137b3.css IP 54.230.111.36:0 ASN #16509 AMAZON-02 Magic Size 0 Hash HTTP Headers `GET /assets/responseweb/smlib.surveytemplates-survey_page-bundle-min.c64137b3.css HTTP/1.1 Host: prod.smassets.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/css,/;q=0.1 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://www.surveymonkey.com/ Connection: keep-alive Sec-Fetch-Dest: style Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site` HTTP/2 200 OK content-type: text/css x-amz-id-2: 1VOjhP3UXYOpIZ+5EXOLi6DWdzExYa14r9EubHTCfKqBtxkyw3U4+PGGBLwvUKwqmH/8ijo4Pyg= x-amz-request-id: JV8318R2CTZCMNTE x-amz-replication-status: COMPLETED last-modified: Thu, 09 Mar 2023 19:29:34 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: 9j_W6olZCXQIkdDHfmYM0zpdgXXZavWH server: AmazonS3 access-control-allow-origin: * content-encoding: gzip date: Thu, 23 Mar 2023 03:25:03 GMT etag: W/"c64137b340e1495b7683b4de78748345" vary: Accept-Encoding x-cache: Hit from cloudfront via: 1.1 a2c3c8b833b34851dca4f7753ecaae58.cloudfront.net (CloudFront) x-amz-cf-pop: OSL50-P1 x-amz-cf-id: 75kZuAoAFfyCjipeCJVMbvpv64dHQGN3r3Tizvxfh2dNY5a5yqcjBA== age: 65337 x-xss-protection: 1; mode=block referrer-policy: strict-origin-when-cross-origin content-security-policy: default-src https: data: blob: 'unsafe-eval' 'unsafe-inline' https://www.google.com https://www.gstatic.com https://www.recaptcha.net https://api.amplitude.com wss://.hotjar.com wss://.qualified.com 'self'; upgrade-insecure-requests; frame-ancestors 'self' https://.zendesk.com https://.myshopify.com https://teams.microsoft.com https://.eloqua.com https://.surveymonkey.com https://.sharepoint.com https://.worldpay.com https://.cardinalcommerce.com https://.office.com https://.office365.com https://.microsoft365.com;report-uri https://csp.surveymonkey.com/report?e=true&c=prod&ar=true x-content-type-options: nosniff strict-transport-security: max-age=31536000; includeSubDomains cache-control: max-age=7884000, public X-Firefox-Spdy: h2

	www.surveymonkey.com/r/75YKQJF	54.230.111.102	200 OK	0
URL HTTP/2 www.surveymonkey.com/r/75YKQJF IP 54.230.111.102:0 ASN #16509 AMAZON-02 Magic Size 0 Hash HTTP Headers GET /r/75YKQJF HTTP/1.1 Host: www.surveymonkey.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Cookie: _ga_JMDBBLT4C7=GS1.1.1654133888.1.0.1654133888.0; _ga=GA1.1.729600766.1654133888 Upgrade-Insecure-Requests: 1 Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: none Sec-Fetch-User: ?1 HTTP/2 200 OK content-type: text/html; charset=UTF-8 date: Thu, 23 Mar 2023 21:29:43 GMT server: nginx vary: Accept-Encoding, Accept-Encoding x-nginx-pool-override-enabled: 1 p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT" set-cookie: ep201="33HeVUljMWKx8lNkKBwpfNtTQ00="; Domain=.surveymonkey.com; expires=Thu, 23 Mar 2023 21:59:43 GMT; Path=/; SameSite=none; Secure ep203="fOtIjVVdId65sJBOFGMjulPd9qg="; Domain=.surveymonkey.com; expires=Wed, 21 Jun 2023 21:29:43 GMT; HttpOnly; Path=/; SameSite=none; Secure sl_notranslate: 1 pragma: no-cache sm-request-id: TfBIxqpeguKXuFIpjLQuQKEV5P_72fZrSxGwaKP8uMFIc4IzAmVfuA== rexr-request: current:ba9a8254f4f591fa2c324ba9c45e8cbf:1679606983.056:182 content-security-policy-report-only: default-src https: data: blob: 'unsafe-eval' 'unsafe-inline' https://www.google.com https://www.gstatic.com https://www.recaptcha.net https://api.amplitude.com wss://.hotjar.com wss://.qualified.com 'self'; report-uri https://csp.surveymonkey.com/report?e=false&c=prod&ar=true&a=rexrouterapp content-security-policy: default-src https: data: blob: 'unsafe-eval' 'unsafe-inline' https://www.google.com https://www.gstatic.com https://www.recaptcha.net https://api.amplitude.com wss://.hotjar.com wss://.qualified.com 'self'; img-src https: http: data: blob: 'self'; script-src https: 'unsafe-eval' 'unsafe-inline' http://www.google-analytics.com http://ajax.googleapis.com http://bat.bing.com http://static.hotjar.com http://www.googleadservices.com 'self'; style-src https: 'unsafe-inline' http://resources.monkeytest1.com 'self';report-uri https://csp.surveymonkey.com/report?e=true&c=prod&ar=true&a=rexrouterapp x-xss-protection: 1;report=https://csp.surveymonkey.com/report?e=false&c=prod&ar=true x-content-type-options: nosniff cache-control: private, no-store, no-cache, must-revalidate, post-check=0, pre-check=0, max-age=0 referrer-policy: strict-origin-when-cross-origin strict-transport-security: max-age=31536000; includeSubDomains content-encoding: gzip x-cache: Miss from cloudfront via: 1.1 d9fb4c3794a085bb4ee2c5798c2cb1b8.cloudfront.net (CloudFront) x-amz-cf-pop: OSL50-P1 x-amz-cf-id: TfBIxqpeguKXuFIpjLQuQKEV5P_72fZrSxGwaKP8uMFIc4IzAmVfuA== X-Firefox-Spdy: h2

	prod.smassets.net/assets/responseweb/responseweb-responsewebPkgs_hybrid-bundle-min.02a64f8e.js	54.230.111.36	200 OK	0
URL HTTP/2 prod.smassets.net/assets/responseweb/responseweb-responsewebPkgs_hybrid-bundle-min.02a64f8e.js IP 54.230.111.36:0 ASN #16509 AMAZON-02 Magic Size 0 Hash HTTP Headers `GET /assets/responseweb/responseweb-responsewebPkgs_hybrid-bundle-min.02a64f8e.js HTTP/1.1 Host: prod.smassets.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://www.surveymonkey.com/ Connection: keep-alive Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site TE: trailers` HTTP/2 200 OK content-type: application/javascript x-amz-id-2: kpiDFzEeruMgpQlWQHj/xUqws5R4oN+lKKqFRGab1EGCzS9gQrvs91WknaDyG6DIaI5uLjze7ns= x-amz-request-id: BW3HN7MHHA3GE30W x-amz-replication-status: COMPLETED last-modified: Thu, 09 Mar 2023 19:29:49 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: PQZIGNNtMN1vhjQqhAaP56oOxREiUdwr server: AmazonS3 access-control-allow-origin: * content-encoding: gzip date: Thu, 23 Mar 2023 13:21:53 GMT etag: W/"02a64f8edc198cd700ad6e53370e6c36" vary: Accept-Encoding x-cache: Hit from cloudfront via: 1.1 a2c3c8b833b34851dca4f7753ecaae58.cloudfront.net (CloudFront) x-amz-cf-pop: OSL50-P1 x-amz-cf-id: JTGyngdVY6IjxnLKcUmFVikUBLCM_P6rk4ShKgZGmhE7HhKdovnJkg== age: 29288 x-xss-protection: 1; mode=block referrer-policy: strict-origin-when-cross-origin content-security-policy: default-src https: data: blob: 'unsafe-eval' 'unsafe-inline' https://www.google.com https://www.gstatic.com https://www.recaptcha.net https://api.amplitude.com wss://.hotjar.com wss://.qualified.com 'self'; upgrade-insecure-requests; frame-ancestors 'self' https://.zendesk.com https://.myshopify.com https://teams.microsoft.com https://.eloqua.com https://.surveymonkey.com https://.sharepoint.com https://.worldpay.com https://.cardinalcommerce.com https://.office.com https://.office365.com https://.microsoft365.com;report-uri https://csp.surveymonkey.com/report?e=true&c=prod&ar=true x-content-type-options: nosniff strict-transport-security: max-age=31536000; includeSubDomains cache-control: max-age=7884000, public X-Firefox-Spdy: h2

	prod.smassets.net/assets/responseweb/smlib.surveytemplates-sm-react-bundle-min.26c50983.js	54.230.111.36	200 OK	0
URL HTTP/2 prod.smassets.net/assets/responseweb/smlib.surveytemplates-sm-react-bundle-min.26c50983.js IP 54.230.111.36:0 ASN #16509 AMAZON-02 Magic Size 0 Hash HTTP Headers `GET /assets/responseweb/smlib.surveytemplates-sm-react-bundle-min.26c50983.js HTTP/1.1 Host: prod.smassets.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://www.surveymonkey.com/ Connection: keep-alive Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site TE: trailers` HTTP/2 200 OK content-type: application/javascript x-amz-id-2: u/5ptB98+MCVgHQr/WiG255dQIpmasb1CQXywK4eXlxg/akm0zlMhSRwyi8Slp8fmuhmxjTc79E= x-amz-request-id: 8MGP8QKKVXW5QT88 x-amz-replication-status: COMPLETED last-modified: Thu, 09 Mar 2023 19:29:24 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: MonsiOP4BaBS0ZxWeJ5THReFlZeXadZq server: AmazonS3 access-control-allow-origin: * content-encoding: gzip date: Thu, 23 Mar 2023 09:46:19 GMT etag: W/"26c509839fa900588f536046d6cb0d53" vary: Accept-Encoding x-cache: Hit from cloudfront via: 1.1 a2c3c8b833b34851dca4f7753ecaae58.cloudfront.net (CloudFront) x-amz-cf-pop: OSL50-P1 x-amz-cf-id: xb4uZGAK6HOOCc4iSP9ajgtF2RIUyc2WKoR0HA1DKNDmT9ThjYCHJA== age: 42226 x-xss-protection: 1; mode=block referrer-policy: strict-origin-when-cross-origin content-security-policy: default-src https: data: blob: 'unsafe-eval' 'unsafe-inline' https://www.google.com https://www.gstatic.com https://www.recaptcha.net https://api.amplitude.com wss://.hotjar.com wss://.qualified.com 'self'; upgrade-insecure-requests; frame-ancestors 'self' https://.zendesk.com https://.myshopify.com https://teams.microsoft.com https://.eloqua.com https://.surveymonkey.com https://.sharepoint.com https://.worldpay.com https://.cardinalcommerce.com https://.office.com https://.office365.com https://.microsoft365.com;report-uri https://csp.surveymonkey.com/report?e=true&c=prod&ar=true x-content-type-options: nosniff strict-transport-security: max-age=31536000; includeSubDomains cache-control: max-age=7884000, public X-Firefox-Spdy: h2

	prod.smassets.net/assets/responseweb/responseweb-responsewebPkgs-bundle-min.fa300a81.css	54.230.111.36	200 OK	0
URL HTTP/2 prod.smassets.net/assets/responseweb/responseweb-responsewebPkgs-bundle-min.fa300a81.css IP 54.230.111.36:0 ASN #16509 AMAZON-02 Magic Size 0 Hash HTTP Headers `GET /assets/responseweb/responseweb-responsewebPkgs-bundle-min.fa300a81.css HTTP/1.1 Host: prod.smassets.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/css,/;q=0.1 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://www.surveymonkey.com/ Connection: keep-alive Sec-Fetch-Dest: style Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site` HTTP/2 200 OK content-type: text/css x-amz-id-2: kiTBrKPJnC1y2VXW8F2C7wCsaIklYy4SR+0aAE5KHnzJx2qvZT7xJOY4pp6P+HVSYqu94zRwxLo= x-amz-request-id: 8AKC1F154EMR0H6E x-amz-replication-status: COMPLETED last-modified: Tue, 28 Feb 2023 18:48:08 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: IinCczmVOB2d5CNq3gdk7yoeKABGvO4H server: AmazonS3 access-control-allow-origin: * content-encoding: br date: Thu, 23 Mar 2023 16:27:49 GMT etag: W/"fa300a811c0152bdfd7e119c2b34fa9b" vary: Accept-Encoding x-cache: Hit from cloudfront via: 1.1 a2c3c8b833b34851dca4f7753ecaae58.cloudfront.net (CloudFront) x-amz-cf-pop: OSL50-P1 x-amz-cf-id: ByBtZccu7UO1r8pCWm137UfUJU8YYCrKJ2tFY7YjnITbptT9v-SNBg== age: 18115 x-xss-protection: 1; mode=block referrer-policy: strict-origin-when-cross-origin content-security-policy: default-src https: data: blob: 'unsafe-eval' 'unsafe-inline' https://www.google.com https://www.gstatic.com https://www.recaptcha.net https://api.amplitude.com wss://.hotjar.com wss://.qualified.com 'self'; upgrade-insecure-requests; frame-ancestors 'self' https://.zendesk.com https://.myshopify.com https://teams.microsoft.com https://.eloqua.com https://.surveymonkey.com https://.sharepoint.com https://.worldpay.com https://.cardinalcommerce.com https://.office.com https://.office365.com https://.microsoft365.com;report-uri https://csp.surveymonkey.com/report?e=true&c=prod&ar=true x-content-type-options: nosniff strict-transport-security: max-age=31536000; includeSubDomains cache-control: max-age=7884000, public X-Firefox-Spdy: h2

	prod.smassets.net/assets/responseweb/responseweb-base-bundle-min.31f3af80.css	54.230.111.36	200 OK	0
URL HTTP/2 prod.smassets.net/assets/responseweb/responseweb-base-bundle-min.31f3af80.css IP 54.230.111.36:0 ASN #16509 AMAZON-02 Magic Size 0 Hash HTTP Headers `GET /assets/responseweb/responseweb-base-bundle-min.31f3af80.css HTTP/1.1 Host: prod.smassets.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/css,/;q=0.1 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://www.surveymonkey.com/ Connection: keep-alive Sec-Fetch-Dest: style Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site` HTTP/2 200 OK content-type: text/css x-amz-id-2: ZhoYDoJOYrvM4D7Ba0wB6rUGwKp1pgLE4gYBODp/W0lAoOb8rc6cEUNe0+b3ZpelRrn9IEze7gdz55R6y0a1NQ== x-amz-request-id: GEC1837NKCRW4N94 x-amz-replication-status: COMPLETED last-modified: Thu, 09 Mar 2023 19:29:50 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: 5lRXa5xmyknqvfdLDKtXJEoNLUsDudB4 server: AmazonS3 access-control-allow-origin: * content-encoding: br date: Thu, 23 Mar 2023 01:25:56 GMT etag: W/"31f3af80e24405d41961d693c2285488" vary: Accept-Encoding x-cache: Hit from cloudfront via: 1.1 a2c3c8b833b34851dca4f7753ecaae58.cloudfront.net (CloudFront) x-amz-cf-pop: OSL50-P1 x-amz-cf-id: UIbU6murO17UQIT9JD7R5R38zuY2ckVUTi0-5W-HYJml4bmn8UBBXg== age: 74910 x-xss-protection: 1; mode=block referrer-policy: strict-origin-when-cross-origin content-security-policy: default-src https: data: blob: 'unsafe-eval' 'unsafe-inline' https://www.google.com https://www.gstatic.com https://www.recaptcha.net https://api.amplitude.com wss://.hotjar.com wss://.qualified.com 'self'; upgrade-insecure-requests; frame-ancestors 'self' https://.zendesk.com https://.myshopify.com https://teams.microsoft.com https://.eloqua.com https://.surveymonkey.com https://.sharepoint.com https://.worldpay.com https://.cardinalcommerce.com https://.office.com https://.office365.com https://.microsoft365.com;report-uri https://csp.surveymonkey.com/report?e=true&c=prod&ar=true x-content-type-options: nosniff strict-transport-security: max-age=31536000; includeSubDomains cache-control: max-age=7884000, public X-Firefox-Spdy: h2

	prod.smassets.net/assets/responseweb/smlib.surveytemplates/4.3.63/assets/sm_logo_footer.svg	54.230.111.36	200 OK	0
URL HTTP/2 prod.smassets.net/assets/responseweb/smlib.surveytemplates/4.3.63/assets/sm_logo_footer.svg IP 54.230.111.36:0 ASN #16509 AMAZON-02 Magic Size 0 Hash HTTP Headers `GET /assets/responseweb/smlib.surveytemplates/4.3.63/assets/sm_logo_footer.svg HTTP/1.1 Host: prod.smassets.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://www.surveymonkey.com/ Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site TE: trailers` HTTP/2 200 OK content-type: image/svg+xml x-amz-id-2: uWe00Z6itFJTNgCUeLC8W6ufydqyRq++En33K6+MnnUL3xZTCazuYqikCVX0rtiQ3CNelCWmm9w= x-amz-request-id: 70BT4V9M6GHQJB4D x-amz-replication-status: COMPLETED last-modified: Thu, 09 Mar 2023 19:29:16 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: mivom8199sPb_t5gl6OwI2_CUu60MyCk server: AmazonS3 access-control-allow-origin: * content-encoding: br date: Thu, 23 Mar 2023 00:22:24 GMT etag: W/"93383a58dff6cb7fd2eeae02aae1d46e" vary: Accept-Encoding x-cache: Hit from cloudfront via: 1.1 a2c3c8b833b34851dca4f7753ecaae58.cloudfront.net (CloudFront) x-amz-cf-pop: OSL50-P1 x-amz-cf-id: kNqQ14emQmdE0IN5AhP9tvW_LVyxmcmyn7qANs53oKZHtQiIQW0U9Q== age: 76039 x-xss-protection: 1; mode=block referrer-policy: strict-origin-when-cross-origin content-security-policy: default-src https: data: blob: 'unsafe-eval' 'unsafe-inline' https://www.google.com https://www.gstatic.com https://www.recaptcha.net https://api.amplitude.com wss://.hotjar.com wss://.qualified.com 'self'; upgrade-insecure-requests; frame-ancestors 'self' https://.zendesk.com https://.myshopify.com https://teams.microsoft.com https://.eloqua.com https://.surveymonkey.com https://.sharepoint.com https://.worldpay.com https://.cardinalcommerce.com https://.office.com https://.office365.com https://.microsoft365.com;report-uri https://csp.surveymonkey.com/report?e=true&c=prod&ar=true x-content-type-options: nosniff strict-transport-security: max-age=31536000; includeSubDomains cache-control: max-age=7884000, public X-Firefox-Spdy: h2

	cdn.smassets.net/assets/wds/4_20_2/wds-react/wds-react.min.css	54.230.111.36	200 OK	0
URL HTTP/2 cdn.smassets.net/assets/wds/4_20_2/wds-react/wds-react.min.css IP 54.230.111.36:0 ASN #16509 AMAZON-02 Magic Size 0 Hash HTTP Headers `GET /assets/wds/4_20_2/wds-react/wds-react.min.css HTTP/1.1 Host: cdn.smassets.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/css,/;q=0.1 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://www.surveymonkey.com/ Connection: keep-alive Sec-Fetch-Dest: style Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site` HTTP/2 200 OK content-type: text/css x-amz-id-2: NLc/XXKU+6TKQ8znNcTfrN+7JojFgzL1Zzp3CWPyRvFOwAnrajZSGEthO0b8+qf7tmwtxI0z9F8= x-amz-request-id: B9WB7Y5KPHC5GS7G x-amz-replication-status: COMPLETED last-modified: Tue, 17 Nov 2020 13:22:33 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: uuS3rJ8lpzOfMrSciOuzwH9Tk1993xne server: AmazonS3 access-control-allow-origin: * content-encoding: br date: Thu, 23 Mar 2023 09:22:39 GMT etag: W/"319c4184e0e815aaae848111368f49e6" vary: Accept-Encoding x-cache: Hit from cloudfront via: 1.1 a343e36742f64defd0a2caf1f96ff772.cloudfront.net (CloudFront) x-amz-cf-pop: OSL50-P1 x-amz-cf-id: lXTFd46ohaRbfFT3T5HjtdgWv8y_AzXr2gJvs4RWPHzbvJUeCK8ksA== age: 43638 x-xss-protection: 1; mode=block referrer-policy: strict-origin-when-cross-origin content-security-policy: default-src https: data: blob: 'unsafe-eval' 'unsafe-inline' https://www.google.com https://www.gstatic.com https://www.recaptcha.net https://api.amplitude.com wss://.hotjar.com wss://.qualified.com 'self'; upgrade-insecure-requests; frame-ancestors 'self' https://.zendesk.com https://.myshopify.com https://teams.microsoft.com https://.eloqua.com https://.surveymonkey.com https://.sharepoint.com https://.worldpay.com https://.cardinalcommerce.com https://.office.com https://.office365.com https://.microsoft365.com;report-uri https://csp.surveymonkey.com/report?e=true&c=prod&ar=true x-content-type-options: nosniff strict-transport-security: max-age=31536000; includeSubDomains cache-control: max-age=7884000, public X-Firefox-Spdy: h2

	fonts.googleapis.com/earlyaccess/notosanstc.css	142.250.74.74	200 OK	0
URL HTTP/2 fonts.googleapis.com/earlyaccess/notosanstc.css IP 142.250.74.74:0 ASN #15169 GOOGLE Magic Size 0 Hash HTTP Headers `GET /earlyaccess/notosanstc.css HTTP/1.1 Host: fonts.googleapis.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/css,/;q=0.1 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://www.surveymonkey.com/ Connection: keep-alive Sec-Fetch-Dest: style Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site` HTTP/2 200 OK content-type: text/css; charset=utf-8 access-control-allow-origin: * timing-allow-origin: * link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin strict-transport-security: max-age=31536000 expires: Thu, 23 Mar 2023 21:29:43 GMT date: Thu, 23 Mar 2023 21:29:43 GMT cache-control: private, max-age=86400 cross-origin-resource-policy: cross-origin cross-origin-opener-policy: same-origin-allow-popups content-encoding: gzip server: ESF x-xss-protection: 0 x-frame-options: SAMEORIGIN x-content-type-options: nosniff alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 X-Firefox-Spdy: h2

	fonts.googleapis.com/earlyaccess/notosanskr.css	142.250.74.74	200 OK	0
URL HTTP/2 fonts.googleapis.com/earlyaccess/notosanskr.css IP 142.250.74.74:0 ASN #15169 GOOGLE Magic Size 0 Hash HTTP Headers `GET /earlyaccess/notosanskr.css HTTP/1.1 Host: fonts.googleapis.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/css,/;q=0.1 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://www.surveymonkey.com/ Connection: keep-alive Sec-Fetch-Dest: style Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site` HTTP/2 200 OK content-type: text/css; charset=utf-8 access-control-allow-origin: * timing-allow-origin: * link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin strict-transport-security: max-age=31536000 expires: Thu, 23 Mar 2023 21:29:43 GMT date: Thu, 23 Mar 2023 21:29:43 GMT cache-control: private, max-age=86400 cross-origin-opener-policy: same-origin-allow-popups cross-origin-resource-policy: cross-origin content-encoding: gzip server: ESF x-xss-protection: 0 x-frame-options: SAMEORIGIN x-content-type-options: nosniff alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 X-Firefox-Spdy: h2

	secure.surveymonkey.com/r/themes/4.3.63_20425050_no-palette_83C7721B-D661-4570-B09D-19EA236C5DA0.css	54.230.111.36	200 OK	0
URL HTTP/2 secure.surveymonkey.com/r/themes/4.3.63_20425050_no-palette_83C7721B-D661-4570-B09D-19EA236C5DA0.css IP 54.230.111.36:0 ASN #16509 AMAZON-02 Magic Size 0 Hash HTTP Headers GET /r/themes/4.3.63_20425050_no-palette_83C7721B-D661-4570-B09D-19EA236C5DA0.css HTTP/1.1 Host: secure.surveymonkey.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/css,/;q=0.1 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://www.surveymonkey.com/ Connection: keep-alive Cookie: _ga_JMDBBLT4C7=GS1.1.1654133888.1.0.1654133888.0; _ga=GA1.1.729600766.1654133888; ep201="33HeVUljMWKx8lNkKBwpfNtTQ00="; ep203="fOtIjVVdId65sJBOFGMjulPd9qg=" Sec-Fetch-Dest: style Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-site `HTTP/2 200 OK content-type: text/css; charset=UTF-8 date: Thu, 23 Mar 2023 21:13:32 GMT server: nginx sm-request-id: Z2irHJoe1Ka6UWFYPNzfTVGufzUQXy5ek-CLCZ_EVponqMjvz4hM5Q== cache-control: max-age=3600 content-encoding: br vary: Accept-Encoding,Accept-Encoding x-cache: Hit from cloudfront via: 1.1 a2c3c8b833b34851dca4f7753ecaae58.cloudfront.net (CloudFront) x-amz-cf-pop: OSL50-P1 x-amz-cf-id: SrwpHEoghssH7h1O6vSKDIOdQonp-NvD0-s_FfmKrC8TFDLDjcZMXQ== age: 971 X-Firefox-Spdy: h2`

	prod.smassets.net/assets/responseweb/smlib.surveytemplates-sm-polyfill-bundle-min.c105a2db.js	54.230.111.36	200 OK	0
URL HTTP/2 prod.smassets.net/assets/responseweb/smlib.surveytemplates-sm-polyfill-bundle-min.c105a2db.js IP 54.230.111.36:0 ASN #16509 AMAZON-02 Magic Size 0 Hash HTTP Headers `GET /assets/responseweb/smlib.surveytemplates-sm-polyfill-bundle-min.c105a2db.js HTTP/1.1 Host: prod.smassets.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://www.surveymonkey.com/ Connection: keep-alive Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site TE: trailers` HTTP/2 200 OK content-type: application/javascript x-amz-id-2: oYtdhXF9V0133yxJA/t7FUJRJQZhpFuBg26A9/KUizutio+FdS47498HIwhPS79MIZGMDtnWe8E= x-amz-request-id: S7W6KB1XVM34V11T x-amz-replication-status: COMPLETED last-modified: Thu, 09 Mar 2023 19:29:24 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: V8Btd6fhwZRHCU3OGHF_5pPHw7k04Urg server: AmazonS3 access-control-allow-origin: * content-encoding: br date: Thu, 23 Mar 2023 00:08:36 GMT etag: W/"c105a2db5b41f9f9e0fb3ce5fce26e20" vary: Accept-Encoding x-cache: Hit from cloudfront via: 1.1 a2c3c8b833b34851dca4f7753ecaae58.cloudfront.net (CloudFront) x-amz-cf-pop: OSL50-P1 x-amz-cf-id: Z3jhauSUoskUpVddU6TypZDkqlu-CsEA09cnwPI2ilrtPjPPSFTZUg== age: 76960 x-xss-protection: 1; mode=block referrer-policy: strict-origin-when-cross-origin content-security-policy: default-src https: data: blob: 'unsafe-eval' 'unsafe-inline' https://www.google.com https://www.gstatic.com https://www.recaptcha.net https://api.amplitude.com wss://.hotjar.com wss://.qualified.com 'self'; upgrade-insecure-requests; frame-ancestors 'self' https://.zendesk.com https://.myshopify.com https://teams.microsoft.com https://.eloqua.com https://.surveymonkey.com https://.sharepoint.com https://.worldpay.com https://.cardinalcommerce.com https://.office.com https://.office365.com https://.microsoft365.com;report-uri https://csp.surveymonkey.com/report?e=true&c=prod&ar=true x-content-type-options: nosniff strict-transport-security: max-age=31536000; includeSubDomains cache-control: max-age=7884000, public X-Firefox-Spdy: h2

	prod.smassets.net/assets/responseweb/responseweb-response-bundle-min.4c433bad.js	54.230.111.36	200 OK	0
URL HTTP/2 prod.smassets.net/assets/responseweb/responseweb-response-bundle-min.4c433bad.js IP 54.230.111.36:0 ASN #16509 AMAZON-02 Magic Size 0 Hash HTTP Headers `GET /assets/responseweb/responseweb-response-bundle-min.4c433bad.js HTTP/1.1 Host: prod.smassets.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://www.surveymonkey.com/ Connection: keep-alive Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site` HTTP/2 200 OK content-type: application/javascript x-amz-id-2: 9FZzK3w111+w4bhDhr2XXQBnALESrE3/xVqOkDJwPrIRL/clCgGc4LL/0GdXC4ur9Hy1PBvEHO4= x-amz-request-id: KTZDBA4QYCHQV6CH x-amz-replication-status: COMPLETED last-modified: Thu, 09 Mar 2023 19:29:49 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: rRBYuNPYClqxUcShYC1eQ_bxMTz_T9xA server: AmazonS3 access-control-allow-origin: * content-encoding: br date: Thu, 23 Mar 2023 18:16:40 GMT etag: W/"4c433badcce23b2352aba0cb565e6943" vary: Accept-Encoding x-cache: Hit from cloudfront via: 1.1 a2c3c8b833b34851dca4f7753ecaae58.cloudfront.net (CloudFront) x-amz-cf-pop: OSL50-P1 x-amz-cf-id: GIfMRrhpiiiG-5Xus90zw7SU3iQ4uGXIE5rLLsYhrkgDlKG3-Wtedg== age: 37912 x-xss-protection: 1; mode=block referrer-policy: strict-origin-when-cross-origin content-security-policy: default-src https: data: blob: 'unsafe-eval' 'unsafe-inline' https://www.google.com https://www.gstatic.com https://www.recaptcha.net https://api.amplitude.com wss://.hotjar.com wss://.qualified.com 'self'; upgrade-insecure-requests; frame-ancestors 'self' https://.zendesk.com https://.myshopify.com https://teams.microsoft.com https://.eloqua.com https://.surveymonkey.com https://.sharepoint.com https://.worldpay.com https://.cardinalcommerce.com https://.office.com https://.office365.com https://.microsoft365.com;report-uri https://csp.surveymonkey.com/report?e=true&c=prod&ar=true x-content-type-options: nosniff strict-transport-security: max-age=31536000; includeSubDomains cache-control: max-age=7884000, public X-Firefox-Spdy: h2

URL HTTP/1.1

r3.o.lencr.org/
IP

23.33.119.27:0
ASN

#20940 Akamai International B.V.

Magic

data

Size

503
Hash

bea3185dd820a31c1981317f37c3456d

1a548a5d27270fc11df9011837a7149571cedd78

469b97bf9f57401b3c9571039483589f2815f4794212b75c7c85cfefe0ae71e9

HTTP Headers

                                        POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "469B97BF9F57401B3C9571039483589F2815F4794212B75C7C85CFEFE0AE71E9"
Last-Modified: Wed, 22 Mar 2023 14:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17978
Expires: Fri, 24 Mar 2023 02:29:20 GMT
Date: Thu, 23 Mar 2023 21:29:42 GMT
Connection: keep-alive

URL HTTP/1.1

r3.o.lencr.org/
IP

23.33.119.27:0
ASN

#20940 Akamai International B.V.

Magic

data

Size

503
Hash

65fc860bc043f3fb83bdc3debdcd322d

418010755deae099ef1284e402813c5837a10f42

d93d50c523c7f735987aba09db628259441eb75efe713a2df3c214e1fb8b5171

HTTP Headers

                                        POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D93D50C523C7F735987ABA09DB628259441EB75EFE713A2DF3C214E1FB8B5171"
Last-Modified: Wed, 22 Mar 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11473
Expires: Fri, 24 Mar 2023 00:40:55 GMT
Date: Thu, 23 Mar 2023 21:29:42 GMT
Connection: keep-alive

URL HTTP/2

firefox.settings.services.mozilla.com/v1/
IP

35.241.9.150:0
ASN

#15169 GOOGLE

Magic

JSON data\012- , ASCII text, with very long lines (939), with no line terminators

Size

939
Hash

4ad6984a756720fbfff47b37a75513a2

355e35258114452af8b9638985ed9d8ef3bf0aca

43181fccb10652c68cae86e5e32b4e8f426fb5ad49d8125cb99e072cff573cf5

HTTP Headers

                                        GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Retry-After, Content-Length, Alert, Content-Type, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Thu, 23 Mar 2023 21:15:07 GMT
content-type: application/json
age: 875
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2

URL HTTP/1.1

r3.o.lencr.org/
IP

23.33.119.27:0
ASN

#20940 Akamai International B.V.

Magic

data

Size

503
Hash

51a5d4696a6090c295850554508b51ce

c44e143c2223546e64b19f543b8101aaf3b11e97

8794223d5e8d4d276c35e2fdcc24bf99694240634dd749cd9b5bf874dec055cf

HTTP Headers

                                        POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "8794223D5E8D4D276C35E2FDCC24BF99694240634DD749CD9B5BF874DEC055CF"
Last-Modified: Wed, 22 Mar 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3152
Expires: Thu, 23 Mar 2023 22:22:14 GMT
Date: Thu, 23 Mar 2023 21:29:42 GMT
Connection: keep-alive

URL HTTP/2

content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-04-30-16-53-14.chain
IP

34.160.144.191:0
ASN

#15169 GOOGLE

Magic

PEM certificate\012- , ASCII text

Size

5348
Hash

e7bace7c1e04d44012e37ddffe36e5d5

3ac8d7c0a9d3e3f0b28b2530c7b8d8407b4042c2

6b4f80f2e95b26f6122ea8dcd0ef8d762299be822c69e839fc37581ca2bcb5f2

HTTP Headers

                                        GET /chains/remote-settings.content-signature.mozilla.org-2023-04-30-16-53-14.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        HTTP/2 200 OK
x-amz-id-2: im0sEXPGY/Xw1hdEcrca+NT7i9Mgk64FqtfhJ3ZXSVLHKjth5cIfXASzWPc0Jc5DEUzgte1EDkc=
x-amz-request-id: HM5E3E4EB4G6V6RM
x-amz-server-side-encryption: AES256
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Thu, 23 Mar 2023 21:00:06 GMT
age: 1776
last-modified: Sat, 11 Mar 2023 16:53:15 GMT
etag: "e7bace7c1e04d44012e37ddffe36e5d5"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2

URL HTTP/2

contile.services.mozilla.com/v1/tiles
IP

34.117.237.239:0
ASN

#15169 GOOGLE

Magic

JSON data\012- , ASCII text, with no line terminators

Size

12
Hash

23e88fb7b99543fb33315b29b1fad9d6

a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce

7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3

HTTP Headers

                                        GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        HTTP/2 200 OK
server: nginx
date: Thu, 23 Mar 2023 21:29:43 GMT
content-type: application/json
content-length: 12
access-control-allow-credentials: true
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-expose-headers: content-type
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2

URL HTTP/1.1

ocsp.pki.goog/gts1c3
IP

142.250.74.163:0
ASN

#15169 GOOGLE

Magic

data

Size

471
Hash

1d54d3c84e73cd1f00a835aa7616c399

e869898915967fb645a7ae3bd711a831329cc792

9cca1d2ea17f54a8688823e6fb8cbb7247c0a808808b382ffdda35b2770a26f8

HTTP Headers

                                        POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 23 Mar 2023 21:29:43 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

URL HTTP/1.1

ocsp.pki.goog/gts1c3
IP

142.250.74.163:0
ASN

#15169 GOOGLE

Magic

data

Size

471
Hash

1d54d3c84e73cd1f00a835aa7616c399

e869898915967fb645a7ae3bd711a831329cc792

9cca1d2ea17f54a8688823e6fb8cbb7247c0a808808b382ffdda35b2770a26f8

HTTP Headers

                                        POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 23 Mar 2023 21:29:43 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

URL HTTP/1.1

ocsp.pki.goog/gts1c3
IP

142.250.74.163:0
ASN

#15169 GOOGLE

Magic

data

Size

471
Hash

1d54d3c84e73cd1f00a835aa7616c399

e869898915967fb645a7ae3bd711a831329cc792

9cca1d2ea17f54a8688823e6fb8cbb7247c0a808808b382ffdda35b2770a26f8

HTTP Headers

                                        POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 23 Mar 2023 21:29:43 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

URL HTTP/1.1

ocsp.pki.goog/gts1c3
IP

142.250.74.163:0
ASN

#15169 GOOGLE

Magic

data

Size

471
Hash

1d54d3c84e73cd1f00a835aa7616c399

e869898915967fb645a7ae3bd711a831329cc792

9cca1d2ea17f54a8688823e6fb8cbb7247c0a808808b382ffdda35b2770a26f8

HTTP Headers

                                        POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 23 Mar 2023 21:29:43 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

URL HTTP/1.1

ocsp.pki.goog/gts1c3
IP

142.250.74.163:0
ASN

#15169 GOOGLE

Magic

data

Size

471
Hash

1d54d3c84e73cd1f00a835aa7616c399

e869898915967fb645a7ae3bd711a831329cc792

9cca1d2ea17f54a8688823e6fb8cbb7247c0a808808b382ffdda35b2770a26f8

HTTP Headers

                                        POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 23 Mar 2023 21:29:43 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

URL HTTP/2

firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP

35.241.9.150:0
ASN

#15169 GOOGLE

Magic

JSON data\012- , ASCII text, with very long lines (329), with no line terminators

Size

329
Hash

0333b0655111aa68de771adfcc4db243

63f295a144ac87a7c8e23417626724eeca68a7eb

60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300

HTTP Headers

                                        GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: ETag, Last-Modified, Retry-After, Content-Length, Alert, Cache-Control, Expires, Content-Type, Backoff, Pragma
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Thu, 23 Mar 2023 21:14:33 GMT
age: 910
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2

URL HTTP/1.1

r3.o.lencr.org/
IP

23.33.119.27:0
ASN

#20940 Akamai International B.V.

Magic

data

Size

503
Hash

18b877ebbad1529e4bd91e12220d91c4

a3d64fb3d9cc1fe3a29b261c4ec9acfe134dfedc

7001d3ef847c7002ac15155f0dfcc0a369f19860e85c8e90530f1e7b2dd88f09

HTTP Headers

                                        POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "7001D3EF847C7002AC15155F0DFCC0A369F19860E85C8E90530F1E7B2DD88F09"
Last-Modified: Wed, 22 Mar 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4160
Expires: Thu, 23 Mar 2023 22:39:03 GMT
Date: Thu, 23 Mar 2023 21:29:43 GMT
Connection: keep-alive

URL HTTP/1.1

push.services.mozilla.com/
IP

54.201.249.32:0
ASN

#16509 AMAZON-02

Magic

Size

0
Hash

d41d8cd98f00b204e9800998ecf8427e

da39a3ee5e6b4b0d3255bfef95601890afd80709

e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

                                        GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: TEwdFr0PnyPU+bIj8Wjujw==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

                                        HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: 7Efz/PNHC2OQA/sue/rxk2NR1ws=

URL HTTP/1.1

surveymonkey-assets.s3.amazonaws.com/survey/511380104/d0dbb1be-040a-4bbf-8e0b-0c9471dc1462.jpg
IP

52.217.73.244:0
ASN

#16509 AMAZON-02

Magic

JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 100", baseline, precision 8, 100x100, components 3\012- data

Size

14424
Hash

fb946f72e96172cc732feb0d1b9f1360

8b352cf08bf994c86e2cc284c206ffb79dfa0969

e2ad87449561efa207b50b2a65cd2a03e1557740131136ace94ee5ebd02aa0bc

HTTP Headers

                                        GET /survey/511380104/d0dbb1be-040a-4bbf-8e0b-0c9471dc1462.jpg HTTP/1.1
Host: surveymonkey-assets.s3.amazonaws.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.surveymonkey.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        HTTP/1.1 200 OK
x-amz-id-2: m28lZWJBqC+0pRatjNdIyKQ4Nn53AG7MhHEfbArInRCsiALAZspdYtn4chu0pKNlCmOYdhV9Mdo=
x-amz-request-id: SYG00GS970WKD860
Date: Thu, 23 Mar 2023 21:29:44 GMT
x-amz-replication-status: COMPLETED
Last-Modified: Tue, 14 Mar 2023 19:11:46 GMT
ETag: "fb946f72e96172cc732feb0d1b9f1360"
x-amz-server-side-encryption: AES256
x-amz-meta-qqfilename: SIS-square-logo%20(1).jpg
x-amz-version-id: xpkURmLIogXq.mbkQVkjNkvCUED9tKvP
Accept-Ranges: bytes
Content-Type: image/jpeg
Server: AmazonS3
Content-Length: 14424

URL HTTP/1.1

ocsp.pki.goog/gts1c3
IP

142.250.74.163:0
ASN

#15169 GOOGLE

Magic

data

Size

472
Hash

a563513e8fb14fb6796ff13a072cd3db

3e1d51e451b3c450c1213d3fce208e84522b1511

78ecd87f634efd2b5b6644a9d97285807cb26452571be0cef89f6d84dd3b32c0

HTTP Headers

                                        POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 23 Mar 2023 21:29:44 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

URL HTTP/2

prod.smassets.net/assets/responseweb/smlib.ui/5.3.0/assets/fonts/National2Web-Regular.woff2
IP

54.230.111.36:0
ASN

#16509 AMAZON-02

Magic

Web Open Font Format (Version 2), TrueType, length 34775, version 1.0\012- data

Size

34775
Hash

13244bd99451605c61b32c9617162c1f

0e76a3a33245d9276580c0b4d8ecac07d9936e66

c7e022d03458278aabb7ce6892ddeef5736041de037d0d64adedc2eb1d82850b

HTTP Headers

                                        GET /assets/responseweb/smlib.ui/5.3.0/assets/fonts/National2Web-Regular.woff2 HTTP/1.1
Host: prod.smassets.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Referer: https://prod.smassets.net/
Origin: https://www.surveymonkey.com
Connection: keep-alive
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        HTTP/2 200 OK
content-type: application/font-woff2
content-length: 34775
x-amz-id-2: ZddUltIK9QAy8J7bCmkziocydogakBncDUGP4t7J3h45AjzDaDpVySD8LwKHL4di/jBAOdf2WnU=
x-amz-request-id: XFZY8VH3D156F5F6
x-amz-replication-status: COMPLETED
last-modified: Thu, 09 Mar 2023 19:29:35 GMT
x-amz-server-side-encryption: AES256
x-amz-version-id: pRmv.YcFkyg4K2cxht6Vd9yM35sW.ZEI
accept-ranges: bytes
server: AmazonS3
access-control-allow-origin: *
date: Thu, 23 Mar 2023 17:45:41 GMT
etag: "13244bd99451605c61b32c9617162c1f"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 a2c3c8b833b34851dca4f7753ecaae58.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: qXMyHBkPZ3LQO9UuCCZe0uQUnRNXYvZ-ASIV-SVyJCrHTAIjiQ5dIQ==
age: 13444
x-xss-protection: 1; mode=block
referrer-policy: strict-origin-when-cross-origin
content-security-policy: default-src https: data: blob: 'unsafe-eval' 'unsafe-inline' https://www.google.com https://www.gstatic.com https://www.recaptcha.net https://api.amplitude.com  wss://*.hotjar.com wss://*.qualified.com 'self'; upgrade-insecure-requests; frame-ancestors 'self' https://*.zendesk.com https://*.myshopify.com https://teams.microsoft.com https://*.eloqua.com https://*.surveymonkey.com https://*.sharepoint.com https://*.worldpay.com https://*.cardinalcommerce.com https://*.office.com https://*.office365.com https://*.microsoft365.com;report-uri https://csp.surveymonkey.com/report?e=true&c=prod&ar=true
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains
cache-control: max-age=7884000, public
X-Firefox-Spdy: h2

URL HTTP/2

prod.smassets.net/assets/responseweb/smlib.ui/5.3.0/assets/fonts/National2Web-Medium.woff2
IP

54.230.111.36:0
ASN

#16509 AMAZON-02

Magic

Web Open Font Format (Version 2), TrueType, length 37339, version 1.0\012- data

Size

37339
Hash

1ebab08781dd6eebbe312e6f97f6e26a

e70a14ebabe5d90f7c1f06fb6a91e787575a6268

9d1ac6865e4ba78d64acb5316f123a17a0840cbd8439415a8a66440697524e99

HTTP Headers

                                        GET /assets/responseweb/smlib.ui/5.3.0/assets/fonts/National2Web-Medium.woff2 HTTP/1.1
Host: prod.smassets.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Referer: https://prod.smassets.net/
Origin: https://www.surveymonkey.com
Connection: keep-alive
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        HTTP/2 200 OK
content-type: application/font-woff2
content-length: 37339
x-amz-id-2: d08Gzs3Gz3JroOflYy2MEGzh97+Cx9hTiGWBLQGfVYTlD/fONRNwuULMvLQnM+bGJCtfCKgRhT0=
x-amz-request-id: 3PF805DYVZFPQFS5
x-amz-replication-status: COMPLETED
last-modified: Thu, 09 Mar 2023 19:29:35 GMT
x-amz-server-side-encryption: AES256
x-amz-version-id: mdSiESTn11XvAlWraU0lrLsin.th0Ibn
accept-ranges: bytes
server: AmazonS3
access-control-allow-origin: *
date: Thu, 23 Mar 2023 01:13:13 GMT
etag: "1ebab08781dd6eebbe312e6f97f6e26a"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 a2c3c8b833b34851dca4f7753ecaae58.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: ZHGOybeO8Lrf9g0AfBIALO10SnRne8ObLFBCeH41LVqj771q8jQ7vg==
age: 72992
x-xss-protection: 1; mode=block
referrer-policy: strict-origin-when-cross-origin
content-security-policy: default-src https: data: blob: 'unsafe-eval' 'unsafe-inline' https://www.google.com https://www.gstatic.com https://www.recaptcha.net https://api.amplitude.com  wss://*.hotjar.com wss://*.qualified.com 'self'; upgrade-insecure-requests; frame-ancestors 'self' https://*.zendesk.com https://*.myshopify.com https://teams.microsoft.com https://*.eloqua.com https://*.surveymonkey.com https://*.sharepoint.com https://*.worldpay.com https://*.cardinalcommerce.com https://*.office.com https://*.office365.com https://*.microsoft365.com;report-uri https://csp.surveymonkey.com/report?e=true&c=prod&ar=true
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains
cache-control: max-age=7884000, public
X-Firefox-Spdy: h2

URL HTTP/2

www.googletagmanager.com/gtm.js?id=GTM-NGMP3BG
IP

142.250.74.168:0
ASN

#15169 GOOGLE

Magic

ASCII text, with very long lines (40038)

Size

109836
Hash

f6f042dcb3aa3505ce23f57783021e23

ed46c24f6c423f6bdbc64268080d7d32c8a51eea

7b0df90c6d2baa12d3756ed7b97e59458c3814abddab985ba089e4593f9b9c9a

HTTP Headers

                                        GET /gtm.js?id=GTM-NGMP3BG HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.surveymonkey.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Thu, 23 Mar 2023 21:29:44 GMT
expires: Thu, 23 Mar 2023 21:29:44 GMT
cache-control: private, max-age=900
last-modified: Thu, 23 Mar 2023 21:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 109836
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

URL HTTP/1.1

ocsp.pki.goog/gts1c3
IP

142.250.74.163:0
ASN

#15169 GOOGLE

Magic

data

Size

472
Hash

a563513e8fb14fb6796ff13a072cd3db

3e1d51e451b3c450c1213d3fce208e84522b1511

78ecd87f634efd2b5b6644a9d97285807cb26452571be0cef89f6d84dd3b32c0

HTTP Headers

                                        POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 23 Mar 2023 21:29:44 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

URL HTTP/2

www.surveymonkey.com/favicon1.ico
IP

54.230.111.102:0
ASN

#16509 AMAZON-02

Magic

HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators

Size

138
Hash

aff950cab4c0265e21d401db15f1026d

f03e18461817f7a6546c8bf8fa8d686d7e30aca0

753e0dd54f28c4f7009b9c0b18a68aed175416bd8b7d134858264586eaac56f0

HTTP Headers

                                        GET /favicon1.ico HTTP/1.1
Host: www.surveymonkey.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.surveymonkey.com/r/75YKQJF
Connection: keep-alive
Cookie: _ga_JMDBBLT4C7=GS1.1.1654133888.1.0.1654133888.0; _ga=GA1.1.729600766.1654133888; ep201="33HeVUljMWKx8lNkKBwpfNtTQ00="; ep203="fOtIjVVdId65sJBOFGMjulPd9qg="; _splunk_rum_sid=%7B%22id%22%3A%22ea68da0036bddecc96a395dc416fad12%22%2C%22startTime%22%3A1679606993418%7D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        HTTP/2 302 Found
content-type: text/html
content-length: 138
location: https://prod.smassets.net/assets/static/images/surveymonkey/favicon.ico
date: Thu, 23 Mar 2023 21:29:44 GMT
server: nginx
referrer-policy: strict-origin-when-cross-origin
strict-transport-security: max-age=31536000; includeSubDomains
set-cookie: ep201="33HeVUljMWKx8lNkKBwpfNtTQ00="; Domain=.surveymonkey.com; expires=Thu, 23 Mar 2023 21:59:44 GMT; Path=/; SameSite=none; Secure
ep203="fOtIjVVdId65sJBOFGMjulPd9qg="; Domain=.surveymonkey.com; expires=Wed, 21 Jun 2023 21:29:44 GMT; HttpOnly; Path=/; SameSite=none; Secure
x-cache: Miss from cloudfront
via: 1.1 d9fb4c3794a085bb4ee2c5798c2cb1b8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 5NifLAJptgKcKJCu7l59wITRaHRLsMYIFQOr_ywYHQT16UT4qpan7g==
X-Firefox-Spdy: h2

URL HTTP/2

prod.smassets.net/assets/static/images/surveymonkey/favicon.ico
IP

54.230.111.36:0
ASN

#16509 AMAZON-02

Magic

MS Windows icon resource - 3 icons, 48x48, 32 bits/pixel, 32x32, 32 bits/pixel\012- data

Size

15086
Hash

a6067504c77a4b664f99053cc97b2d61

172d55c94e6034b72b1928ccd4af7e2a2ee37ad7

5966dc861723432715747cca5f811f4ddb7ca67314a76f447bb553973f10dcf8

HTTP Headers

                                        GET /assets/static/images/surveymonkey/favicon.ico HTTP/1.1
Host: prod.smassets.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.surveymonkey.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        HTTP/2 200 OK
content-type: image/x-icon
content-length: 15086
x-amz-id-2: JYmG6r0OYwOKfMx/5aTdJ0DBdiEaS9Fnf32EI3gnI033pLtWzP0gTHhkXH0s9JbhX5d3MsO1iB4=
x-amz-request-id: 8Y9SA9YCNET1264Z
date: Thu, 23 Mar 2023 00:31:28 GMT
x-amz-replication-status: COMPLETED
last-modified: Thu, 25 Nov 2021 02:04:03 GMT
etag: "a6067504c77a4b664f99053cc97b2d61"
x-amz-server-side-encryption: AES256
x-amz-version-id: Q3FsCPn41jLhSlXW67nFM3KaDllFKg5d
accept-ranges: bytes
server: AmazonS3
access-control-allow-origin: *
x-cache: Hit from cloudfront
via: 1.1 a2c3c8b833b34851dca4f7753ecaae58.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: mruPUktbB1IZ23K5ntZB_400T2k_jenmlRpOG_YwZCHKNYgAHfXKcg==
age: 75497
x-xss-protection: 1; mode=block
referrer-policy: strict-origin-when-cross-origin
content-security-policy: default-src https: data: blob: 'unsafe-eval' 'unsafe-inline' https://www.google.com https://www.gstatic.com https://www.recaptcha.net https://api.amplitude.com  wss://*.hotjar.com wss://*.qualified.com 'self'; upgrade-insecure-requests; frame-ancestors 'self' https://*.zendesk.com https://*.myshopify.com https://teams.microsoft.com https://*.eloqua.com https://*.surveymonkey.com https://*.sharepoint.com https://*.worldpay.com https://*.cardinalcommerce.com https://*.office.com https://*.office365.com https://*.microsoft365.com;report-uri https://csp.surveymonkey.com/report?e=true&c=prod&ar=true
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains
cache-control: max-age=441504000, public
X-Firefox-Spdy: h2

URL HTTP/1.1

r3.o.lencr.org/
IP

23.33.119.27:0
ASN

#20940 Akamai International B.V.

Magic

data

Size

503
Hash

a0d3d7099bbc5fed74a6e78e1a3096bf

96afaf8b3ac053577c56aca5f4a20d8655ecb771

c8ff32c6809a506d4c656d3200dbfc6682c156c3de0647d13ab8f07a6f9a38ba

HTTP Headers

                                        POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C8FF32C6809A506D4C656D3200DBFC6682C156C3DE0647D13AB8F07A6F9A38BA"
Last-Modified: Tue, 21 Mar 2023 15:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2912
Expires: Thu, 23 Mar 2023 22:18:17 GMT
Date: Thu, 23 Mar 2023 21:29:45 GMT
Connection: keep-alive

URL HTTP/1.1

r3.o.lencr.org/
IP

23.33.119.27:0
ASN

#20940 Akamai International B.V.

Magic

data

Size

503
Hash

a0d3d7099bbc5fed74a6e78e1a3096bf

96afaf8b3ac053577c56aca5f4a20d8655ecb771

c8ff32c6809a506d4c656d3200dbfc6682c156c3de0647d13ab8f07a6f9a38ba

HTTP Headers

                                        POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C8FF32C6809A506D4C656D3200DBFC6682C156C3DE0647D13AB8F07A6F9A38BA"
Last-Modified: Tue, 21 Mar 2023 15:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2912
Expires: Thu, 23 Mar 2023 22:18:17 GMT
Date: Thu, 23 Mar 2023 21:29:45 GMT
Connection: keep-alive

URL HTTP/1.1

r3.o.lencr.org/
IP

23.33.119.27:0
ASN

#20940 Akamai International B.V.

Magic

data

Size

503
Hash

a0d3d7099bbc5fed74a6e78e1a3096bf

96afaf8b3ac053577c56aca5f4a20d8655ecb771

c8ff32c6809a506d4c656d3200dbfc6682c156c3de0647d13ab8f07a6f9a38ba

HTTP Headers

                                        POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C8FF32C6809A506D4C656D3200DBFC6682C156C3DE0647D13AB8F07A6F9A38BA"
Last-Modified: Tue, 21 Mar 2023 15:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2912
Expires: Thu, 23 Mar 2023 22:18:17 GMT
Date: Thu, 23 Mar 2023 21:29:45 GMT
Connection: keep-alive

URL HTTP/1.1

ocsp.r2m01.amazontrust.com/
IP

54.230.80.227:0
ASN

#16509 AMAZON-02

Magic

data

Size

471
Hash

20366776f1b9cd41809af8b8c108166e

1c3d19b1ba5ddbca605d49c1c7e12deb908c6fe0

cad1eff8a297b6ecfc7b167b2e7ff2081ff9153c5b73e2374b0ef8d56a488658

HTTP Headers

                                        POST / HTTP/1.1
Host: ocsp.r2m01.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Thu, 23 Mar 2023 21:29:45 GMT
Last-Modified: Thu, 23 Mar 2023 21:04:13 GMT
Server: ECAcc (bsa/EB6C)
X-Cache: Miss from cloudfront
Via: 1.1 c26775cc34c23943f6f5cfc9a3da9b4a.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: xOz5gZU0xoxI0wVd6VP13ouAEaBCp_azdbNEjiK3mPvJtnfmJaBqTg==
Age: 1532

URL HTTP/2

img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc2f57fa6-bac5-42a3-be66-ebcc96d82ea2.jpeg
IP

34.120.237.76:0
ASN

#15169 GOOGLE

Magic

JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data

Size

10407
Hash

2062cf7a271d4ac7a04c0a746d443e07

3343851f2128c5f1fe4302c2aa53e8ce1fb661ac

e479263c1742d2597cf8948ef059b0bc97dbb97f47bb5cafee3d4af12069d2ce

HTTP Headers

                                        GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc2f57fa6-bac5-42a3-be66-ebcc96d82ea2.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        HTTP/2 200 OK
server: nginx
content-length: 10407
x-amzn-requestid: 87aba2e6-d7e8-4456-a12f-e05ac556b839
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: CJqJhGnXIAMF1yA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-641a23d6-2b6c3d62366f47f506ce8415;Sampled=0
x-amzn-remapped-date: Tue, 21 Mar 2023 21:38:30 GMT
x-amz-cf-pop: SEA19-C1
x-cache: Hit from cloudfront
x-amz-cf-id: lKww3e9Hvk0r0LPn7u6pu6Fx9V8RThNVxQEdyWVFAQdOun-53X-tLw==
via: 1.1 b3cdce1c2fc39b89f45c98c417351f26.cloudfront.net (CloudFront), 1.1 aa623e134417515bd2496cb01d5e5626.cloudfront.net (CloudFront), 1.1 google
date: Wed, 22 Mar 2023 21:49:35 GMT
age: 85210
etag: "3343851f2128c5f1fe4302c2aa53e8ce1fb661ac"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

URL HTTP/2

img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F00ac1765-db6c-42e3-99bf-d857d27a34b9.jpeg
IP

34.120.237.76:0
ASN

#15169 GOOGLE

Magic

JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data

Size

5556
Hash

c831201ad81f55c63c1b101ce854a810

0e9b952f6489f0a5f4862d3bea2fbe0ecdd379e5

c854489720d2ca4a95eef00addda0fcdaf481402d044df7725282654a97eb54a

HTTP Headers

                                        GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F00ac1765-db6c-42e3-99bf-d857d27a34b9.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        HTTP/2 200 OK
server: nginx
content-length: 5556
x-amzn-requestid: 6b050645-14aa-47f7-b4a5-2e27abbe5115
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: CM69eHE3IAMF0Yw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-641b71ef-6ab2948e2bf2578f29798372;Sampled=0
x-amzn-remapped-date: Wed, 22 Mar 2023 21:23:59 GMT
x-amz-cf-pop: SEA19-C1
x-cache: Hit from cloudfront
x-amz-cf-id: CgU9j02Bnw0UdIwQ3sRCDvJoPitHIAUTRDhLH_PMXYlAPoAwSbv6Iw==
via: 1.1 2dc111aa3ead15d061e41a423155a53a.cloudfront.net (CloudFront), 1.1 4d8620b80ebe37d366388e117039aa8e.cloudfront.net (CloudFront), 1.1 google
date: Thu, 23 Mar 2023 05:35:55 GMT
age: 57230
etag: "0e9b952f6489f0a5f4862d3bea2fbe0ecdd379e5"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

URL HTTP/2

img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F08561a1f-1d19-45db-be98-107d6b1ed25d.jpeg
IP

34.120.237.76:0
ASN

#15169 GOOGLE

Magic

JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data

Size

10480
Hash

6f0b9e85381489dcf646c251722b21d4

5f7ea91288a2170bcabdca6be296718c4191eacd

911f803271ad9053ebac3787bdde9b75ec604acc6aa28692cc8e4c5c4fb61483

HTTP Headers

                                        GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F08561a1f-1d19-45db-be98-107d6b1ed25d.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        HTTP/2 200 OK
server: nginx
content-length: 10480
x-amzn-requestid: 58aa8272-4b4e-4a2f-9d6e-d47f70891c49
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: CJptHG7JoAMFSwA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-641a2320-2fd6502b1271d5c13b4ebbe9;Sampled=0
x-amzn-remapped-date: Tue, 21 Mar 2023 21:35:28 GMT
x-amz-cf-pop: SEA19-C1, SEA19-C3
x-cache: Hit from cloudfront
x-amz-cf-id: pFCYGtd2b7lK7OBFHjCsgqqLfhtMAQDB0vyYFyf1sv-3CkSHbEh3mA==
via: 1.1 2241406ac19fffc8f35d6ddef8e22f56.cloudfront.net (CloudFront), 1.1 4c48e9fb20d53d40e9fe273dbdae1098.cloudfront.net (CloudFront), 1.1 google
date: Wed, 22 Mar 2023 21:59:52 GMT
age: 84593
etag: "5f7ea91288a2170bcabdca6be296718c4191eacd"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

URL HTTP/2

img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F22c3f36a-d800-4eab-8a32-e2b5ef86e386.jpeg
IP

34.120.237.76:0
ASN

#15169 GOOGLE

Magic

JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data

Size

9459
Hash

412bd6aea60211324e649d7d920601d2

a813976bda850a584b5ab94d9a70bfe0da69aca0

d36ef17fc6ab3cd4e5e43836f7df2c6fdf1781f1bac73e42c9a09e8594f797f9

HTTP Headers

                                        GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F22c3f36a-d800-4eab-8a32-e2b5ef86e386.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        HTTP/2 200 OK
server: nginx
content-length: 9459
x-amzn-requestid: 1b374321-f2df-404f-ab91-4e73d830fac9
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: CJqmAEhHoAMFgRQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-641a248c-217d81154ecfe0c44ca70432;Sampled=0
x-amzn-remapped-date: Tue, 21 Mar 2023 21:41:32 GMT
x-amz-cf-pop: SEA19-C1, SEA19-C3
x-cache: Hit from cloudfront
x-amz-cf-id: pvFey5NWlIqIXlHLMYSUiylATCU1ZxodOb6imsPCxrJDRscwky8dVQ==
via: 1.1 8ae6af4d17aae7471e5fe2792eb6abcc.cloudfront.net (CloudFront), 1.1 6ca7826fb0f4c565b1af9c7737725c48.cloudfront.net (CloudFront), 1.1 google
date: Wed, 22 Mar 2023 21:48:27 GMT
age: 85278
etag: "a813976bda850a584b5ab94d9a70bfe0da69aca0"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

URL HTTP/2

img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5be1b286-007a-44a5-a6fd-872190ecfa0b.jpeg
IP

34.120.237.76:0
ASN

#15169 GOOGLE

Magic

JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data

Size

6692
Hash

c05bfdf1411a931d8ea9adc64b07bc74

156ef59e53564a4f2b27002b2695fafecd578d82

15d17c0df2d2b0625ecf5f576a7ff630ae8b923b28be354ad23aec6a284a801a

HTTP Headers

                                        GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5be1b286-007a-44a5-a6fd-872190ecfa0b.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        HTTP/2 200 OK
server: nginx
content-length: 6692
x-amzn-requestid: 3a0f6a8d-89b1-43f4-8a15-8749bdbc047b
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: CM9d9FcOoAMFaFQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-641b75f2-3540256d6be3d4f85bba65ea;Sampled=0
x-amzn-remapped-date: Wed, 22 Mar 2023 21:41:06 GMT
x-amz-cf-pop: SEA19-C1
x-cache: Hit from cloudfront
x-amz-cf-id: Jj5lAwItWYm45j5kLqQnd3fhsiGsiuSiSVtrBUOolyHvPAmCc0S71A==
via: 1.1 e92cc925fc8895560cd0628c67f58828.cloudfront.net (CloudFront), 1.1 b23fb37cd7fff033ab21e3284f558a28.cloudfront.net (CloudFront), 1.1 google
date: Thu, 23 Mar 2023 07:54:24 GMT
age: 48921
etag: "156ef59e53564a4f2b27002b2695fafecd578d82"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

URL HTTP/2

pixel-library.pmg.com/alli-lib
IP

54.230.111.27:0
ASN

#16509 AMAZON-02

Magic

data

Size

10384
Hash

ea56a4e9d61e35088c3a63b248ced377

f335be6755985d281b056c0269637cfaf7651d0f

712f48251496620ad2015696f136e45d8a9349c88c79c3000e9b3bb1c8e7d253

HTTP Headers

                                        GET /alli-lib HTTP/1.1
Host: pixel-library.pmg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.surveymonkey.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        HTTP/2 200 OK
content-type: application/javascript
last-modified: Thu, 19 Jan 2023 15:01:10 GMT
server: AmazonS3
content-encoding: gzip
date: Thu, 23 Mar 2023 20:57:19 GMT
etag: W/"e61a3d72fb0798893173918fad7cdcc9"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 5916f6b8d469d1bee1e905ff13761ebc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: SYFn08nCcZkcPPpl4s5eW73wYygBGb8SA4H9IsD0DkuDNW_hhk63kw==
age: 1946
X-Firefox-Spdy: h2

URL HTTP/2

alli-gateway.surveymonkey.com/pixel?pid=&event=init
IP

3.216.131.38:0
ASN

#14618 AMAZON-AES

Magic

GIF image data, version 89a, 1 x 1\012- data

Size

43
Hash

57f187c7a868faeac558007a8eb6cb2e

11ab10ab109fdb53d91d444ac781101f5a6360c6

aa03dc59bdca72631d2301e4297cfa030bd31b907dc138e7b973d12311c90a22

HTTP Headers

                                        GET /pixel?pid=&event=init HTTP/1.1
Host: alli-gateway.surveymonkey.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.surveymonkey.com/
Connection: keep-alive
Cookie: _ga_JMDBBLT4C7=GS1.1.1654133888.1.0.1654133888.0; _ga=GA1.1.729600766.1654133888; ep201="33HeVUljMWKx8lNkKBwpfNtTQ00="; ep203="fOtIjVVdId65sJBOFGMjulPd9qg="
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site

                                        HTTP/2 200 OK
date: Thu, 23 Mar 2023 21:29:45 GMT
content-type: image/gif
content-length: 43
apigw-requestid: CQOvfjvHoAMESnA=
X-Firefox-Spdy: h2

URL HTTP/1.1

ocsp.godaddy.com/
IP

192.124.249.22:0
ASN

#30148 SUCURI-SEC

Magic

data

Size

1778
Hash

14f28938fccd0af263c711ba6f75c233

eea3a89569952e68c7194381e95f019b5d1e9d1a

68860af6bed98018379ba39fbb0b2bdfb66cd773319022779cba1dea4656b581

HTTP Headers

                                        POST / HTTP/1.1
Host: ocsp.godaddy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 76
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/1.1 200 OK
Server: Sucuri/Cloudproxy
Date: Thu, 23 Mar 2023 21:29:49 GMT
Content-Type: application/ocsp-response
Content-Length: 1778
Connection: keep-alive
X-Sucuri-ID: 19022
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Thu, 23 Mar 2023 21:04:38 GMT
Expires: Fri, 24 Mar 2023 21:04:38 GMT
ETag: "eea3a89569952e68c7194381e95f019b5d1e9d1a"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"

URL HTTP/2

rum-ingest.us1.signalfx.com/v1/rum?auth=zc0197kWHeYhZNXuPUlB5w
IP

35.80.235.91:0
ASN

#16509 AMAZON-02

Magic

ASCII text, with no line terminators

Size

4
Hash

5b3abf9c1aa7556c3a36fea4e695c5d2

3fd967d09a748e1f2b26d6fe562e7155aa87e9de

98c4922bb641c65c7a30b7bcafdf230b9b00b6693631c56146ab25b2786ee4a3

HTTP Headers

                                        POST /v1/rum?auth=zc0197kWHeYhZNXuPUlB5w HTTP/1.1
Host: rum-ingest.us1.signalfx.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.surveymonkey.com/
Content-Type: text/plain;charset=UTF-8
Content-Length: 24606
Origin: https://www.surveymonkey.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        HTTP/2 200 OK
access-control-allow-origin: https://www.surveymonkey.com
content-type: application/json; charset=UTF-8
x-debug-id: 7800233265716228226
x-id: gdi-rum-674f4f6c76-xv9wc
date: Thu, 23 Mar 2023 21:29:50 GMT
content-length: 4
x-envoy-upstream-service-time: 2
server: istio-envoy
X-Firefox-Spdy: h2

URL HTTP/2

fonts.googleapis.com/earlyaccess/notosansjp.css
IP

142.250.74.74:0
ASN

#15169 GOOGLE

Magic

Size

0
Hash

HTTP Headers

                                        GET /earlyaccess/notosansjp.css HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.surveymonkey.com/
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Thu, 23 Mar 2023 21:29:43 GMT
date: Thu, 23 Mar 2023 21:29:43 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

URL HTTP/2

prod.smassets.net/assets/responseweb/responseweb-version-bundle-min.72993a8f.css
IP

54.230.111.36:0
ASN

#16509 AMAZON-02

Magic

Size

0
Hash

HTTP Headers

                                        GET /assets/responseweb/responseweb-version-bundle-min.72993a8f.css HTTP/1.1
Host: prod.smassets.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.surveymonkey.com/
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        HTTP/2 200 OK
content-type: text/css
x-amz-id-2: QHf1HykoL1+IqXYmnKD/I/SGCIs9YGItsUjwPLLy7h/n3apzoFlaPNCKMO691Xy1jZmIdcAr9Ok=
x-amz-request-id: E29TDV2CQCZM5P7J
x-amz-replication-status: COMPLETED
last-modified: Thu, 09 Mar 2023 19:29:14 GMT
x-amz-server-side-encryption: AES256
x-amz-version-id: Q2KDLHLUw2PgiWEFC.G1LTmjSXhvHMT7
server: AmazonS3
access-control-allow-origin: *
content-encoding: br
date: Thu, 23 Mar 2023 01:43:56 GMT
etag: W/"72993a8f5da8c699520b7b397c6e84f8"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 a2c3c8b833b34851dca4f7753ecaae58.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: r37ErboTJ3UgsNSC4yhMS84ayAZ9PMdAjMuKYwlBW5g6d7qOwcm_QQ==
age: 76108
x-xss-protection: 1; mode=block
referrer-policy: strict-origin-when-cross-origin
content-security-policy: default-src https: data: blob: 'unsafe-eval' 'unsafe-inline' https://www.google.com https://www.gstatic.com https://www.recaptcha.net https://api.amplitude.com  wss://*.hotjar.com wss://*.qualified.com 'self'; upgrade-insecure-requests; frame-ancestors 'self' https://*.zendesk.com https://*.myshopify.com https://teams.microsoft.com https://*.eloqua.com https://*.surveymonkey.com https://*.sharepoint.com https://*.worldpay.com https://*.cardinalcommerce.com https://*.office.com https://*.office365.com https://*.microsoft365.com;report-uri https://csp.surveymonkey.com/report?e=true&c=prod&ar=true
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains
cache-control: max-age=7884000, public
X-Firefox-Spdy: h2

URL HTTP/2

prod.smassets.net/assets/responseweb/responseweb-jquery-bundle-min.91443e27.js
IP

54.230.111.36:0
ASN

#16509 AMAZON-02

Magic

Size

0
Hash

HTTP Headers

                                        GET /assets/responseweb/responseweb-jquery-bundle-min.91443e27.js HTTP/1.1
Host: prod.smassets.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.surveymonkey.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        HTTP/2 200 OK
content-type: application/javascript
x-amz-id-2: KKW/XlIhSx3XKB4gtITUWnj46pAMQufcqKgQcaoF18GLE2qziJM9iPFJ+um6rIa7NOhT2fWsXFg=
x-amz-request-id: APJ3CGCZC2RZVYHH
x-amz-replication-status: COMPLETED
last-modified: Thu, 09 Mar 2023 19:29:48 GMT
x-amz-server-side-encryption: AES256
x-amz-version-id: hyoOVVH45CpY9yEjaan2.l9G6yQYfX4e
server: AmazonS3
access-control-allow-origin: *
content-encoding: br
date: Thu, 23 Mar 2023 01:25:04 GMT
etag: W/"91443e27e5f8bce4310d5ee9680cab3d"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 a2c3c8b833b34851dca4f7753ecaae58.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: Ivk4ELb7PnDpSfymq_6hL1yCKD2MTqsx82oMa2AgY36BZ4hIzJedMA==
age: 72994
x-xss-protection: 1; mode=block
referrer-policy: strict-origin-when-cross-origin
content-security-policy: default-src https: data: blob: 'unsafe-eval' 'unsafe-inline' https://www.google.com https://www.gstatic.com https://www.recaptcha.net https://api.amplitude.com  wss://*.hotjar.com wss://*.qualified.com 'self'; upgrade-insecure-requests; frame-ancestors 'self' https://*.zendesk.com https://*.myshopify.com https://teams.microsoft.com https://*.eloqua.com https://*.surveymonkey.com https://*.sharepoint.com https://*.worldpay.com https://*.cardinalcommerce.com https://*.office.com https://*.office365.com https://*.microsoft365.com;report-uri https://csp.surveymonkey.com/report?e=true&c=prod&ar=true
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains
cache-control: max-age=7884000, public
X-Firefox-Spdy: h2

URL HTTP/2

cdn.signalfx.com/o11y-gdi-rum/latest/splunk-otel-web.js
IP

54.230.111.17:0
ASN

#16509 AMAZON-02

Magic

Size

0
Hash

HTTP Headers

                                        GET /o11y-gdi-rum/latest/splunk-otel-web.js HTTP/1.1
Host: cdn.signalfx.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.surveymonkey.com/
Origin: https://www.surveymonkey.com
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        HTTP/2 200 OK
content-type: application/javascript
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-max-age: 3000
last-modified: Wed, 11 Jan 2023 12:50:19 GMT
x-amz-server-side-encryption: AES256
server: AmazonS3
content-encoding: gzip
date: Thu, 23 Mar 2023 21:08:41 GMT
cache-control: max-age=3600
etag: W/"930f1bc3802a070e5d8cdd0e8cc223e8"
vary: Accept-Encoding,Origin,Access-Control-Request-Headers,Access-Control-Request-Method
x-cache: Hit from cloudfront
via: 1.1 5916f6b8d469d1bee1e905ff13761ebc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: uizsPdwr1jdIvCRngTTWeOIeKi8RZ3STX8EQ6mnIRPv-YCAB7WKX2A==
age: 1266
X-Firefox-Spdy: h2

URL HTTP/2

fonts.googleapis.com/css?family=Roboto:300,400,700|Merriweather:300,400,700|Montserrat:400,700|Lato:300,400,700|Open+Sans:300,400,600,700|Droid+Serif:400,700
IP

142.250.74.74:0
ASN

#15169 GOOGLE

Magic

Size

0
Hash

HTTP Headers

                                        GET /css?family=Roboto:300,400,700|Merriweather:300,400,700|Montserrat:400,700|Lato:300,400,700|Open+Sans:300,400,600,700|Droid+Serif:400,700 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.surveymonkey.com/
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Thu, 23 Mar 2023 21:29:43 GMT
date: Thu, 23 Mar 2023 21:29:43 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

URL HTTP/2

prod.smassets.net/assets/responseweb/responseweb-ui_bundle-bundle-min.a165823c.js
IP

54.230.111.36:0
ASN

#16509 AMAZON-02

Magic

Size

0
Hash

HTTP Headers

                                        GET /assets/responseweb/responseweb-ui_bundle-bundle-min.a165823c.js HTTP/1.1
Host: prod.smassets.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.surveymonkey.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        HTTP/2 200 OK
content-type: application/javascript
x-amz-id-2: 0PY648K+kTZyJREHAGTKtc2sdmL3JWXt3ICqmrjw/JGR9VpfKRlYs4dwwYp1nv2FsmXLXDNqKkc8esmrmbZasg==
x-amz-request-id: H1KSTD9YQYF9AZRQ
x-amz-replication-status: COMPLETED
last-modified: Thu, 09 Mar 2023 19:29:49 GMT
x-amz-server-side-encryption: AES256
x-amz-version-id: wELehrfxz608fW2rnh863dNbpZ2QSkQn
server: AmazonS3
access-control-allow-origin: *
content-encoding: br
date: Thu, 23 Mar 2023 00:08:21 GMT
etag: W/"a165823ce19e210d098673cd3a500be3"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 a2c3c8b833b34851dca4f7753ecaae58.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: tF72EEcizI5uOo1XW9djZ31R9LNjRN_V_nuMO2yonnSYxuWdg7aU2Q==
age: 76883
x-xss-protection: 1; mode=block
referrer-policy: strict-origin-when-cross-origin
content-security-policy: default-src https: data: blob: 'unsafe-eval' 'unsafe-inline' https://www.google.com https://www.gstatic.com https://www.recaptcha.net https://api.amplitude.com  wss://*.hotjar.com wss://*.qualified.com 'self'; upgrade-insecure-requests; frame-ancestors 'self' https://*.zendesk.com https://*.myshopify.com https://teams.microsoft.com https://*.eloqua.com https://*.surveymonkey.com https://*.sharepoint.com https://*.worldpay.com https://*.cardinalcommerce.com https://*.office.com https://*.office365.com https://*.microsoft365.com;report-uri https://csp.surveymonkey.com/report?e=true&c=prod&ar=true
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains
cache-control: max-age=7884000, public
X-Firefox-Spdy: h2

URL HTTP/2

prod.smassets.net/assets/responseweb/smlib.surveytemplates-survey_page-bundle-min.c64137b3.css
IP

54.230.111.36:0
ASN

#16509 AMAZON-02

Magic

Size

0
Hash

HTTP Headers

                                        GET /assets/responseweb/smlib.surveytemplates-survey_page-bundle-min.c64137b3.css HTTP/1.1
Host: prod.smassets.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.surveymonkey.com/
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        HTTP/2 200 OK
content-type: text/css
x-amz-id-2: 1VOjhP3UXYOpIZ+5EXOLi6DWdzExYa14r9EubHTCfKqBtxkyw3U4+PGGBLwvUKwqmH/8ijo4Pyg=
x-amz-request-id: JV8318R2CTZCMNTE
x-amz-replication-status: COMPLETED
last-modified: Thu, 09 Mar 2023 19:29:34 GMT
x-amz-server-side-encryption: AES256
x-amz-version-id: 9j_W6olZCXQIkdDHfmYM0zpdgXXZavWH
server: AmazonS3
access-control-allow-origin: *
content-encoding: gzip
date: Thu, 23 Mar 2023 03:25:03 GMT
etag: W/"c64137b340e1495b7683b4de78748345"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 a2c3c8b833b34851dca4f7753ecaae58.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 75kZuAoAFfyCjipeCJVMbvpv64dHQGN3r3Tizvxfh2dNY5a5yqcjBA==
age: 65337
x-xss-protection: 1; mode=block
referrer-policy: strict-origin-when-cross-origin
content-security-policy: default-src https: data: blob: 'unsafe-eval' 'unsafe-inline' https://www.google.com https://www.gstatic.com https://www.recaptcha.net https://api.amplitude.com  wss://*.hotjar.com wss://*.qualified.com 'self'; upgrade-insecure-requests; frame-ancestors 'self' https://*.zendesk.com https://*.myshopify.com https://teams.microsoft.com https://*.eloqua.com https://*.surveymonkey.com https://*.sharepoint.com https://*.worldpay.com https://*.cardinalcommerce.com https://*.office.com https://*.office365.com https://*.microsoft365.com;report-uri https://csp.surveymonkey.com/report?e=true&c=prod&ar=true
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains
cache-control: max-age=7884000, public
X-Firefox-Spdy: h2

URL HTTP/2

www.surveymonkey.com/r/75YKQJF
IP

54.230.111.102:0
ASN

#16509 AMAZON-02

Magic

Size

0
Hash

HTTP Headers

                                        GET /r/75YKQJF HTTP/1.1
Host: www.surveymonkey.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: _ga_JMDBBLT4C7=GS1.1.1654133888.1.0.1654133888.0; _ga=GA1.1.729600766.1654133888
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1

                                        HTTP/2 200 OK
content-type: text/html; charset=UTF-8
date: Thu, 23 Mar 2023 21:29:43 GMT
server: nginx
vary: Accept-Encoding, Accept-Encoding
x-nginx-pool-override-enabled: 1
p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
set-cookie: ep201="33HeVUljMWKx8lNkKBwpfNtTQ00="; Domain=.surveymonkey.com; expires=Thu, 23 Mar 2023 21:59:43 GMT; Path=/; SameSite=none; Secure
ep203="fOtIjVVdId65sJBOFGMjulPd9qg="; Domain=.surveymonkey.com; expires=Wed, 21 Jun 2023 21:29:43 GMT; HttpOnly; Path=/; SameSite=none; Secure
sl_notranslate: 1
pragma: no-cache
sm-request-id: TfBIxqpeguKXuFIpjLQuQKEV5P_72fZrSxGwaKP8uMFIc4IzAmVfuA==
rexr-request: current:ba9a8254f4f591fa2c324ba9c45e8cbf:1679606983.056:182
content-security-policy-report-only: default-src https: data: blob: 'unsafe-eval' 'unsafe-inline' https://www.google.com https://www.gstatic.com https://www.recaptcha.net https://api.amplitude.com  wss://*.hotjar.com wss://*.qualified.com 'self'; report-uri https://csp.surveymonkey.com/report?e=false&c=prod&ar=true&a=rexrouterapp
content-security-policy: default-src https: data: blob: 'unsafe-eval' 'unsafe-inline' https://www.google.com https://www.gstatic.com https://www.recaptcha.net https://api.amplitude.com  wss://*.hotjar.com wss://*.qualified.com 'self'; img-src https: http: data: blob: 'self'; script-src https: 'unsafe-eval' 'unsafe-inline' http://www.google-analytics.com http://ajax.googleapis.com http://bat.bing.com http://static.hotjar.com http://www.googleadservices.com 'self'; style-src https: 'unsafe-inline' http://resources.monkeytest1.com 'self';report-uri https://csp.surveymonkey.com/report?e=true&c=prod&ar=true&a=rexrouterapp
x-xss-protection: 1;report=https://csp.surveymonkey.com/report?e=false&c=prod&ar=true
x-content-type-options: nosniff
cache-control: private, no-store, no-cache, must-revalidate, post-check=0, pre-check=0, max-age=0
referrer-policy: strict-origin-when-cross-origin
strict-transport-security: max-age=31536000; includeSubDomains
content-encoding: gzip
x-cache: Miss from cloudfront
via: 1.1 d9fb4c3794a085bb4ee2c5798c2cb1b8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: TfBIxqpeguKXuFIpjLQuQKEV5P_72fZrSxGwaKP8uMFIc4IzAmVfuA==
X-Firefox-Spdy: h2

URL HTTP/2

prod.smassets.net/assets/responseweb/responseweb-responsewebPkgs_hybrid-bundle-min.02a64f8e.js
IP

54.230.111.36:0
ASN

#16509 AMAZON-02

Magic

Size

0
Hash

HTTP Headers

                                        GET /assets/responseweb/responseweb-responsewebPkgs_hybrid-bundle-min.02a64f8e.js HTTP/1.1
Host: prod.smassets.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.surveymonkey.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        HTTP/2 200 OK
content-type: application/javascript
x-amz-id-2: kpiDFzEeruMgpQlWQHj/xUqws5R4oN+lKKqFRGab1EGCzS9gQrvs91WknaDyG6DIaI5uLjze7ns=
x-amz-request-id: BW3HN7MHHA3GE30W
x-amz-replication-status: COMPLETED
last-modified: Thu, 09 Mar 2023 19:29:49 GMT
x-amz-server-side-encryption: AES256
x-amz-version-id: PQZIGNNtMN1vhjQqhAaP56oOxREiUdwr
server: AmazonS3
access-control-allow-origin: *
content-encoding: gzip
date: Thu, 23 Mar 2023 13:21:53 GMT
etag: W/"02a64f8edc198cd700ad6e53370e6c36"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 a2c3c8b833b34851dca4f7753ecaae58.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: JTGyngdVY6IjxnLKcUmFVikUBLCM_P6rk4ShKgZGmhE7HhKdovnJkg==
age: 29288
x-xss-protection: 1; mode=block
referrer-policy: strict-origin-when-cross-origin
content-security-policy: default-src https: data: blob: 'unsafe-eval' 'unsafe-inline' https://www.google.com https://www.gstatic.com https://www.recaptcha.net https://api.amplitude.com  wss://*.hotjar.com wss://*.qualified.com 'self'; upgrade-insecure-requests; frame-ancestors 'self' https://*.zendesk.com https://*.myshopify.com https://teams.microsoft.com https://*.eloqua.com https://*.surveymonkey.com https://*.sharepoint.com https://*.worldpay.com https://*.cardinalcommerce.com https://*.office.com https://*.office365.com https://*.microsoft365.com;report-uri https://csp.surveymonkey.com/report?e=true&c=prod&ar=true
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains
cache-control: max-age=7884000, public
X-Firefox-Spdy: h2

URL HTTP/2

prod.smassets.net/assets/responseweb/smlib.surveytemplates-sm-react-bundle-min.26c50983.js
IP

54.230.111.36:0
ASN

#16509 AMAZON-02

Magic

Size

0
Hash

HTTP Headers

                                        GET /assets/responseweb/smlib.surveytemplates-sm-react-bundle-min.26c50983.js HTTP/1.1
Host: prod.smassets.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.surveymonkey.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        HTTP/2 200 OK
content-type: application/javascript
x-amz-id-2: u/5ptB98+MCVgHQr/WiG255dQIpmasb1CQXywK4eXlxg/akm0zlMhSRwyi8Slp8fmuhmxjTc79E=
x-amz-request-id: 8MGP8QKKVXW5QT88
x-amz-replication-status: COMPLETED
last-modified: Thu, 09 Mar 2023 19:29:24 GMT
x-amz-server-side-encryption: AES256
x-amz-version-id: MonsiOP4BaBS0ZxWeJ5THReFlZeXadZq
server: AmazonS3
access-control-allow-origin: *
content-encoding: gzip
date: Thu, 23 Mar 2023 09:46:19 GMT
etag: W/"26c509839fa900588f536046d6cb0d53"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 a2c3c8b833b34851dca4f7753ecaae58.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: xb4uZGAK6HOOCc4iSP9ajgtF2RIUyc2WKoR0HA1DKNDmT9ThjYCHJA==
age: 42226
x-xss-protection: 1; mode=block
referrer-policy: strict-origin-when-cross-origin
content-security-policy: default-src https: data: blob: 'unsafe-eval' 'unsafe-inline' https://www.google.com https://www.gstatic.com https://www.recaptcha.net https://api.amplitude.com  wss://*.hotjar.com wss://*.qualified.com 'self'; upgrade-insecure-requests; frame-ancestors 'self' https://*.zendesk.com https://*.myshopify.com https://teams.microsoft.com https://*.eloqua.com https://*.surveymonkey.com https://*.sharepoint.com https://*.worldpay.com https://*.cardinalcommerce.com https://*.office.com https://*.office365.com https://*.microsoft365.com;report-uri https://csp.surveymonkey.com/report?e=true&c=prod&ar=true
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains
cache-control: max-age=7884000, public
X-Firefox-Spdy: h2

URL HTTP/2

prod.smassets.net/assets/responseweb/responseweb-responsewebPkgs-bundle-min.fa300a81.css
IP

54.230.111.36:0
ASN

#16509 AMAZON-02

Magic

Size

0
Hash

HTTP Headers

                                        GET /assets/responseweb/responseweb-responsewebPkgs-bundle-min.fa300a81.css HTTP/1.1
Host: prod.smassets.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.surveymonkey.com/
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        HTTP/2 200 OK
content-type: text/css
x-amz-id-2: kiTBrKPJnC1y2VXW8F2C7wCsaIklYy4SR+0aAE5KHnzJx2qvZT7xJOY4pp6P+HVSYqu94zRwxLo=
x-amz-request-id: 8AKC1F154EMR0H6E
x-amz-replication-status: COMPLETED
last-modified: Tue, 28 Feb 2023 18:48:08 GMT
x-amz-server-side-encryption: AES256
x-amz-version-id: IinCczmVOB2d5CNq3gdk7yoeKABGvO4H
server: AmazonS3
access-control-allow-origin: *
content-encoding: br
date: Thu, 23 Mar 2023 16:27:49 GMT
etag: W/"fa300a811c0152bdfd7e119c2b34fa9b"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 a2c3c8b833b34851dca4f7753ecaae58.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: ByBtZccu7UO1r8pCWm137UfUJU8YYCrKJ2tFY7YjnITbptT9v-SNBg==
age: 18115
x-xss-protection: 1; mode=block
referrer-policy: strict-origin-when-cross-origin
content-security-policy: default-src https: data: blob: 'unsafe-eval' 'unsafe-inline' https://www.google.com https://www.gstatic.com https://www.recaptcha.net https://api.amplitude.com  wss://*.hotjar.com wss://*.qualified.com 'self'; upgrade-insecure-requests; frame-ancestors 'self' https://*.zendesk.com https://*.myshopify.com https://teams.microsoft.com https://*.eloqua.com https://*.surveymonkey.com https://*.sharepoint.com https://*.worldpay.com https://*.cardinalcommerce.com https://*.office.com https://*.office365.com https://*.microsoft365.com;report-uri https://csp.surveymonkey.com/report?e=true&c=prod&ar=true
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains
cache-control: max-age=7884000, public
X-Firefox-Spdy: h2

URL HTTP/2

prod.smassets.net/assets/responseweb/responseweb-base-bundle-min.31f3af80.css
IP

54.230.111.36:0
ASN

#16509 AMAZON-02

Magic

Size

0
Hash

HTTP Headers

                                        GET /assets/responseweb/responseweb-base-bundle-min.31f3af80.css HTTP/1.1
Host: prod.smassets.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.surveymonkey.com/
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        HTTP/2 200 OK
content-type: text/css
x-amz-id-2: ZhoYDoJOYrvM4D7Ba0wB6rUGwKp1pgLE4gYBODp/W0lAoOb8rc6cEUNe0+b3ZpelRrn9IEze7gdz55R6y0a1NQ==
x-amz-request-id: GEC1837NKCRW4N94
x-amz-replication-status: COMPLETED
last-modified: Thu, 09 Mar 2023 19:29:50 GMT
x-amz-server-side-encryption: AES256
x-amz-version-id: 5lRXa5xmyknqvfdLDKtXJEoNLUsDudB4
server: AmazonS3
access-control-allow-origin: *
content-encoding: br
date: Thu, 23 Mar 2023 01:25:56 GMT
etag: W/"31f3af80e24405d41961d693c2285488"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 a2c3c8b833b34851dca4f7753ecaae58.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: UIbU6murO17UQIT9JD7R5R38zuY2ckVUTi0-5W-HYJml4bmn8UBBXg==
age: 74910
x-xss-protection: 1; mode=block
referrer-policy: strict-origin-when-cross-origin
content-security-policy: default-src https: data: blob: 'unsafe-eval' 'unsafe-inline' https://www.google.com https://www.gstatic.com https://www.recaptcha.net https://api.amplitude.com  wss://*.hotjar.com wss://*.qualified.com 'self'; upgrade-insecure-requests; frame-ancestors 'self' https://*.zendesk.com https://*.myshopify.com https://teams.microsoft.com https://*.eloqua.com https://*.surveymonkey.com https://*.sharepoint.com https://*.worldpay.com https://*.cardinalcommerce.com https://*.office.com https://*.office365.com https://*.microsoft365.com;report-uri https://csp.surveymonkey.com/report?e=true&c=prod&ar=true
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains
cache-control: max-age=7884000, public
X-Firefox-Spdy: h2

URL HTTP/2

prod.smassets.net/assets/responseweb/smlib.surveytemplates/4.3.63/assets/sm_logo_footer.svg
IP

54.230.111.36:0
ASN

#16509 AMAZON-02

Magic

Size

0
Hash

HTTP Headers

                                        GET /assets/responseweb/smlib.surveytemplates/4.3.63/assets/sm_logo_footer.svg HTTP/1.1
Host: prod.smassets.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.surveymonkey.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        HTTP/2 200 OK
content-type: image/svg+xml
x-amz-id-2: uWe00Z6itFJTNgCUeLC8W6ufydqyRq++En33K6+MnnUL3xZTCazuYqikCVX0rtiQ3CNelCWmm9w=
x-amz-request-id: 70BT4V9M6GHQJB4D
x-amz-replication-status: COMPLETED
last-modified: Thu, 09 Mar 2023 19:29:16 GMT
x-amz-server-side-encryption: AES256
x-amz-version-id: mivom8199sPb_t5gl6OwI2_CUu60MyCk
server: AmazonS3
access-control-allow-origin: *
content-encoding: br
date: Thu, 23 Mar 2023 00:22:24 GMT
etag: W/"93383a58dff6cb7fd2eeae02aae1d46e"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 a2c3c8b833b34851dca4f7753ecaae58.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: kNqQ14emQmdE0IN5AhP9tvW_LVyxmcmyn7qANs53oKZHtQiIQW0U9Q==
age: 76039
x-xss-protection: 1; mode=block
referrer-policy: strict-origin-when-cross-origin
content-security-policy: default-src https: data: blob: 'unsafe-eval' 'unsafe-inline' https://www.google.com https://www.gstatic.com https://www.recaptcha.net https://api.amplitude.com  wss://*.hotjar.com wss://*.qualified.com 'self'; upgrade-insecure-requests; frame-ancestors 'self' https://*.zendesk.com https://*.myshopify.com https://teams.microsoft.com https://*.eloqua.com https://*.surveymonkey.com https://*.sharepoint.com https://*.worldpay.com https://*.cardinalcommerce.com https://*.office.com https://*.office365.com https://*.microsoft365.com;report-uri https://csp.surveymonkey.com/report?e=true&c=prod&ar=true
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains
cache-control: max-age=7884000, public
X-Firefox-Spdy: h2

URL HTTP/2

cdn.smassets.net/assets/wds/4_20_2/wds-react/wds-react.min.css
IP

54.230.111.36:0
ASN

#16509 AMAZON-02

Magic

Size

0
Hash

HTTP Headers

                                        GET /assets/wds/4_20_2/wds-react/wds-react.min.css HTTP/1.1
Host: cdn.smassets.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.surveymonkey.com/
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        HTTP/2 200 OK
content-type: text/css
x-amz-id-2: NLc/XXKU+6TKQ8znNcTfrN+7JojFgzL1Zzp3CWPyRvFOwAnrajZSGEthO0b8+qf7tmwtxI0z9F8=
x-amz-request-id: B9WB7Y5KPHC5GS7G
x-amz-replication-status: COMPLETED
last-modified: Tue, 17 Nov 2020 13:22:33 GMT
x-amz-server-side-encryption: AES256
x-amz-version-id: uuS3rJ8lpzOfMrSciOuzwH9Tk1993xne
server: AmazonS3
access-control-allow-origin: *
content-encoding: br
date: Thu, 23 Mar 2023 09:22:39 GMT
etag: W/"319c4184e0e815aaae848111368f49e6"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 a343e36742f64defd0a2caf1f96ff772.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: lXTFd46ohaRbfFT3T5HjtdgWv8y_AzXr2gJvs4RWPHzbvJUeCK8ksA==
age: 43638
x-xss-protection: 1; mode=block
referrer-policy: strict-origin-when-cross-origin
content-security-policy: default-src https: data: blob: 'unsafe-eval' 'unsafe-inline' https://www.google.com https://www.gstatic.com https://www.recaptcha.net https://api.amplitude.com  wss://*.hotjar.com wss://*.qualified.com 'self'; upgrade-insecure-requests; frame-ancestors 'self' https://*.zendesk.com https://*.myshopify.com https://teams.microsoft.com https://*.eloqua.com https://*.surveymonkey.com https://*.sharepoint.com https://*.worldpay.com https://*.cardinalcommerce.com https://*.office.com https://*.office365.com https://*.microsoft365.com;report-uri https://csp.surveymonkey.com/report?e=true&c=prod&ar=true
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains
cache-control: max-age=7884000, public
X-Firefox-Spdy: h2

URL HTTP/2

fonts.googleapis.com/earlyaccess/notosanstc.css
IP

142.250.74.74:0
ASN

#15169 GOOGLE

Magic

Size

0
Hash

HTTP Headers

                                        GET /earlyaccess/notosanstc.css HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.surveymonkey.com/
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Thu, 23 Mar 2023 21:29:43 GMT
date: Thu, 23 Mar 2023 21:29:43 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

URL HTTP/2

fonts.googleapis.com/earlyaccess/notosanskr.css
IP

142.250.74.74:0
ASN

#15169 GOOGLE

Magic

Size

0
Hash

HTTP Headers

                                        GET /earlyaccess/notosanskr.css HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.surveymonkey.com/
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Thu, 23 Mar 2023 21:29:43 GMT
date: Thu, 23 Mar 2023 21:29:43 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

URL HTTP/2

secure.surveymonkey.com/r/themes/4.3.63_20425050_no-palette_83C7721B-D661-4570-B09D-19EA236C5DA0.css
IP

54.230.111.36:0
ASN

#16509 AMAZON-02

Magic

Size

0
Hash

HTTP Headers

                                        GET /r/themes/4.3.63_20425050_no-palette_83C7721B-D661-4570-B09D-19EA236C5DA0.css HTTP/1.1
Host: secure.surveymonkey.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.surveymonkey.com/
Connection: keep-alive
Cookie: _ga_JMDBBLT4C7=GS1.1.1654133888.1.0.1654133888.0; _ga=GA1.1.729600766.1654133888; ep201="33HeVUljMWKx8lNkKBwpfNtTQ00="; ep203="fOtIjVVdId65sJBOFGMjulPd9qg="
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site

                                        HTTP/2 200 OK
content-type: text/css; charset=UTF-8
date: Thu, 23 Mar 2023 21:13:32 GMT
server: nginx
sm-request-id: Z2irHJoe1Ka6UWFYPNzfTVGufzUQXy5ek-CLCZ_EVponqMjvz4hM5Q==
cache-control: max-age=3600
content-encoding: br
vary: Accept-Encoding,Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 a2c3c8b833b34851dca4f7753ecaae58.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: SrwpHEoghssH7h1O6vSKDIOdQonp-NvD0-s_FfmKrC8TFDLDjcZMXQ==
age: 971
X-Firefox-Spdy: h2

URL HTTP/2

prod.smassets.net/assets/responseweb/smlib.surveytemplates-sm-polyfill-bundle-min.c105a2db.js
IP

54.230.111.36:0
ASN

#16509 AMAZON-02

Magic

Size

0
Hash

HTTP Headers

                                        GET /assets/responseweb/smlib.surveytemplates-sm-polyfill-bundle-min.c105a2db.js HTTP/1.1
Host: prod.smassets.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.surveymonkey.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        HTTP/2 200 OK
content-type: application/javascript
x-amz-id-2: oYtdhXF9V0133yxJA/t7FUJRJQZhpFuBg26A9/KUizutio+FdS47498HIwhPS79MIZGMDtnWe8E=
x-amz-request-id: S7W6KB1XVM34V11T
x-amz-replication-status: COMPLETED
last-modified: Thu, 09 Mar 2023 19:29:24 GMT
x-amz-server-side-encryption: AES256
x-amz-version-id: V8Btd6fhwZRHCU3OGHF_5pPHw7k04Urg
server: AmazonS3
access-control-allow-origin: *
content-encoding: br
date: Thu, 23 Mar 2023 00:08:36 GMT
etag: W/"c105a2db5b41f9f9e0fb3ce5fce26e20"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 a2c3c8b833b34851dca4f7753ecaae58.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: Z3jhauSUoskUpVddU6TypZDkqlu-CsEA09cnwPI2ilrtPjPPSFTZUg==
age: 76960
x-xss-protection: 1; mode=block
referrer-policy: strict-origin-when-cross-origin
content-security-policy: default-src https: data: blob: 'unsafe-eval' 'unsafe-inline' https://www.google.com https://www.gstatic.com https://www.recaptcha.net https://api.amplitude.com  wss://*.hotjar.com wss://*.qualified.com 'self'; upgrade-insecure-requests; frame-ancestors 'self' https://*.zendesk.com https://*.myshopify.com https://teams.microsoft.com https://*.eloqua.com https://*.surveymonkey.com https://*.sharepoint.com https://*.worldpay.com https://*.cardinalcommerce.com https://*.office.com https://*.office365.com https://*.microsoft365.com;report-uri https://csp.surveymonkey.com/report?e=true&c=prod&ar=true
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains
cache-control: max-age=7884000, public
X-Firefox-Spdy: h2

URL HTTP/2

prod.smassets.net/assets/responseweb/responseweb-response-bundle-min.4c433bad.js
IP

54.230.111.36:0
ASN

#16509 AMAZON-02

Magic

Size

0
Hash

HTTP Headers

                                        GET /assets/responseweb/responseweb-response-bundle-min.4c433bad.js HTTP/1.1
Host: prod.smassets.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.surveymonkey.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        HTTP/2 200 OK
content-type: application/javascript
x-amz-id-2: 9FZzK3w111+w4bhDhr2XXQBnALESrE3/xVqOkDJwPrIRL/clCgGc4LL/0GdXC4ur9Hy1PBvEHO4=
x-amz-request-id: KTZDBA4QYCHQV6CH
x-amz-replication-status: COMPLETED
last-modified: Thu, 09 Mar 2023 19:29:49 GMT
x-amz-server-side-encryption: AES256
x-amz-version-id: rRBYuNPYClqxUcShYC1eQ_bxMTz_T9xA
server: AmazonS3
access-control-allow-origin: *
content-encoding: br
date: Thu, 23 Mar 2023 18:16:40 GMT
etag: W/"4c433badcce23b2352aba0cb565e6943"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 a2c3c8b833b34851dca4f7753ecaae58.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: GIfMRrhpiiiG-5Xus90zw7SU3iQ4uGXIE5rLLsYhrkgDlKG3-Wtedg==
age: 37912
x-xss-protection: 1; mode=block
referrer-policy: strict-origin-when-cross-origin
content-security-policy: default-src https: data: blob: 'unsafe-eval' 'unsafe-inline' https://www.google.com https://www.gstatic.com https://www.recaptcha.net https://api.amplitude.com  wss://*.hotjar.com wss://*.qualified.com 'self'; upgrade-insecure-requests; frame-ancestors 'self' https://*.zendesk.com https://*.myshopify.com https://teams.microsoft.com https://*.eloqua.com https://*.surveymonkey.com https://*.sharepoint.com https://*.worldpay.com https://*.cardinalcommerce.com https://*.office.com https://*.office365.com https://*.microsoft365.com;report-uri https://csp.surveymonkey.com/report?e=true&c=prod&ar=true
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains
cache-control: max-age=7884000, public
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

OpenPhish

PhishTank

Fortinet's Web Filter

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (25)

#1 JS:Script (size: 130537)

URL

IP

ASN

Introduced by

Inline HTML

Observations

Hash

#2 JS:Script (size: 105384)

URL

IP

ASN

Introduced by

Inline HTML

Observations

Hash

#3 JS:Script (size: 112218)

URL

IP

ASN

Introduced by

Inline HTML

Observations

Hash

#4 JS:Script (size: 51)

URL

IP

ASN

Introduced by

Inline HTML

Observations

Hash

#5 JS:Script (size: 341)

URL

IP

ASN

Introduced by

Inline HTML

Observations

Hash

#6 JS:Script (size: 341)

URL

IP

ASN

Introduced by

Inline HTML

Observations

Hash

#7 JS:Script (size: 18971)

URL

IP

ASN

Introduced by

Inline HTML