200 OK 8.0 kB URL User Request GET HTTP/1.1 IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text
Hash b7e5e7e1ec1c252f2eb680335e3ca265
6198a6df3b2a6cf8e0204cfd2d9027424a1777d7
f3bbc75a82b410f28daf4f67cab07e5e63a7ddc435158df7dd5a75cbaf8b0bd7
Analyzer Verdict Alert fortinet Malware
GET / HTTP/1.1
Host: mxk.kara360.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx-reuseport/1.21.1
Date: Wed, 19 Apr 2023 16:55:02 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=30
Vary: Accept-Encoding
Last-Modified: Wed, 08 Feb 2023 10:37:43 GMT
ETag: W/"8fa9-5f42ddab35f70"
Content-Encoding: gzip
cdnjs.cloudflare.com/ajax/libs/lodash.js/4.17.10/lodash.min.js
200 OK 22 kB URL GET HTTP/2 cdnjs.cloudflare.com/ajax/libs/lodash.js/4.17.10/lodash.min.js
IP
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintA9:11:71:07:07:92:48:7E:A9:3C:E8:32:25:3F:EB:AC:7D:51:7E:8F
ValidityWed, 03 Aug 2022 00:00:00 GMT - Wed, 02 Aug 2023 23:59:59 GMT
File type ASCII text, with very long lines (4234)
Hash 5fbf8b4e1d5e5355104c710c8751cca9
98df59941300a3cb7a34e741214dd6386fd78c15
1efa029cc9cadf7687d3995311adaa5319d1d06e4410403d8c36a416a8905b2e
GET /ajax/libs/lodash.js/4.17.10/lodash.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://mxk.kara360.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 19 Apr 2023 16:55:03 GMT
content-type: application/javascript; charset=utf-8
content-length: 21762
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03ed2-11dc4"
last-modified: Mon, 04 May 2020 16:12:02 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 7826285
expires: Mon, 08 Apr 2024 16:55:03 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=J%2Fu4tOpfvZE7m%2BcX5xSVCxfudnENRY9pODrMzrpARPG3deEgBYKhXPI%2FCHVxa9hoUPyCnOOO%2Fj44mFjwT7Ouk%2BrkAhNBOU%2B5d2LtaGWH%2B5%2BiaCvGhgX81g3OFnN8QidHPpcZH7Zi"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 7ba6ac450ddfb518-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cdnjs.cloudflare.com/ajax/libs/fancybox/3.3.5/jquery.fancybox.min.css
200 OK 2.9 kB URL GET HTTP/2 cdnjs.cloudflare.com/ajax/libs/fancybox/3.3.5/jquery.fancybox.min.css
IP
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintA9:11:71:07:07:92:48:7E:A9:3C:E8:32:25:3F:EB:AC:7D:51:7E:8F
ValidityWed, 03 Aug 2022 00:00:00 GMT - Wed, 02 Aug 2023 23:59:59 GMT
File type ASCII text, with very long lines (14065), with no line terminators
Hash c966da480efb64a4e936f34848ec8151
74aeb1bf213889c09bff4ad09b196cfa44ef3705
2131f4f45424dc47454738d9a72b696946a35309916e923ca7df02e171510f5d
GET /ajax/libs/fancybox/3.3.5/jquery.fancybox.min.css HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://mxk.kara360.net/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 19 Apr 2023 16:55:03 GMT
content-type: text/css; charset=utf-8
content-length: 2949
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03e58-36f1"
last-modified: Mon, 04 May 2020 16:10:00 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 3531655
expires: Mon, 08 Apr 2024 16:55:03 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=3t5k%2B5XGgdoiJ98OTNPKTcvolLMoB31ak8DozEV%2BCb7DdCcMwD8qs7E2rAZzYQk0IVv6AhVGCMq%2FL3ufkJbRMB%2Fju9p6NI0aVJ5DWayv8myy7l62FwAah49myVlNy8KOUskYZcS3"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 7ba6ac451e04b518-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cdnjs.cloudflare.com/ajax/libs/fancybox/3.3.5/jquery.fancybox.min.js
200 OK 18 kB URL GET HTTP/2 cdnjs.cloudflare.com/ajax/libs/fancybox/3.3.5/jquery.fancybox.min.js
IP
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintA9:11:71:07:07:92:48:7E:A9:3C:E8:32:25:3F:EB:AC:7D:51:7E:8F
ValidityWed, 03 Aug 2022 00:00:00 GMT - Wed, 02 Aug 2023 23:59:59 GMT
File type Unicode text, UTF-8 text, with very long lines (32006)
Hash 0eea231e545fffd85122cc39d532de0c
ff9e77142cdde15c6be338563173662335bbf057
df3e0fea673cb3296a0defbca3784102b7a852291c39d159275293f95f703add
GET /ajax/libs/fancybox/3.3.5/jquery.fancybox.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://mxk.kara360.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 19 Apr 2023 16:55:03 GMT
content-type: application/javascript; charset=utf-8
content-length: 17617
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03e58-f02e"
last-modified: Mon, 04 May 2020 16:10:00 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 172509
expires: Mon, 08 Apr 2024 16:55:03 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=IsGrPXqfM0jxeWmP05fVpGRh4t8ceva8W9DxScgHWbce8ID6MP5O5S74EUxxrs4%2FXeMffQhcJ2ZmDIAngDVRC%2FFURJKUkkOz67kbaJRpz3nD2%2BzoA3fFkGELaiasNOdeLhBVMl%2Fg"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 7ba6ac451e06b518-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
code.jquery.com/jquery-3.3.1.min.js
200 OK 30 kB URL GET HTTP/2 code.jquery.com/jquery-3.3.1.min.js
IP
Certificate IssuerSectigo Limited
Subject*.jquery.com
Fingerprint64:50:4C:BB:DF:F3:1D:70:CC:5D:9E:B7:BE:80:91:84:03:C1:D1:83
ValidityWed, 03 Aug 2022 00:00:00 GMT - Fri, 14 Jul 2023 23:59:59 GMT
File type ASCII text, with very long lines (65451)
Hash d549b312f7a7d228b4ec229a6547dfdc
0766794582ad530ec0f8c2595f741086afffa312
f6488b2915e0ceee723f4320492511d46c6ba1860d5975d085e6da8913f55f44
GET /jquery-3.3.1.min.js HTTP/1.1
Host: code.jquery.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://mxk.kara360.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 19 Apr 2023 16:55:03 GMT
content-encoding: gzip
content-length: 30288
content-type: application/javascript; charset=utf-8
last-modified: Wed, 16 Feb 2022 10:50:39 GMT
accept-ranges: bytes
server: nginx
etag: W/"620cd6ff-1538f"
cache-control: max-age=315360000, public
access-control-allow-origin: *
vary: Accept-Encoding
x-hw: 1681923303.dop225.sk1.t,1681923303.cds257.sk1.hn,1681923303.cds240.sk1.c
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
472 B IP
Hash ec4c5d365332676d8c4cf195ae930bb3
6f069cb368eb9a7d4ac196c46215cf828224102b
d66826a356046f5aab053d6b480d11f7b287aac6eeca743e46ac980ba6c24d63
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 19 Apr 2023 16:55:03 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
472 B IP
Hash ec4c5d365332676d8c4cf195ae930bb3
6f069cb368eb9a7d4ac196c46215cf828224102b
d66826a356046f5aab053d6b480d11f7b287aac6eeca743e46ac980ba6c24d63
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 19 Apr 2023 16:55:03 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
472 B IP
Hash ec4c5d365332676d8c4cf195ae930bb3
6f069cb368eb9a7d4ac196c46215cf828224102b
d66826a356046f5aab053d6b480d11f7b287aac6eeca743e46ac980ba6c24d63
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 19 Apr 2023 16:55:03 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
472 B IP
Hash 26dea7762ace1976dfba8bd9ea3f8731
a8ef0929291b18361b63cbec8d1e55e4b59a6d3f
a021122620b729276ed1f0629dacfba06571bead12299a5413a3cc0310707c8e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 19 Apr 2023 16:55:03 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
472 B IP
Hash 26dea7762ace1976dfba8bd9ea3f8731
a8ef0929291b18361b63cbec8d1e55e4b59a6d3f
a021122620b729276ed1f0629dacfba06571bead12299a5413a3cc0310707c8e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 19 Apr 2023 16:55:03 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/ptsans/v17/jizaRExUiTo99u79D0KExQ.woff2
200 OK 45 kB URL GET HTTP/2 fonts.gstatic.com/s/ptsans/v17/jizaRExUiTo99u79D0KExQ.woff2
IP
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintE8:8D:29:52:9C:44:66:28:BB:43:25:CE:11:45:BB:A1:5A:4E:44:11
ValidityTue, 28 Mar 2023 16:54:02 GMT - Tue, 20 Jun 2023 16:54:01 GMT
File type Web Open Font Format (Version 2), TrueType, length 45300, version 1.0\012- data
Hash 5fe660c3a23b871807b0e1d3ee973d23
62a9dd423b30b6ee3ab3dd40d573545d579af10a
e13ffa988be59cbf299d7ff68f019f902b60848203ac4990819eb7e4624ee52d
GET /s/ptsans/v17/jizaRExUiTo99u79D0KExQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://mxk.kara360.net
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 45300
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 18 Apr 2023 10:56:40 GMT
expires: Wed, 17 Apr 2024 10:56:40 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 27 Apr 2022 16:11:08 GMT
content-type: font/woff2
age: 107903
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fonts.gstatic.com/s/ptsanscaption/v18/0FlMVP6Hrxmt7-fsUFhlFXNIlpcaeg_x.woff2
200 OK 39 kB URL GET HTTP/2 fonts.gstatic.com/s/ptsanscaption/v18/0FlMVP6Hrxmt7-fsUFhlFXNIlpcaeg_x.woff2
IP
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintE8:8D:29:52:9C:44:66:28:BB:43:25:CE:11:45:BB:A1:5A:4E:44:11
ValidityTue, 28 Mar 2023 16:54:02 GMT - Tue, 20 Jun 2023 16:54:01 GMT
File type Web Open Font Format (Version 2), TrueType, length 39284, version 1.0\012- data
Hash a6b8dad3db6599887f5f23d6e0a1b017
bf0cf614c802b83b732c71e606e59eadfbc490bd
530c312c48abf9ef8ca6e0140c934634da2c92afc81e220cc5d92475620a3771
GET /s/ptsanscaption/v18/0FlMVP6Hrxmt7-fsUFhlFXNIlpcaeg_x.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://mxk.kara360.net
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 39284
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 13 Apr 2023 02:08:04 GMT
expires: Fri, 12 Apr 2024 02:08:04 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 27 Apr 2022 16:16:39 GMT
content-type: font/woff2
age: 571619
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
cp.beget.com/i/logo.png
200 OK 6.7 kB IP
Certificate IssuerLet's Encrypt
Subjectwww.cp.beget.com
FingerprintC9:9E:87:E5:96:35:31:C7:79:97:95:0A:BA:B7:DB:EF:74:90:60:75
ValiditySun, 02 Apr 2023 23:17:10 GMT - Sat, 01 Jul 2023 23:17:09 GMT
File type PNG image data, 195 x 89, 8-bit/color RGBA, non-interlaced\012- data
Hash e619e67b3e2efe2c6acb95a4ed1d06d7
4bbdd81b087a472cd58b56d51d82dcd21b04353b
9db7c6e307c01199ecbe2f94ae37f5538f484bba74054802876c01dcffd9d55f
GET /i/logo.png HTTP/1.1
Host: cp.beget.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://mxk.kara360.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Wed, 19 Apr 2023 16:55:03 GMT
content-type: image/png
content-length: 6686
last-modified: Mon, 17 Apr 2023 09:31:01 GMT
etag: "643d11d5-1a1e"
expires: Fri, 19 May 2023 16:55:03 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000; includeSubDomains
accept-ranges: bytes
x-robots-tag: noindex
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
472 B IP
Hash 26dea7762ace1976dfba8bd9ea3f8731
a8ef0929291b18361b63cbec8d1e55e4b59a6d3f
a021122620b729276ed1f0629dacfba06571bead12299a5413a3cc0310707c8e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 19 Apr 2023 16:55:03 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
cp.beget.com/img/octo/octo_error.png
200 OK 49 kB URL GET HTTP/2 cp.beget.com/img/octo/octo_error.png
IP
Certificate IssuerLet's Encrypt
Subjectwww.cp.beget.com
FingerprintC9:9E:87:E5:96:35:31:C7:79:97:95:0A:BA:B7:DB:EF:74:90:60:75
ValiditySun, 02 Apr 2023 23:17:10 GMT - Sat, 01 Jul 2023 23:17:09 GMT
File type PNG image data, 250 x 250, 8-bit/color RGBA, non-interlaced\012- data
Hash e093637aceb0d1e394bea20078de3fa2
fc5f1ef3489f3fdcaff7dc226d797495978a31b2
c5c8b8e31b6e40ab95ce719d7d4035c1215b654635e9ad23f62cd44f266d7948
GET /img/octo/octo_error.png HTTP/1.1
Host: cp.beget.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://mxk.kara360.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Wed, 19 Apr 2023 16:55:03 GMT
content-type: image/png
content-length: 49348
last-modified: Mon, 17 Apr 2023 09:31:02 GMT
etag: "643d11d6-c0c4"
expires: Fri, 19 May 2023 16:55:03 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000; includeSubDomains
accept-ranges: bytes
x-robots-tag: noindex
X-Firefox-Spdy: h2
mxk.kara360.net/favicon.ico
404 Not Found 233 B URL GET HTTP/1.1 mxk.kara360.net/favicon.ico
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 3b3313bb84d8af507dae84c5dedeace1
1f5e2b76ea1641f2e8c70cb0ba17d2d8c093a2a4
27a872f57d80a1199ec7f46634d92ab8574938519726c1db9234dd8787743f9f
GET /favicon.ico HTTP/1.1
Host: mxk.kara360.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://mxk.kara360.net/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Server: nginx-reuseport/1.21.1
Date: Wed, 19 Apr 2023 16:55:03 GMT
Content-Type: text/html; charset=iso-8859-1
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=30
Vary: Accept-Encoding
Content-Encoding: gzip
use.fontawesome.com/releases/v5.2.0/webfonts/fa-solid-900.woff2
200 OK 62 kB URL GET HTTP/2 use.fontawesome.com/releases/v5.2.0/webfonts/fa-solid-900.woff2
IP
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintF8:B8:F9:45:BF:19:61:F1:60:E0:B4:AF:F4:E5:96:31:40:A4:84:69
ValidityMon, 06 Jun 2022 00:00:00 GMT - Mon, 05 Jun 2023 23:59:59 GMT
File type Web Open Font Format (Version 2), TrueType, length 62472, version 1.0\012- data
Hash b75b4bfe0d58faeced5006c785eaae23
92da6e3c7121e21cdfde25ef08797a3937a683e1
5c7df99df232586111917083a85aa31b82ee29e48ca2990e13fae0c0663a923f
GET /releases/v5.2.0/webfonts/fa-solid-900.woff2 HTTP/1.1
Host: use.fontawesome.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://mxk.kara360.net
Connection: keep-alive
Referer: https://use.fontawesome.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 19 Apr 2023 16:55:04 GMT
content-type: font/woff2
content-length: 62472
x-amz-id-2: pLWKFRgm/fr6uh8mnzeGG5gMm1C1xKr8OxtKWrhSCvxTuJMLZIB6HuEQ3roaiqCZ31kEbBk10c0=
x-amz-request-id: QDR6246X8PVJKZSM
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-max-age: 3000
vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method, Accept-Encoding
last-modified: Wed, 30 Jun 2021 15:41:55 GMT
etag: "b75b4bfe0d58faeced5006c785eaae23"
cache-control: max-age=31556926
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=BObzFGThB6HAqKC0Ou1VGaO7PMIqsZQBVmCP13XYZvTNj0MQMpkkO3rMRLHeD2g2uzBGUR5BcNuVyyku8czkstIzRq%2B0Zpar9vdp0SlRy1pATsRmdIQ4X3uPlGbhMChAXelug42B"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7ba6ac488c0074a9-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=PT+Sans&subset=cyrillic,latin-ext
200 OK 1.2 kB URL GET HTTP/2 fonts.googleapis.com/css?family=PT+Sans&subset=cyrillic,latin-ext
IP
Certificate IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
Fingerprint28:74:DC:A1:79:64:AB:97:A4:EA:AB:80:90:A6:E2:B9:D4:16:79:64
ValidityTue, 28 Mar 2023 16:54:33 GMT - Tue, 20 Jun 2023 16:54:32 GMT
File type ASCII text, with very long lines (1266), with no line terminators
Hash b6a44f649a110c4c98fd559a4d4f7a70
11dea36c6f54da8b2d04e39cef707589695b67eb
278a5900cf476a985b7075c671a92c05d9607758a6b6fe152b61755978f49b73
GET /css?family=PT+Sans&subset=cyrillic,latin-ext HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://mxk.kara360.net/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Wed, 19 Apr 2023 16:55:03 GMT
date: Wed, 19 Apr 2023 16:55:03 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
use.fontawesome.com/releases/v5.2.0/css/fontawesome.css
200 OK 46 kB URL GET HTTP/2 use.fontawesome.com/releases/v5.2.0/css/fontawesome.css
IP
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintF8:B8:F9:45:BF:19:61:F1:60:E0:B4:AF:F4:E5:96:31:40:A4:84:69
ValidityMon, 06 Jun 2022 00:00:00 GMT - Mon, 05 Jun 2023 23:59:59 GMT
File type ASCII text, with very long lines (45377)
Hash 8969f087782a0c46deb8773407768fec
d861c377454c6c3094d9332f1e38d7fa2b9c66c1
15a4b768dcf0208dc3665c311ba8469dcb3a1b3d75d6a1a3ce553858daa2f51e
GET /releases/v5.2.0/css/fontawesome.css HTTP/1.1
Host: use.fontawesome.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://mxk.kara360.net
Connection: keep-alive
Referer: http://mxk.kara360.net/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 19 Apr 2023 16:55:03 GMT
content-type: text/css
x-amz-id-2: jFIfs/8/fYgObyersLN0dcYoFZUvmH4JXMlgtSoqpA6GIWGTDPq5qTKZRlfs6MASkj0NP6NppI0=
x-amz-request-id: QDR5G83E6VWWZBDD
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-max-age: 3000
vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method, Accept-Encoding
last-modified: Wed, 30 Jun 2021 15:41:36 GMT
etag: W/"8969f087782a0c46deb8773407768fec"
cache-control: max-age=31556926
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Il9imOFQelgYnIzRbMrvQwQVpg5Jcc%2BImXfLPDcmAYBL9FOzL1vFTsL178QuXznt6odrJaKPG4snirzdyMP9PQkyNitK8dOvwP7SushVEqhkfMvX8dAsNJ3Qxyo8NNXGIDaBfMPR"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7ba6ac458ff074a9-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
use.fontawesome.com/releases/v5.2.0/css/solid.css
200 OK 644 B URL GET HTTP/2 use.fontawesome.com/releases/v5.2.0/css/solid.css
IP
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintF8:B8:F9:45:BF:19:61:F1:60:E0:B4:AF:F4:E5:96:31:40:A4:84:69
ValidityMon, 06 Jun 2022 00:00:00 GMT - Mon, 05 Jun 2023 23:59:59 GMT
File type ASCII text, with very long lines (662), with no line terminators
Hash dda1e0bf1f08614d155f6c8e95ba22eb
d66469cfa6d76473a9cf7abb596e3377dadb502b
dd7ed5160bb108bcac3d22314217c66de7feaf5c51b06d56d3e8298910ea042f
GET /releases/v5.2.0/css/solid.css HTTP/1.1
Host: use.fontawesome.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://mxk.kara360.net
Connection: keep-alive
Referer: http://mxk.kara360.net/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 19 Apr 2023 16:55:03 GMT
content-type: text/css
x-amz-id-2: lXFbSK9mjXAZG1LvEuouWXnsp7i58APL++cVjazd6RD0pFIXFBgu2J5wDrtWQcu4roCgyqVb5ME=
x-amz-request-id: QDRAGQMGG3J2YTCX
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-max-age: 3000
vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method, Accept-Encoding
last-modified: Wed, 30 Jun 2021 15:41:36 GMT
etag: W/"ad53ee37dc67730269f8944b5913d4c0"
cache-control: max-age=31556926
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=T0r21bRd%2BLcfkVV1o9u4Gx6bepqal9HTcb14L1Th86dYe%2BTMllr5E9JMW13%2BTkHaToPaMx2UGQd09bGVXA8gGUUZVLBQ1GjabZksCj9HsyJZSSA5EKH6rpDWxodCwJdN%2FR9IB5cU"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7ba6ac458ff674a9-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=PT+Sans+Caption&subset=cyrillic,latin-ext
200 OK 1.3 kB URL GET HTTP/2 fonts.googleapis.com/css?family=PT+Sans+Caption&subset=cyrillic,latin-ext
IP
Certificate IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
Fingerprint28:74:DC:A1:79:64:AB:97:A4:EA:AB:80:90:A6:E2:B9:D4:16:79:64
ValidityTue, 28 Mar 2023 16:54:33 GMT - Tue, 20 Jun 2023 16:54:32 GMT
File type ASCII text, with very long lines (1369), with no line terminators
Hash 1c54add414d089428cc79bb9fc9ede00
9ce8c246232faeca9f855159d2a0de350fb6b0b3
a56700eca084332990455707df1ca21ea7ee2d9a47a6ebaa0c864fdb25f49b96
GET /css?family=PT+Sans+Caption&subset=cyrillic,latin-ext HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://mxk.kara360.net/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Wed, 19 Apr 2023 16:55:03 GMT
date: Wed, 19 Apr 2023 16:55:03 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
cp.beget.com/img/icons/new_alert/alert.svg
200 OK 987 B URL GET HTTP/2 cp.beget.com/img/icons/new_alert/alert.svg
IP
Certificate IssuerLet's Encrypt
Subjectwww.cp.beget.com
FingerprintC9:9E:87:E5:96:35:31:C7:79:97:95:0A:BA:B7:DB:EF:74:90:60:75
ValiditySun, 02 Apr 2023 23:17:10 GMT - Sat, 01 Jul 2023 23:17:09 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (1008), with no line terminators
Hash 70c94764990302c62a0bcd41eb942233
7ce4bef8e4cad7a60021eddd8238346baa8be699
f089c5f7993523357c53cddffeff1a718c25e0dead6b8e8f36a4c2add79fa784
GET /img/icons/new_alert/alert.svg HTTP/1.1
Host: cp.beget.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://mxk.kara360.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Wed, 19 Apr 2023 16:55:03 GMT
content-type: image/svg+xml
vary: Accept-Encoding
last-modified: Mon, 17 Apr 2023 09:31:02 GMT
etag: W/"643d11d6-3db"
expires: Fri, 19 May 2023 16:55:03 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000; includeSubDomains
content-encoding: gzip
x-robots-tag: noindex
X-Firefox-Spdy: h2
45.130.41.17
216.58.207.227
104.17.25.14