www.gywazl.beauty/
302 Moved Temporarily 154 B IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash cfbeaf604823f038b8b46f0ac862b98c
7b9eb1dac48e74fa5f418bc456cb410f88b81d98
20c1ab602462b7fc0d5b4cbd555cacf127b69a07a737579598ebcbc0f5b21319
GET / HTTP/1.1
Host: www.gywazl.beauty
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 302 Moved Temporarily
Server: nginx
Date: Wed, 18 Jan 2023 06:12:15 GMT
Content-Type: text/html
Content-Length: 154
Connection: keep-alive
Location: http://lak3553.com
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash cc07d664b5dadee6f9120d54904dfa57
df75a55b0b2019684a6c512bee528c51a2c4a756
14a1bd6315a3256468edafedfd1c02a6ba147914c0f01e8504e7d8cc67781c34
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "14A1BD6315A3256468EDAFEDFD1C02A6BA147914C0F01E8504E7D8CC67781C34"
Last-Modified: Tue, 17 Jan 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9328
Expires: Wed, 18 Jan 2023 08:47:43 GMT
Date: Wed, 18 Jan 2023 06:12:15 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 648bf42163c5d645d8a33cd0a9afebd0
9b9ac85435c4e90647e8379bca54c689058a8929
060757fb4857858d4d01a715824ea6771d0137e73a24bf75e2844d0f346380fa
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "060757FB4857858D4D01A715824EA6771D0137E73A24BF75E2844D0F346380FA"
Last-Modified: Tue, 17 Jan 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6128
Expires: Wed, 18 Jan 2023 07:54:23 GMT
Date: Wed, 18 Jan 2023 06:12:15 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 14cd9a0afb6ba9a763651d5112760d1e
75d7b104ab9ab11fbb73c3f348b43b0119b5adfa
4e32a117106be587ffcd63239c16a8117eb7840830d4c9decf6527761967532e
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Alert, Retry-After, Content-Type, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Wed, 18 Jan 2023 05:49:19 GMT
content-type: application/json
age: 1376
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash d38f4bb41e1264b8a1e11ff0b1499d20
21c3e36bd908df43e0d49b747e270ec75cb882b0
3ff822eb56d2218ad6244fd013a82e0d27450ae21d47e08f1e3fdf4c82a8aad7
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "3FF822EB56D2218AD6244FD013A82E0D27450AE21D47E08F1E3FDF4C82A8AAD7"
Last-Modified: Mon, 16 Jan 2023 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9297
Expires: Wed, 18 Jan 2023 08:47:12 GMT
Date: Wed, 18 Jan 2023 06:12:15 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
IP
File type PEM certificate\012- , ASCII text
Hash 7b922915ebf1fa3639b333f994c74f24
144a3f80b98fd0652d4614f24cf6cbbee40f8938
adbb3e06df0e870f5c7a9cb81e8979d4e92735853d75c9b779c06470d4db5d9c
GET /chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: Ie9dqr+wbKgIc3D6RLgm3p+UsjqmUQwIlvD02/+vM9oQ20pHNUqa64BqhTqEhZN9BBsi7PRDVg4=
x-amz-request-id: HYCFVSB82B72Y97G
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Wed, 18 Jan 2023 05:45:17 GMT
age: 1618
last-modified: Mon, 09 Jan 2023 18:04:21 GMT
etag: "7b922915ebf1fa3639b333f994c74f24"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Wed, 18 Jan 2023 06:12:15 GMT
content-type: application/json
content-length: 12
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-allow-credentials: true
access-control-expose-headers: content-type
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Retry-After, Pragma, Content-Length, Alert, Expires, ETag, Last-Modified, Backoff, Content-Type, Cache-Control
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Wed, 18 Jan 2023 05:48:57 GMT
age: 1398
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 8720730dce33d0026a1a354ac93d4a7d
ed5f086bc646a4d93d2344b19ff7821c96e44f7c
b2892fda88242fbc4d58dd1f3bb159ca02cbf98b77c57dde66fba98d183c0136
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2862
Cache-Control: max-age=99735
Content-Type: application/ocsp-response
Date: Wed, 18 Jan 2023 06:12:16 GMT
Etag: "63c66529-1d7"
Expires: Thu, 19 Jan 2023 09:54:31 GMT
Last-Modified: Tue, 17 Jan 2023 09:06:49 GMT
Server: ECS (ska/F719)
X-Cache: HIT
Content-Length: 471
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: lfivPbapt47Kh87/CoARJQ==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: /Hqhp1EnbsIczYyxfHjgqYTljsY=
lak3553.com/
301 Moved Permanently 169 B IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash b51956ed2a6129f43c5d0ecc011cc5a5
c03157aff80067b6b57903d3843b9fd9e07b33ab
1ac63374d015eee8d9d875502aa63981dbeb9d86a14096de0d504763808e429b
GET / HTTP/1.1
Host: lak3553.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Server: nginx/1.22.0
Date: Wed, 18 Jan 2023 06:12:17 GMT
Content-Type: text/html
Content-Length: 169
Connection: keep-alive
Location: http://www.lak3553.com/
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 7db9f11a1c6ab0117ed3dd1d36e3aecc
61a4de77803ce4ad730c21dd88b5b55a196f26d6
b52c568528f72c5653bad85a1f72fb22f43dcb5d96ad234ab2772a7f95ca6cc2
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "B52C568528F72C5653BAD85A1F72FB22F43DCB5D96AD234AB2772A7F95CA6CC2"
Last-Modified: Tue, 17 Jan 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13073
Expires: Wed, 18 Jan 2023 09:50:10 GMT
Date: Wed, 18 Jan 2023 06:12:17 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 7db9f11a1c6ab0117ed3dd1d36e3aecc
61a4de77803ce4ad730c21dd88b5b55a196f26d6
b52c568528f72c5653bad85a1f72fb22f43dcb5d96ad234ab2772a7f95ca6cc2
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "B52C568528F72C5653BAD85A1F72FB22F43DCB5D96AD234AB2772A7F95CA6CC2"
Last-Modified: Tue, 17 Jan 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13073
Expires: Wed, 18 Jan 2023 09:50:10 GMT
Date: Wed, 18 Jan 2023 06:12:17 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 7db9f11a1c6ab0117ed3dd1d36e3aecc
61a4de77803ce4ad730c21dd88b5b55a196f26d6
b52c568528f72c5653bad85a1f72fb22f43dcb5d96ad234ab2772a7f95ca6cc2
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "B52C568528F72C5653BAD85A1F72FB22F43DCB5D96AD234AB2772A7F95CA6CC2"
Last-Modified: Tue, 17 Jan 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13073
Expires: Wed, 18 Jan 2023 09:50:10 GMT
Date: Wed, 18 Jan 2023 06:12:17 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F86f138af-59eb-444d-882b-80f5918f4405.jpeg
200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F86f138af-59eb-444d-882b-80f5918f4405.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 402bdd90bc2557de4f317d4d0ec892ed
b205b0bb74fabcf1612f22db53c197b63ae4ce0c
2fa402a38832c3efe15d5fee9116b36aeea5a0012ba4e8d6477b4fa9a0368598
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F86f138af-59eb-444d-882b-80f5918f4405.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11028
x-amzn-requestid: 2b2b0030-a54b-42d1-a680-69e23c4320bd
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: e4AteE7uIAMFSvw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63c647ef-5abf38ea140446ec294cdf6c;Sampled=0
x-amzn-remapped-date: Tue, 17 Jan 2023 07:02:07 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: 36gRhJPc8ASKV6h7W1qvKx-fca-KbtnNDFJqmumSHU38JBpoDdtL3Q==
via: 1.1 26ca01ec7377e425b59b6a08cb1ec342.cloudfront.net (CloudFront), 1.1 324a68a6c25ee50d774953f3e15a611c.cloudfront.net (CloudFront), 1.1 google
date: Tue, 17 Jan 2023 07:20:56 GMT
age: 82281
etag: "b205b0bb74fabcf1612f22db53c197b63ae4ce0c"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F670ced8b-7c3c-440b-8ef8-ce104b85116d.jpeg
200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F670ced8b-7c3c-440b-8ef8-ce104b85116d.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 318731dc24b5b47b96998e30e5ce27aa
86729555b4cf8d1f460ff74981b8b5a54a4bf9ea
acb7a93f815812cab50385796f6bcd7e16e96125422fb1415388a3b94767895e
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F670ced8b-7c3c-440b-8ef8-ce104b85116d.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10860
x-amzn-requestid: 808ed5a6-f0c3-40d9-a45f-aba1ffdf4ad9
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: e0LSuEZcoAMFsyA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63c4bf44-52c2a1756df73c8c1b9e041a;Sampled=0
x-amzn-remapped-date: Mon, 16 Jan 2023 03:06:44 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: CvycM3_x2xA1YXgbYW2mKBBEiREecv23q-sPHKvyWAQVv3yiREynIA==
via: 1.1 28a7186077f9b5270d98dd053f31303e.cloudfront.net (CloudFront), 1.1 e4d3d5aafc7d7d582423c073065ab562.cloudfront.net (CloudFront), 1.1 google
date: Wed, 18 Jan 2023 04:08:44 GMT
age: 7413
etag: "86729555b4cf8d1f460ff74981b8b5a54a4bf9ea"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe52164e3-afec-433e-87ab-adb17222f1cd.jpeg
200 OK 14 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe52164e3-afec-433e-87ab-adb17222f1cd.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 8656702f08344d3a4658bc43a9074a1f
fba424e1d09cbdc839ca320458b51715dafbbccc
0b0ac963c377b07f843637348f3d7c41d2aca89540ab8c2b80ef5fbbf466fee8
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe52164e3-afec-433e-87ab-adb17222f1cd.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 13848
x-amzn-requestid: 160148de-85b1-4456-a580-e079f391f979
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: e6A0gErTIAMF_eQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63c714e9-52efcd642bd209373b16cf72;Sampled=0
x-amzn-remapped-date: Tue, 17 Jan 2023 21:36:41 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: ARZobaKhEsHSEJdma3SXwCn_IKwRJaDbgjHfq_p_0HypKFWoqJIOJw==
via: 1.1 41e349e25dc4bc856d0e5d2c162428a0.cloudfront.net (CloudFront), 1.1 ee8246c5442dace7525c74f6a799bb46.cloudfront.net (CloudFront), 1.1 google
date: Tue, 17 Jan 2023 21:52:59 GMT
age: 29958
etag: "fba424e1d09cbdc839ca320458b51715dafbbccc"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F873f34de-bef8-46f1-9dc4-d277bf6c1c65.jpeg
200 OK 7.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F873f34de-bef8-46f1-9dc4-d277bf6c1c65.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash f491398239265c63ac162d47ab006ce6
c95e1bba76e910100e86f8abf789e5b5c1a2baa6
cdada2d9608e9d3f8e03cf9ced211550b6f7c8f7e0b5ee027a96f45af38523f1
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F873f34de-bef8-46f1-9dc4-d277bf6c1c65.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7741
x-amzn-requestid: 9af04340-5be9-42b0-96be-0264661c6dae
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: e6A6LEMtoAMFW_w=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63c7150d-2348c8846249175e74efc226;Sampled=0
x-amzn-remapped-date: Tue, 17 Jan 2023 21:37:17 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: _7YOm38n8-T2LAL-cRA7R8KvEUBhXEM0dOXjOZ6HyPRNfMu6Z0Fh3g==
via: 1.1 cd48ffda04934d18865e47e99ea080bc.cloudfront.net (CloudFront), 1.1 5565a51537c689d1d16f6b4d41f40082.cloudfront.net (CloudFront), 1.1 google
date: Tue, 17 Jan 2023 22:10:03 GMT
age: 28934
etag: "c95e1bba76e910100e86f8abf789e5b5c1a2baa6"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdd03bc60-bcfc-42c6-a1a0-0631c979fdd4.jpeg
200 OK 7.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdd03bc60-bcfc-42c6-a1a0-0631c979fdd4.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 26fa7bd40b5c3a3b5a6f95e7fca843b9
d8064f74f1e40bf6be4ea8ab4e319db22026c462
3e7744acf3e7ace6931c28cb5a5d3d7a77d9b97855b864c5c774368f2d0719c1
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdd03bc60-bcfc-42c6-a1a0-0631c979fdd4.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7361
x-amzn-requestid: 54e3621a-ec24-4d56-85bf-84239fa7811e
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: e23ZvGtnIAMFivg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63c5d2a4-7ce0e7924c03aeaa3ea684c3;Sampled=0
x-amzn-remapped-date: Mon, 16 Jan 2023 22:41:40 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: hamm4_4ud3QWXK2EeTcYUSN7ot6m-d-1z_NN29tSFYP25Itmz25jaA==
via: 1.1 4dde8ec6d6c12741888c2d3a059d4a2e.cloudfront.net (CloudFront), 1.1 325ed3ba58a560748d886354beef39c0.cloudfront.net (CloudFront), 1.1 google
date: Tue, 17 Jan 2023 22:18:31 GMT
age: 28426
etag: "d8064f74f1e40bf6be4ea8ab4e319db22026c462"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd8efa7cc-44c0-4841-af38-b9d070233ba9.jpeg
200 OK 8.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd8efa7cc-44c0-4841-af38-b9d070233ba9.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 816accd72419764cabc1d038af58446c
ad835d9c9a783175d3c5d1a32f1e34baf0ed2f08
d0b6f144ddc797108e6e85b4e835bfbeadd138ef7987661ee9e3d22790db254f
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd8efa7cc-44c0-4841-af38-b9d070233ba9.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8889
x-amzn-requestid: 10583804-866b-41bc-a99b-6209bd7ae1c2
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: e6A1eHMCoAMF4kA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63c714ef-2351e46019a0918724721b89;Sampled=0
x-amzn-remapped-date: Tue, 17 Jan 2023 21:36:47 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: I_gazElY6tP9IsrCWRM7CHI5Jd6uVuruMwXcJV_nNHFI55YqmqG7zg==
via: 1.1 2afae0d44e2540f472c0635ab62c232a.cloudfront.net (CloudFront), 1.1 5565a51537c689d1d16f6b4d41f40082.cloudfront.net (CloudFront), 1.1 google
date: Wed, 18 Jan 2023 00:41:55 GMT
etag: "ad835d9c9a783175d3c5d1a32f1e34baf0ed2f08"
content-type: image/jpeg
age: 19822
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
www.lak3553.com/
403 Forbidden 841 B IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (841), with no line terminators
Hash b71d87d89da1746f04440003b250c188
f775d20c340aa30d2ebd56118ca76643fb4fcce5
287c29352f64e9de213c604c4b9a43a04c2f3335887c563b6f4f942fcbba93d6
GET / HTTP/1.1
Host: www.lak3553.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 403 Forbidden
Content-Type: text/html
Cache-Control: no-cache, no-store
Connection: close
Content-Length: 841
X-Iinfo: 13-9091475-0 0NNN RT(1674022337303 0) q(0 -1 -1 0) r(0 -1) B16 U18
Set-Cookie: visid_incap_2257395=OJZOvWrcSgmAyf0vSr5R98GNx2MAAAAAQUIPAAAAAAAtPVcJuMSWeseFAh+wdG+b; expires=Wed, 17 Jan 2024 22:48:07 GMT; HttpOnly; path=/; Domain=.lak3553.com
incap_ses_7235_2257395=uGNKdGW2GTN0gTHhseJnZMGNx2MAAAAAMp2Ohx+Dpi7FJjPspKTRNA==; path=/; Domain=.lak3553.com
www.lak3553.com/_Incapsula_Resource?SWJIYLWA=719d34d31c8e3a6e6fffd425f7e032f3
200 OK 20 kB URL HTTP/1.1 www.lak3553.com/_Incapsula_Resource?SWJIYLWA=719d34d31c8e3a6e6fffd425f7e032f3
IP
File type ASCII text, with very long lines (65536), with no line terminators
Hash 5e0a79615f010571a1adab69dbda5aa7
00e9c1c00bda01d753d93dfe9028dc7990c48dbf
4836849d40fe72f1a2dd9d29dd506a3df0be9f69ad6115824127e82aab453a58
NIDS Severity Alert suricata medium ETPRO HUNTING Observed Suspicious Hex Encoded String Inbound (decodeURIComponent)
GET /_Incapsula_Resource?SWJIYLWA=719d34d31c8e3a6e6fffd425f7e032f3 HTTP/1.1
Host: www.lak3553.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.lak3553.com/
Cookie: visid_incap_2257395=OJZOvWrcSgmAyf0vSr5R98GNx2MAAAAAQUIPAAAAAAAtPVcJuMSWeseFAh+wdG+b; incap_ses_7235_2257395=uGNKdGW2GTN0gTHhseJnZMGNx2MAAAAAMp2Ohx+Dpi7FJjPspKTRNA==
HTTP/1.1 200 OK
Cache-Control: no-cache, no-store
Content-Type: application/javascript
Content-Encoding: gzip
X-Robots-Tag: noindex
Content-Length: 20049
www.lak3553.com/_Incapsula_Resource?SWKMTFSR=1&e=0.01641302939659317
200 OK 1 B URL HTTP/1.1 www.lak3553.com/_Incapsula_Resource?SWKMTFSR=1&e=0.01641302939659317
IP
File type very short file (no magic)
Hash c4ca4238a0b923820dcc509a6f75849b
356a192b7913b04c54574d18c28d46e6395428ab
6b86b273ff34fce19d6b804eff5a3f5747ada4eaa22f1d49c01e52ddb7875b4b
GET /_Incapsula_Resource?SWKMTFSR=1&e=0.01641302939659317 HTTP/1.1
Host: www.lak3553.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.lak3553.com/
Cookie: visid_incap_2257395=OJZOvWrcSgmAyf0vSr5R98GNx2MAAAAAQUIPAAAAAAAtPVcJuMSWeseFAh+wdG+b; incap_ses_7235_2257395=uGNKdGW2GTN0gTHhseJnZMGNx2MAAAAAMp2Ohx+Dpi7FJjPspKTRNA==; ___utmvc=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
HTTP/1.1 200 OK
Cache-Control: no-cache, no-store
Content-Type: text/plain
X-Robots-Tag: noindex
Content-Length: 1
www.lak3553.com/_Incapsula_Resource?CWUDNSAI=1&xinfo=13-9091475-0%200NNN%20RT%281674022337303%200%29%20q%280%20-1%20-1%200%29%20r%280%20-1%29%20B16%20U18&incident_id=7235000580009197940-40448486344429197&edet=16&cinfo=ffffffff&rpinfo=0&mth=GET
200 OK 3.7 kB URL HTTP/1.1 www.lak3553.com/_Incapsula_Resource?CWUDNSAI=1&xinfo=13-9091475-0%200NNN%20RT%281674022337303%200%29%20q%280%20-1%20-1%200%29%20r%280%20-1%29%20B16%20U18&incident_id=7235000580009197940-40448486344429197&edet=16&cinfo=ffffffff&rpinfo=0&mth=GET
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (4072), with CRLF line terminators
Hash a6b233e1e0be3517be57fbf159042de5
67e108adb627d44a5f91fde5630eaabe21002bc6
2af821b18cd48f443d335a0f78f2b4a40658a000464286a67e7e6a4e9927f104
GET /_Incapsula_Resource?CWUDNSAI=1&xinfo=13-9091475-0%200NNN%20RT%281674022337303%200%29%20q%280%20-1%20-1%200%29%20r%280%20-1%29%20B16%20U18&incident_id=7235000580009197940-40448486344429197&edet=16&cinfo=ffffffff&rpinfo=0&mth=GET HTTP/1.1
Host: www.lak3553.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.lak3553.com/
Cookie: visid_incap_2257395=OJZOvWrcSgmAyf0vSr5R98GNx2MAAAAAQUIPAAAAAAAtPVcJuMSWeseFAh+wdG+b; incap_ses_7235_2257395=uGNKdGW2GTN0gTHhseJnZMGNx2MAAAAAMp2Ohx+Dpi7FJjPspKTRNA==; ___utmvc=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
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Cache-Control: no-cache, no-store
Content-Type: text/html
Content-Encoding: gzip
X-Robots-Tag: noindex
Content-Length: 3744
www.lak3553.com/favicon.ico
403 Forbidden 842 B URL HTTP/1.1 www.lak3553.com/favicon.ico
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (842), with no line terminators
Hash f56a0d4e0ed8c54bf0bc6d536729f838
024238c2ec303b9e0b0b45acb986d7f7f65127d7
3d0b2713a805ff2c65a5d0971f3b016a4a9f4ed3b12620fd6d55557097ff5318
GET /favicon.ico HTTP/1.1
Host: www.lak3553.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.lak3553.com/
Cookie: visid_incap_2257395=OJZOvWrcSgmAyf0vSr5R98GNx2MAAAAAQUIPAAAAAAAtPVcJuMSWeseFAh+wdG+b; incap_ses_7235_2257395=uGNKdGW2GTN0gTHhseJnZMGNx2MAAAAAMp2Ohx+Dpi7FJjPspKTRNA==; ___utmvc=MrItyWMbjHD4flGaI0rv+EOYB3vzTYq88XYyyBQS7KTpFMckYusq5tQiFAsV47BlXAny6kF48+qSvuGD+41y9XkmjkjQN9YdfQSqXaa8GUUVUa++sgQS0aVy9YH37YWNqkH+TX5t1jAPfjMmhD7Mrx2pmuDdi/uLA0uC2gb5pJPAa30jVh12mZA7EPjBTRm+zZf4by2IVVP8SMx4stAujLQfa7duhk91/CSiPE0kLyqqwJlf11v3l367QtCGKL2t5ehvmUckI7oDgbwGisd5wsbSow1IURdT+dBiIurjSaHWDzGV7s34cX+Lxl+arjdkwgbmvpKhHCsHmb9tNL5kqekyB3GnJrFZmDBMRM8ihlCasqb2Yt6iu38FkC6vtlvrGASdtvFnNj8vKCAgufWf8SDOcxRu7S41RtwbCVasQdB4ZiTYNMOPAvArnCyLHdMlP6fkBnks4w390jwtaJhBoNlp/GYG4Fm1iP4Q6amY82UBmQn2oWT9pg8Q83pcGBcW68JiDIwyaakyk68BBMID7zp0622TaTR6Xs+2SAyFnhOMUcEwkNjuA31q2KjBRO5E9f4UBPHnYac9jKERC93Ys8yDMUL/dVEfVNCccoRABc91I61Jo1646cwsinNSHN4vH9Q0Nkp9JjcD8pqDhMMWY3FWEit5E92mtvSumzBzNKpQAzBo0jgZwtaV4hMAqpOCbAeO7RNWXFdmjxbxv11Q1UJ/ZnVoBoIoiloYBoBKdmOn3z8RNlkMF1iPCS65EpwBPenyPh5vVtUPNR6FO78NvDrGSB7ZE51i7GtBERNXR2hu+W9ly2R1UhC/9iz31EpwBKGuwW0b1/M1C1f88lLHgpLfPQ8LTKNH9RPxiRx7srNzmd8EcEo12S2iwywaiFwclHbjkBwDlDTBYqq3ZGo1zSct/gVbLtxhsWES7ZugzbV82BJ+FmEgcHOWnwPmtRVDxDPHFavVTxqys1orbYHlPU/4LpLEfogW24oJLgn9SE/J4tIaacTVtkJVtub0v9GuUfbSGAkVdecKbVSPNDq5fxSAm8AA7N6Z8Xc2muySxa8pknyAd4uTA2Fs2BhX7pmxfpX+1RNGMqfbk2q4LhmBZ01LnuocvKQ7oDNjgXslopdqm96Dgj28JwLtJOL3HNMX4IbpzMZZwe3pBoCVQvW0pqMDPMlL3mxt+cp/8iWG2h68d7IH+uHmgFKN5ru6LX00wkmsTLqSx7G+ffmDaipXfXB1VVq9NrZH+Dt++GagctInGLObqw3r7F2vMCGEvxTCwEbTo7DH7GqjZnuUUU9zed1sHTljIP36C+Kfnxk33stcZ4PerZ8hQR7a1/FQTr7KsQauP0EhoSwhB52m9HwUpIAannZCVmbCyPNyb+M267uk7hZHdcHE6jAe4cG/Hilrwrbwu9n8wbKJeIJyEm96oRxv2vhhr3vMiRFgp9tHYJVi1BHaWoW+6trJnEJb/XIKTVynnZYXBeIlv9hQBjx0NhecbWAFYYHSbAthZVt5csvRNAR1Uh/hdjMa3y4aXNPfqEvatXt1bg8PDtX/qsZ/lhk0xd47r74KeQN5tO12aTKizmJ9qVipT0zLvHFtNBsT2HRNF+qTo32svArA3uIZ+0Vd684ag6Q1ExaEtVp29Jb5aOmBDq/Vod5pNJpoRtd9nhgBl2H7B00+kNNpA1Kh8J/HarZykXNgWm2wc8cbzMKnGcN2wnePzxBNiZ42tzCfK0enAK4FF1vuG/Q5AUNPDdVJ965nZ6gZk+2+xhEjsRCMO442F4NrtaToCUKjYFrWC3POpym5TLyc9t0A3AeUhOO+juiSY4krgMrOrIhGTF8BD4kwlU71C3Rqp5bhNqFe8o68D0EmfUDgT2paMRSH0T2Rz0IMUGUKjEiawWY3r7JYZ9d+TZyEy2GJuqY7vtT+4UxtEJUB4g+FkM4U9KpHIguEWg8nniFX+Z4r9WEWtDON8RS0Pr1plXMGaJoRkOZZJ4AL4WODJ7KIHQrQa4Cz1swOHIFQgj1RFZxwtqtuDtPZpeNPZM3hvT1cD0PF94kVDs+/l4Zn0OcXo2ywDgQU+yVrVtcD73eTfUJ7ctqTbO4wgOSdwcGV8L09BEgTW6LZo58y1TQltNOXM8olxfEfxWeLrGrZqSEpqaIamB7MGwP1UNCFWKG1WEHhzyc+j3BX9cEQyzfYnE0C3DSK4iKu9ewrj87dEX/HfUwuHWNT05/0jVcsFRpJriAqgQ7ftscCHbkCdHfUDFm54EuRzq+lwDBW/p4FsET+l2jGnpnBn5BDjsxuNH9s23prkBSk8Q3DJL8mmYlP5uvplBoPwwNDTfqKUYAXWJ50gV1f5VvtXIRzoLFBoaLWJN2Z8J5fsX4fNAI3HQuRw/rIqeTmXhA6VVZpG3hetht7hJdkhBpvo6Med+HCKYuF8BTcImAhXGYx9pXo/4bDmpDj7pbEQYDgd8ah1zD1MQgw+xiSsKu2OCo41WV+7L3nMVFDWpX70+B/ZInfYUIyTvtZZyyaUzgXC/bZweZ9HxCO9Yw1B/RpHezyV3ubXVAdLEcYJD7TM1Yck+l5VQH39bwI5bqpKRfau3ZI3sc5yBI4IVcZDFS1CKJpGz5kK3mvEWOOsplA9wuCvBaSvbcedh9A712WA1ENsEFl1jp1wplBAUwzdJUQu8514VMR7rWObTwKERTGprV+CpsaPzfRfcKuiXWbtfTIL74qP3+I6CxkaWdlc3Q9MTg1MjEyLHM9OWQ4NmFjYTQ4YTdmNzk3YzgxNzU5YjhjYWE4ZjZhN2I4NmExOGFhMGFkN2Y5NzYzOWI4NDg0Njg5Nzk5YTY5ZWEyOWI4ODdhODE3OTcyNmY=
HTTP/1.1 403 Forbidden
Content-Type: text/html
Cache-Control: no-cache, no-store
Connection: close
Content-Length: 842
X-Iinfo: 12-5523163-0 0NNN RT(1674022337514 6) q(0 -1 -1 -1) r(0 -1) B16 U18
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 2b02c407fd912449a1b278f0bf3d8574
817bcff5b7c0444426b19027c772bddce84cf130
67ceddcf2eef43f1c11fc85c1398c39b5ff875a93dafbf9c4526e6d3bc5eb52a
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 18 Jan 2023 06:12:18 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 2b02c407fd912449a1b278f0bf3d8574
817bcff5b7c0444426b19027c772bddce84cf130
67ceddcf2eef43f1c11fc85c1398c39b5ff875a93dafbf9c4526e6d3bc5eb52a
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 18 Jan 2023 06:12:18 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash d547e6cc07ecb62b49cfb14f223d3b87
7f316e0778cf7e132cf376b92d1f9860e06894f5
4ceb4872fc5aa21ce6cdba296ce83f68d1b46836df05886eb76e0607358ba42c
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 18 Jan 2023 06:12:18 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash d547e6cc07ecb62b49cfb14f223d3b87
7f316e0778cf7e132cf376b92d1f9860e06894f5
4ceb4872fc5aa21ce6cdba296ce83f68d1b46836df05886eb76e0607358ba42c
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 18 Jan 2023 06:12:18 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash d547e6cc07ecb62b49cfb14f223d3b87
7f316e0778cf7e132cf376b92d1f9860e06894f5
4ceb4872fc5aa21ce6cdba296ce83f68d1b46836df05886eb76e0607358ba42c
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 18 Jan 2023 06:12:18 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.googleapis.com/css2?family=Inter:wght@300;400;500;700&display=swap
200 OK 39 kB URL HTTP/2 fonts.googleapis.com/css2?family=Inter:wght@300;400;500;700&display=swap
IP
Hash fc972fdd94882666cbee179d364e3d94
f964e52d23b1e29d7888e46618b086fda887fcf9
089cf0b610a1e4e3aad5832471b8f55b17f92fa872d7cd9792868f11b6b0e4c2
GET /css2?family=Inter:wght@300;400;500;700&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.lak3553.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Wed, 18 Jan 2023 06:12:18 GMT
date: Wed, 18 Jan 2023 06:12:18 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash d547e6cc07ecb62b49cfb14f223d3b87
7f316e0778cf7e132cf376b92d1f9860e06894f5
4ceb4872fc5aa21ce6cdba296ce83f68d1b46836df05886eb76e0607358ba42c
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 18 Jan 2023 06:12:18 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash d547e6cc07ecb62b49cfb14f223d3b87
7f316e0778cf7e132cf376b92d1f9860e06894f5
4ceb4872fc5aa21ce6cdba296ce83f68d1b46836df05886eb76e0607358ba42c
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 18 Jan 2023 06:12:18 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
204.188.203.154
93.184.220.29
198.251.84.92
23.36.76.226