Network Analysis

GET /recover/initiate/?ldata=AWdu9jOm_Vz9oxOyhcWwMT2sAbKJiix516xWvQ4nCxFV1S37siY3l3C6S3u4xp-ztme4ivBgdnsyWh9jVQyB5w4KqwpqCyrmf8PDliykkZ5tePO9XNgJoRexoC3Ux8seM3jcdm2gAR4E-JVJCU4MlYZ0ku5pkQ6e_COFE6k8BEMgzy8QIaNicxWpg5S6WGS50j5WBeDImWd6dBo12z5gW4MSVVFColbWx1xyDdVmG6kYG8YXmOnjOEzzUfTI-TBF9wRufqc-LFgmNiuR7Yo6Zl23 HTTP/1.1 Accept: text/html, application/xhtml+xml, */* Accept-Language: ko-KR User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Win64; x64; Trident/5.0) UA-CPU: AMD64 Accept-Encoding: gzip, deflate Host: www.facebook.com Connection: Keep-Alive

HTTP/1.1 200 OK Vary: Accept-Encoding Content-Encoding: gzip Pragma: no-cache Cache-Control: private, no-cache, no-store, must-revalidate Expires: Sat, 01 Jan 2000 00:00:00 GMT Content-Type: text/html;charset=utf-8 Strict-Transport-Security: max-age=15552000; preload X-FB-Debug: dtjwb22IM92Gzf0pSrrwaNuvz/OgkAdIP0TyU0T1IlcD/dr+jIPgEa+Gi9LfdFOqe/gjaqTbM4GyRP8KyV2TwQ== Date: Sat, 01 Apr 2023 02:07:06 GMT Alt-Svc: h3=":443"; ma=86400 Connection: keep-alive Content-Length: 806

GET /recover/initiate/?ldata=AWdu9jOm_Vz9oxOyhcWwMT2sAbKJiix516xWvQ4nCxFV1S37siY3l3C6S3u4xp-ztme4ivBgdnsyWh9jVQyB5w4KqwpqCyrmf8PDliykkZ5tePO9XNgJoRexoC3Ux8seM3jcdm2gAR4E-JVJCU4MlYZ0ku5pkQ6e_COFE6k8BEMgzy8QIaNicxWpg5S6WGS50j5WBeDImWd6dBo12z5gW4MSVVFColbWx1xyDdVmG6kYG8YXmOnjOEzzUfTI-TBF9wRufqc-LFgmNiuR7Yo6Zl23&_rdr HTTP/1.1 Accept: text/html, application/xhtml+xml, */* Referer: https://www.facebook.com/recover/initiate/?ldata=AWdu9jOm_Vz9oxOyhcWwMT2sAbKJiix516xWvQ4nCxFV1S37siY3l3C6S3u4xp-ztme4ivBgdnsyWh9jVQyB5w4KqwpqCyrmf8PDliykkZ5tePO9XNgJoRexoC3Ux8seM3jcdm2gAR4E-JVJCU4MlYZ0ku5pkQ6e_COFE6k8BEMgzy8QIaNicxWpg5S6WGS50j5WBeDImWd6dBo12z5gW4MSVVFColbWx1xyDdVmG6kYG8YXmOnjOEzzUfTI-TBF9wRufqc-LFgmNiuR7Yo6Zl23 Accept-Language: ko-KR User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Win64; x64; Trident/5.0) UA-CPU: AMD64 Accept-Encoding: gzip, deflate Host: m.facebook.com Connection: Keep-Alive

HTTP/1.1 302 Found P3P: CP="Facebook has no P3P policy fb.me/p3p" Set-Cookie: datr=y5EnZNF17bYpJl3jHwZ4xkrQ; expires=Mon, 31-Mar-2025 02:07:07 GMT; Max-Age=63072000; path=/; domain=.facebook.com; secure; httponly Location: https://m.facebook.com/login/identify/?ctx=recover&c&multiple_results=0&from_login_screen=0&_rdr report-to: {"max_age":259200,"endpoints":[{"url":"https:\/\/m.facebook.com\/ajax\/mtouch_error_reports\/?device_level=unknown"}]} x-fb-rlafr: 0 document-policy: force-load-at-top cross-origin-opener-policy: unsafe-none Pragma: no-cache Cache-Control: private, no-cache, no-store, must-revalidate Expires: Sat, 01 Jan 2000 00:00:00 GMT X-Content-Type-Options: nosniff X-XSS-Protection: 0 X-Frame-Options: DENY X-UA-Compatible: IE=edge Content-Type: text/html; charset=utf-8 Strict-Transport-Security: max-age=15552000; preload; includeSubDomains X-FB-Debug: I3bMWw76cOzCJu3EB6wAqJx2Fgo5aBpItJEkWOb6pkbRquqUj9POe5NavWgQZYG2xFJXV2rGPgEX0fQvXr6Hlg== Date: Sat, 01 Apr 2023 02:07:07 GMT Alt-Svc: h3=":443"; ma=86400 Connection: keep-alive Content-Length: 0

GET /login/identify/?ctx=recover&c&multiple_results=0&from_login_screen=0&_rdr HTTP/1.1 Accept: text/html, application/xhtml+xml, */* Referer: https://www.facebook.com/recover/initiate/?ldata=AWdu9jOm_Vz9oxOyhcWwMT2sAbKJiix516xWvQ4nCxFV1S37siY3l3C6S3u4xp-ztme4ivBgdnsyWh9jVQyB5w4KqwpqCyrmf8PDliykkZ5tePO9XNgJoRexoC3Ux8seM3jcdm2gAR4E-JVJCU4MlYZ0ku5pkQ6e_COFE6k8BEMgzy8QIaNicxWpg5S6WGS50j5WBeDImWd6dBo12z5gW4MSVVFColbWx1xyDdVmG6kYG8YXmOnjOEzzUfTI-TBF9wRufqc-LFgmNiuR7Yo6Zl23 Accept-Language: ko-KR User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Win64; x64; Trident/5.0) UA-CPU: AMD64 Accept-Encoding: gzip, deflate Host: m.facebook.com Connection: Keep-Alive Cookie: datr=y5EnZNF17bYpJl3jHwZ4xkrQ

HTTP/1.1 200 OK Vary: Accept-Encoding Content-Encoding: gzip report-to: {"max_age":259200,"endpoints":[{"url":"https:\/\/m.facebook.com\/ajax\/mtouch_error_reports\/?device_level=unknown"}]} x-fb-rlafr: 0 document-policy: force-load-at-top cross-origin-opener-policy: same-origin-allow-popups Pragma: no-cache Cache-Control: private, no-cache, no-store, must-revalidate Expires: Sat, 01 Jan 2000 00:00:00 GMT X-Content-Type-Options: nosniff X-XSS-Protection: 0 X-Frame-Options: DENY X-UA-Compatible: IE=edge Content-Type: text/html; charset=utf-8 Strict-Transport-Security: max-age=15552000; preload; includeSubDomains X-FB-Debug: OsuaO+5MHRjq+NBiroHn8UseSWksRUmz0S+65okAiEu8xpYfRAtXPDUd+dD45JEDBYjlUx4uXBVm4mNSwyZe6w== Date: Sat, 01 Apr 2023 02:07:07 GMT Alt-Svc: h3=":443"; ma=86400 Transfer-Encoding: chunked Connection: keep-alive

GET /security/hsts-pixel.gif?c=3.2 HTTP/1.1 Accept: image/png, image/svg+xml, image/*;q=0.8, */*;q=0.5 Referer: https://m.facebook.com/login/identify/?ctx=recover&c&multiple_results=0&from_login_screen=0&_rdr Accept-Language: ko-KR User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Win64; x64; Trident/5.0) UA-CPU: AMD64 Accept-Encoding: gzip, deflate Host: facebook.com Connection: Keep-Alive Cookie: datr=y5EnZNF17bYpJl3jHwZ4xkrQ

HTTP/1.1 302 Found Location: https://fbcdn.net/security/hsts-pixel.gif?c=2 report-to: {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/?minimize=0"}],"group":"coep_report"} cross-origin-embedder-policy-report-only: require-corp;report-to="coep_report" cross-origin-opener-policy: same-origin-allow-popups Access-Control-Allow-Origin: * Strict-Transport-Security: max-age=15552000; preload Content-Type: text/html; charset="utf-8" X-FB-Debug: mMZHcJ0oZ9qOdz9Fm8VNh2eFTi0TDlbUrgbqjQ+vGE/gQbIn/Ypv9jDbkMjI3ent5hXtK/SGBr0DOavMq5UNdw== Date: Sat, 01 Apr 2023 02:07:07 GMT Alt-Svc: h3=":443"; ma=86400 Connection: keep-alive Content-Length: 0

GET /rsrc.php/v3/y8/r/k97pj8-or6s.png HTTP/1.1 Accept: image/png, image/svg+xml, image/*;q=0.8, */*;q=0.5 Referer: https://m.facebook.com/login/identify/?ctx=recover&c&multiple_results=0&from_login_screen=0&_rdr Accept-Language: ko-KR User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Win64; x64; Trident/5.0) UA-CPU: AMD64 Accept-Encoding: gzip, deflate Host: static.xx.fbcdn.net Connection: Keep-Alive

HTTP/1.1 200 OK Content-Type: image/png Access-Control-Allow-Origin: * Last-Modified: Mon, 01 Jan 2001 08:00:00 GMT Content-MD5: ZfLx61eYtTxQTtjePZDJWA== Expires: Wed, 27 Mar 2024 19:18:47 GMT Cache-Control: public,max-age=31536000,immutable x-fb-rlafr: 0 document-policy: force-load-at-top cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff timing-allow-origin: * X-UA-Compatible: IE=edge X-FB-Debug: ld3aKsdTLwg3xjNzTL2MBYA/33FA+Ale9MCXptjn/aVaZ2s6dNgFoCdcMRR41MGk07QSNYUWcpVa48UhjDCHaQ== X-FB-TRIP-ID: 1679558926 Date: Sat, 01 Apr 2023 02:07:07 GMT Alt-Svc: h3=":443"; ma=86400 Connection: keep-alive Content-Length: 809

GET /rsrc.php/v3/y0/r/2xs6jaqwoaL.png HTTP/1.1 Accept: image/png, image/svg+xml, image/*;q=0.8, */*;q=0.5 Referer: https://m.facebook.com/login/identify/?ctx=recover&c&multiple_results=0&from_login_screen=0&_rdr Accept-Language: ko-KR User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Win64; x64; Trident/5.0) UA-CPU: AMD64 Accept-Encoding: gzip, deflate Host: static.xx.fbcdn.net Connection: Keep-Alive

HTTP/1.1 200 OK Content-Type: image/png Access-Control-Allow-Origin: * Last-Modified: Mon, 01 Jan 2001 08:00:00 GMT Content-MD5: 5EQsoi/uhrxcx/3+KAk3iQ== Expires: Sat, 30 Mar 2024 21:01:37 GMT Cache-Control: public,max-age=31536000,immutable x-fb-rlafr: 0 document-policy: force-load-at-top cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff timing-allow-origin: * X-UA-Compatible: IE=edge X-FB-Debug: 7iGSEMiqVoka9GNy1roMoHD8sYi1Rk+GM3YXf2f40vvn2ico4x5AsL/oouaY0VYU5tYvjUeXnC8ARoClUJecMw== X-FB-TRIP-ID: 1679558926 Date: Sat, 01 Apr 2023 02:07:07 GMT Alt-Svc: h3=":443"; ma=86400 Connection: keep-alive Content-Length: 13599

GET /security/hsts-pixel.gif?c=2 HTTP/1.1 Accept: image/png, image/svg+xml, image/*;q=0.8, */*;q=0.5 Referer: https://m.facebook.com/login/identify/?ctx=recover&c&multiple_results=0&from_login_screen=0&_rdr Accept-Language: ko-KR User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Win64; x64; Trident/5.0) UA-CPU: AMD64 Accept-Encoding: gzip, deflate Connection: Keep-Alive Host: fbcdn.net

HTTP/1.1 302 Found Location: https://fbsbx.com/security/hsts-pixel.gif report-to: {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/?minimize=0"}],"group":"coep_report"} cross-origin-embedder-policy-report-only: require-corp;report-to="coep_report" cross-origin-opener-policy: same-origin-allow-popups Access-Control-Allow-Origin: * Strict-Transport-Security: max-age=31536000; preload; includeSubDomains Content-Type: text/html; charset="utf-8" X-FB-Debug: o5a2LQAvYe98dS9WkOdRPCTzZ5cg3DFDU9XqaJUlJwZEean5xm1ZJT8MAUUHVGUMK/bQrxGVfomnWHm/yPnOGA== Date: Sat, 01 Apr 2023 02:07:07 GMT Alt-Svc: h3=":443"; ma=86400 Connection: keep-alive Content-Length: 0

GET /security/hsts-pixel.gif HTTP/1.1 Accept: image/png, image/svg+xml, image/*;q=0.8, */*;q=0.5 Referer: https://m.facebook.com/login/identify/?ctx=recover&c&multiple_results=0&from_login_screen=0&_rdr Accept-Language: ko-KR User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Win64; x64; Trident/5.0) UA-CPU: AMD64 Accept-Encoding: gzip, deflate Connection: Keep-Alive Host: fbsbx.com

HTTP/1.1 200 OK Vary: Accept-Encoding Content-Encoding: gzip Content-Type: image/gif report-to: {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/?minimize=0"}],"group":"coep_report"} x-fb-rlafr: 0 document-policy: force-load-at-top cross-origin-resource-policy: cross-origin cross-origin-embedder-policy-report-only: require-corp;report-to="coep_report" cross-origin-opener-policy: same-origin-allow-popups Pragma: private Cache-Control: private Expires: Sat, 01 Jan 2000 00:00:00 GMT X-Content-Type-Options: nosniff X-XSS-Protection: 0 X-Frame-Options: DENY X-UA-Compatible: IE=edge Access-Control-Allow-Origin: * Strict-Transport-Security: max-age=31536000; preload; includeSubDomains X-FB-Debug: +IOvN/cQrWUqCPK3mC051RMUDXQNoVgdqWquzEvvIbxktyf9X2pAExeV5Xm2M9T4y3Ld47y1xxTyrbQTzHU5Uw== Date: Sat, 01 Apr 2023 02:07:07 GMT Alt-Svc: h3=":443"; ma=86400 Transfer-Encoding: chunked Connection: keep-alive

GET /favicon.ico HTTP/1.1 Accept: */* UA-CPU: AMD64 Accept-Encoding: gzip, deflate User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Win64; x64; Trident/5.0) Host: m.facebook.com Connection: Keep-Alive Cookie: datr=y5EnZNF17bYpJl3jHwZ4xkrQ

HTTP/1.1 200 OK Vary: Accept-Encoding Content-Encoding: gzip report-to: {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/m.facebook.com\/ajax\/mtouch_error_reports\/?device_level=unknown"}]} x-fb-rlafr: 0 document-policy: force-load-at-top cross-origin-resource-policy: cross-origin cross-origin-embedder-policy-report-only: require-corp;report-to="coep_report" cross-origin-opener-policy: same-origin-allow-popups Pragma: private Cache-Control: private Expires: Sat, 01 Jan 2000 00:00:00 GMT X-Content-Type-Options: nosniff X-XSS-Protection: 0 X-Frame-Options: DENY X-UA-Compatible: IE=edge Content-Type: image/png Strict-Transport-Security: max-age=15552000; preload; includeSubDomains X-FB-Debug: ddY4L7jUMzFE1TDaasWRBWBmTV1Wd4HL9CJy+4QOa5KspnZz7ITpTgIDWDr1Kx8a3LqniZmNdxq8QaqbzGndmA== Date: Sat, 01 Apr 2023 02:07:08 GMT Alt-Svc: h3=":443"; ma=86400 Connection: keep-alive Content-Length: 1613

GET /IE9CompatViewList.xml HTTP/1.1 Accept: */* UA-CPU: AMD64 Accept-Encoding: gzip, deflate User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Win64; x64; Trident/5.0) Host: ie9cvlist.ie.microsoft.com If-Modified-Since: Thu, 21 Nov 2019 19:37:08 GMT If-None-Match: 0x8D76EBA32AF0BC3 Connection: Keep-Alive

HTTP/1.1 200 OK Content-Encoding: gzip Age: 15706 Cache-Control: max-age=21600 Content-MD5: p9g4jsuZO6TaLMVAI9ujVg== Content-Type: text/xml Date: Sat, 01 Apr 2023 02:08:05 GMT Etag: 0x8D9521D2D2DF1EC Last-Modified: Wed, 28 Jul 2021 23:12:31 GMT Server: ECAcc (tka/897A) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 9dd09428-f01e-00b7-6f1a-64e207000000 x-ms-version: 2009-09-19 Content-Length: 13702