| mmgggod.web.app/ |  199.36.158.100 | 301 Moved Permanently | 0 B |
IP199.36.158.100:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| openphish | M & T Bank Coporation | | | fortinet | Phishing | |
GET / HTTP/1.1
Host: mmgggod.web.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Server: Varnish
Retry-After: 0
Location: https://mmgggod.web.app/
Content-Length: 0
Accept-Ranges: bytes
Date: Tue, 13 Sep 2022 20:45:06 GMT
Connection: close
X-Served-By: cache-bma1675-BMA
X-Cache: HIT
X-Cache-Hits: 0
X-Timer: S1663101907.953613,VS0,VE0
|
|
| firefox.settings.services.mozilla.com/v1/ | 143.204.55.36 | 200 OK | 939 B |
URL HTTP/1.1firefox.settings.services.mozilla.com/v1/ IP143.204.55.36:0
File typeJSON data\012- , ASCII text, with very long lines (939), with no line terminators Hashb593eb39329cfe060d55be5e4a5405e2 78e46c1028e9f94f8569303ad2d90d7df13a059a 08a810103557efe55ca4425ff0cf82593f1f54633df899127eaec9bee05d4d04
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Retry-After, Alert, Content-Length, Content-Type, Backoff
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Tue, 13 Sep 2022 20:08:53 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 a9120cc3ff449047c990e82a4d5566ba.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: qCqrRlQK2uE-vpTTLmvB5JWParKGVlJDel8-WhH_iP1I2-Is6n62Sg==
Age: 2174
|
|
| content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain | 143.204.55.35 | 200 OK | 5.3 kB |
URL HTTP/2content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain IP143.204.55.35:0
File typePEM certificate\012- , ASCII text Hash742edb4038f38bc533514982f3d2e861 cc3a20c8dc2a8c632ef9387a2744253f1e3fdef1 b6bfa49d3d135035701231db2fffc0c0643444394009a94c6a1b4d829d6b8345
GET /chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: binary/octet-stream
content-length: 5348
last-modified: Sat, 20 Aug 2022 23:18:05 GMT
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
date: Tue, 13 Sep 2022 07:17:13 GMT
etag: "742edb4038f38bc533514982f3d2e861"
x-cache: Hit from cloudfront
via: 1.1 83a23d85c009b0c0e3626072e9f997fe.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: OEhFd55J0sJp_MJxVAh5Ae3ganb7oZTh92qLx9RF4zE_i2Y-aNC5QQ==
age: 58193
X-Firefox-Spdy: h2
|
|
| r3.o.lencr.org/ |  23.33.119.27 | 200 OK | 503 B |
IP23.33.119.27:0 ASN#20940 Akamai International B.V.
Hashbe88d3e043e3b95b52e41812e50fb634 0318ba1ce487817ea7cba61dd9413bed29213800 b5f178d23e633283f226cca7a9ae79b01e6cab2299ff7065c980d3a9953212fd
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "B5F178D23E633283F226CCA7A9AE79B01E6CAB2299FF7065C980D3A9953212FD"
Last-Modified: Tue, 13 Sep 2022 06:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6188
Expires: Tue, 13 Sep 2022 22:28:15 GMT
Date: Tue, 13 Sep 2022 20:45:07 GMT
Connection: keep-alive
|
|
| mmgggod.web.app/ | 199.36.158.100 | 200 OK | 7.1 kB |
IP199.36.158.100:0
File typeHTML document text\012- HTML document text\012- HTML document, Unicode text, UTF-8 text, with very long lines (906), with CRLF line terminators Hash8e8a3a497151c544a86ca51b81c402d3 4a8972114be2190c47eed9843d1500277de05bd7 7845c559c889585697c2e57bffbcf5ad24671282a4bc1ba525753548f5e10726
| Analyzer | Verdict | Alert |
|---|
| openphish | M & T Bank Coporation | | | fortinet | Phishing | |
GET / HTTP/1.1
Host: mmgggod.web.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
cache-control: max-age=3600
content-encoding: br
content-type: text/html; charset=utf-8
etag: "c7bd0ab2f66ae0146a0b2cbd789bf3098b195d48fdea13cee0fd9693c8ce7caa-br"
last-modified: Wed, 31 Aug 2022 10:41:13 GMT
strict-transport-security: max-age=31556926; includeSubDomains; preload
accept-ranges: bytes
date: Tue, 13 Sep 2022 20:45:07 GMT
x-served-by: cache-bma1644-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1663101907.175762,VS0,VE1
vary: x-fh-requested-host, accept-encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 7096
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/s/gts1d4int/7ZBQLSBvJ5A | 142.250.74.3 | 200 OK | 471 B |
URL HTTP/1.1ocsp.pki.goog/s/gts1d4int/7ZBQLSBvJ5A IP142.250.74.3:0
Hash7e08b05219aae9ceb91c71efc8bffc81 c8d8a77b5b8a8c9787f6f839e1bf244b690aa8ef e380a2e99259ec3c169cfcec38f6ad051765700e959bd80103d8f7ddc246a835
POST /s/gts1d4int/7ZBQLSBvJ5A HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 13 Sep 2022 20:45:07 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| contile.services.mozilla.com/v1/tiles | 34.117.237.239 | 200 OK | 12 B |
URL HTTP/2contile.services.mozilla.com/v1/tiles IP34.117.237.239:0
File typeJSON data\012- , ASCII text, with no line terminators Hash23e88fb7b99543fb33315b29b1fad9d6 a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Tue, 13 Sep 2022 20:45:07 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| tags.tiqcdn.com/utag/mtbank/olb-legacy/prod/utag.8.js?utv=ut4.48.202111012113 | 2.18.173.203 | 200 OK | 3.5 kB |
URL HTTP/2tags.tiqcdn.com/utag/mtbank/olb-legacy/prod/utag.8.js?utv=ut4.48.202111012113 IP2.18.173.203:0
File typeASCII text, with very long lines (1579) Hashf51f6472c0b3773d744257799dc5a808 5da9efcd4dcb1e9a2cdae9d56dbd04a60dfdfb66 d9487b13d7808c0b581a79cb6f953b7f4b0ac128cdf545d5a2074575f22d3930
GET /utag/mtbank/olb-legacy/prod/utag.8.js?utv=ut4.48.202111012113 HTTP/1.1
Host: tags.tiqcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mmgggod.web.app/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
content-type: application/x-javascript
etag: "55e2dafd4e2f01e1da100818637f6e46:1635801208.490581"
last-modified: Mon, 01 Nov 2021 21:13:28 GMT
server: AkamaiNetStorage
unused62: 8096267
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=1296000
expires: Wed, 28 Sep 2022 20:45:07 GMT
date: Tue, 13 Sep 2022 20:45:07 GMT
content-length: 3522
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.3 | 200 OK | 472 B |
IP142.250.74.3:0
Hashc79a6d9219e52788c0288a4288601f0b a55c74c35279d08872bb4b0805d3f8ff684bc322 345482ec25a567e189a52a824fa13f6bbcfa8ce636c40f3619232b9cff65fa6a
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 13 Sep 2022 20:45:07 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| cdnjs.cloudflare.com/ajax/libs/firebase/7.14.1-0/firebase.js |  104.17.25.14 | 200 OK | 197 kB |
URL HTTP/2cdnjs.cloudflare.com/ajax/libs/firebase/7.14.1-0/firebase.js IP104.17.25.14:0
File typeUnicode text, UTF-8 text, with very long lines (65535), with no line terminators Size197 kB (196875 bytes) Hash9678902badce1d2a1a8177d498174722 28df0a8e4d97c4091de4213c93a820a2861c2f39 ca94cdf6c8b7acfa331dfb4bddd30ab2d2b489f16a36c4da84a339cc42bbaccb
GET /ajax/libs/firebase/7.14.1-0/firebase.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mmgggod.web.app/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 13 Sep 2022 20:45:07 GMT
content-type: application/javascript; charset=utf-8
content-length: 196875
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03e5c-ca14f"
last-modified: Mon, 04 May 2020 16:10:04 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 4066
expires: Sun, 03 Sep 2023 20:45:07 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=cTR73jLFhv2eeOqnjaTgLjVbzK%2FLd16kJ7QLyFFEiiH%2Bl9poblLjoWnjQ9calK8be2AwMycQCm2fFZTzjvAmCM%2F21IuwHsZz74pClzZ6DUFCVTNdeTuBWOF%2BNkwn1JpGsL%2BwM%2BRp"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 74a3b98929a8b4ff-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| www.googletagmanager.com/gtag/js?id=AW-990489911 | 142.250.74.72 | 200 OK | 46 kB |
URL HTTP/2www.googletagmanager.com/gtag/js?id=AW-990489911 IP142.250.74.72:0
File typeASCII text, with very long lines (1615) Hashc47ba32117541ffd729c4039afdcc012 bd2bb58f7856aac57628c3427716e749d99d994f be31bc527c396f072866bf5067ba74746f47f6ae16b798db9d6eaf2bd86a4aee
GET /gtag/js?id=AW-990489911 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mmgggod.web.app/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Tue, 13 Sep 2022 20:45:07 GMT
expires: Tue, 13 Sep 2022 20:45:07 GMT
cache-control: private, max-age=900
last-modified: Tue, 13 Sep 2022 18:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 46353
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.3 | 200 OK | 472 B |
IP142.250.74.3:0
Hashc79a6d9219e52788c0288a4288601f0b a55c74c35279d08872bb4b0805d3f8ff684bc322 345482ec25a567e189a52a824fa13f6bbcfa8ce636c40f3619232b9cff65fa6a
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 13 Sep 2022 20:45:07 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US | 143.204.55.36 | 200 OK | 329 B |
URL HTTP/1.1firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US IP143.204.55.36:0
File typeJSON data\012- , ASCII text, with very long lines (329), with no line terminators Hash0333b0655111aa68de771adfcc4db243 63f295a144ac87a7c8e23417626724eeca68a7eb 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: ETag, Expires, Content-Length, Cache-Control, Pragma, Content-Type, Alert, Backoff, Last-Modified, Retry-After
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Cache-Control: max-age=3600
Date: Tue, 13 Sep 2022 20:03:22 GMT
Expires: Tue, 13 Sep 2022 20:52:25 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 aac54e3fe9825ce24d51e0204433c2c0.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: eWO9ajCiwt7xjXky2EOqQS3bAWJsG5R7yXef5AgN_p9pumL3A6XgwA==
Age: 2505
|
|
| tags.tiqcdn.com/utag/mtbank/olb-legacy/prod/utag.js | 2.18.173.203 | 200 OK | 33 kB |
URL HTTP/2tags.tiqcdn.com/utag/mtbank/olb-legacy/prod/utag.js IP2.18.173.203:0
File typeHTML document, Unicode text, UTF-8 text, with very long lines (11428) Hash6439067b086fed9cb0f09479d1c96c23 bab722d23e14a277bee33686251fc1cf586171d2 ba43c741cf3c613bca8c98b1d6068ee181d7ba823713c1373d206ec1ac5b1480
GET /utag/mtbank/olb-legacy/prod/utag.js HTTP/1.1
Host: tags.tiqcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mmgggod.web.app/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
content-type: application/x-javascript
etag: "ed488d12934701f3b7e6028372f4877f:1663015689.678966"
last-modified: Mon, 12 Sep 2022 20:48:09 GMT
server: AkamaiNetStorage
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=300
expires: Tue, 13 Sep 2022 20:50:07 GMT
date: Tue, 13 Sep 2022 20:45:07 GMT
content-length: 32837
X-Firefox-Spdy: h2
|
|
| ocsp.entrust.net/ |  23.13.44.131 | 200 OK | 1.6 kB |
IP23.13.44.131:0
Hash9a908c1f5da57364df58d331eac9610f 68aa9791438c92e1311561f1e82f3728773e902d 6131a7dda3721221bbaab8b5071b35aa9f9e894a43d10ba2f9236c6408e07991
POST / HTTP/1.1
Host: ocsp.entrust.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
ETag: "6131A7DDA3721221BBAAB8B5071B35AA9F9E894A43D10BA2F9236C6408E07991"
Last-Modified: Tue, 13 Sep 2022 11:00:00 UTC
Content-Length: 1588
Cache-Control: public, no-transform, must-revalidate, max-age=3600
Expires: Tue, 13 Sep 2022 21:45:07 GMT
Date: Tue, 13 Sep 2022 20:45:07 GMT
Connection: keep-alive
|
|
| ocsp.entrust.net/ | 23.13.44.131 | 200 OK | 1.6 kB |
IP23.13.44.131:0
Hash9a908c1f5da57364df58d331eac9610f 68aa9791438c92e1311561f1e82f3728773e902d 6131a7dda3721221bbaab8b5071b35aa9f9e894a43d10ba2f9236c6408e07991
POST / HTTP/1.1
Host: ocsp.entrust.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
ETag: "6131A7DDA3721221BBAAB8B5071B35AA9F9E894A43D10BA2F9236C6408E07991"
Last-Modified: Tue, 13 Sep 2022 11:00:00 UTC
Content-Length: 1588
Cache-Control: public, no-transform, must-revalidate, max-age=3593
Expires: Tue, 13 Sep 2022 21:45:00 GMT
Date: Tue, 13 Sep 2022 20:45:07 GMT
Connection: keep-alive
|
|
| ocsp.digicert.com/ |  93.184.220.29 | 200 OK | 471 B |
IP93.184.220.29:0
Hashe96dbe1b54932c8f447bbbfc9d31cfb0 b15d4a54fbdf95b0af8bd34b6f8ef03055eef0cd 427326963ac1ef6ddeeaf52ab07807c694b82effa6111671ada8270b1faecdae
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2302
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Tue, 13 Sep 2022 20:45:07 GMT
Last-Modified: Tue, 13 Sep 2022 20:06:45 GMT
Server: ECS (ska/F718)
X-Cache: HIT
Content-Length: 471
|
|
| ocsp.entrust.net/ | 23.13.44.131 | 200 OK | 1.6 kB |
IP23.13.44.131:0
Hash9a908c1f5da57364df58d331eac9610f 68aa9791438c92e1311561f1e82f3728773e902d 6131a7dda3721221bbaab8b5071b35aa9f9e894a43d10ba2f9236c6408e07991
POST / HTTP/1.1
Host: ocsp.entrust.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
ETag: "6131A7DDA3721221BBAAB8B5071B35AA9F9E894A43D10BA2F9236C6408E07991"
Last-Modified: Tue, 13 Sep 2022 11:00:00 UTC
Content-Length: 1588
Cache-Control: public, no-transform, must-revalidate, max-age=3589
Expires: Tue, 13 Sep 2022 21:44:56 GMT
Date: Tue, 13 Sep 2022 20:45:07 GMT
Connection: keep-alive
|
|
| ocsp.entrust.net/ | 23.13.44.131 | 200 OK | 1.6 kB |
IP23.13.44.131:0
Hash9a908c1f5da57364df58d331eac9610f 68aa9791438c92e1311561f1e82f3728773e902d 6131a7dda3721221bbaab8b5071b35aa9f9e894a43d10ba2f9236c6408e07991
POST / HTTP/1.1
Host: ocsp.entrust.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
ETag: "6131A7DDA3721221BBAAB8B5071B35AA9F9E894A43D10BA2F9236C6408E07991"
Last-Modified: Tue, 13 Sep 2022 11:00:00 UTC
Content-Length: 1588
Cache-Control: public, no-transform, must-revalidate, max-age=3600
Expires: Tue, 13 Sep 2022 21:45:07 GMT
Date: Tue, 13 Sep 2022 20:45:07 GMT
Connection: keep-alive
|
|
| ocsp.entrust.net/ | 23.13.44.131 | 200 OK | 1.6 kB |
IP23.13.44.131:0
Hash8bb06f9548a0cdab9e94c31bc2072b40 759e6f29fa28c402b427e02594f3b54ce7b9ab9c 6b7dc854e5c7f83a5f22592185bb45fd765b6b504dea2db0bcfc7bd00f888af5
POST / HTTP/1.1
Host: ocsp.entrust.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
ETag: "6B7DC854E5C7F83A5F22592185BB45FD765B6B504DEA2DB0BCFC7BD00F888AF5"
Last-Modified: Tue, 13 Sep 2022 20:00:00 UTC
Content-Length: 1585
Cache-Control: public, no-transform, must-revalidate, max-age=3600
Expires: Tue, 13 Sep 2022 21:45:08 GMT
Date: Tue, 13 Sep 2022 20:45:08 GMT
Connection: keep-alive
|
|
| ocsp.entrust.net/ | 23.13.44.131 | 200 OK | 1.6 kB |
IP23.13.44.131:0
Hash8bb06f9548a0cdab9e94c31bc2072b40 759e6f29fa28c402b427e02594f3b54ce7b9ab9c 6b7dc854e5c7f83a5f22592185bb45fd765b6b504dea2db0bcfc7bd00f888af5
POST / HTTP/1.1
Host: ocsp.entrust.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
ETag: "6B7DC854E5C7F83A5F22592185BB45FD765B6B504DEA2DB0BCFC7BD00F888AF5"
Last-Modified: Tue, 13 Sep 2022 20:00:00 UTC
Content-Length: 1585
Cache-Control: public, no-transform, must-revalidate, max-age=3509
Expires: Tue, 13 Sep 2022 21:43:37 GMT
Date: Tue, 13 Sep 2022 20:45:08 GMT
Connection: keep-alive
|
|
| ocsp.entrust.net/ | 23.13.44.131 | 200 OK | 1.6 kB |
IP23.13.44.131:0
Hash8bb06f9548a0cdab9e94c31bc2072b40 759e6f29fa28c402b427e02594f3b54ce7b9ab9c 6b7dc854e5c7f83a5f22592185bb45fd765b6b504dea2db0bcfc7bd00f888af5
POST / HTTP/1.1
Host: ocsp.entrust.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
ETag: "6B7DC854E5C7F83A5F22592185BB45FD765B6B504DEA2DB0BCFC7BD00F888AF5"
Last-Modified: Tue, 13 Sep 2022 20:00:00 UTC
Content-Length: 1585
Cache-Control: public, no-transform, must-revalidate, max-age=3583
Expires: Tue, 13 Sep 2022 21:44:51 GMT
Date: Tue, 13 Sep 2022 20:45:08 GMT
Connection: keep-alive
|
|
| ocsp.entrust.net/ | 23.13.44.131 | 200 OK | 1.6 kB |
IP23.13.44.131:0
Hash8bb06f9548a0cdab9e94c31bc2072b40 759e6f29fa28c402b427e02594f3b54ce7b9ab9c 6b7dc854e5c7f83a5f22592185bb45fd765b6b504dea2db0bcfc7bd00f888af5
POST / HTTP/1.1
Host: ocsp.entrust.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
ETag: "6B7DC854E5C7F83A5F22592185BB45FD765B6B504DEA2DB0BCFC7BD00F888AF5"
Last-Modified: Tue, 13 Sep 2022 20:00:00 UTC
Content-Length: 1585
Cache-Control: public, no-transform, must-revalidate, max-age=3587
Expires: Tue, 13 Sep 2022 21:44:55 GMT
Date: Tue, 13 Sep 2022 20:45:08 GMT
Connection: keep-alive
|
|
| push.services.mozilla.com/ | 35.163.147.190 | 101 Switching Protocols | 0 B |
URL HTTP/1.1push.services.mozilla.com/ IP35.163.147.190:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: p7nVbhG56gTcmp7vZUKznA==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: zPa5ymj7qSIRmOAG0H5BrC+kcJ8=
|
|
| resources.mtb.com/r/simple-layout-responsive/css.mtb?v=08032022104600 | 24.75.29.77 | 200 OK | 35 kB |
URL HTTP/1.1resources.mtb.com/r/simple-layout-responsive/css.mtb?v=08032022104600 IP24.75.29.77:0
File typeUnicode text, UTF-8 text, with very long lines (65534), with no line terminators Hash612ef637c25041c445e4fdf710694d70 c4037320ef3bf75754dbba6ffbb712cc8ea947cd d3f9b1bf0a23fba1044ec913042d5068e3445fe37aa9dc4ad2dff2b9fbcfbeef
GET /r/simple-layout-responsive/css.mtb?v=08032022104600 HTTP/1.1
Host: resources.mtb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mmgggod.web.app/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: text/css; charset=utf-8
Expires: Wed, 13 Sep 2023 20:45:07 GMT
Last-Modified: Tue, 13 Sep 2022 20:45:06 GMT
ETag: "1663101907:dtagent10247220811100421ZWhG"
Vary: User-Agent
X-Srv: B-SC-02
Access-Control-Allow-Origin: *
X-FRAME-OPTIONS: ALLOW-FROM https://mtb.com/
Server-Timing: dtSInfo;desc="0", dtRpid;desc="-1649602913"
Date: Tue, 13 Sep 2022 20:45:07 GMT
ntCoent-Length: 258715
Cache-Control: private
Content-Encoding: gzip
Set-Cookie: dtCookie=v_4_srv_6_sn_AE5EE937C8C79883037874A0388F2F30_perc_100000_ol_0_mul_1_app-3Aea7c4b59f27d43eb_1_rcs-3Acss_0; Path=/; Domain=.mtb.com
TS019299a7=01fb46a92697ad52ea7178618d16f4e77201468aeed96483a70002b57b4254309be4bfb3e587b15e3db94bd3b0cb3c6fc0749f846b; Path=/
TS0128739d=01fb46a9261cfe6e3afae51b7ff3ffa68e8df36b3ed96483a70002b57b4254309be4bfb3e5348ae4780131db309c6479bf10f8ea5494b09ad61d19b69dd622d046ac2b8073; path=/; domain=.mtb.com
TSea15929a027=0856addebbab2000c5dcae987022c6d26030c0a8e56ee178e50f92ecbc85301f655d09a6287518a908fb44f3461130009b884343de75c9af617d3d35c67e97210225d66b7d0f9f63269dc6c42921deb2f1e318c2ddd3ec2bfa414c081d5d7f50; Path=/
Transfer-Encoding: chunked
|
|
| resources.mtb.com/Assets/img/mtb-equalhousinglender.svg | 24.75.29.77 | 200 OK | 230 B |
URL HTTP/1.1resources.mtb.com/Assets/img/mtb-equalhousinglender.svg IP24.75.29.77:0
File typeSVG Scalable Vector Graphics image\012- , ASCII text, with no line terminators Hash916635d10512ae6a1840614a895dcd38 db175de4c42281bb4d239c57d1b95b8e75c529ec d58eb2802f72d0c6b1d944a1335e8fb914af44b51fe16097aad994c15b8cfbad
GET /Assets/img/mtb-equalhousinglender.svg HTTP/1.1
Host: resources.mtb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mmgggod.web.app/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: image/svg+xml
Last-Modified: Sat, 10 Sep 2022 04:29:00 GMT
Accept-Ranges: bytes
ETag: "0ce45d9cdc4d81:0"
X-Srv: B-SC-02
Access-Control-Allow-Origin: *
X-FRAME-OPTIONS: ALLOW-FROM https://mtb.com/
Server-Timing: dtSInfo;desc="0", dtRpid;desc="-658271596"
Date: Tue, 13 Sep 2022 20:45:07 GMT
Content-Length: 230
Set-Cookie: TSea15929a027=0856addebbab2000bbdb0e4538b910763adcdbf4772491f381cde31e3a9053ae4d935a6cce38233c08845f4711113000abf37e93369017df617d3d35c67e97217b6c067010e9e97a94a995996491f3a975d6101496513e0e0c7409ac0f75a57d; Path=/
|
|
| resources.mtb.com/Assets/img/mtb-logo.svg | 24.75.29.77 | 200 OK | 2.0 kB |
URL HTTP/1.1resources.mtb.com/Assets/img/mtb-logo.svg IP24.75.29.77:0
File typeSVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (2039), with no line terminators Hashf2b901cf895852a0866fe4a16c7f1730 c4240af1ec798477b4e65a185ddbb1b038817da4 5f5b0d9f678fe446631a33a4cbbe891a01b0ed972143702e67ae6617367096ac
GET /Assets/img/mtb-logo.svg HTTP/1.1
Host: resources.mtb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mmgggod.web.app/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: image/svg+xml
Last-Modified: Sat, 10 Sep 2022 04:29:00 GMT
Accept-Ranges: bytes
ETag: "0ce45d9cdc4d81:0"
X-Srv: B-SC-02
Access-Control-Allow-Origin: *
X-FRAME-OPTIONS: ALLOW-FROM https://mtb.com/
Server-Timing: dtSInfo;desc="0", dtRpid;desc="-619177067"
Date: Tue, 13 Sep 2022 20:45:07 GMT
Content-Length: 2039
Set-Cookie: TSea15929a027=0856addebbab200097977a6f0d9fe54061781d3bc5cdad21f869c2516d5c93f921fb6549c946994b0875fe733f11300076fe192a932cb770617d3d35c67e97218a65458ea4e468dc00ccdc4a1dc091bb6a3fa02a85d0df2a40c72fd72adbfe7e; Path=/
|
|
| resources.mtb.com/Assets/img/mtb-entrust.svg | 24.75.29.77 | 200 OK | 1.3 kB |
URL HTTP/1.1resources.mtb.com/Assets/img/mtb-entrust.svg IP24.75.29.77:0
File typeSVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (1349), with no line terminators Hash9a569ad20708d7453d89fe6c72e7fcdc 60b6a41620583484642f7c826faf8e3c879a6374 b2ef3bd17aa6bc2daa7b1209f7848b30c64f3068e43162b09a216639ab430ce5
GET /Assets/img/mtb-entrust.svg HTTP/1.1
Host: resources.mtb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mmgggod.web.app/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: image/svg+xml
Last-Modified: Sat, 10 Sep 2022 04:29:00 GMT
Accept-Ranges: bytes
ETag: "0ce45d9cdc4d81:0"
X-Srv: B-SC-02
Access-Control-Allow-Origin: *
X-FRAME-OPTIONS: ALLOW-FROM https://mtb.com/
Server-Timing: dtSInfo;desc="0", dtRpid;desc="-1948199980"
Date: Tue, 13 Sep 2022 20:45:07 GMT
Content-Length: 1349
Set-Cookie: TSea15929a027=0856addebbab20005146ef084ceb8d87c20ba127b935261a29dd739d2b4182ab2bf5573d3a4e802608bf1a05c6113000ef4f1f8186a005f4617d3d35c67e9721441f0884f8a2480207657ec9c549f9f0fa8a0883a0eded35e0b2d52fde70679d; Path=/
|
|
| resources.mtb.com/r/simple-layout-responsive/js.mtb?v=08032022104600 | 24.75.29.77 | 200 OK | 104 kB |
URL HTTP/1.1resources.mtb.com/r/simple-layout-responsive/js.mtb?v=08032022104600 IP24.75.29.77:0
File typeASCII text, with CRLF line terminators Size104 kB (103531 bytes) Hash709ebc99ab68894c16d41797eb08e778 76a47991fe6d37cfff3521535bf366798a97e292 3ac3d1438229e5d19ab15b5a7552eb05497af3ea08ecc93fb3c5d084d73e60b9
GET /r/simple-layout-responsive/js.mtb?v=08032022104600 HTTP/1.1
Host: resources.mtb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mmgggod.web.app/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=utf-8
Expires: Wed, 13 Sep 2023 20:45:07 GMT
Last-Modified: Tue, 13 Sep 2022 20:45:06 GMT
ETag: "1663101907:dtagent10247220811100421ZWhG"
Vary: User-Agent
X-Srv: B-SC-02
Access-Control-Allow-Origin: *
X-FRAME-OPTIONS: ALLOW-FROM https://mtb.com/
Server-Timing: dtSInfo;desc="0", dtRpid;desc="-262559152"
Date: Tue, 13 Sep 2022 20:45:07 GMT
ntCoent-Length: 322405
Cache-Control: private
Content-Encoding: gzip
Set-Cookie: dtCookie=v_4_srv_6_sn_9ABB70B39AADE2736B9290590CC57D6B_perc_100000_ol_0_mul_1_app-3Aea7c4b59f27d43eb_1_rcs-3Acss_0; Path=/; Domain=.mtb.com
TS019299a7=01fb46a9263848d1b3194c80f3e1a59755862edb0db948b166e892632775f33d20a17b51a6eebc10697ef5c17d35df7b16ad7ea2fc; Path=/
TS0128739d=01fb46a926ddbb6e06c83badf7aee5e6132a2b18efb948b166e892632775f33d20a17b51a6d94655004a9f9447841b2de56fe910c29efa8a4d29203cfbd8968359abdf4efc; path=/; domain=.mtb.com
TSea15929a027=0856addebbab200062b3fa936d594a22004bbac1a63b290934562582c0ca7df4d2cdd57d194b1e2e085fc13ece113000651ed5d7f9be5544617d3d35c67e97215bb86a8c1b51b7766fd110ebcb924a540b170c7103ecc637a19f2d2a51dcc4f4; Path=/
Transfer-Encoding: chunked
|
|
| ocsp.pki.goog/s/gts1d4int/S8bfnalmCqs | 142.250.74.3 | 200 OK | 471 B |
URL HTTP/1.1ocsp.pki.goog/s/gts1d4int/S8bfnalmCqs IP142.250.74.3:0
Hash54766d15c6625a71eb3cbb7337a5dc72 be5096802bd4dc6004c9cbc4160f4b9171c44a45 4f95eeac8e77be259c5d48104e2d8a3b17b95b985e10ce1812420744bd265ec2
POST /s/gts1d4int/S8bfnalmCqs HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 13 Sep 2022 20:45:08 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| resources.mtb.com/assets/fonts/mandtpg-iconfont.woff | 24.75.29.77 | 200 OK | 4.8 kB |
URL HTTP/1.1resources.mtb.com/assets/fonts/mandtpg-iconfont.woff IP24.75.29.77:0
File typeWeb Open Font Format, TrueType, length 4776, version 1.0\012- data Hashac13691b89191d11d0e5577eb3cf3d53 0126fa82c0ab022e61b5de74f1fe3e204a905a7b 108d16421ae2ff7fc5157d507dc5b1bf7f62140ba58cf3c723b1f2b7e74c21df
GET /assets/fonts/mandtpg-iconfont.woff HTTP/1.1
Host: resources.mtb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://mmgggod.web.app
Connection: keep-alive
Referer: https://resources.mtb.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: APPLICATION/X-WOFF
Last-Modified: Sat, 10 Sep 2022 04:28:59 GMT
Accept-Ranges: bytes
ETag: "0ce45d9cdc4d81:0:dtagent10247220811100421ZWhG"
X-Srv: B-SC-02
Access-Control-Allow-Origin: *
X-FRAME-OPTIONS: ALLOW-FROM https://mtb.com/
Timing-Allow-Origin: *
Server-Timing: dtSInfo;desc="0", dtRpid;desc="445967616", dtTao;desc="1"
Date: Tue, 13 Sep 2022 20:45:07 GMT
Content-Length: 4776
Set-Cookie: dtCookie=v_4_srv_6_sn_8E521C3B6F93F5EE009F64DFAE920D2E_perc_100000_ol_0_mul_1_app-3Aea7c4b59f27d43eb_1_rcs-3Acss_0; Path=/; Domain=.mtb.com
TS019299a7=01fb46a92699a01b56b621bc999e48ae8d4303c6a1d48a4320b8d6da445b7c02c1a0cd948e0dca04e0a4296b349408b4869d567fba; Path=/
TS0128739d=01fb46a926bf080d1679d520645e4e3d322ff09455d48a4320b8d6da445b7c02c1a0cd948e19776dbc318ff280727d9abad0579bc295cf26f2b40aee59683a1457065879b0; path=/; domain=.mtb.com
TSea15929a027=0856addebbab2000bfdbe1e0b47f795146ecfac54709f9af314491f1548c070ee9e781cd114e751908a8c34db311300095d22e620c0adfd3617d3d35c67e97213a3088abb411593d2469b1f4a1d3ff31a0a9efbda9387fe36f44e2b756dad9ba; Path=/
|
|
| contactform-f5ceb-default-rtdb.firebaseio.com/.ws?v=5 | 34.120.160.131 | 101 Switching Protocols | 0 B |
URL HTTP/1.1contactform-f5ceb-default-rtdb.firebaseio.com/.ws?v=5 IP34.120.160.131:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /.ws?v=5 HTTP/1.1
Host: contactform-f5ceb-default-rtdb.firebaseio.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: https://mmgggod.web.app
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: fw2+tUizzMxjuU7HpaxU7Q==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Server: nginx
Date: Tue, 13 Sep 2022 20:45:08 GMT
Connection: upgrade
Upgrade: websocket
Sec-WebSocket-Accept: ESCDeOkvoWi/pIPdkgvooZA17VU=
Strict-Transport-Security: max-age=31556926; includeSubDomains; preload
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.3 | 200 OK | 471 B |
IP142.250.74.3:0
Hash89dc4294d8e50675a5cb111e84d38452 993b0be337e43de62b8a33bef20c972881c8a646 27e6f64589d2befddc951fc27b83d03e1113bcfe301c76a2e412a20d2558a0c3
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 13 Sep 2022 20:45:09 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| resources.mtb.com/assets/fonts/mandtbaltoweb-book.woff | 24.75.29.77 | 200 OK | 68 kB |
URL HTTP/1.1resources.mtb.com/assets/fonts/mandtbaltoweb-book.woff IP24.75.29.77:0
File typeWeb Open Font Format, TrueType, length 67671, version 1.0\012- data Hash6cd469e8613d82d4d07834a5ca7745f0 95347ba0a03d27e1aa91bc17c937d8aefe53e6ff 4029a5a081992259f4e529190b49dbba893931da4e843dd203449f1b9a4509d2
GET /assets/fonts/mandtbaltoweb-book.woff HTTP/1.1
Host: resources.mtb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://mmgggod.web.app
Connection: keep-alive
Referer: https://resources.mtb.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: APPLICATION/X-WOFF
Last-Modified: Sat, 10 Sep 2022 04:29:01 GMT
Accept-Ranges: bytes
ETag: "0fb76dacdc4d81:0:dtagent10247220811100421ZWhG"
X-Srv: B-SC-02
Access-Control-Allow-Origin: *
X-FRAME-OPTIONS: ALLOW-FROM https://mtb.com/
Timing-Allow-Origin: *
Server-Timing: dtSInfo;desc="0", dtRpid;desc="205534254", dtTao;desc="1"
Date: Tue, 13 Sep 2022 20:45:07 GMT
Content-Length: 67671
Set-Cookie: dtCookie=v_4_srv_2_sn_8255302B24981861BDD3C74123220DD0_perc_100000_ol_0_mul_1_app-3Aea7c4b59f27d43eb_1_rcs-3Acss_0; Path=/; Domain=.mtb.com
TS019299a7=01fb46a926848adf5cdfeff6f2f9281f59ab2ba8133d946cad691138a0216137ea9818d218ab82d7adc2ca8073a2f77568a2a9cca2; Path=/
TS0128739d=01fb46a9266fda3b8a6bd02cb8490f17f00f0d1d3b3d946cad691138a0216137ea9818d2180b98459be77ba5e19a23899eb91f819681a1c0db1e3062cf883642bd63cfa831; path=/; domain=.mtb.com
TSea15929a027=0856addebbab200077707d6da4da1147f77572d30708870cd03b66814e3318184c51239e0421ca290876e7bd8a1130004aa0b3ce0c3a8ea1617d3d35c67e9721d82d9a1af8ad2eb06d1f3b87f7f26385267d4d2728729bcc8f0d15aa1079eba0; Path=/
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.3 | 200 OK | 471 B |
IP142.250.74.3:0
Hash13275200da4043d6190fb0ae3d5fd283 26442fe7c862b8d0b34a680349ae82c089a6d7cc 0c5a90c5163e631ea1ddc01ef50c555e1ad3d8ea52e279dd88cb157a24ae1a71
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 13 Sep 2022 20:45:09 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| resources.mtb.com/assets/fonts/mandtbaltoweb-medium.woff | 24.75.29.77 | 200 OK | 64 kB |
URL HTTP/1.1resources.mtb.com/assets/fonts/mandtbaltoweb-medium.woff IP24.75.29.77:0
File typeWeb Open Font Format, TrueType, length 64318, version 1.0\012- data Hashb245a55f7e33e1cf4d2477570936ef84 12bf1c1eda6db246778f7c343acebbaad8fa36f4 b391b55f950528937beee7687717a4aef81196817834f1c93b099713ff738fbc
GET /assets/fonts/mandtbaltoweb-medium.woff HTTP/1.1
Host: resources.mtb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://mmgggod.web.app
Connection: keep-alive
Referer: https://resources.mtb.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: APPLICATION/X-WOFF
Last-Modified: Sat, 10 Sep 2022 04:29:01 GMT
Accept-Ranges: bytes
ETag: "0fb76dacdc4d81:0:dtagent10247220811100421ZWhG"
X-Srv: B-SC-02
Access-Control-Allow-Origin: *
X-FRAME-OPTIONS: ALLOW-FROM https://mtb.com/
Timing-Allow-Origin: *
Server-Timing: dtSInfo;desc="0", dtRpid;desc="-1987721470", dtTao;desc="1"
Date: Tue, 13 Sep 2022 20:45:07 GMT
Content-Length: 64318
Set-Cookie: dtCookie=v_4_srv_11_sn_C53A36AE19DA1D7C26EBE17A9352F4C4_perc_100000_ol_0_mul_1_app-3Aea7c4b59f27d43eb_1_rcs-3Acss_0; Path=/; Domain=.mtb.com
TS019299a7=01fb46a9266f8d50e71fbdb8b2113ca38865a9c3dde65bcec90c3507e66475c4606d7595cc6ebad9e6fa87d4f52e464a2d1c3d3ea0; Path=/
TS0128739d=01fb46a926dba3ce2f143f2d25ca1c5fd49c5550c3e65bcec90c3507e66475c4606d7595cccfdba33fbec6e289f88bfae8be443befc48adf0e432949d3525673be852a5c60; path=/; domain=.mtb.com
TSea15929a027=0856addebbab20007343537310d7e77b4d0e725cf4079171b451937b903f914dc2237c484d80190f087ef2046e113000bd2a705c9fddc223617d3d35c67e972104f463191e5ef06e7e6e5f5cf22e6ea69eaf1f485d14f7b3fc6439765b980e70; Path=/
|
|
| ocsp.digicert.com/ | 93.184.220.29 | 200 OK | 471 B |
IP93.184.220.29:0
Hash27514b3555854958c23d2d5d828cdb8d 8af10058642aeda2d54d0a89fdc3c7ae8590bcac c9afb94eb61b1393645f1bf68c064889643e36dc3a642564d4a4bea9bdfaf5b2
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2859
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Tue, 13 Sep 2022 20:45:09 GMT
Last-Modified: Tue, 13 Sep 2022 19:57:30 GMT
Server: ECS (ska/F718)
X-Cache: HIT
Content-Length: 471
|
|
| googleads.g.doubleclick.net/pagead/viewthroughconversion/990489911/?random=1661808926319&cv=9&fst=1661808926319&num=1&bg=ffffff&guid=ON&resp=GooglemKTybQhCsO&u_h=900&u_w=1600&u_ah=860&u_aw=1600&u_cd=24&u_his=3&u_tz=60&u_java=false&u_nplug=5&u_nmime=2>m=2oa8o0&sendb=1&ig=1&data=event%3Dgtag.config&frm=0&url=https%3A%2F%2Fonlinebanking.mtb.com%2F&ref=https%3A%2F%2Fwww.google.com%2F&tiba=Welcome%20to%20Online%20Banking%20%7C%20M%26T%20Bank&auid=978845389.1661341762&hn=www.googleadservices.com&async=1&rfmt=3&fmt=4 | 216.58.207.226 | 200 OK | 1.1 kB |
URL HTTP/2googleads.g.doubleclick.net/pagead/viewthroughconversion/990489911/?random=1661808926319&cv=9&fst=1661808926319&num=1&bg=ffffff&guid=ON&resp=GooglemKTybQhCsO&u_h=900&u_w=1600&u_ah=860&u_aw=1600&u_cd=24&u_his=3&u_tz=60&u_java=false&u_nplug=5&u_nmime=2>m=2oa8o0&sendb=1&ig=1&data=event%3Dgtag.config&frm=0&url=https%3A%2F%2Fonlinebanking.mtb.com%2F&ref=https%3A%2F%2Fwww.google.com%2F&tiba=Welcome%20to%20Online%20Banking%20%7C%20M%26T%20Bank&auid=978845389.1661341762&hn=www.googleadservices.com&async=1&rfmt=3&fmt=4 IP216.58.207.226:0
File typeASCII text, with very long lines (2394), with no line terminators Hash16e2557f59d02c0b02e3d26f2c6729ea 908650ff6684976f7637259e45d097b4742119ad e047aa93eeaa8d71183442858b40222e1435858fce351575da107b14cb89265b
GET /pagead/viewthroughconversion/990489911/?random=1661808926319&cv=9&fst=1661808926319&num=1&bg=ffffff&guid=ON&resp=GooglemKTybQhCsO&u_h=900&u_w=1600&u_ah=860&u_aw=1600&u_cd=24&u_his=3&u_tz=60&u_java=false&u_nplug=5&u_nmime=2>m=2oa8o0&sendb=1&ig=1&data=event%3Dgtag.config&frm=0&url=https%3A%2F%2Fonlinebanking.mtb.com%2F&ref=https%3A%2F%2Fwww.google.com%2F&tiba=Welcome%20to%20Online%20Banking%20%7C%20M%26T%20Bank&auid=978845389.1661341762&hn=www.googleadservices.com&async=1&rfmt=3&fmt=4 HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mmgggod.web.app/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Tue, 13 Sep 2022 20:45:09 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
content-type: text/javascript; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
server: cafe
content-length: 1064
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Tue, 13-Sep-2022 21:00:09 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| www.googleadservices.com/pagead/conversion_async.js | 172.217.21.162 | 200 OK | 16 kB |
URL HTTP/2www.googleadservices.com/pagead/conversion_async.js IP172.217.21.162:0
File typeASCII text, with very long lines (1623) Hash829e282923aa2cb30b0c1e31e2e01b16 a3ada4758442e99c7f64bb1dbbab7a5912bdba54 e82c9c9caf6d1eedfa809c7ef3440c39a0c56c141cdba84481eb26c67baf87f6
GET /pagead/conversion_async.js HTTP/1.1
Host: www.googleadservices.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mmgggod.web.app/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding
date: Tue, 13 Sep 2022 20:45:09 GMT
expires: Tue, 13 Sep 2022 20:45:09 GMT
cache-control: private, max-age=3600
content-type: text/javascript; charset=UTF-8
etag: 13194339052015637803
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
server: cafe
content-length: 15690
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| mtb.d1.sc.omtrdc.net/b/ss/mtb/1/JS-2.9.0/s09524028680356?AQB=1&ndh=1&pf=1&t=13%2F8%2F2022%2020%3A44%3A55%202%200&ce=UTF-8&g=https%3A%2F%2Fmmgggod.web.app%2F&r=https%3A%2F%2Fwww.google.com%2F&cc=USD&c17=Tuesday%3A4%3A30PM&v19=D%3Dc17&c20=D%3Dg&c21=1&v21=D%3Dg&c22=New&v22=1&c23=Cookies%20Not%20Supported&v23=New&v24=Cookies%20Not%20Supported&c41=OLB&v41=OLB&v136=1663101895572&v151=Tealium&s=1280x1024&c=24&j=1.6&v=N&k=N&bw=1280&bh=939&AQE=1 |  15.188.95.229 | 302 Found | 0 B |
URL HTTP/2mtb.d1.sc.omtrdc.net/b/ss/mtb/1/JS-2.9.0/s09524028680356?AQB=1&ndh=1&pf=1&t=13%2F8%2F2022%2020%3A44%3A55%202%200&ce=UTF-8&g=https%3A%2F%2Fmmgggod.web.app%2F&r=https%3A%2F%2Fwww.google.com%2F&cc=USD&c17=Tuesday%3A4%3A30PM&v19=D%3Dc17&c20=D%3Dg&c21=1&v21=D%3Dg&c22=New&v22=1&c23=Cookies%20Not%20Supported&v23=New&v24=Cookies%20Not%20Supported&c41=OLB&v41=OLB&v136=1663101895572&v151=Tealium&s=1280x1024&c=24&j=1.6&v=N&k=N&bw=1280&bh=939&AQE=1 IP15.188.95.229:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /b/ss/mtb/1/JS-2.9.0/s09524028680356?AQB=1&ndh=1&pf=1&t=13%2F8%2F2022%2020%3A44%3A55%202%200&ce=UTF-8&g=https%3A%2F%2Fmmgggod.web.app%2F&r=https%3A%2F%2Fwww.google.com%2F&cc=USD&c17=Tuesday%3A4%3A30PM&v19=D%3Dc17&c20=D%3Dg&c21=1&v21=D%3Dg&c22=New&v22=1&c23=Cookies%20Not%20Supported&v23=New&v24=Cookies%20Not%20Supported&c41=OLB&v41=OLB&v136=1663101895572&v151=Tealium&s=1280x1024&c=24&j=1.6&v=N&k=N&bw=1280&bh=939&AQE=1 HTTP/1.1
Host: mtb.d1.sc.omtrdc.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mmgggod.web.app/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
access-control-allow-origin: *
vary: Origin
date: Tue, 13 Sep 2022 20:45:09 GMT
content-type: text/plain;charset=utf-8
expires: Mon, 12 Sep 2022 20:45:09 GMT
last-modified: Wed, 14 Sep 2022 20:45:09 GMT
pragma: no-cache
p3p: CP="This is not a P3P policy"
server: jag
set-cookie: s_vi_nwa=[CS]v4|0-0|6320EBD5[CE]; Path=/; Domain=omtrdc.net; Max-Age=63072000; Expires=Thu, 12 Sep 2024 20:45:45 GMT; SameSite=None; Secure
location: https://mtb.d1.sc.omtrdc.net/b/ss/mtb/1/JS-2.9.0/s09524028680356?AQB=1&pccr=true&ndh=1&pf=1&t=13%2F8%2F2022%2020%3A44%3A55%202%200&ce=UTF-8&g=https%3A%2F%2Fmmgggod.web.app%2F&r=https%3A%2F%2Fwww.google.com%2F&cc=USD&c17=Tuesday%3A4%3A30PM&v19=D%3Dc17&c20=D%3Dg&c21=1&v21=D%3Dg&c22=New&v22=1&c23=Cookies%20Not%20Supported&v23=New&v24=Cookies%20Not%20Supported&c41=OLB&v41=OLB&v136=1663101895572&v151=Tealium&s=1280x1024&c=24&j=1.6&v=N&k=N&bw=1280&bh=939&AQE=1
content-length: 0
cache-control: no-cache, no-store, max-age=0, no-transform, private
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.3 | 200 OK | 471 B |
IP142.250.74.3:0
Hash89dc4294d8e50675a5cb111e84d38452 993b0be337e43de62b8a33bef20c972881c8a646 27e6f64589d2befddc951fc27b83d03e1113bcfe301c76a2e412a20d2558a0c3
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 13 Sep 2022 20:45:09 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.3 | 200 OK | 471 B |
IP142.250.74.3:0
Hashc657642ae823a42b6f838d2341d9329f b4a2b37d97c363f7293e4b946d4c528becbfac50 201bd88ff237e22e1a302936cca2ed3066462e93b459ecab1ac1486a4ddaaaa9
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 13 Sep 2022 20:45:09 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.3 | 200 OK | 471 B |
IP142.250.74.3:0
Hash78f8bae58862d8be3437cfe9e927011d fb01a9cfd346f2c9b7694276c72a76e213887b06 389d233aa4b3ea23315c9d6e8d72d96fb2f802e227d24199c788a5a89e96a19e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 13 Sep 2022 20:45:09 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.3 | 200 OK | 472 B |
IP142.250.74.3:0
Hasha44521d3957cdba57b0fc21915252110 e04f70e8f3271d219d22be1a0c54f7a047abdd55 aaca825919de7c1d549ae107d482a8ac35cf518c1141ef3054018267a26067bd
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 13 Sep 2022 20:45:09 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| mtb.d1.sc.omtrdc.net/b/ss/mtb/1/JS-2.9.0/s09524028680356?AQB=1&pccr=true&ndh=1&pf=1&t=13%2F8%2F2022%2020%3A44%3A55%202%200&ce=UTF-8&g=https%3A%2F%2Fmmgggod.web.app%2F&r=https%3A%2F%2Fwww.google.com%2F&cc=USD&c17=Tuesday%3A4%3A30PM&v19=D%3Dc17&c20=D%3Dg&c21=1&v21=D%3Dg&c22=New&v22=1&c23=Cookies%20Not%20Supported&v23=New&v24=Cookies%20Not%20Supported&c41=OLB&v41=OLB&v136=1663101895572&v151=Tealium&s=1280x1024&c=24&j=1.6&v=N&k=N&bw=1280&bh=939&AQE=1 | 15.188.95.229 | 200 OK | 43 B |
URL HTTP/2mtb.d1.sc.omtrdc.net/b/ss/mtb/1/JS-2.9.0/s09524028680356?AQB=1&pccr=true&ndh=1&pf=1&t=13%2F8%2F2022%2020%3A44%3A55%202%200&ce=UTF-8&g=https%3A%2F%2Fmmgggod.web.app%2F&r=https%3A%2F%2Fwww.google.com%2F&cc=USD&c17=Tuesday%3A4%3A30PM&v19=D%3Dc17&c20=D%3Dg&c21=1&v21=D%3Dg&c22=New&v22=1&c23=Cookies%20Not%20Supported&v23=New&v24=Cookies%20Not%20Supported&c41=OLB&v41=OLB&v136=1663101895572&v151=Tealium&s=1280x1024&c=24&j=1.6&v=N&k=N&bw=1280&bh=939&AQE=1 IP15.188.95.229:0
File typeGIF image data, version 89a, 2 x 2\012- data Hashad480fd0732d0f6f1a8b06359e3a42bb a544538683a2dfe574eeb2e358ac8fcc78289d50 a1ecbaed793a1f564c49c671f2dd0ce36f858534ef6d26b55783a06b884cc506
GET /b/ss/mtb/1/JS-2.9.0/s09524028680356?AQB=1&pccr=true&ndh=1&pf=1&t=13%2F8%2F2022%2020%3A44%3A55%202%200&ce=UTF-8&g=https%3A%2F%2Fmmgggod.web.app%2F&r=https%3A%2F%2Fwww.google.com%2F&cc=USD&c17=Tuesday%3A4%3A30PM&v19=D%3Dc17&c20=D%3Dg&c21=1&v21=D%3Dg&c22=New&v22=1&c23=Cookies%20Not%20Supported&v23=New&v24=Cookies%20Not%20Supported&c41=OLB&v41=OLB&v136=1663101895572&v151=Tealium&s=1280x1024&c=24&j=1.6&v=N&k=N&bw=1280&bh=939&AQE=1 HTTP/1.1
Host: mtb.d1.sc.omtrdc.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://mmgggod.web.app/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
date: Tue, 13 Sep 2022 20:45:09 GMT
expires: Mon, 12 Sep 2022 20:45:09 GMT
last-modified: Wed, 14 Sep 2022 20:45:09 GMT
pragma: no-cache
p3p: CP="This is not a P3P policy"
server: jag
etag: 3571484154908213248-4619656691270561557
vary: *
content-type: image/gif;charset=utf-8
content-length: 43
cache-control: no-cache, no-store, max-age=0, no-transform, private
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
|
|
| www.google.no/pagead/1p-user-list/990489911/?random=1661808926319&cv=9&fst=1661806800000&num=1&bg=ffffff&guid=ON&u_h=900&u_w=1600&u_ah=860&u_aw=1600&u_cd=24&u_his=3&u_tz=60&u_java=false&u_nplug=5&u_nmime=2>m=2oa8o0&sendb=1&data=event%3Dgtag.config&frm=0&url=https%3A%2F%2Fonlinebanking.mtb.com%2F&ref=https%3A%2F%2Fwww.google.com%2F&tiba=Welcome%20to%20Online%20Banking%20%7C%20M%26T%20Bank&async=1&fmt=3&is_vtc=1&random=2961303589&resp=GooglemKTybQhCsO&rmt_tld=1&ipr=y | 142.250.74.3 | 200 OK | 42 B |
URL HTTP/2www.google.no/pagead/1p-user-list/990489911/?random=1661808926319&cv=9&fst=1661806800000&num=1&bg=ffffff&guid=ON&u_h=900&u_w=1600&u_ah=860&u_aw=1600&u_cd=24&u_his=3&u_tz=60&u_java=false&u_nplug=5&u_nmime=2>m=2oa8o0&sendb=1&data=event%3Dgtag.config&frm=0&url=https%3A%2F%2Fonlinebanking.mtb.com%2F&ref=https%3A%2F%2Fwww.google.com%2F&tiba=Welcome%20to%20Online%20Banking%20%7C%20M%26T%20Bank&async=1&fmt=3&is_vtc=1&random=2961303589&resp=GooglemKTybQhCsO&rmt_tld=1&ipr=y IP142.250.74.3:0
File typeGIF image data, version 89a, 1 x 1\012- data Hashd89746888da2d9510b64a9f031eaecd5 d5fceb6532643d0d84ffe09c40c481ecdf59e15a ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pagead/1p-user-list/990489911/?random=1661808926319&cv=9&fst=1661806800000&num=1&bg=ffffff&guid=ON&u_h=900&u_w=1600&u_ah=860&u_aw=1600&u_cd=24&u_his=3&u_tz=60&u_java=false&u_nplug=5&u_nmime=2>m=2oa8o0&sendb=1&data=event%3Dgtag.config&frm=0&url=https%3A%2F%2Fonlinebanking.mtb.com%2F&ref=https%3A%2F%2Fwww.google.com%2F&tiba=Welcome%20to%20Online%20Banking%20%7C%20M%26T%20Bank&async=1&fmt=3&is_vtc=1&random=2961303589&resp=GooglemKTybQhCsO&rmt_tld=1&ipr=y HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mmgggod.web.app/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Tue, 13 Sep 2022 20:45:09 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| www.google.com/pagead/1p-user-list/990489911/?random=1661808926319&cv=9&fst=1661806800000&num=1&bg=ffffff&guid=ON&u_h=900&u_w=1600&u_ah=860&u_aw=1600&u_cd=24&u_his=3&u_tz=60&u_java=false&u_nplug=5&u_nmime=2>m=2oa8o0&sendb=1&data=event%3Dgtag.config&frm=0&url=https%3A%2F%2Fonlinebanking.mtb.com%2F&ref=https%3A%2F%2Fwww.google.com%2F&tiba=Welcome%20to%20Online%20Banking%20%7C%20M%26T%20Bank&async=1&fmt=3&is_vtc=1&random=2961303589&resp=GooglemKTybQhCsO&rmt_tld=0&ipr=y | 142.250.74.164 | 200 OK | 42 B |
URL HTTP/2www.google.com/pagead/1p-user-list/990489911/?random=1661808926319&cv=9&fst=1661806800000&num=1&bg=ffffff&guid=ON&u_h=900&u_w=1600&u_ah=860&u_aw=1600&u_cd=24&u_his=3&u_tz=60&u_java=false&u_nplug=5&u_nmime=2>m=2oa8o0&sendb=1&data=event%3Dgtag.config&frm=0&url=https%3A%2F%2Fonlinebanking.mtb.com%2F&ref=https%3A%2F%2Fwww.google.com%2F&tiba=Welcome%20to%20Online%20Banking%20%7C%20M%26T%20Bank&async=1&fmt=3&is_vtc=1&random=2961303589&resp=GooglemKTybQhCsO&rmt_tld=0&ipr=y IP142.250.74.164:0
File typeGIF image data, version 89a, 1 x 1\012- data Hashd89746888da2d9510b64a9f031eaecd5 d5fceb6532643d0d84ffe09c40c481ecdf59e15a ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pagead/1p-user-list/990489911/?random=1661808926319&cv=9&fst=1661806800000&num=1&bg=ffffff&guid=ON&u_h=900&u_w=1600&u_ah=860&u_aw=1600&u_cd=24&u_his=3&u_tz=60&u_java=false&u_nplug=5&u_nmime=2>m=2oa8o0&sendb=1&data=event%3Dgtag.config&frm=0&url=https%3A%2F%2Fonlinebanking.mtb.com%2F&ref=https%3A%2F%2Fwww.google.com%2F&tiba=Welcome%20to%20Online%20Banking%20%7C%20M%26T%20Bank&async=1&fmt=3&is_vtc=1&random=2961303589&resp=GooglemKTybQhCsO&rmt_tld=0&ipr=y HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mmgggod.web.app/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Tue, 13 Sep 2022 20:45:09 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| ocsp.entrust.net/ | 23.13.44.131 | 200 OK | 1.6 kB |
IP23.13.44.131:0
Hashce0f1c882f1109258b1104a07143a55a 79098e661e3be0af786f15d0d795e1d80249ff41 a58a3c559a39c4329d35dbe025302dc053ee92b864f64da6c479b8d285d7ca52
POST / HTTP/1.1
Host: ocsp.entrust.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
ETag: "A58A3C559A39C4329D35DBE025302DC053EE92B864F64DA6C479B8D285D7CA52"
Last-Modified: Tue, 13 Sep 2022 14:00:00 UTC
Content-Length: 1585
Cache-Control: public, no-transform, must-revalidate, max-age=3520
Expires: Tue, 13 Sep 2022 21:43:49 GMT
Date: Tue, 13 Sep 2022 20:45:09 GMT
Connection: keep-alive
|
|
| asset.mtb.com/Documents/html/homepage/favicon.ico | 54.230.111.64 | 200 OK | 15 kB |
URL HTTP/2asset.mtb.com/Documents/html/homepage/favicon.ico IP54.230.111.64:0
File typePNG image data, 300 x 300, 8-bit/color RGB, non-interlaced\012- data Hashe82f458a5c1c5353a97401eccc925613 949d6c8d06ca14b52f496c20f63fae269b6708c2 cd320f6e4a5ccfb2d08a5aca1d42dc606530d63e3d779038c41865c85568cbf3
GET /Documents/html/homepage/favicon.ico HTTP/1.1
Host: asset.mtb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mmgggod.web.app/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: image/x-icon
content-length: 14862
accept-ranges: bytes
cache-control: max-age=3600, no-cache="set-cookie"
content-disposition: inline
content-encoding: gzip
date: Tue, 13 Sep 2022 20:25:29 GMT
last-modified: Wed, 04 May 2022 18:18:59 GMT
server: Apache
strict-transport-security: max-age=31536000; includeSubdomains; preload
x-content-type-options: nosniff
x-dispatcher: dispatcher1useast1
x-frame-options: SAMEORIGIN
x-vhost: publish
etag: "3dce-5de33a8b9cac0-gzip"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 c26775cc34c23943f6f5cfc9a3da9b4a.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: l8aPfRmNgI4X4QhWPlrgrjOCULoS0jndDJo-q6Aieh73uxnn4PxzDw==
age: 1180
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.3 | 200 OK | 472 B |
IP142.250.74.3:0
Hasha44521d3957cdba57b0fc21915252110 e04f70e8f3271d219d22be1a0c54f7a047abdd55 aaca825919de7c1d549ae107d482a8ac35cf518c1141ef3054018267a26067bd
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 13 Sep 2022 20:45:09 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.3 | 200 OK | 472 B |
IP142.250.74.3:0
Hashb743089bdff5635e2f7c38d20c1910f6 f1874493bc88c2d9ba4a95a43e810da1cb452abd 3a60895d54c86a3e46a3dbcacfc07f3fae4ba79add296b16d0938baacc8d462a
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 13 Sep 2022 20:45:09 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| r3.o.lencr.org/ | 23.33.119.27 | 200 OK | 503 B |
IP23.33.119.27:0 ASN#20940 Akamai International B.V.
Hashfe792a43fbfd72d158215bb5fa087c19 5b28cebdebfdd33871fa4982f39a89f5ce3cbf99 ec9ddd9d47e4cd14bd7471042ce3060c1d119038dac5d1f02a4040c617228b0d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "EC9DDD9D47E4CD14BD7471042CE3060C1D119038DAC5D1F02A4040C617228B0D"
Last-Modified: Mon, 12 Sep 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5999
Expires: Tue, 13 Sep 2022 22:25:08 GMT
Date: Tue, 13 Sep 2022 20:45:09 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 23.33.119.27 | 200 OK | 503 B |
IP23.33.119.27:0 ASN#20940 Akamai International B.V.
Hashfe792a43fbfd72d158215bb5fa087c19 5b28cebdebfdd33871fa4982f39a89f5ce3cbf99 ec9ddd9d47e4cd14bd7471042ce3060c1d119038dac5d1f02a4040c617228b0d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "EC9DDD9D47E4CD14BD7471042CE3060C1D119038DAC5D1F02A4040C617228B0D"
Last-Modified: Mon, 12 Sep 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5999
Expires: Tue, 13 Sep 2022 22:25:08 GMT
Date: Tue, 13 Sep 2022 20:45:09 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 23.33.119.27 | 200 OK | 503 B |
IP23.33.119.27:0 ASN#20940 Akamai International B.V.
Hashfe792a43fbfd72d158215bb5fa087c19 5b28cebdebfdd33871fa4982f39a89f5ce3cbf99 ec9ddd9d47e4cd14bd7471042ce3060c1d119038dac5d1f02a4040c617228b0d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "EC9DDD9D47E4CD14BD7471042CE3060C1D119038DAC5D1F02A4040C617228B0D"
Last-Modified: Mon, 12 Sep 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5999
Expires: Tue, 13 Sep 2022 22:25:08 GMT
Date: Tue, 13 Sep 2022 20:45:09 GMT
Connection: keep-alive
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F81f9b0a3-fe8f-4665-9e54-9dfaf5d4876b.jpeg | 34.120.237.76 | 200 OK | 9.5 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F81f9b0a3-fe8f-4665-9e54-9dfaf5d4876b.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash6174529fff57758e958da5432344962f 05ec2076b32398d60ee77fab8c14345bc7dfe647 65284a76355864efa944dff5033575013c6d74a019a7b731e0236603f2f656a7
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F81f9b0a3-fe8f-4665-9e54-9dfaf5d4876b.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9466
x-amzn-requestid: ba3f7eac-61c9-4b5f-ae8a-b372906a25ba
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YOTeoHMKoAMFr5Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-631bff90-1e70e2c444242a2d46387986;Sampled=0
x-amzn-remapped-date: Sat, 10 Sep 2022 03:08:00 GMT
x-amz-cf-pop: SEA73-P2
x-cache: Hit from cloudfront
x-amz-cf-id: -SwaUjMInlOaGpH6yK1W1a57QCQMgY-l43RdUfKVtZA1zJzMrLzC6g==
via: 1.1 0aebf3fe433ff96e68d785fad4ea4c0e.cloudfront.net (CloudFront), 1.1 f7283f3fe2c258cf54f8b7d3dd272e0e.cloudfront.net (CloudFront), 1.1 google
date: Tue, 13 Sep 2022 04:49:30 GMT
age: 57339
etag: "05ec2076b32398d60ee77fab8c14345bc7dfe647"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F75931920-737e-40b5-8dd6-d2070639ea2d.jpeg | 34.120.237.76 | 200 OK | 8.8 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F75931920-737e-40b5-8dd6-d2070639ea2d.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hashc14088c4ca0d576e087feed41b7f1565 172b23f2ef39b6c3fdebb5441b10a95712206d0a 2699efa811ceac5420f5bd26c35a6f48b51854e29cbce7cbb62efb613db7d6b9
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F75931920-737e-40b5-8dd6-d2070639ea2d.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8799
x-amzn-requestid: 1bcdf387-9ad2-449a-861e-3352b1744d23
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YUI-0G6vIAMFgbA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-631e552b-42aa46af6315148106c4fdee;Sampled=0
x-amzn-remapped-date: Sun, 11 Sep 2022 21:37:47 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: g2mxKK8L5T4YkeD8JqNUuV_KfsIq8ypRMvxhsyzSZSEIP4gDl4zLVQ==
via: 1.1 d83ae0e1ba84e92e58bc1efc23a0c652.cloudfront.net (CloudFront), 1.1 aef00f14752da9aa504d392fd46eff94.cloudfront.net (CloudFront), 1.1 google
date: Mon, 12 Sep 2022 21:41:55 GMT
age: 82994
etag: "172b23f2ef39b6c3fdebb5441b10a95712206d0a"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc9a2dff5-4864-4430-8c54-6b68d2bbd35a.jpeg | 34.120.237.76 | 200 OK | 11 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc9a2dff5-4864-4430-8c54-6b68d2bbd35a.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash838f709437b2dfbede4ee15307afe217 2ab2ee20e720b78be6deb55f967ac0d8b7dad048 a3b47ce595b475f2aab6f7378888d15ba3e98453d6c8a3d88946efc5d65eedba
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc9a2dff5-4864-4430-8c54-6b68d2bbd35a.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10849
x-amzn-requestid: 722d8d75-0911-4b59-af65-2b408bc09d80
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YXbx6E9-oAMFT8w=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-631fa672-74ea9343619d4a1865e34818;Sampled=0
x-amzn-remapped-date: Mon, 12 Sep 2022 21:36:50 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: 4rpwcrZLDlgcwBtH7wpoHMOb8hhFbKbZSQpjWqUqbt_Sl4ud3dm9Vg==
via: 1.1 1b0911478686968732f973d6e5e31d10.cloudfront.net (CloudFront), 1.1 707e733794d52100fde0ab21bf0b1462.cloudfront.net (CloudFront), 1.1 google
date: Mon, 12 Sep 2022 21:42:18 GMT
age: 82971
etag: "2ab2ee20e720b78be6deb55f967ac0d8b7dad048"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2830e2cb-8887-441e-8c0c-906b8fbb2366.jpeg | 34.120.237.76 | 200 OK | 9.9 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2830e2cb-8887-441e-8c0c-906b8fbb2366.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hashc9ab2ec10c79b91d15edb1d1e3dc763c 744fee4a0baa22ba3aa352d60620a916972b47dd f7bb66f5bb572d73f936fc74823f51ede1f2c4e309a939b39d9529ff8f757fbe
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2830e2cb-8887-441e-8c0c-906b8fbb2366.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9945
x-amzn-requestid: a347749f-a63a-4533-a274-7151b9f235ff
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YXcX8HAKoAMF5EQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-631fa765-56cff18515b2a5b3397231df;Sampled=0
x-amzn-remapped-date: Mon, 12 Sep 2022 21:40:53 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: lZ3FmD1gM8YBgZNt97kuYSol1kj0GQqRjyLT_7715VtH9GR1WpMDxA==
via: 1.1 d1151317ba32afe0e6370fd69fed222e.cloudfront.net (CloudFront), 1.1 989017835f43d594873bde5a7ee7fe5e.cloudfront.net (CloudFront), 1.1 google
date: Mon, 12 Sep 2022 21:42:20 GMT
age: 82969
etag: "744fee4a0baa22ba3aa352d60620a916972b47dd"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3a6b50df-cdcd-4b44-9ed3-90a502ea29ad.jpeg | 34.120.237.76 | 200 OK | 9.8 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3a6b50df-cdcd-4b44-9ed3-90a502ea29ad.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash239262b6ab17cb19414c35cd4f761092 48eddcf9838e980e67cc8f9cbb05b475df2f0331 cd27cbce632d769288d9c33c5c8e887ba02df5677f10f7a6d03139b590ba24b4
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3a6b50df-cdcd-4b44-9ed3-90a502ea29ad.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9815
x-amzn-requestid: 89243e57-94eb-4c6b-903f-aa01df030ecc
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YUIxnEAjoAMF_Ig=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-631e54d6-199403e2695b214711f5117f;Sampled=0
x-amzn-remapped-date: Sun, 11 Sep 2022 21:36:23 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: gUhO_jZ9W_10cAK-2lOVSmQ9r1DIZvNDaqpJs5oc6lt85qAkWbBcXg==
via: 1.1 01c28b52813cd0e82f810c492808b142.cloudfront.net (CloudFront), 1.1 73cb83fe6699afc2791b5c690c1ff8c6.cloudfront.net (CloudFront), 1.1 google
date: Mon, 12 Sep 2022 21:48:14 GMT
age: 82615
etag: "48eddcf9838e980e67cc8f9cbb05b475df2f0331"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5bb76515-eb77-4f38-aae2-75a885833991.jpeg | 34.120.237.76 | 200 OK | 10 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5bb76515-eb77-4f38-aae2-75a885833991.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash557695ec8ffeebb0272c099542a14ace ad627b434e1c3b693d8636675bcea0f8794e0dc2 4d79c7830caa73b921d6abaa97771ab1f4dc8fd709597f01ba04c268c03b6157
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5bb76515-eb77-4f38-aae2-75a885833991.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10407
x-amzn-requestid: 85df5ad9-f229-4d33-90b9-5dd28c77578a
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YH396F2SIAMFnGA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63196d25-3ee08f1e27cd37e96dba0f40;Sampled=0
x-amzn-remapped-date: Thu, 08 Sep 2022 04:18:45 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: Oep2UJdadBnTBuCy7CexUcezT0cCvm_9hroZnV-UrC9lQQxwUc4rkw==
via: 1.1 07c02ae6c53d85283eb15380264d9998.cloudfront.net (CloudFront), 1.1 559326ad73233233a9e52cb9e8601ede.cloudfront.net (CloudFront), 1.1 google
date: Tue, 13 Sep 2022 06:18:57 GMT
age: 51972
etag: "ad627b434e1c3b693d8636675bcea0f8794e0dc2"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| ocsp.sectigo.com/ | 104.18.32.68 | 200 OK | 472 B |
IP104.18.32.68:0
Hashc8fcf1cda01ab25750aa60bafebeb808 592ef0619536deb98f767e3842c2edb027697d62 89357b843633d30746a1c5685f197172373c3de098a229b847ad28f98faf67de
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 13 Sep 2022 20:45:10 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Tue, 13 Sep 2022 09:10:06 GMT
Expires: Tue, 20 Sep 2022 09:10:05 GMT
Etag: "592ef0619536deb98f767e3842c2edb027697d62"
Cache-Control: max-age=562494,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb2
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 74a3b998acac1c12-OSL
|
|
| ocsp.sectigo.com/ | 104.18.32.68 | 200 OK | 472 B |
IP104.18.32.68:0
Hashc8fcf1cda01ab25750aa60bafebeb808 592ef0619536deb98f767e3842c2edb027697d62 89357b843633d30746a1c5685f197172373c3de098a229b847ad28f98faf67de
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 13 Sep 2022 20:45:10 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Tue, 13 Sep 2022 09:10:06 GMT
Expires: Tue, 20 Sep 2022 09:10:05 GMT
Etag: "592ef0619536deb98f767e3842c2edb027697d62"
Cache-Control: max-age=562494,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb3
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 74a3b998a96a0b49-OSL
|
|
| mtb-app.quantummetric.com/?T=B&u=https%3A%2F%2Fmmgggod.web.app%2F&t=1663101895763&v=1663101896272&z=1&Q=1&Y=1&X=23b5450447ad41c798b05ca84c1824ae | 34.67.142.127 | 200 OK | 0 B |
URL HTTP/2mtb-app.quantummetric.com/?T=B&u=https%3A%2F%2Fmmgggod.web.app%2F&t=1663101895763&v=1663101896272&z=1&Q=1&Y=1&X=23b5450447ad41c798b05ca84c1824ae IP34.67.142.127:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /?T=B&u=https%3A%2F%2Fmmgggod.web.app%2F&t=1663101895763&v=1663101896272&z=1&Q=1&Y=1&X=23b5450447ad41c798b05ca84c1824ae HTTP/1.1
Host: mtb-app.quantummetric.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 2959
Origin: https://mmgggod.web.app
Connection: keep-alive
Referer: https://mmgggod.web.app/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Tue, 13 Sep 2022 20:45:10 GMT
content-type: application/json
content-length: 0
access-control-allow-origin: https://mmgggod.web.app
access-control-allow-credentials: true
strict-transport-security: max-age=31536000; includeSubDomains;
x-robots-tag: noindex
content-security-policy: default-src 'self' *.quantummetric.com; connect-src * ws:; frame-src * data: blob:; font-src * data: blob:; img-src * data:; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: *.quantummetric.com https://app.getbeamer.com https://backend.getbeamer.com https://realtime.getbeamer.com https://static.getbeamer.com https://ajax.googleapis.com https://static.zdassets.com https://*.appcues.com https://*.appcues.net https://*.qualtrics.com; style-src 'self' 'unsafe-inline' *.quantummetric.com https://fonts.googleapis.com https://app.getbeamer.com https://*.appcues.com https://*.appcues.net;
X-Firefox-Spdy: h2
|
|
| mtb-app.quantummetric.com/?T=B&u=https%3A%2F%2Fmmgggod.web.app%2F&t=1663101895763&v=1663101897014&H=e2099416aecaedb60e52813a&s=a1d6fd9ec9a05cc59fa85120588179e7&U=5b8aa16d14f405750e136599d28229de&z=1&Q=2&S=0&N=0 | 34.67.142.127 | 200 OK | 0 B |
URL HTTP/2mtb-app.quantummetric.com/?T=B&u=https%3A%2F%2Fmmgggod.web.app%2F&t=1663101895763&v=1663101897014&H=e2099416aecaedb60e52813a&s=a1d6fd9ec9a05cc59fa85120588179e7&U=5b8aa16d14f405750e136599d28229de&z=1&Q=2&S=0&N=0 IP34.67.142.127:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /?T=B&u=https%3A%2F%2Fmmgggod.web.app%2F&t=1663101895763&v=1663101897014&H=e2099416aecaedb60e52813a&s=a1d6fd9ec9a05cc59fa85120588179e7&U=5b8aa16d14f405750e136599d28229de&z=1&Q=2&S=0&N=0 HTTP/1.1
Host: mtb-app.quantummetric.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 365
Origin: https://mmgggod.web.app
Connection: keep-alive
Referer: https://mmgggod.web.app/
Cookie: s=a1d6fd9ec9a05cc59fa85120588179e7; U=5b8aa16d14f405750e136599d28229de
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 13 Sep 2022 20:45:10 GMT
content-type: application/json
content-length: 0
access-control-allow-origin: https://mmgggod.web.app
access-control-allow-credentials: true
strict-transport-security: max-age=31536000; includeSubDomains;
x-robots-tag: noindex
content-security-policy: default-src 'self' *.quantummetric.com; connect-src * ws:; frame-src * data: blob:; font-src * data: blob:; img-src * data:; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: *.quantummetric.com https://app.getbeamer.com https://backend.getbeamer.com https://realtime.getbeamer.com https://static.getbeamer.com https://ajax.googleapis.com https://static.zdassets.com https://*.appcues.com https://*.appcues.net https://*.qualtrics.com; style-src 'self' 'unsafe-inline' *.quantummetric.com https://fonts.googleapis.com https://app.getbeamer.com https://*.appcues.com https://*.appcues.net;
X-Firefox-Spdy: h2
|
|
| mtb-app.quantummetric.com/?s=a1d6fd9ec9a05cc59fa85120588179e7&H=e2099416aecaedb60e52813a&Q=3 | 34.67.142.127 | 200 OK | 50 B |
URL HTTP/2mtb-app.quantummetric.com/?s=a1d6fd9ec9a05cc59fa85120588179e7&H=e2099416aecaedb60e52813a&Q=3 IP34.67.142.127:0
File typeJSON data\012- , ASCII text, with no line terminators Hashe7216d542023258c6c9d2da8ca3bc51c da037d6db0fbe6f309c0afcedca5033638d4e253 131608ec884c52d801e117af9238303a4123d16104df040545f3c73ddd7e4c42
GET /?s=a1d6fd9ec9a05cc59fa85120588179e7&H=e2099416aecaedb60e52813a&Q=3 HTTP/1.1
Host: mtb-app.quantummetric.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://mmgggod.web.app
Connection: keep-alive
Referer: https://mmgggod.web.app/
Cookie: s=a1d6fd9ec9a05cc59fa85120588179e7; U=5b8aa16d14f405750e136599d28229de
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 13 Sep 2022 20:45:10 GMT
content-type: application/json
vary: Accept-Encoding
access-control-allow-origin: https://mmgggod.web.app
access-control-allow-credentials: true
strict-transport-security: max-age=31536000; includeSubDomains;
x-robots-tag: noindex
content-security-policy: default-src 'self' *.quantummetric.com; connect-src * ws:; frame-src * data: blob:; font-src * data: blob:; img-src * data:; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: *.quantummetric.com https://app.getbeamer.com https://backend.getbeamer.com https://realtime.getbeamer.com https://static.getbeamer.com https://ajax.googleapis.com https://static.zdassets.com https://*.appcues.com https://*.appcues.net https://*.qualtrics.com; style-src 'self' 'unsafe-inline' *.quantummetric.com https://fonts.googleapis.com https://app.getbeamer.com https://*.appcues.com https://*.appcues.net;
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| mtb-app.quantummetric.com/?T=B&u=https%3A%2F%2Fmmgggod.web.app%2F&t=1663101895763&v=1663101896271&z=1&S=0&N=0&P=0 | 34.67.142.127 | 200 OK | 90 B |
URL HTTP/2mtb-app.quantummetric.com/?T=B&u=https%3A%2F%2Fmmgggod.web.app%2F&t=1663101895763&v=1663101896271&z=1&S=0&N=0&P=0 IP34.67.142.127:0
File typeASCII text, with no line terminators Hash3dd6b49d5a8acd35e443144f99178d31 a1d01f3f861ecde5c87a41bf26cb57a299aa5d82 ac0e696811c2fb28865686fb33b42c3f0ff3b2302bb724ad58bc5e8d2ec5f06f
POST /?T=B&u=https%3A%2F%2Fmmgggod.web.app%2F&t=1663101895763&v=1663101896271&z=1&S=0&N=0&P=0 HTTP/1.1
Host: mtb-app.quantummetric.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 698
Origin: https://mmgggod.web.app
Connection: keep-alive
Referer: https://mmgggod.web.app/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Tue, 13 Sep 2022 20:45:10 GMT
content-type: application/json
vary: Accept-Encoding
access-control-allow-origin: https://mmgggod.web.app
access-control-allow-credentials: true
set-cookie: s=a1d6fd9ec9a05cc59fa85120588179e7;path=/;samesite=none;secure
U=5b8aa16d14f405750e136599d28229de;path=/;expires=Wed, 13 Sep 2023 20:45:10 GMT;samesite=none;secure
strict-transport-security: max-age=31536000; includeSubDomains;
x-robots-tag: noindex
content-security-policy: default-src 'self' *.quantummetric.com; connect-src * ws:; frame-src * data: blob:; font-src * data: blob:; img-src * data:; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: *.quantummetric.com https://app.getbeamer.com https://backend.getbeamer.com https://realtime.getbeamer.com https://static.getbeamer.com https://ajax.googleapis.com https://static.zdassets.com https://*.appcues.com https://*.appcues.net https://*.qualtrics.com; style-src 'self' 'unsafe-inline' *.quantummetric.com https://fonts.googleapis.com https://app.getbeamer.com https://*.appcues.com https://*.appcues.net;
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| mtb-app.quantummetric.com/?T=B&u=https%3A%2F%2Fmmgggod.web.app%2F&t=1663101895763&v=1663101901405&H=e2099416aecaedb60e52813a&s=a1d6fd9ec9a05cc59fa85120588179e7&z=1&Q=2&S=424&N=1 | 34.67.142.127 | 200 OK | 0 B |
URL HTTP/2mtb-app.quantummetric.com/?T=B&u=https%3A%2F%2Fmmgggod.web.app%2F&t=1663101895763&v=1663101901405&H=e2099416aecaedb60e52813a&s=a1d6fd9ec9a05cc59fa85120588179e7&z=1&Q=2&S=424&N=1 IP34.67.142.127:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /?T=B&u=https%3A%2F%2Fmmgggod.web.app%2F&t=1663101895763&v=1663101901405&H=e2099416aecaedb60e52813a&s=a1d6fd9ec9a05cc59fa85120588179e7&z=1&Q=2&S=424&N=1 HTTP/1.1
Host: mtb-app.quantummetric.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 116
Origin: https://mmgggod.web.app
Connection: keep-alive
Referer: https://mmgggod.web.app/
Cookie: s=a1d6fd9ec9a05cc59fa85120588179e7; U=5b8aa16d14f405750e136599d28229de
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 13 Sep 2022 20:45:14 GMT
content-type: application/json
content-length: 0
access-control-allow-origin: https://mmgggod.web.app
access-control-allow-credentials: true
strict-transport-security: max-age=31536000; includeSubDomains;
x-robots-tag: noindex
content-security-policy: default-src 'self' *.quantummetric.com; connect-src * ws:; frame-src * data: blob:; font-src * data: blob:; img-src * data:; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: *.quantummetric.com https://app.getbeamer.com https://backend.getbeamer.com https://realtime.getbeamer.com https://static.getbeamer.com https://ajax.googleapis.com https://static.zdassets.com https://*.appcues.com https://*.appcues.net https://*.qualtrics.com; style-src 'self' 'unsafe-inline' *.quantummetric.com https://fonts.googleapis.com https://app.getbeamer.com https://*.appcues.com https://*.appcues.net;
X-Firefox-Spdy: h2
|
|
| cdn.quantummetric.com/qscripts/quantum-mtb.js | 104.22.53.252 | 200 OK | 0 B |
URL HTTP/2cdn.quantummetric.com/qscripts/quantum-mtb.js IP104.22.53.252:0
GET /qscripts/quantum-mtb.js HTTP/1.1
Host: cdn.quantummetric.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mmgggod.web.app/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 13 Sep 2022 20:45:08 GMT
content-type: text/javascript
vary: Accept-Encoding
etag: W/"166309346392516613605351101663056002365"
cache-control: public, max-age=300, stale-while-revalidate=21600, stale-if-error=21600
access-control-allow-origin: *
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept
strict-transport-security: max-age=31536000
cf-cache-status: EXPIRED
server: cloudflare
cf-ray: 74a3b9892ac20b51-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|