r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 2857be6f18459c7a4a7f00f6cd6076f1
570609086d72a9be57cde7bfefd25663c1035fba
bd8abb8f420d1e31462fca1d6a7caadf1e2bba6fc7db05684b5811e00e84107f
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "BD8ABB8F420D1E31462FCA1D6A7CAADF1E2BBA6FC7DB05684B5811E00E84107F"
Last-Modified: Fri, 17 Mar 2023 14:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14035
Expires: Sat, 18 Mar 2023 20:46:30 GMT
Date: Sat, 18 Mar 2023 16:52:35 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 443a700f85619f4fd8a548421c5c23e2
a58764a07feafb2bb4b340c020b5104c55b35195
0bc80613f3d493ea081bf5672ab76f6f33a1dcc0710fe1431de83c46d7e8d31d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0BC80613F3D493EA081BF5672AB76F6F33A1DCC0710FE1431DE83C46D7E8D31D"
Last-Modified: Fri, 17 Mar 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6345
Expires: Sat, 18 Mar 2023 18:38:20 GMT
Date: Sat, 18 Mar 2023 16:52:35 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 12cdbcb1b0785dc0423386448ac68c9c
08cff6b76fd708f0cef3c5bdb8fc72570c4536bd
bb7622a85d32cbff40abd2995055e03dbac05dd841b9a84d9023a5510d89e534
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "BB7622A85D32CBFF40ABD2995055E03DBAC05DD841B9A84D9023A5510D89E534"
Last-Modified: Fri, 17 Mar 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4385
Expires: Sat, 18 Mar 2023 18:05:40 GMT
Date: Sat, 18 Mar 2023 16:52:35 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
35.241.9.150200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP 35.241.9.150:0
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 29fdbcd53b5646cfcdd46510063734c4
85e3ceda5ef130219f4fe8a31e52e2690c8f7d8e
24c27586332c016685e6231fec5836e921048d8aaefbcd4cd6f88969f9d91e18
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Retry-After, Content-Type, Content-Length, Backoff, Alert
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Sat, 18 Mar 2023 16:14:36 GMT
content-type: application/json
age: 2279
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-04-30-16-53-14.chain
34.160.144.191200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-04-30-16-53-14.chain
IP 34.160.144.191:0
File type PEM certificate\012- , ASCII text
Hash e7bace7c1e04d44012e37ddffe36e5d5
3ac8d7c0a9d3e3f0b28b2530c7b8d8407b4042c2
6b4f80f2e95b26f6122ea8dcd0ef8d762299be822c69e839fc37581ca2bcb5f2
GET /chains/remote-settings.content-signature.mozilla.org-2023-04-30-16-53-14.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: QI9PNV9Wnogs1H0mjlWnkFpyXNha0H5geuLxJBBAc3kR4AVciO7Mq6MUBUVf7vOwg4qAhEkQGKY=
x-amz-request-id: GKS5W3HXSF64M5ER
x-amz-server-side-encryption: AES256
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Sat, 18 Mar 2023 15:57:55 GMT
age: 3280
last-modified: Sat, 11 Mar 2023 16:53:15 GMT
etag: "e7bace7c1e04d44012e37ddffe36e5d5"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
34.117.237.239200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP 34.117.237.239:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sat, 18 Mar 2023 16:52:35 GMT
content-type: application/json
content-length: 12
access-control-allow-credentials: true
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-expose-headers: content-type
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
35.241.9.150200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP 35.241.9.150:0
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Cache-Control, Content-Length, Retry-After, Content-Type, Expires, Alert, Pragma, ETag, Backoff, Last-Modified
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Sat, 18 Mar 2023 16:17:21 GMT
age: 2114
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 70f795f7a73fb087a4b08eebe6e2a970
faaa9283e766256900f3c3e00dee00973e7da2a6
4f7e4813f82f60ebf9c536d9342726307686931df7309a4c367f3b658602efde
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "4F7E4813F82F60EBF9C536D9342726307686931DF7309A4C367F3B658602EFDE"
Last-Modified: Fri, 17 Mar 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7348
Expires: Sat, 18 Mar 2023 18:55:04 GMT
Date: Sat, 18 Mar 2023 16:52:36 GMT
Connection: keep-alive
www.hsvmikd.top/
43.156.145.25301 Moved Permanently 166 B IP 43.156.145.25:0
ASN #132203 Tencent Building, Kejizhongyi Avenue
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 3ea1c8d079b38532a6e01a96216ba5e2
598d3ff91d3e252f1e13df8cf0348b270ff2da3f
87a9323ac85ce28867d5d7ce590c8f29b8d1a999961fca71bb33adef48683691
Analyzer Verdict Alert fortinet Phishing
NIDS Severity Alert suricata medium ET INFO HTTP Request to a *.top domain
GET / HTTP/1.1
Host: www.hsvmikd.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Date: Sat, 18 Mar 2023 16:52:36 GMT
Content-Type: text/html
Content-Length: 166
Connection: keep-alive
Location: https://www.hsvmikd.top/
Server: gy-scdn
Strict-Transport-Security: max-age=31536000;
X-Cache-Status: MISS
push.services.mozilla.com/
54.186.165.49101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP 54.186.165.49:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: OL/b9UGAiJdKJYOoKD4BDw==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: uxlvyETq/LGInB5jjV7XYPVvyG8=
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash b3d8e7011456a3afd49a3ce901577c8d
5827b54ef0d57f1be755e87b85e7366ef87c4522
a4de928365fca737725b9c9d8ab01e7696a52e435b9b2322dfb49abc234fad83
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A4DE928365FCA737725B9C9D8AB01E7696A52E435B9B2322DFB49ABC234FAD83"
Last-Modified: Thu, 16 Mar 2023 07:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21597
Expires: Sat, 18 Mar 2023 22:52:33 GMT
Date: Sat, 18 Mar 2023 16:52:36 GMT
Connection: keep-alive
www.hsvmikd.top/
43.156.145.25200 OK 1.2 kB IP 43.156.145.25:0
ASN #132203 Tencent Building, Kejizhongyi Avenue
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- assembler source, ASCII text, with very long lines (1749)
Hash 143ad4030f84f932758e0086e7c2bcc3
8293e74070f9042dbafabcccb6fa92fde9593057
2cbdff738c6578df0d40fe4156c6fbb286b0f100417e7b348827f9517c785f77
Analyzer Verdict Alert fortinet Phishing
NIDS Severity Alert suricata medium ET INFO HTTP Request to a *.top domain
GET / HTTP/1.1
Host: www.hsvmikd.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/1.1 200 OK
Date: Sat, 18 Mar 2023 16:52:37 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Fri, 10 Mar 2023 02:12:22 GMT
Vary: Accept-Encoding
ETag: W/"640a9206-b41"
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization,Access-Token,Sign,Lang,Agent-Identify,Client-Version,Platform,Device-Id,Context-Type
Content-Encoding: gzip
Server: gy-scdn
Strict-Transport-Security: max-age=31536000;
X-Cache-Status: MISS
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 84762efcb2e1535ae49fca6c1523df33
93e7f138a491d4276a793c2e5b947195ae69a88c
920778735cfb5f0395bbfa1391cb4e90c547d455cac77c8bb161a0c3b55a6a3f
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "920778735CFB5F0395BBFA1391CB4E90C547D455CAC77C8BB161A0C3B55A6A3F"
Last-Modified: Thu, 16 Mar 2023 15:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=19498
Expires: Sat, 18 Mar 2023 22:17:35 GMT
Date: Sat, 18 Mar 2023 16:52:37 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 84762efcb2e1535ae49fca6c1523df33
93e7f138a491d4276a793c2e5b947195ae69a88c
920778735cfb5f0395bbfa1391cb4e90c547d455cac77c8bb161a0c3b55a6a3f
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "920778735CFB5F0395BBFA1391CB4E90C547D455CAC77C8BB161A0C3B55A6A3F"
Last-Modified: Thu, 16 Mar 2023 15:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=19498
Expires: Sat, 18 Mar 2023 22:17:35 GMT
Date: Sat, 18 Mar 2023 16:52:37 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 84762efcb2e1535ae49fca6c1523df33
93e7f138a491d4276a793c2e5b947195ae69a88c
920778735cfb5f0395bbfa1391cb4e90c547d455cac77c8bb161a0c3b55a6a3f
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "920778735CFB5F0395BBFA1391CB4E90C547D455CAC77C8BB161A0C3B55A6A3F"
Last-Modified: Thu, 16 Mar 2023 15:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=19498
Expires: Sat, 18 Mar 2023 22:17:35 GMT
Date: Sat, 18 Mar 2023 16:52:37 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 84762efcb2e1535ae49fca6c1523df33
93e7f138a491d4276a793c2e5b947195ae69a88c
920778735cfb5f0395bbfa1391cb4e90c547d455cac77c8bb161a0c3b55a6a3f
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "920778735CFB5F0395BBFA1391CB4E90C547D455CAC77C8BB161A0C3B55A6A3F"
Last-Modified: Thu, 16 Mar 2023 15:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=19498
Expires: Sat, 18 Mar 2023 22:17:35 GMT
Date: Sat, 18 Mar 2023 16:52:37 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F261ec986-2f8d-4ff1-a532-841fb845618b.jpeg
34.120.237.76200 OK 6.2 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F261ec986-2f8d-4ff1-a532-841fb845618b.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash ae34f2fd5c842d15f05edef4c8b71dec
7e0306e3aa1b415cf9cae33b07da9f3303216a33
a5c1d1c217f6ebae09bbcb3c7ca6261e75773fdf32c1be4fedc29695f3233bf4
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F261ec986-2f8d-4ff1-a532-841fb845618b.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6151
x-amzn-requestid: 3df3d28e-80d9-40ff-a524-1c8d07c5b5f5
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: B8eWhHeBIAMF2pA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6414ddc3-023ab8d94bf6b98a5c0b4260;Sampled=0
x-amzn-remapped-date: Fri, 17 Mar 2023 21:38:11 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C3
x-cache: Hit from cloudfront
x-amz-cf-id: Sf-LgGpKI-9JPfurhJ_S6vfH-mT0jEl77QDUUWeOE1jzGS6OU47QpA==
via: 1.1 efe54e8b68e074d39b2ecd249f85100a.cloudfront.net (CloudFront), 1.1 de2dd11312f7d5ad3bcd0cb112c7fd0e.cloudfront.net (CloudFront), 1.1 google
date: Fri, 17 Mar 2023 21:48:47 GMT
age: 68630
etag: "7e0306e3aa1b415cf9cae33b07da9f3303216a33"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8afa2cdb-a5f3-4c78-a2ab-132c8b752b4b.png
34.120.237.76200 OK 10 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8afa2cdb-a5f3-4c78-a2ab-132c8b752b4b.png
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 78453ba98b72eff3879ef163b59c86ed
80519bb3726ee1f9f211344cd433cefaed3a7f2e
61adfeff11af9583355ac7d1500e8a8d97357b2846f151f2421001994fb06655
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8afa2cdb-a5f3-4c78-a2ab-132c8b752b4b.png HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10338
x-amzn-requestid: 9f880b5b-056c-44bb-a811-36ea27c232aa
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: BvSgFGENoAMFuVw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-640f9799-2318d444248f7610300c658f;Sampled=0
x-amzn-remapped-date: Mon, 13 Mar 2023 21:37:29 GMT
x-amz-cf-pop: SEA19-C3
x-cache: Hit from cloudfront
x-amz-cf-id: xfkObFQbeYQQjIJ4FWQ7xKbH5FPxBQ1vkTDCwWCM6IcAAu8H31BNhQ==
via: 1.1 2dc111aa3ead15d061e41a423155a53a.cloudfront.net (CloudFront), 1.1 ef8f66c83aecd87910ce2e1153544a20.cloudfront.net (CloudFront), 1.1 google
date: Sat, 18 Mar 2023 07:04:42 GMT
age: 35275
etag: "80519bb3726ee1f9f211344cd433cefaed3a7f2e"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3a465734-2031-4538-bcbc-9d828ea81250.jpeg
34.120.237.76200 OK 12 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3a465734-2031-4538-bcbc-9d828ea81250.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 7f53bb1fb90c97461035e7f9f7f7837e
961b5fcbca5b49ca9136e74931253bb300aa1985
dad960991444a4cbd8841e5c673b0e4337bdeb8c18672b5cfadb93d4ac70e8d2
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3a465734-2031-4538-bcbc-9d828ea81250.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11673
x-amzn-requestid: 3675d2d9-47ab-4712-9511-0ad7570dd3cd
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: B8eNfFXSIAMFbhQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6414dd89-53c9817044fda17b212f0237;Sampled=0
x-amzn-remapped-date: Fri, 17 Mar 2023 21:37:13 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C3
x-cache: Miss from cloudfront
x-amz-cf-id: 3NRQ90kGnSsxxMeQA9UqBNxrT5CpJWJgKKPWHwcj2XBkSIjiwE55sw==
via: 1.1 9c60d6224ac0b44e908b5c9dcf70e9a4.cloudfront.net (CloudFront), 1.1 74ab105148338444981d1b2277ffd9c4.cloudfront.net (CloudFront), 1.1 google
date: Fri, 17 Mar 2023 22:53:23 GMT
etag: "961b5fcbca5b49ca9136e74931253bb300aa1985"
content-type: image/jpeg
age: 64754
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff784a508-c4b6-43b8-aef0-aed98e41fff2.jpeg
34.120.237.76200 OK 7.3 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff784a508-c4b6-43b8-aef0-aed98e41fff2.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 8895f37f5abd28598cae47303ec912d2
c5bc2c1ef3a7819b9456fff476ffa2f93b954b0a
e79cca3d8a87088262492024fe4c0d36d8b93dd88634e7ba75911d1393237008
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff784a508-c4b6-43b8-aef0-aed98e41fff2.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7328
x-amzn-requestid: 7eee08f8-01f6-42d0-b3ef-e16a608a68be
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: B8fJvFm0IAMFdtA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6414df0a-162212b7401ed34b32d72f4c;Sampled=0
x-amzn-remapped-date: Fri, 17 Mar 2023 21:43:38 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C3
x-cache: Hit from cloudfront
x-amz-cf-id: vsTH4EJwryon5WGGcCmV-RqUiIpdM3LDxS1MczTaLWrxPem0nZ_yRg==
via: 1.1 efe54e8b68e074d39b2ecd249f85100a.cloudfront.net (CloudFront), 1.1 1d000d0dfe9d69b4983f619fdc5499d6.cloudfront.net (CloudFront), 1.1 google
date: Fri, 17 Mar 2023 22:12:08 GMT
age: 67229
etag: "c5bc2c1ef3a7819b9456fff476ffa2f93b954b0a"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6a34f4ab-d2e4-48aa-b1d4-ba1513efdd5c.jpeg
34.120.237.76200 OK 10 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6a34f4ab-d2e4-48aa-b1d4-ba1513efdd5c.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 58ae9b9d874dd977b79bd6f8ad3829f9
070ba3e08796862f511f3313c99d863539696313
ef4738171c6cc5a2c2f725e5a32d65b3de38ba8bbbed72a52f724476ba764a42
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6a34f4ab-d2e4-48aa-b1d4-ba1513efdd5c.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10029
x-amzn-requestid: ee521485-7d70-46d3-b7e6-7f38e1ca0f01
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: B8eR6GiMIAMFjUg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6414dda5-3d5d5d5d37b1ed8e250d2146;Sampled=0
x-amzn-remapped-date: Fri, 17 Mar 2023 21:37:41 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C3
x-cache: Hit from cloudfront
x-amz-cf-id: qqVri7BrFPm419PBmAnW-QQpwBf99IMBD8R1zLTvJzpNUJrXCJf2cg==
via: 1.1 6ba2a21321beeef65404429d0a4b6380.cloudfront.net (CloudFront), 1.1 29a825d8a219984d47bec4350779b558.cloudfront.net (CloudFront), 1.1 google
date: Fri, 17 Mar 2023 21:44:56 GMT
age: 68861
etag: "070ba3e08796862f511f3313c99d863539696313"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Feedd77c7-8b8f-4bac-96f9-56463f5c0e54.jpeg
34.120.237.76200 OK 5.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Feedd77c7-8b8f-4bac-96f9-56463f5c0e54.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 23a8641328e19a1089aba9c25b56f5f9
6e6bae868b11788860aa23c5c35ee86d4e7edd80
7e16b14c774413387d81c06e068738a0f97882cd32ebdbf61ad711fa8aa8a5d6
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Feedd77c7-8b8f-4bac-96f9-56463f5c0e54.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5531
x-amzn-requestid: dcb5f835-dae0-4fd2-846d-33e52501b016
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: B8eS7HtSoAMF8eA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6414ddac-2e1022da61b5532756dcbeff;Sampled=0
x-amzn-remapped-date: Fri, 17 Mar 2023 21:37:48 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C3
x-cache: Miss from cloudfront
x-amz-cf-id: z4j-PSYSG-H58566292KAzF1Y08DrgcxvunTtWBD8dErl3n_oRweyA==
via: 1.1 e5af640ced3aa8764b82c4bc3f7af38e.cloudfront.net (CloudFront), 1.1 de2dd11312f7d5ad3bcd0cb112c7fd0e.cloudfront.net (CloudFront), 1.1 google
date: Fri, 17 Mar 2023 22:33:34 GMT
etag: "6e6bae868b11788860aa23c5c35ee86d4e7edd80"
content-type: image/jpeg
age: 65943
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
www.hsvmikd.top/static/css/chunk-vendors.08fce731.css
43.156.145.25200 OK 40 kB URL HTTP/1.1 www.hsvmikd.top/static/css/chunk-vendors.08fce731.css
IP 43.156.145.25:0
ASN #132203 Tencent Building, Kejizhongyi Avenue
File type ASCII text, with very long lines (65536), with no line terminators
Hash f702556fd6ce2249f3c43416923c7f21
bebc3b169b38bcbae69cd0af8a20402eb04780a4
04a9871c891c076a3e063118589568cd25541e430e6b13ab9710ec0908250ef7
GET /static/css/chunk-vendors.08fce731.css HTTP/1.1
Host: www.hsvmikd.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.hsvmikd.top/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sat, 18 Mar 2023 16:52:37 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Thu, 05 Jan 2023 08:10:02 GMT
Vary: Accept-Encoding, Accept-Encoding
ETag: W/"63b685da-1958d"
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization,Access-Token,Sign,Lang,Agent-Identify,Client-Version,Platform,Device-Id,Context-Type
Server: gy-scdn
Strict-Transport-Security: max-age=31536000;
X-Cache-Status: EXPIRED
Content-Encoding: gzip
www.hsvmikd.top/static/css/app.5776d6ee.css
43.156.145.25200 OK 80 kB URL HTTP/1.1 www.hsvmikd.top/static/css/app.5776d6ee.css
IP 43.156.145.25:0
ASN #132203 Tencent Building, Kejizhongyi Avenue
File type ASCII text, with very long lines (65536), with no line terminators
Hash 2c8d66efd4c55f76a7129af0a0b06bdd
f2adc54a4cc46d6e6594a14516397684d6f64d7d
2fc8eaa8183b45df0153d824a0438f9475cdc4cdc53b520319b987f93ceb3b54
GET /static/css/app.5776d6ee.css HTTP/1.1
Host: www.hsvmikd.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.hsvmikd.top/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sat, 18 Mar 2023 16:52:37 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Mon, 06 Mar 2023 10:23:24 GMT
Vary: Accept-Encoding, Accept-Encoding
ETag: W/"6405bf1c-486f3"
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization,Access-Token,Sign,Lang,Agent-Identify,Client-Version,Platform,Device-Id,Context-Type
Server: gy-scdn
Strict-Transport-Security: max-age=31536000;
X-Cache-Status: EXPIRED
Content-Encoding: gzip
www.hsvmikd.top/static/js/app.848d755f.js
43.156.145.25200 OK 202 kB URL HTTP/1.1 www.hsvmikd.top/static/js/app.848d755f.js
IP 43.156.145.25:0
ASN #132203 Tencent Building, Kejizhongyi Avenue
File type Unicode text, UTF-8 text, with very long lines (65475), with no line terminators
Size 202 kB (201690 bytes)
Hash 93a2b2447914a61e36427c7ca14310e1
d8bb925b82e54629facefa528532b068c1e95bd7
f1b14588752e347f82e39a9ad55bb4eb92fce54373416cb669a8a3422dedc697
Analyzer Verdict Alert fortinet Phishing
GET /static/js/app.848d755f.js HTTP/1.1
Host: www.hsvmikd.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.hsvmikd.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sat, 18 Mar 2023 16:52:38 GMT
Content-Type: application/javascript; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Fri, 10 Mar 2023 02:12:22 GMT
Vary: Accept-Encoding, Accept-Encoding
ETag: W/"640a9206-88ace"
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization,Access-Token,Sign,Lang,Agent-Identify,Client-Version,Platform,Device-Id,Context-Type
Server: gy-scdn
Strict-Transport-Security: max-age=31536000;
X-Cache-Status: EXPIRED
Content-Encoding: gzip
www.hsvmikd.top/static/js/chunk-vendors.d1595a09.js
43.156.145.25200 OK 1.8 MB URL HTTP/1.1 www.hsvmikd.top/static/js/chunk-vendors.d1595a09.js
IP 43.156.145.25:0
ASN #132203 Tencent Building, Kejizhongyi Avenue
File type ASCII text, with very long lines (60607)
Size 1.8 MB (1781996 bytes)
Hash d7d1921b08109efb3ff4bbd13e828a5c
2e7840f59eea5753ca99a9bac43497ce4682a31a
be37a0eaa7a5d53f16d628ce2cc2d854527a39c285fad839d3685b33426b90fb
Analyzer Verdict Alert fortinet Phishing
GET /static/js/chunk-vendors.d1595a09.js HTTP/1.1
Host: www.hsvmikd.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.hsvmikd.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sat, 18 Mar 2023 16:52:38 GMT
Content-Type: application/javascript; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Tue, 17 Jan 2023 03:57:31 GMT
Vary: Accept-Encoding, Accept-Encoding
ETag: W/"63c61cab-4a63fd"
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization,Access-Token,Sign,Lang,Agent-Identify,Client-Version,Platform,Device-Id,Context-Type
Server: gy-scdn
Strict-Transport-Security: max-age=31536000;
X-Cache-Status: EXPIRED
Content-Encoding: gzip
www.hsvmikd.top/favicon.ico
43.156.145.25403 Forbidden 105 B URL HTTP/1.1 www.hsvmikd.top/favicon.ico
IP 43.156.145.25:0
ASN #132203 Tencent Building, Kejizhongyi Avenue
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 370aff3a893dd840025c9fcadcf7bf55
7dab33980e3d1c2aadcc5dcca5873a3cecee736d
b555194207d6a1b3baa84ca969cdbea4abb5e0ee0cc908fc9009a9e5ffd87c50
GET /favicon.ico HTTP/1.1
Host: www.hsvmikd.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.hsvmikd.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 403 Forbidden
Date: Sat, 18 Mar 2023 16:52:40 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Content-Encoding: gzip
Server: gy-scdn
Strict-Transport-Security: max-age=31536000;
X-Cache-Status: MISS
www.hsvmikd.top/api/identify?domain=hsvmikd.top
43.156.145.25200 OK 175 B URL HTTP/1.1 www.hsvmikd.top/api/identify?domain=hsvmikd.top
IP 43.156.145.25:0
ASN #132203 Tencent Building, Kejizhongyi Avenue
File type JSON data\012- , ASCII text, with no line terminators
Hash 8ca4f6be498b2a6ade79466413e005b6
7aadf595fa1a1645f8f4b6e97bf28fccffd83ca1
6ed97dce373f289163f8a2ab48f910c03afad445c1f7d6481c291907d9373550
Analyzer Verdict Alert fortinet Phishing
GET /api/identify?domain=hsvmikd.top HTTP/1.1
Host: www.hsvmikd.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Client-Version: 1.0.0
Platform: Linux x86_64
Lang: en-US
Agent-Identify: undefined
Device-Id: h5
Request-Date: 1679158361
Signature: 4d24794f8c756bee935ee4220126b765
Connection: keep-alive
Referer: https://www.hsvmikd.top/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sat, 18 Mar 2023 16:52:41 GMT
Content-Type: application/json; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Content-Encoding: gzip
Access-Control-Allow-Origin: *, *
Access-Control-Allow-Methods: GET, POST, OPTIONS, GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization,Access-Token,Sign,Lang,Agent-Identify,Client-Version,Platform,Device-Id,Context-Type, DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization,Access-Token,Sign,Lang,Agent-Identify,Client-Version,Platform,Device-Id,Context-Type
Server: gy-scdn
Strict-Transport-Security: max-age=31536000;
X-Cache-Status: MISS
www.hsvmikd.top/static/css/chunk-30413ce8.5c62c78e.css
43.156.145.25200 OK 718 B URL HTTP/1.1 www.hsvmikd.top/static/css/chunk-30413ce8.5c62c78e.css
IP 43.156.145.25:0
ASN #132203 Tencent Building, Kejizhongyi Avenue
File type ASCII text, with very long lines (2680), with no line terminators
Hash fb2d10bf6b50cf3b47c0a84c3302d095
d0e87dc8a68f744f79a9df6e553d91f1b178f13d
bf4d3b8f01c4b7b43c2bcfcf8fb87aedf628e52cd466e5b30f923540baed79fa
GET /static/css/chunk-30413ce8.5c62c78e.css HTTP/1.1
Host: www.hsvmikd.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
Connection: keep-alive
Referer: https://www.hsvmikd.top/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sat, 18 Mar 2023 16:52:41 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Fri, 10 Mar 2023 02:12:22 GMT
Vary: Accept-Encoding, Accept-Encoding
ETag: W/"640a9206-a78"
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization,Access-Token,Sign,Lang,Agent-Identify,Client-Version,Platform,Device-Id,Context-Type
Server: gy-scdn
Strict-Transport-Security: max-age=31536000;
X-Cache-Status: EXPIRED
Content-Encoding: gzip
www.hsvmikd.top/static/css/chunk-4711cb97.dcfaad6a.css
43.156.145.25200 OK 448 B URL HTTP/1.1 www.hsvmikd.top/static/css/chunk-4711cb97.dcfaad6a.css
IP 43.156.145.25:0
ASN #132203 Tencent Building, Kejizhongyi Avenue
File type ASCII text, with very long lines (1070), with no line terminators
Hash 5981386c46bc544392552a81af6a6490
0dbe61e859cce451ba886b055a8621ce212ed261
71bf3450f28738d2e7756a014d1e05da9c3ac6e4d8c3580d29baa03d9e7e2f75
GET /static/css/chunk-4711cb97.dcfaad6a.css HTTP/1.1
Host: www.hsvmikd.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
Connection: keep-alive
Referer: https://www.hsvmikd.top/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sat, 18 Mar 2023 16:52:41 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Thu, 12 Jan 2023 08:06:51 GMT
Vary: Accept-Encoding, Accept-Encoding
ETag: W/"63bfbf9b-42e"
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization,Access-Token,Sign,Lang,Agent-Identify,Client-Version,Platform,Device-Id,Context-Type
Server: gy-scdn
Strict-Transport-Security: max-age=31536000;
X-Cache-Status: EXPIRED
Content-Encoding: gzip
www.hsvmikd.top/static/css/chunk-6d7b0fc3.d92afbd1.css
43.156.145.25200 OK 585 B URL HTTP/1.1 www.hsvmikd.top/static/css/chunk-6d7b0fc3.d92afbd1.css
IP 43.156.145.25:0
ASN #132203 Tencent Building, Kejizhongyi Avenue
File type ASCII text, with very long lines (585), with no line terminators
Hash ed60012e29d80ead974959557e6b6437
64047681bac245fae5722eb8a309631805123ede
e853c556e4f842a643a6b183681714b49d750308c533e2cb5b48be9f500f1646
GET /static/css/chunk-6d7b0fc3.d92afbd1.css HTTP/1.1
Host: www.hsvmikd.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
Connection: keep-alive
Referer: https://www.hsvmikd.top/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sat, 18 Mar 2023 16:52:41 GMT
Content-Type: text/css
Content-Length: 585
Connection: keep-alive
Last-Modified: Thu, 05 Jan 2023 08:10:02 GMT
Vary: Accept-Encoding
ETag: "63b685da-249"
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization,Access-Token,Sign,Lang,Agent-Identify,Client-Version,Platform,Device-Id,Context-Type
Server: gy-scdn
Strict-Transport-Security: max-age=31536000;
X-Cache-Status: EXPIRED
Accept-Ranges: bytes
www.hsvmikd.top/static/css/chunk-4043fba0.efdd0cba.css
43.156.145.25200 OK 678 B URL HTTP/1.1 www.hsvmikd.top/static/css/chunk-4043fba0.efdd0cba.css
IP 43.156.145.25:0
ASN #132203 Tencent Building, Kejizhongyi Avenue
File type ASCII text, with very long lines (2296), with no line terminators
Hash 20383fd4bcfa44702eaa62af42da852a
67a57e2fdb7115fecde53c83ce2f2405942cbb89
1de1156fcd925ff63860ccf042950cd5dda67336dbe612b4866053ba115b6e4c
GET /static/css/chunk-4043fba0.efdd0cba.css HTTP/1.1
Host: www.hsvmikd.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
Connection: keep-alive
Referer: https://www.hsvmikd.top/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sat, 18 Mar 2023 16:52:41 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Thu, 12 Jan 2023 08:06:51 GMT
Vary: Accept-Encoding, Accept-Encoding
ETag: W/"63bfbf9b-8f8"
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization,Access-Token,Sign,Lang,Agent-Identify,Client-Version,Platform,Device-Id,Context-Type
Server: gy-scdn
Strict-Transport-Security: max-age=31536000;
X-Cache-Status: EXPIRED
Content-Encoding: gzip
www.hsvmikd.top/static/js/chunk-30413ce8.2e1be555.js
43.156.145.25200 OK 4.5 kB URL HTTP/1.1 www.hsvmikd.top/static/js/chunk-30413ce8.2e1be555.js
IP 43.156.145.25:0
ASN #132203 Tencent Building, Kejizhongyi Avenue
File type Unicode text, UTF-8 text, with very long lines (10780), with no line terminators
Hash b8373a319a193270ad86f4dbb83a17c3
24bdcaf43540d6686e625186fcc14b061eab2681
8022aea0172c44017c4bceb4086a659f6cb8fb87bbd721fae38d7589374c94a1
Analyzer Verdict Alert fortinet Phishing
GET /static/js/chunk-30413ce8.2e1be555.js HTTP/1.1
Host: www.hsvmikd.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
Connection: keep-alive
Referer: https://www.hsvmikd.top/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sat, 18 Mar 2023 16:52:41 GMT
Content-Type: application/javascript; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Fri, 10 Mar 2023 02:12:22 GMT
Vary: Accept-Encoding, Accept-Encoding
ETag: W/"640a9206-2a20"
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization,Access-Token,Sign,Lang,Agent-Identify,Client-Version,Platform,Device-Id,Context-Type
Server: gy-scdn
Strict-Transport-Security: max-age=31536000;
X-Cache-Status: EXPIRED
Content-Encoding: gzip
www.hsvmikd.top/static/js/chunk-4043fba0.653a0e09.js
43.156.145.25200 OK 1.5 kB URL HTTP/1.1 www.hsvmikd.top/static/js/chunk-4043fba0.653a0e09.js
IP 43.156.145.25:0
ASN #132203 Tencent Building, Kejizhongyi Avenue
File type ASCII text, with very long lines (3694), with no line terminators
Hash 0df68867bdc406b46407db8dd8d07c1e
bf37049ed060b1780a0a59e3614846b86c07c592
ec5b147ee55e63941d340e03b454ca2e3326cdf55fbf68dfac509a6edc3fb8e9
Analyzer Verdict Alert fortinet Phishing
GET /static/js/chunk-4043fba0.653a0e09.js HTTP/1.1
Host: www.hsvmikd.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
Connection: keep-alive
Referer: https://www.hsvmikd.top/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sat, 18 Mar 2023 16:52:42 GMT
Content-Type: application/javascript; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Thu, 12 Jan 2023 08:06:51 GMT
Vary: Accept-Encoding, Accept-Encoding
ETag: W/"63bfbf9b-e6e"
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization,Access-Token,Sign,Lang,Agent-Identify,Client-Version,Platform,Device-Id,Context-Type
Server: gy-scdn
Strict-Transport-Security: max-age=31536000;
X-Cache-Status: EXPIRED
Content-Encoding: gzip
www.hsvmikd.top/api/wallets/1/templates/0
43.156.145.25200 OK 246 B URL HTTP/1.1 www.hsvmikd.top/api/wallets/1/templates/0
IP 43.156.145.25:0
ASN #132203 Tencent Building, Kejizhongyi Avenue
File type JSON data\012- , ASCII text, with very long lines (315), with no line terminators
Hash bbcf4dac63aac2f174f5abcba9e9d493
ca996923f45c174539372998d2f767628ebdeff7
f879aaba5f1fb4dbdee8b3b387510d742dde9a72180a46d4f8424e94b9c9c605
Analyzer Verdict Alert fortinet Phishing
GET /api/wallets/1/templates/0 HTTP/1.1
Host: www.hsvmikd.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Client-Version: 1.0.0
Platform: Linux x86_64
Lang: en-US
Agent-Identify: c780920f-81b7-4e32-a9ac-0442564ab19b
Device-Id: h5
Request-Date: 1679158361
Signature: 58b964219807e3514ca18a346b919eb0
Connection: keep-alive
Referer: https://www.hsvmikd.top/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sat, 18 Mar 2023 16:52:42 GMT
Content-Type: application/json; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Content-Encoding: gzip
Access-Control-Allow-Origin: *, *
Access-Control-Allow-Methods: GET, POST, OPTIONS, GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization,Access-Token,Sign,Lang,Agent-Identify,Client-Version,Platform,Device-Id,Context-Type, DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization,Access-Token,Sign,Lang,Agent-Identify,Client-Version,Platform,Device-Id,Context-Type
Server: gy-scdn
Strict-Transport-Security: max-age=31536000;
X-Cache-Status: MISS
www.hsvmikd.top/static/js/chunk-6d7b0fc3.39200c45.js
43.156.145.25200 OK 811 B URL HTTP/1.1 www.hsvmikd.top/static/js/chunk-6d7b0fc3.39200c45.js
IP 43.156.145.25:0
ASN #132203 Tencent Building, Kejizhongyi Avenue
File type ASCII text, with very long lines (1452), with no line terminators
Hash 937281159723f5c8a1e1eee7216f6f09
9dfa430e681167b32be285a5d04f48d2777ecf76
a9d53b5742fb238be47d06ee2b1af3797aa54a8f79585c365f8f7f19cb0fd34e
Analyzer Verdict Alert fortinet Phishing
GET /static/js/chunk-6d7b0fc3.39200c45.js HTTP/1.1
Host: www.hsvmikd.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
Connection: keep-alive
Referer: https://www.hsvmikd.top/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sat, 18 Mar 2023 16:52:42 GMT
Content-Type: application/javascript; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Thu, 05 Jan 2023 08:10:03 GMT
Vary: Accept-Encoding, Accept-Encoding
ETag: W/"63b685db-5ac"
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization,Access-Token,Sign,Lang,Agent-Identify,Client-Version,Platform,Device-Id,Context-Type
Server: gy-scdn
Strict-Transport-Security: max-age=31536000;
X-Cache-Status: EXPIRED
Content-Encoding: gzip
www.hsvmikd.top/static/js/chunk-4711cb97.4dcaf51b.js
43.156.145.25200 OK 2.8 kB URL HTTP/1.1 www.hsvmikd.top/static/js/chunk-4711cb97.4dcaf51b.js
IP 43.156.145.25:0
ASN #132203 Tencent Building, Kejizhongyi Avenue
File type ASCII text, with very long lines (5490), with no line terminators
Hash 8418dff66796e2b9fe20d9735398659e
1ce2181a8b3c67184e8d58e817aa04f5980faaf8
6e7bdc9714ed3e06424de27cd94c1235434458297b50d09468924ab5b5f6e3f6
Analyzer Verdict Alert fortinet Phishing
GET /static/js/chunk-4711cb97.4dcaf51b.js HTTP/1.1
Host: www.hsvmikd.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
Connection: keep-alive
Referer: https://www.hsvmikd.top/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sat, 18 Mar 2023 16:52:42 GMT
Content-Type: application/javascript; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Thu, 12 Jan 2023 08:06:51 GMT
Vary: Accept-Encoding, Accept-Encoding
ETag: W/"63bfbf9b-1572"
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization,Access-Token,Sign,Lang,Agent-Identify,Client-Version,Platform,Device-Id,Context-Type
Server: gy-scdn
Strict-Transport-Security: max-age=31536000;
X-Cache-Status: EXPIRED
Content-Encoding: gzip
www.hsvmikd.top/api/configs
43.156.145.25200 OK 1.1 kB URL HTTP/1.1 www.hsvmikd.top/api/configs
IP 43.156.145.25:0
ASN #132203 Tencent Building, Kejizhongyi Avenue
File type JSON data\012- , ASCII text, with very long lines (2890), with no line terminators
Hash 645d432f12f93483100aa576257337d0
9acb30e2b9e16932c7bc55f1e1e3fb2de5d92ee9
1a9459d26fe6e07765e4a1dadb4ddd2a73be1454d2965c8e3529aa641ec8d1ad
Analyzer Verdict Alert fortinet Phishing
GET /api/configs HTTP/1.1
Host: www.hsvmikd.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Client-Version: 1.0.0
Platform: Linux x86_64
Lang: en-US
Agent-Identify: c780920f-81b7-4e32-a9ac-0442564ab19b
Device-Id: h5
Request-Date: 1679158361
Signature: c0680e5c89afe9d7a7f61048e86c75e1
Connection: keep-alive
Referer: https://www.hsvmikd.top/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sat, 18 Mar 2023 16:52:42 GMT
Content-Type: application/json; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Content-Encoding: gzip
Access-Control-Allow-Origin: *, *
Access-Control-Allow-Methods: GET, POST, OPTIONS, GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization,Access-Token,Sign,Lang,Agent-Identify,Client-Version,Platform,Device-Id,Context-Type, DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization,Access-Token,Sign,Lang,Agent-Identify,Client-Version,Platform,Device-Id,Context-Type
Server: gy-scdn
Strict-Transport-Security: max-age=31536000;
X-Cache-Status: MISS
www.hsvmikd.top/static/img/icon_duigou.455309c2.svg
43.156.145.25200 OK 1.7 kB URL HTTP/1.1 www.hsvmikd.top/static/img/icon_duigou.455309c2.svg
IP 43.156.145.25:0
ASN #132203 Tencent Building, Kejizhongyi Avenue
File type SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- HTML document, Unicode text, UTF-8 text, with very long lines (1089)
Hash 455309c29bf7626df47507c12fe7926d
131a81271e6b29b6a370087cfb2db2b5ff6aece4
b1303fa2dc2a0e950c8d8510e4a73d70cfa5d5a9a28fbfa60c06ddbd6962b4f4
Analyzer Verdict Alert fortinet Phishing
GET /static/img/icon_duigou.455309c2.svg HTTP/1.1
Host: www.hsvmikd.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.hsvmikd.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sat, 18 Mar 2023 16:52:42 GMT
Content-Type: image/svg+xml
Content-Length: 1717
Connection: keep-alive
Last-Modified: Thu, 24 Nov 2022 09:56:43 GMT
Vary: Accept-Encoding
ETag: "637f3fdb-6b5"
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization,Access-Token,Sign,Lang,Agent-Identify,Client-Version,Platform,Device-Id,Context-Type
Server: gy-scdn
Strict-Transport-Security: max-age=31536000;
X-Cache-Status: EXPIRED
Accept-Ranges: bytes
www.hsvmikd.top/files/rcw45g3.29795107
43.156.145.25200 OK 13 kB URL HTTP/1.1 www.hsvmikd.top/files/rcw45g3.29795107
IP 43.156.145.25:0
ASN #132203 Tencent Building, Kejizhongyi Avenue
File type PNG image data, 450 x 80, 8-bit/color RGBA, non-interlaced\012- data
Hash 29795107c169eb9bbcabdbf9549929f9
c9643656f957ae51ca5f5981aea041776c79ffc8
adb5d1b1eb058f2f393730f020967dccf2201994212ab41ae48de25d676a2211
Analyzer Verdict Alert fortinet Phishing
GET /files/rcw45g3.29795107 HTTP/1.1
Host: www.hsvmikd.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.hsvmikd.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sat, 18 Mar 2023 16:52:42 GMT
Content-Type: image/png
Content-Length: 12660
Connection: keep-alive
x-amz-id-2: q3WC27fh64Bzup/Gs6y396jNZrc3Xfv88RwJY3f5PirtwRnbD/H2FW233jVWx0qkwEOzEegv4Wg=
x-amz-request-id: 6VSYHJ2GZ8REFH8X
Last-Modified: Fri, 03 Jun 2022 07:25:53 GMT
ETag: "29795107c169eb9bbcabdbf9549929f9"
x-amz-storage-class: INTELLIGENT_TIERING
x-amz-server-side-encryption: AES256
Content-Disposition: attachment
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization,Access-Token,Sign,Lang,Agent-Identify,Client-Version,Platform,Device-Id,Context-Type
Server: gy-scdn
Strict-Transport-Security: max-age=31536000;
X-Cache-Status: MISS
www.hsvmikd.top/static/img/icon_appStore.89f0eb05.png
43.156.145.25200 OK 14 kB URL HTTP/1.1 www.hsvmikd.top/static/img/icon_appStore.89f0eb05.png
IP 43.156.145.25:0
ASN #132203 Tencent Building, Kejizhongyi Avenue
File type PNG image data, 464 x 138, 8-bit/color RGBA, non-interlaced\012- data
Hash 89f0eb0533a76fcf8a2714e6945cb344
faf2cd0dc10a9f06388f51998f399732e901f61b
8dc4749e2ea6917da79d553571aadc8ab4dff908a1b48bb2582be80247aa2213
GET /static/img/icon_appStore.89f0eb05.png HTTP/1.1
Host: www.hsvmikd.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.hsvmikd.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sat, 18 Mar 2023 16:52:42 GMT
Content-Type: image/png
Content-Length: 14006
Connection: keep-alive
Last-Modified: Thu, 24 Nov 2022 09:56:43 GMT
ETag: "637f3fdb-36b6"
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization,Access-Token,Sign,Lang,Agent-Identify,Client-Version,Platform,Device-Id,Context-Type
Server: gy-scdn
Strict-Transport-Security: max-age=31536000;
X-Cache-Status: EXPIRED
Accept-Ranges: bytes
www.hsvmikd.top/api/app/dialogs
43.156.145.25200 OK 64 B URL HTTP/1.1 www.hsvmikd.top/api/app/dialogs
IP 43.156.145.25:0
ASN #132203 Tencent Building, Kejizhongyi Avenue
File type JSON data\012- , ASCII text, with no line terminators
Hash 414734fd09e01292a48b8953548c43b3
e2e7db14c9d335d81a64feb52c40370c5ff744d8
31c918746a04f6f71be7a4cd9afc151be32a2d944f736286eac9047af0aa27af
Analyzer Verdict Alert fortinet Phishing
GET /api/app/dialogs HTTP/1.1
Host: www.hsvmikd.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Client-Version: 1.0.0
Platform: Linux x86_64
Lang: en-US
Agent-Identify: c780920f-81b7-4e32-a9ac-0442564ab19b
Device-Id: h5
Request-Date: 1679158361
Signature: 5598f0f5a2d6d5a5153baf08290747b5
Connection: keep-alive
Referer: https://www.hsvmikd.top/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sat, 18 Mar 2023 16:52:42 GMT
Content-Type: application/json; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Content-Encoding: gzip
Access-Control-Allow-Origin: *, *
Access-Control-Allow-Methods: GET, POST, OPTIONS, GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization,Access-Token,Sign,Lang,Agent-Identify,Client-Version,Platform,Device-Id,Context-Type, DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization,Access-Token,Sign,Lang,Agent-Identify,Client-Version,Platform,Device-Id,Context-Type
Server: gy-scdn
Strict-Transport-Security: max-age=31536000;
X-Cache-Status: MISS
www.hsvmikd.top/static/img/icon_googlePlay.c4282a5f.png
43.156.145.25200 OK 17 kB URL HTTP/1.1 www.hsvmikd.top/static/img/icon_googlePlay.c4282a5f.png
IP 43.156.145.25:0
ASN #132203 Tencent Building, Kejizhongyi Avenue
File type PNG image data, 464 x 138, 8-bit/color RGBA, non-interlaced\012- data
Hash c4282a5f16443fd4493ced29810ef78d
350cb5059ba98aa2305ba0d959fec205c30d0f86
7036016f1b71023def76c780104605b32a3f61bcf0bbc4e851b58ddef0582f01
GET /static/img/icon_googlePlay.c4282a5f.png HTTP/1.1
Host: www.hsvmikd.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.hsvmikd.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sat, 18 Mar 2023 16:52:42 GMT
Content-Type: image/png
Content-Length: 17300
Connection: keep-alive
Last-Modified: Thu, 24 Nov 2022 09:56:43 GMT
ETag: "637f3fdb-4394"
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization,Access-Token,Sign,Lang,Agent-Identify,Client-Version,Platform,Device-Id,Context-Type
Server: gy-scdn
Strict-Transport-Security: max-age=31536000;
X-Cache-Status: EXPIRED
Accept-Ranges: bytes
www.hsvmikd.top/files/1nc533pn2s0cqqo34csemgx160j9vl26.json
43.156.145.25200 OK 85 kB URL HTTP/1.1 www.hsvmikd.top/files/1nc533pn2s0cqqo34csemgx160j9vl26.json
IP 43.156.145.25:0
ASN #132203 Tencent Building, Kejizhongyi Avenue
File type JSON data\012- , Unicode text, UTF-8 text, with very long lines (64792), with no line terminators
Hash 854f525dbff8d610315d2ee99c77c6a5
412c87168176a2cb27f8106395d17eac58d8f9d8
f6c76a03356f92064143387782b0a16032cf1b442d7e1241c59a1cab4741ca70
Analyzer Verdict Alert fortinet Phishing
GET /files/1nc533pn2s0cqqo34csemgx160j9vl26.json HTTP/1.1
Host: www.hsvmikd.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.hsvmikd.top/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sat, 18 Mar 2023 16:52:42 GMT
Content-Type: text/plain; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding, Accept-Encoding
x-amz-id-2: WybCYVwaNH9rm55BIF1SLIzk6duJ5w/aFzRa/YiAheWF6PiVbYybFlURziKaURMbuymbpHRrq5g=
x-amz-request-id: 6VSX3N0WGRC2TVQK
Last-Modified: Fri, 24 Feb 2023 08:57:56 GMT
ETag: W/"ef9c7d13e8b1865e1da19e5e3baf40a3"
x-amz-storage-class: INTELLIGENT_TIERING
x-amz-server-side-encryption: AES256
Content-Disposition: dfvcc3/files
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization,Access-Token,Sign,Lang,Agent-Identify,Client-Version,Platform,Device-Id,Context-Type
Server: gy-scdn
Strict-Transport-Security: max-age=31536000;
X-Cache-Status: MISS
Content-Encoding: gzip
www.hsvmikd.top/files/rcw1dg6.44
43.156.145.25200 OK 54 kB URL HTTP/1.1 www.hsvmikd.top/files/rcw1dg6.44
IP 43.156.145.25:0
ASN #132203 Tencent Building, Kejizhongyi Avenue
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 982x860, components 3\012- data
Hash 1ce25b1e327e4c68fb347aa400e083da
0f8d6c7cb85713382a42a594d01053479653383d
7449631badd9075484b2f70f972efbbee951570156038617ed73edfcdd387896
Analyzer Verdict Alert fortinet Phishing
GET /files/rcw1dg6.44 HTTP/1.1
Host: www.hsvmikd.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.hsvmikd.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sat, 18 Mar 2023 16:52:42 GMT
Content-Type: image/jpeg
Content-Length: 53911
Connection: keep-alive
x-amz-id-2: yC97a+nbjwbnnoHHzNk9SqwrJw7TqLMjLVk+l1FBo0Ay3kGEHSf5ugYCqLAMELtt/WlEYhA07Ls=
x-amz-request-id: 6VSWCMT0693XZD2F
Last-Modified: Fri, 03 Jun 2022 07:06:50 GMT
ETag: "1ce25b1e327e4c68fb347aa400e083da"
x-amz-storage-class: INTELLIGENT_TIERING
x-amz-server-side-encryption: AES256
Content-Disposition: attachment
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization,Access-Token,Sign,Lang,Agent-Identify,Client-Version,Platform,Device-Id,Context-Type
Server: gy-scdn
Strict-Transport-Security: max-age=31536000;
X-Cache-Status: MISS
www.hsvmikd.top/static/fonts/Nunito-Bold.c0844c99.ttf
43.156.145.25200 OK 153 kB URL HTTP/1.1 www.hsvmikd.top/static/fonts/Nunito-Bold.c0844c99.ttf
IP 43.156.145.25:0
ASN #132203 Tencent Building, Kejizhongyi Avenue
File type TrueType Font data, 17 tables, 1st "GDEF", 13 names, Microsoft, language 0x409, Copyright 2014 The Nunito Project Authors (https://github.com/googlefonts/nunito)NunitoBold3.601\012- data
Size 153 kB (152748 bytes)
Hash c0844c990ecaaeb9f124758d38df4f3f
231df28194a466da9e8ad72532164f50ad5f8750
8b9e27ba172e5b535b1d0564b4882f74aecc77a4dc4d20fc400bd2b2bc4418c1
Analyzer Verdict Alert fortinet Phishing
GET /static/fonts/Nunito-Bold.c0844c99.ttf HTTP/1.1
Host: www.hsvmikd.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.hsvmikd.top/static/css/app.5776d6ee.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sat, 18 Mar 2023 16:52:43 GMT
Content-Type: application/octet-stream
Content-Length: 152748
Connection: keep-alive
Last-Modified: Thu, 24 Nov 2022 09:56:43 GMT
ETag: "637f3fdb-254ac"
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization,Access-Token,Sign,Lang,Agent-Identify,Client-Version,Platform,Device-Id,Context-Type
Server: gy-scdn
Strict-Transport-Security: max-age=31536000;
X-Cache-Status: EXPIRED
Accept-Ranges: bytes
www.hsvmikd.top/static/fonts/Nunito-SemiBold.876701bc.ttf
43.156.145.25200 OK 153 kB URL HTTP/1.1 www.hsvmikd.top/static/fonts/Nunito-SemiBold.876701bc.ttf
IP 43.156.145.25:0
ASN #132203 Tencent Building, Kejizhongyi Avenue
File type TrueType Font data, 17 tables, 1st "GDEF", 15 names, Microsoft, language 0x409, Copyright 2014 The Nunito Project Authors (https://github.com/googlefonts/nunito)Nunito SemiBold\012- data
Size 153 kB (153116 bytes)
Hash 876701bc4fbf6166f07f152691b15159
91ab95e4bfedccb234e05305eeb2de76e5f5f66a
f1e4f2f2fc3d7c308dd2c7535c10c26020928a3e424a93712392d05429945cef
Analyzer Verdict Alert fortinet Phishing
GET /static/fonts/Nunito-SemiBold.876701bc.ttf HTTP/1.1
Host: www.hsvmikd.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.hsvmikd.top/static/css/app.5776d6ee.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sat, 18 Mar 2023 16:52:43 GMT
Content-Type: application/octet-stream
Content-Length: 153116
Connection: keep-alive
Last-Modified: Thu, 24 Nov 2022 09:56:43 GMT
ETag: "637f3fdb-2561c"
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization,Access-Token,Sign,Lang,Agent-Identify,Client-Version,Platform,Device-Id,Context-Type
Server: gy-scdn
Strict-Transport-Security: max-age=31536000;
X-Cache-Status: EXPIRED
Accept-Ranges: bytes