Network Analysis

GET /recover/initiate/?ldata=AWdu9jOm_Vz9oxOyhcWwMT2sAbKJiix516xWvQ4nCxFV1S37siY3l3C6S3u4xp-ztme4ivBgdnsyWh9jVQyB5w4KqwpqCyrmf8PDliykkZ5tePO9XNgJoRexoC3Ux8seM3jcdm2gAR4E-JVJCU4MlYZ0ku5pkQ6e_COFE6k8BEMgzy8QIaNicxWpg5S6WGS50j5WBeDImWd6dBo12z5gW4MSVVFColbWx1xyDdVmG6kYG8YXmOnjOEzzUfTI-TBF9wRufqc-LFgmNiuR7Yo6Zl23 HTTP/1.1 Accept: text/html, application/xhtml+xml, */* Accept-Language: ko-KR User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Win64; x64; Trident/5.0) UA-CPU: AMD64 Accept-Encoding: gzip, deflate Host: www.facebook.com Connection: Keep-Alive

HTTP/1.1 200 OK Vary: Accept-Encoding Content-Encoding: gzip Pragma: no-cache Cache-Control: private, no-cache, no-store, must-revalidate Expires: Sat, 01 Jan 2000 00:00:00 GMT Content-Type: text/html;charset=utf-8 Strict-Transport-Security: max-age=15552000; preload X-FB-Debug: GgWEx+uGlrwmqH9+hzhqk6mvlshalnT0lIBQdTHLG6o+vkSQCbmcS4VJkDESFkaGJRftvVZxGvx6rwhy7XjCRA== Date: Sat, 01 Apr 2023 01:38:16 GMT Alt-Svc: h3=":443"; ma=86400 Connection: keep-alive Content-Length: 807

GET /recover/initiate/?ldata=AWdu9jOm_Vz9oxOyhcWwMT2sAbKJiix516xWvQ4nCxFV1S37siY3l3C6S3u4xp-ztme4ivBgdnsyWh9jVQyB5w4KqwpqCyrmf8PDliykkZ5tePO9XNgJoRexoC3Ux8seM3jcdm2gAR4E-JVJCU4MlYZ0ku5pkQ6e_COFE6k8BEMgzy8QIaNicxWpg5S6WGS50j5WBeDImWd6dBo12z5gW4MSVVFColbWx1xyDdVmG6kYG8YXmOnjOEzzUfTI-TBF9wRufqc-LFgmNiuR7Yo6Zl23&_rdr HTTP/1.1 Accept: text/html, application/xhtml+xml, */* Referer: https://www.facebook.com/recover/initiate/?ldata=AWdu9jOm_Vz9oxOyhcWwMT2sAbKJiix516xWvQ4nCxFV1S37siY3l3C6S3u4xp-ztme4ivBgdnsyWh9jVQyB5w4KqwpqCyrmf8PDliykkZ5tePO9XNgJoRexoC3Ux8seM3jcdm2gAR4E-JVJCU4MlYZ0ku5pkQ6e_COFE6k8BEMgzy8QIaNicxWpg5S6WGS50j5WBeDImWd6dBo12z5gW4MSVVFColbWx1xyDdVmG6kYG8YXmOnjOEzzUfTI-TBF9wRufqc-LFgmNiuR7Yo6Zl23 Accept-Language: ko-KR User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Win64; x64; Trident/5.0) UA-CPU: AMD64 Accept-Encoding: gzip, deflate Host: m.facebook.com Connection: Keep-Alive

HTTP/1.1 302 Found P3P: CP="Facebook has no P3P policy fb.me/p3p" Set-Cookie: datr=CYsnZGwQDNFYrB2Rn-bKMAM0; expires=Mon, 31-Mar-2025 01:38:17 GMT; Max-Age=63072000; path=/; domain=.facebook.com; secure; httponly Location: https://m.facebook.com/login/identify/?ctx=recover&c&multiple_results=0&from_login_screen=0&_rdr report-to: {"max_age":259200,"endpoints":[{"url":"https:\/\/m.facebook.com\/ajax\/mtouch_error_reports\/?device_level=unknown"}]} x-fb-rlafr: 0 document-policy: force-load-at-top cross-origin-opener-policy: unsafe-none Pragma: no-cache Cache-Control: private, no-cache, no-store, must-revalidate Expires: Sat, 01 Jan 2000 00:00:00 GMT X-Content-Type-Options: nosniff X-XSS-Protection: 0 X-Frame-Options: DENY X-UA-Compatible: IE=edge Content-Type: text/html; charset=utf-8 Strict-Transport-Security: max-age=15552000; preload; includeSubDomains X-FB-Debug: G4KAIqfW08InvxPtz9216PeRsF/d9As7sedu79fHCp7xE0njnIvXxVlWWwUF97/9rZ+rCQjftqiDjJxVqhjnIw== Date: Sat, 01 Apr 2023 01:38:17 GMT Alt-Svc: h3=":443"; ma=86400 Connection: keep-alive Content-Length: 0

GET /login/identify/?ctx=recover&c&multiple_results=0&from_login_screen=0&_rdr HTTP/1.1 Accept: text/html, application/xhtml+xml, */* Referer: https://www.facebook.com/recover/initiate/?ldata=AWdu9jOm_Vz9oxOyhcWwMT2sAbKJiix516xWvQ4nCxFV1S37siY3l3C6S3u4xp-ztme4ivBgdnsyWh9jVQyB5w4KqwpqCyrmf8PDliykkZ5tePO9XNgJoRexoC3Ux8seM3jcdm2gAR4E-JVJCU4MlYZ0ku5pkQ6e_COFE6k8BEMgzy8QIaNicxWpg5S6WGS50j5WBeDImWd6dBo12z5gW4MSVVFColbWx1xyDdVmG6kYG8YXmOnjOEzzUfTI-TBF9wRufqc-LFgmNiuR7Yo6Zl23 Accept-Language: ko-KR User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Win64; x64; Trident/5.0) UA-CPU: AMD64 Accept-Encoding: gzip, deflate Host: m.facebook.com Connection: Keep-Alive Cookie: datr=CYsnZGwQDNFYrB2Rn-bKMAM0

HTTP/1.1 200 OK Vary: Accept-Encoding Content-Encoding: gzip report-to: {"max_age":259200,"endpoints":[{"url":"https:\/\/m.facebook.com\/ajax\/mtouch_error_reports\/?device_level=unknown"}]} x-fb-rlafr: 0 document-policy: force-load-at-top cross-origin-opener-policy: same-origin-allow-popups Pragma: no-cache Cache-Control: private, no-cache, no-store, must-revalidate Expires: Sat, 01 Jan 2000 00:00:00 GMT X-Content-Type-Options: nosniff X-XSS-Protection: 0 X-Frame-Options: DENY X-UA-Compatible: IE=edge Content-Type: text/html; charset=utf-8 Strict-Transport-Security: max-age=15552000; preload; includeSubDomains X-FB-Debug: 9lOPbxT+r7jTpZFrzgk32NEp9CtgcUdZPgiJJsPHEEcBoP06WzWUiRbaqlYH90SYBGHsfdsN6Kq/cQURfyh0XA== Date: Sat, 01 Apr 2023 01:38:17 GMT Alt-Svc: h3=":443"; ma=86400 Transfer-Encoding: chunked Connection: keep-alive

GET /rsrc.php/v3/y8/r/k97pj8-or6s.png HTTP/1.1 Accept: image/png, image/svg+xml, image/*;q=0.8, */*;q=0.5 Referer: https://m.facebook.com/login/identify/?ctx=recover&c&multiple_results=0&from_login_screen=0&_rdr Accept-Language: ko-KR User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Win64; x64; Trident/5.0) UA-CPU: AMD64 Accept-Encoding: gzip, deflate Host: static.xx.fbcdn.net Connection: Keep-Alive

HTTP/1.1 200 OK Content-Type: image/png Access-Control-Allow-Origin: * Last-Modified: Mon, 01 Jan 2001 08:00:00 GMT Content-MD5: ZfLx61eYtTxQTtjePZDJWA== Expires: Wed, 27 Mar 2024 19:18:47 GMT Cache-Control: public,max-age=31536000,immutable x-fb-rlafr: 0 document-policy: force-load-at-top cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff timing-allow-origin: * X-UA-Compatible: IE=edge X-FB-Debug: ld3aKsdTLwg3xjNzTL2MBYA/33FA+Ale9MCXptjn/aVaZ2s6dNgFoCdcMRR41MGk07QSNYUWcpVa48UhjDCHaQ== X-FB-TRIP-ID: 1679558926 Date: Sat, 01 Apr 2023 01:38:17 GMT Alt-Svc: h3=":443"; ma=86400 Connection: keep-alive Content-Length: 809

GET /security/hsts-pixel.gif?c=3.2 HTTP/1.1 Accept: image/png, image/svg+xml, image/*;q=0.8, */*;q=0.5 Referer: https://m.facebook.com/login/identify/?ctx=recover&c&multiple_results=0&from_login_screen=0&_rdr Accept-Language: ko-KR User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Win64; x64; Trident/5.0) UA-CPU: AMD64 Accept-Encoding: gzip, deflate Host: facebook.com Connection: Keep-Alive Cookie: datr=CYsnZGwQDNFYrB2Rn-bKMAM0

HTTP/1.1 302 Found Location: https://fbcdn.net/security/hsts-pixel.gif?c=2 report-to: {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/?minimize=0"}],"group":"coep_report"} cross-origin-embedder-policy-report-only: require-corp;report-to="coep_report" cross-origin-opener-policy: same-origin-allow-popups Access-Control-Allow-Origin: * Strict-Transport-Security: max-age=15552000; preload Content-Type: text/html; charset="utf-8" X-FB-Debug: Z3/JWvisnPn6fiF36OacKVabbokqN8im5/jZYmDF/I1jyk88J4vXD+48cqLZyB0y2n0n7pF/Hshr6iEk0UG0pA== Date: Sat, 01 Apr 2023 01:38:17 GMT Alt-Svc: h3=":443"; ma=86400 Connection: keep-alive Content-Length: 0

GET /rsrc.php/v3/y0/r/2xs6jaqwoaL.png HTTP/1.1 Accept: image/png, image/svg+xml, image/*;q=0.8, */*;q=0.5 Referer: https://m.facebook.com/login/identify/?ctx=recover&c&multiple_results=0&from_login_screen=0&_rdr Accept-Language: ko-KR User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Win64; x64; Trident/5.0) UA-CPU: AMD64 Accept-Encoding: gzip, deflate Host: static.xx.fbcdn.net Connection: Keep-Alive

HTTP/1.1 200 OK Content-Type: image/png Access-Control-Allow-Origin: * Last-Modified: Mon, 01 Jan 2001 08:00:00 GMT Content-MD5: 5EQsoi/uhrxcx/3+KAk3iQ== Expires: Sat, 30 Mar 2024 21:01:37 GMT Cache-Control: public,max-age=31536000,immutable x-fb-rlafr: 0 document-policy: force-load-at-top cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff timing-allow-origin: * X-UA-Compatible: IE=edge X-FB-Debug: 7iGSEMiqVoka9GNy1roMoHD8sYi1Rk+GM3YXf2f40vvn2ico4x5AsL/oouaY0VYU5tYvjUeXnC8ARoClUJecMw== X-FB-TRIP-ID: 1679558926 Date: Sat, 01 Apr 2023 01:38:18 GMT Alt-Svc: h3=":443"; ma=86400 Connection: keep-alive Content-Length: 13599

GET /security/hsts-pixel.gif?c=2 HTTP/1.1 Accept: image/png, image/svg+xml, image/*;q=0.8, */*;q=0.5 Referer: https://m.facebook.com/login/identify/?ctx=recover&c&multiple_results=0&from_login_screen=0&_rdr Accept-Language: ko-KR User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Win64; x64; Trident/5.0) UA-CPU: AMD64 Accept-Encoding: gzip, deflate Connection: Keep-Alive Host: fbcdn.net

HTTP/1.1 302 Found Location: https://fbsbx.com/security/hsts-pixel.gif report-to: {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/?minimize=0"}],"group":"coep_report"} cross-origin-embedder-policy-report-only: require-corp;report-to="coep_report" cross-origin-opener-policy: same-origin-allow-popups Access-Control-Allow-Origin: * Strict-Transport-Security: max-age=31536000; preload; includeSubDomains Content-Type: text/html; charset="utf-8" X-FB-Debug: e6VwZEmQHeWwhDB7vnD1Yg8qrpT3cKTYUTW5qaKW7JuqmWOeF0takOy1f4wr1W1lRR7yXDuyb7i3L0Q/cbUCJw== Date: Sat, 01 Apr 2023 01:38:18 GMT Alt-Svc: h3=":443"; ma=86400 Connection: keep-alive Content-Length: 0

GET /security/hsts-pixel.gif HTTP/1.1 Accept: image/png, image/svg+xml, image/*;q=0.8, */*;q=0.5 Referer: https://m.facebook.com/login/identify/?ctx=recover&c&multiple_results=0&from_login_screen=0&_rdr Accept-Language: ko-KR User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Win64; x64; Trident/5.0) UA-CPU: AMD64 Accept-Encoding: gzip, deflate Connection: Keep-Alive Host: fbsbx.com

HTTP/1.1 200 OK Vary: Accept-Encoding Content-Encoding: gzip Content-Type: image/gif report-to: {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/?minimize=0"}],"group":"coep_report"} x-fb-rlafr: 0 document-policy: force-load-at-top cross-origin-resource-policy: cross-origin cross-origin-embedder-policy-report-only: require-corp;report-to="coep_report" cross-origin-opener-policy: same-origin-allow-popups Pragma: private Cache-Control: private Expires: Sat, 01 Jan 2000 00:00:00 GMT X-Content-Type-Options: nosniff X-XSS-Protection: 0 X-Frame-Options: DENY X-UA-Compatible: IE=edge Access-Control-Allow-Origin: * Strict-Transport-Security: max-age=31536000; preload; includeSubDomains X-FB-Debug: WZtbSInhMNJcKe/KFBodzXY85jeKgm0j7MpAR0h0alZs+MsY+N4ONUpoFlJKPKp51WDtflOy1VZBHykvsh5eSA== Date: Sat, 01 Apr 2023 01:38:18 GMT Alt-Svc: h3=":443"; ma=86400 Transfer-Encoding: chunked Connection: keep-alive

GET /favicon.ico HTTP/1.1 Accept: */* UA-CPU: AMD64 Accept-Encoding: gzip, deflate User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Win64; x64; Trident/5.0) Host: m.facebook.com Connection: Keep-Alive Cookie: datr=CYsnZGwQDNFYrB2Rn-bKMAM0

HTTP/1.1 200 OK Vary: Accept-Encoding Content-Encoding: gzip report-to: {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/m.facebook.com\/ajax\/mtouch_error_reports\/?device_level=unknown"}]} x-fb-rlafr: 0 document-policy: force-load-at-top cross-origin-resource-policy: cross-origin cross-origin-embedder-policy-report-only: require-corp;report-to="coep_report" cross-origin-opener-policy: same-origin-allow-popups Pragma: private Cache-Control: private Expires: Sat, 01 Jan 2000 00:00:00 GMT X-Content-Type-Options: nosniff X-XSS-Protection: 0 X-Frame-Options: DENY X-UA-Compatible: IE=edge Content-Type: image/png Strict-Transport-Security: max-age=15552000; preload; includeSubDomains X-FB-Debug: IZpwZ+SC1eUWMHzA5OmOQTYLoLRk6DaC7BwwmWr4kHd8BNZaY3F25cdLsQ0YL7n4kVA44LfT1ay0l6P+eV2/Zw== Date: Sat, 01 Apr 2023 01:38:18 GMT Alt-Svc: h3=":443"; ma=86400 Connection: keep-alive Content-Length: 1613

GET /IE9CompatViewList.xml HTTP/1.1 Accept: */* UA-CPU: AMD64 Accept-Encoding: gzip, deflate User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Win64; x64; Trident/5.0) Host: ie9cvlist.ie.microsoft.com If-Modified-Since: Thu, 21 Nov 2019 19:37:08 GMT If-None-Match: 0x8D76EBA32AF0BC3 Connection: Keep-Alive

HTTP/1.1 200 OK Content-Encoding: gzip Age: 13977 Cache-Control: max-age=21600 Content-MD5: p9g4jsuZO6TaLMVAI9ujVg== Content-Type: text/xml Date: Sat, 01 Apr 2023 01:39:16 GMT Etag: 0x8D9521D2D2DF1EC Last-Modified: Wed, 28 Jul 2021 23:12:31 GMT Server: ECAcc (tka/897A) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 9dd09428-f01e-00b7-6f1a-64e207000000 x-ms-version: 2009-09-19 Content-Length: 13702