erp.camersoftware.com/
82.165.73.164301 Moved Permanently 162 B IP 82.165.73.164:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 4f8e702cc244ec5d4de32740c0ecbd97
3adb1f02d5b6054de0046e367c1d687b6cdf7aff
9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a
GET / HTTP/1.1
Host: erp.camersoftware.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Thu, 01 Dec 2022 09:03:18 GMT
Content-Type: text/html
Content-Length: 162
Connection: keep-alive
Location: https://erp.camersoftware.com/
r3.o.lencr.org/
23.33.119.27200 OK 503 B IP 23.33.119.27:0
ASN #20940 Akamai International B.V.
Hash 2d2e7649ce9e9ba6fc8b68aa89352e3c
0153d1d3d830a457043e16bb40d48a0b9ddef4b8
8eed57c91b42ef7b2d5eff1309e306e23e13c3de21219af24a693cbf3e8977fc
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "8EED57C91B42EF7B2D5EFF1309E306E23E13C3DE21219AF24A693CBF3E8977FC"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6463
Expires: Thu, 01 Dec 2022 10:51:02 GMT
Date: Thu, 01 Dec 2022 09:03:19 GMT
Connection: keep-alive
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash f3cf023c797da81728c0ac84c8759331
fa07c5e39e4b0741ea484101cccb2202acea9d9c
5206a0bac8bf78d6b84322519271a1ece2c1039a0090e583de6d6192d88873d0
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4276
Cache-Control: max-age=95956
Content-Type: application/ocsp-response
Date: Thu, 01 Dec 2022 09:03:19 GMT
Etag: "638730f7-1d7"
Expires: Fri, 02 Dec 2022 11:42:35 GMT
Last-Modified: Wed, 30 Nov 2022 10:31:19 GMT
Server: ECS (ska/F71D)
X-Cache: HIT
Content-Length: 471
firefox.settings.services.mozilla.com/v1/
34.102.187.140200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP 34.102.187.140:0
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 14cd9a0afb6ba9a763651d5112760d1e
75d7b104ab9ab11fbb73c3f348b43b0119b5adfa
4e32a117106be587ffcd63239c16a8117eb7840830d4c9decf6527761967532e
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Retry-After, Alert, Backoff, Content-Length, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Thu, 01 Dec 2022 08:19:46 GMT
cache-control: public,max-age=3600
content-type: application/json
age: 2613
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.33.119.27200 OK 503 B IP 23.33.119.27:0
ASN #20940 Akamai International B.V.
Hash 9fce5679881bf302a8978a0b462f01a9
b699fe030ea13ac73813e655c42ed9b531925e2b
a3ec545a8f9364ac9062eddb41279e1465687a1b60f9c1dec6b3a3df8b033eb3
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A3EC545A8F9364AC9062EDDB41279E1465687A1B60F9C1DEC6B3A3DF8B033EB3"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4387
Expires: Thu, 01 Dec 2022 10:16:26 GMT
Date: Thu, 01 Dec 2022 09:03:19 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
34.160.144.191200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
IP 34.160.144.191:0
File type PEM certificate\012- , ASCII text
Hash 9ebddc2b260d081ebbefee47c037cb28
492bad62a7ca6a74738921ef5ae6f0be5edebf39
74bbb7cba16f7d084a08a0907d47d7496e5c148f904707ec6950f8f6a61027e5
GET /chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: V9IzFcBPANAvCjkGOxWAhdRQqJEE9t/5Z3UtrI/i9Xz4bJXtidYAS9zyLmQMdgBxAPYP050OfEE=
x-amz-request-id: X5MV5G5X488SG73S
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Thu, 01 Dec 2022 08:45:36 GMT
age: 1063
last-modified: Thu, 10 Nov 2022 09:21:27 GMT
etag: "9ebddc2b260d081ebbefee47c037cb28"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
34.117.237.239200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP 34.117.237.239:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Thu, 01 Dec 2022 09:03:19 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.33.119.27200 OK 503 B IP 23.33.119.27:0
ASN #20940 Akamai International B.V.
Hash c1a9d13a84baee1eebbf4654cee1861c
c9edfea19b9b6ad4546492e62ff8223954db8a40
8be112640a70a20ccfbcc18cee975c5a2741f03137c966862c703f61ae65a67d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "8BE112640A70A20CCFBCC18CEE975C5A2741F03137C966862C703F61AE65A67D"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21600
Expires: Thu, 01 Dec 2022 15:03:19 GMT
Date: Thu, 01 Dec 2022 09:03:19 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
34.102.187.140200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP 34.102.187.140:0
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Retry-After, ETag, Alert, Expires, Cache-Control, Backoff, Content-Length, Content-Type, Pragma, Last-Modified
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Thu, 01 Dec 2022 08:08:56 GMT
cache-control: public,max-age=3600
age: 3263
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
alt-svc: clear
X-Firefox-Spdy: h2
erp.camersoftware.com/
82.165.73.164200 OK 2.2 kB IP 82.165.73.164:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (589)
Hash d337474614039ec381d13344e1c682a0
904688bf505f0c10e015f6d115cce49fb0c5f386
6986dce442846a0a63ab27dd371b11a4349f3931607e8a0f6cb34c92cec17746
GET / HTTP/1.1
Host: erp.camersoftware.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
server: nginx
date: Thu, 01 Dec 2022 09:03:19 GMT
content-type: text/html; charset=UTF-8
content-length: 2154
expires: Thu, 19 Nov 1981 08:52:00 GMT
pragma: no-cache
cache-control: Public, must-revalidate
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
set-cookie: DOLSESSID_016a778d5055813fd1b81b792c966c8e=iiak599lg4rkursdpi762795ba; path=/; HttpOnly
DOLSESSTIMEOUT_72d8164cfc4d72be0ef0125ca75431eb8d0ab2bc=1440; path=/; HttpOnly
vary: Accept-Encoding
content-encoding: gzip
x-powered-by: PHP/7.1.33, PleskLin
X-Firefox-Spdy: h2
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash cfdd00e67ee6ca21712b867eb5288ab6
b61d5d6ec3b7ad71619e13e32c87f2d01871b88a
f740cac6dfedc1bf0f82efb10dac4f6ffb22f9bb5d4a9b68a4cd971dd2f65793
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4277
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Thu, 01 Dec 2022 09:03:19 GMT
Last-Modified: Thu, 01 Dec 2022 07:52:02 GMT
Server: ECS (ska/F71D)
X-Cache: HIT
Content-Length: 471
erp.camersoftware.com/theme/eldy/style.css.php?lang=fr_FR&theme=eldy&userid=0&entity=1&layout=classic&version=8.0.1
82.165.73.164200 OK 26 kB URL HTTP/2 erp.camersoftware.com/theme/eldy/style.css.php?lang=fr_FR&theme=eldy&userid=0&entity=1&layout=classic&version=8.0.1
IP 82.165.73.164:0
Hash 58e9e3c563f8017cd5d293450ed2e3e7
ecadef43b7032992a6c21acf9d9f95c0bf8aeb21
2038891df47044df23b0003fbab2f4ee4ecf6e5518f6bae41d265928726d9130
GET /theme/eldy/style.css.php?lang=fr_FR&theme=eldy&userid=0&entity=1&layout=classic&version=8.0.1 HTTP/1.1
Host: erp.camersoftware.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://erp.camersoftware.com/
Cookie: DOLSESSID_016a778d5055813fd1b81b792c966c8e=iiak599lg4rkursdpi762795ba; DOLSESSTIMEOUT_72d8164cfc4d72be0ef0125ca75431eb8d0ab2bc=1440
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 01 Dec 2022 09:03:19 GMT
content-type: text/css;charset=UTF-8
content-length: 26352
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
cache-control: max-age=3600, public, must-revalidate
vary: Accept-Encoding
content-encoding: gzip
x-powered-by: PHP/7.1.33, PleskLin
X-Firefox-Spdy: h2
push.services.mozilla.com/
35.163.49.154101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP 35.163.49.154:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: hHe8BPX2r3zCAEN8zPlDwg==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: 9/SmvjvKrToYJMnwqcwg4AiSPNs=
r3.o.lencr.org/
23.33.119.27200 OK 503 B IP 23.33.119.27:0
ASN #20940 Akamai International B.V.
Hash ac3edd07bb0a4ebdaae6ec26e91d2079
b6efe3811dfa37cdcde1e9d411c171732ac7e12a
c5dbd471d178ae4505b28e30aee1e8eed77fffd81b9f7815ad2bda1a0d09a02c
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C5DBD471D178AE4505B28E30AEE1E8EED77FFFD81B9F7815AD2BDA1A0D09A02C"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8594
Expires: Thu, 01 Dec 2022 11:26:35 GMT
Date: Thu, 01 Dec 2022 09:03:21 GMT
Connection: keep-alive
r3.o.lencr.org/
23.33.119.27200 OK 503 B IP 23.33.119.27:0
ASN #20940 Akamai International B.V.
Hash ac3edd07bb0a4ebdaae6ec26e91d2079
b6efe3811dfa37cdcde1e9d411c171732ac7e12a
c5dbd471d178ae4505b28e30aee1e8eed77fffd81b9f7815ad2bda1a0d09a02c
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C5DBD471D178AE4505B28E30AEE1E8EED77FFFD81B9F7815AD2BDA1A0D09A02C"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8594
Expires: Thu, 01 Dec 2022 11:26:35 GMT
Date: Thu, 01 Dec 2022 09:03:21 GMT
Connection: keep-alive
r3.o.lencr.org/
23.33.119.27200 OK 503 B IP 23.33.119.27:0
ASN #20940 Akamai International B.V.
Hash ac3edd07bb0a4ebdaae6ec26e91d2079
b6efe3811dfa37cdcde1e9d411c171732ac7e12a
c5dbd471d178ae4505b28e30aee1e8eed77fffd81b9f7815ad2bda1a0d09a02c
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C5DBD471D178AE4505B28E30AEE1E8EED77FFFD81B9F7815AD2BDA1A0D09A02C"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8594
Expires: Thu, 01 Dec 2022 11:26:35 GMT
Date: Thu, 01 Dec 2022 09:03:21 GMT
Connection: keep-alive
r3.o.lencr.org/
23.33.119.27200 OK 503 B IP 23.33.119.27:0
ASN #20940 Akamai International B.V.
Hash ac3edd07bb0a4ebdaae6ec26e91d2079
b6efe3811dfa37cdcde1e9d411c171732ac7e12a
c5dbd471d178ae4505b28e30aee1e8eed77fffd81b9f7815ad2bda1a0d09a02c
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C5DBD471D178AE4505B28E30AEE1E8EED77FFFD81B9F7815AD2BDA1A0D09A02C"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8594
Expires: Thu, 01 Dec 2022 11:26:35 GMT
Date: Thu, 01 Dec 2022 09:03:21 GMT
Connection: keep-alive
r3.o.lencr.org/
23.33.119.27200 OK 503 B IP 23.33.119.27:0
ASN #20940 Akamai International B.V.
Hash ac3edd07bb0a4ebdaae6ec26e91d2079
b6efe3811dfa37cdcde1e9d411c171732ac7e12a
c5dbd471d178ae4505b28e30aee1e8eed77fffd81b9f7815ad2bda1a0d09a02c
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C5DBD471D178AE4505B28E30AEE1E8EED77FFFD81B9F7815AD2BDA1A0D09A02C"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8594
Expires: Thu, 01 Dec 2022 11:26:35 GMT
Date: Thu, 01 Dec 2022 09:03:21 GMT
Connection: keep-alive
erp.camersoftware.com/includes/jquery/plugins/flot/jquery.flot.pie.min.js?layout=classic&version=8.0.1
82.165.73.164200 OK 16 kB URL HTTP/2 erp.camersoftware.com/includes/jquery/plugins/flot/jquery.flot.pie.min.js?layout=classic&version=8.0.1
IP 82.165.73.164:0
File type ASCII text, with very long lines (12042)
Hash e688e28f635b011c9e9e07eb11af1687
a9595622d17a831fe03007291290056019506f43
1803d480dec139d219f881d4ddfc45f455582bfefa0e711b097b6e157b6184e4
GET /includes/jquery/plugins/flot/jquery.flot.pie.min.js?layout=classic&version=8.0.1 HTTP/1.1
Host: erp.camersoftware.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://erp.camersoftware.com/
Cookie: DOLSESSID_016a778d5055813fd1b81b792c966c8e=iiak599lg4rkursdpi762795ba; DOLSESSTIMEOUT_72d8164cfc4d72be0ef0125ca75431eb8d0ab2bc=1440
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 01 Dec 2022 09:03:19 GMT
content-type: application/javascript
last-modified: Fri, 18 Feb 2022 18:24:59 GMT
etag: W/"620fe47b-2f97"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
erp.camersoftware.com/includes/jstz/jstz.min.js
82.165.73.164200 OK 20 kB URL HTTP/2 erp.camersoftware.com/includes/jstz/jstz.min.js
IP 82.165.73.164:0
File type ASCII text, with very long lines (12020)
Hash 93e6afe6939c06073f8380232bc2e760
8bcb60ea052026c9c52c35c7e41ed8e1bcf29ccf
4a01f9e772d61d0a5aac5d1241df2183077dac49c8d07d242d13fba176f8fda3
GET /includes/jstz/jstz.min.js HTTP/1.1
Host: erp.camersoftware.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://erp.camersoftware.com/
Cookie: DOLSESSID_016a778d5055813fd1b81b792c966c8e=iiak599lg4rkursdpi762795ba; DOLSESSTIMEOUT_72d8164cfc4d72be0ef0125ca75431eb8d0ab2bc=1440
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 01 Dec 2022 09:03:19 GMT
content-type: application/javascript
last-modified: Fri, 18 Feb 2022 18:24:59 GMT
etag: W/"620fe47b-2f2c"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
erp.camersoftware.com/includes/jquery/plugins/tablednd/jquery.tablednd.min.js?layout=classic&version=8.0.1
82.165.73.164200 OK 15 kB URL HTTP/2 erp.camersoftware.com/includes/jquery/plugins/tablednd/jquery.tablednd.min.js?layout=classic&version=8.0.1
IP 82.165.73.164:0
File type ASCII text, with very long lines (9482)
Hash 0e438257d8b775367a877e7f0ca37358
7818d142089c0c5d0d1fc23a463c6eb3c1644eb8
cb67695bd681c7d6c9f8e40f5de07f8ee83f5713b1d77c6f1a861f513c48bfde
GET /includes/jquery/plugins/tablednd/jquery.tablednd.min.js?layout=classic&version=8.0.1 HTTP/1.1
Host: erp.camersoftware.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://erp.camersoftware.com/
Cookie: DOLSESSID_016a778d5055813fd1b81b792c966c8e=iiak599lg4rkursdpi762795ba; DOLSESSTIMEOUT_72d8164cfc4d72be0ef0125ca75431eb8d0ab2bc=1440
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 01 Dec 2022 09:03:19 GMT
content-type: application/javascript
last-modified: Fri, 18 Feb 2022 18:24:59 GMT
etag: W/"620fe47b-252f"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
erp.camersoftware.com/includes/jquery/plugins/flot/jquery.flot.stack.min.js?layout=classic&version=8.0.1
82.165.73.164200 OK 10 kB URL HTTP/2 erp.camersoftware.com/includes/jquery/plugins/flot/jquery.flot.stack.min.js?layout=classic&version=8.0.1
IP 82.165.73.164:0
File type ASCII text, with very long lines (2324)
Hash a4fefd052003f453e33f52f4f0d52c92
706d74787c171913394bc9dc29df39660f3279d0
e054617768d5b9da108ffa99da256ce808a77379f36c01e8a3e9d5fb939b999b
GET /includes/jquery/plugins/flot/jquery.flot.stack.min.js?layout=classic&version=8.0.1 HTTP/1.1
Host: erp.camersoftware.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://erp.camersoftware.com/
Cookie: DOLSESSID_016a778d5055813fd1b81b792c966c8e=iiak599lg4rkursdpi762795ba; DOLSESSTIMEOUT_72d8164cfc4d72be0ef0125ca75431eb8d0ab2bc=1440
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 01 Dec 2022 09:03:19 GMT
content-type: application/javascript
last-modified: Fri, 18 Feb 2022 18:24:59 GMT
etag: W/"620fe47b-9a1"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
erp.camersoftware.com/includes/jquery/js/jquery.min.js?layout=classic&version=8.0.1
82.165.73.164200 OK 35 kB URL HTTP/2 erp.camersoftware.com/includes/jquery/js/jquery.min.js?layout=classic&version=8.0.1
IP 82.165.73.164:0
File type ASCII text, with very long lines (32030)
Hash 39c138789a5c6fe44ea18bdcc4bfd65f
2a0119ddc9d38366a8210d418f567a6b13a6a8ec
ca4290d8630c7f5ba888b87504762c1c01e6a7cd5f172510dd4f70c76970a64f
GET /includes/jquery/js/jquery.min.js?layout=classic&version=8.0.1 HTTP/1.1
Host: erp.camersoftware.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://erp.camersoftware.com/
Cookie: DOLSESSID_016a778d5055813fd1b81b792c966c8e=iiak599lg4rkursdpi762795ba; DOLSESSTIMEOUT_72d8164cfc4d72be0ef0125ca75431eb8d0ab2bc=1440
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 01 Dec 2022 09:03:19 GMT
content-type: application/javascript
last-modified: Fri, 04 Nov 2022 21:23:52 GMT
etag: W/"636582e8-15cad"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F600016d1-5abb-4a6c-996a-933a8d4bc6df.jpeg
34.120.237.76200 OK 8.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F600016d1-5abb-4a6c-996a-933a8d4bc6df.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 26d6dffbf400da4803a2e76e2a8ef2f8
2e62f9ed8f5e7b2f888a73320dd98b0cda9303b8
04c6e31623fe48cbe83dc91635bfa47b337590f18919995b08d5bde27e929e03
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F600016d1-5abb-4a6c-996a-933a8d4bc6df.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8740
x-amzn-requestid: 4823cf63-98eb-40d3-bb8b-e09cd2262f36
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cP7SqHjYIAMF8xw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63830c10-316b213c33ce9bc2355c0900;Sampled=0
x-amzn-remapped-date: Sun, 27 Nov 2022 07:04:48 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: tK4wl-g5kcUhVFE3iZGILhZhZSsaMzQD9JTBHj1JXV95yXs_e3gMGw==
via: 1.1 000f4a2f631bace380a0afa747a82482.cloudfront.net (CloudFront), 1.1 559326ad73233233a9e52cb9e8601ede.cloudfront.net (CloudFront), 1.1 google
date: Wed, 30 Nov 2022 13:21:34 GMT
age: 70907
etag: "2e62f9ed8f5e7b2f888a73320dd98b0cda9303b8"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
away.cdnbestplatform.com/go.php?id=9677-22-5680954-11
91.211.91.104200 OK 410 B URL HTTP/2 away.cdnbestplatform.com/go.php?id=9677-22-5680954-11
IP 91.211.91.104:0
ASN #206638 PE Brezhnev Daniil
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with CRLF line terminators
Hash 1f26f31389eb212b32a56f84b19c66fa
8654699dc90f11d461ace75e3325fe35170ea2a2
2fd54f91aad09bfbe37d05509ac372cf65b27d1e5b6041094a45938edc467e55
Analyzer Verdict Alert fortinet Malware
GET /go.php?id=9677-22-5680954-11 HTTP/1.1
Host: away.cdnbestplatform.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://erp.camersoftware.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Thu, 01 Dec 2022 09:03:21 GMT
content-type: text/html; charset=UTF-8
content-length: 410
vary: Accept-Encoding
content-encoding: gzip
strict-transport-security: max-age=15768000;
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.33.119.27200 OK 503 B IP 23.33.119.27:0
ASN #20940 Akamai International B.V.
Hash 0b262dd49ab04650358444bdcac6aeff
d149bd699f1f7b665a42145d440a1cdce840aedb
54fd86ef0609f50b8cc389f547e9b8fc8ddfb1a78c7b3074797ec5a7da78f800
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "54FD86EF0609F50B8CC389F547E9B8FC8DDFB1A78C7B3074797EC5A7DA78F800"
Last-Modified: Wed, 30 Nov 2022 23:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10916
Expires: Thu, 01 Dec 2022 12:05:18 GMT
Date: Thu, 01 Dec 2022 09:03:22 GMT
Connection: keep-alive
greenskymotions.net/b91698fd2.js
185.177.94.152200 OK 56 B URL HTTP/2 greenskymotions.net/b91698fd2.js
IP 185.177.94.152:0
ASN #39572 DataWeb Global Group B.V.
File type ASCII text, with no line terminators
Hash 01fedb484c76c86eb5bafcc15b97bddc
aa3d7fba2de0e16f69798d6dc6e77d2765a90455
93f23f64c6e14a7778241254ad90d49a38dfe406afdd5e0e223064613572d40f
Analyzer Verdict Alert fortinet Phishing
GET /b91698fd2.js HTTP/1.1
Host: greenskymotions.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Service-Worker: script
Connection: keep-alive
Cookie: uuid=30ebb576-1045-4b9b-9d93-3a2b8ccd00ce
Sec-Fetch-Dest: serviceworker
Sec-Fetch-Mode: same-origin
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 01 Dec 2022 09:03:22 GMT
content-type: application/javascript; charset=utf-8
content-length: 56
last-modified: Thu, 13 Oct 2022 01:01:02 GMT
etag: "6347634e-38"
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2
greenskymotions.net/go/mu4genjugq5dcmjrhe3a?sub2=dfastspeed12
185.177.94.152200 OK 12 kB URL HTTP/2 greenskymotions.net/go/mu4genjugq5dcmjrhe3a?sub2=dfastspeed12
IP 185.177.94.152:0
ASN #39572 DataWeb Global Group B.V.
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (7732)
Hash ee9faff9508151d0c8e79261dc2e8200
d429dea381c4a7817b7207fce80f66da523494db
d067af38b4305318370d9031cbf1a629e9775f5723003b78122a21fb57a40006
Analyzer Verdict Alert fortinet Phishing
GET /go/mu4genjugq5dcmjrhe3a?sub2=dfastspeed12 HTTP/1.1
Host: greenskymotions.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://away.cdnbestplatform.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Thu, 01 Dec 2022 09:03:22 GMT
content-type: text/html; charset=UTF-8
access-control-allow-origin: *
set-cookie: uuid=30ebb576-1045-4b9b-9d93-3a2b8ccd00ce; expires=Sat, 31-Dec-2022 09:03:22 GMT; Max-Age=2592000; path=/; domain=greenskymotions.net
strict-transport-security: max-age=31536000
content-security-policy: img-src https: data:; upgrade-insecure-requests
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.33.119.27200 OK 503 B IP 23.33.119.27:0
ASN #20940 Akamai International B.V.
Hash 8c8c0812678de09cdaf5956cf40e18cf
6dd21ec11a36babdd08c7c5543f35ba62d6045a6
cea0433b6cafe37573e4acbc73e2c32ec5946b08958f69dfdd778fc955da3b80
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "CEA0433B6CAFE37573E4ACBC73E2C32EC5946B08958F69DFDD778FC955DA3B80"
Last-Modified: Tue, 29 Nov 2022 23:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21481
Expires: Thu, 01 Dec 2022 15:01:23 GMT
Date: Thu, 01 Dec 2022 09:03:22 GMT
Connection: keep-alive
0.greenskymotions.net/b91698fd2.js
185.177.94.152200 OK 56 B URL HTTP/2 0.greenskymotions.net/b91698fd2.js
IP 185.177.94.152:0
ASN #39572 DataWeb Global Group B.V.
File type ASCII text, with no line terminators
Hash 01fedb484c76c86eb5bafcc15b97bddc
aa3d7fba2de0e16f69798d6dc6e77d2765a90455
93f23f64c6e14a7778241254ad90d49a38dfe406afdd5e0e223064613572d40f
Analyzer Verdict Alert fortinet Phishing
GET /b91698fd2.js HTTP/1.1
Host: 0.greenskymotions.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Service-Worker: script
Connection: keep-alive
Cookie: uuid=30ebb576-1045-4b9b-9d93-3a2b8ccd00ce; uuid=30ebb576-1045-4b9b-9d93-3a2b8ccd00ce
Sec-Fetch-Dest: serviceworker
Sec-Fetch-Mode: same-origin
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 01 Dec 2022 09:03:23 GMT
content-type: application/javascript; charset=utf-8
content-length: 56
last-modified: Thu, 13 Oct 2022 01:01:02 GMT
etag: "6347634e-38"
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2
0.greenskymotions.net/favicon.ico
185.177.94.152204 No Content 0 B URL HTTP/2 0.greenskymotions.net/favicon.ico
IP 185.177.94.152:0
ASN #39572 DataWeb Global Group B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /favicon.ico HTTP/1.1
Host: 0.greenskymotions.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://0.greenskymotions.net/index.php?p=mu4genjugq5dcmjrhe3a&sub2=dfastspeed12
Cookie: uuid=30ebb576-1045-4b9b-9d93-3a2b8ccd00ce; uuid=30ebb576-1045-4b9b-9d93-3a2b8ccd00ce
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 204 No Content
server: nginx
date: Thu, 01 Dec 2022 09:03:23 GMT
strict-transport-security: max-age=31536000
content-security-policy: img-src https: data:; upgrade-insecure-requests
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.33.119.27200 OK 503 B IP 23.33.119.27:0
ASN #20940 Akamai International B.V.
Hash f0b8f99ce5ef722fbc08b66b62590478
35447ed6988c499604dc4caf78dc80c168dbc128
f7bb8e2dc0f3eb7da34d431ff2f54bdc0152ed7f25637302ab1e102f448a2a66
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F7BB8E2DC0F3EB7DA34D431FF2F54BDC0152ED7F25637302AB1E102F448A2A66"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=788
Expires: Thu, 01 Dec 2022 09:16:31 GMT
Date: Thu, 01 Dec 2022 09:03:23 GMT
Connection: keep-alive
0.greenskymotions.net/index.php?p=mu4genjugq5dcmjrhe3a&sub2=dfastspeed12
185.177.94.152200 OK 20 kB URL HTTP/2 0.greenskymotions.net/index.php?p=mu4genjugq5dcmjrhe3a&sub2=dfastspeed12
IP 185.177.94.152:0
ASN #39572 DataWeb Global Group B.V.
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (7736)
Hash 2b702feaf44b8ca0cd7702f418c3c74a
2406d659182bd5e10a587f60b98d7895c3c4a3a5
05d2ac36b71b5998ab4f05214006cd734e1bdf3909be3517f4977c2f5d36562e
GET /index.php?p=mu4genjugq5dcmjrhe3a&sub2=dfastspeed12 HTTP/1.1
Host: 0.greenskymotions.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://greenskymotions.net/
Cookie: uuid=30ebb576-1045-4b9b-9d93-3a2b8ccd00ce
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 01 Dec 2022 09:03:23 GMT
content-type: text/html; charset=UTF-8
access-control-allow-origin: *
set-cookie: uuid=30ebb576-1045-4b9b-9d93-3a2b8ccd00ce; expires=Sat, 31-Dec-2022 09:03:23 GMT; Max-Age=2592000; path=/; domain=0.greenskymotions.net
strict-transport-security: max-age=31536000
content-security-policy: img-src https: data:; upgrade-insecure-requests
X-Firefox-Spdy: h2
erp.camersoftware.com/includes/jquery/plugins/jnotify/jquery.jnotify.min.js?layout=classic&version=8.0.1
82.165.73.164200 OK 0 B URL HTTP/2 erp.camersoftware.com/includes/jquery/plugins/jnotify/jquery.jnotify.min.js?layout=classic&version=8.0.1
IP 82.165.73.164:0
GET /includes/jquery/plugins/jnotify/jquery.jnotify.min.js?layout=classic&version=8.0.1 HTTP/1.1
Host: erp.camersoftware.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://erp.camersoftware.com/
Cookie: DOLSESSID_016a778d5055813fd1b81b792c966c8e=iiak599lg4rkursdpi762795ba; DOLSESSTIMEOUT_72d8164cfc4d72be0ef0125ca75431eb8d0ab2bc=1440
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 01 Dec 2022 09:03:19 GMT
content-type: application/javascript
last-modified: Fri, 18 Feb 2022 18:24:59 GMT
etag: W/"620fe47b-c1a"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
erp.camersoftware.com/includes/jquery/plugins/select2/dist/css/select2.css?layout=classic&version=8.0.1
82.165.73.164200 OK 0 B URL HTTP/2 erp.camersoftware.com/includes/jquery/plugins/select2/dist/css/select2.css?layout=classic&version=8.0.1
IP 82.165.73.164:0
GET /includes/jquery/plugins/select2/dist/css/select2.css?layout=classic&version=8.0.1 HTTP/1.1
Host: erp.camersoftware.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://erp.camersoftware.com/
Cookie: DOLSESSID_016a778d5055813fd1b81b792c966c8e=iiak599lg4rkursdpi762795ba; DOLSESSTIMEOUT_72d8164cfc4d72be0ef0125ca75431eb8d0ab2bc=1440
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 01 Dec 2022 09:03:19 GMT
content-type: text/css
last-modified: Fri, 18 Feb 2022 18:24:59 GMT
etag: W/"620fe47b-44c4"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
erp.camersoftware.com/core/js/dst.js
82.165.73.164200 OK 0 B URL HTTP/2 erp.camersoftware.com/core/js/dst.js
IP 82.165.73.164:0
GET /core/js/dst.js HTTP/1.1
Host: erp.camersoftware.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://erp.camersoftware.com/
Cookie: DOLSESSID_016a778d5055813fd1b81b792c966c8e=iiak599lg4rkursdpi762795ba; DOLSESSTIMEOUT_72d8164cfc4d72be0ef0125ca75431eb8d0ab2bc=1440
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 01 Dec 2022 09:03:19 GMT
content-type: application/javascript
last-modified: Fri, 18 Feb 2022 18:24:53 GMT
etag: W/"620fe475-183c"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
erp.camersoftware.com/core/js/lib_head.js.php?lang=fr_FR&layout=classic&version=8.0.1
82.165.73.164200 OK 0 B URL HTTP/2 erp.camersoftware.com/core/js/lib_head.js.php?lang=fr_FR&layout=classic&version=8.0.1
IP 82.165.73.164:0
GET /core/js/lib_head.js.php?lang=fr_FR&layout=classic&version=8.0.1 HTTP/1.1
Host: erp.camersoftware.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://erp.camersoftware.com/
Cookie: DOLSESSID_016a778d5055813fd1b81b792c966c8e=iiak599lg4rkursdpi762795ba; DOLSESSTIMEOUT_72d8164cfc4d72be0ef0125ca75431eb8d0ab2bc=1440
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 01 Dec 2022 09:03:19 GMT
content-type: text/javascript; charset=UTF-8
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
cache-control: max-age=3600, public, must-revalidate
x-powered-by: PHP/7.1.33, PleskLin
content-encoding: br
X-Firefox-Spdy: h2
erp.camersoftware.com/includes/jquery/css/base/jquery-ui.css?layout=classic&version=8.0.1
82.165.73.164200 OK 0 B URL HTTP/2 erp.camersoftware.com/includes/jquery/css/base/jquery-ui.css?layout=classic&version=8.0.1
IP 82.165.73.164:0
GET /includes/jquery/css/base/jquery-ui.css?layout=classic&version=8.0.1 HTTP/1.1
Host: erp.camersoftware.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://erp.camersoftware.com/
Cookie: DOLSESSID_016a778d5055813fd1b81b792c966c8e=iiak599lg4rkursdpi762795ba; DOLSESSTIMEOUT_72d8164cfc4d72be0ef0125ca75431eb8d0ab2bc=1440
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 01 Dec 2022 09:03:19 GMT
content-type: text/css
last-modified: Fri, 18 Feb 2022 18:24:58 GMT
etag: W/"620fe47a-8c85"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
erp.camersoftware.com/includes/jquery/plugins/jnotify/jquery.jnotify-alt.min.css?layout=classic&version=8.0.1
82.165.73.164200 OK 0 B URL HTTP/2 erp.camersoftware.com/includes/jquery/plugins/jnotify/jquery.jnotify-alt.min.css?layout=classic&version=8.0.1
IP 82.165.73.164:0
GET /includes/jquery/plugins/jnotify/jquery.jnotify-alt.min.css?layout=classic&version=8.0.1 HTTP/1.1
Host: erp.camersoftware.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://erp.camersoftware.com/
Cookie: DOLSESSID_016a778d5055813fd1b81b792c966c8e=iiak599lg4rkursdpi762795ba; DOLSESSTIMEOUT_72d8164cfc4d72be0ef0125ca75431eb8d0ab2bc=1440
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 01 Dec 2022 09:03:19 GMT
content-type: text/css
last-modified: Fri, 18 Feb 2022 18:24:59 GMT
etag: W/"620fe47b-8f9"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
di4.biz/?auf=mjrdenzqme5dcnrqgixtcmjrhe3c6mrqf5tdkmtfmrrdinjpgezc6mjwgy4tqobvgqydg&p=b&sub1=&sub2=dfastspeed12&sub3=&sub4=&cpc=0&cpm=0
185.177.92.179200 OK 0 B URL HTTP/2 di4.biz/?auf=mjrdenzqme5dcnrqgixtcmjrhe3c6mrqf5tdkmtfmrrdinjpgezc6mjwgy4tqobvgqydg&p=b&sub1=&sub2=dfastspeed12&sub3=&sub4=&cpc=0&cpm=0
IP 185.177.92.179:0
ASN #39572 DataWeb Global Group B.V.
Analyzer Verdict Alert quad9 Sinkholed
GET /?auf=mjrdenzqme5dcnrqgixtcmjrhe3c6mrqf5tdkmtfmrrdinjpgezc6mjwgy4tqobvgqydg&p=b&sub1=&sub2=dfastspeed12&sub3=&sub4=&cpc=0&cpm=0 HTTP/1.1
Host: di4.biz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://0.greenskymotions.net/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Thu, 01 Dec 2022 09:03:23 GMT
content-type: text/html; charset=UTF-8
access-control-allow-origin: *
set-cookie: uuid=b4959431-5951-4e3f-b140-22255ec875f7; expires=Sat, 31-Dec-2022 09:03:23 GMT; Max-Age=2592000; path=/
strict-transport-security: max-age=31536000
content-security-policy: img-src https: data:; upgrade-insecure-requests
X-Firefox-Spdy: h2
erp.camersoftware.com/theme/common/fontawesome/css/font-awesome.min.css?layout=classic&version=8.0.1
82.165.73.164200 OK 0 B URL HTTP/2 erp.camersoftware.com/theme/common/fontawesome/css/font-awesome.min.css?layout=classic&version=8.0.1
IP 82.165.73.164:0
GET /theme/common/fontawesome/css/font-awesome.min.css?layout=classic&version=8.0.1 HTTP/1.1
Host: erp.camersoftware.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://erp.camersoftware.com/
Cookie: DOLSESSID_016a778d5055813fd1b81b792c966c8e=iiak599lg4rkursdpi762795ba; DOLSESSTIMEOUT_72d8164cfc4d72be0ef0125ca75431eb8d0ab2bc=1440
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 01 Dec 2022 09:03:19 GMT
content-type: text/css
last-modified: Fri, 18 Feb 2022 18:25:25 GMT
etag: W/"620fe495-7918"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
new.weatherplllatform.com/stick.js?v=8.88
91.211.91.114200 OK 0 B URL HTTP/2 new.weatherplllatform.com/stick.js?v=8.88
IP 91.211.91.114:0
ASN #206638 PE Brezhnev Daniil
Analyzer Verdict Alert fortinet Malware
GET /stick.js?v=8.88 HTTP/1.1
Host: new.weatherplllatform.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://erp.camersoftware.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Thu, 01 Dec 2022 09:03:20 GMT
content-type: application/javascript; charset=utf-8
last-modified: Sun, 06 Nov 2022 00:27:12 GMT
vary: Accept-Encoding
etag: W/"6366ff60-a40"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
content-encoding: gzip
X-Firefox-Spdy: h2
erp.camersoftware.com/includes/ckeditor/ckeditor/ckeditor.js?layout=classic&version=8.0.1
82.165.73.164200 OK 0 B URL HTTP/2 erp.camersoftware.com/includes/ckeditor/ckeditor/ckeditor.js?layout=classic&version=8.0.1
IP 82.165.73.164:0
GET /includes/ckeditor/ckeditor/ckeditor.js?layout=classic&version=8.0.1 HTTP/1.1
Host: erp.camersoftware.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://erp.camersoftware.com/
Cookie: DOLSESSID_016a778d5055813fd1b81b792c966c8e=iiak599lg4rkursdpi762795ba; DOLSESSTIMEOUT_72d8164cfc4d72be0ef0125ca75431eb8d0ab2bc=1440
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 01 Dec 2022 09:03:19 GMT
content-type: application/javascript
last-modified: Fri, 18 Feb 2022 18:24:57 GMT
etag: W/"620fe479-90be6"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
erp.camersoftware.com/viewimage.php?cache=1&modulepart=mycompany&file=thumbs%2FCamer-Software-logo---Digital-Solutions--Black_No_Background_1200px_small.jpg
82.165.73.164200 OK 0 B URL HTTP/2 erp.camersoftware.com/viewimage.php?cache=1&modulepart=mycompany&file=thumbs%2FCamer-Software-logo---Digital-Solutions--Black_No_Background_1200px_small.jpg
IP 82.165.73.164:0
GET /viewimage.php?cache=1&modulepart=mycompany&file=thumbs%2FCamer-Software-logo---Digital-Solutions--Black_No_Background_1200px_small.jpg HTTP/1.1
Host: erp.camersoftware.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://erp.camersoftware.com/
Cookie: DOLSESSID_016a778d5055813fd1b81b792c966c8e=iiak599lg4rkursdpi762795ba; DOLSESSTIMEOUT_72d8164cfc4d72be0ef0125ca75431eb8d0ab2bc=1440
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 01 Dec 2022 09:03:19 GMT
content-type: image/jpeg
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: max-age=3600, public, must-revalidate
pragma: cache
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-disposition: inline; filename="Camer-Software-logo---Digital-Solutions--Black_No_Background_1200px_small.jpg"
x-powered-by: PHP/7.1.33, PleskLin
X-Firefox-Spdy: h2
broworker4s.com/sw/bro.js
212.129.18.219200 OK 0 B URL HTTP/2 broworker4s.com/sw/bro.js
IP 212.129.18.219:0
GET /sw/bro.js HTTP/1.1
Host: broworker4s.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://greenskymotions.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Thu, 01 Dec 2022 09:03:22 GMT
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
expires: Fri, 01 Dec 2023 09:03:22 GMT
cache-control: max-age=31536000
strict-transport-security: max-age=31536000
content-security-policy: img-src https: data:; upgrade-insecure-requests
X-Firefox-Spdy: h2
erp.camersoftware.com/includes/jquery/js/jquery-ui.min.js?layout=classic&version=8.0.1
82.165.73.164200 OK 0 B URL HTTP/2 erp.camersoftware.com/includes/jquery/js/jquery-ui.min.js?layout=classic&version=8.0.1
IP 82.165.73.164:0
GET /includes/jquery/js/jquery-ui.min.js?layout=classic&version=8.0.1 HTTP/1.1
Host: erp.camersoftware.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://erp.camersoftware.com/
Cookie: DOLSESSID_016a778d5055813fd1b81b792c966c8e=iiak599lg4rkursdpi762795ba; DOLSESSTIMEOUT_72d8164cfc4d72be0ef0125ca75431eb8d0ab2bc=1440
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 01 Dec 2022 09:03:19 GMT
content-type: application/javascript
last-modified: Fri, 04 Nov 2022 21:23:52 GMT
etag: W/"636582e8-3e8dc"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
erp.camersoftware.com/includes/jquery/plugins/select2/dist/js/select2.full.min.js?layout=classic&version=8.0.1
82.165.73.164200 OK 0 B URL HTTP/2 erp.camersoftware.com/includes/jquery/plugins/select2/dist/js/select2.full.min.js?layout=classic&version=8.0.1
IP 82.165.73.164:0
GET /includes/jquery/plugins/select2/dist/js/select2.full.min.js?layout=classic&version=8.0.1 HTTP/1.1
Host: erp.camersoftware.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://erp.camersoftware.com/
Cookie: DOLSESSID_016a778d5055813fd1b81b792c966c8e=iiak599lg4rkursdpi762795ba; DOLSESSTIMEOUT_72d8164cfc4d72be0ef0125ca75431eb8d0ab2bc=1440
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 01 Dec 2022 09:03:19 GMT
content-type: application/javascript
last-modified: Fri, 18 Feb 2022 18:24:59 GMT
etag: W/"620fe47b-124aa"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2