| my.forms.app/form/630e0e70c2748c14c10ef710 |  104.26.7.145 | 301 Moved Permanently | 0 B |
URL HTTP/1.1my.forms.app/form/630e0e70c2748c14c10ef710 IP104.26.7.145:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /form/630e0e70c2748c14c10ef710 HTTP/1.1
Host: my.forms.app
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Date: Sat, 12 Nov 2022 04:38:31 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=3600
Expires: Sat, 12 Nov 2022 05:38:31 GMT
Location: https://my.forms.app/form/630e0e70c2748c14c10ef710
Server-Timing: cf-q-config;dur=6.0000002122251e-06
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=mZttrQYYf4UPsgBx4XvCn12gs2H6pOUrEYuc7aazpjdJC5a0PC13CvPOLE4H9de20hoRGrOGqDCFOJnFKJ3NRYtlT8tLeC0EximhzyAEGba6ofIYfZYxESzyfltUqw%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 768c941ccccbb500-OSL
alt-svc: h2=":443"; ma=60
|
|
| r3.o.lencr.org/ |  23.36.76.226 | 200 OK | 503 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hash3d0727e32cd103ddd4b73f28c81758aa 197a7bf43d63723fc532c23c6dced68d5cc36652 d3f75d03561d6a47d19370292e821a86e58381466f0c69386a21175de55882ff
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D3F75D03561D6A47D19370292E821A86E58381466F0C69386A21175DE55882FF"
Last-Modified: Fri, 11 Nov 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6876
Expires: Sat, 12 Nov 2022 06:33:07 GMT
Date: Sat, 12 Nov 2022 04:38:31 GMT
Connection: keep-alive
|
|
| ocsp.digicert.com/ |  93.184.220.29 | 200 OK | 471 B |
IP93.184.220.29:0
Hash4edf853c470fcec0ab277c78527f3c2d de93530ce15337e671c488d9fe05e7091d4956f0 b9d7976b398b1243ff8a571ddd3975d3a1317d69101061bdb1a755b3b56620e6
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2985
Cache-Control: max-age=110561
Content-Type: application/ocsp-response
Date: Sat, 12 Nov 2022 04:38:31 GMT
Etag: "636e247f-1d7"
Expires: Sun, 13 Nov 2022 11:21:12 GMT
Last-Modified: Fri, 11 Nov 2022 10:31:27 GMT
Server: ECS (ska/F71C)
X-Cache: HIT
Content-Length: 471
|
|
| r3.o.lencr.org/ | 23.36.76.226 | 200 OK | 503 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hash5076aaa9f4ccd602540286ce0590cb9a bbf7936a8413a564478971d9e19beb6338cbc869 00e3b967c579b0ccf709b78d497a43d95646b16eb50925fef1e2694c58f290b2
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "00E3B967C579B0CCF709B78D497A43D95646B16EB50925FEF1E2694C58F290B2"
Last-Modified: Fri, 11 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9112
Expires: Sat, 12 Nov 2022 07:10:23 GMT
Date: Sat, 12 Nov 2022 04:38:31 GMT
Connection: keep-alive
|
|
| firefox.settings.services.mozilla.com/v1/ | 34.102.187.140 | 200 OK | 939 B |
URL HTTP/2firefox.settings.services.mozilla.com/v1/ IP34.102.187.140:0
File typeJSON data\012- , ASCII text, with very long lines (939), with no line terminators Hashd130218d0e2841f39c99610fe1a2ab90 29fbe1e177ee55c7a61ae0a206afff271cf5f945 6b6d74dccf10c2bc98a91c3388280d7ba1d9596bf8cadd7db0e2f63720b3d152
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Alert, Backoff, Content-Type, Retry-After
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Sat, 12 Nov 2022 03:43:59 GMT
cache-control: public,max-age=3600
content-type: application/json
age: 3272
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain | 34.160.144.191 | 200 OK | 5.3 kB |
URL HTTP/2content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain IP34.160.144.191:0
File typePEM certificate\012- , ASCII text Hash67d5a988edcda47bc3b3b3f65d32b4b6 d4f0e0da8b3690cc7da925026d3414b68c7d954f 55e4848e3ec682e808ce7ee70950f86179c43af4f81926d826a95edfda395a78
GET /chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: PbJ9b0Qo0GCNEGOduAxzEsaecB/dr2MlzVRwEHflq5rzXTL7gt/GDMntG3D07/+piMRvVS1qBOU=
x-amz-request-id: Y116YC0SATV2CV6W
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Sat, 12 Nov 2022 04:12:51 GMT
age: 1540
last-modified: Fri, 30 Sep 2022 18:50:55 GMT
etag: "67d5a988edcda47bc3b3b3f65d32b4b6"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| contile.services.mozilla.com/v1/tiles | 34.117.237.239 | 200 OK | 12 B |
URL HTTP/2contile.services.mozilla.com/v1/tiles IP34.117.237.239:0
File typeJSON data\012- , ASCII text, with no line terminators Hash23e88fb7b99543fb33315b29b1fad9d6 a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sat, 12 Nov 2022 04:38:31 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| ocsp.digicert.com/ | 93.184.220.29 | 200 OK | 279 B |
IP93.184.220.29:0
Hasha48147977ede9b0b4a24b87a562ce63d 16e59d0e5e2f2fa55ceeb9cdf355a6574da6d45e ddb8f9407ffa38a418c9d8ed24f887b675ce916d5e0e7cc891623e9dfc883fbf
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Cache-Control: max-age=168728
Content-Type: application/ocsp-response
Date: Sat, 12 Nov 2022 04:38:31 GMT
Etag: "636f135f-117"
Expires: Mon, 14 Nov 2022 03:30:39 GMT
Last-Modified: Sat, 12 Nov 2022 03:30:39 GMT
Server: nginx
Content-Length: 279
|
|
| firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US | 34.102.187.140 | 200 OK | 329 B |
URL HTTP/2firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US IP34.102.187.140:0
File typeJSON data\012- , ASCII text, with very long lines (329), with no line terminators Hash0333b0655111aa68de771adfcc4db243 63f295a144ac87a7c8e23417626724eeca68a7eb 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Cache-Control, Pragma, Retry-After, ETag, Alert, Expires, Backoff, Content-Type, Last-Modified
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Sat, 12 Nov 2022 04:24:58 GMT
cache-control: public,max-age=3600
age: 813
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| my.forms.app/static/js/app.deff0.js | 172.67.72.65 | 200 OK | 71 kB |
URL HTTP/2my.forms.app/static/js/app.deff0.js IP172.67.72.65:0
File typeUnicode text, UTF-8 text, with very long lines (65389), with no line terminators Hashfb78fa8627f7b23f47e7a12eee31f3a8 1a09a5449de6ccaf2aac283f21f0f63a046c0544 1fb7f0f9542f695d6d852ddaa38cd46d7808cc58dea5b3f8b379f928b45f0588
GET /static/js/app.deff0.js HTTP/1.1
Host: my.forms.app
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://my.forms.app/form/630e0e70c2748c14c10ef710
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 12 Nov 2022 04:38:32 GMT
content-type: application/javascript
last-modified: Sat, 12 Nov 2022 02:52:49 GMT
vary: Accept-Encoding
etag: W/"636f0a81-3f707"
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: HIT
age: 6258
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=K1Rn6ye2%2By5sWpnFSSafelsRDt4J40QyMqAZeyDK8c4OOwozNDxbk20%2BoZ6yh%2F7FuQJWRwmeq%2BY7ueI8XjmoDBLOelPc%2BQKzqbSKffnHovH6P468H1i27muD1krrUQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15552000; preload
server: cloudflare
cf-ray: 768c94221f00b500-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| my.forms.app/static/js/asyncstyles.7792f.js | 172.67.72.65 | 200 OK | 671 B |
URL HTTP/2my.forms.app/static/js/asyncstyles.7792f.js IP172.67.72.65:0
File typeASCII text, with no line terminators Hashcdd7945659479b566e276ac7d0724dc9 1476eb9d9c94496a5224a49a9d7ee83f5f832f0d 48b77b7a9dbda256e52ee5a6be33a149f03262833ea341e016c52ff4fef63dbb
GET /static/js/asyncstyles.7792f.js HTTP/1.1
Host: my.forms.app
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://my.forms.app/form/630e0e70c2748c14c10ef710
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 12 Nov 2022 04:38:32 GMT
content-type: application/javascript
last-modified: Sat, 12 Nov 2022 02:52:40 GMT
vary: Accept-Encoding
etag: W/"636f0a78-10b"
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: HIT
age: 6258
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=QqSfiM877dx4STBnN5baH8demM%2B%2FXGekna9nEEe2x59uruJn5TLqMJvh%2FSmKIlqJ%2FiVS%2FySRdum7KA%2BSVrrUR2AHscxR1HFk8AvDMLMfm9nQeqXO0i4hCL3cI6EzcQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15552000; preload
server: cloudflare
cf-ray: 768c94221f01b500-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| my.forms.app/static/css/app.88443.css | 172.67.72.65 | 200 OK | 16 kB |
URL HTTP/2my.forms.app/static/css/app.88443.css IP172.67.72.65:0
File typeASCII text, with very long lines (65536), with no line terminators Hashc089c14e5d891286d206c5b685641461 fbfd601c0116edca0ce02a314a30566ecfd7f9ca c53810f59942902bd194074834f6b955c69335975d04b30b6695aa44200ca2d3
GET /static/css/app.88443.css HTTP/1.1
Host: my.forms.app
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://my.forms.app/form/630e0e70c2748c14c10ef710
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 12 Nov 2022 04:38:32 GMT
content-type: text/css
last-modified: Sat, 12 Nov 2022 02:53:09 GMT
vary: Accept-Encoding
etag: W/"636f0a95-125a2"
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: HIT
age: 6258
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=sr6hqlQPRsae3PBbvzN%2FKJmoTV3kRKB3VWhveGRXKIS1f4aPV95dVAOG1nHR1hyFwomLlBkOTY78IzaSsPuAWTe%2FwTBBUzCS1IJTJbWJSsap9v6ZX2moPviqFlq14A%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15552000; preload
server: cloudflare
cf-ray: 768c94221efcb500-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| my.forms.app/static/js/vendor.523c4.js | 172.67.72.65 | 200 OK | 206 kB |
URL HTTP/2my.forms.app/static/js/vendor.523c4.js IP172.67.72.65:0
File typeUnicode text, UTF-8 text, with very long lines (23129) Size206 kB (205648 bytes) Hash7bb35b0084857843f6c67682330d9327 2eb435838aa8603997fccd994a7d14544a74ac72 7f48aa2c815a37d37f35ab7147cb1b1935648ebc7cfd337d32b352c97ac95eaf
GET /static/js/vendor.523c4.js HTTP/1.1
Host: my.forms.app
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://my.forms.app/form/630e0e70c2748c14c10ef710
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 12 Nov 2022 04:38:32 GMT
content-type: application/javascript
last-modified: Sat, 12 Nov 2022 02:52:40 GMT
vary: Accept-Encoding
etag: W/"636f0a78-5e95c"
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: HIT
age: 6258
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=PFLwEce4qBOEDa27kbEYTFBNHDykuVVcocqlpjf%2BiX2C8Hf1D1tY%2Fko91VToKFi8fybcsXXQQ9xIKG4NR5P9wA%2BCuYGA6yJZGGexHoLViwyIKtpHBlyKFpBoBCzX6A%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15552000; preload
server: cloudflare
cf-ray: 768c94222f04b500-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| my.forms.app/static/js/runtime~app.7f651.js | 172.67.72.65 | 200 OK | 7.1 kB |
URL HTTP/2my.forms.app/static/js/runtime~app.7f651.js IP172.67.72.65:0
File typeASCII text, with very long lines (24608), with no line terminators Hash1f140d69c880c65f76e130ce29b8fb5b 63c1480f55240618c695bd0664e6eb2ecae5c252 bdf3104242fa8e56e2e28160bb3e7148fad8135aed2b07916a947f4783b4c7c8
GET /static/js/runtime~app.7f651.js HTTP/1.1
Host: my.forms.app
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://my.forms.app/form/630e0e70c2748c14c10ef710
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 12 Nov 2022 04:38:32 GMT
content-type: application/javascript
last-modified: Sat, 12 Nov 2022 02:52:55 GMT
vary: Accept-Encoding
etag: W/"636f0a87-6020"
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: HIT
age: 6258
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=6i5WDHbLN%2FfnveuLg8SHCJthT5PLdafPbeIl7waZh41M3SjPeTPixn1apoPhf5ZCw44nuYr92SnLpdYPzM2NM%2FXYabY8ThmVi0nMo%2BQa%2Fm0HTkiUrNqPSZHaO9SyMQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15552000; preload
server: cloudflare
cf-ray: 768c94222f05b500-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| my.forms.app/static/js/asyncstyles.7792f.js | 172.67.72.65 | 304 Not Modified | 0 B |
URL HTTP/2my.forms.app/static/js/asyncstyles.7792f.js IP172.67.72.65:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /static/js/asyncstyles.7792f.js HTTP/1.1
Host: my.forms.app
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://my.forms.app/form/630e0e70c2748c14c10ef710
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
If-Modified-Since: Sat, 12 Nov 2022 02:52:40 GMT
If-None-Match: W/"636f0a78-10b"
TE: trailers
HTTP/2 304 Not Modified
date: Sat, 12 Nov 2022 04:38:32 GMT
last-modified: Sat, 12 Nov 2022 02:52:40 GMT
vary: Accept-Encoding
etag: W/"636f0a78-10b"
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: HIT
age: 6258
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Mmex7uTqMj2iZrOJM%2Fu%2BffNO8ANgOEVB1rYgmB2XfOzgBbmzu3sY9cB05KVWYnSL63PpqB5B3Nm027ozp0Bn825cjSJTubY8ln2m9LMN55ZyCm01vyUxcizW2kSzwQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15552000; preload
server: cloudflare
cf-ray: 768c9423af95b500-OSL
X-Firefox-Spdy: h2
|
|
| my.forms.app/static/js/FormDesign~FormView~LocalForm~shareform.853a4.js | 172.67.72.65 | 200 OK | 428 B |
URL HTTP/2my.forms.app/static/js/FormDesign~FormView~LocalForm~shareform.853a4.js IP172.67.72.65:0
File typeASCII text, with very long lines (2713), with no line terminators Hashd979aab1e423c7b6c3addc3dae226c30 a825d119c591cbb345e1964104f67a1bba7c191a 35bd83c4aaff21dc230fc9cfbe900427974822d68515a839f9d59fc6d1ca05b2
GET /static/js/FormDesign~FormView~LocalForm~shareform.853a4.js HTTP/1.1
Host: my.forms.app
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://my.forms.app/form/630e0e70c2748c14c10ef710
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 12 Nov 2022 04:38:32 GMT
content-type: application/javascript
last-modified: Sat, 12 Nov 2022 02:52:50 GMT
vary: Accept-Encoding
etag: W/"636f0a82-a99"
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: HIT
age: 6257
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=4fxh8Hn%2FbFKAisvMG4XZemCTQdXkMd4YyMyzp0C60SwD4G0%2BuKXDLfRmcW8%2FlK3bi4HzSX678%2F0NPDAHtXZ5AYazB7b8NxQ3qXKcyRO5fGqcrzuoc39OjzU0lC%2FLBQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15552000; preload
server: cloudflare
cf-ray: 768c9423cfa6b500-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| push.services.mozilla.com/ | 34.210.158.59 | 101 Switching Protocols | 0 B |
URL HTTP/1.1push.services.mozilla.com/ IP34.210.158.59:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: 2HZq1EkqKbZY0nRtRjJLBg==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: dViOUJG/H0RLDoYNgh6l1VrWVvk=
|
|
| my.forms.app/static/js/iicon.59ea2.js | 172.67.72.65 | 200 OK | 14 kB |
URL HTTP/2my.forms.app/static/js/iicon.59ea2.js IP172.67.72.65:0
File typeASCII text, with very long lines (13470), with no line terminators Hash511dc929d3c30c6fa4159a1c7a9a0a61 686b4cb4aa9e86df519dbeeb626f9431d1ebb73b b986191ab60b462ce9752300bf984902b7be2de9a9fe3f908fe8ca92d83923f7
GET /static/js/iicon.59ea2.js HTTP/1.1
Host: my.forms.app
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://my.forms.app/form/630e0e70c2748c14c10ef710
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 12 Nov 2022 04:38:32 GMT
content-type: application/javascript
last-modified: Sat, 12 Nov 2022 02:52:48 GMT
vary: Accept-Encoding
etag: W/"636f0a80-349e"
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: HIT
age: 6258
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=f3QMySp%2BjYoypsk36qSwVP9P3dLFm7hah9K2GyzM1FX272uJd30%2FmAj%2FxhPwHKzGo56%2FetAE1%2FOhTY7qFn%2B7GKGCI%2Fa7Lwgwe%2F2Ll7tbzLBp1Q52WmXQR%2FxYWTP1fg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15552000; preload
server: cloudflare
cf-ray: 768c94222f03b500-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| my.forms.app/static/js/vendors~FormView~LocalForm~webfontloader.3a8b0.js | 172.67.72.65 | 200 OK | 28 kB |
URL HTTP/2my.forms.app/static/js/vendors~FormView~LocalForm~webfontloader.3a8b0.js IP172.67.72.65:0
File typeUnicode text, UTF-8 text, with very long lines (12156), with no line terminators Hashc62fc2121b2980020d049a82e3f31c91 fd8ade5a443215d5c5b85f9d592a51346683fd9b 943ba4beac306ba793ea44b5b1458cad44092ce71a1c22a43fbb7db2c855e742
GET /static/js/vendors~FormView~LocalForm~webfontloader.3a8b0.js HTTP/1.1
Host: my.forms.app
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://my.forms.app/form/630e0e70c2748c14c10ef710
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 12 Nov 2022 04:38:32 GMT
content-type: application/javascript
last-modified: Sat, 12 Nov 2022 02:52:41 GMT
vary: Accept-Encoding
etag: W/"636f0a79-2f93"
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: HIT
age: 6258
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=7eZlabdLz6C5jukKTmoxG%2BQjbRC43C9VULlLE%2BETomE4hIft%2FsVwW%2BYWsK3DZc4OgfuPFXUqy70RYjgsc7z5%2FQcZLYksWSJR%2BIbINJWM47E6Dr7jMzhkJf82aEUXIA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15552000; preload
server: cloudflare
cf-ray: 768c9423af92b500-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| my.forms.app/static/js/FormBuilder~FormView~SharedReport~shareform~shareresult.c42fe.js | 172.67.72.65 | 200 OK | 1.6 kB |
URL HTTP/2my.forms.app/static/js/FormBuilder~FormView~SharedReport~shareform~shareresult.c42fe.js IP172.67.72.65:0
File typeASCII text, with very long lines (2823), with no line terminators Hash8c1a5f63e4312776ed485d44a17afd54 954aea9d2d037dfe20228c141d48dbcabe873c8f 5306e3bb883230118523b09163bf99c0e8d53a7d40618f29143c59f4bd0d43ce
GET /static/js/FormBuilder~FormView~SharedReport~shareform~shareresult.c42fe.js HTTP/1.1
Host: my.forms.app
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://my.forms.app/form/630e0e70c2748c14c10ef710
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 12 Nov 2022 04:38:32 GMT
content-type: application/javascript
last-modified: Sat, 12 Nov 2022 02:53:13 GMT
vary: Accept-Encoding
etag: W/"636f0a99-b07"
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: HIT
age: 6257
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=iWy%2FsRvWogudUmOYeMbZEiSuBUdic6WHvFcK%2FL4luWmoS1KMoSUPeUoxA8v8L%2FHAH1kxdcMWzAa0ghe3lUG9SNlLX924UauRU399zt93Ed2fiNSXNXvmLBZ8n0Urfw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15552000; preload
server: cloudflare
cf-ray: 768c9423bfa1b500-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| my.forms.app/static/js/swal.4f135.js | 172.67.72.65 | 200 OK | 100 kB |
URL HTTP/2my.forms.app/static/js/swal.4f135.js IP172.67.72.65:0
File typeASCII text, with very long lines (65536), with no line terminators Hashf38a773d5de671d035d6844abcf08f95 0a371fc87931018de1937d89bec37fecaf8335b3 374f0636dce063d6321ba30874530a030cd1fc88b74fde6c04d63c73891faae3
GET /static/js/swal.4f135.js HTTP/1.1
Host: my.forms.app
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://my.forms.app/form/630e0e70c2748c14c10ef710
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 12 Nov 2022 04:38:32 GMT
content-type: application/javascript
last-modified: Sat, 12 Nov 2022 02:52:26 GMT
vary: Accept-Encoding
etag: W/"636f0a6a-12468"
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: HIT
age: 6257
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=4UnL627HRjPYmRb4qtPon8cYDrTkG2LRXQwsPQ%2Bpzbz5dsvd6EhQzXtPQTUDP8ycCwllmoOC6KlGNFZmvFnm%2FywUjTwRhWlASWy4juL%2FjI6D6emwehsiCSlsXCC0dw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15552000; preload
server: cloudflare
cf-ray: 768c9423af98b500-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| api.forms.app/form/630e0e70c2748c14c10ef710/view | 104.26.6.145 | 204 No Content | 0 B |
URL HTTP/2api.forms.app/form/630e0e70c2748c14c10ef710/view IP104.26.6.145:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /form/630e0e70c2748c14c10ef710/view HTTP/1.1
Host: api.forms.app
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: authorization
Referer: https://my.forms.app/
Origin: https://my.forms.app
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 204 No Content
date: Sat, 12 Nov 2022 04:38:32 GMT
access-control-allow-headers: authorization
access-control-allow-methods: GET
access-control-allow-origin: *
x-frame-options: SAMEORIGIN
x-custom-header: web4
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=vTRP7Sejn7Pibwk961xTscAsW0vh6r5ZpG458hrcg6K%2BSvA9r0nzlfM7xvG0dA6KMVl5F6Mg5IgIhmErjqkQkfR6pP%2Fw0hJ92XG69xCVp4BLW%2FrAGQo8SQmJuh9yihw%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15552000; preload
server: cloudflare
cf-ray: 768c9424fd66b527-OSL
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.3 | 200 OK | 472 B |
IP142.250.74.3:0
Hashe3f9965225cba49c71506d7dee4c1647 d1d30248236cfe679fa182860d69634d30f5b0ca 8a2641a2fa1026f8893b4acf7f7c78c633a1408779f3063c87ad292729300d97
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 12 Nov 2022 04:38:32 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| fonts.gstatic.com/s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 | 216.58.207.195 | 200 OK | 45 kB |
URL HTTP/2fonts.gstatic.com/s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 IP216.58.207.195:0
File typeWeb Open Font Format (Version 2), TrueType, length 44856, version 1.0\012- data Hash565ce506190ad3af920b40baf1794cec ad3cba5d06100e09449a864d3b5e58403b478b3d 8778e9af2422858d7052ff9a0f3c12c08ae976bdd6e0316db144cd5579cd97db
GET /s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://my.forms.app
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 44856
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 10 Nov 2022 05:42:51 GMT
expires: Fri, 10 Nov 2023 05:42:51 GMT
cache-control: public, max-age=31536000
age: 168941
last-modified: Mon, 15 Aug 2022 18:20:18 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.3 | 200 OK | 472 B |
IP142.250.74.3:0
Hashe3f9965225cba49c71506d7dee4c1647 d1d30248236cfe679fa182860d69634d30f5b0ca 8a2641a2fa1026f8893b4acf7f7c78c633a1408779f3063c87ad292729300d97
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 12 Nov 2022 04:38:32 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| ocsp.digicert.com/ | 93.184.220.29 | 200 OK | 471 B |
IP93.184.220.29:0
Hash1bb279167832b97b5e80041e8975740c 48d5f288978ea6717b16e0f96974a23603361cc2 894d4dd927851fb6078c3bd527e3f424c4e3ad3f6ebdfa7c0fee089e0ce044cd
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3338
Cache-Control: max-age=171700
Content-Type: application/ocsp-response
Date: Sat, 12 Nov 2022 04:38:32 GMT
Etag: "636f11f3-1d7"
Expires: Mon, 14 Nov 2022 04:20:12 GMT
Last-Modified: Sat, 12 Nov 2022 03:24:35 GMT
Server: ECS (ska/F71C)
X-Cache: HIT
Content-Length: 471
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.3 | 200 OK | 472 B |
IP142.250.74.3:0
Hash23dd8b12572b78e5d32d491b3d0d9d32 718c3e3abcc55c295c72e5ee4e5441fe5acc1363 f72c359246ea96d4f28bbc5aee8d4d24fcba9f47dfc691693f6c49e370d9b103
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 12 Nov 2022 04:38:32 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| connect.facebook.net/en_US/fbevents.js |  31.13.72.12 | 200 OK | 27 kB |
URL HTTP/2connect.facebook.net/en_US/fbevents.js IP31.13.72.12:0
File typeASCII text, with very long lines (64348) Hash0ac10debd3a9ea8147a26d045bb93e6e ff45f3442508e8695f2303701682ebdb6e016464 5dee7b453b2c72c07ff1d62432493a044507835a8031ea62edf2fa7cc26219b9
GET /en_US/fbevents.js HTTP/1.1
Host: connect.facebook.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://my.forms.app/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
content-type: application/x-javascript; charset=utf-8
content-security-policy: default-src facebook.net *.facebook.net fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com data: blob: 'self';script-src *.fbcdn.net *.facebook.net 'unsafe-inline' 'unsafe-eval' blob: data: 'self';style-src data: blob: 'unsafe-inline' facebook.net *.facebook.net fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com;connect-src *.fbcdn.net *.facebook.net wss://*.fbcdn.net attachment.fbsbx.com blob: 'self';block-all-mixed-content;upgrade-insecure-requests;report-uri https://www.facebook.com/csp/reporting/?m=c&minimize=0;
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
pragma: public
cache-control: public, max-age=1200
expires: Sat, 01 Jan 2000 00:00:00 GMT
x-content-type-options: nosniff
x-xss-protection: 0
x-frame-options: DENY
strict-transport-security: max-age=31536000; preload; includeSubDomains
x-fb-debug: iCZETojngDR6nhQQ+6UNI8izXaJuCKHIFIZHjEAjYMcjbOonRidbkAw+CDOChfQuKM5OmZtVs1lMwrLFillcVg==
priority: u=3,i
content-length: 27337
x-fb-trip-id: 1904183273
date: Sat, 12 Nov 2022 04:38:32 GMT
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| api.forms.app/form/630e0e70c2748c14c10ef710/view | 104.26.6.145 | 200 OK | 21 kB |
URL HTTP/2api.forms.app/form/630e0e70c2748c14c10ef710/view IP104.26.6.145:0
File typeJSON data\012- , ASCII text, with very long lines (2321), with no line terminators Hash692ae1049e004e42ad222443fd28def2 71a9dc6d440560bde30f7df8665d2caa9c50f482 72fda94ada2de8aaa14bfe323089a024af87e89adb6d93c135a01ea661cc8938
GET /form/630e0e70c2748c14c10ef710/view HTTP/1.1
Host: api.forms.app
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en
Accept-Encoding: gzip, deflate, br
Authorization: none
Origin: https://my.forms.app
Connection: keep-alive
Referer: https://my.forms.app/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
date: Sat, 12 Nov 2022 04:38:32 GMT
content-type: application/json; charset=utf-8
vary: Accept-Encoding
access-control-allow-origin: *
x-frame-options: SAMEORIGIN
x-custom-header: web4
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=41v%2Fm2A%2FKlxE9VyFrpoRAwU0nUHle7D5BzMmGOvCI6etEGTc%2BFc47Ek%2BxnBnz9yU9fnfo7Zm6JYa1Mv0LxuFF11Qu6KWLdRGbZhuHBmdfC21hcFlEk3cQtxm30Oe5%2Fk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15552000; preload
server: cloudflare
cf-ray: 768c94255d90b527-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.3 | 200 OK | 472 B |
IP142.250.74.3:0
Hash23dd8b12572b78e5d32d491b3d0d9d32 718c3e3abcc55c295c72e5ee4e5441fe5acc1363 f72c359246ea96d4f28bbc5aee8d4d24fcba9f47dfc691693f6c49e370d9b103
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 12 Nov 2022 04:38:32 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| my.forms.app/static/css/mainheader.45d0a.css | 172.67.72.65 | 200 OK | 2.8 kB |
URL HTTP/2my.forms.app/static/css/mainheader.45d0a.css IP172.67.72.65:0
File typeASCII text, with very long lines (8217), with no line terminators Hasha77a79ae8dee4a77904b6a9243a0affa 6715dde5041be80a5c247587db09037f197ecac3 9ccaf9ecea5358aaa639937a841fbde74f4867b0c649d51effc86562dcfe84a9
GET /static/css/mainheader.45d0a.css HTTP/1.1
Host: my.forms.app
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://my.forms.app/form/630e0e70c2748c14c10ef710
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 12 Nov 2022 04:38:32 GMT
content-type: text/css
last-modified: Sat, 12 Nov 2022 02:53:01 GMT
vary: Accept-Encoding
etag: W/"636f0a8d-2019"
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: HIT
age: 6258
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=tODOVtCqZBjhuhyaidBdAKKOnXJPfWDc4AT52brha26%2B%2BDNgrmIIXwFgJpZW%2BQk1T0EcovgZRfH3BjVno4Tt8tQNq0NXJF%2B6sdLyUC6uZq8gxzwpP8UOc9Qc%2FOPxcQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15552000; preload
server: cloudflare
cf-ray: 768c9423efc2b500-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| ocsp.digicert.com/ | 93.184.220.29 | 200 OK | 471 B |
IP93.184.220.29:0
Hash1bb279167832b97b5e80041e8975740c 48d5f288978ea6717b16e0f96974a23603361cc2 894d4dd927851fb6078c3bd527e3f424c4e3ad3f6ebdfa7c0fee089e0ce044cd
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3338
Cache-Control: max-age=171700
Content-Type: application/ocsp-response
Date: Sat, 12 Nov 2022 04:38:32 GMT
Etag: "636f11f3-1d7"
Expires: Mon, 14 Nov 2022 04:20:12 GMT
Last-Modified: Sat, 12 Nov 2022 03:24:35 GMT
Server: ECS (ska/F71C)
X-Cache: HIT
Content-Length: 471
|
|
| api.forms.app/user/gettimezonefromutc | 104.26.6.145 | 200 OK | 1.1 kB |
URL HTTP/2api.forms.app/user/gettimezonefromutc IP104.26.6.145:0
File typeJSON data\012- , ASCII text, with no line terminators Hash2bbe1bd9b0589105823a431be87e70ae ffb04ee95cb1d6152900fdea8eaa224c64a0d41e e24e858a1cb9a2cebf904cd1e40d3eb1122f65ed253c15f6217bfa0a3378c329
POST /user/gettimezonefromutc HTTP/1.1
Host: api.forms.app
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json;charset=utf-8
Authorization: none
Content-Length: 21
Origin: https://my.forms.app
Connection: keep-alive
Referer: https://my.forms.app/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
date: Sat, 12 Nov 2022 04:38:32 GMT
content-type: text/plain; charset=utf-8
vary: Accept-Encoding
access-control-allow-origin: *
x-frame-options: SAMEORIGIN
x-custom-header: web4
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=FEkjjU1SdoMYKwjwPFXsxNMCzpsm9KS%2FhM9QgQFk8LgnVU8mbYW5x%2FMmwYIXCaPrfx6biGE%2BU%2FczL3yonFOxlXN0MEqFaAOCtzC8UXTZ4%2B%2F6SKiA7oL1c3VXR8AIKmE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15552000; preload
server: cloudflare
cf-ray: 768c94250d6ab527-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.3 | 200 OK | 472 B |
IP142.250.74.3:0
Hash23dd8b12572b78e5d32d491b3d0d9d32 718c3e3abcc55c295c72e5ee4e5441fe5acc1363 f72c359246ea96d4f28bbc5aee8d4d24fcba9f47dfc691693f6c49e370d9b103
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 12 Nov 2022 04:38:32 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| my.forms.app/static/icons/apple-touch-icon.png?v=1 | 172.67.72.65 | 200 OK | 5.7 kB |
URL HTTP/2my.forms.app/static/icons/apple-touch-icon.png?v=1 IP172.67.72.65:0
File typePNG image data, 180 x 180, 8-bit/color RGB, non-interlaced\012- data Hashc43b1e0fe485cb53c3fd9330372b51c3 a0901719a49fee671cffea18381c0eb187a66f88 e8fb3cd2c0e51524797de9b6f32319cc99ea107c682119b6284ae4318dd53000
GET /static/icons/apple-touch-icon.png?v=1 HTTP/1.1
Host: my.forms.app
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://my.forms.app/form/630e0e70c2748c14c10ef710
Cookie: language=en; _gcl_au=1.1.175212147.1668227912
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 12 Nov 2022 04:38:32 GMT
content-type: image/png
content-length: 5681
last-modified: Sat, 12 Nov 2022 04:38:05 GMT
etag: "636f232d-1631"
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: EXPIRED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ruKCxHlkYrmbqziavlFFm7QMQta6GLof8tCV2sGrpUWB6Qz3hyuE26Ph0N4UWKsXc1CPE8quE7snoxsixHKVI8sRnbJhb5liH%2Bb201ZdFmOgE5xcER8S55hipUmtmg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=15552000; preload
server: cloudflare
cf-ray: 768c94260886b500-OSL
X-Firefox-Spdy: h2
|
|
| my.forms.app/static/js/FormBuilder~FormDesign~FormView.ac83c.js | 172.67.72.65 | 200 OK | 3.3 kB |
URL HTTP/2my.forms.app/static/js/FormBuilder~FormDesign~FormView.ac83c.js IP172.67.72.65:0
File typeASCII text, with very long lines (8506), with no line terminators Hashe01d8673edaef89a41d60a6647398cfb bc9c23ab387e0f443aa48dda06b7db4e3af7dd7e e0db7c244c557e22058954ebb50e4ecd102a1add37fcdaf3904e693fd256f642
GET /static/js/FormBuilder~FormDesign~FormView.ac83c.js HTTP/1.1
Host: my.forms.app
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://my.forms.app/form/630e0e70c2748c14c10ef710
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 12 Nov 2022 04:38:32 GMT
content-type: application/javascript
last-modified: Sat, 12 Nov 2022 02:52:26 GMT
vary: Accept-Encoding
etag: W/"636f0a6a-213a"
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: HIT
age: 6257
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=oA1gscHuMH%2Bhh5lLQ10KH8fp%2B4az%2FTlNCkr%2F2QjpKWaDKriwQ10SnXHSr3MY59tISSHlXZowVkDPp6p9OobzVIEtHjOTUl6NdxVC4Fvw1CxqQH21Y0W7RRxT2gTllg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15552000; preload
server: cloudflare
cf-ray: 768c9423cfa8b500-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.3 | 200 OK | 471 B |
IP142.250.74.3:0
Hashaca2e38eee453679f022dba5cf64555b 1c9f6f5e9ed1272e9edcc958e7cc2dec61f793df ea8bc6a82c3243813e137066ca5b659192f72ac69690f9ea4dcb668624baf586
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 12 Nov 2022 04:38:32 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.3 | 200 OK | 471 B |
IP142.250.74.3:0
Hasha7d7a5379a732fc5eadab78de886cc31 6df8c63644e97bf57262415f24e270c718e1758b c355159cc937a19485f62cc446530f319749237e147adbb2c5784d1d2c20ed64
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 12 Nov 2022 04:38:32 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.3 | 200 OK | 471 B |
IP142.250.74.3:0
Hashaca2e38eee453679f022dba5cf64555b 1c9f6f5e9ed1272e9edcc958e7cc2dec61f793df ea8bc6a82c3243813e137066ca5b659192f72ac69690f9ea4dcb668624baf586
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 12 Nov 2022 04:38:32 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.3 | 200 OK | 471 B |
IP142.250.74.3:0
Hasha7d7a5379a732fc5eadab78de886cc31 6df8c63644e97bf57262415f24e270c718e1758b c355159cc937a19485f62cc446530f319749237e147adbb2c5784d1d2c20ed64
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 12 Nov 2022 04:38:32 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| www.google.no/pagead/1p-user-list/794725785/?random=1668227912085&cv=11&fst=1668225600000&bg=ffffff&guid=ON&async=1>m=2oab90&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Fmy.forms.app%2Fform%2F630e0e70c2748c14c10ef710&tiba=forms.app%3A%20Online%20Form%20Builder%20%7C%20Free%20Online%20Survey%20Tool&data=event%3Dgtag.config&fmt=3&is_vtc=1&random=3242498881&rmt_tld=1&ipr=y | 142.250.74.3 | 200 OK | 42 B |
URL HTTP/2www.google.no/pagead/1p-user-list/794725785/?random=1668227912085&cv=11&fst=1668225600000&bg=ffffff&guid=ON&async=1>m=2oab90&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Fmy.forms.app%2Fform%2F630e0e70c2748c14c10ef710&tiba=forms.app%3A%20Online%20Form%20Builder%20%7C%20Free%20Online%20Survey%20Tool&data=event%3Dgtag.config&fmt=3&is_vtc=1&random=3242498881&rmt_tld=1&ipr=y IP142.250.74.3:0
File typeGIF image data, version 89a, 1 x 1\012- data Hashd89746888da2d9510b64a9f031eaecd5 d5fceb6532643d0d84ffe09c40c481ecdf59e15a ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pagead/1p-user-list/794725785/?random=1668227912085&cv=11&fst=1668225600000&bg=ffffff&guid=ON&async=1>m=2oab90&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Fmy.forms.app%2Fform%2F630e0e70c2748c14c10ef710&tiba=forms.app%3A%20Online%20Form%20Builder%20%7C%20Free%20Online%20Survey%20Tool&data=event%3Dgtag.config&fmt=3&is_vtc=1&random=3242498881&rmt_tld=1&ipr=y HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://my.forms.app/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Sat, 12 Nov 2022 04:38:32 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| www.google.com/pagead/1p-user-list/587928374/?random=1668227911924&cv=11&fst=1668225600000&bg=ffffff&guid=ON&async=1>m=2wgb90&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Fmy.forms.app%2Fform%2F630e0e70c2748c14c10ef710&tiba=forms.app%3A%20Online%20Form%20Builder%20%7C%20Free%20Online%20Survey%20Tool&fmt=3&is_vtc=1&random=1986891347&rmt_tld=0&ipr=y | 142.250.74.164 | 200 OK | 42 B |
URL HTTP/2www.google.com/pagead/1p-user-list/587928374/?random=1668227911924&cv=11&fst=1668225600000&bg=ffffff&guid=ON&async=1>m=2wgb90&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Fmy.forms.app%2Fform%2F630e0e70c2748c14c10ef710&tiba=forms.app%3A%20Online%20Form%20Builder%20%7C%20Free%20Online%20Survey%20Tool&fmt=3&is_vtc=1&random=1986891347&rmt_tld=0&ipr=y IP142.250.74.164:0
File typeGIF image data, version 89a, 1 x 1\012- data Hashd89746888da2d9510b64a9f031eaecd5 d5fceb6532643d0d84ffe09c40c481ecdf59e15a ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pagead/1p-user-list/587928374/?random=1668227911924&cv=11&fst=1668225600000&bg=ffffff&guid=ON&async=1>m=2wgb90&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Fmy.forms.app%2Fform%2F630e0e70c2748c14c10ef710&tiba=forms.app%3A%20Online%20Form%20Builder%20%7C%20Free%20Online%20Survey%20Tool&fmt=3&is_vtc=1&random=1986891347&rmt_tld=0&ipr=y HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://my.forms.app/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Sat, 12 Nov 2022 04:38:32 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-123158574-1&cid=1050579268.1668227912&jid=1125355312&gjid=1209787617&_gid=897620484.1668227912&_u=aCDAgEAjAAAAAEAAI~&z=1546018549 | 142.251.1.155 | 200 OK | 4 B |
URL HTTP/2stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-123158574-1&cid=1050579268.1668227912&jid=1125355312&gjid=1209787617&_gid=897620484.1668227912&_u=aCDAgEAjAAAAAEAAI~&z=1546018549 IP142.251.1.155:0
File typeASCII text, with no line terminators Hash48c0473b7821185d937e685216e2168b 3743e47f8a429a5e87b86cb582d78940733d9d2e 570c4d4674fd20602189c548c145ba1f8ac34bc2e4599a71471969028aa1e25a
POST /j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-123158574-1&cid=1050579268.1668227912&jid=1125355312&gjid=1209787617&_gid=897620484.1668227912&_u=aCDAgEAjAAAAAEAAI~&z=1546018549 HTTP/1.1
Host: stats.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: https://my.forms.app
Connection: keep-alive
Referer: https://my.forms.app/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: https://my.forms.app
strict-transport-security: max-age=10886400; includeSubDomains; preload
date: Sat, 12 Nov 2022 04:38:32 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 4
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| www.google.no/pagead/1p-user-list/587928374/?random=1668227911924&cv=11&fst=1668225600000&bg=ffffff&guid=ON&async=1>m=2wgb90&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Fmy.forms.app%2Fform%2F630e0e70c2748c14c10ef710&tiba=forms.app%3A%20Online%20Form%20Builder%20%7C%20Free%20Online%20Survey%20Tool&fmt=3&is_vtc=1&random=1986891347&rmt_tld=1&ipr=y | 142.250.74.3 | 200 OK | 42 B |
URL HTTP/2www.google.no/pagead/1p-user-list/587928374/?random=1668227911924&cv=11&fst=1668225600000&bg=ffffff&guid=ON&async=1>m=2wgb90&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Fmy.forms.app%2Fform%2F630e0e70c2748c14c10ef710&tiba=forms.app%3A%20Online%20Form%20Builder%20%7C%20Free%20Online%20Survey%20Tool&fmt=3&is_vtc=1&random=1986891347&rmt_tld=1&ipr=y IP142.250.74.3:0
File typeGIF image data, version 89a, 1 x 1\012- data Hashd89746888da2d9510b64a9f031eaecd5 d5fceb6532643d0d84ffe09c40c481ecdf59e15a ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pagead/1p-user-list/587928374/?random=1668227911924&cv=11&fst=1668225600000&bg=ffffff&guid=ON&async=1>m=2wgb90&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Fmy.forms.app%2Fform%2F630e0e70c2748c14c10ef710&tiba=forms.app%3A%20Online%20Form%20Builder%20%7C%20Free%20Online%20Survey%20Tool&fmt=3&is_vtc=1&random=1986891347&rmt_tld=1&ipr=y HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://my.forms.app/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Sat, 12 Nov 2022 04:38:32 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| www.google.com/pagead/1p-user-list/794725785/?random=1668227912085&cv=11&fst=1668225600000&bg=ffffff&guid=ON&async=1>m=2oab90&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Fmy.forms.app%2Fform%2F630e0e70c2748c14c10ef710&tiba=forms.app%3A%20Online%20Form%20Builder%20%7C%20Free%20Online%20Survey%20Tool&data=event%3Dgtag.config&fmt=3&is_vtc=1&random=3242498881&rmt_tld=0&ipr=y | 142.250.74.164 | 200 OK | 42 B |
URL HTTP/2www.google.com/pagead/1p-user-list/794725785/?random=1668227912085&cv=11&fst=1668225600000&bg=ffffff&guid=ON&async=1>m=2oab90&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Fmy.forms.app%2Fform%2F630e0e70c2748c14c10ef710&tiba=forms.app%3A%20Online%20Form%20Builder%20%7C%20Free%20Online%20Survey%20Tool&data=event%3Dgtag.config&fmt=3&is_vtc=1&random=3242498881&rmt_tld=0&ipr=y IP142.250.74.164:0
File typeGIF image data, version 89a, 1 x 1\012- data Hashd89746888da2d9510b64a9f031eaecd5 d5fceb6532643d0d84ffe09c40c481ecdf59e15a ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pagead/1p-user-list/794725785/?random=1668227912085&cv=11&fst=1668225600000&bg=ffffff&guid=ON&async=1>m=2oab90&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Fmy.forms.app%2Fform%2F630e0e70c2748c14c10ef710&tiba=forms.app%3A%20Online%20Form%20Builder%20%7C%20Free%20Online%20Survey%20Tool&data=event%3Dgtag.config&fmt=3&is_vtc=1&random=3242498881&rmt_tld=0&ipr=y HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://my.forms.app/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Sat, 12 Nov 2022 04:38:32 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.3 | 200 OK | 471 B |
IP142.250.74.3:0
Hashaca2e38eee453679f022dba5cf64555b 1c9f6f5e9ed1272e9edcc958e7cc2dec61f793df ea8bc6a82c3243813e137066ca5b659192f72ac69690f9ea4dcb668624baf586
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 12 Nov 2022 04:38:32 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| bat.bing.com/action/0?ti=137024713&tm=gtm002&Ver=2&mid=95b29df4-da02-45c8-bf01-3cafee892499&sid=dcaa57a0624311edba43075cad019a2b&vid=dcaa7a20624311edbfe837c773556ae7&vids=1&msclkid=N&pi=0&lg=en-US&sw=1280&sh=1024&sc=24&tl=forms.app%3A%20Online%20Form%20Builder%20%7C%20Free%20Online%20Survey%20Tool&kw=form,%20builder,%20formbuilder,%20free%20form%20builder&p=https%3A%2F%2Fmy.forms.app%2Fform%2F630e0e70c2748c14c10ef710&r=<=1263&pt=1668227910560,,,,,333,369,369,370,589,373,589,774,776,824,1214,1261,1263,,,&pn=0,0&evt=pageLoad&sv=1&rn=291507 | 13.107.21.200 | 204 No Content | 0 B |
URL HTTP/2bat.bing.com/action/0?ti=137024713&tm=gtm002&Ver=2&mid=95b29df4-da02-45c8-bf01-3cafee892499&sid=dcaa57a0624311edba43075cad019a2b&vid=dcaa7a20624311edbfe837c773556ae7&vids=1&msclkid=N&pi=0&lg=en-US&sw=1280&sh=1024&sc=24&tl=forms.app%3A%20Online%20Form%20Builder%20%7C%20Free%20Online%20Survey%20Tool&kw=form,%20builder,%20formbuilder,%20free%20form%20builder&p=https%3A%2F%2Fmy.forms.app%2Fform%2F630e0e70c2748c14c10ef710&r=<=1263&pt=1668227910560,,,,,333,369,369,370,589,373,589,774,776,824,1214,1261,1263,,,&pn=0,0&evt=pageLoad&sv=1&rn=291507 IP13.107.21.200:0 ASN#8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /action/0?ti=137024713&tm=gtm002&Ver=2&mid=95b29df4-da02-45c8-bf01-3cafee892499&sid=dcaa57a0624311edba43075cad019a2b&vid=dcaa7a20624311edbfe837c773556ae7&vids=1&msclkid=N&pi=0&lg=en-US&sw=1280&sh=1024&sc=24&tl=forms.app%3A%20Online%20Form%20Builder%20%7C%20Free%20Online%20Survey%20Tool&kw=form,%20builder,%20formbuilder,%20free%20form%20builder&p=https%3A%2F%2Fmy.forms.app%2Fform%2F630e0e70c2748c14c10ef710&r=<=1263&pt=1668227910560,,,,,333,369,369,370,589,373,589,774,776,824,1214,1261,1263,,,&pn=0,0&evt=pageLoad&sv=1&rn=291507 HTTP/1.1
Host: bat.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://my.forms.app/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
cache-control: no-cache, must-revalidate
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
set-cookie: MUID=3F94D488266E6BA411B4C6D2279B6A27; domain=.bing.com; expires=Thu, 07-Dec-2023 04:38:32 GMT; path=/; SameSite=None; Secure; Priority=High;
strict-transport-security: max-age=31536000; includeSubDomains; preload
access-control-allow-origin: *
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: B396385600464638AFA0AD123BD0D19B Ref B: OSL30EDGE0506 Ref C: 2022-11-12T04:38:32Z
date: Sat, 12 Nov 2022 04:38:32 GMT
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.3 | 200 OK | 471 B |
IP142.250.74.3:0
Hashe569acd833d180f3c2fba0919fbeb704 60a3121c9bf8e08a8a7fe70001c24b6f8c9981f5 994bee0670c93479c3e835985d24d7ce41fbc0a3013e173d79ea1ea5f63ac85c
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 12 Nov 2022 04:38:32 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| bat.bing.com/p/action/137024713.js | 13.107.21.200 | 204 No Content | 0 B |
URL HTTP/2bat.bing.com/p/action/137024713.js IP13.107.21.200:0 ASN#8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /p/action/137024713.js HTTP/1.1
Host: bat.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://my.forms.app/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
cache-control: private,max-age=1800
set-cookie: MUID=39F093155A476F702244814F5BB26EF3; domain=.bing.com; expires=Thu, 07-Dec-2023 04:38:32 GMT; path=/; SameSite=None; Secure; Priority=High;
strict-transport-security: max-age=31536000; includeSubDomains; preload
access-control-allow-origin: *
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 65CA0E29DBC0487F9F91E89FFFE38B61 Ref B: OSL30EDGE0506 Ref C: 2022-11-12T04:38:32Z
date: Sat, 12 Nov 2022 04:38:32 GMT
X-Firefox-Spdy: h2
|
|
| file.forms.app/tempfile/630e0e70c2748c14c10ef710/c147181a-2866-11ed-8d27-4201c0a80002 | 172.67.72.65 | 200 OK | 4.8 kB |
URL HTTP/2file.forms.app/tempfile/630e0e70c2748c14c10ef710/c147181a-2866-11ed-8d27-4201c0a80002 IP172.67.72.65:0
File typePNG image data, 348 x 145, 8-bit colormap, non-interlaced\012- data Hashc65944d1e2784c0b930269ed2cb06f3b db15efd25dbf0f0f1aae4156ba653a90ac8147da 8debdea61aabc7c985302c5d4b347bd575fd28069204e4a1aa9812f61035ad29
GET /tempfile/630e0e70c2748c14c10ef710/c147181a-2866-11ed-8d27-4201c0a80002 HTTP/1.1
Host: file.forms.app
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://my.forms.app/
Cookie: language=en; _gcl_au=1.1.175212147.1668227912; _ga_740JKHV4FZ=GS1.1.1668227912.1.0.1668227912.0.0.0; _ga=GA1.1.1050579268.1668227912; _gid=GA1.2.897620484.1668227912; _dc_gtm_UA-123158574-1=1; _uetsid=dcaa57a0624311edba43075cad019a2b; _uetvid=dcaa7a20624311edbfe837c773556ae7; _ga_YMG397QK6S=GS1.1.1668227912.1.0.1668227912.0.0.0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
date: Sat, 12 Nov 2022 04:38:33 GMT
content-type: image/png
content-disposition: attachment; filename= c147181a-2866-11ed-8d27-4201c0a80002
cf-cache-status: MISS
last-modified: Sat, 12 Nov 2022 04:38:33 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=WSp4bdHbXXSgK2vyDnxKeBNT4ctTKyVcpv%2BooC1GHp1C%2BlyjG2SLq9c5wt1AGTa%2FK7eAjtPCYzZnqzieZmEo6kvPO2B%2BvZOPofhDzhWfOqSMXCc0JJqpVa7cb8tvwWS2"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=15552000; preload
server: cloudflare
cf-ray: 768c9428b996b500-OSL
X-Firefox-Spdy: h2
|
|
| region1.google-analytics.com/g/collect?v=2&tid=G-740JKHV4FZ>m=2oeb90&_p=1819165340&cid=1050579268.1668227912&ul=en-us&sr=1280x1024&_s=1&sid=1668227912&sct=1&seg=0&dl=https%3A%2F%2Fmy.forms.app%2Fform%2F630e0e70c2748c14c10ef710&dt=forms.app%3A%20Online%20Form%20Builder%20%7C%20Free%20Online%20Survey%20Tool&en=page_view&_fv=1&_nsi=1&_ss=2 | 216.239.34.36 | 204 No Content | 0 B |
URL HTTP/2region1.google-analytics.com/g/collect?v=2&tid=G-740JKHV4FZ>m=2oeb90&_p=1819165340&cid=1050579268.1668227912&ul=en-us&sr=1280x1024&_s=1&sid=1668227912&sct=1&seg=0&dl=https%3A%2F%2Fmy.forms.app%2Fform%2F630e0e70c2748c14c10ef710&dt=forms.app%3A%20Online%20Form%20Builder%20%7C%20Free%20Online%20Survey%20Tool&en=page_view&_fv=1&_nsi=1&_ss=2 IP216.239.34.36:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-740JKHV4FZ>m=2oeb90&_p=1819165340&cid=1050579268.1668227912&ul=en-us&sr=1280x1024&_s=1&sid=1668227912&sct=1&seg=0&dl=https%3A%2F%2Fmy.forms.app%2Fform%2F630e0e70c2748c14c10ef710&dt=forms.app%3A%20Online%20Form%20Builder%20%7C%20Free%20Online%20Survey%20Tool&en=page_view&_fv=1&_nsi=1&_ss=2 HTTP/1.1
Host: region1.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://my.forms.app
Connection: keep-alive
Referer: https://my.forms.app/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 204 No Content
access-control-allow-origin: https://my.forms.app
date: Sat, 12 Nov 2022 04:38:33 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| www.facebook.com/tr/?id=175163836725648&ev=PageView&dl=https%3A%2F%2Fmy.forms.app%2Fform%2F630e0e70c2748c14c10ef710&rl=&if=false&ts=1668227912712&sw=1280&sh=1024&v=2.9.89&r=stable&a=tmgoogletagmanager&ec=0&o=30&fbp=fb.1.1668227912709.1820477754&it=1668227912208&coo=false&tm=1&rqm=GET | 31.13.72.36 | 200 OK | 0 B |
URL HTTP/2www.facebook.com/tr/?id=175163836725648&ev=PageView&dl=https%3A%2F%2Fmy.forms.app%2Fform%2F630e0e70c2748c14c10ef710&rl=&if=false&ts=1668227912712&sw=1280&sh=1024&v=2.9.89&r=stable&a=tmgoogletagmanager&ec=0&o=30&fbp=fb.1.1668227912709.1820477754&it=1668227912208&coo=false&tm=1&rqm=GET IP31.13.72.36:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /tr/?id=175163836725648&ev=PageView&dl=https%3A%2F%2Fmy.forms.app%2Fform%2F630e0e70c2748c14c10ef710&rl=&if=false&ts=1668227912712&sw=1280&sh=1024&v=2.9.89&r=stable&a=tmgoogletagmanager&ec=0&o=30&fbp=fb.1.1668227912709.1820477754&it=1668227912208&coo=false&tm=1&rqm=GET HTTP/1.1
Host: www.facebook.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://my.forms.app/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/plain
access-control-allow-origin:
access-control-allow-credentials: true
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-length: 0
server: proxygen-bolt
alt-svc: h3=":443"; ma=86400
date: Sat, 12 Nov 2022 04:38:33 GMT
X-Firefox-Spdy: h2
|
|
| my.forms.app/static/js/vendors~FormBuilder~FormTemplate~shareform~welcomepage.74918.js | 172.67.72.65 | 200 OK | 1.9 kB |
URL HTTP/2my.forms.app/static/js/vendors~FormBuilder~FormTemplate~shareform~welcomepage.74918.js IP172.67.72.65:0
File typeASCII text, with very long lines (5544), with no line terminators Hashdc85357c13c5caf650c2e53de24e2391 617b57ae567883b11b5f9de8c82e343e25f9fe45 466b357ba56b0395cad8a15f6ee05a9c13dd0adcc0f8129f3a33a33475e7067a
GET /static/js/vendors~FormBuilder~FormTemplate~shareform~welcomepage.74918.js HTTP/1.1
Host: my.forms.app
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://my.forms.app/form/630e0e70c2748c14c10ef710
Cookie: language=en; _gcl_au=1.1.175212147.1668227912; _ga_740JKHV4FZ=GS1.1.1668227912.1.0.1668227912.0.0.0; _ga=GA1.2.1050579268.1668227912; _gid=GA1.2.897620484.1668227912; _dc_gtm_UA-123158574-1=1; _uetsid=dcaa57a0624311edba43075cad019a2b; _uetvid=dcaa7a20624311edbfe837c773556ae7
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 12 Nov 2022 04:38:33 GMT
content-type: application/javascript
last-modified: Sat, 12 Nov 2022 04:38:26 GMT
vary: Accept-Encoding
etag: W/"636f2342-15a8"
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2B3MIfSwhcbA7NkgUXXBZW820KMq5b%2BdgufsEr%2B1VG%2FwdvedO0xOkwGsE%2BCPKx8CwrwhJHDT8XkiIPOyX87%2B6yJv4lmqu06Y6cTuQI2fhr8Yqsn12pql%2FcC3q6xYW0w%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15552000; preload
server: cloudflare
cf-ray: 768c94277917b500-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| my.forms.app/static/css/imaskedtext.8cad2.css | 172.67.72.65 | 200 OK | 377 B |
URL HTTP/2my.forms.app/static/css/imaskedtext.8cad2.css IP172.67.72.65:0
File typeASCII text, with very long lines (1307), with no line terminators Hash78d11295da5cfe0e6f3ff943a3ea035f 98afde913ba3bb95189b3269a49894dd8701e83c 3c08dfd26c1088a090fa591b2fc98ac8fe4ef3f9459a6cc058684557ca0b652a
GET /static/css/imaskedtext.8cad2.css HTTP/1.1
Host: my.forms.app
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
Connection: keep-alive
Referer: https://my.forms.app/form/630e0e70c2748c14c10ef710
Cookie: language=en; _gcl_au=1.1.175212147.1668227912; _ga_740JKHV4FZ=GS1.1.1668227912.1.0.1668227912.0.0.0; _ga=GA1.1.1050579268.1668227912; _gid=GA1.2.897620484.1668227912; _dc_gtm_UA-123158574-1=1; _uetsid=dcaa57a0624311edba43075cad019a2b; _uetvid=dcaa7a20624311edbfe837c773556ae7; _ga_YMG397QK6S=GS1.1.1668227912.1.0.1668227912.0.0.0; _fbp=fb.1.1668227912709.1820477754
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 12 Nov 2022 04:38:33 GMT
content-type: text/css
last-modified: Sat, 12 Nov 2022 02:52:24 GMT
vary: Accept-Encoding
etag: W/"636f0a68-51b"
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: HIT
age: 6259
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Iy0qBW%2BxszzEqsCTtiyZisQP4mvGlC8Z1Lpny8X%2BALUx8biHbChViYe8fyRPzx3l4qStvk9DiLwcq6faUDiDNmt76pPl%2BfAVO02%2B7FQldy%2BliKaROJB4StHuOfaV1g%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15552000; preload
server: cloudflare
cf-ray: 768c942a8a70b500-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| js-agent.newrelic.com/nr-spa-1216.min.js | 151.101.86.137 | 200 OK | 18 kB |
URL HTTP/2js-agent.newrelic.com/nr-spa-1216.min.js IP151.101.86.137:0
File typeASCII text, with very long lines (32010) Hash6561a2403142205f966207d61576f1a6 1310e72f494e12ab63a4280fc1600a2c89dc9bb8 0e496fcab0b9120938373e271fa6631b7da17adf33f8a490637467c170a3e37a
GET /nr-spa-1216.min.js HTTP/1.1
Host: js-agent.newrelic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://my.forms.app/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: TAwVDFAylU9PwNPPW/eXC4UyIMC8EQ1d6JNW9Q+uXGnPmL1fuimq9M3lAe733gCMeKNDiCQX1YM=
x-amz-request-id: SYTECJR5CMD8NJ8E
last-modified: Thu, 14 Apr 2022 16:45:57 GMT
etag: "63e2df852d15ab21d7ff8fc4363222e8"
x-amz-version-id: UU.F5jvoumAjQChriwTQHbisCFw_OInU
content-type: application/javascript
server: AmazonS3
cache-control: public, max-age=7200, stale-if-error=604800
content-encoding: gzip
accept-ranges: bytes
date: Sat, 12 Nov 2022 04:38:33 GMT
via: 1.1 varnish
x-served-by: cache-bma1620-BMA
x-cache: HIT
x-cache-hits: 829
x-timer: S1668227913.401967,VS0,VE0
vary: Accept-Encoding
cross-origin-resource-policy: cross-origin
content-length: 18216
X-Firefox-Spdy: h2
|
|
| my.forms.app/static/js/iicon.59ea2.js | 172.67.72.65 | 304 Not Modified | 0 B |
URL HTTP/2my.forms.app/static/js/iicon.59ea2.js IP172.67.72.65:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /static/js/iicon.59ea2.js HTTP/1.1
Host: my.forms.app
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
Connection: keep-alive
Referer: https://my.forms.app/form/630e0e70c2748c14c10ef710
Cookie: language=en; _gcl_au=1.1.175212147.1668227912; _ga_740JKHV4FZ=GS1.1.1668227912.1.0.1668227912.0.0.0; _ga=GA1.1.1050579268.1668227912; _gid=GA1.2.897620484.1668227912; _dc_gtm_UA-123158574-1=1; _uetsid=dcaa57a0624311edba43075cad019a2b; _uetvid=dcaa7a20624311edbfe837c773556ae7; _ga_YMG397QK6S=GS1.1.1668227912.1.0.1668227912.0.0.0; _fbp=fb.1.1668227912709.1820477754
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
If-Modified-Since: Sat, 12 Nov 2022 02:52:48 GMT
If-None-Match: W/"636f0a80-349e"
TE: trailers
HTTP/2 304 Not Modified
date: Sat, 12 Nov 2022 04:38:33 GMT
last-modified: Sat, 12 Nov 2022 02:52:48 GMT
vary: Accept-Encoding
etag: W/"636f0a80-349e"
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: HIT
age: 6259
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=otUwfEk%2Fc1enjkxP1cQ1Gd%2FCYStdYHLgLwjHlDRYtH61JcxqnRMHHneRqA0A4o9rxdjiYdXb9g%2B3gF7cvAWU5bHgkTlC4OKIUFSGFndGbqjJpfokcQu6nc9V9wT9iA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15552000; preload
server: cloudflare
cf-ray: 768c942adaaeb500-OSL
X-Firefox-Spdy: h2
|
|
| my.forms.app/static/js/imenu.bffea.js | 172.67.72.65 | 200 OK | 1.0 kB |
URL HTTP/2my.forms.app/static/js/imenu.bffea.js IP172.67.72.65:0
File typeASCII text, with very long lines (921), with no line terminators Hash599f7ac42ae81adedd0a7d810d85036c 6ae65ed72bfaaff49ca9d084cb40310683e7a103 6e04504373fb5847f1025dbd92e835b1d9290c3c18abfaf3fcaa293e1f40c881
GET /static/js/imenu.bffea.js HTTP/1.1
Host: my.forms.app
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
Connection: keep-alive
Referer: https://my.forms.app/form/630e0e70c2748c14c10ef710
Cookie: language=en; _gcl_au=1.1.175212147.1668227912; _ga_740JKHV4FZ=GS1.1.1668227912.1.0.1668227912.0.0.0; _ga=GA1.1.1050579268.1668227912; _gid=GA1.2.897620484.1668227912; _dc_gtm_UA-123158574-1=1; _uetsid=dcaa57a0624311edba43075cad019a2b; _uetvid=dcaa7a20624311edbfe837c773556ae7; _ga_YMG397QK6S=GS1.1.1668227912.1.0.1668227912.0.0.0; _fbp=fb.1.1668227912709.1820477754
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 12 Nov 2022 04:38:33 GMT
content-type: application/javascript
last-modified: Sat, 12 Nov 2022 02:52:58 GMT
vary: Accept-Encoding
etag: W/"636f0a8a-399"
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: HIT
age: 6258
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=9V51%2FBMLycnHxVey0PlRPQk1gwNrdklRc69vdPojv0jUrE4RcHtlJb3kWs3qt3pgVxkAV88qirCX2wzVR44j5xJhCmEWT0OaLBdcK6gjB%2BVIrV9YVFdmFdZmH6oweg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15552000; preload
server: cloudflare
cf-ray: 768c942adaafb500-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| my.forms.app/static/js/isidebar.35d7b.js | 172.67.72.65 | 200 OK | 1.2 kB |
URL HTTP/2my.forms.app/static/js/isidebar.35d7b.js IP172.67.72.65:0
File typeASCII text, with very long lines (2534), with no line terminators Hash67677faf381b373693ea37f1e8fbd95d 73f7614a9abb941cede0b21ccfc2d4f9e544c453 b51e6e59a0806e55a2862af31b0035f13a139e4230e2d6fb05ebdfc35556507e
GET /static/js/isidebar.35d7b.js HTTP/1.1
Host: my.forms.app
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
Connection: keep-alive
Referer: https://my.forms.app/form/630e0e70c2748c14c10ef710
Cookie: language=en; _gcl_au=1.1.175212147.1668227912; _ga_740JKHV4FZ=GS1.1.1668227912.1.0.1668227912.0.0.0; _ga=GA1.1.1050579268.1668227912; _gid=GA1.2.897620484.1668227912; _dc_gtm_UA-123158574-1=1; _uetsid=dcaa57a0624311edba43075cad019a2b; _uetvid=dcaa7a20624311edbfe837c773556ae7; _ga_YMG397QK6S=GS1.1.1668227912.1.0.1668227912.0.0.0; _fbp=fb.1.1668227912709.1820477754
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 12 Nov 2022 04:38:33 GMT
content-type: application/javascript
last-modified: Sat, 12 Nov 2022 02:52:49 GMT
vary: Accept-Encoding
etag: W/"636f0a81-9e6"
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: HIT
age: 6257
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=UlIc%2Fd%2FGzm1l5CWlmMCGUk0VGrU8IybL%2BlDiA2JazU7aOVHeMtGVEuuwqVQNzaS7Lu8DfZris4q9b5hRxRMCPffOBzifO92Yz0xUgWQZYzm%2FnGRcvWUyTndO4gnhvw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15552000; preload
server: cloudflare
cf-ray: 768c942adab2b500-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| r3.o.lencr.org/ | 23.36.76.226 | 200 OK | 503 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hashfb29db48daab83bcaed56b72093619cc e0e0a09d729ffb1c41411419768896f1e1eb3346 08e24124f809f1ab7e6960355efcb419e13dd5fb6063c31caf04e11ebdb7a5cf
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "08E24124F809F1AB7E6960355EFCB419E13DD5FB6063C31CAF04E11EBDB7A5CF"
Last-Modified: Fri, 11 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11828
Expires: Sat, 12 Nov 2022 07:55:41 GMT
Date: Sat, 12 Nov 2022 04:38:33 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 23.36.76.226 | 200 OK | 503 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hashfb29db48daab83bcaed56b72093619cc e0e0a09d729ffb1c41411419768896f1e1eb3346 08e24124f809f1ab7e6960355efcb419e13dd5fb6063c31caf04e11ebdb7a5cf
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "08E24124F809F1AB7E6960355EFCB419E13DD5FB6063C31CAF04E11EBDB7A5CF"
Last-Modified: Fri, 11 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11828
Expires: Sat, 12 Nov 2022 07:55:41 GMT
Date: Sat, 12 Nov 2022 04:38:33 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 23.36.76.226 | 200 OK | 503 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hashfb29db48daab83bcaed56b72093619cc e0e0a09d729ffb1c41411419768896f1e1eb3346 08e24124f809f1ab7e6960355efcb419e13dd5fb6063c31caf04e11ebdb7a5cf
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "08E24124F809F1AB7E6960355EFCB419E13DD5FB6063C31CAF04E11EBDB7A5CF"
Last-Modified: Fri, 11 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11828
Expires: Sat, 12 Nov 2022 07:55:41 GMT
Date: Sat, 12 Nov 2022 04:38:33 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 23.36.76.226 | 200 OK | 503 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hashfb29db48daab83bcaed56b72093619cc e0e0a09d729ffb1c41411419768896f1e1eb3346 08e24124f809f1ab7e6960355efcb419e13dd5fb6063c31caf04e11ebdb7a5cf
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "08E24124F809F1AB7E6960355EFCB419E13DD5FB6063C31CAF04E11EBDB7A5CF"
Last-Modified: Fri, 11 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11828
Expires: Sat, 12 Nov 2022 07:55:41 GMT
Date: Sat, 12 Nov 2022 04:38:33 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 23.36.76.226 | 200 OK | 503 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hashfb29db48daab83bcaed56b72093619cc e0e0a09d729ffb1c41411419768896f1e1eb3346 08e24124f809f1ab7e6960355efcb419e13dd5fb6063c31caf04e11ebdb7a5cf
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "08E24124F809F1AB7E6960355EFCB419E13DD5FB6063C31CAF04E11EBDB7A5CF"
Last-Modified: Fri, 11 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11828
Expires: Sat, 12 Nov 2022 07:55:41 GMT
Date: Sat, 12 Nov 2022 04:38:33 GMT
Connection: keep-alive
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F84f5d648-d178-4f63-98ef-7a2f4504174e.jpeg | 34.120.237.76 | 200 OK | 7.5 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F84f5d648-d178-4f63-98ef-7a2f4504174e.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash93d01c3c2422df3f7994d3496069dc37 96a4243e7f538fdd4e0aec4f39b058a08a4898e9 1fbc7efb3dfb058984abf1fbe60021212ff1bca8e366f03b1752c615e5249e55
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F84f5d648-d178-4f63-98ef-7a2f4504174e.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7493
x-amzn-requestid: 077e815e-bbfc-472c-9d22-a9f0e7cda511
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bdNDhGYvIAMFygQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-636ec216-3a8a5a6f41b8ade53ff48dce;Sampled=0
x-amzn-remapped-date: Fri, 11 Nov 2022 21:43:50 GMT
x-amz-cf-pop: YVR50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: OLdVee-O7P-RLfbeaNBvTK8UX-hcx51-athqqaRuIzrtlIAPxw3BPg==
via: 1.1 feda34dcbf6a00e232656b7983c2c7f0.cloudfront.net (CloudFront), 1.1 989017835f43d594873bde5a7ee7fe5e.cloudfront.net (CloudFront), 1.1 google
date: Fri, 11 Nov 2022 22:00:37 GMT
age: 23876
etag: "96a4243e7f538fdd4e0aec4f39b058a08a4898e9"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4af930b9-b854-4316-8425-07c6aa06477a.jpeg | 34.120.237.76 | 200 OK | 12 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4af930b9-b854-4316-8425-07c6aa06477a.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hashcd5bdc050716bb76afe8090fc81617e7 5109c156b180727767fc03c411190ccc0d3fb5fc 9b13e7838946c6654dda17886c2ca8d42de934acb93f4bddb1008dfa1bd1ea99
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4af930b9-b854-4316-8425-07c6aa06477a.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11715
x-amzn-requestid: 20e508bd-6568-4225-9bee-c683a49d44f6
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bdMhUHkpIAMFfJg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-636ec13b-7dc726b94a37fc667e2e6646;Sampled=0
x-amzn-remapped-date: Fri, 11 Nov 2022 21:40:11 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: Lp5eW92D8SbFtcQLk-LRSaSKNMNFYCW7XTALdNdrJxN6ebgdH8_1Dw==
via: 1.1 da5952aa802df39905ceb16592e9698a.cloudfront.net (CloudFront), 1.1 1481cc55c02c3a782ad420b6bac2cb32.cloudfront.net (CloudFront), 1.1 google
date: Fri, 11 Nov 2022 21:42:55 GMT
age: 24938
etag: "5109c156b180727767fc03c411190ccc0d3fb5fc"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe6fac57d-aa5c-42c2-904b-58aa73c59975.jpeg | 34.120.237.76 | 200 OK | 4.3 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe6fac57d-aa5c-42c2-904b-58aa73c59975.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash701700f42e1b0e528a63c3bd2a4c54e7 a3af603900538ea10e094981d298a0b37d0ab896 c84ac2d3524eb950a433aa01e1226d995d87948452e4e135a4661094923ca465
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe6fac57d-aa5c-42c2-904b-58aa73c59975.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4268
x-amzn-requestid: 19d2f4e7-b6c1-4093-b54c-70a9a476ad89
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bdMhSEwYIAMFg7Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-636ec13b-6e2f5a6147153e5c32cc4499;Sampled=0
x-amzn-remapped-date: Fri, 11 Nov 2022 21:40:11 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: RPDkAR4fjBR89lWuee42HxnCGQv_vd6tWbOavmEsGCkZeKwjW_99Dg==
via: 1.1 c34da255183aa208dd1c722ff211f9b2.cloudfront.net (CloudFront), 1.1 707e733794d52100fde0ab21bf0b1462.cloudfront.net (CloudFront), 1.1 google
date: Fri, 11 Nov 2022 21:44:57 GMT
age: 24816
etag: "a3af603900538ea10e094981d298a0b37d0ab896"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe5720fc8-63c5-4f5e-bb64-33809e0069fe.jpeg | 34.120.237.76 | 200 OK | 9.0 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe5720fc8-63c5-4f5e-bb64-33809e0069fe.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hashf09e254cd6f2e29b3bf198cc5d58a46f fa34520e849bf746ff43aec3d28beb9e4be44f4d 2e29eace95fd8cb5b6d77df880d2044ecab4206cba47931c3a95e77c1b4e9d9a
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe5720fc8-63c5-4f5e-bb64-33809e0069fe.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8953
x-amzn-requestid: 2a2d20f4-3aa5-475e-8ec2-fc569766335e
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bdMhQGAhIAMFrjw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-636ec13b-26dc0259793ec94814f3d41a;Sampled=0
x-amzn-remapped-date: Fri, 11 Nov 2022 21:40:11 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: BcjpdZlgZPqBX1rk3Th_XlwHrDYoeAT8pWaH7I21WnkfFzvzJE8ekw==
via: 1.1 41e349e25dc4bc856d0e5d2c162428a0.cloudfront.net (CloudFront), 1.1 01147dcc35d57fc0238a3c1700c13f16.cloudfront.net (CloudFront), 1.1 google
date: Fri, 11 Nov 2022 21:42:55 GMT
age: 24938
etag: "fa34520e849bf746ff43aec3d28beb9e4be44f4d"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F60d4e929-d0bb-41b7-bdcd-0e67258b428a.webp | 34.120.237.76 | 200 OK | 9.0 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F60d4e929-d0bb-41b7-bdcd-0e67258b428a.webp IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash516f1bfefb1c1a737ea2441f85343b32 0cc22d7bf9092fb30f31e2ca8f242c197b891669 733824d4f6f7c5b54ce4e02ecaf152cfc1e10f3f6a801d7e2c55a02460e40087
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F60d4e929-d0bb-41b7-bdcd-0e67258b428a.webp HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9012
x-amzn-requestid: 83eac9e7-5387-4e11-9769-182fa3f7fffb
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bdNC6FxzoAMF80w=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-636ec212-5ca277b90a5a9a4c437edc1e;Sampled=0
x-amzn-remapped-date: Fri, 11 Nov 2022 21:43:46 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: 7wqdiuomEgaQlE1P5gopDGXbAkmh3ohPXYDcBWczuYFEcj8nczk9_w==
via: 1.1 26ca01ec7377e425b59b6a08cb1ec342.cloudfront.net (CloudFront), 1.1 cd64decb1403270c914848213601a674.cloudfront.net (CloudFront), 1.1 google
date: Fri, 11 Nov 2022 21:52:57 GMT
age: 24336
etag: "0cc22d7bf9092fb30f31e2ca8f242c197b891669"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc1f07200-a0e4-465e-bc11-b3424eba7096.jpeg | 34.120.237.76 | 200 OK | 10 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc1f07200-a0e4-465e-bc11-b3424eba7096.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hashbb7a3aa9e5cea21f0871115448cc9c77 3749f05591d2477f6001e7f5165d62f1590f1095 e4b8e2a5980c674b4e06e90c67e84125515a93716b8d4ff5b659d8d47d0b2f16
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc1f07200-a0e4-465e-bc11-b3424eba7096.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10456
x-amzn-requestid: cc1c934a-b8ce-4e29-b310-86b66d95e899
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bdMi0FjXoAMFrNQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-636ec145-10f3b3337c0f36dc332c14ab;Sampled=0
x-amzn-remapped-date: Fri, 11 Nov 2022 21:40:21 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: zqYRzk53wLkiPKeNty0ortDrqICDrY3M31J0oP4r7zaWjiHtsDUoYw==
via: 1.1 1cc6ed0d2d3dd9529ce544f9dfe61a52.cloudfront.net (CloudFront), 1.1 35575576af8067e30cfb17c6b9fde8e2.cloudfront.net (CloudFront), 1.1 google
date: Fri, 11 Nov 2022 21:55:28 GMT
age: 24185
etag: "3749f05591d2477f6001e7f5165d62f1590f1095"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| bam.eu01.nr-data.net/events/1/NRJS-580814bddd7fd407f24?a=499575655&sa=1&v=1216.487a282&t=Unnamed%20Transaction&rst=2658&ck=1&ref=https://my.forms.app/form/630e0e70c2748c14c10ef710 |  185.221.85.3 | 200 OK | 24 B |
URL HTTP/1.1bam.eu01.nr-data.net/events/1/NRJS-580814bddd7fd407f24?a=499575655&sa=1&v=1216.487a282&t=Unnamed%20Transaction&rst=2658&ck=1&ref=https://my.forms.app/form/630e0e70c2748c14c10ef710 IP185.221.85.3:0 ASN#206998 New Relic International Limited
File typeGIF image data, version 89a, 1 x 1\012- data Hashbc32ed98d624acb4008f986349a20d26 2d3df8c11d2168ce2c27e0937421d11d85016361 0c9cf152a0ad00d4f102c93c613c104914be5517ac8f8e0831727f8bfbe8b300
POST /events/1/NRJS-580814bddd7fd407f24?a=499575655&sa=1&v=1216.487a282&t=Unnamed%20Transaction&rst=2658&ck=1&ref=https://my.forms.app/form/630e0e70c2748c14c10ef710 HTTP/1.1
Host: bam.eu01.nr-data.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
content-type: text/plain
Content-Length: 534
Origin: https://my.forms.app
Connection: keep-alive
Referer: https://my.forms.app/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Sat, 12 Nov 2022 04:38:33 GMT
Content-Type: image/gif
Content-Length: 24
Connection: keep-alive
CF-Ray: 768c942d0fc795e2-ARN
Access-Control-Allow-Origin: https://my.forms.app
CF-Cache-Status: DYNAMIC
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, PUT, HEAD, OPTIONS
x-envoy-upstream-service-time: 0
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=D%2BzWXzSBnVdzSzNGSYrcgpxMRl8ukUcNH0Bzz246nc8N3EqfQCWFGF9IZt1NSS0l%2F7LjnEAWh6PE%2FUu7CNFhFyYvRWez3ann%2FpxZFh1KIvnIAXUzrie7pVq16w9AqD9vmyAmnRFF"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
|
|
| my.forms.app/cdn-cgi/rum? | 172.67.72.65 | 204 No Content | 0 B |
URL HTTP/2my.forms.app/cdn-cgi/rum? IP172.67.72.65:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /cdn-cgi/rum? HTTP/1.1
Host: my.forms.app
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 745
Origin: https://my.forms.app
Connection: keep-alive
Referer: https://my.forms.app/form/630e0e70c2748c14c10ef710
Cookie: language=en; _gcl_au=1.1.175212147.1668227912; _ga_740JKHV4FZ=GS1.1.1668227912.1.0.1668227919.0.0.0; _ga=GA1.1.1050579268.1668227912; _gid=GA1.2.897620484.1668227912; _dc_gtm_UA-123158574-1=1; _uetsid=dcaa57a0624311edba43075cad019a2b; _uetvid=dcaa7a20624311edbfe837c773556ae7; _ga_YMG397QK6S=GS1.1.1668227912.1.0.1668227919.0.0.0; _fbp=fb.1.1668227912709.1820477754
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 204 No Content
date: Sat, 12 Nov 2022 04:38:40 GMT
access-control-allow-origin: https://my.forms.app
access-control-allow-methods: POST,OPTIONS
access-control-max-age: 86400
vary: Origin
access-control-allow-credentials: true
server: cloudflare
cf-ray: 768c94563d33b500-OSL
x-frame-options: DENY
x-content-type-options: nosniff
X-Firefox-Spdy: h2
|
|
| my.forms.app/static/css/LocalForm~welcomepage.e86f2.css | 172.67.72.65 | 200 OK | 0 B |
URL HTTP/2my.forms.app/static/css/LocalForm~welcomepage.e86f2.css IP172.67.72.65:0
GET /static/css/LocalForm~welcomepage.e86f2.css HTTP/1.1
Host: my.forms.app
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://my.forms.app/form/630e0e70c2748c14c10ef710
Cookie: language=en; _gcl_au=1.1.175212147.1668227912; _ga_740JKHV4FZ=GS1.1.1668227912.1.0.1668227912.0.0.0; _ga=GA1.2.1050579268.1668227912; _gid=GA1.2.897620484.1668227912; _dc_gtm_UA-123158574-1=1; _uetsid=dcaa57a0624311edba43075cad019a2b; _uetvid=dcaa7a20624311edbfe837c773556ae7
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 12 Nov 2022 04:38:32 GMT
content-type: text/css
last-modified: Sat, 12 Nov 2022 04:37:59 GMT
vary: Accept-Encoding
etag: W/"636f2327-24a"
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=pxq8E6%2Fs2hD4YF%2Bng0zhL62FUW7XuKY1BGhKFw6ScIpLsWn2syqW4UPFplE9Q6uTJY5xM2RS0gspYs7n55a3G58Y1VT%2BUia5A4kReo2OfzeNCwUCynYXppzl%2Bn0WuQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15552000; preload
server: cloudflare
cf-ray: 768c94279925b500-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| my.forms.app/static/js/vendors~FormBuilder~FormResult~FormTemplate~shareform~welcomepage.d03d1.js | 172.67.72.65 | 200 OK | 0 B |
URL HTTP/2my.forms.app/static/js/vendors~FormBuilder~FormResult~FormTemplate~shareform~welcomepage.d03d1.js IP172.67.72.65:0
GET /static/js/vendors~FormBuilder~FormResult~FormTemplate~shareform~welcomepage.d03d1.js HTTP/1.1
Host: my.forms.app
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://my.forms.app/form/630e0e70c2748c14c10ef710
Cookie: language=en; _gcl_au=1.1.175212147.1668227912; _ga_740JKHV4FZ=GS1.1.1668227912.1.0.1668227912.0.0.0; _ga=GA1.2.1050579268.1668227912; _gid=GA1.2.897620484.1668227912; _dc_gtm_UA-123158574-1=1; _uetsid=dcaa57a0624311edba43075cad019a2b; _uetvid=dcaa7a20624311edbfe837c773556ae7
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 12 Nov 2022 04:38:33 GMT
content-type: application/javascript
last-modified: Sat, 12 Nov 2022 04:38:03 GMT
vary: Accept-Encoding
etag: W/"636f232b-6c2"
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=NqzmQUJTAUvWj56WXGsrW54Dl5sZQ6wIhhyEfTvoxDjvwdz%2BhBJTyNKhMl1uIVAN2RYk0mlcx1lzidDJ%2B3MmKhzN7e4XMVwV%2Fbb4YCA0vKvKLCtQL2QIyFZAZK99DA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15552000; preload
server: cloudflare
cf-ray: 768c94277913b500-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| fonts.googleapis.com/css?family=Open+Sans:ital,wght@0,300;0,400;0,600;0,700;1,400&;devanagari,latin-ext | 142.250.74.10 | 200 OK | 0 B |
URL HTTP/2fonts.googleapis.com/css?family=Open+Sans:ital,wght@0,300;0,400;0,600;0,700;1,400&;devanagari,latin-ext IP142.250.74.10:0
GET /css?family=Open+Sans:ital,wght@0,300;0,400;0,600;0,700;1,400&;devanagari,latin-ext HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://my.forms.app/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Sat, 12 Nov 2022 04:38:32 GMT
date: Sat, 12 Nov 2022 04:38:32 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| my.forms.app/static/css/SharedReport~shareform~shareresult~welcomepage.64e5e.css | 172.67.72.65 | 200 OK | 0 B |
URL HTTP/2my.forms.app/static/css/SharedReport~shareform~shareresult~welcomepage.64e5e.css IP172.67.72.65:0
GET /static/css/SharedReport~shareform~shareresult~welcomepage.64e5e.css HTTP/1.1
Host: my.forms.app
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://my.forms.app/form/630e0e70c2748c14c10ef710
Cookie: language=en; _gcl_au=1.1.175212147.1668227912; _ga_740JKHV4FZ=GS1.1.1668227912.1.0.1668227912.0.0.0; _ga=GA1.2.1050579268.1668227912; _gid=GA1.2.897620484.1668227912; _dc_gtm_UA-123158574-1=1; _uetsid=dcaa57a0624311edba43075cad019a2b; _uetvid=dcaa7a20624311edbfe837c773556ae7
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 12 Nov 2022 04:38:33 GMT
content-type: text/css
last-modified: Sat, 12 Nov 2022 04:37:52 GMT
vary: Accept-Encoding
etag: W/"636f2320-70"
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=nGP2zyOfP0jcArMgZxPWpcyza61zCDiPbPhymTkj3B7Gf4N8ECG289w4saSIjk%2BDxckr2NwT%2FDnHRmyc879wRPW7ybBZJM6Bx53Jr1MvZMpbSrSw7EvaonDAnE6RnA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15552000; preload
server: cloudflare
cf-ray: 768c9427891ab500-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| my.forms.app/static/css/welcomepage.37ac3.css | 172.67.72.65 | 200 OK | 0 B |
URL HTTP/2my.forms.app/static/css/welcomepage.37ac3.css IP172.67.72.65:0
GET /static/css/welcomepage.37ac3.css HTTP/1.1
Host: my.forms.app
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://my.forms.app/form/630e0e70c2748c14c10ef710
Cookie: language=en; _gcl_au=1.1.175212147.1668227912; _ga_740JKHV4FZ=GS1.1.1668227912.1.0.1668227912.0.0.0; _ga=GA1.2.1050579268.1668227912; _gid=GA1.2.897620484.1668227912; _dc_gtm_UA-123158574-1=1; _uetsid=dcaa57a0624311edba43075cad019a2b; _uetvid=dcaa7a20624311edbfe837c773556ae7
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 12 Nov 2022 04:38:33 GMT
content-type: text/css
last-modified: Sat, 12 Nov 2022 04:37:40 GMT
vary: Accept-Encoding
etag: W/"636f2314-ff8"
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=RJuRe605JwcBvIZ0kej1jd8oVqujh6DrKoEBw%2FL7FIrs%2BEsp4jQIQRtME3qDXfwv4t%2Fx8VPgB69zSI3udxNEOuG5cHUKK%2B%2FUXb3aHlwmb%2Bsvx0itB7Wlvgml2YRMKw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15552000; preload
server: cloudflare
cf-ray: 768c9427a92bb500-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| my.forms.app/static/js/vendors~Discover~DiscoverForm~DiscoverUser~FormBuilder~FormResult~iavatar.cbe56.js | 172.67.72.65 | 200 OK | 0 B |
URL HTTP/2my.forms.app/static/js/vendors~Discover~DiscoverForm~DiscoverUser~FormBuilder~FormResult~iavatar.cbe56.js IP172.67.72.65:0
GET /static/js/vendors~Discover~DiscoverForm~DiscoverUser~FormBuilder~FormResult~iavatar.cbe56.js HTTP/1.1
Host: my.forms.app
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
Connection: keep-alive
Referer: https://my.forms.app/form/630e0e70c2748c14c10ef710
Cookie: language=en; _gcl_au=1.1.175212147.1668227912; _ga_740JKHV4FZ=GS1.1.1668227912.1.0.1668227912.0.0.0; _ga=GA1.1.1050579268.1668227912; _gid=GA1.2.897620484.1668227912; _dc_gtm_UA-123158574-1=1; _uetsid=dcaa57a0624311edba43075cad019a2b; _uetvid=dcaa7a20624311edbfe837c773556ae7; _ga_YMG397QK6S=GS1.1.1668227912.1.0.1668227912.0.0.0; _fbp=fb.1.1668227912709.1820477754
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 12 Nov 2022 04:38:33 GMT
content-type: application/javascript
last-modified: Sat, 12 Nov 2022 02:52:38 GMT
vary: Accept-Encoding
etag: W/"636f0a76-257"
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: HIT
age: 6258
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=lRExC%2BiNxOQU0XcchTQr%2F9eIuaDWeydTQBnNBnsMbYGGs%2BPcblCfr2vJyBDXRPW67fXTdfvzKDLnVKqqNNbp5Ul6TJ42D%2B8yr4immL5VPzd%2BG29YyLG9kGWa%2FDlXfA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15552000; preload
server: cloudflare
cf-ray: 768c942aaa96b500-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| my.forms.app/form/630e0e70c2748c14c10ef710 | 172.67.72.65 | 200 OK | 0 B |
URL HTTP/2my.forms.app/form/630e0e70c2748c14c10ef710 IP172.67.72.65:0
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /form/630e0e70c2748c14c10ef710 HTTP/1.1
Host: my.forms.app
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
date: Sat, 12 Nov 2022 04:38:31 GMT
content-type: text/html
last-modified: Sat, 12 Nov 2022 04:38:21 GMT
vary: Accept-Encoding
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=51eOG5EoM7wmfxV%2F9N3QDhlrg5%2F6FhuFczJfrX1tmUvo1R2TGVz2J%2Fyvv6CzXrV0JUNeXeE7JQkPrMNSG40BCuS3O4UknOlbtutTxP%2Bt4k5kNMsVYLOl%2BJD3RcFWZA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15552000; preload
server: cloudflare
cf-ray: 768c94200e35b500-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| my.forms.app/static/css/vendor.88295.css | 172.67.72.65 | 200 OK | 0 B |
URL HTTP/2my.forms.app/static/css/vendor.88295.css IP172.67.72.65:0
GET /static/css/vendor.88295.css HTTP/1.1
Host: my.forms.app
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://my.forms.app/form/630e0e70c2748c14c10ef710
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 12 Nov 2022 04:38:32 GMT
content-type: text/css
last-modified: Sat, 12 Nov 2022 02:52:53 GMT
vary: Accept-Encoding
etag: W/"636f0a85-b52"
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: HIT
age: 6258
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=mRpoTHwb3wWZKAI3K5t%2BCMs5%2Bxy4In5kBzONwykiuk3dQPHNz8iOBdo4mAoyLS5usZUkTCAtLraNQ0NRU2me0ykeHI2y8vR7v9e8CAmHvmwlN%2B9a4q%2FzmyF%2FKDKdbQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15552000; preload
server: cloudflare
cf-ray: 768c94221ef9b500-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| my.forms.app/static/css/asyncstyles.4869d.css | 172.67.72.65 | 200 OK | 0 B |
URL HTTP/2my.forms.app/static/css/asyncstyles.4869d.css IP172.67.72.65:0
GET /static/css/asyncstyles.4869d.css HTTP/1.1
Host: my.forms.app
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://my.forms.app/form/630e0e70c2748c14c10ef710
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 12 Nov 2022 04:38:32 GMT
content-type: text/css
last-modified: Sat, 12 Nov 2022 02:53:02 GMT
vary: Accept-Encoding
etag: W/"636f0a8e-2555"
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: HIT
age: 6258
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ip%2FQAlSkAAYymeLffFMnXIE7tTcZ7RKsF4lSWGmpYtGrZm5LkkKSwtUPErawNkSmyyX%2B2LcUxmF3Ii%2FizU%2Ffl9wnDW5iYvcXeaET7A9Mbux53uVlfPylHn%2B1jEaZgA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15552000; preload
server: cloudflare
cf-ray: 768c94221efdb500-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| static.cloudflareinsights.com/beacon.min.js/vaafb692b2aea4879b33c060e79fe94621666317369993 |  104.16.56.101 | 200 OK | 0 B |
URL HTTP/2static.cloudflareinsights.com/beacon.min.js/vaafb692b2aea4879b33c060e79fe94621666317369993 IP104.16.56.101:0
GET /beacon.min.js/vaafb692b2aea4879b33c060e79fe94621666317369993 HTTP/1.1
Host: static.cloudflareinsights.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://my.forms.app
Connection: keep-alive
Referer: https://my.forms.app/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 12 Nov 2022 04:38:32 GMT
content-type: text/javascript;charset=UTF-8
access-control-allow-origin: *
cache-control: public, max-age=86400
etag: W/2022.10.1
last-modified: Fri, 21 Oct 2022 01:56:09 GMT
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding
server: cloudflare
cf-ray: 768c94229f9fb4f3-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| my.forms.app/static/js/welcomepage.09f80.js | 172.67.72.65 | 200 OK | 0 B |
URL HTTP/2my.forms.app/static/js/welcomepage.09f80.js IP172.67.72.65:0
GET /static/js/welcomepage.09f80.js HTTP/1.1
Host: my.forms.app
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://my.forms.app/form/630e0e70c2748c14c10ef710
Cookie: language=en; _gcl_au=1.1.175212147.1668227912; _ga_740JKHV4FZ=GS1.1.1668227912.1.0.1668227912.0.0.0; _ga=GA1.2.1050579268.1668227912; _gid=GA1.2.897620484.1668227912; _dc_gtm_UA-123158574-1=1; _uetsid=dcaa57a0624311edba43075cad019a2b; _uetvid=dcaa7a20624311edbfe837c773556ae7
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 12 Nov 2022 04:38:33 GMT
content-type: application/javascript
last-modified: Sat, 12 Nov 2022 04:38:11 GMT
vary: Accept-Encoding
etag: W/"636f2333-19c5"
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=mlNSKEwDMsbKNdABbhAFVByZE1%2BU3E0A0mErcfhq5eKJTYSbbBFTZDW0ld%2Fbxp9agaVinBdM%2FbmWYIEqKqFZyhPjxoOpYG8PTW1GU031NmTKUwclSzuL34Iuo7t0hg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15552000; preload
server: cloudflare
cf-ray: 768c9427a92cb500-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| my.forms.app/static/css/iicon.8278c.css | 172.67.72.65 | 200 OK | 0 B |
URL HTTP/2my.forms.app/static/css/iicon.8278c.css IP172.67.72.65:0
GET /static/css/iicon.8278c.css HTTP/1.1
Host: my.forms.app
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://my.forms.app/form/630e0e70c2748c14c10ef710
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 12 Nov 2022 04:38:32 GMT
content-type: text/css
last-modified: Sat, 12 Nov 2022 02:52:38 GMT
vary: Accept-Encoding
etag: W/"636f0a76-23e"
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: HIT
age: 6258
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=bi6C3JxymknBpzR%2BOLER5T1tXfoKvQhfK6ozo1sBDB3H28yzCm0QWBgh%2Bj0dn%2FC3%2BZoYs4b4NAiFUxs0IYs2hDK4WVrFowmcn5kQnJSD60QxwF1ZaCs8RLelVeooDw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15552000; preload
server: cloudflare
cf-ray: 768c94221effb500-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| my.forms.app/static/css/swal.2ebcf.css | 172.67.72.65 | 200 OK | 0 B |
URL HTTP/2my.forms.app/static/css/swal.2ebcf.css IP172.67.72.65:0
GET /static/css/swal.2ebcf.css HTTP/1.1
Host: my.forms.app
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://my.forms.app/form/630e0e70c2748c14c10ef710
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 12 Nov 2022 04:38:32 GMT
content-type: text/css
last-modified: Sat, 12 Nov 2022 02:53:01 GMT
vary: Accept-Encoding
etag: W/"636f0a8d-5f0e"
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: HIT
age: 6258
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=6QbDfbdR7uLF7OdbCYtToSnVrWkq4JFSzVlDSmI03ksMOhOWFZXejVwdHPGfw6Ihse1GFYfBy5d9qr5GHIe4by5tT9ev0GgvjF4mBrTDK4Z4xKeo3GvCbtcxio9ULw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15552000; preload
server: cloudflare
cf-ray: 768c9423af97b500-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| my.forms.app/static/js/imaskedtext.71ae2.js | 172.67.72.65 | 200 OK | 0 B |
URL HTTP/2my.forms.app/static/js/imaskedtext.71ae2.js IP172.67.72.65:0
GET /static/js/imaskedtext.71ae2.js HTTP/1.1
Host: my.forms.app
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
Connection: keep-alive
Referer: https://my.forms.app/form/630e0e70c2748c14c10ef710
Cookie: language=en; _gcl_au=1.1.175212147.1668227912; _ga_740JKHV4FZ=GS1.1.1668227912.1.0.1668227912.0.0.0; _ga=GA1.1.1050579268.1668227912; _gid=GA1.2.897620484.1668227912; _dc_gtm_UA-123158574-1=1; _uetsid=dcaa57a0624311edba43075cad019a2b; _uetvid=dcaa7a20624311edbfe837c773556ae7; _ga_YMG397QK6S=GS1.1.1668227912.1.0.1668227912.0.0.0; _fbp=fb.1.1668227912709.1820477754
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 12 Nov 2022 04:38:33 GMT
content-type: application/javascript
last-modified: Sat, 12 Nov 2022 02:52:41 GMT
vary: Accept-Encoding
etag: W/"636f0a79-3f13"
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: HIT
age: 6259
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=RiS1GDkpme%2B40PNxuJVWUiRyzX9XUxcw8knAfyh2l4XENE6GEfnsIoUYiiOuMZVXNHw4G1i8Jmg4y0Pc6i6xNtMfO97JRmcuAG%2FcdAO7VREWuxXXsY3FzQpB4ps%2BkQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15552000; preload
server: cloudflare
cf-ray: 768c942aaa90b500-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| my.forms.app/static/js/iavatar.4fa87.js | 172.67.72.65 | 200 OK | 0 B |
URL HTTP/2my.forms.app/static/js/iavatar.4fa87.js IP172.67.72.65:0
GET /static/js/iavatar.4fa87.js HTTP/1.1
Host: my.forms.app
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
Connection: keep-alive
Referer: https://my.forms.app/form/630e0e70c2748c14c10ef710
Cookie: language=en; _gcl_au=1.1.175212147.1668227912; _ga_740JKHV4FZ=GS1.1.1668227912.1.0.1668227912.0.0.0; _ga=GA1.1.1050579268.1668227912; _gid=GA1.2.897620484.1668227912; _dc_gtm_UA-123158574-1=1; _uetsid=dcaa57a0624311edba43075cad019a2b; _uetvid=dcaa7a20624311edbfe837c773556ae7; _ga_YMG397QK6S=GS1.1.1668227912.1.0.1668227912.0.0.0; _fbp=fb.1.1668227912709.1820477754
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 12 Nov 2022 04:38:33 GMT
content-type: application/javascript
last-modified: Sat, 12 Nov 2022 02:53:10 GMT
vary: Accept-Encoding
etag: W/"636f0a96-a70"
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: HIT
age: 6257
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ZOevIEMWyl4hvYOLpkIhDsIJp%2FaQ4Uy7aD2I1fHL%2Fy3k9XR5Y4FWc%2BZDul42%2BT%2B2OlRhqCJaVCvOUvOhXaVHVm6KxgUwKFPdQjd5nlZ9t1qbQd%2BjkvETKxCBKSIJYA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15552000; preload
server: cloudflare
cf-ray: 768c942abaa3b500-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| my.forms.app/static/js/Account-FormsPaymentDetails~FormResult~SharedReportRecords~welcomepage.fdb61.js | 172.67.72.65 | 200 OK | 0 B |
URL HTTP/2my.forms.app/static/js/Account-FormsPaymentDetails~FormResult~SharedReportRecords~welcomepage.fdb61.js IP172.67.72.65:0
GET /static/js/Account-FormsPaymentDetails~FormResult~SharedReportRecords~welcomepage.fdb61.js HTTP/1.1
Host: my.forms.app
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://my.forms.app/form/630e0e70c2748c14c10ef710
Cookie: language=en; _gcl_au=1.1.175212147.1668227912; _ga_740JKHV4FZ=GS1.1.1668227912.1.0.1668227912.0.0.0; _ga=GA1.2.1050579268.1668227912; _gid=GA1.2.897620484.1668227912; _dc_gtm_UA-123158574-1=1; _uetsid=dcaa57a0624311edba43075cad019a2b; _uetvid=dcaa7a20624311edbfe837c773556ae7
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 12 Nov 2022 04:38:33 GMT
content-type: application/javascript
last-modified: Sat, 12 Nov 2022 04:38:22 GMT
vary: Accept-Encoding
etag: W/"636f233e-586"
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=EhqXANZBquJLfdR0EG8CNqz0pjbIG2S1wB8e1Zp4eM%2ByGvP1R%2FS%2FQPkrJTyYJjHE6O3YBz4BUVCGkzWs4NIvEVm%2FXV3B6FLYpmnL2R4m1363SryhD8Zxcw92Vicf2w%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15552000; preload
server: cloudflare
cf-ray: 768c9427891cb500-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| my.forms.app/static/js/LocalForm~welcomepage.8e5e1.js | 172.67.72.65 | 200 OK | 0 B |
URL HTTP/2my.forms.app/static/js/LocalForm~welcomepage.8e5e1.js IP172.67.72.65:0
GET /static/js/LocalForm~welcomepage.8e5e1.js HTTP/1.1
Host: my.forms.app
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://my.forms.app/form/630e0e70c2748c14c10ef710
Cookie: language=en; _gcl_au=1.1.175212147.1668227912; _ga_740JKHV4FZ=GS1.1.1668227912.1.0.1668227912.0.0.0; _ga=GA1.2.1050579268.1668227912; _gid=GA1.2.897620484.1668227912; _dc_gtm_UA-123158574-1=1; _uetsid=dcaa57a0624311edba43075cad019a2b; _uetvid=dcaa7a20624311edbfe837c773556ae7
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 12 Nov 2022 04:38:33 GMT
content-type: application/javascript
last-modified: Sat, 12 Nov 2022 04:38:19 GMT
vary: Accept-Encoding
etag: W/"636f233b-55c"
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=b32kvAuRSMIqlCRxRiq%2FJFirDmTfSAmvzo0P7YOla%2FvH8Tq%2Bu3vRh7SKQOgqwd4qUfjt0r946rB%2B6NSICALb3ztL3qYteoSzVyCEaEINoCWJV4a9hKhnQQO2xpb1%2Fg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15552000; preload
server: cloudflare
cf-ray: 768c94279929b500-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| my.forms.app/static/css/inputcomponents.f3c17.css | 172.67.72.65 | 200 OK | 0 B |
URL HTTP/2my.forms.app/static/css/inputcomponents.f3c17.css IP172.67.72.65:0
GET /static/css/inputcomponents.f3c17.css HTTP/1.1
Host: my.forms.app
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
Connection: keep-alive
Referer: https://my.forms.app/form/630e0e70c2748c14c10ef710
Cookie: language=en; _gcl_au=1.1.175212147.1668227912; _ga_740JKHV4FZ=GS1.1.1668227912.1.0.1668227912.0.0.0; _ga=GA1.1.1050579268.1668227912; _gid=GA1.2.897620484.1668227912; _dc_gtm_UA-123158574-1=1; _uetsid=dcaa57a0624311edba43075cad019a2b; _uetvid=dcaa7a20624311edbfe837c773556ae7; _ga_YMG397QK6S=GS1.1.1668227912.1.0.1668227912.0.0.0; _fbp=fb.1.1668227912709.1820477754
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 12 Nov 2022 04:38:33 GMT
content-type: text/css
last-modified: Sat, 12 Nov 2022 02:52:38 GMT
vary: Accept-Encoding
etag: W/"636f0a76-450c"
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: HIT
age: 6259
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=PYoKAppgt%2BPRTzYL27Ah2qWLAtpUHfdPs8iGE6dIf5ZZEsujn1ao5UjPVtcTZNWffahuNMo8gKlB3w3eNaKjr32q8PYj5ldmIjJY47PFnvz4Kc9zAEfH5ScnR4sCtw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15552000; preload
server: cloudflare
cf-ray: 768c942a9a8fb500-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| my.forms.app/static/css/dcomponents.b142c.css | 172.67.72.65 | 200 OK | 0 B |
URL HTTP/2my.forms.app/static/css/dcomponents.b142c.css IP172.67.72.65:0
GET /static/css/dcomponents.b142c.css HTTP/1.1
Host: my.forms.app
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://my.forms.app/form/630e0e70c2748c14c10ef710
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 12 Nov 2022 04:38:32 GMT
content-type: text/css
last-modified: Sat, 12 Nov 2022 02:52:53 GMT
vary: Accept-Encoding
etag: W/"636f0a85-1ab9"
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: HIT
age: 6258
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Omc6vtuXqPyV%2F11HH5%2BboLF62LvHvXbMCDXiYbRG7HLRKCdLh8t1oAZuRT4rTToScD0V7zqX9gZU3V9ObHgHPyrVRVFJIAYuQjsWlg4lSoE6wFlvdXgjimjz%2BSQg4w%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15552000; preload
server: cloudflare
cf-ray: 768c94221efeb500-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| my.forms.app/static/js/dcomponents.7cf80.js | 172.67.72.65 | 200 OK | 0 B |
URL HTTP/2my.forms.app/static/js/dcomponents.7cf80.js IP172.67.72.65:0
GET /static/js/dcomponents.7cf80.js HTTP/1.1
Host: my.forms.app
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://my.forms.app/form/630e0e70c2748c14c10ef710
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 12 Nov 2022 04:38:32 GMT
content-type: application/javascript
last-modified: Sat, 12 Nov 2022 02:52:28 GMT
vary: Accept-Encoding
etag: W/"636f0a6c-27c4"
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: HIT
age: 6258
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=BvgHhIZmqJWg9ceaizTxqVfD3PYDIH5j%2F7%2FnITFw0ynLZVIeNkYqpHJ2KniTGBvzaedU95f9dId2k%2Fp4vKkSZ60F2B3bAmliTrxRa0wOBCCQy2EE0RTevNYzeDvdfA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15552000; preload
server: cloudflare
cf-ray: 768c94221f02b500-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| my.forms.app/static/js/vuegtm.3359a.js | 172.67.72.65 | 200 OK | 0 B |
URL HTTP/2my.forms.app/static/js/vuegtm.3359a.js IP172.67.72.65:0
GET /static/js/vuegtm.3359a.js HTTP/1.1
Host: my.forms.app
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://my.forms.app/form/630e0e70c2748c14c10ef710
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 12 Nov 2022 04:38:32 GMT
content-type: application/javascript
last-modified: Sat, 12 Nov 2022 02:52:55 GMT
vary: Accept-Encoding
etag: W/"636f0a87-2730"
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: HIT
age: 6257
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=m2gJRYufL3cm10ebFPByRw%2FpE68SmZ%2B21WRxOQdFtU8qPyJ1AzQGJn8IzG87gsrQkbHEBzGJHoNZ6rtELRMKqUgphM3hPmNaZk%2BCYmYZUzU00HSP3VfdrboFsGWFog%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15552000; preload
server: cloudflare
cf-ray: 768c9423af99b500-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| my.forms.app/static/css/FormBuilder~FormDesign~FormView~LocalForm.a2bed.css | 172.67.72.65 | 200 OK | 0 B |
URL HTTP/2my.forms.app/static/css/FormBuilder~FormDesign~FormView~LocalForm.a2bed.css IP172.67.72.65:0
GET /static/css/FormBuilder~FormDesign~FormView~LocalForm.a2bed.css HTTP/1.1
Host: my.forms.app
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://my.forms.app/form/630e0e70c2748c14c10ef710
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 12 Nov 2022 04:38:32 GMT
content-type: text/css
last-modified: Sat, 12 Nov 2022 02:53:01 GMT
vary: Accept-Encoding
etag: W/"636f0a8d-4303"
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: HIT
age: 6258
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=tpyp9eeQX2tgL0WXRGwk0JHbNNnB2DJYdS6JtvSzVmBf99jecJDuCjwpQcg4ZIqbDzKXaHvuv%2BZAoqEHMy7gspnVMFiIS6UdmHcIK77Iq6xC1MK3Ja8TjRn%2BoGuT%2BQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15552000; preload
server: cloudflare
cf-ray: 768c9423cfa4b500-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| my.forms.app/static/js/inputcomponents.0c258.js | 172.67.72.65 | 200 OK | 0 B |
URL HTTP/2my.forms.app/static/js/inputcomponents.0c258.js IP172.67.72.65:0
GET /static/js/inputcomponents.0c258.js HTTP/1.1
Host: my.forms.app
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
Connection: keep-alive
Referer: https://my.forms.app/form/630e0e70c2748c14c10ef710
Cookie: language=en; _gcl_au=1.1.175212147.1668227912; _ga_740JKHV4FZ=GS1.1.1668227912.1.0.1668227912.0.0.0; _ga=GA1.1.1050579268.1668227912; _gid=GA1.2.897620484.1668227912; _dc_gtm_UA-123158574-1=1; _uetsid=dcaa57a0624311edba43075cad019a2b; _uetvid=dcaa7a20624311edbfe837c773556ae7; _ga_YMG397QK6S=GS1.1.1668227912.1.0.1668227912.0.0.0; _fbp=fb.1.1668227912709.1820477754
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 12 Nov 2022 04:38:33 GMT
content-type: application/javascript
last-modified: Sat, 12 Nov 2022 02:52:39 GMT
vary: Accept-Encoding
etag: W/"636f0a77-1aefe"
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: HIT
age: 6259
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=XWMPHl1PMatvEEzjAwbQ5liDvTKaomqcXb4moqjMwkD4WME%2B8MxsgXwPWVtkULWx4yNa11SAvEDAC2IXwBOQmlEE5%2BoWqwGTKyaq0foWE6D73ljHN3RXQkZaK6b4mA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15552000; preload
server: cloudflare
cf-ray: 768c942aaa92b500-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| my.forms.app/static/js/lang-en.649a2.js | 172.67.72.65 | 200 OK | 0 B |
URL HTTP/2my.forms.app/static/js/lang-en.649a2.js IP172.67.72.65:0
GET /static/js/lang-en.649a2.js HTTP/1.1
Host: my.forms.app
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://my.forms.app/form/630e0e70c2748c14c10ef710
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 12 Nov 2022 04:38:32 GMT
content-type: application/javascript
last-modified: Sat, 12 Nov 2022 02:52:31 GMT
vary: Accept-Encoding
etag: W/"636f0a6f-fd53"
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: HIT
age: 6258
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=3iP7%2BKqcmORDa%2BmXIUggraVyeos6JeBKztL4ewe1Cja0IlOMwc91qIKtNFTqq144Ftv0clPDBQQaj%2BtubNjvzXxqOXFwPoD8CrQCZT%2B0Tkt92uIn9rCaxM%2FgQ%2FfO2g%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15552000; preload
server: cloudflare
cf-ray: 768c94234f67b500-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| my.forms.app/static/js/FormBuilder~FormTemplate~shareform~welcomepage.b3fe8.js | 172.67.72.65 | 200 OK | 0 B |
URL HTTP/2my.forms.app/static/js/FormBuilder~FormTemplate~shareform~welcomepage.b3fe8.js IP172.67.72.65:0
GET /static/js/FormBuilder~FormTemplate~shareform~welcomepage.b3fe8.js HTTP/1.1
Host: my.forms.app
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://my.forms.app/form/630e0e70c2748c14c10ef710
Cookie: language=en; _gcl_au=1.1.175212147.1668227912; _ga_740JKHV4FZ=GS1.1.1668227912.1.0.1668227912.0.0.0; _ga=GA1.2.1050579268.1668227912; _gid=GA1.2.897620484.1668227912; _dc_gtm_UA-123158574-1=1; _uetsid=dcaa57a0624311edba43075cad019a2b; _uetvid=dcaa7a20624311edbfe837c773556ae7
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 12 Nov 2022 04:38:33 GMT
content-type: application/javascript
last-modified: Sat, 12 Nov 2022 04:38:22 GMT
vary: Accept-Encoding
etag: W/"636f233e-6f83"
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=2J0DXEcrHpAn0yjxTjGCrffxUNE%2B3mtyaXd%2Fz8JX5ZQMm8magFGoOZn6T9%2BgaGl8xyoFqQZwkYWVxmb7J7s9sMQWY54v9%2FmKKXLqB7HOLKLphVO7Efgl9%2Bxba1NELQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15552000; preload
server: cloudflare
cf-ray: 768c94277918b500-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| my.forms.app/static/js/SharedReport~shareform~shareresult~welcomepage.07a6b.js | 172.67.72.65 | 200 OK | 0 B |
URL HTTP/2my.forms.app/static/js/SharedReport~shareform~shareresult~welcomepage.07a6b.js IP172.67.72.65:0
GET /static/js/SharedReport~shareform~shareresult~welcomepage.07a6b.js HTTP/1.1
Host: my.forms.app
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://my.forms.app/form/630e0e70c2748c14c10ef710
Cookie: language=en; _gcl_au=1.1.175212147.1668227912; _ga_740JKHV4FZ=GS1.1.1668227912.1.0.1668227912.0.0.0; _ga=GA1.2.1050579268.1668227912; _gid=GA1.2.897620484.1668227912; _dc_gtm_UA-123158574-1=1; _uetsid=dcaa57a0624311edba43075cad019a2b; _uetvid=dcaa7a20624311edbfe837c773556ae7
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 12 Nov 2022 04:38:33 GMT
content-type: application/javascript
last-modified: Sat, 12 Nov 2022 04:38:01 GMT
vary: Accept-Encoding
etag: W/"636f2329-da9"
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=pFGObwAjH81bM1d7WTDs2dXY4R44l%2F3bELx0eIgeqxeGciDQP8%2FRTa0%2FBOo71hbnm5DJSkLs7FgiDawOdIAEUIDjz1tpeTSHW4FKscAV4rV%2FYaUpQj4vmtqHbYoFAA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15552000; preload
server: cloudflare
cf-ray: 768c9427891bb500-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|