{"report_id":"98a21d24-000d-4e86-b8b7-8a68cfcad0ff","version":6,"status":"done","tags":[],"date":"2026-03-19T12:30:16Z","url":{"schema":"http","addr":"burpcollaborator.net","fqdn":"burpcollaborator.net","domain":"burpcollaborator.net","tld":"net"},"ip":{"addr":"54.77.139.23","port":0,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"final":{"url":{"schema":"https","addr":"portswigger.net/burp","fqdn":"portswigger.net","domain":"portswigger.net","tld":"net"},"title":"Burp - Web Application Security, Testing, \u0026 Scanning - PortSwigger","dom":{"size":62048,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (3988)","md5":"77e54d84f3256b42a106fff09a016a68","sha1":"080ed00dc60d9fa402bc99be6891e3512b968c09","sha256":"7e6c6e0c069b724c27cd9a719ed051e6aff732b1256a8d43832d52c2af84c776","sha512":"318c24a317ac30263f4d9d4674cd46a661825f6558c9a3c7b1842dacaf40b0dc72b259d0d036d0d2ab97bfa502fc93d8180666b68b6837f421175e41922f05fe","ssdeep":"1536:EZrIIXjtVBeT3C7C0xHlKi5cLFk4lvVCbDsBLCIOjv:EZrIWVBvtekgLCIM","tlshash":"805385a3aa61213e132384dbc1357b2af5b3d04fdf425888b9fdc3659bc6c81566399c","dom_hash":"domhash28211bdf5ab8e3a95fd2dfe954ceb714","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"burpcollaborator.net","fqdn":"burpcollaborator.net","domain":"burpcollaborator.net","tld":"net"},"ip":{"addr":"54.77.139.23","port":0,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-23T12:30:16Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":3,"urlquery":0,"analyzer":0}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-03-19T12:29:54Z","timestamp":1773923394,"ip_dst":{"addr":"54.77.139.23","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"ip_src":{"addr":"Client IP","port":56542,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"high","alert":"ET POLICY Burp Collaborator Domain in TLS SNI","source":"{\"timestamp\":\"2026-03-19T12:29:54.237846+0000\",\"flow_id\":1067337696578442,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.13\",\"src_port\":56542,\"dest_ip\":\"54.77.139.23\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2034506,\"rev\":2,\"signature\":\"ET POLICY Burp Collaborator Domain in TLS SNI\",\"category\":\"Potential Corporate Privacy Violation\",\"severity\":1,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2021_11_18\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2021_11_18\"]}},\"tls\":{\"sni\":\"burpcollaborator.net\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"15af977ce25de452b96affa2addb1036\",\"string\":\"771,4866,43-51\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":3,\"bytes_toserver\":789,\"bytes_toclient\":333,\"start\":\"2026-03-19T12:29:54.166794+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-03-19T12:29:54Z","timestamp":1773923394,"ip_dst":{"addr":"Client IP","port":47214,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"54.77.139.23","port":80,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"severity":"high","alert":"ETPRO POLICY Observed Burp Collaborator Server Header","source":"{\"timestamp\":\"2026-03-19T12:29:54.411093+0000\",\"flow_id\":61383341421280,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"54.77.139.23\",\"src_port\":80,\"dest_ip\":\"172.18.0.13\",\"dest_port\":47214,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2841917,\"rev\":1,\"signature\":\"ETPRO POLICY Observed Burp Collaborator Server Header\",\"category\":\"Potential Corporate Privacy Violation\",\"severity\":1,\"metadata\":{\"affected_product\":[\"Any\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2020_04_07\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2020_04_07\"]}},\"http\":{\"hostname\":\"burpcollaborator.net\",\"url\":\"/\",\"http_user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"http_content_type\":\"text/html\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"status\":200,\"length\":1190},\"files\":[{\"filename\":\"/\",\"sid\":[],\"gaps\":false,\"state\":\"CLOSED\",\"stored\":false,\"size\":1190,\"tx_id\":0}],\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":5,\"pkts_toclient\":5,\"bytes_toserver\":743,\"bytes_toclient\":1678,\"start\":\"2026-03-19T12:29:54.307936+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-03-19T12:29:54Z","timestamp":1773923394,"ip_dst":{"addr":"Client IP","port":47218,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"54.77.139.23","port":80,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"severity":"high","alert":"ETPRO POLICY Observed Burp Collaborator Server Header","source":"{\"timestamp\":\"2026-03-19T12:29:54.578249+0000\",\"flow_id\":783599272077969,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"54.77.139.23\",\"src_port\":80,\"dest_ip\":\"172.18.0.13\",\"dest_port\":47218,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2841917,\"rev\":1,\"signature\":\"ETPRO POLICY Observed Burp Collaborator Server Header\",\"category\":\"Potential Corporate Privacy Violation\",\"severity\":1,\"metadata\":{\"affected_product\":[\"Any\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2020_04_07\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2020_04_07\"]}},\"http\":{\"hostname\":\"burpcollaborator.net\",\"url\":\"/favicon.ico\",\"http_user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"http_content_type\":\"text/html\",\"http_refer\":\"http://burpcollaborator.net/\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"status\":200,\"length\":1190},\"files\":[{\"filename\":\"/favicon.ico\",\"sid\":[],\"gaps\":false,\"state\":\"CLOSED\",\"stored\":false,\"size\":1190,\"tx_id\":0}],\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":5,\"pkts_toclient\":5,\"bytes_toserver\":703,\"bytes_toclient\":1678,\"start\":\"2026-03-19T12:29:54.469649+0000\"}}"}],"analyzer":null,"urlquery":null},"summary":[{"fqdn":"ps.piwik.pro","ip":{"addr":"20.79.214.157","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Germany","country_code":"DE"},"domain_registered":"2013-01-07","domain_rank":3359144,"first_seen":"2023-04-04T07:16:47Z","last_seen":"2026-02-05T13:46:10.951786Z","alert_count":0,"request_count":1,"received_data":1427,"sent_data":484,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"unpkg.com","ip":{"addr":"104.18.1.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2016-01-06","domain_rank":1093,"first_seen":"2016-01-07T23:26:01Z","last_seen":"2026-03-15T23:53:36.432218Z","alert_count":0,"request_count":3,"received_data":130911,"sent_data":1372,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Fly.io","description":"Fly is a platform for running full stack apps and databases.","website":"https://fly.io","common_platform_enumeration":"","icon":"Fly.io.png","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.251.143.136","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2026-03-15T22:23:30.202114Z","alert_count":0,"request_count":1,"received_data":422356,"sent_data":438,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"go.portswigger.net","ip":{"addr":"52.54.96.194","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"domain_registered":"2001-09-09","domain_rank":4638407,"first_seen":"2024-04-10T14:57:58Z","last_seen":"2026-01-27T05:06:56.940773Z","alert_count":0,"request_count":2,"received_data":6773,"sent_data":1539,"comment":"","tags":null,"fingerprints":[{"name":"Salesforce Marketing Cloud Account Engagement","description":"Salesforce Marketing Cloud Account Engagement (formerly known as Pardot) is an application specifically designed for B2B marketing automation.","website":"https://www.salesforce.com/products/marketing-cloud/marketing-automation","common_platform_enumeration":"","icon":"Salesforce.svg","categories":["Marketing automation"]}]},{"fqdn":"ps.containers.piwik.pro","ip":{"addr":"20.79.214.157","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Germany","country_code":"DE"},"domain_registered":"2013-01-07","domain_rank":3549983,"first_seen":"2023-04-04T07:16:46Z","last_seen":"2026-02-05T13:46:10.745932Z","alert_count":0,"request_count":2,"received_data":341959,"sent_data":870,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"portswigger.net","ip":{"addr":"3.164.240.86","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2001-09-09","domain_rank":22150,"first_seen":"2012-05-29T13:19:45Z","last_seen":"2026-02-05T13:46:10.604079Z","alert_count":0,"request_count":30,"received_data":736571,"sent_data":22685,"comment":"","tags":null,"fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Kestrel","description":"","website":"https://docs.microsoft.com/en-us/aspnet/core/fundamentals/servers/kestrel","common_platform_enumeration":"","icon":"kestrel.svg","categories":["Web servers"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-03-15T22:19:58.945817Z","alert_count":0,"request_count":2,"received_data":38281,"sent_data":1028,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"burpcollaborator.net","ip":{"addr":"54.77.139.23","port":80,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"domain_registered":"2015-01-08","domain_rank":55787,"first_seen":"2017-02-01T15:12:04Z","last_seen":"2025-09-08T15:36:44.446495Z","alert_count":3,"request_count":3,"received_data":2680,"sent_data":1259,"comment":"","tags":null,"fingerprints":null},{"fqdn":"tracking-api.g2.com","ip":{"addr":"104.16.189.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"1995-03-22","domain_rank":63729,"first_seen":"2025-01-17T16:53:45.548636Z","last_seen":"2026-03-18T23:16:36.679974Z","alert_count":0,"request_count":2,"received_data":6272,"sent_data":1046,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"portswigger.net/burp","fqdn":"portswigger.net","domain":"portswigger.net","tld":"net"},"ip":{"addr":"3.164.240.86","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"b460aa45580ff57e0cafe8a2cc0c3ca4","sha1":"8d4c0615ff152732a1e341ab363340064c7bca95","sha256":"d8c67af0361b933d7d1f56a4c3ecaea2ff38bd7a35e3f4a02aba1e205ccd6e92","sha512":"c6688f845a860dd7f813f87437e3469fe92ba109c258da6b25e9c6d8e16c9fe782fea4f232e40710dbf461fba7f3f8b66ee06d0837114b3407db1163aaeb1240","ssdeep":"","tlshash":"ae01207fa6e0047082ffb072229f5355b9328443200a6e693eae4b944fd0a64a433f9c","size":729,"data":"","first_seen":"2026-03-19T12:30:20.926339Z","last_seen":"2026-03-19T12:30:20.926339Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"portswigger.net/burp","fqdn":"portswigger.net","domain":"portswigger.net","tld":"net"},"ip":{"addr":"3.164.240.86","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"8c9ac3dc931d905f558d6b13ab9c839a","sha1":"cb0692eed546f4eea3068e90f14042dbb152f43e","sha256":"6c27d39c5392b3cf8b19686a65658b4b8ca1eaf13ee231faf8b4587d91a1ec60","sha512":"b340b4b4a8850080751d1dbcabfd9660341bd65937e4fa22749ee1c72f3147d622aeb390e7775740c1f03f8ec36883a88ab8bbfad165130dd8ffd9709512cbc5","ssdeep":"","tlshash":"49f0757b2df2003808935096523fed3029e2616e1518e903fc4c8d054f50f884f33bb4","size":550,"data":"","first_seen":"2025-12-20T08:10:03.40728Z","last_seen":"2026-03-19T12:30:20.928616Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"portswigger.net/burp","fqdn":"portswigger.net","domain":"portswigger.net","tld":"net"},"ip":{"addr":"3.164.240.86","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"514f9ae6dd46a20803e5becef3af375f","sha1":"688fae4705d0a9b1eae63354bf092dab7fd21ddd","sha256":"83d537725b58be44af695c56804f3168bacd81cc8f68a0f98709a32cc7428e81","sha512":"9b8be45f9fce87472f26faaf04f0c5c76ce4b72ce372987d2f6fe08c038ff595ae37fccb01933b108974dbe33b5d150ba1cf3cf0e442dd8389977d320b0477a2","ssdeep":"","tlshash":"372105ac3ec0317e3bdf225537af44097273154e54054e11b04ddd9037a4dd586a7aec","size":1267,"data":"","first_seen":"2025-08-12T06:15:27.834895Z","last_seen":"2026-03-31T13:42:54.810681Z","times_seen":48,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ps.containers.piwik.pro/ppms.js","fqdn":"ps.containers.piwik.pro","domain":"piwik.pro","tld":"pro"},"ip":{"addr":"20.79.214.157","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"9b11c3dd372451664871fb291621767f","sha1":"1ac4da26fcb0204a6060f84f7d80782816da70a8","sha256":"c2fe09dd17506326eb35c973c0691fdf4d5b93dfb30a64f9de62542b64089da1","sha512":"b8a1cab7da4790d0c19a3e780a40132a3bee2ca7e14b3ac6f7c0952e16ec9b6ec5a9f0d5d16271350a399438be9e7d53ebcafc4cfa74caf82a39b9c779eec6a7","ssdeep":"1536:i2KkS47R0DjHGW2NR6OFYFdj3wm3k2kIpd/zNiM8mQrBGw+7B:V6DhiYka9NibQ","tlshash":"096307ad73c234365ae67878407f214ab23e999a784c94e8f086c4d53c78a9e1177f3d","size":67179,"data":"","first_seen":"2026-03-09T18:17:52.451598Z","last_seen":"2026-04-04T23:21:42.725382Z","times_seen":183,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=AW-11422135271","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.251.143.136","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"1f9ba816669e9f588f57988fd2cc3086","sha1":"49fb6582a7ad239a9c1e82a95108adcad1ff4e7b","sha256":"ffe34d27e11b99f8af09f354047a3cef3ec22e5a5dc6295373ae320b4a52bc81","sha512":"224d1d9eb4aba36b4aa503f0da3d13d2b30a42c2392ede516c6b4fa7f75c1c0cc624e06f418e5a9745fac6702d5735003e2e94ead05326a55d3015070fc709ae","ssdeep":"6144:uZoB43fxUw1BL9bre5738L7XC6OifcZESVvAtd85He+z:RWfxUwH925D8dc+i","tlshash":"019407cdb3d670625392b478903f018be57a68a2b44ccc99f189dce42e7469a4277f7c","size":421706,"data":"","first_seen":"2026-03-19T12:30:20.855604Z","last_seen":"2026-03-19T12:30:20.855604Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"portswigger.net/burp","fqdn":"portswigger.net","domain":"portswigger.net","tld":"net"},"ip":{"addr":"3.164.240.86","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"32699885c9b34ceb2d9abf6cc6a01e5c","sha1":"b4c6c9fd9424c895a619bee6320a24e069235205","sha256":"fa5ad636d8f558968a868ce1bcd421f2082ff714efc2fc1ecd9029fd4a44d553","sha512":"844ec9f3df7cd81a7577338003908a966335f513835ca752bb1ba8dfd44d8045b63a45471f8d8c9af4d282b065c48e35c815c692905a5bb162e95973a0a89a3a","ssdeep":"","tlshash":"cd214e7e1da79024439ba025476ff605342691db5000c846bc4cd945bfe0d6a6825fa9","size":1176,"data":"","first_seen":"2026-01-27T05:07:00.035332Z","last_seen":"2026-03-19T12:30:20.93273Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"portswigger.net/burp","fqdn":"portswigger.net","domain":"portswigger.net","tld":"net"},"ip":{"addr":"3.164.240.86","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"e170d4c417a4ec880082423ab5929c1f","sha1":"54aba84566988d18849ba07d15b149ba845cb803","sha256":"e4cda9618647c5deec552d777c59e6e088f56cac85a0bbe5c879f1fa74e2eba8","sha512":"12cd9b385534bd9608418b1fcb9da17c102b95271736ab72a96ea5b469590722448eabd37cfbfaedfb0b3a9c1db0f974ca8384fe443e1467757bcba90ec99a41","ssdeep":"","tlshash":"02e0269c25e75c3280bb262a5b1fe110381293a78675de223e0d13048f50f638e95bb4","size":369,"data":"","first_seen":"2025-08-12T18:10:55.967467Z","last_seen":"2026-03-19T12:30:20.934208Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ps.containers.piwik.pro/287552c2-4917-42e0-8982-ba994a2a73d7.js","fqdn":"ps.containers.piwik.pro","domain":"piwik.pro","tld":"pro"},"ip":{"addr":"20.79.214.157","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"4062f8438bf0e45c0a88a7b67b33f098","sha1":"8c3d8694c0984876f7ba84baf97d076d54d7dff7","sha256":"d26a0693f32f3b65572d3d1a9030842c40038ddcc9dcb9fe555432876e04d5ee","sha512":"2dbf461dbbecbb7627822d2920443069d4a200981ee26a4afb069f34bb93639df767102e20d9fbf05552f18626d92a88ef3297ad813dc48e906bcec28960ca7c","ssdeep":"1536:aBhLuK5+6wqcD5fVmZVrPqlIZPPITk4gWI9km5I3UbhiUsTunc39sTfnSk45eu2y:aTU6wSVHJy6HttPrI4sS4yO19+Gz","tlshash":"7f44198c72c1b53483eb64b9917f110ab33b144a688d4428f545d8e96d39e8ea337fbd","size":273824,"data":"","first_seen":"2026-03-19T12:30:20.916207Z","last_seen":"2026-03-19T12:30:20.916207Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tracking-api.g2.com/attribution_tracking/conversions/1030070.js?p=https://portswigger.net/burp\u0026e=","fqdn":"tracking-api.g2.com","domain":"g2.com","tld":"com"},"ip":{"addr":"104.16.189.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"740c02d0cf95c390d39962c7adc0f0b2","sha1":"0cf87450d4bbaab2af4d58ce08e63e3eb831331f","sha256":"0fbdac9a4897181846d446837fc89ae4cde10e2329c8484a4c9dc2709bff3841","sha512":"84584202bfff024603351b5df71ce428578d05ff5fe4d44faa63c439eed86c388a2d8b40ee1d07b3d15ac570a9feb4fad1603b4a7c42b9a017908b758ea0d005","ssdeep":"","tlshash":"0b71b97d29e5b43645b223c60763b610b23e016c7a9490a0b56e58d5352a45fc3b3fdd","size":3559,"data":"","first_seen":"2026-03-19T12:30:20.888785Z","last_seen":"2026-03-19T12:30:20.888785Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"go.portswigger.net/analytics?ver=3\u0026visitor_id=\u0026visitor_id_sign=\u0026pi_opt_in=\u0026campaign_id=null\u0026account_id=1067743\u0026title=Burp%20-%20Web%20Application%20Security%2C%20Testing%2C%20%26%20Scanning%20-%20PortSwigger\u0026url=https%3A%2F%2Fportswigger.net%2Fburp\u0026referrer=http%3A%2F%2Fburpcollaborator.net%2F","fqdn":"go.portswigger.net","domain":"portswigger.net","tld":"net"},"ip":{"addr":"52.54.96.194","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"ea82b797c47096a27a1c5fd824ccaccf","sha1":"aff61f9b14f29e879eee7d052b726b94dad45bc9","sha256":"d4078edea69ca54701b1653a3a1e1ea76d74f4e804ffc9e713faac2c8cb5b3d7","sha512":"4bfa99f49a7b9cb834ad45a6e332e097fc901ebbcb3bb1105bf709b14daf8395deca74d636027da666e7e052bb914824f0e9b77fc7ee49d37443daabcdfafcbd","ssdeep":"","tlshash":"c2c02b0c390a510e90230cd8140a0c443907150ebfc2d0024b14cae0847515abe0003f","size":135,"data":"","first_seen":"2025-10-13T19:22:23.557806Z","last_seen":"2026-03-19T12:30:20.886235Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"portswigger.net/burp","fqdn":"portswigger.net","domain":"portswigger.net","tld":"net"},"ip":{"addr":"3.164.240.86","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"6f44471be0c16abce784c485a5b58157","sha1":"e02b4efdc6d16c1cfa2b81814a0cb7bd3f6536b8","sha256":"08589e4807a49f203f87abc620c4b8945a1a87b02023acd5bed0d63aa8dfd8d6","sha512":"fd26db5f8e5e7f8a2d68d7379dd1850ec969590cfd24e48c632a11b29044c88671082b93e62f2e65eea36960229c44f38cf08ecb9bdf19cb65c13324cf890571","ssdeep":"","tlshash":"d82111a93e63143459732159ab3e95043445b16b284498207d5cb52c9f73d7b8191eac","size":1409,"data":"","first_seen":"2026-01-27T05:07:00.038611Z","last_seen":"2026-03-19T12:30:20.936094Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"portswigger.net/burp","fqdn":"portswigger.net","domain":"portswigger.net","tld":"net"},"ip":{"addr":"3.164.240.86","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"32f4fb8c421786b8bde7681d6bd2989a","sha1":"169aa910e263a012648c34741fb8fc498a3a8356","sha256":"93bb3aacd68a47780a80f8b2fbda076286a0d5d6be396adaf892d20c8d12be42","sha512":"015ffc49a79a1c1e5ee5b8f63745e53bdd74a6381107de1ab45e336777249391e0e8f52eb9a1c6739884698ee2c9fc86106f712f8dd4537bbe7084375435295e","ssdeep":"","tlshash":"99f0a39e3da359765152207ba2bfc0107462511b5628d811b48ec9891f10fd59c667f9","size":475,"data":"","first_seen":"2025-08-12T18:10:55.965612Z","last_seen":"2026-03-19T12:30:20.938372Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"portswigger.net/burp","fqdn":"portswigger.net","domain":"portswigger.net","tld":"net"},"ip":{"addr":"3.164.240.86","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"c8c720157c50089cb32228b1ceb103cf","sha1":"838cdadf9e905f666b55d7dc19a34aa2944e3fb4","sha256":"7d963f1aab38cf56f041f489153b3e0513c13cfab7ae148eada29ed1acac7e17","sha512":"3a8666b39c5d86f0e9b8a514127168fa5016f8641cd1aa4e07979534e1b1d9247a5366e00e37ba1af211ccc8606a6eb663409b503e935d183a67e7b83f4af8bd","ssdeep":"","tlshash":"0e21bb31199716fc403650aa8efe8c7773f7a81b4011ca66bf4ca711efe56908ac5388","size":1325,"data":"","first_seen":"2025-12-20T08:10:03.421526Z","last_seen":"2026-03-19T12:30:20.94015Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"portswigger.net/burp","fqdn":"portswigger.net","domain":"portswigger.net","tld":"net"},"ip":{"addr":"3.164.240.86","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"b711ba2488c1bebdfb34a8ea842925bf","sha1":"88d1854e9a38bbcf779edf91358b86a832482073","sha256":"d908815cf206e25fc05d1c0b050cdc1c8598afcd38f0f967243758f0df5a8776","sha512":"8ab25a93d95059da7858ed7482b2aa1c0622c98294128b66fb6232569413478554d87e41191e64a4e2e3292b582f375e62a2354ded0a24359e10e18433022d32","ssdeep":"","tlshash":"2bf0eb8c1ca2657a239e312e017bc07933d2539129518b11ba2ec8491f52ce39c42b8c","size":560,"data":"","first_seen":"2025-08-12T18:10:55.969053Z","last_seen":"2026-03-19T12:30:20.942111Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"go.portswigger.net/pd.js","fqdn":"go.portswigger.net","domain":"portswigger.net","tld":"net"},"ip":{"addr":"52.54.96.194","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"0c0335550002dc4c4db0de1d9dcf043d","sha1":"0bd0357faa46e9ff78d939b196d43ed47c701160","sha256":"41402adfc915ad6dfd6328c06c8038763d25fe603e63beba4a2638a2bbc03136","sha512":"449683e6a927848f403214c49705a91d54a880d4da605f2e7b3fc52bf178c7475ca6131fad823a6aead84a1eb4a3e0501b122900c97241ce620ab45330861f12","ssdeep":"96:3DvZ6XcSBguSMe+8gGVU74cgqb6Ys7v4/q1ykQ7KjcBWXDylZP259N8gvwx3Ug8:zvZMcSy/PglLiZBQ7KIBW2lZ259Srxh8","tlshash":"70c16498fd94d4b6417b059930bfd6bcb23c57b1340d9150d2b8cab4346cd322b92e6d","size":5620,"data":"","first_seen":"2023-04-14T17:45:12Z","last_seen":"2026-04-05T01:02:00.750065Z","times_seen":10690,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"portswigger.net/style.css","fqdn":"portswigger.net","domain":"portswigger.net","tld":"net"},"ip":{"addr":"3.164.240.86","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://portswigger.net/burp","date":"2026-03-19T12:30:07.217Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"portswigger.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Mon, 02 Mar 2026 00:00:00 GMT","end":"Tue, 15 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"EF:6D:90:97:A0:2D:B2:62:86:7A:16:70:DA:AC:7E:12:F1:59:C1:95","sha256":"5B:54:DD:9F:7D:8D:35:79:19:1E:C6:93:BA:32:13:5D:E1:D6:DB:7E:4A:47:D4:5B:D4:25:74:DF:95:CE:14:C9"}}},"request":{"raw":"GET /style.css HTTP/1.1\r\nHost: portswigger.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://portswigger.net/burp\r\nCookie: AWSALBAPP-0=_remove_; AWSALBAPP-1=_remove_; AWSALBAPP-2=_remove_; AWSALBAPP-3=_remove_; SessionId=CfDJ8CpVwA%2BqwKBGh8%2FJi2OaZZfocwpeuNkyjQQDSGFVKka1%2BPmv8yTbITpCvlGv2Z6w3kj2To6LiKXglvVdD%2F5xgkKdTU0%2BMQxsgptPxJcLJFrALZzHtUg0wN6GfCsFfeEFZdrnk5sGtVlc9EjKznPlVsNva0wTq6SEAJ5Eo6cJkR0u\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css\r\ndate: Thu, 19 Mar 2026 12:29:15 GMT\r\nset-cookie: AWSALBAPP-0=_remove_; Expires=Thu, 26 Mar 2026 12:29:15 GMT; Path=/\nAWSALBAPP-1=_remove_; Expires=Thu, 26 Mar 2026 12:29:15 GMT; Path=/\nAWSALBAPP-2=_remove_; Expires=Thu, 26 Mar 2026 12:29:15 GMT; Path=/\nAWSALBAPP-3=_remove_; Expires=Thu, 26 Mar 2026 12:29:15 GMT; Path=/\r\nserver: '; DELETE carlos FROM users --\r\ncache-control: public, max-age=60\r\nstrict-transport-security: max-age=31536000; preload\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\ncontent-security-policy: default-src 'none';form-action 'self';base-uri 'none';child-src 'self' https://www.youtube.com/embed/;connect-src 'self' https://ps.containers.piwik.pro https://ps.piwik.pro https://tags.srv.stackadapt.com https://go.portswigger.net https://tracking-api.g2.com https://www.google.com/recaptcha/ https://formsubmission.portswigger.net;font-src 'self' https://fonts.gstatic.com data:;frame-src 'self' https://www.youtube.com/embed/ https://www.google.com/recaptcha/;img-src 'self' https://i.ytimg.com/ https://tags.srv.stackadapt.com/sa.jpeg;media-src 'self' https://d21v5rjx8s17cr.cloudfront.net/ https://d2gl1b374o3yzk.cloudfront.net/;script-src 'self' https://ps.containers.piwik.pro/ppms.js https://ps.piwik.pro/ppms.js https://www.youtube.com/iframe_api https://www.youtube.com/s/player/ https://tags.srv.stackadapt.com/events.js https://go.portswigger.net/pd.js 'nonce-jKMmmwxhnX6vDLT6Ag4IwQoSRs5RgXEK' 'strict-dynamic';style-src 'self' https://tags.srv.stackadapt.com/sa.css 'nonce-jKMmmwxhnX6vDLT6Ag4IwQoSRs5RgXEK' https://fonts.googleapis.com/css2* https://unpkg.com/animate.css@4.1.1/animate.css https://unpkg.com/@teleporthq/teleport-custom-scripts/dist/style.css;\r\ncross-origin-resource-policy: same-site\r\ncross-origin-opener-policy: same-origin\r\nx-hiring-now: We're on a mission to secure the web: https://portswigger.net/careers\r\nx-powered-by: Express\r\nx-robots-tag: all\r\ncontent-encoding: br\r\nvary: accept-encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 07b1d101035e34f82920833b00a4e896.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P2\r\nx-amz-cf-id: AK9wjErjsEoiYLcDmO0LdKUxXxU-KgpIcQgjcLEZPiwKAjn2vpEsog==\r\nage: 52\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":54365,"size_decoded":0,"mime_type":"text/css","magic":"assembler source, ASCII text, with very long lines (343)","md5":"0754c13740dbb247c742fd38ff0f7f71","sha1":"5ba5f39d2bf66b9458c97d6eecf8cc94e5f570cb","sha256":"f672b8f78f366a97e0ac0bccd66fec0d2510025792943516079606a26bb8fe38","sha512":"97f2acb5c7e02fa1ee2e147ebc2a8a016b2f249641363e6aa700ed8325b1f09f40336e002110f73208891b33f6bc203305b25708937ae1c16379e7db5685fb31","ssdeep":"1536:AQbrC9YK2TY2sECrOcVy1GCR5tPaMd1JR:82TyXVWRF","tlshash":"6e336540567451283c3fa37e9287676df399a041ee0dcfe4f6fa10449ec42fa65e2e89","first_seen":"2026-03-19T12:30:20.848598Z","last_seen":"2026-03-19T12:30:20.848598Z","times_seen":1,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"unpkg.com/animate.css@4.1.1/animate.css","fqdn":"unpkg.com","domain":"unpkg.com","tld":"com"},"ip":{"addr":"104.18.1.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://portswigger.net/burp","date":"2026-03-19T12:30:07.209Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"unpkg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 18 Feb 2026 08:16:48 GMT","end":"Tue, 19 May 2026 09:15:09 GMT"},"fingerprint":{"sha1":"F3:CF:0B:A3:28:07:E9:5A:D0:8B:F4:9E:A8:A1:9B:71:A6:59:38:23","sha256":"DD:EE:6D:62:AC:D0:59:11:F9:1C:53:44:27:F0:8B:A5:2C:A2:C6:C4:BF:B8:79:AF:A5:5F:B3:E1:29:E8:45:8E"}}},"request":{"raw":"GET /animate.css@4.1.1/animate.css HTTP/1.1\r\nHost: unpkg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://portswigger.net/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 19 Mar 2026 12:30:07 GMT\r\ncontent-type: text/css\r\ncf-ray: 9dec7c8f38ea8be6-OSL\r\ncf-cache-status: HIT\r\nfly-request-id: 01KHPW08RRFB4QQ5H3WHJ15XEC-fra\r\naccess-control-allow-origin: *\r\nage: 673302\r\ncache-control: public, max-age=31536000\r\nexpires: Fri, 19 Mar 2027 12:30:07 GMT\r\nlast-modified: Tue, 17 Feb 2026 22:37:14 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nvia: 1.1 fly.io, 1.1 fly.io\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-expose-headers: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\ncontent-digest: sha256=:wbb57R7//4cjN0DOYS7TzT+9PLNMCGM3PYIP3hssjY8=:\r\ncontent-encoding: gzip\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Fly.io","description":"Fly is a platform for running full stack apps and databases.","website":"https://fly.io","common_platform_enumeration":"","icon":"Fly.io.png","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":95374,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"cf2741a3a7ea8427ade651533a54ef1b","sha1":"afcaf144854f4916f4cc4ad17d196bca1aa66bc8","sha256":"c1b6f9ed1effff87233740ce612ed3cd3fbd3cb34c0863373d820fde1b2c8d8f","sha512":"a611b12c8b2f1c502b748ec8c8b8efd7875c86f6d59040da1fde5e7ef01a7bfcb67b17960500900e93456ce4dd575a78fe921afd7b5bb830a77e10c421786f19","ssdeep":"768:BK+D9wwrWJlKIqfqnpKLbQQdu+ucYQYWupuJuZuW:BK+D9wwrWJlKIqepKLbQD","tlshash":"ee933ead29d1118452338a2d83df5e68663ce57318269def73c2584fcf8afa867c9107","first_seen":"2023-05-18T21:21:18Z","last_seen":"2026-04-04T10:53:10.334419Z","times_seen":900,"resource_available":false,"data":null}},"time_used":99,"timings":{"blocked":27,"dns":10,"connect":1,"send":0,"wait":32,"receive":0,"ssl":26},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"portswigger.net/public/Pages/Home/web-security-academy-home-1-300w-400h.webp","fqdn":"portswigger.net","domain":"portswigger.net","tld":"net"},"ip":{"addr":"3.164.240.86","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://portswigger.net/burp","date":"2026-03-19T12:30:07.241Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"portswigger.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Mon, 02 Mar 2026 00:00:00 GMT","end":"Tue, 15 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"EF:6D:90:97:A0:2D:B2:62:86:7A:16:70:DA:AC:7E:12:F1:59:C1:95","sha256":"5B:54:DD:9F:7D:8D:35:79:19:1E:C6:93:BA:32:13:5D:E1:D6:DB:7E:4A:47:D4:5B:D4:25:74:DF:95:CE:14:C9"}}},"request":{"raw":"GET /public/Pages/Home/web-security-academy-home-1-300w-400h.webp HTTP/1.1\r\nHost: portswigger.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://portswigger.net/burp\r\nCookie: AWSALBAPP-0=_remove_; AWSALBAPP-1=_remove_; AWSALBAPP-2=_remove_; AWSALBAPP-3=_remove_; SessionId=CfDJ8CpVwA%2BqwKBGh8%2FJi2OaZZfocwpeuNkyjQQDSGFVKka1%2BPmv8yTbITpCvlGv2Z6w3kj2To6LiKXglvVdD%2F5xgkKdTU0%2BMQxsgptPxJcLJFrALZzHtUg0wN6GfCsFfeEFZdrnk5sGtVlc9EjKznPlVsNva0wTq6SEAJ5Eo6cJkR0u\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\nlocation: https://portswigger.net/public/pages/home/web-security-academy-home-1-300w-400h.webp\r\ndate: Thu, 19 Mar 2026 12:30:07 GMT\r\nset-cookie: AWSALBAPP-0=_remove_; Expires=Thu, 26 Mar 2026 12:30:07 GMT; Path=/\nAWSALBAPP-1=_remove_; Expires=Thu, 26 Mar 2026 12:30:07 GMT; Path=/\nAWSALBAPP-2=_remove_; Expires=Thu, 26 Mar 2026 12:30:07 GMT; Path=/\nAWSALBAPP-3=_remove_; Expires=Thu, 26 Mar 2026 12:30:07 GMT; Path=/\r\nserver: Kestrel\r\ncache-control: no-store, no-cache, s-maxage=0, private\r\nstrict-transport-security: max-age=31536000; preload\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 07b1d101035e34f82920833b00a4e896.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P2\r\nx-amz-cf-id: FabewFYav-u3BaUxpJSWOaDHwM-p5Vgnht-Z42FUaq4ZCjwBrXkoFQ==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Kestrel","description":"","website":"https://docs.microsoft.com/en-us/aspnet/core/fundamentals/servers/kestrel","common_platform_enumeration":"","icon":"kestrel.svg","categories":["Web servers"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":5163,"size_decoded":0,"mime_type":"image/webp","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T00:47:03.388486Z","times_seen":13352920,"resource_available":true,"data":null}},"time_used":147,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":147,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"portswigger.net/public/Illustrations/bsee-ci-burp-illy-1500w.webp","fqdn":"portswigger.net","domain":"portswigger.net","tld":"net"},"ip":{"addr":"3.164.240.86","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://portswigger.net/burp","date":"2026-03-19T12:30:07.237Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"portswigger.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Mon, 02 Mar 2026 00:00:00 GMT","end":"Tue, 15 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"EF:6D:90:97:A0:2D:B2:62:86:7A:16:70:DA:AC:7E:12:F1:59:C1:95","sha256":"5B:54:DD:9F:7D:8D:35:79:19:1E:C6:93:BA:32:13:5D:E1:D6:DB:7E:4A:47:D4:5B:D4:25:74:DF:95:CE:14:C9"}}},"request":{"raw":"GET /public/Illustrations/bsee-ci-burp-illy-1500w.webp HTTP/1.1\r\nHost: portswigger.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://portswigger.net/burp\r\nCookie: AWSALBAPP-0=_remove_; AWSALBAPP-1=_remove_; AWSALBAPP-2=_remove_; AWSALBAPP-3=_remove_; SessionId=CfDJ8CpVwA%2BqwKBGh8%2FJi2OaZZfocwpeuNkyjQQDSGFVKka1%2BPmv8yTbITpCvlGv2Z6w3kj2To6LiKXglvVdD%2F5xgkKdTU0%2BMQxsgptPxJcLJFrALZzHtUg0wN6GfCsFfeEFZdrnk5sGtVlc9EjKznPlVsNva0wTq6SEAJ5Eo6cJkR0u\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\nlocation: https://portswigger.net/public/illustrations/bsee-ci-burp-illy-1500w.webp\r\ndate: Thu, 19 Mar 2026 12:30:07 GMT\r\nset-cookie: AWSALBAPP-0=_remove_; Expires=Thu, 26 Mar 2026 12:30:07 GMT; Path=/\nAWSALBAPP-1=_remove_; Expires=Thu, 26 Mar 2026 12:30:07 GMT; Path=/\nAWSALBAPP-2=_remove_; Expires=Thu, 26 Mar 2026 12:30:07 GMT; Path=/\nAWSALBAPP-3=_remove_; Expires=Thu, 26 Mar 2026 12:30:07 GMT; Path=/\r\nserver: Kestrel\r\ncache-control: no-store, no-cache, s-maxage=0, private\r\nstrict-transport-security: max-age=31536000; preload\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 07b1d101035e34f82920833b00a4e896.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P2\r\nx-amz-cf-id: 5nupgICanBIbt0A4xndvxjYMUzOgCy1lFEIluKyXmvW5LCMGTmtLGQ==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Kestrel","description":"","website":"https://docs.microsoft.com/en-us/aspnet/core/fundamentals/servers/kestrel","common_platform_enumeration":"","icon":"kestrel.svg","categories":["Web servers"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":5328,"size_decoded":0,"mime_type":"image/webp","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T00:47:03.388486Z","times_seen":13352920,"resource_available":true,"data":null}},"time_used":154,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":154,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=AW-11422135271","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.251.143.136","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://portswigger.net/burp","date":"2026-03-19T12:30:08.265Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:36:37 GMT","end":"Mon, 27 Apr 2026 08:36:36 GMT"},"fingerprint":{"sha1":"8B:BA:E2:19:5D:6C:81:59:ED:D8:AA:3B:2D:5F:A3:A2:C8:A1:E3:DF","sha256":"B0:8C:FC:C1:98:34:EB:0E:FF:AB:13:B4:9E:AA:B1:7E:02:11:9A:93:31:F2:A1:0F:23:9E:2B:C3:6F:EC:26:F8"}}},"request":{"raw":"GET /gtag/js?id=AW-11422135271 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://portswigger.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Thu, 19 Mar 2026 12:30:08 GMT\r\nexpires: Thu, 19 Mar 2026 12:30:08 GMT\r\ncache-control: private, max-age=900\r\nlast-modified: Thu, 19 Mar 2026 12:00:00 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 142025\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":421706,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (5882)","md5":"1f9ba816669e9f588f57988fd2cc3086","sha1":"49fb6582a7ad239a9c1e82a95108adcad1ff4e7b","sha256":"ffe34d27e11b99f8af09f354047a3cef3ec22e5a5dc6295373ae320b4a52bc81","sha512":"224d1d9eb4aba36b4aa503f0da3d13d2b30a42c2392ede516c6b4fa7f75c1c0cc624e06f418e5a9745fac6702d5735003e2e94ead05326a55d3015070fc709ae","ssdeep":"6144:uZoB43fxUw1BL9bre5738L7XC6OifcZESVvAtd85He+z:RWfxUwH925D8dc+i","tlshash":"019407cdb3d670625392b478903f018be57a68a2b44ccc99f189dce42e7469a4277f7c","first_seen":"2026-03-19T12:30:20.855604Z","last_seen":"2026-03-19T12:30:20.855604Z","times_seen":1,"resource_available":true,"data":null}},"time_used":190,"timings":{"blocked":67,"dns":1,"connect":8,"send":0,"wait":23,"receive":29,"ssl":59},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"unpkg.com/@teleporthq/teleport-custom-scripts/dist/style.css","fqdn":"unpkg.com","domain":"unpkg.com","tld":"com"},"ip":{"addr":"104.18.1.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://portswigger.net/burp","date":"2026-03-19T12:30:07.216Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"unpkg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 18 Feb 2026 08:16:48 GMT","end":"Tue, 19 May 2026 09:15:09 GMT"},"fingerprint":{"sha1":"F3:CF:0B:A3:28:07:E9:5A:D0:8B:F4:9E:A8:A1:9B:71:A6:59:38:23","sha256":"DD:EE:6D:62:AC:D0:59:11:F9:1C:53:44:27:F0:8B:A5:2C:A2:C6:C4:BF:B8:79:AF:A5:5F:B3:E1:29:E8:45:8E"}}},"request":{"raw":"GET /@teleporthq/teleport-custom-scripts/dist/style.css HTTP/1.1\r\nHost: unpkg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://portswigger.net/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ndate: Thu, 19 Mar 2026 12:30:07 GMT\r\ncontent-type: text/plain;charset=UTF-8\r\ncontent-length: 73\r\nlocation: /@teleporthq/teleport-custom-scripts@0.0.30/dist/style.css\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=60, s-maxage=300\r\ncross-origin-resource-policy: cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nserver: cloudflare\r\ncf-ray: 9dec7c8f496f8be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":16663,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T00:47:03.388486Z","times_seen":13352920,"resource_available":true,"data":null}},"time_used":608,"timings":{"blocked":31,"dns":12,"connect":11,"send":0,"wait":523,"receive":0,"ssl":26},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Caveat:wght@400;500;600;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://portswigger.net/burp","date":"2026-03-19T12:30:07.257Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:01 GMT","end":"Mon, 27 Apr 2026 08:38:00 GMT"},"fingerprint":{"sha1":"AD:23:3E:9B:CF:2B:A1:EC:31:14:63:D1:58:73:BB:E7:C5:32:16:8C","sha256":"B1:5F:45:BF:00:8C:68:35:D3:42:B2:67:66:47:9D:BB:42:41:07:56:3A:C4:1C:D6:10:7B:B7:53:C2:71:81:33"}}},"request":{"raw":"GET /css2?family=Caveat:wght@400;500;600;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://portswigger.net/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Thu, 19 Mar 2026 12:30:07 GMT\r\ndate: Thu, 19 Mar 2026 12:30:07 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5724,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"012b3b80922184cde425092b1b19b485","sha1":"f69395d55e57ecce755321d95ffcbbfb9160bbd9","sha256":"6324c22f4591435c00b2e59efbf8b628ee68786efe59b1ab510d780bface7773","sha512":"11cb886260d00b67a8273f8e332ca28eb00bc4615c79cd586bb93984ed76d5f9d99a27c1c125e47b55ac42bb34edb9571031685267b4f0012064af76be488398","ssdeep":"96:OOEaR+OEa5FZXOEaCJc+uVOEaUNlOXaR+OXa5FZXOXaCJc+uVOXaUNlOxMaR+Ox/:pRZyKjqRqhKcHRHIKFgRgPKmX","tlshash":"4bc19081041bd400eb830dc263ef7e36de4e619664449d75affe28e8acaad27435072d","first_seen":"2025-09-05T04:53:42.922036Z","last_seen":"2026-04-03T22:17:43.257809Z","times_seen":346,"resource_available":false,"data":null}},"time_used":296,"timings":{"blocked":126,"dns":1,"connect":20,"send":0,"wait":35,"receive":0,"ssl":110},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"portswigger.net/public/navigation/navigation-products-300w.webp","fqdn":"portswigger.net","domain":"portswigger.net","tld":"net"},"ip":{"addr":"3.164.240.86","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://portswigger.net/burp","date":"2026-03-19T12:30:07.404Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"portswigger.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Mon, 02 Mar 2026 00:00:00 GMT","end":"Tue, 15 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"EF:6D:90:97:A0:2D:B2:62:86:7A:16:70:DA:AC:7E:12:F1:59:C1:95","sha256":"5B:54:DD:9F:7D:8D:35:79:19:1E:C6:93:BA:32:13:5D:E1:D6:DB:7E:4A:47:D4:5B:D4:25:74:DF:95:CE:14:C9"}}},"request":{"raw":"GET /public/navigation/navigation-products-300w.webp HTTP/1.1\r\nHost: portswigger.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://portswigger.net/burp\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: AWSALBAPP-0=_remove_; AWSALBAPP-1=_remove_; AWSALBAPP-2=_remove_; AWSALBAPP-3=_remove_; SessionId=CfDJ8CpVwA%2BqwKBGh8%2FJi2OaZZfocwpeuNkyjQQDSGFVKka1%2BPmv8yTbITpCvlGv2Z6w3kj2To6LiKXglvVdD%2F5xgkKdTU0%2BMQxsgptPxJcLJFrALZzHtUg0wN6GfCsFfeEFZdrnk5sGtVlc9EjKznPlVsNva0wTq6SEAJ5Eo6cJkR0u\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/webp\r\ncontent-length: 6074\r\ndate: Thu, 19 Mar 2026 12:29:15 GMT\r\nserver: '; DELETE carlos FROM users --\r\ncache-control: public, max-age=60\r\nstrict-transport-security: max-age=31536000; preload\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\ncontent-security-policy: default-src 'none';form-action 'self';base-uri 'none';child-src 'self' https://www.youtube.com/embed/;connect-src 'self' https://ps.containers.piwik.pro https://ps.piwik.pro https://tags.srv.stackadapt.com https://go.portswigger.net https://tracking-api.g2.com https://www.google.com/recaptcha/ https://formsubmission.portswigger.net;font-src 'self' https://fonts.gstatic.com data:;frame-src 'self' https://www.youtube.com/embed/ https://www.google.com/recaptcha/;img-src 'self' https://i.ytimg.com/ https://tags.srv.stackadapt.com/sa.jpeg;media-src 'self' https://d21v5rjx8s17cr.cloudfront.net/ https://d2gl1b374o3yzk.cloudfront.net/;script-src 'self' https://ps.containers.piwik.pro/ppms.js https://ps.piwik.pro/ppms.js https://www.youtube.com/iframe_api https://www.youtube.com/s/player/ https://tags.srv.stackadapt.com/events.js https://go.portswigger.net/pd.js 'nonce-yeqgLbbpzcfQ4vcPMdRpt9f351N/wBRi' 'strict-dynamic';style-src 'self' https://tags.srv.stackadapt.com/sa.css 'nonce-yeqgLbbpzcfQ4vcPMdRpt9f351N/wBRi' https://fonts.googleapis.com/css2* https://unpkg.com/animate.css@4.1.1/animate.css https://unpkg.com/@teleporthq/teleport-custom-scripts/dist/style.css;\r\ncross-origin-resource-policy: same-site\r\ncross-origin-opener-policy: same-origin\r\nx-hiring-now: We're on a mission to secure the web: https://portswigger.net/careers\r\nx-powered-by: Express\r\nx-robots-tag: all\r\nset-cookie: AWSALBAPP-0=_remove_; Expires=Thu, 26 Mar 2026 12:29:15 GMT; Path=/\nAWSALBAPP-1=_remove_; Expires=Thu, 26 Mar 2026 12:29:15 GMT; Path=/\nAWSALBAPP-2=_remove_; Expires=Thu, 26 Mar 2026 12:29:15 GMT; Path=/\nAWSALBAPP-3=_remove_; Expires=Thu, 26 Mar 2026 12:29:15 GMT; Path=/\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 07b1d101035e34f82920833b00a4e896.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P2\r\nx-amz-cf-id: ZM9nexv5WQcNMDp__Mlb-U1YasLheerLEEd6flTh_rNeOZKJIAmmYQ==\r\nage: 52\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6074,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 180x194, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"52737a188e22c7d35373289e6b299c19","sha1":"2011cab370dc61c50e936d5b77b77c359eca1b58","sha256":"84e80e9f864ab0a69472084ed70beeaefc56a47ddc660dedf1e79fb54b217365","sha512":"13058ee88385758a20e18de0e63c6c7422e987778f4246a1e350d3f678f51e73446095bf28e2cd9cf84b59e65fccf3b3d22db197bfe971418cbf8d358f9b6813","ssdeep":"96:792KVw6tGu+x/CcupjnIqCf4MQxs5pa7uRtBfTRF2yia9S/EzwU0gYIm+fm7km:ntGTx6ppMqCOx+pQuTBT9ia9SbU0T+fU","tlshash":"d3c17e4707feb3eee163990e53156a80b893521502ad1dff19e22dd0b8519279bc8a36","first_seen":"2026-03-19T12:30:20.859173Z","last_seen":"2026-03-19T12:30:20.859173Z","times_seen":1,"resource_available":false,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":56,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"portswigger.net/public/illustrations/bsee-attack-burp-illy-1500w.webp","fqdn":"portswigger.net","domain":"portswigger.net","tld":"net"},"ip":{"addr":"3.164.240.86","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://portswigger.net/burp","date":"2026-03-19T12:30:07.512Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"portswigger.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Mon, 02 Mar 2026 00:00:00 GMT","end":"Tue, 15 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"EF:6D:90:97:A0:2D:B2:62:86:7A:16:70:DA:AC:7E:12:F1:59:C1:95","sha256":"5B:54:DD:9F:7D:8D:35:79:19:1E:C6:93:BA:32:13:5D:E1:D6:DB:7E:4A:47:D4:5B:D4:25:74:DF:95:CE:14:C9"}}},"request":{"raw":"GET /public/illustrations/bsee-attack-burp-illy-1500w.webp HTTP/1.1\r\nHost: portswigger.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://portswigger.net/burp\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: AWSALBAPP-0=_remove_; AWSALBAPP-1=_remove_; AWSALBAPP-2=_remove_; AWSALBAPP-3=_remove_; SessionId=CfDJ8CpVwA%2BqwKBGh8%2FJi2OaZZfocwpeuNkyjQQDSGFVKka1%2BPmv8yTbITpCvlGv2Z6w3kj2To6LiKXglvVdD%2F5xgkKdTU0%2BMQxsgptPxJcLJFrALZzHtUg0wN6GfCsFfeEFZdrnk5sGtVlc9EjKznPlVsNva0wTq6SEAJ5Eo6cJkR0u\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/webp\r\ncontent-length: 4304\r\ndate: Thu, 19 Mar 2026 12:29:28 GMT\r\nserver: '; DELETE carlos FROM users --\r\ncache-control: public, max-age=60\r\nstrict-transport-security: max-age=31536000; preload\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\ncontent-security-policy: default-src 'none';form-action 'self';base-uri 'none';child-src 'self' https://www.youtube.com/embed/;connect-src 'self' https://ps.containers.piwik.pro https://ps.piwik.pro https://tags.srv.stackadapt.com https://go.portswigger.net https://tracking-api.g2.com https://www.google.com/recaptcha/ https://formsubmission.portswigger.net;font-src 'self' https://fonts.gstatic.com data:;frame-src 'self' https://www.youtube.com/embed/ https://www.google.com/recaptcha/;img-src 'self' https://i.ytimg.com/ https://tags.srv.stackadapt.com/sa.jpeg;media-src 'self' https://d21v5rjx8s17cr.cloudfront.net/ https://d2gl1b374o3yzk.cloudfront.net/;script-src 'self' https://ps.containers.piwik.pro/ppms.js https://ps.piwik.pro/ppms.js https://www.youtube.com/iframe_api https://www.youtube.com/s/player/ https://tags.srv.stackadapt.com/events.js https://go.portswigger.net/pd.js 'nonce-JtUnN+gJtSFiLhu40FBAxITwfM8rPdsA' 'strict-dynamic';style-src 'self' https://tags.srv.stackadapt.com/sa.css 'nonce-JtUnN+gJtSFiLhu40FBAxITwfM8rPdsA' https://fonts.googleapis.com/css2* https://unpkg.com/animate.css@4.1.1/animate.css https://unpkg.com/@teleporthq/teleport-custom-scripts/dist/style.css;\r\ncross-origin-resource-policy: same-site\r\ncross-origin-opener-policy: same-origin\r\nx-hiring-now: We're on a mission to secure the web: https://portswigger.net/careers\r\nx-powered-by: Express\r\nx-robots-tag: all\r\nset-cookie: AWSALBAPP-0=_remove_; Expires=Thu, 26 Mar 2026 12:29:28 GMT; Path=/\nAWSALBAPP-1=_remove_; Expires=Thu, 26 Mar 2026 12:29:28 GMT; Path=/\nAWSALBAPP-2=_remove_; Expires=Thu, 26 Mar 2026 12:29:28 GMT; Path=/\nAWSALBAPP-3=_remove_; Expires=Thu, 26 Mar 2026 12:29:28 GMT; Path=/\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 07b1d101035e34f82920833b00a4e896.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P2\r\nx-amz-cf-id: r1M4qk_pMsjOVdM7cOmT41GipTG7o9kQOM5UL1crIMyxPGs3oZGzZQ==\r\nage: 39\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4304,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 320x125, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"9f912d6e4073e1293a2aac494ed9bd57","sha1":"1f5cb9be598b67363f686ed8c85bd3fe672628c6","sha256":"b99217cb4422e78b218f557f5ef99034cd4007a6b04870289da2c69015401809","sha512":"288ee63eab9a2b4a3f2d77bf1b0d405245b514f9d488a9439d0d3eb4b5aecdd9bc4d478914d5f79603c4fae76b7953f445e65eb86829c1eb7f6e3df1431decde","ssdeep":"96:6v9MwD9xU0gHjgKTz95fut4Z892k4ELVDdHTbsCqAQdyVlewIJ:bwDvGn2tH2+BDCCOdyOwc","tlshash":"dc918dcf065c28c2d11676a9030bc529abf2c842d6dc75f40810ca97bfd059b7ddd639","first_seen":"2026-03-19T12:30:20.861842Z","last_seen":"2026-03-19T12:30:20.861842Z","times_seen":1,"resource_available":false,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":49,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"portswigger.net/public/Icons/better-together-logo.svg","fqdn":"portswigger.net","domain":"portswigger.net","tld":"net"},"ip":{"addr":"3.164.240.86","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://portswigger.net/burp","date":"2026-03-19T12:30:07.223Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"portswigger.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Mon, 02 Mar 2026 00:00:00 GMT","end":"Tue, 15 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"EF:6D:90:97:A0:2D:B2:62:86:7A:16:70:DA:AC:7E:12:F1:59:C1:95","sha256":"5B:54:DD:9F:7D:8D:35:79:19:1E:C6:93:BA:32:13:5D:E1:D6:DB:7E:4A:47:D4:5B:D4:25:74:DF:95:CE:14:C9"}}},"request":{"raw":"GET /public/Icons/better-together-logo.svg HTTP/1.1\r\nHost: portswigger.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://portswigger.net/burp\r\nCookie: AWSALBAPP-0=_remove_; AWSALBAPP-1=_remove_; AWSALBAPP-2=_remove_; AWSALBAPP-3=_remove_; SessionId=CfDJ8CpVwA%2BqwKBGh8%2FJi2OaZZfocwpeuNkyjQQDSGFVKka1%2BPmv8yTbITpCvlGv2Z6w3kj2To6LiKXglvVdD%2F5xgkKdTU0%2BMQxsgptPxJcLJFrALZzHtUg0wN6GfCsFfeEFZdrnk5sGtVlc9EjKznPlVsNva0wTq6SEAJ5Eo6cJkR0u\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\nlocation: https://portswigger.net/public/icons/better-together-logo.svg\r\ndate: Thu, 19 Mar 2026 12:30:07 GMT\r\nset-cookie: AWSALBAPP-0=_remove_; Expires=Thu, 26 Mar 2026 12:30:07 GMT; Path=/\nAWSALBAPP-1=_remove_; Expires=Thu, 26 Mar 2026 12:30:07 GMT; Path=/\nAWSALBAPP-2=_remove_; Expires=Thu, 26 Mar 2026 12:30:07 GMT; Path=/\nAWSALBAPP-3=_remove_; Expires=Thu, 26 Mar 2026 12:30:07 GMT; Path=/\r\nserver: Kestrel\r\ncache-control: no-store, no-cache, s-maxage=0, private\r\nstrict-transport-security: max-age=31536000; preload\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 07b1d101035e34f82920833b00a4e896.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P2\r\nx-amz-cf-id: uzuqHJXAgP1nTHBi-FA2OQ9v2UdIIHEk70WvQ8regWom3XFM27ZBYg==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Kestrel","description":"","website":"https://docs.microsoft.com/en-us/aspnet/core/fundamentals/servers/kestrel","common_platform_enumeration":"","icon":"kestrel.svg","categories":["Web servers"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1005,"size_decoded":0,"mime_type":"image/svg+xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T00:47:03.388486Z","times_seen":13352920,"resource_available":true,"data":null}},"time_used":150,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":150,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"portswigger.net/public/logos/light/web-security-academy-200h.webp","fqdn":"portswigger.net","domain":"portswigger.net","tld":"net"},"ip":{"addr":"3.164.240.86","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://portswigger.net/burp","date":"2026-03-19T12:30:07.430Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"portswigger.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Mon, 02 Mar 2026 00:00:00 GMT","end":"Tue, 15 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"EF:6D:90:97:A0:2D:B2:62:86:7A:16:70:DA:AC:7E:12:F1:59:C1:95","sha256":"5B:54:DD:9F:7D:8D:35:79:19:1E:C6:93:BA:32:13:5D:E1:D6:DB:7E:4A:47:D4:5B:D4:25:74:DF:95:CE:14:C9"}}},"request":{"raw":"GET /public/logos/light/web-security-academy-200h.webp HTTP/1.1\r\nHost: portswigger.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://portswigger.net/burp\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: AWSALBAPP-0=_remove_; AWSALBAPP-1=_remove_; AWSALBAPP-2=_remove_; AWSALBAPP-3=_remove_; SessionId=CfDJ8CpVwA%2BqwKBGh8%2FJi2OaZZfocwpeuNkyjQQDSGFVKka1%2BPmv8yTbITpCvlGv2Z6w3kj2To6LiKXglvVdD%2F5xgkKdTU0%2BMQxsgptPxJcLJFrALZzHtUg0wN6GfCsFfeEFZdrnk5sGtVlc9EjKznPlVsNva0wTq6SEAJ5Eo6cJkR0u\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/webp\r\ncontent-length: 5392\r\ndate: Thu, 19 Mar 2026 12:29:28 GMT\r\nserver: '; DELETE carlos FROM users --\r\ncache-control: public, max-age=60\r\nstrict-transport-security: max-age=31536000; preload\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\ncontent-security-policy: default-src 'none';form-action 'self';base-uri 'none';child-src 'self' https://www.youtube.com/embed/;connect-src 'self' https://ps.containers.piwik.pro https://ps.piwik.pro https://tags.srv.stackadapt.com https://go.portswigger.net https://tracking-api.g2.com https://www.google.com/recaptcha/ https://formsubmission.portswigger.net;font-src 'self' https://fonts.gstatic.com data:;frame-src 'self' https://www.youtube.com/embed/ https://www.google.com/recaptcha/;img-src 'self' https://i.ytimg.com/ https://tags.srv.stackadapt.com/sa.jpeg;media-src 'self' https://d21v5rjx8s17cr.cloudfront.net/ https://d2gl1b374o3yzk.cloudfront.net/;script-src 'self' https://ps.containers.piwik.pro/ppms.js https://ps.piwik.pro/ppms.js https://www.youtube.com/iframe_api https://www.youtube.com/s/player/ https://tags.srv.stackadapt.com/events.js https://go.portswigger.net/pd.js 'nonce-6LAefFvp7AI2C9rMD4+7GPuKVgr4csOf' 'strict-dynamic';style-src 'self' https://tags.srv.stackadapt.com/sa.css 'nonce-6LAefFvp7AI2C9rMD4+7GPuKVgr4csOf' https://fonts.googleapis.com/css2* https://unpkg.com/animate.css@4.1.1/animate.css https://unpkg.com/@teleporthq/teleport-custom-scripts/dist/style.css;\r\ncross-origin-resource-policy: same-site\r\ncross-origin-opener-policy: same-origin\r\nx-hiring-now: We're on a mission to secure the web: https://portswigger.net/careers\r\nx-powered-by: Express\r\nx-robots-tag: all\r\nset-cookie: AWSALBAPP-0=_remove_; Expires=Thu, 26 Mar 2026 12:29:28 GMT; Path=/\nAWSALBAPP-1=_remove_; Expires=Thu, 26 Mar 2026 12:29:28 GMT; Path=/\nAWSALBAPP-2=_remove_; Expires=Thu, 26 Mar 2026 12:29:28 GMT; Path=/\nAWSALBAPP-3=_remove_; Expires=Thu, 26 Mar 2026 12:29:28 GMT; Path=/\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 07b1d101035e34f82920833b00a4e896.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P2\r\nx-amz-cf-id: tmYyDzuGxVEfp6Wks-jrqcAiUTi5GW651KZ_H3L8pL2tSGf1N7su1g==\r\nage: 39\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":5392,"size_decoded":0,"mime_type":"image/webp","magic":"PNG image data, 400 x 140, 8-bit colormap, non-interlaced","md5":"b9d47727124d39e5e957d5a41eae8ffb","sha1":"734ead6b80ec488abf9f39f88beb12b0f0d43277","sha256":"e185f0b8441590757f66a6d082c2063d9cd01ebe5e9582dc5b709c2d207b1ca7","sha512":"c2a81a1333dbbce4d17b4875a81aad8238e06ba76bc58c300f673c47bb46b8b5a640a414640cab144d1574039bcdf0ee705b958c4719e118a796a314d111b128","ssdeep":"96:MYj0JNNrzG6QFt1PnKHKAjL7TK2N0MPi/QuKU9yDRyga3abk0rq17LL0uApxL:MYj0JKV/1PnK7LT50XQKyRE30rq17VAD","tlshash":"1cb18e0fb99e0af9b0c78631842566f6d482a5143fce518bd082d1f7eeb3521d27b3a1","first_seen":"2026-01-27T05:06:59.983022Z","last_seen":"2026-03-19T12:30:20.864567Z","times_seen":2,"resource_available":false,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"portswigger.net/public/navigation/navigation-solutions-300w.webp","fqdn":"portswigger.net","domain":"portswigger.net","tld":"net"},"ip":{"addr":"3.164.240.86","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://portswigger.net/burp","date":"2026-03-19T12:30:07.435Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"portswigger.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Mon, 02 Mar 2026 00:00:00 GMT","end":"Tue, 15 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"EF:6D:90:97:A0:2D:B2:62:86:7A:16:70:DA:AC:7E:12:F1:59:C1:95","sha256":"5B:54:DD:9F:7D:8D:35:79:19:1E:C6:93:BA:32:13:5D:E1:D6:DB:7E:4A:47:D4:5B:D4:25:74:DF:95:CE:14:C9"}}},"request":{"raw":"GET /public/navigation/navigation-solutions-300w.webp HTTP/1.1\r\nHost: portswigger.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://portswigger.net/burp\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: AWSALBAPP-0=_remove_; AWSALBAPP-1=_remove_; AWSALBAPP-2=_remove_; AWSALBAPP-3=_remove_; SessionId=CfDJ8CpVwA%2BqwKBGh8%2FJi2OaZZfocwpeuNkyjQQDSGFVKka1%2BPmv8yTbITpCvlGv2Z6w3kj2To6LiKXglvVdD%2F5xgkKdTU0%2BMQxsgptPxJcLJFrALZzHtUg0wN6GfCsFfeEFZdrnk5sGtVlc9EjKznPlVsNva0wTq6SEAJ5Eo6cJkR0u\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/webp\r\ncontent-length: 5582\r\ndate: Thu, 19 Mar 2026 12:29:15 GMT\r\nserver: '; DELETE carlos FROM users --\r\ncache-control: public, max-age=60\r\nstrict-transport-security: max-age=31536000; preload\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\ncontent-security-policy: default-src 'none';form-action 'self';base-uri 'none';child-src 'self' https://www.youtube.com/embed/;connect-src 'self' https://ps.containers.piwik.pro https://ps.piwik.pro https://tags.srv.stackadapt.com https://go.portswigger.net https://tracking-api.g2.com https://www.google.com/recaptcha/ https://formsubmission.portswigger.net;font-src 'self' https://fonts.gstatic.com data:;frame-src 'self' https://www.youtube.com/embed/ https://www.google.com/recaptcha/;img-src 'self' https://i.ytimg.com/ https://tags.srv.stackadapt.com/sa.jpeg;media-src 'self' https://d21v5rjx8s17cr.cloudfront.net/ https://d2gl1b374o3yzk.cloudfront.net/;script-src 'self' https://ps.containers.piwik.pro/ppms.js https://ps.piwik.pro/ppms.js https://www.youtube.com/iframe_api https://www.youtube.com/s/player/ https://tags.srv.stackadapt.com/events.js https://go.portswigger.net/pd.js 'nonce-baAR1/pUWDLQpx2NtmAlja4tLQsK67MC' 'strict-dynamic';style-src 'self' https://tags.srv.stackadapt.com/sa.css 'nonce-baAR1/pUWDLQpx2NtmAlja4tLQsK67MC' https://fonts.googleapis.com/css2* https://unpkg.com/animate.css@4.1.1/animate.css https://unpkg.com/@teleporthq/teleport-custom-scripts/dist/style.css;\r\ncross-origin-resource-policy: same-site\r\ncross-origin-opener-policy: same-origin\r\nx-hiring-now: We're on a mission to secure the web: https://portswigger.net/careers\r\nx-powered-by: Express\r\nx-robots-tag: all\r\nset-cookie: AWSALBAPP-0=_remove_; Expires=Thu, 26 Mar 2026 12:29:15 GMT; Path=/\nAWSALBAPP-1=_remove_; Expires=Thu, 26 Mar 2026 12:29:15 GMT; Path=/\nAWSALBAPP-2=_remove_; Expires=Thu, 26 Mar 2026 12:29:15 GMT; Path=/\nAWSALBAPP-3=_remove_; Expires=Thu, 26 Mar 2026 12:29:15 GMT; Path=/\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 07b1d101035e34f82920833b00a4e896.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P2\r\nx-amz-cf-id: 27tI647rOPiV-D_8sbwQZKUE-GTBYY3BjvfscdsO4rln8boLMXtS5A==\r\nage: 52\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":5582,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 180x140, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"c0837c97c1950c8a044105418d352bd6","sha1":"372feb8fe572cda89b67f98dca3e166ecb5df558","sha256":"1105d92bf1759e0dcd7f1cac2e615b5836d83ddba27c19dc0eea887f31d747a0","sha512":"7ef47608f083ed4c154187f43b25d787031f1e19d61415c49a4000943ccb037dc817039c08be24a95f42a8ee7ca846683e443f26e0ed25a5f88060fed7faba50","ssdeep":"96:xnyOzyIHG/pa9Zk2vfxCtuEjMJgo8s7RZPaNFXSlsjOYzgZg+:VyOzyIHG/Y9fwkEQ88aNG2LzWg+","tlshash":"feb1bf800c40ff939c705fb740bab8f6af0cd150bc45795c78aa44af064ad1918b1e9b","first_seen":"2026-03-19T12:30:20.867147Z","last_seen":"2026-03-19T12:30:20.867147Z","times_seen":1,"resource_available":false,"data":null}},"time_used":74,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":73,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"burpcollaborator.net/favicon.ico","fqdn":"burpcollaborator.net","domain":"burpcollaborator.net","tld":"net"},"ip":{"addr":"54.77.139.23","port":80,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://burpcollaborator.net/","date":"2026-03-19T12:29:54.476Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: burpcollaborator.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://burpcollaborator.net/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: Burp Collaborator https://burpcollaborator.net/\r\nX-Collaborator-Version: 4\r\nContent-Type: text/html\r\nContent-Length: 1190\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1190,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"403c0a0f5aa689d51d9ed13fe852a171","sha1":"978e36a720ed1b77fb50631f7f65e525afafe6a7","sha256":"cbcf4f7232a985353b357ee97fb51b0c8fa454bc7bc0186650f20146190bab6a","sha512":"4a4731bcbd16a03355cd2348ee3f0014a77808b2b91dc203579f8ead7717d579eb4ee58af30eb92a2f879a3c4f2f1337bb9ae89473412d6a9b4c56f73ebebc63","ssdeep":"","tlshash":"5921cedb77c3236603f330980a59e4596b2950dc2fa17d18788f8a22fb28255433b7f0","first_seen":"2023-04-12T13:50:09Z","last_seen":"2026-03-19T12:30:20.869113Z","times_seen":86,"resource_available":true,"data":null}},"time_used":74,"timings":{"blocked":-1,"dns":1,"connect":37,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-03-19T12:29:54Z","timestamp":1773923394,"ip_dst":{"addr":"172.18.0.13","port":47218,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"54.77.139.23","port":80,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"severity":"high","alert":"ETPRO POLICY Observed Burp Collaborator Server Header","source":"{\"timestamp\":\"2026-03-19T12:29:54.578249+0000\",\"flow_id\":783599272077969,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"54.77.139.23\",\"src_port\":80,\"dest_ip\":\"172.18.0.13\",\"dest_port\":47218,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2841917,\"rev\":1,\"signature\":\"ETPRO POLICY Observed Burp Collaborator Server Header\",\"category\":\"Potential Corporate Privacy Violation\",\"severity\":1,\"metadata\":{\"affected_product\":[\"Any\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2020_04_07\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2020_04_07\"]}},\"http\":{\"hostname\":\"burpcollaborator.net\",\"url\":\"/favicon.ico\",\"http_user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"http_content_type\":\"text/html\",\"http_refer\":\"http://burpcollaborator.net/\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"status\":200,\"length\":1190},\"files\":[{\"filename\":\"/favicon.ico\",\"sid\":[],\"gaps\":false,\"state\":\"CLOSED\",\"stored\":false,\"size\":1190,\"tx_id\":0}],\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":5,\"pkts_toclient\":5,\"bytes_toserver\":703,\"bytes_toclient\":1678,\"start\":\"2026-03-19T12:29:54.469649+0000\"}}"}],"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"portswigger.net/public/pages/home/burp-suite-home-1-300w-400h.webp","fqdn":"portswigger.net","domain":"portswigger.net","tld":"net"},"ip":{"addr":"3.164.240.86","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://portswigger.net/burp","date":"2026-03-19T12:30:07.515Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"portswigger.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Mon, 02 Mar 2026 00:00:00 GMT","end":"Tue, 15 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"EF:6D:90:97:A0:2D:B2:62:86:7A:16:70:DA:AC:7E:12:F1:59:C1:95","sha256":"5B:54:DD:9F:7D:8D:35:79:19:1E:C6:93:BA:32:13:5D:E1:D6:DB:7E:4A:47:D4:5B:D4:25:74:DF:95:CE:14:C9"}}},"request":{"raw":"GET /public/pages/home/burp-suite-home-1-300w-400h.webp HTTP/1.1\r\nHost: portswigger.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://portswigger.net/burp\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: AWSALBAPP-0=_remove_; AWSALBAPP-1=_remove_; AWSALBAPP-2=_remove_; AWSALBAPP-3=_remove_; SessionId=CfDJ8CpVwA%2BqwKBGh8%2FJi2OaZZfocwpeuNkyjQQDSGFVKka1%2BPmv8yTbITpCvlGv2Z6w3kj2To6LiKXglvVdD%2F5xgkKdTU0%2BMQxsgptPxJcLJFrALZzHtUg0wN6GfCsFfeEFZdrnk5sGtVlc9EjKznPlVsNva0wTq6SEAJ5Eo6cJkR0u\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/webp\r\ncontent-length: 7749\r\ndate: Thu, 19 Mar 2026 12:29:28 GMT\r\nserver: '; DELETE carlos FROM users --\r\ncache-control: public, max-age=60\r\nstrict-transport-security: max-age=31536000; preload\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\ncontent-security-policy: default-src 'none';form-action 'self';base-uri 'none';child-src 'self' https://www.youtube.com/embed/;connect-src 'self' https://ps.containers.piwik.pro https://ps.piwik.pro https://tags.srv.stackadapt.com https://go.portswigger.net https://tracking-api.g2.com https://www.google.com/recaptcha/ https://formsubmission.portswigger.net;font-src 'self' https://fonts.gstatic.com data:;frame-src 'self' https://www.youtube.com/embed/ https://www.google.com/recaptcha/;img-src 'self' https://i.ytimg.com/ https://tags.srv.stackadapt.com/sa.jpeg;media-src 'self' https://d21v5rjx8s17cr.cloudfront.net/ https://d2gl1b374o3yzk.cloudfront.net/;script-src 'self' https://ps.containers.piwik.pro/ppms.js https://ps.piwik.pro/ppms.js https://www.youtube.com/iframe_api https://www.youtube.com/s/player/ https://tags.srv.stackadapt.com/events.js https://go.portswigger.net/pd.js 'nonce-h65vixk7Q85Y5Kq8YX6T42Mo3tW+HCIn' 'strict-dynamic';style-src 'self' https://tags.srv.stackadapt.com/sa.css 'nonce-h65vixk7Q85Y5Kq8YX6T42Mo3tW+HCIn' https://fonts.googleapis.com/css2* https://unpkg.com/animate.css@4.1.1/animate.css https://unpkg.com/@teleporthq/teleport-custom-scripts/dist/style.css;\r\ncross-origin-resource-policy: same-site\r\ncross-origin-opener-policy: same-origin\r\nx-hiring-now: We're on a mission to secure the web: https://portswigger.net/careers\r\nx-powered-by: Express\r\nx-robots-tag: all\r\nset-cookie: AWSALBAPP-0=_remove_; Expires=Thu, 26 Mar 2026 12:29:28 GMT; Path=/\nAWSALBAPP-1=_remove_; Expires=Thu, 26 Mar 2026 12:29:28 GMT; Path=/\nAWSALBAPP-2=_remove_; Expires=Thu, 26 Mar 2026 12:29:28 GMT; Path=/\nAWSALBAPP-3=_remove_; Expires=Thu, 26 Mar 2026 12:29:28 GMT; Path=/\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 07b1d101035e34f82920833b00a4e896.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P2\r\nx-amz-cf-id: 3qTsZUT27o651YXSW8v9E8Rd91Yc3xyQ_OrHhNwRGtTqSvlUdedcBw==\r\nage: 39\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7749,"size_decoded":0,"mime_type":"image/webp","magic":"PNG image data, 240 x 180, 8-bit colormap, non-interlaced","md5":"01e50171786831d07bd024053c1c2189","sha1":"8fe8211ac1214bddbaac89849979e5439dee0fe7","sha256":"6656ac9aa30c428c9026ff91636f6ee74ffd8ff645a56499f40832b9b83c2f97","sha512":"8ff138057dc9b64eac393dd77e5052aa23ee87b723c160fc2b065dfa4359dad4b2068952fb7361371632b9eae39a73d08598918c7db2814f4bf30590e79526df","ssdeep":"192:vdrwRB/sMTK5TCpTkQAYm6YiD2ta1BaAx0z9l:9+BEKK1CpTkOm6f6tQBDxC","tlshash":"7df19e37ce7f60cad3ca3210a4a3e26c0da55faa43c6df5f5e059502498e09b120cb9d","first_seen":"2026-01-27T05:06:59.99802Z","last_seen":"2026-03-19T12:30:20.871109Z","times_seen":2,"resource_available":false,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"unpkg.com/@teleporthq/teleport-custom-scripts@0.0.30/dist/style.css","fqdn":"unpkg.com","domain":"unpkg.com","tld":"com"},"ip":{"addr":"104.18.1.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://portswigger.net/burp","date":"2026-03-19T12:30:07.776Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"unpkg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 18 Feb 2026 08:16:48 GMT","end":"Tue, 19 May 2026 09:15:09 GMT"},"fingerprint":{"sha1":"F3:CF:0B:A3:28:07:E9:5A:D0:8B:F4:9E:A8:A1:9B:71:A6:59:38:23","sha256":"DD:EE:6D:62:AC:D0:59:11:F9:1C:53:44:27:F0:8B:A5:2C:A2:C6:C4:BF:B8:79:AF:A5:5F:B3:E1:29:E8:45:8E"}}},"request":{"raw":"GET /@teleporthq/teleport-custom-scripts@0.0.30/dist/style.css HTTP/1.1\r\nHost: unpkg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://portswigger.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 19 Mar 2026 12:30:07 GMT\r\ncontent-type: text/css\r\ncf-ray: 9dec7c929b15c759-OSL\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\naccess-control-allow-origin: *\r\nage: 623631\r\ncache-control: public, max-age=31536000\r\nexpires: Fri, 19 Mar 2027 12:30:07 GMT\r\nlast-modified: Mon, 23 Feb 2026 17:46:29 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nvia: 1.1 fly.io, 1.1 fly.io\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-expose-headers: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\ncontent-digest: sha256=:plciLDImtu6GVtXlJDuxDIYqp/UTdyhO5GhdeJ3WGxY=:\r\nfly-request-id: 01KJ5SR5X82KJY1F1GZW7PYE22-fra\r\ncontent-encoding: gzip\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Fly.io","description":"Fly is a platform for running full stack apps and databases.","website":"https://fly.io","common_platform_enumeration":"","icon":"Fly.io.png","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":16663,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (2240)","md5":"56d8eff451b65d4135e35f433d5d961b","sha1":"93f6ce6c6f3053955b91d41fc663fbaf7570da81","sha256":"a657222c3226b6ee8656d5e5243bb10c862aa7f51377284ee4685d789dd61b16","sha512":"96338df0a83eb88e4d70dcc47d40f608c61c9bed8d09c7c78e76d220db03245c17725b6d294e5168045e24101388832df23c919a7deb7df46299d7d3d8737a8e","ssdeep":"192:g0CmUJbiKneQsqsefeY43QKE4bRswwMcm3pqWqhUfX4zSb0OdULiAChwWP7:gQUbeQ7hmZ3/E4b73pTqh3zKWNClz","tlshash":"b472e1d853b0181363174e7a26728774eab858810787dd79e1c06c88dffa9fc632f669","first_seen":"2024-02-16T03:47:21Z","last_seen":"2026-04-04T10:53:10.347391Z","times_seen":100,"resource_available":false,"data":null}},"time_used":72,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":72,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"go.portswigger.net/analytics?ver=3\u0026visitor_id=\u0026visitor_id_sign=\u0026pi_opt_in=\u0026campaign_id=null\u0026account_id=1067743\u0026title=Burp%20-%20Web%20Application%20Security%2C%20Testing%2C%20%26%20Scanning%20-%20PortSwigger\u0026url=https%3A%2F%2Fportswigger.net%2Fburp\u0026referrer=http%3A%2F%2Fburpcollaborator.net%2F","fqdn":"go.portswigger.net","domain":"portswigger.net","tld":"net"},"ip":{"addr":"52.54.96.194","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://portswigger.net/burp","date":"2026-03-19T12:30:08.942Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"go.portswigger.net","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Feb 2026 11:26:30 GMT","end":"Fri, 22 May 2026 11:26:29 GMT"},"fingerprint":{"sha1":"22:E3:09:29:0B:97:A0:BF:76:90:92:19:62:C3:D6:77:6E:98:89:DB","sha256":"33:61:D2:D5:58:1E:3B:10:89:D7:41:8D:B3:23:54:B2:B2:29:C6:B9:96:58:A5:40:FD:81:4B:98:59:02:29:FF"}}},"request":{"raw":"GET /analytics?ver=3\u0026visitor_id=\u0026visitor_id_sign=\u0026pi_opt_in=\u0026campaign_id=null\u0026account_id=1067743\u0026title=Burp%20-%20Web%20Application%20Security%2C%20Testing%2C%20%26%20Scanning%20-%20PortSwigger\u0026url=https%3A%2F%2Fportswigger.net%2Fburp\u0026referrer=http%3A%2F%2Fburpcollaborator.net%2F HTTP/1.1\r\nHost: go.portswigger.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://portswigger.net/\r\nCookie: SessionId=CfDJ8CpVwA%2BqwKBGh8%2FJi2OaZZfocwpeuNkyjQQDSGFVKka1%2BPmv8yTbITpCvlGv2Z6w3kj2To6LiKXglvVdD%2F5xgkKdTU0%2BMQxsgptPxJcLJFrALZzHtUg0wN6GfCsFfeEFZdrnk5sGtVlc9EjKznPlVsNva0wTq6SEAJ5Eo6cJkR0u; _gcl_au=1.1.1621478583.1773923409\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Thu, 19 Mar 2026 12:30:09 GMT\r\nContent-Type: text/javascript; charset=utf-8\r\nContent-Length: 115\r\nConnection: keep-alive\r\nset-cookie: pardot=deleted; expires=Thu, 01 Jan 1970 00:00:01 GMT; Max-Age=0\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\nx-pardot-rsp: 0/0/1\r\np3p: CP=\"CAO DSP AND SO ON\" policyref=\"/w3c/p3p.xml\", CP=\"NOI DSP COR CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT\", policyref=\"/w3c/p3p.xml\"\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\nX-Pardot-Route: 9b06e8e2308c32c7bf9ba8adfb7be2e1\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Salesforce Marketing Cloud Account Engagement","description":"Salesforce Marketing Cloud Account Engagement (formerly known as Pardot) is an application specifically designed for B2B marketing automation.","website":"https://www.salesforce.com/products/marketing-cloud/marketing-automation","common_platform_enumeration":"","icon":"Salesforce.svg","categories":["Marketing automation"]}],"data":{"size":135,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text","md5":"ea82b797c47096a27a1c5fd824ccaccf","sha1":"aff61f9b14f29e879eee7d052b726b94dad45bc9","sha256":"d4078edea69ca54701b1653a3a1e1ea76d74f4e804ffc9e713faac2c8cb5b3d7","sha512":"4bfa99f49a7b9cb834ad45a6e332e097fc901ebbcb3bb1105bf709b14daf8395deca74d636027da666e7e052bb914824f0e9b77fc7ee49d37443daabcdfafcbd","ssdeep":"","tlshash":"c2c02b0c390a510e90230cd8140a0c443907150ebfc2d0024b14cae0847515abe0003f","first_seen":"2025-10-13T19:22:23.557806Z","last_seen":"2026-03-19T12:30:20.886235Z","times_seen":5,"resource_available":true,"data":null}},"time_used":230,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":230,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"portswigger.net/public/Navigation/navigation-solutions-300w.webp","fqdn":"portswigger.net","domain":"portswigger.net","tld":"net"},"ip":{"addr":"3.164.240.86","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://portswigger.net/burp","date":"2026-03-19T12:30:07.227Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"portswigger.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Mon, 02 Mar 2026 00:00:00 GMT","end":"Tue, 15 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"EF:6D:90:97:A0:2D:B2:62:86:7A:16:70:DA:AC:7E:12:F1:59:C1:95","sha256":"5B:54:DD:9F:7D:8D:35:79:19:1E:C6:93:BA:32:13:5D:E1:D6:DB:7E:4A:47:D4:5B:D4:25:74:DF:95:CE:14:C9"}}},"request":{"raw":"GET /public/Navigation/navigation-solutions-300w.webp HTTP/1.1\r\nHost: portswigger.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://portswigger.net/burp\r\nCookie: AWSALBAPP-0=_remove_; AWSALBAPP-1=_remove_; AWSALBAPP-2=_remove_; AWSALBAPP-3=_remove_; SessionId=CfDJ8CpVwA%2BqwKBGh8%2FJi2OaZZfocwpeuNkyjQQDSGFVKka1%2BPmv8yTbITpCvlGv2Z6w3kj2To6LiKXglvVdD%2F5xgkKdTU0%2BMQxsgptPxJcLJFrALZzHtUg0wN6GfCsFfeEFZdrnk5sGtVlc9EjKznPlVsNva0wTq6SEAJ5Eo6cJkR0u\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\nlocation: https://portswigger.net/public/navigation/navigation-solutions-300w.webp\r\ndate: Thu, 19 Mar 2026 12:30:07 GMT\r\nset-cookie: AWSALBAPP-0=_remove_; Expires=Thu, 26 Mar 2026 12:30:07 GMT; Path=/\nAWSALBAPP-1=_remove_; Expires=Thu, 26 Mar 2026 12:30:07 GMT; Path=/\nAWSALBAPP-2=_remove_; Expires=Thu, 26 Mar 2026 12:30:07 GMT; Path=/\nAWSALBAPP-3=_remove_; Expires=Thu, 26 Mar 2026 12:30:07 GMT; Path=/\r\nserver: Kestrel\r\ncache-control: no-store, no-cache, s-maxage=0, private\r\nstrict-transport-security: max-age=31536000; preload\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 07b1d101035e34f82920833b00a4e896.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P2\r\nx-amz-cf-id: FjgOmdBlaI9MhjeXrlUNAeEOkh6IiMPqo-ZkJBWNXGe1OG3IcB7TCg==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Kestrel","description":"","website":"https://docs.microsoft.com/en-us/aspnet/core/fundamentals/servers/kestrel","common_platform_enumeration":"","icon":"kestrel.svg","categories":["Web servers"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5582,"size_decoded":0,"mime_type":"image/webp","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T00:47:03.388486Z","times_seen":13352920,"resource_available":true,"data":null}},"time_used":161,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":161,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"portswigger.net/public/Logos/Light/web-security-academy-200h.webp","fqdn":"portswigger.net","domain":"portswigger.net","tld":"net"},"ip":{"addr":"3.164.240.86","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://portswigger.net/burp","date":"2026-03-19T12:30:07.243Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"portswigger.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Mon, 02 Mar 2026 00:00:00 GMT","end":"Tue, 15 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"EF:6D:90:97:A0:2D:B2:62:86:7A:16:70:DA:AC:7E:12:F1:59:C1:95","sha256":"5B:54:DD:9F:7D:8D:35:79:19:1E:C6:93:BA:32:13:5D:E1:D6:DB:7E:4A:47:D4:5B:D4:25:74:DF:95:CE:14:C9"}}},"request":{"raw":"GET /public/Logos/Light/web-security-academy-200h.webp HTTP/1.1\r\nHost: portswigger.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://portswigger.net/burp\r\nCookie: AWSALBAPP-0=_remove_; AWSALBAPP-1=_remove_; AWSALBAPP-2=_remove_; AWSALBAPP-3=_remove_; SessionId=CfDJ8CpVwA%2BqwKBGh8%2FJi2OaZZfocwpeuNkyjQQDSGFVKka1%2BPmv8yTbITpCvlGv2Z6w3kj2To6LiKXglvVdD%2F5xgkKdTU0%2BMQxsgptPxJcLJFrALZzHtUg0wN6GfCsFfeEFZdrnk5sGtVlc9EjKznPlVsNva0wTq6SEAJ5Eo6cJkR0u\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\nlocation: https://portswigger.net/public/logos/light/web-security-academy-200h.webp\r\ndate: Thu, 19 Mar 2026 12:30:07 GMT\r\nset-cookie: AWSALBAPP-0=_remove_; Expires=Thu, 26 Mar 2026 12:30:07 GMT; Path=/\nAWSALBAPP-1=_remove_; Expires=Thu, 26 Mar 2026 12:30:07 GMT; Path=/\nAWSALBAPP-2=_remove_; Expires=Thu, 26 Mar 2026 12:30:07 GMT; Path=/\nAWSALBAPP-3=_remove_; Expires=Thu, 26 Mar 2026 12:30:07 GMT; Path=/\r\nserver: Kestrel\r\ncache-control: no-store, no-cache, s-maxage=0, private\r\nstrict-transport-security: max-age=31536000; preload\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 07b1d101035e34f82920833b00a4e896.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P2\r\nx-amz-cf-id: J1CICF1LcdjWfcpu5pEwkX8PxvjnxDnd_q-hOL8UsBK3lErdni-GZQ==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Kestrel","description":"","website":"https://docs.microsoft.com/en-us/aspnet/core/fundamentals/servers/kestrel","common_platform_enumeration":"","icon":"kestrel.svg","categories":["Web servers"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":5392,"size_decoded":0,"mime_type":"image/webp","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T00:47:03.388486Z","times_seen":13352920,"resource_available":true,"data":null}},"time_used":147,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":147,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"portswigger.net/public/Logos/Light/portswigger-200h.webp","fqdn":"portswigger.net","domain":"portswigger.net","tld":"net"},"ip":{"addr":"3.164.240.86","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://portswigger.net/burp","date":"2026-03-19T12:30:07.244Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"portswigger.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Mon, 02 Mar 2026 00:00:00 GMT","end":"Tue, 15 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"EF:6D:90:97:A0:2D:B2:62:86:7A:16:70:DA:AC:7E:12:F1:59:C1:95","sha256":"5B:54:DD:9F:7D:8D:35:79:19:1E:C6:93:BA:32:13:5D:E1:D6:DB:7E:4A:47:D4:5B:D4:25:74:DF:95:CE:14:C9"}}},"request":{"raw":"GET /public/Logos/Light/portswigger-200h.webp HTTP/1.1\r\nHost: portswigger.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://portswigger.net/burp\r\nCookie: AWSALBAPP-0=_remove_; AWSALBAPP-1=_remove_; AWSALBAPP-2=_remove_; AWSALBAPP-3=_remove_; SessionId=CfDJ8CpVwA%2BqwKBGh8%2FJi2OaZZfocwpeuNkyjQQDSGFVKka1%2BPmv8yTbITpCvlGv2Z6w3kj2To6LiKXglvVdD%2F5xgkKdTU0%2BMQxsgptPxJcLJFrALZzHtUg0wN6GfCsFfeEFZdrnk5sGtVlc9EjKznPlVsNva0wTq6SEAJ5Eo6cJkR0u\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\nlocation: https://portswigger.net/public/logos/light/portswigger-200h.webp\r\ndate: Thu, 19 Mar 2026 12:30:07 GMT\r\nset-cookie: AWSALBAPP-0=_remove_; Expires=Thu, 26 Mar 2026 12:30:07 GMT; Path=/\nAWSALBAPP-1=_remove_; Expires=Thu, 26 Mar 2026 12:30:07 GMT; Path=/\nAWSALBAPP-2=_remove_; Expires=Thu, 26 Mar 2026 12:30:07 GMT; Path=/\nAWSALBAPP-3=_remove_; Expires=Thu, 26 Mar 2026 12:30:07 GMT; Path=/\r\nserver: Kestrel\r\ncache-control: no-store, no-cache, s-maxage=0, private\r\nstrict-transport-security: max-age=31536000; preload\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 07b1d101035e34f82920833b00a4e896.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P2\r\nx-amz-cf-id: GcSbAllt9IS_c3LUZ4AIna9PDi6BEKlUPv2Raa56xHRpGeOrRulOaw==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Kestrel","description":"","website":"https://docs.microsoft.com/en-us/aspnet/core/fundamentals/servers/kestrel","common_platform_enumeration":"","icon":"kestrel.svg","categories":["Web servers"]}],"data":{"size":2791,"size_decoded":0,"mime_type":"image/webp","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T00:47:03.388486Z","times_seen":13352920,"resource_available":true,"data":null}},"time_used":146,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":146,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tracking-api.g2.com/attribution_tracking/conversions/1030070.js?p=https://portswigger.net/burp\u0026e=","fqdn":"tracking-api.g2.com","domain":"g2.com","tld":"com"},"ip":{"addr":"104.16.189.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://portswigger.net/burp","date":"2026-03-19T12:30:08.279Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tracking-api.g2.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 07 Mar 2026 11:56:17 GMT","end":"Fri, 05 Jun 2026 12:56:14 GMT"},"fingerprint":{"sha1":"88:7D:99:65:ED:86:48:B5:9A:0D:1E:2C:FF:ED:3E:FA:95:10:CB:BF","sha256":"2D:A1:FF:F7:85:9C:73:E5:04:98:65:0A:37:FA:2B:32:66:06:9A:46:00:1F:9A:5B:01:2D:D9:E4:A9:E6:E8:00"}}},"request":{"raw":"GET /attribution_tracking/conversions/1030070.js?p=https://portswigger.net/burp\u0026e= HTTP/1.1\r\nHost: tracking-api.g2.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://portswigger.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 19 Mar 2026 12:30:08 GMT\r\ncontent-type: text/javascript;charset=UTF-8\r\naccess-control-allow-origin: *\r\ncontent-disposition: inline\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nvary: Origin, accept-encoding\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: cross-origin\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nserver-timing: cloudflare_ended_at;desc=1773923408389\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\nset-cookie: __cf_bm=jO52oE3rlKrjGYhBNwdXzRj1VgLY8.fnC5gPLnJ8asw-1773923408.3139856-1.0.1.1-ftfXIA5dx5R3lvfthW0iJHds8yWtdgd8FEi4FITD_1AFMsfaOEGLUs1wlkFpni3WO_uWZNEIWioiKAB8r9eyp_tHnln.vFpDmjBEcc2xGgmZggNGsE1C_GggSbYh8.g5; HttpOnly; Secure; Path=/; Domain=g2.com; Expires=Thu, 19 Mar 2026 13:00:08 GMT\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9dec7c95fbbddfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3559,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (3557), with no line terminators","md5":"740c02d0cf95c390d39962c7adc0f0b2","sha1":"0cf87450d4bbaab2af4d58ce08e63e3eb831331f","sha256":"0fbdac9a4897181846d446837fc89ae4cde10e2329c8484a4c9dc2709bff3841","sha512":"84584202bfff024603351b5df71ce428578d05ff5fe4d44faa63c439eed86c388a2d8b40ee1d07b3d15ac570a9feb4fad1603b4a7c42b9a017908b758ea0d005","ssdeep":"","tlshash":"0b71b97d29e5b43645b223c60763b610b23e016c7a9490a0b56e58d5352a45fc3b3fdd","first_seen":"2026-03-19T12:30:20.888785Z","last_seen":"2026-03-19T12:30:20.888785Z","times_seen":1,"resource_available":true,"data":null}},"time_used":162,"timings":{"blocked":31,"dns":14,"connect":1,"send":0,"wait":99,"receive":0,"ssl":14},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"go.portswigger.net/pd.js","fqdn":"go.portswigger.net","domain":"portswigger.net","tld":"net"},"ip":{"addr":"52.54.96.194","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://portswigger.net/burp","date":"2026-03-19T12:30:08.496Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"go.portswigger.net","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Feb 2026 11:26:30 GMT","end":"Fri, 22 May 2026 11:26:29 GMT"},"fingerprint":{"sha1":"22:E3:09:29:0B:97:A0:BF:76:90:92:19:62:C3:D6:77:6E:98:89:DB","sha256":"33:61:D2:D5:58:1E:3B:10:89:D7:41:8D:B3:23:54:B2:B2:29:C6:B9:96:58:A5:40:FD:81:4B:98:59:02:29:FF"}}},"request":{"raw":"GET /pd.js HTTP/1.1\r\nHost: go.portswigger.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://portswigger.net/\r\nCookie: SessionId=CfDJ8CpVwA%2BqwKBGh8%2FJi2OaZZfocwpeuNkyjQQDSGFVKka1%2BPmv8yTbITpCvlGv2Z6w3kj2To6LiKXglvVdD%2F5xgkKdTU0%2BMQxsgptPxJcLJFrALZzHtUg0wN6GfCsFfeEFZdrnk5sGtVlc9EjKznPlVsNva0wTq6SEAJ5Eo6cJkR0u\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Thu, 19 Mar 2026 12:30:08 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 1988\r\nConnection: keep-alive\r\nlast-modified: Wed, 18 Mar 2026 15:55:53 GMT\r\netag: \"15f4-gzip\"\r\naccept-ranges: bytes\r\ncache-control: max-age=63072000\r\nexpires: Sat, 18 Mar 2028 12:30:08 GMT\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\nX-Pardot-Route: e8229a0ff18ebffc83a98010d2521dd5\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Salesforce Marketing Cloud Account Engagement","description":"Salesforce Marketing Cloud Account Engagement (formerly known as Pardot) is an application specifically designed for B2B marketing automation.","website":"https://www.salesforce.com/products/marketing-cloud/marketing-automation","common_platform_enumeration":"","icon":"Salesforce.svg","categories":["Marketing automation"]}],"data":{"size":5620,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (5453)","md5":"0c0335550002dc4c4db0de1d9dcf043d","sha1":"0bd0357faa46e9ff78d939b196d43ed47c701160","sha256":"41402adfc915ad6dfd6328c06c8038763d25fe603e63beba4a2638a2bbc03136","sha512":"449683e6a927848f403214c49705a91d54a880d4da605f2e7b3fc52bf178c7475ca6131fad823a6aead84a1eb4a3e0501b122900c97241ce620ab45330861f12","ssdeep":"96:3DvZ6XcSBguSMe+8gGVU74cgqb6Ys7v4/q1ykQ7KjcBWXDylZP259N8gvwx3Ug8:zvZMcSy/PglLiZBQ7KIBW2lZ259Srxh8","tlshash":"70c16498fd94d4b6417b059930bfd6bcb23c57b1340d9150d2b8cab4346cd322b92e6d","first_seen":"2023-04-14T17:45:12Z","last_seen":"2026-04-05T01:02:00.750065Z","times_seen":10690,"resource_available":true,"data":null}},"time_used":744,"timings":{"blocked":321,"dns":119,"connect":98,"send":0,"wait":100,"receive":1,"ssl":102},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"portswigger.net/content/images/logos/apple-touch-icon.png","fqdn":"portswigger.net","domain":"portswigger.net","tld":"net"},"ip":{"addr":"3.164.240.86","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://portswigger.net/burp","date":"2026-03-19T12:30:08.021Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"portswigger.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Mon, 02 Mar 2026 00:00:00 GMT","end":"Tue, 15 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"EF:6D:90:97:A0:2D:B2:62:86:7A:16:70:DA:AC:7E:12:F1:59:C1:95","sha256":"5B:54:DD:9F:7D:8D:35:79:19:1E:C6:93:BA:32:13:5D:E1:D6:DB:7E:4A:47:D4:5B:D4:25:74:DF:95:CE:14:C9"}}},"request":{"raw":"GET /content/images/logos/apple-touch-icon.png HTTP/1.1\r\nHost: portswigger.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://portswigger.net/burp\r\nCookie: AWSALBAPP-0=_remove_; AWSALBAPP-1=_remove_; AWSALBAPP-2=_remove_; AWSALBAPP-3=_remove_; SessionId=CfDJ8CpVwA%2BqwKBGh8%2FJi2OaZZfocwpeuNkyjQQDSGFVKka1%2BPmv8yTbITpCvlGv2Z6w3kj2To6LiKXglvVdD%2F5xgkKdTU0%2BMQxsgptPxJcLJFrALZzHtUg0wN6GfCsFfeEFZdrnk5sGtVlc9EjKznPlVsNva0wTq6SEAJ5Eo6cJkR0u\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\ncontent-length: 4052\r\ndate: Thu, 12 Mar 2026 08:41:46 GMT\r\nserver: Kestrel\r\naccept-ranges: bytes\r\ncache-control: must-revalidate, max-age=0, s-maxage=31536000\r\netag: \"1dcb16e8cbd3fd4\"\r\nlast-modified: Wed, 11 Mar 2026 15:48:48 GMT\r\nstrict-transport-security: max-age=31536000; preload\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\ncontent-security-policy: default-src 'none';form-action 'self';base-uri 'none';child-src 'self' https://www.youtube.com/embed/;connect-src 'self' https://ps.containers.piwik.pro https://ps.piwik.pro https://tags.srv.stackadapt.com https://go.portswigger.net https://tracking-api.g2.com https://www.google.com/recaptcha/ https://formsubmission.portswigger.net;font-src 'self' https://fonts.gstatic.com data:;frame-src 'self' https://www.youtube.com/embed/ https://www.google.com/recaptcha/;img-src 'self' https://i.ytimg.com/ https://tags.srv.stackadapt.com/sa.jpeg;media-src 'self' https://d21v5rjx8s17cr.cloudfront.net/ https://d2gl1b374o3yzk.cloudfront.net/;script-src 'self' https://ps.containers.piwik.pro/ppms.js https://ps.piwik.pro/ppms.js https://www.youtube.com/iframe_api https://www.youtube.com/s/player/ https://tags.srv.stackadapt.com/events.js https://go.portswigger.net/pd.js 'nonce-zKgJ8hvXvT63SYXtR0d+ZPF0x/5ACII7' 'strict-dynamic';style-src 'self' https://tags.srv.stackadapt.com/sa.css 'nonce-zKgJ8hvXvT63SYXtR0d+ZPF0x/5ACII7' https://fonts.googleapis.com/css2* https://unpkg.com/animate.css@4.1.1/animate.css https://unpkg.com/@teleporthq/teleport-custom-scripts/dist/style.css;\r\ncross-origin-resource-policy: same-site\r\ncross-origin-opener-policy: same-origin\r\nset-cookie: AWSALBAPP-0=_remove_; Expires=Thu, 19 Mar 2026 08:41:46 GMT; Path=/\nAWSALBAPP-1=_remove_; Expires=Thu, 19 Mar 2026 08:41:46 GMT; Path=/\nAWSALBAPP-2=_remove_; Expires=Thu, 19 Mar 2026 08:41:46 GMT; Path=/\nAWSALBAPP-3=_remove_; Expires=Thu, 19 Mar 2026 08:41:46 GMT; Path=/\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 07b1d101035e34f82920833b00a4e896.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P2\r\nx-amz-cf-id: 6oLHBccUvY002y61si-pP5pwneoJJII33gG9z6Gc2_bSZ5DejeW3oQ==\r\nage: 618502\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Kestrel","description":"","website":"https://docs.microsoft.com/en-us/aspnet/core/fundamentals/servers/kestrel","common_platform_enumeration":"","icon":"kestrel.svg","categories":["Web servers"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":4052,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced","md5":"e525ae05004cc67a19cc7578b8846558","sha1":"7a5fbbd36d91044b52ba7e54090b19a491178391","sha256":"459a9ad5c3b77e099e105d38e1022c9f7f52508ad570f95a5a31b16d659317c4","sha512":"fc30d8df5ee462fcef9ae0cbf4c940697268ab53ba4dfbcdf386d4d3b26d0f4ec67b4bffc05cf1be9d37cc820de7cc2d7f9992e9d9b7fe36544740a87cc1ae4c","ssdeep":"","tlshash":"eb8107c6e102dc150e77da0504e37b730ff75b908aa2f5826ccfc44f94f28a28809781","first_seen":"2025-01-30T20:43:33.242523Z","last_seen":"2026-03-19T12:30:20.892456Z","times_seen":21,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":14,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"portswigger.net/public/Navigation/navigation-products-300w.webp","fqdn":"portswigger.net","domain":"portswigger.net","tld":"net"},"ip":{"addr":"3.164.240.86","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://portswigger.net/burp","date":"2026-03-19T12:30:07.225Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"portswigger.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Mon, 02 Mar 2026 00:00:00 GMT","end":"Tue, 15 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"EF:6D:90:97:A0:2D:B2:62:86:7A:16:70:DA:AC:7E:12:F1:59:C1:95","sha256":"5B:54:DD:9F:7D:8D:35:79:19:1E:C6:93:BA:32:13:5D:E1:D6:DB:7E:4A:47:D4:5B:D4:25:74:DF:95:CE:14:C9"}}},"request":{"raw":"GET /public/Navigation/navigation-products-300w.webp HTTP/1.1\r\nHost: portswigger.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://portswigger.net/burp\r\nCookie: AWSALBAPP-0=_remove_; AWSALBAPP-1=_remove_; AWSALBAPP-2=_remove_; AWSALBAPP-3=_remove_; SessionId=CfDJ8CpVwA%2BqwKBGh8%2FJi2OaZZfocwpeuNkyjQQDSGFVKka1%2BPmv8yTbITpCvlGv2Z6w3kj2To6LiKXglvVdD%2F5xgkKdTU0%2BMQxsgptPxJcLJFrALZzHtUg0wN6GfCsFfeEFZdrnk5sGtVlc9EjKznPlVsNva0wTq6SEAJ5Eo6cJkR0u\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\nlocation: https://portswigger.net/public/navigation/navigation-products-300w.webp\r\ndate: Thu, 19 Mar 2026 12:30:07 GMT\r\nset-cookie: AWSALBAPP-0=_remove_; Expires=Thu, 26 Mar 2026 12:30:07 GMT; Path=/\nAWSALBAPP-1=_remove_; Expires=Thu, 26 Mar 2026 12:30:07 GMT; Path=/\nAWSALBAPP-2=_remove_; Expires=Thu, 26 Mar 2026 12:30:07 GMT; Path=/\nAWSALBAPP-3=_remove_; Expires=Thu, 26 Mar 2026 12:30:07 GMT; Path=/\r\nserver: Kestrel\r\ncache-control: no-store, no-cache, s-maxage=0, private\r\nstrict-transport-security: max-age=31536000; preload\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 07b1d101035e34f82920833b00a4e896.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P2\r\nx-amz-cf-id: AeNHwTNaJdZEEisl8bWIjuJtYgnlWMvR3e7ouSoBBlPuru01psPXXA==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Kestrel","description":"","website":"https://docs.microsoft.com/en-us/aspnet/core/fundamentals/servers/kestrel","common_platform_enumeration":"","icon":"kestrel.svg","categories":["Web servers"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":6074,"size_decoded":0,"mime_type":"image/webp","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T00:47:03.388486Z","times_seen":13352920,"resource_available":true,"data":null}},"time_used":150,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":150,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"portswigger.net/public/Pages/Home/burp-suite-home-1-300w-400h.webp","fqdn":"portswigger.net","domain":"portswigger.net","tld":"net"},"ip":{"addr":"3.164.240.86","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://portswigger.net/burp","date":"2026-03-19T12:30:07.239Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"portswigger.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Mon, 02 Mar 2026 00:00:00 GMT","end":"Tue, 15 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"EF:6D:90:97:A0:2D:B2:62:86:7A:16:70:DA:AC:7E:12:F1:59:C1:95","sha256":"5B:54:DD:9F:7D:8D:35:79:19:1E:C6:93:BA:32:13:5D:E1:D6:DB:7E:4A:47:D4:5B:D4:25:74:DF:95:CE:14:C9"}}},"request":{"raw":"GET /public/Pages/Home/burp-suite-home-1-300w-400h.webp HTTP/1.1\r\nHost: portswigger.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://portswigger.net/burp\r\nCookie: AWSALBAPP-0=_remove_; AWSALBAPP-1=_remove_; AWSALBAPP-2=_remove_; AWSALBAPP-3=_remove_; SessionId=CfDJ8CpVwA%2BqwKBGh8%2FJi2OaZZfocwpeuNkyjQQDSGFVKka1%2BPmv8yTbITpCvlGv2Z6w3kj2To6LiKXglvVdD%2F5xgkKdTU0%2BMQxsgptPxJcLJFrALZzHtUg0wN6GfCsFfeEFZdrnk5sGtVlc9EjKznPlVsNva0wTq6SEAJ5Eo6cJkR0u\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\nlocation: https://portswigger.net/public/pages/home/burp-suite-home-1-300w-400h.webp\r\ndate: Thu, 19 Mar 2026 12:30:07 GMT\r\nset-cookie: AWSALBAPP-0=_remove_; Expires=Thu, 26 Mar 2026 12:30:07 GMT; Path=/\nAWSALBAPP-1=_remove_; Expires=Thu, 26 Mar 2026 12:30:07 GMT; Path=/\nAWSALBAPP-2=_remove_; Expires=Thu, 26 Mar 2026 12:30:07 GMT; Path=/\nAWSALBAPP-3=_remove_; Expires=Thu, 26 Mar 2026 12:30:07 GMT; Path=/\r\nserver: Kestrel\r\ncache-control: no-store, no-cache, s-maxage=0, private\r\nstrict-transport-security: max-age=31536000; preload\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 07b1d101035e34f82920833b00a4e896.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P2\r\nx-amz-cf-id: XYH_CInEJv4TaoBIHJnQOA0NrQyRoVN_pn4o4MjbzSQdceAhxt8L-w==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Kestrel","description":"","website":"https://docs.microsoft.com/en-us/aspnet/core/fundamentals/servers/kestrel","common_platform_enumeration":"","icon":"kestrel.svg","categories":["Web servers"]}],"data":{"size":7749,"size_decoded":0,"mime_type":"image/webp","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T00:47:03.388486Z","times_seen":13352920,"resource_available":true,"data":null}},"time_used":149,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":149,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"portswigger.net/public/navigation/navigation-support-300w.webp","fqdn":"portswigger.net","domain":"portswigger.net","tld":"net"},"ip":{"addr":"3.164.240.86","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://portswigger.net/burp","date":"2026-03-19T12:30:07.406Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"portswigger.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Mon, 02 Mar 2026 00:00:00 GMT","end":"Tue, 15 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"EF:6D:90:97:A0:2D:B2:62:86:7A:16:70:DA:AC:7E:12:F1:59:C1:95","sha256":"5B:54:DD:9F:7D:8D:35:79:19:1E:C6:93:BA:32:13:5D:E1:D6:DB:7E:4A:47:D4:5B:D4:25:74:DF:95:CE:14:C9"}}},"request":{"raw":"GET /public/navigation/navigation-support-300w.webp HTTP/1.1\r\nHost: portswigger.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://portswigger.net/burp\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: AWSALBAPP-0=_remove_; AWSALBAPP-1=_remove_; AWSALBAPP-2=_remove_; AWSALBAPP-3=_remove_; SessionId=CfDJ8CpVwA%2BqwKBGh8%2FJi2OaZZfocwpeuNkyjQQDSGFVKka1%2BPmv8yTbITpCvlGv2Z6w3kj2To6LiKXglvVdD%2F5xgkKdTU0%2BMQxsgptPxJcLJFrALZzHtUg0wN6GfCsFfeEFZdrnk5sGtVlc9EjKznPlVsNva0wTq6SEAJ5Eo6cJkR0u\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/webp\r\ncontent-length: 2566\r\ndate: Thu, 19 Mar 2026 12:29:15 GMT\r\nserver: '; DELETE carlos FROM users --\r\ncache-control: public, max-age=60\r\nstrict-transport-security: max-age=31536000; preload\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\ncontent-security-policy: default-src 'none';form-action 'self';base-uri 'none';child-src 'self' https://www.youtube.com/embed/;connect-src 'self' https://ps.containers.piwik.pro https://ps.piwik.pro https://tags.srv.stackadapt.com https://go.portswigger.net https://tracking-api.g2.com https://www.google.com/recaptcha/ https://formsubmission.portswigger.net;font-src 'self' https://fonts.gstatic.com data:;frame-src 'self' https://www.youtube.com/embed/ https://www.google.com/recaptcha/;img-src 'self' https://i.ytimg.com/ https://tags.srv.stackadapt.com/sa.jpeg;media-src 'self' https://d21v5rjx8s17cr.cloudfront.net/ https://d2gl1b374o3yzk.cloudfront.net/;script-src 'self' https://ps.containers.piwik.pro/ppms.js https://ps.piwik.pro/ppms.js https://www.youtube.com/iframe_api https://www.youtube.com/s/player/ https://tags.srv.stackadapt.com/events.js https://go.portswigger.net/pd.js 'nonce-5gmmuVKo364wbSfrvMOCttvkNOoHMAbW' 'strict-dynamic';style-src 'self' https://tags.srv.stackadapt.com/sa.css 'nonce-5gmmuVKo364wbSfrvMOCttvkNOoHMAbW' https://fonts.googleapis.com/css2* https://unpkg.com/animate.css@4.1.1/animate.css https://unpkg.com/@teleporthq/teleport-custom-scripts/dist/style.css;\r\ncross-origin-resource-policy: same-site\r\ncross-origin-opener-policy: same-origin\r\nx-hiring-now: We're on a mission to secure the web: https://portswigger.net/careers\r\nx-powered-by: Express\r\nx-robots-tag: all\r\nset-cookie: AWSALBAPP-0=_remove_; Expires=Thu, 26 Mar 2026 12:29:15 GMT; Path=/\nAWSALBAPP-1=_remove_; Expires=Thu, 26 Mar 2026 12:29:15 GMT; Path=/\nAWSALBAPP-2=_remove_; Expires=Thu, 26 Mar 2026 12:29:15 GMT; Path=/\nAWSALBAPP-3=_remove_; Expires=Thu, 26 Mar 2026 12:29:15 GMT; Path=/\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 07b1d101035e34f82920833b00a4e896.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P2\r\nx-amz-cf-id: 4lhUImTc-yZUW7xhNnFabY9hO_St2GZunTsbXLZmk5vEfvoLBxN6oQ==\r\nage: 52\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":2566,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 209x162, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"1c6ad3e59269ee5d1cd9ca514764388d","sha1":"7e755f8ecdeb9813f6c5984365f469f7ff0a6b40","sha256":"3def51a39e23d8fe04e551fd6a1561c4655bafaa74dcd631cbda5128a412a541","sha512":"1e1bb227e8447b5e3ad73eede7739db619f9bc7db05bf70644f515c2e92127362f8ec7062dbf901198edd5141e39b58f40878120ace00ec88a184c57d8200d4b","ssdeep":"","tlshash":"5d515dce41373e9de1d39eaa78c6c52c64d5966374a37423e1569805cd0fcd46ef6480","first_seen":"2026-03-19T12:30:20.894609Z","last_seen":"2026-03-19T12:30:20.894609Z","times_seen":1,"resource_available":false,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":61,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"portswigger.net/public/Logos/Light/burp-suite-community-200h.webp","fqdn":"portswigger.net","domain":"portswigger.net","tld":"net"},"ip":{"addr":"3.164.240.86","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://portswigger.net/burp","date":"2026-03-19T12:30:07.240Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"portswigger.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Mon, 02 Mar 2026 00:00:00 GMT","end":"Tue, 15 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"EF:6D:90:97:A0:2D:B2:62:86:7A:16:70:DA:AC:7E:12:F1:59:C1:95","sha256":"5B:54:DD:9F:7D:8D:35:79:19:1E:C6:93:BA:32:13:5D:E1:D6:DB:7E:4A:47:D4:5B:D4:25:74:DF:95:CE:14:C9"}}},"request":{"raw":"GET /public/Logos/Light/burp-suite-community-200h.webp HTTP/1.1\r\nHost: portswigger.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://portswigger.net/burp\r\nCookie: AWSALBAPP-0=_remove_; AWSALBAPP-1=_remove_; AWSALBAPP-2=_remove_; AWSALBAPP-3=_remove_; SessionId=CfDJ8CpVwA%2BqwKBGh8%2FJi2OaZZfocwpeuNkyjQQDSGFVKka1%2BPmv8yTbITpCvlGv2Z6w3kj2To6LiKXglvVdD%2F5xgkKdTU0%2BMQxsgptPxJcLJFrALZzHtUg0wN6GfCsFfeEFZdrnk5sGtVlc9EjKznPlVsNva0wTq6SEAJ5Eo6cJkR0u\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\nlocation: https://portswigger.net/public/logos/light/burp-suite-community-200h.webp\r\ndate: Thu, 19 Mar 2026 12:30:07 GMT\r\nset-cookie: AWSALBAPP-0=_remove_; Expires=Thu, 26 Mar 2026 12:30:07 GMT; Path=/\nAWSALBAPP-1=_remove_; Expires=Thu, 26 Mar 2026 12:30:07 GMT; Path=/\nAWSALBAPP-2=_remove_; Expires=Thu, 26 Mar 2026 12:30:07 GMT; Path=/\nAWSALBAPP-3=_remove_; Expires=Thu, 26 Mar 2026 12:30:07 GMT; Path=/\r\nserver: Kestrel\r\ncache-control: no-store, no-cache, s-maxage=0, private\r\nstrict-transport-security: max-age=31536000; preload\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 07b1d101035e34f82920833b00a4e896.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P2\r\nx-amz-cf-id: Nvvo0_Dtxclh70YEnjPLj2ml_Z0tUj-mRGNcpzbewiy5keoVTEoQMw==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Kestrel","description":"","website":"https://docs.microsoft.com/en-us/aspnet/core/fundamentals/servers/kestrel","common_platform_enumeration":"","icon":"kestrel.svg","categories":["Web servers"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":3830,"size_decoded":0,"mime_type":"image/webp","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T00:47:03.388486Z","times_seen":13352920,"resource_available":true,"data":null}},"time_used":149,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":149,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"portswigger.net/public/illustrations/bsee-ci-burp-illy-1500w.webp","fqdn":"portswigger.net","domain":"portswigger.net","tld":"net"},"ip":{"addr":"3.164.240.86","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://portswigger.net/burp","date":"2026-03-19T12:30:07.434Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"portswigger.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Mon, 02 Mar 2026 00:00:00 GMT","end":"Tue, 15 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"EF:6D:90:97:A0:2D:B2:62:86:7A:16:70:DA:AC:7E:12:F1:59:C1:95","sha256":"5B:54:DD:9F:7D:8D:35:79:19:1E:C6:93:BA:32:13:5D:E1:D6:DB:7E:4A:47:D4:5B:D4:25:74:DF:95:CE:14:C9"}}},"request":{"raw":"GET /public/illustrations/bsee-ci-burp-illy-1500w.webp HTTP/1.1\r\nHost: portswigger.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://portswigger.net/burp\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: AWSALBAPP-0=_remove_; AWSALBAPP-1=_remove_; AWSALBAPP-2=_remove_; AWSALBAPP-3=_remove_; SessionId=CfDJ8CpVwA%2BqwKBGh8%2FJi2OaZZfocwpeuNkyjQQDSGFVKka1%2BPmv8yTbITpCvlGv2Z6w3kj2To6LiKXglvVdD%2F5xgkKdTU0%2BMQxsgptPxJcLJFrALZzHtUg0wN6GfCsFfeEFZdrnk5sGtVlc9EjKznPlVsNva0wTq6SEAJ5Eo6cJkR0u\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/webp\r\ncontent-length: 5328\r\ndate: Thu, 19 Mar 2026 12:29:28 GMT\r\nserver: '; DELETE carlos FROM users --\r\ncache-control: public, max-age=60\r\nstrict-transport-security: max-age=31536000; preload\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\ncontent-security-policy: default-src 'none';form-action 'self';base-uri 'none';child-src 'self' https://www.youtube.com/embed/;connect-src 'self' https://ps.containers.piwik.pro https://ps.piwik.pro https://tags.srv.stackadapt.com https://go.portswigger.net https://tracking-api.g2.com https://www.google.com/recaptcha/ https://formsubmission.portswigger.net;font-src 'self' https://fonts.gstatic.com data:;frame-src 'self' https://www.youtube.com/embed/ https://www.google.com/recaptcha/;img-src 'self' https://i.ytimg.com/ https://tags.srv.stackadapt.com/sa.jpeg;media-src 'self' https://d21v5rjx8s17cr.cloudfront.net/ https://d2gl1b374o3yzk.cloudfront.net/;script-src 'self' https://ps.containers.piwik.pro/ppms.js https://ps.piwik.pro/ppms.js https://www.youtube.com/iframe_api https://www.youtube.com/s/player/ https://tags.srv.stackadapt.com/events.js https://go.portswigger.net/pd.js 'nonce-dL9dLjjdB8siBuoAd+aPGG/+umaEi/48' 'strict-dynamic';style-src 'self' https://tags.srv.stackadapt.com/sa.css 'nonce-dL9dLjjdB8siBuoAd+aPGG/+umaEi/48' https://fonts.googleapis.com/css2* https://unpkg.com/animate.css@4.1.1/animate.css https://unpkg.com/@teleporthq/teleport-custom-scripts/dist/style.css;\r\ncross-origin-resource-policy: same-site\r\ncross-origin-opener-policy: same-origin\r\nx-hiring-now: We're on a mission to secure the web: https://portswigger.net/careers\r\nx-powered-by: Express\r\nx-robots-tag: all\r\nset-cookie: AWSALBAPP-0=_remove_; Expires=Thu, 26 Mar 2026 12:29:28 GMT; Path=/\nAWSALBAPP-1=_remove_; Expires=Thu, 26 Mar 2026 12:29:28 GMT; Path=/\nAWSALBAPP-2=_remove_; Expires=Thu, 26 Mar 2026 12:29:28 GMT; Path=/\nAWSALBAPP-3=_remove_; Expires=Thu, 26 Mar 2026 12:29:28 GMT; Path=/\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 07b1d101035e34f82920833b00a4e896.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P2\r\nx-amz-cf-id: WpXmSw469TRaXSpUseckMMj-psOwOuL7DXu_EuaG1I0U-uhA0IDEOA==\r\nage: 39\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5328,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 320x125, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"8b1bf4322d8fc097136ab5dd1949942e","sha1":"0cd3ef5f6994684d6c83dd9c1c9a9e3db3fe2a09","sha256":"039ebd8a08ef579f3c80ff355452f360aab5e4f733397d0a9e6b3c5dd1911aed","sha512":"6372ebefd889c294e5e40fe80b2109f66a6a5d63feea0f2b99b957256e84b050d17b0791f4a4c061d7a5f7c24ed6b9e1275de0b26c9327845fd44c330d6a2269","ssdeep":"96:LoZWn7b/pmOk/ElIJ6ogDxQC3koFQcJrVMK0SZT90JYFO0VVN2pUMrXnNvOOvz:LoZ67bkOk/ElSkQC0oFDrVMrS190JmMp","tlshash":"70b18e652bc346ca5692a144f4df472c220c4b3aa9dc238b6d7662f2903ff4551c9eef","first_seen":"2026-03-19T12:30:20.896528Z","last_seen":"2026-03-19T12:30:20.896528Z","times_seen":1,"resource_available":false,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":56,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ps.containers.piwik.pro/ppms.js","fqdn":"ps.containers.piwik.pro","domain":"piwik.pro","tld":"pro"},"ip":{"addr":"20.79.214.157","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://portswigger.net/burp","date":"2026-03-19T12:30:08.275Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.containers.piwik.pro","organization":""},"issuer":{"commonName":"GlobeSSL DV CA","organization":"CentralNic Luxembourg Sàrl"},"validity":{"start":"Wed, 03 Dec 2025 00:00:00 GMT","end":"Fri, 01 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"46:B8:70:0E:66:AB:33:6D:F7:60:53:16:38:E3:53:A9:AB:2B:2C:25","sha256":"26:9C:F0:19:8C:CF:FD:E7:3B:93:78:74:84:A2:EF:F7:9A:4B:E7:D7:E7:0B:EF:81:3B:54:36:5A:06:7C:0D:CA"}}},"request":{"raw":"GET /ppms.js HTTP/1.1\r\nHost: ps.containers.piwik.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://portswigger.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 19 Mar 2026 12:30:08 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 26 Feb 2026 08:52:08 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69a009b8-1066b\"\r\nexpires: Thu, 19 Mar 2026 18:30:08 GMT\r\ncache-control: max-age=21600\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin\r\nx-frame-options: sameorigin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":67179,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (797)","md5":"9b11c3dd372451664871fb291621767f","sha1":"1ac4da26fcb0204a6060f84f7d80782816da70a8","sha256":"c2fe09dd17506326eb35c973c0691fdf4d5b93dfb30a64f9de62542b64089da1","sha512":"b8a1cab7da4790d0c19a3e780a40132a3bee2ca7e14b3ac6f7c0952e16ec9b6ec5a9f0d5d16271350a399438be9e7d53ebcafc4cfa74caf82a39b9c779eec6a7","ssdeep":"1536:i2KkS47R0DjHGW2NR6OFYFdj3wm3k2kIpd/zNiM8mQrBGw+7B:V6DhiYka9NibQ","tlshash":"096307ad73c234365ae67878407f214ab23e999a784c94e8f086c4d53c78a9e1177f3d","first_seen":"2026-03-09T18:17:52.451598Z","last_seen":"2026-04-04T23:21:42.725382Z","times_seen":183,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"portswigger.net/public/Illustrations/bsp-burp-illy-1500w.webp","fqdn":"portswigger.net","domain":"portswigger.net","tld":"net"},"ip":{"addr":"3.164.240.86","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://portswigger.net/burp","date":"2026-03-19T12:30:07.233Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"portswigger.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Mon, 02 Mar 2026 00:00:00 GMT","end":"Tue, 15 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"EF:6D:90:97:A0:2D:B2:62:86:7A:16:70:DA:AC:7E:12:F1:59:C1:95","sha256":"5B:54:DD:9F:7D:8D:35:79:19:1E:C6:93:BA:32:13:5D:E1:D6:DB:7E:4A:47:D4:5B:D4:25:74:DF:95:CE:14:C9"}}},"request":{"raw":"GET /public/Illustrations/bsp-burp-illy-1500w.webp HTTP/1.1\r\nHost: portswigger.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://portswigger.net/burp\r\nCookie: AWSALBAPP-0=_remove_; AWSALBAPP-1=_remove_; AWSALBAPP-2=_remove_; AWSALBAPP-3=_remove_; SessionId=CfDJ8CpVwA%2BqwKBGh8%2FJi2OaZZfocwpeuNkyjQQDSGFVKka1%2BPmv8yTbITpCvlGv2Z6w3kj2To6LiKXglvVdD%2F5xgkKdTU0%2BMQxsgptPxJcLJFrALZzHtUg0wN6GfCsFfeEFZdrnk5sGtVlc9EjKznPlVsNva0wTq6SEAJ5Eo6cJkR0u\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\nlocation: https://portswigger.net/public/illustrations/bsp-burp-illy-1500w.webp\r\ndate: Thu, 19 Mar 2026 12:30:07 GMT\r\nset-cookie: AWSALBAPP-0=_remove_; Expires=Thu, 26 Mar 2026 12:30:07 GMT; Path=/\nAWSALBAPP-1=_remove_; Expires=Thu, 26 Mar 2026 12:30:07 GMT; Path=/\nAWSALBAPP-2=_remove_; Expires=Thu, 26 Mar 2026 12:30:07 GMT; Path=/\nAWSALBAPP-3=_remove_; Expires=Thu, 26 Mar 2026 12:30:07 GMT; Path=/\r\nserver: Kestrel\r\ncache-control: no-store, no-cache, s-maxage=0, private\r\nstrict-transport-security: max-age=31536000; preload\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 07b1d101035e34f82920833b00a4e896.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P2\r\nx-amz-cf-id: zkb500a5uCNUR0O7RAZYAX0txT_HeFaPUGmsIDLWJdUQtsepmPgkNg==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Kestrel","description":"","website":"https://docs.microsoft.com/en-us/aspnet/core/fundamentals/servers/kestrel","common_platform_enumeration":"","icon":"kestrel.svg","categories":["Web servers"]}],"data":{"size":4140,"size_decoded":0,"mime_type":"image/webp","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T00:47:03.388486Z","times_seen":13352920,"resource_available":true,"data":null}},"time_used":152,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":152,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Roboto+Mono:ital,wght@0,100;0,200;0,300;0,400;0,500;0,600;0,700;1,100;1,200;1,300;1,400;1,500;1,600;1,700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://portswigger.net/burp","date":"2026-03-19T12:30:07.255Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:01 GMT","end":"Mon, 27 Apr 2026 08:38:00 GMT"},"fingerprint":{"sha1":"AD:23:3E:9B:CF:2B:A1:EC:31:14:63:D1:58:73:BB:E7:C5:32:16:8C","sha256":"B1:5F:45:BF:00:8C:68:35:D3:42:B2:67:66:47:9D:BB:42:41:07:56:3A:C4:1C:D6:10:7B:B7:53:C2:71:81:33"}}},"request":{"raw":"GET /css2?family=Roboto+Mono:ital,wght@0,100;0,200;0,300;0,400;0,500;0,600;0,700;1,100;1,200;1,300;1,400;1,500;1,600;1,700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://portswigger.net/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Thu, 19 Mar 2026 12:30:07 GMT\r\ndate: Thu, 19 Mar 2026 12:30:07 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":31185,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"9c79d8cd2f8d5ee839223ffe2dbc392c","sha1":"3045e5fbca3b5fbbffbed06bb448bcc05a3d6e28","sha256":"4d78ee90474b7119d23220cc50592fc501e7fe9ca3fd6fffb639ed40c5955291","sha512":"3254504f1d6dbe3a22cc644c22c92f77858f70131c92a9ace96c9bd0065b42c7ea4abd47b2a311e0f4391cf5d5718f0d37abad2c100740fc33f30472d8814a5f","ssdeep":"768:xv3Zv3ev3Rv3Ev38v3q3A313I3b3j3Z3v323X383k3Y3S3r3a3l3t3n3h3M3J3mf:ZR258EsepG7jt/oH6i2Ur85B3Vq94AoL","tlshash":"b7e2cee2402b9410eb832dd667cf7f25fd4e6115a185c27d9bfd28a8acdbc22236071d","first_seen":"2025-09-17T18:45:20.123179Z","last_seen":"2026-04-04T16:00:40.380228Z","times_seen":664,"resource_available":false,"data":null}},"time_used":292,"timings":{"blocked":126,"dns":1,"connect":23,"send":0,"wait":33,"receive":0,"ssl":106},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"portswigger.net/public/icons/better-together-logo.svg","fqdn":"portswigger.net","domain":"portswigger.net","tld":"net"},"ip":{"addr":"3.164.240.86","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://portswigger.net/burp","date":"2026-03-19T12:30:07.399Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"portswigger.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Mon, 02 Mar 2026 00:00:00 GMT","end":"Tue, 15 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"EF:6D:90:97:A0:2D:B2:62:86:7A:16:70:DA:AC:7E:12:F1:59:C1:95","sha256":"5B:54:DD:9F:7D:8D:35:79:19:1E:C6:93:BA:32:13:5D:E1:D6:DB:7E:4A:47:D4:5B:D4:25:74:DF:95:CE:14:C9"}}},"request":{"raw":"GET /public/icons/better-together-logo.svg HTTP/1.1\r\nHost: portswigger.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://portswigger.net/burp\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: AWSALBAPP-0=_remove_; AWSALBAPP-1=_remove_; AWSALBAPP-2=_remove_; AWSALBAPP-3=_remove_; SessionId=CfDJ8CpVwA%2BqwKBGh8%2FJi2OaZZfocwpeuNkyjQQDSGFVKka1%2BPmv8yTbITpCvlGv2Z6w3kj2To6LiKXglvVdD%2F5xgkKdTU0%2BMQxsgptPxJcLJFrALZzHtUg0wN6GfCsFfeEFZdrnk5sGtVlc9EjKznPlVsNva0wTq6SEAJ5Eo6cJkR0u\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/svg+xml\r\ndate: Thu, 19 Mar 2026 12:29:15 GMT\r\nset-cookie: AWSALBAPP-0=_remove_; Expires=Thu, 26 Mar 2026 12:29:15 GMT; Path=/\nAWSALBAPP-1=_remove_; Expires=Thu, 26 Mar 2026 12:29:15 GMT; Path=/\nAWSALBAPP-2=_remove_; Expires=Thu, 26 Mar 2026 12:29:15 GMT; Path=/\nAWSALBAPP-3=_remove_; Expires=Thu, 26 Mar 2026 12:29:15 GMT; Path=/\r\nserver: '; DELETE carlos FROM users --\r\ncache-control: public, max-age=60\r\nstrict-transport-security: max-age=31536000; preload\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\ncontent-security-policy: default-src 'none';form-action 'self';base-uri 'none';child-src 'self' https://www.youtube.com/embed/;connect-src 'self' https://ps.containers.piwik.pro https://ps.piwik.pro https://tags.srv.stackadapt.com https://go.portswigger.net https://tracking-api.g2.com https://www.google.com/recaptcha/ https://formsubmission.portswigger.net;font-src 'self' https://fonts.gstatic.com data:;frame-src 'self' https://www.youtube.com/embed/ https://www.google.com/recaptcha/;img-src 'self' https://i.ytimg.com/ https://tags.srv.stackadapt.com/sa.jpeg;media-src 'self' https://d21v5rjx8s17cr.cloudfront.net/ https://d2gl1b374o3yzk.cloudfront.net/;script-src 'self' https://ps.containers.piwik.pro/ppms.js https://ps.piwik.pro/ppms.js https://www.youtube.com/iframe_api https://www.youtube.com/s/player/ https://tags.srv.stackadapt.com/events.js https://go.portswigger.net/pd.js 'nonce-ds/2uUlzGJVvR+3UXxQnKfHSVL2a55Cg' 'strict-dynamic';style-src 'self' https://tags.srv.stackadapt.com/sa.css 'nonce-ds/2uUlzGJVvR+3UXxQnKfHSVL2a55Cg' https://fonts.googleapis.com/css2* https://unpkg.com/animate.css@4.1.1/animate.css https://unpkg.com/@teleporthq/teleport-custom-scripts/dist/style.css;\r\ncontent-disposition: attachment\r\ncross-origin-resource-policy: same-site\r\ncross-origin-opener-policy: same-origin\r\nx-hiring-now: We're on a mission to secure the web: https://portswigger.net/careers\r\nx-powered-by: Express\r\nx-robots-tag: all\r\ncontent-encoding: br\r\nvary: accept-encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 07b1d101035e34f82920833b00a4e896.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P2\r\nx-amz-cf-id: endZR4ohmpJDYiaqGivetYJyTbQi_5ofZRGPiosQ2JJoxjdg08sJdQ==\r\nage: 52\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1005,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ba14c9fb59b104f6fb54a26a86d5be57","sha1":"c8376bc99a705c628ee0404da8dfce3eba57f920","sha256":"345a33b225e0e3848ca69b15739b5e9db15c1b3f83a202b2c9388b37ab5c27bd","sha512":"346ef93b24266548e5d4293f0c684f4272d0c854b883a29ae0520ee3fecc809bb4254b48ef80c491d2454cee6dad760f21e171c93787e8f034a8467915b01a5c","ssdeep":"","tlshash":"951178c273d5ba18e40057f9f3baa350b03b60dccb715308c148ef31ea5619b94888dc","first_seen":"2026-03-19T12:30:20.901068Z","last_seen":"2026-03-19T12:30:20.901068Z","times_seen":1,"resource_available":false,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":58,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"portswigger.net/public/logos/light/burp-suite-community-200h.webp","fqdn":"portswigger.net","domain":"portswigger.net","tld":"net"},"ip":{"addr":"3.164.240.86","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://portswigger.net/burp","date":"2026-03-19T12:30:07.518Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"portswigger.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Mon, 02 Mar 2026 00:00:00 GMT","end":"Tue, 15 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"EF:6D:90:97:A0:2D:B2:62:86:7A:16:70:DA:AC:7E:12:F1:59:C1:95","sha256":"5B:54:DD:9F:7D:8D:35:79:19:1E:C6:93:BA:32:13:5D:E1:D6:DB:7E:4A:47:D4:5B:D4:25:74:DF:95:CE:14:C9"}}},"request":{"raw":"GET /public/logos/light/burp-suite-community-200h.webp HTTP/1.1\r\nHost: portswigger.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://portswigger.net/burp\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: AWSALBAPP-0=_remove_; AWSALBAPP-1=_remove_; AWSALBAPP-2=_remove_; AWSALBAPP-3=_remove_; SessionId=CfDJ8CpVwA%2BqwKBGh8%2FJi2OaZZfocwpeuNkyjQQDSGFVKka1%2BPmv8yTbITpCvlGv2Z6w3kj2To6LiKXglvVdD%2F5xgkKdTU0%2BMQxsgptPxJcLJFrALZzHtUg0wN6GfCsFfeEFZdrnk5sGtVlc9EjKznPlVsNva0wTq6SEAJ5Eo6cJkR0u\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/webp\r\ncontent-length: 3830\r\ndate: Thu, 19 Mar 2026 12:29:28 GMT\r\nserver: '; DELETE carlos FROM users --\r\ncache-control: public, max-age=60\r\nstrict-transport-security: max-age=31536000; preload\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\ncontent-security-policy: default-src 'none';form-action 'self';base-uri 'none';child-src 'self' https://www.youtube.com/embed/;connect-src 'self' https://ps.containers.piwik.pro https://ps.piwik.pro https://tags.srv.stackadapt.com https://go.portswigger.net https://tracking-api.g2.com https://www.google.com/recaptcha/ https://formsubmission.portswigger.net;font-src 'self' https://fonts.gstatic.com data:;frame-src 'self' https://www.youtube.com/embed/ https://www.google.com/recaptcha/;img-src 'self' https://i.ytimg.com/ https://tags.srv.stackadapt.com/sa.jpeg;media-src 'self' https://d21v5rjx8s17cr.cloudfront.net/ https://d2gl1b374o3yzk.cloudfront.net/;script-src 'self' https://ps.containers.piwik.pro/ppms.js https://ps.piwik.pro/ppms.js https://www.youtube.com/iframe_api https://www.youtube.com/s/player/ https://tags.srv.stackadapt.com/events.js https://go.portswigger.net/pd.js 'nonce-QUwf5REXNjFz7BfdhO9shbF1/9pdvdWX' 'strict-dynamic';style-src 'self' https://tags.srv.stackadapt.com/sa.css 'nonce-QUwf5REXNjFz7BfdhO9shbF1/9pdvdWX' https://fonts.googleapis.com/css2* https://unpkg.com/animate.css@4.1.1/animate.css https://unpkg.com/@teleporthq/teleport-custom-scripts/dist/style.css;\r\ncross-origin-resource-policy: same-site\r\ncross-origin-opener-policy: same-origin\r\nx-hiring-now: We're on a mission to secure the web: https://portswigger.net/careers\r\nx-powered-by: Express\r\nx-robots-tag: all\r\nset-cookie: AWSALBAPP-0=_remove_; Expires=Thu, 26 Mar 2026 12:29:28 GMT; Path=/\nAWSALBAPP-1=_remove_; Expires=Thu, 26 Mar 2026 12:29:28 GMT; Path=/\nAWSALBAPP-2=_remove_; Expires=Thu, 26 Mar 2026 12:29:28 GMT; Path=/\nAWSALBAPP-3=_remove_; Expires=Thu, 26 Mar 2026 12:29:28 GMT; Path=/\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 07b1d101035e34f82920833b00a4e896.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P2\r\nx-amz-cf-id: P2caaJfrP2tEstda-1nNzoro3imhn-Vuy0BctdmdNlNvR7ISXFDtwQ==\r\nage: 39\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":3830,"size_decoded":0,"mime_type":"image/webp","magic":"PNG image data, 400 x 140, 8-bit colormap, non-interlaced","md5":"613e4ed64783cb4395e1eb295f7c1140","sha1":"c57ac91d14a4437ea6e24aa773c1630e73a81500","sha256":"986d18cd3df9941e922a7752e61518838d41ac362377a94abf1b4e505c734053","sha512":"791f2f3a9e691a3501bfd1114c65478661cf1c5741ba30f11336dcb2cf7bc16b496e5566490f1bb0d2bccc58c0351c4ebc5981fb2ae7a506c104844b204db487","ssdeep":"","tlshash":"0d816c8f3f752a35e3af488ba64505fc897a32f9011201294cde9dd0606bc2a2495d87","first_seen":"2026-03-19T12:30:20.902391Z","last_seen":"2026-03-19T12:30:20.902391Z","times_seen":1,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"portswigger.net/public/Navigation/navigation-support-300w.webp","fqdn":"portswigger.net","domain":"portswigger.net","tld":"net"},"ip":{"addr":"3.164.240.86","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://portswigger.net/burp","date":"2026-03-19T12:30:07.231Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"portswigger.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Mon, 02 Mar 2026 00:00:00 GMT","end":"Tue, 15 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"EF:6D:90:97:A0:2D:B2:62:86:7A:16:70:DA:AC:7E:12:F1:59:C1:95","sha256":"5B:54:DD:9F:7D:8D:35:79:19:1E:C6:93:BA:32:13:5D:E1:D6:DB:7E:4A:47:D4:5B:D4:25:74:DF:95:CE:14:C9"}}},"request":{"raw":"GET /public/Navigation/navigation-support-300w.webp HTTP/1.1\r\nHost: portswigger.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://portswigger.net/burp\r\nCookie: AWSALBAPP-0=_remove_; AWSALBAPP-1=_remove_; AWSALBAPP-2=_remove_; AWSALBAPP-3=_remove_; SessionId=CfDJ8CpVwA%2BqwKBGh8%2FJi2OaZZfocwpeuNkyjQQDSGFVKka1%2BPmv8yTbITpCvlGv2Z6w3kj2To6LiKXglvVdD%2F5xgkKdTU0%2BMQxsgptPxJcLJFrALZzHtUg0wN6GfCsFfeEFZdrnk5sGtVlc9EjKznPlVsNva0wTq6SEAJ5Eo6cJkR0u\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\nlocation: https://portswigger.net/public/navigation/navigation-support-300w.webp\r\ndate: Thu, 19 Mar 2026 12:30:07 GMT\r\nset-cookie: AWSALBAPP-0=_remove_; Expires=Thu, 26 Mar 2026 12:30:07 GMT; Path=/\nAWSALBAPP-1=_remove_; Expires=Thu, 26 Mar 2026 12:30:07 GMT; Path=/\nAWSALBAPP-2=_remove_; Expires=Thu, 26 Mar 2026 12:30:07 GMT; Path=/\nAWSALBAPP-3=_remove_; Expires=Thu, 26 Mar 2026 12:30:07 GMT; Path=/\r\nserver: Kestrel\r\ncache-control: no-store, no-cache, s-maxage=0, private\r\nstrict-transport-security: max-age=31536000; preload\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 07b1d101035e34f82920833b00a4e896.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P2\r\nx-amz-cf-id: IrKM0y8mUnGYXyuNtptVdHSSb3tvZJkb0oONo2eeLFbwNQx6qMnVvg==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Kestrel","description":"","website":"https://docs.microsoft.com/en-us/aspnet/core/fundamentals/servers/kestrel","common_platform_enumeration":"","icon":"kestrel.svg","categories":["Web servers"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":2566,"size_decoded":0,"mime_type":"image/webp","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T00:47:03.388486Z","times_seen":13352920,"resource_available":true,"data":null}},"time_used":149,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":149,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"portswigger.net/public/logos/light/portswigger-200h.webp","fqdn":"portswigger.net","domain":"portswigger.net","tld":"net"},"ip":{"addr":"3.164.240.86","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://portswigger.net/burp","date":"2026-03-19T12:30:07.520Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"portswigger.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Mon, 02 Mar 2026 00:00:00 GMT","end":"Tue, 15 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"EF:6D:90:97:A0:2D:B2:62:86:7A:16:70:DA:AC:7E:12:F1:59:C1:95","sha256":"5B:54:DD:9F:7D:8D:35:79:19:1E:C6:93:BA:32:13:5D:E1:D6:DB:7E:4A:47:D4:5B:D4:25:74:DF:95:CE:14:C9"}}},"request":{"raw":"GET /public/logos/light/portswigger-200h.webp HTTP/1.1\r\nHost: portswigger.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://portswigger.net/burp\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: AWSALBAPP-0=_remove_; AWSALBAPP-1=_remove_; AWSALBAPP-2=_remove_; AWSALBAPP-3=_remove_; SessionId=CfDJ8CpVwA%2BqwKBGh8%2FJi2OaZZfocwpeuNkyjQQDSGFVKka1%2BPmv8yTbITpCvlGv2Z6w3kj2To6LiKXglvVdD%2F5xgkKdTU0%2BMQxsgptPxJcLJFrALZzHtUg0wN6GfCsFfeEFZdrnk5sGtVlc9EjKznPlVsNva0wTq6SEAJ5Eo6cJkR0u\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/webp\r\ncontent-length: 2791\r\ndate: Thu, 19 Mar 2026 12:29:15 GMT\r\nserver: '; DELETE carlos FROM users --\r\ncache-control: public, max-age=60\r\nstrict-transport-security: max-age=31536000; preload\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\ncontent-security-policy: default-src 'none';form-action 'self';base-uri 'none';child-src 'self' https://www.youtube.com/embed/;connect-src 'self' https://ps.containers.piwik.pro https://ps.piwik.pro https://tags.srv.stackadapt.com https://go.portswigger.net https://tracking-api.g2.com https://www.google.com/recaptcha/ https://formsubmission.portswigger.net;font-src 'self' https://fonts.gstatic.com data:;frame-src 'self' https://www.youtube.com/embed/ https://www.google.com/recaptcha/;img-src 'self' https://i.ytimg.com/ https://tags.srv.stackadapt.com/sa.jpeg;media-src 'self' https://d21v5rjx8s17cr.cloudfront.net/ https://d2gl1b374o3yzk.cloudfront.net/;script-src 'self' https://ps.containers.piwik.pro/ppms.js https://ps.piwik.pro/ppms.js https://www.youtube.com/iframe_api https://www.youtube.com/s/player/ https://tags.srv.stackadapt.com/events.js https://go.portswigger.net/pd.js 'nonce-YL+wDhm19Vgv5aFd0EmGw2TtQkRgHQX5' 'strict-dynamic';style-src 'self' https://tags.srv.stackadapt.com/sa.css 'nonce-YL+wDhm19Vgv5aFd0EmGw2TtQkRgHQX5' https://fonts.googleapis.com/css2* https://unpkg.com/animate.css@4.1.1/animate.css https://unpkg.com/@teleporthq/teleport-custom-scripts/dist/style.css;\r\ncross-origin-resource-policy: same-site\r\ncross-origin-opener-policy: same-origin\r\nx-hiring-now: We're on a mission to secure the web: https://portswigger.net/careers\r\nx-powered-by: Express\r\nx-robots-tag: all\r\nset-cookie: AWSALBAPP-0=_remove_; Expires=Thu, 26 Mar 2026 12:29:15 GMT; Path=/\nAWSALBAPP-1=_remove_; Expires=Thu, 26 Mar 2026 12:29:15 GMT; Path=/\nAWSALBAPP-2=_remove_; Expires=Thu, 26 Mar 2026 12:29:15 GMT; Path=/\nAWSALBAPP-3=_remove_; Expires=Thu, 26 Mar 2026 12:29:15 GMT; Path=/\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 07b1d101035e34f82920833b00a4e896.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P2\r\nx-amz-cf-id: qvZ-V19Gk7D1GWqAeO2jJ-1Ddd5zVQ7P8MB73y6JmCpvqUZY0qajJQ==\r\nage: 52\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":2791,"size_decoded":0,"mime_type":"image/webp","magic":"PNG image data, 400 x 140, 8-bit colormap, non-interlaced","md5":"259455682d69b5eb5a20de59a6c6409f","sha1":"f59606be87547cf7d44d3544d4f169872cf9df98","sha256":"241e69165b14e0310064ffb9eed6b1185d87c9cb63c8b4c360f29f51e6dbd810","sha512":"e3754cb40425d7e9df1da7a21f43c100cd74acf52b1e5545e03ef59116ddb46c8cd81686493a836756253b87bc152759c3a4d7aebcf893c1c283a44326a87308","ssdeep":"","tlshash":"9d510adc2ddbbea49cfb17746ee0d8a78d42358765cb22967813fd16c0924e480f2161","first_seen":"2026-01-27T05:06:59.950287Z","last_seen":"2026-03-19T12:30:20.911126Z","times_seen":2,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"portswigger.net/content/images/logos/favicon.ico","fqdn":"portswigger.net","domain":"portswigger.net","tld":"net"},"ip":{"addr":"3.164.240.86","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://portswigger.net/burp","date":"2026-03-19T12:30:08.023Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"portswigger.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Mon, 02 Mar 2026 00:00:00 GMT","end":"Tue, 15 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"EF:6D:90:97:A0:2D:B2:62:86:7A:16:70:DA:AC:7E:12:F1:59:C1:95","sha256":"5B:54:DD:9F:7D:8D:35:79:19:1E:C6:93:BA:32:13:5D:E1:D6:DB:7E:4A:47:D4:5B:D4:25:74:DF:95:CE:14:C9"}}},"request":{"raw":"GET /content/images/logos/favicon.ico HTTP/1.1\r\nHost: portswigger.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://portswigger.net/burp\r\nCookie: AWSALBAPP-0=_remove_; AWSALBAPP-1=_remove_; AWSALBAPP-2=_remove_; AWSALBAPP-3=_remove_; SessionId=CfDJ8CpVwA%2BqwKBGh8%2FJi2OaZZfocwpeuNkyjQQDSGFVKka1%2BPmv8yTbITpCvlGv2Z6w3kj2To6LiKXglvVdD%2F5xgkKdTU0%2BMQxsgptPxJcLJFrALZzHtUg0wN6GfCsFfeEFZdrnk5sGtVlc9EjKznPlVsNva0wTq6SEAJ5Eo6cJkR0u\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/x-icon\r\ncontent-length: 15406\r\ndate: Mon, 08 Sep 2025 22:50:19 GMT\r\nserver: Kestrel\r\naccept-ranges: bytes\r\ncache-control: must-revalidate, max-age=0, s-maxage=31536000\r\netag: \"1dc129cec20192e\"\r\nlast-modified: Thu, 21 Aug 2025 13:10:10 GMT\r\nstrict-transport-security: max-age=31536000; preload\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\ncontent-security-policy: default-src 'none';form-action 'self';base-uri 'none';child-src 'self' https://www.youtube.com/embed/;connect-src 'self' https://ps.containers.piwik.pro https://ps.piwik.pro https://tags.srv.stackadapt.com https://go.portswigger.net https://www.google.com/recaptcha/ https://formsubmission.portswigger.net;font-src 'self' https://fonts.gstatic.com data:;frame-src 'self' https://www.youtube.com/embed/ https://www.google.com/recaptcha/;img-src 'self' https://i.ytimg.com/ https://tags.srv.stackadapt.com/sa.jpeg;media-src 'self' https://d21v5rjx8s17cr.cloudfront.net/ https://d2gl1b374o3yzk.cloudfront.net/;script-src 'self' https://ps.containers.piwik.pro/ppms.js https://ps.piwik.pro/ppms.js https://www.youtube.com/iframe_api https://www.youtube.com/s/player/ https://tags.srv.stackadapt.com/events.js https://go.portswigger.net/pd.js 'nonce-zGCmNuBDqoLXV2BhBnmOEOYGIY4TQf3q' 'strict-dynamic';style-src 'self' https://tags.srv.stackadapt.com/sa.css 'nonce-zGCmNuBDqoLXV2BhBnmOEOYGIY4TQf3q' https://fonts.googleapis.com/css2* https://unpkg.com/animate.css@4.1.1/animate.css https://unpkg.com/@teleporthq/teleport-custom-scripts/dist/style.css;\r\ncross-origin-resource-policy: same-site\r\ncross-origin-opener-policy: same-origin\r\nset-cookie: AWSALBAPP-0=_remove_; Expires=Mon, 15 Sep 2025 22:50:19 GMT; Path=/\nAWSALBAPP-1=_remove_; Expires=Mon, 15 Sep 2025 22:50:19 GMT; Path=/\nAWSALBAPP-2=_remove_; Expires=Mon, 15 Sep 2025 22:50:19 GMT; Path=/\nAWSALBAPP-3=_remove_; Expires=Mon, 15 Sep 2025 22:50:19 GMT; Path=/\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 07b1d101035e34f82920833b00a4e896.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P2\r\nx-amz-cf-id: JzQIRIZsyS0G5FivdLDsWqPUl3DF8tKJMX8tEoQ3e_13ru6K1T8bJA==\r\nage: 16551589\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Kestrel","description":"","website":"https://docs.microsoft.com/en-us/aspnet/core/fundamentals/servers/kestrel","common_platform_enumeration":"","icon":"kestrel.svg","categories":["Web servers"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15406,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 3 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel","md5":"d93239fb923e138bb2166c5352aa17f7","sha1":"1b7628cc5c821f23796c1468596813fca817b025","sha256":"2220571c52f5480c6c5742d1551d9e2647467f4e006ac042cdadebfb67d1ed6e","sha512":"e4db72ff7823f605cf20d3921b541f37e029ee7de051baccd3fb9b654e8310f116c2965212c239f8ee8e4da67836adde2fb43deff25fef6b02bac20667f2754f","ssdeep":"192:asBxB2B1BHB9B9BYBGBsBweBoBhB+BwQdEdSu:asDEnpnTW8eqeefcKQdEd","tlshash":"156279e6c371308de6e08d30c4ca9491e43dcd194ced3055b972776e8878edda62ab76","first_seen":"2023-05-21T12:43:08Z","last_seen":"2026-03-19T12:30:20.913454Z","times_seen":24,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"burpcollaborator.net/","fqdn":"burpcollaborator.net","domain":"burpcollaborator.net","tld":"net"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-19T12:29:54.105Z","timestamp":0,"http_version":"","security_state":"broken","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: burpcollaborator.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T00:47:03.388486Z","times_seen":13352920,"resource_available":true,"data":null}},"time_used":169,"timings":{"blocked":0,"dns":62,"connect":34,"send":0,"wait":0,"receive":0,"ssl":69},"alerts":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-03-19T12:29:54Z","timestamp":1773923394,"ip_dst":{"addr":"172.18.0.13","port":47214,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"54.77.139.23","port":80,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"severity":"high","alert":"ETPRO POLICY Observed Burp Collaborator Server Header","source":"{\"timestamp\":\"2026-03-19T12:29:54.411093+0000\",\"flow_id\":61383341421280,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"54.77.139.23\",\"src_port\":80,\"dest_ip\":\"172.18.0.13\",\"dest_port\":47214,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2841917,\"rev\":1,\"signature\":\"ETPRO POLICY Observed Burp Collaborator Server Header\",\"category\":\"Potential Corporate Privacy Violation\",\"severity\":1,\"metadata\":{\"affected_product\":[\"Any\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2020_04_07\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2020_04_07\"]}},\"http\":{\"hostname\":\"burpcollaborator.net\",\"url\":\"/\",\"http_user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"http_content_type\":\"text/html\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"status\":200,\"length\":1190},\"files\":[{\"filename\":\"/\",\"sid\":[],\"gaps\":false,\"state\":\"CLOSED\",\"stored\":false,\"size\":1190,\"tx_id\":0}],\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":5,\"pkts_toclient\":5,\"bytes_toserver\":743,\"bytes_toclient\":1678,\"start\":\"2026-03-19T12:29:54.307936+0000\"}}"}],"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"portswigger.net/public/illustrations/bsp-burp-illy-1500w.webp","fqdn":"portswigger.net","domain":"portswigger.net","tld":"net"},"ip":{"addr":"3.164.240.86","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://portswigger.net/burp","date":"2026-03-19T12:30:07.516Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"portswigger.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Mon, 02 Mar 2026 00:00:00 GMT","end":"Tue, 15 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"EF:6D:90:97:A0:2D:B2:62:86:7A:16:70:DA:AC:7E:12:F1:59:C1:95","sha256":"5B:54:DD:9F:7D:8D:35:79:19:1E:C6:93:BA:32:13:5D:E1:D6:DB:7E:4A:47:D4:5B:D4:25:74:DF:95:CE:14:C9"}}},"request":{"raw":"GET /public/illustrations/bsp-burp-illy-1500w.webp HTTP/1.1\r\nHost: portswigger.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://portswigger.net/burp\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: AWSALBAPP-0=_remove_; AWSALBAPP-1=_remove_; AWSALBAPP-2=_remove_; AWSALBAPP-3=_remove_; SessionId=CfDJ8CpVwA%2BqwKBGh8%2FJi2OaZZfocwpeuNkyjQQDSGFVKka1%2BPmv8yTbITpCvlGv2Z6w3kj2To6LiKXglvVdD%2F5xgkKdTU0%2BMQxsgptPxJcLJFrALZzHtUg0wN6GfCsFfeEFZdrnk5sGtVlc9EjKznPlVsNva0wTq6SEAJ5Eo6cJkR0u\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/webp\r\ncontent-length: 4140\r\ndate: Thu, 19 Mar 2026 12:29:28 GMT\r\nserver: '; DELETE carlos FROM users --\r\ncache-control: public, max-age=60\r\nstrict-transport-security: max-age=31536000; preload\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\ncontent-security-policy: default-src 'none';form-action 'self';base-uri 'none';child-src 'self' https://www.youtube.com/embed/;connect-src 'self' https://ps.containers.piwik.pro https://ps.piwik.pro https://tags.srv.stackadapt.com https://go.portswigger.net https://tracking-api.g2.com https://www.google.com/recaptcha/ https://formsubmission.portswigger.net;font-src 'self' https://fonts.gstatic.com data:;frame-src 'self' https://www.youtube.com/embed/ https://www.google.com/recaptcha/;img-src 'self' https://i.ytimg.com/ https://tags.srv.stackadapt.com/sa.jpeg;media-src 'self' https://d21v5rjx8s17cr.cloudfront.net/ https://d2gl1b374o3yzk.cloudfront.net/;script-src 'self' https://ps.containers.piwik.pro/ppms.js https://ps.piwik.pro/ppms.js https://www.youtube.com/iframe_api https://www.youtube.com/s/player/ https://tags.srv.stackadapt.com/events.js https://go.portswigger.net/pd.js 'nonce-XVvHjC1Gf5JZceAqhJzbZiWO1Mdd4waI' 'strict-dynamic';style-src 'self' https://tags.srv.stackadapt.com/sa.css 'nonce-XVvHjC1Gf5JZceAqhJzbZiWO1Mdd4waI' https://fonts.googleapis.com/css2* https://unpkg.com/animate.css@4.1.1/animate.css https://unpkg.com/@teleporthq/teleport-custom-scripts/dist/style.css;\r\ncross-origin-resource-policy: same-site\r\ncross-origin-opener-policy: same-origin\r\nx-hiring-now: We're on a mission to secure the web: https://portswigger.net/careers\r\nx-powered-by: Express\r\nx-robots-tag: all\r\nset-cookie: AWSALBAPP-0=_remove_; Expires=Thu, 26 Mar 2026 12:29:28 GMT; Path=/\nAWSALBAPP-1=_remove_; Expires=Thu, 26 Mar 2026 12:29:28 GMT; Path=/\nAWSALBAPP-2=_remove_; Expires=Thu, 26 Mar 2026 12:29:28 GMT; Path=/\nAWSALBAPP-3=_remove_; Expires=Thu, 26 Mar 2026 12:29:28 GMT; Path=/\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 07b1d101035e34f82920833b00a4e896.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P2\r\nx-amz-cf-id: 681UeK4L1qlQedGOq5KrAblpjTQtkZ-xatsmmvQ3wV9Fr8Q4EMg0zg==\r\nage: 39\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4140,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 320x125, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"adc6136a80cb947d13dbb0ceaf0ae615","sha1":"6ec7a739deb34dbe3323530baa8d8d90f0801ed9","sha256":"f8bf19ee96d8fbdc0830f7e9071f27fb443608653632ab954c486e4397b98b2e","sha512":"6f2e577cd07b7c9bbce20195b7be3713a0e3ff3f21a9c591b85dac32c926dd862522421124c902d83457fd1dc2eb4847ecb628bc3053e0a8bd0d4ee9d4c52c15","ssdeep":"96:UdPj8u1ZvoqDrkhv4ZIycjNFDq7SwlVsmkkL7YFpkEVHzk:UdPj8ufoz4ZIPF+7SsVsNkL0jpk","tlshash":"dc818e56f9d3cc4a51f7d70b52be82ba4d94f9efb06c920668103af0c718762b341996","first_seen":"2026-03-19T12:30:20.914409Z","last_seen":"2026-03-19T12:30:20.914409Z","times_seen":1,"resource_available":false,"data":null}},"time_used":83,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":83,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ps.containers.piwik.pro/287552c2-4917-42e0-8982-ba994a2a73d7.js","fqdn":"ps.containers.piwik.pro","domain":"piwik.pro","tld":"pro"},"ip":{"addr":"20.79.214.157","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://portswigger.net/burp","date":"2026-03-19T12:30:07.912Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.containers.piwik.pro","organization":""},"issuer":{"commonName":"GlobeSSL DV CA","organization":"CentralNic Luxembourg Sàrl"},"validity":{"start":"Wed, 03 Dec 2025 00:00:00 GMT","end":"Fri, 01 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"46:B8:70:0E:66:AB:33:6D:F7:60:53:16:38:E3:53:A9:AB:2B:2C:25","sha256":"26:9C:F0:19:8C:CF:FD:E7:3B:93:78:74:84:A2:EF:F7:9A:4B:E7:D7:E7:0B:EF:81:3B:54:36:5A:06:7C:0D:CA"}}},"request":{"raw":"GET /287552c2-4917-42e0-8982-ba994a2a73d7.js HTTP/1.1\r\nHost: ps.containers.piwik.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://portswigger.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 19 Mar 2026 12:30:08 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncache-control: public, must-revalidate\r\nvary: Accept-Encoding, Cookie\r\netag: W/\"2cfca932fe128cb5-cbd684fecd645a3b\"\r\ncross-origin-resource-policy: cross-origin\r\nx-robots-tag: none\r\ncontent-encoding: gzip\r\nx-cached: MISS\r\nstrict-transport-security: max-age=31536000\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin\r\nx-frame-options: sameorigin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":273824,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (46065)","md5":"4062f8438bf0e45c0a88a7b67b33f098","sha1":"8c3d8694c0984876f7ba84baf97d076d54d7dff7","sha256":"d26a0693f32f3b65572d3d1a9030842c40038ddcc9dcb9fe555432876e04d5ee","sha512":"2dbf461dbbecbb7627822d2920443069d4a200981ee26a4afb069f34bb93639df767102e20d9fbf05552f18626d92a88ef3297ad813dc48e906bcec28960ca7c","ssdeep":"1536:aBhLuK5+6wqcD5fVmZVrPqlIZPPITk4gWI9km5I3UbhiUsTunc39sTfnSk45eu2y:aTU6wSVHJy6HttPrI4sS4yO19+Gz","tlshash":"7f44198c72c1b53483eb64b9917f110ab33b144a688d4428f545d8e96d39e8ea337fbd","first_seen":"2026-03-19T12:30:20.916207Z","last_seen":"2026-03-19T12:30:20.916207Z","times_seen":1,"resource_available":true,"data":null}},"time_used":412,"timings":{"blocked":182,"dns":36,"connect":22,"send":0,"wait":48,"receive":0,"ssl":121},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"burpcollaborator.net/","fqdn":"burpcollaborator.net","domain":"burpcollaborator.net","tld":"net"},"ip":{"addr":"54.77.139.23","port":80,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-19T12:29:54.284Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: burpcollaborator.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: Burp Collaborator https://burpcollaborator.net/\r\nX-Collaborator-Version: 4\r\nContent-Type: text/html\r\nContent-Length: 1190\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1190,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"403c0a0f5aa689d51d9ed13fe852a171","sha1":"978e36a720ed1b77fb50631f7f65e525afafe6a7","sha256":"cbcf4f7232a985353b357ee97fb51b0c8fa454bc7bc0186650f20146190bab6a","sha512":"4a4731bcbd16a03355cd2348ee3f0014a77808b2b91dc203579f8ead7717d579eb4ee58af30eb92a2f879a3c4f2f1337bb9ae89473412d6a9b4c56f73ebebc63","ssdeep":"","tlshash":"5921cedb77c3236603f330980a59e4596b2950dc2fa17d18788f8a22fb28255433b7f0","first_seen":"2023-04-12T13:50:09Z","last_seen":"2026-03-19T12:30:20.869113Z","times_seen":86,"resource_available":true,"data":null}},"time_used":152,"timings":{"blocked":59,"dns":24,"connect":35,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-03-19T12:29:54Z","timestamp":1773923394,"ip_dst":{"addr":"172.18.0.13","port":47214,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"54.77.139.23","port":80,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"severity":"high","alert":"ETPRO POLICY Observed Burp Collaborator Server Header","source":"{\"timestamp\":\"2026-03-19T12:29:54.411093+0000\",\"flow_id\":61383341421280,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"54.77.139.23\",\"src_port\":80,\"dest_ip\":\"172.18.0.13\",\"dest_port\":47214,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2841917,\"rev\":1,\"signature\":\"ETPRO POLICY Observed Burp Collaborator Server Header\",\"category\":\"Potential Corporate Privacy Violation\",\"severity\":1,\"metadata\":{\"affected_product\":[\"Any\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2020_04_07\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2020_04_07\"]}},\"http\":{\"hostname\":\"burpcollaborator.net\",\"url\":\"/\",\"http_user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"http_content_type\":\"text/html\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"status\":200,\"length\":1190},\"files\":[{\"filename\":\"/\",\"sid\":[],\"gaps\":false,\"state\":\"CLOSED\",\"stored\":false,\"size\":1190,\"tx_id\":0}],\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":5,\"pkts_toclient\":5,\"bytes_toserver\":743,\"bytes_toclient\":1678,\"start\":\"2026-03-19T12:29:54.307936+0000\"}}"}],"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"portswigger.net/burp/","fqdn":"portswigger.net","domain":"portswigger.net","tld":"net"},"ip":{"addr":"3.164.240.86","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-19T12:30:06.742Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"portswigger.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Mon, 02 Mar 2026 00:00:00 GMT","end":"Tue, 15 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"EF:6D:90:97:A0:2D:B2:62:86:7A:16:70:DA:AC:7E:12:F1:59:C1:95","sha256":"5B:54:DD:9F:7D:8D:35:79:19:1E:C6:93:BA:32:13:5D:E1:D6:DB:7E:4A:47:D4:5B:D4:25:74:DF:95:CE:14:C9"}}},"request":{"raw":"GET /burp/ HTTP/1.1\r\nHost: portswigger.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://burpcollaborator.net/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nSec-Fetch-User: ?1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\nlocation: https://portswigger.net/burp\r\ndate: Thu, 19 Mar 2026 12:30:06 GMT\r\nset-cookie: AWSALBAPP-0=_remove_; Expires=Thu, 26 Mar 2026 12:30:06 GMT; Path=/\nAWSALBAPP-1=_remove_; Expires=Thu, 26 Mar 2026 12:30:06 GMT; Path=/\nAWSALBAPP-2=_remove_; Expires=Thu, 26 Mar 2026 12:30:06 GMT; Path=/\nAWSALBAPP-3=_remove_; Expires=Thu, 26 Mar 2026 12:30:06 GMT; Path=/\r\nserver: Kestrel\r\ncache-control: no-store, no-cache, s-maxage=0, private\r\nstrict-transport-security: max-age=31536000; preload\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 07b1d101035e34f82920833b00a4e896.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P2\r\nx-amz-cf-id: DgzkjcXqsyGmswu_DYiYH0vbkkW5KybAjpYG-i0gNGNEam3DF6uB-w==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Kestrel","description":"","website":"https://docs.microsoft.com/en-us/aspnet/core/fundamentals/servers/kestrel","common_platform_enumeration":"","icon":"kestrel.svg","categories":["Web servers"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":115356,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T00:47:03.388486Z","times_seen":13352920,"resource_available":true,"data":null}},"time_used":173,"timings":{"blocked":21,"dns":1,"connect":8,"send":0,"wait":126,"receive":0,"ssl":14},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"portswigger.net/burp.css","fqdn":"portswigger.net","domain":"portswigger.net","tld":"net"},"ip":{"addr":"3.164.240.86","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://portswigger.net/burp","date":"2026-03-19T12:30:07.219Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"portswigger.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Mon, 02 Mar 2026 00:00:00 GMT","end":"Tue, 15 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"EF:6D:90:97:A0:2D:B2:62:86:7A:16:70:DA:AC:7E:12:F1:59:C1:95","sha256":"5B:54:DD:9F:7D:8D:35:79:19:1E:C6:93:BA:32:13:5D:E1:D6:DB:7E:4A:47:D4:5B:D4:25:74:DF:95:CE:14:C9"}}},"request":{"raw":"GET /burp.css HTTP/1.1\r\nHost: portswigger.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://portswigger.net/burp\r\nCookie: AWSALBAPP-0=_remove_; AWSALBAPP-1=_remove_; AWSALBAPP-2=_remove_; AWSALBAPP-3=_remove_; SessionId=CfDJ8CpVwA%2BqwKBGh8%2FJi2OaZZfocwpeuNkyjQQDSGFVKka1%2BPmv8yTbITpCvlGv2Z6w3kj2To6LiKXglvVdD%2F5xgkKdTU0%2BMQxsgptPxJcLJFrALZzHtUg0wN6GfCsFfeEFZdrnk5sGtVlc9EjKznPlVsNva0wTq6SEAJ5Eo6cJkR0u\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css\r\ndate: Thu, 19 Mar 2026 12:29:27 GMT\r\nset-cookie: AWSALBAPP-0=_remove_; Expires=Thu, 26 Mar 2026 12:29:27 GMT; Path=/\nAWSALBAPP-1=_remove_; Expires=Thu, 26 Mar 2026 12:29:27 GMT; Path=/\nAWSALBAPP-2=_remove_; Expires=Thu, 26 Mar 2026 12:29:27 GMT; Path=/\nAWSALBAPP-3=_remove_; Expires=Thu, 26 Mar 2026 12:29:27 GMT; Path=/\r\nserver: '; DELETE carlos FROM users --\r\ncache-control: public, max-age=60\r\nstrict-transport-security: max-age=31536000; preload\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\ncontent-security-policy: default-src 'none';form-action 'self';base-uri 'none';child-src 'self' https://www.youtube.com/embed/;connect-src 'self' https://ps.containers.piwik.pro https://ps.piwik.pro https://tags.srv.stackadapt.com https://go.portswigger.net https://tracking-api.g2.com https://www.google.com/recaptcha/ https://formsubmission.portswigger.net;font-src 'self' https://fonts.gstatic.com data:;frame-src 'self' https://www.youtube.com/embed/ https://www.google.com/recaptcha/;img-src 'self' https://i.ytimg.com/ https://tags.srv.stackadapt.com/sa.jpeg;media-src 'self' https://d21v5rjx8s17cr.cloudfront.net/ https://d2gl1b374o3yzk.cloudfront.net/;script-src 'self' https://ps.containers.piwik.pro/ppms.js https://ps.piwik.pro/ppms.js https://www.youtube.com/iframe_api https://www.youtube.com/s/player/ https://tags.srv.stackadapt.com/events.js https://go.portswigger.net/pd.js 'nonce-MQvnU40NKoq1nGhjmsTf7kAvMWJOK24Q' 'strict-dynamic';style-src 'self' https://tags.srv.stackadapt.com/sa.css 'nonce-MQvnU40NKoq1nGhjmsTf7kAvMWJOK24Q' https://fonts.googleapis.com/css2* https://unpkg.com/animate.css@4.1.1/animate.css https://unpkg.com/@teleporthq/teleport-custom-scripts/dist/style.css;\r\ncross-origin-resource-policy: same-site\r\ncross-origin-opener-policy: same-origin\r\nx-hiring-now: We're on a mission to secure the web: https://portswigger.net/careers\r\nx-powered-by: Express\r\nx-robots-tag: all\r\ncontent-encoding: br\r\nvary: accept-encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 07b1d101035e34f82920833b00a4e896.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P2\r\nx-amz-cf-id: e3bVFjUSFz-cKsFAQap0kRmBBuhbvhXKSVDM3PAmqTUTAgHLlaD_fQ==\r\nage: 40\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":274204,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"1f53e289609218f6d67d12644ec8e2f6","sha1":"511ba7659ec329b1c1af6a22e9108da8b5630800","sha256":"a92719a3b86508c440f0d3a3a81fecc5b204aefde70d1052d914280c612b87c7","sha512":"97b6e377eebdbdf254654d677a488efb5d2e29ee3fc4730f96aa4e23a1c06b805c8fe8d07b2ef2b5075c45825933d1e4c3c1fe1132b3536dc1e560042d7322b7","ssdeep":"3072:/qTyvdBri+wDqTyvdBri+wzqTyvdBri+w9qTyvdBri+whqTyvdBri+wtqTyvdBrq:7uJhLQ","tlshash":"56444880667495353f37137cc2895329fb8560c7ec0fbb89a9bd40a05bd8af768d2e46","first_seen":"2026-03-19T12:30:20.918547Z","last_seen":"2026-03-19T12:30:20.918547Z","times_seen":1,"resource_available":false,"data":null}},"time_used":59,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":59,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"portswigger.net/public/Illustrations/bsee-attack-burp-illy-1500w.webp","fqdn":"portswigger.net","domain":"portswigger.net","tld":"net"},"ip":{"addr":"3.164.240.86","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://portswigger.net/burp","date":"2026-03-19T12:30:07.236Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"portswigger.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Mon, 02 Mar 2026 00:00:00 GMT","end":"Tue, 15 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"EF:6D:90:97:A0:2D:B2:62:86:7A:16:70:DA:AC:7E:12:F1:59:C1:95","sha256":"5B:54:DD:9F:7D:8D:35:79:19:1E:C6:93:BA:32:13:5D:E1:D6:DB:7E:4A:47:D4:5B:D4:25:74:DF:95:CE:14:C9"}}},"request":{"raw":"GET /public/Illustrations/bsee-attack-burp-illy-1500w.webp HTTP/1.1\r\nHost: portswigger.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://portswigger.net/burp\r\nCookie: AWSALBAPP-0=_remove_; AWSALBAPP-1=_remove_; AWSALBAPP-2=_remove_; AWSALBAPP-3=_remove_; SessionId=CfDJ8CpVwA%2BqwKBGh8%2FJi2OaZZfocwpeuNkyjQQDSGFVKka1%2BPmv8yTbITpCvlGv2Z6w3kj2To6LiKXglvVdD%2F5xgkKdTU0%2BMQxsgptPxJcLJFrALZzHtUg0wN6GfCsFfeEFZdrnk5sGtVlc9EjKznPlVsNva0wTq6SEAJ5Eo6cJkR0u\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\nlocation: https://portswigger.net/public/illustrations/bsee-attack-burp-illy-1500w.webp\r\ndate: Thu, 19 Mar 2026 12:30:07 GMT\r\nset-cookie: AWSALBAPP-0=_remove_; Expires=Thu, 26 Mar 2026 12:30:07 GMT; Path=/\nAWSALBAPP-1=_remove_; Expires=Thu, 26 Mar 2026 12:30:07 GMT; Path=/\nAWSALBAPP-2=_remove_; Expires=Thu, 26 Mar 2026 12:30:07 GMT; Path=/\nAWSALBAPP-3=_remove_; Expires=Thu, 26 Mar 2026 12:30:07 GMT; Path=/\r\nserver: Kestrel\r\ncache-control: no-store, no-cache, s-maxage=0, private\r\nstrict-transport-security: max-age=31536000; preload\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 07b1d101035e34f82920833b00a4e896.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P2\r\nx-amz-cf-id: mh_8M_So0HN65lFetVSgIbNJ9GP9dv3fxx21F4i7FwLDrgJPrjU3Lw==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Kestrel","description":"","website":"https://docs.microsoft.com/en-us/aspnet/core/fundamentals/servers/kestrel","common_platform_enumeration":"","icon":"kestrel.svg","categories":["Web servers"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":4304,"size_decoded":0,"mime_type":"image/webp","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T00:47:03.388486Z","times_seen":13352920,"resource_available":true,"data":null}},"time_used":160,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":160,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"portswigger.net/public/pages/home/web-security-academy-home-1-300w-400h.webp","fqdn":"portswigger.net","domain":"portswigger.net","tld":"net"},"ip":{"addr":"3.164.240.86","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://portswigger.net/burp","date":"2026-03-19T12:30:07.411Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"portswigger.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Mon, 02 Mar 2026 00:00:00 GMT","end":"Tue, 15 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"EF:6D:90:97:A0:2D:B2:62:86:7A:16:70:DA:AC:7E:12:F1:59:C1:95","sha256":"5B:54:DD:9F:7D:8D:35:79:19:1E:C6:93:BA:32:13:5D:E1:D6:DB:7E:4A:47:D4:5B:D4:25:74:DF:95:CE:14:C9"}}},"request":{"raw":"GET /public/pages/home/web-security-academy-home-1-300w-400h.webp HTTP/1.1\r\nHost: portswigger.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://portswigger.net/burp\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: AWSALBAPP-0=_remove_; AWSALBAPP-1=_remove_; AWSALBAPP-2=_remove_; AWSALBAPP-3=_remove_; SessionId=CfDJ8CpVwA%2BqwKBGh8%2FJi2OaZZfocwpeuNkyjQQDSGFVKka1%2BPmv8yTbITpCvlGv2Z6w3kj2To6LiKXglvVdD%2F5xgkKdTU0%2BMQxsgptPxJcLJFrALZzHtUg0wN6GfCsFfeEFZdrnk5sGtVlc9EjKznPlVsNva0wTq6SEAJ5Eo6cJkR0u\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/webp\r\ncontent-length: 5163\r\ndate: Thu, 19 Mar 2026 12:29:28 GMT\r\nserver: '; DELETE carlos FROM users --\r\ncache-control: public, max-age=60\r\nstrict-transport-security: max-age=31536000; preload\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\ncontent-security-policy: default-src 'none';form-action 'self';base-uri 'none';child-src 'self' https://www.youtube.com/embed/;connect-src 'self' https://ps.containers.piwik.pro https://ps.piwik.pro https://tags.srv.stackadapt.com https://go.portswigger.net https://tracking-api.g2.com https://www.google.com/recaptcha/ https://formsubmission.portswigger.net;font-src 'self' https://fonts.gstatic.com data:;frame-src 'self' https://www.youtube.com/embed/ https://www.google.com/recaptcha/;img-src 'self' https://i.ytimg.com/ https://tags.srv.stackadapt.com/sa.jpeg;media-src 'self' https://d21v5rjx8s17cr.cloudfront.net/ https://d2gl1b374o3yzk.cloudfront.net/;script-src 'self' https://ps.containers.piwik.pro/ppms.js https://ps.piwik.pro/ppms.js https://www.youtube.com/iframe_api https://www.youtube.com/s/player/ https://tags.srv.stackadapt.com/events.js https://go.portswigger.net/pd.js 'nonce-PpAdKVsFNrJePk3jz6MPjbnRF0K25jbN' 'strict-dynamic';style-src 'self' https://tags.srv.stackadapt.com/sa.css 'nonce-PpAdKVsFNrJePk3jz6MPjbnRF0K25jbN' https://fonts.googleapis.com/css2* https://unpkg.com/animate.css@4.1.1/animate.css https://unpkg.com/@teleporthq/teleport-custom-scripts/dist/style.css;\r\ncross-origin-resource-policy: same-site\r\ncross-origin-opener-policy: same-origin\r\nx-hiring-now: We're on a mission to secure the web: https://portswigger.net/careers\r\nx-powered-by: Express\r\nx-robots-tag: all\r\nset-cookie: AWSALBAPP-0=_remove_; Expires=Thu, 26 Mar 2026 12:29:28 GMT; Path=/\nAWSALBAPP-1=_remove_; Expires=Thu, 26 Mar 2026 12:29:28 GMT; Path=/\nAWSALBAPP-2=_remove_; Expires=Thu, 26 Mar 2026 12:29:28 GMT; Path=/\nAWSALBAPP-3=_remove_; Expires=Thu, 26 Mar 2026 12:29:28 GMT; Path=/\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 07b1d101035e34f82920833b00a4e896.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P2\r\nx-amz-cf-id: 0No2sLRM6GKm9qB1OK9IFg_KIwPXoXmdMZpoEWndZQ-idpPN9Ol64A==\r\nage: 39\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":5163,"size_decoded":0,"mime_type":"image/webp","magic":"PNG image data, 240 x 180, 8-bit colormap, non-interlaced","md5":"9b572a728187b381ef5c67b815b27a9b","sha1":"e78469292b8acc6696b073f7c409c58d5157c1d6","sha256":"3a02680c76fbe3e4fedf585e454725fec0a39caa5e9651cec1a7c5be2ddd914a","sha512":"3d168654ff0f94f7e4c7a3feda3bbd8b5d075d40f131dcf5ea963f0d6e733a7da3fbc116e1613192ee0698da92f0165dd0ae825bf97e93094d47c00251d5950a","ssdeep":"96:LlyHpsTvho4ouQlnn/cEI2g5+H+bInX4Cu3aWe+:Llw4oaEac+UoCYZ","tlshash":"d5b19e1e287dbd2434b97a1430441084a2119f2654bf6d1dffd10793bef8d5391dbba6","first_seen":"2026-01-27T05:06:59.989952Z","last_seen":"2026-03-19T12:30:20.920557Z","times_seen":2,"resource_available":false,"data":null}},"time_used":56,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":56,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ps.piwik.pro/ppms.php","fqdn":"ps.piwik.pro","domain":"piwik.pro","tld":"pro"},"ip":{"addr":"20.79.214.157","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://portswigger.net/burp","date":"2026-03-19T12:30:08.327Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.piwik.pro","organization":""},"issuer":{"commonName":"GlobeSSL DV CA","organization":"CentralNic Luxembourg Sàrl"},"validity":{"start":"Wed, 03 Dec 2025 00:00:00 GMT","end":"Sun, 03 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"45:F3:16:1E:37:33:4B:13:67:07:C0:2A:8A:24:F0:BE:7A:1D:C7:F9","sha256":"04:5F:9C:96:10:2A:E8:74:85:76:BD:A9:18:02:C2:23:26:90:E7:13:04:F8:48:42:71:B4:AB:CF:51:CD:27:5C"}}},"request":{"raw":"POST /ppms.php HTTP/1.1\r\nHost: ps.piwik.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded; charset=utf-8\r\nContent-Length: 494\r\nOrigin: https://portswigger.net\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://portswigger.net/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":494,"data":"action_name=Burp%20-%20Web%20Application%20Security%2C%20Testing%2C%20%26%20Scanning%20-%20PortSwigger\u0026idsite=287552c2-4917-42e0-8982-ba994a2a73d7\u0026rec=1\u0026r=897378\u0026h=12\u0026m=30\u0026s=8\u0026url=https%3A%2F%2Fportswigger.net%2Fburp\u0026urlref=http%3A%2F%2Fburpcollaborator.net%2F\u0026_id=ad9cba7aa912c009\u0026_idts=1773923408\u0026_idvc=1\u0026ts_n=jstc_tm\u0026ts_v=2.29.0\u0026pdf=1\u0026qt=0\u0026realp=0\u0026wma=0\u0026dir=0\u0026fla=0\u0026java=0\u0026gears=0\u0026ag=0\u0026cookie=1\u0026res=1280x1024\u0026dimension1=\u0026dimension2=\u0026dimension3=\u0026dimension4=\u0026dimension5=\u0026gt_ms=176\u0026pv_id=i0haoe"}},"response":{"raw":"HTTP/2 202 Accepted\r\ncontent-type: text/html\r\nvary: origin, access-control-request-method, access-control-request-headers\r\naccess-control-allow-origin: *\r\ncache-control: no-store\r\ncontent-security-policy: frame-ancestors 'none'\r\ncontent-length: 0\r\ndate: Thu, 19 Mar 2026 12:30:08 GMT\r\nstrict-transport-security: max-age=31536000\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin\r\nx-frame-options: sameorigin\r\npermission-policy: accelerometer=(), ambient-light-sensor=(), autoplay=(), battery=(), bluetooth=(), browsing-topics=(), camera=(), ch-ua=(), ch-ua-arch=(), ch-ua-bitness=(), ch-ua-full-version=(), ch-ua-full-version-list=(), ch-ua-mobile=(), ch-ua-model=(), ch-ua-platform=(), ch-ua-platform-version=(), ch-ua-wow64=(), clipboard-read=(), clipboard-write=(), cross-origin-isolated=(), display-capture=(), document-domain=(), encrypted-media=(), execution-while-not-rendered=(), execution-while-out-of-viewport=(), fullscreen=(self), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), interest-cohort=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), navigation-override=(), payment=(), picture-in-picture=(), publickey-credentials-create=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), speaker-selection=(), storage-access=(), sync-xhr=(self), unload=(), usb=(), web-share=(), window-management=(), xr-spatial-tracking=()\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"202","status_text":"Accepted","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T00:47:03.388486Z","times_seen":13352920,"resource_available":true,"data":null}},"time_used":250,"timings":{"blocked":112,"dns":17,"connect":21,"send":0,"wait":25,"receive":0,"ssl":72},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"portswigger.net/burp","fqdn":"portswigger.net","domain":"portswigger.net","tld":"net"},"ip":{"addr":"3.164.240.86","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-19T12:30:06.897Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"portswigger.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Mon, 02 Mar 2026 00:00:00 GMT","end":"Tue, 15 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"EF:6D:90:97:A0:2D:B2:62:86:7A:16:70:DA:AC:7E:12:F1:59:C1:95","sha256":"5B:54:DD:9F:7D:8D:35:79:19:1E:C6:93:BA:32:13:5D:E1:D6:DB:7E:4A:47:D4:5B:D4:25:74:DF:95:CE:14:C9"}}},"request":{"raw":"GET /burp HTTP/1.1\r\nHost: portswigger.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: http://burpcollaborator.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: AWSALBAPP-0=_remove_; AWSALBAPP-1=_remove_; AWSALBAPP-2=_remove_; AWSALBAPP-3=_remove_\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nSec-Fetch-User: ?1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/html; charset=utf-8\r\ncontent-length: 115356\r\ndate: Thu, 19 Mar 2026 12:30:06 GMT\r\nserver: '; DELETE carlos FROM users --\r\ncache-control: public, max-age=60\r\netag: W/\"1c29c-gTAlv7U1w/KL45sksw83u0uRIDs\"\r\nset-cookie: SessionId=CfDJ8CpVwA%2BqwKBGh8%2FJi2OaZZfocwpeuNkyjQQDSGFVKka1%2BPmv8yTbITpCvlGv2Z6w3kj2To6LiKXglvVdD%2F5xgkKdTU0%2BMQxsgptPxJcLJFrALZzHtUg0wN6GfCsFfeEFZdrnk5sGtVlc9EjKznPlVsNva0wTq6SEAJ5Eo6cJkR0u; max-age=43200; domain=.portswigger.net; path=/; secure; samesite=lax; httponly\nAWSALBAPP-0=_remove_; Expires=Thu, 26 Mar 2026 12:30:06 GMT; Path=/\nAWSALBAPP-1=_remove_; Expires=Thu, 26 Mar 2026 12:30:06 GMT; Path=/\nAWSALBAPP-2=_remove_; Expires=Thu, 26 Mar 2026 12:30:06 GMT; Path=/\nAWSALBAPP-3=_remove_; Expires=Thu, 26 Mar 2026 12:30:06 GMT; Path=/\r\nstrict-transport-security: max-age=31536000; preload\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\ncontent-security-policy: default-src 'none';form-action 'self';base-uri 'none';child-src 'self' https://www.youtube.com/embed/;connect-src 'self' https://ps.containers.piwik.pro https://ps.piwik.pro https://tags.srv.stackadapt.com https://www.google.com/recaptcha/ https://formsubmission.portswigger.net https://*.portswigger.com https://go.portswigger.net https://tracking-api.g2.com;font-src 'self' https://fonts.gstatic.com data:;frame-src 'self' https://*.portswigger.com/ https://portswigger.net/ https://www.youtube.com/embed/ https://www.google.com/recaptcha/;img-src 'self' https://*.portswigger.com/ https://portswigger.net/ https://i.ytimg.com/ https://tags.srv.stackadapt.com/sa.jpeg;media-src 'self' https://d21v5rjx8s17cr.cloudfront.net/ https://d2gl1b374o3yzk.cloudfront.net/;script-src 'self' https://ps.containers.piwik.pro/ppms.js https://ps.piwik.pro/ppms.js https://www.youtube.com/iframe_api https://www.youtube.com/s/player/ https://tags.srv.stackadapt.com/events.js https://go.portswigger.net 'nonce-H2QD7ZRsfgXh7EgnB3jI0g==' 'strict-dynamic';style-src 'self' https://tags.srv.stackadapt.com/sa.css 'nonce-H2QD7ZRsfgXh7EgnB3jI0g==' https://fonts.googleapis.com/css2* https://unpkg.com/animate.css@4.1.1/animate.css https://unpkg.com/@teleporthq/teleport-custom-scripts/dist/style.css;\r\ncross-origin-resource-policy: same-origin\r\ncross-origin-opener-policy: same-origin\r\nx-hiring-now: We're on a mission to secure the web: https://portswigger.net/careers\r\nx-powered-by: Express\r\nx-robots-tag: all\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 07b1d101035e34f82920833b00a4e896.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P2\r\nx-amz-cf-id: u5n_Vg6m0mM5jr2xySHWsLbULw1LU4tjke1Tmh6CIttAombreEbdjw==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":115356,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (1479)","md5":"6b81b8034c649bfc417d1858f350318e","sha1":"813025bfb535c3f28be39b24b30f37bb4b91203b","sha256":"69117757b619a72c83be967326db926c09657c1765f7a8e6315feb92b180e889","sha512":"e50adeed18293f37e69ce1fdb47419db5ead428df2212c86112bd083b5ea18fd3cdbf911ad5f1dec7d74cbe136abcd4bd7d409f3d62b25b61803ff03a60890ca","ssdeep":"1536:IZ1dOp+FW4XC/tq52OHRnMud4TNM6vvvigeGT:IZ1q4XdlAia","tlshash":"36b361d26bf02df9132f40eac536672afe62d153e685248d79fdb2611fc2c42126399c","first_seen":"2026-03-19T12:30:20.9226Z","last_seen":"2026-03-19T12:30:20.9226Z","times_seen":1,"resource_available":true,"data":null}},"time_used":176,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":97,"receive":79,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tracking-api.g2.com/attribution_tracking/conversions/assign","fqdn":"tracking-api.g2.com","domain":"g2.com","tld":"com"},"ip":{"addr":"104.16.189.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://portswigger.net/burp","date":"2026-03-19T12:30:08.434Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tracking-api.g2.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 07 Mar 2026 11:56:17 GMT","end":"Fri, 05 Jun 2026 12:56:14 GMT"},"fingerprint":{"sha1":"88:7D:99:65:ED:86:48:B5:9A:0D:1E:2C:FF:ED:3E:FA:95:10:CB:BF","sha256":"2D:A1:FF:F7:85:9C:73:E5:04:98:65:0A:37:FA:2B:32:66:06:9A:46:00:1F:9A:5B:01:2D:D9:E4:A9:E6:E8:00"}}},"request":{"raw":"POST /attribution_tracking/conversions/assign HTTP/1.1\r\nHost: tracking-api.g2.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: multipart/form-data; boundary=---------------------------32887725227002269494126622402\r\nContent-Length: 1380\r\nOrigin: https://portswigger.net\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://portswigger.net/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1380,"data":"-----------------------------32887725227002269494126622402\r\nContent-Disposition: form-data; name=\"pid\"\r\n\r\n\r\n-----------------------------32887725227002269494126622402\r\nContent-Disposition: form-data; name=\"p\"\r\n\r\nhttps://portswigger.net/burp\r\n-----------------------------32887725227002269494126622402\r\nContent-Disposition: form-data; name=\"s\"\r\n\r\nexternal\r\n-----------------------------32887725227002269494126622402\r\nContent-Disposition: form-data; name=\"aid\"\r\n\r\n\r\n-----------------------------32887725227002269494126622402\r\nContent-Disposition: form-data; name=\"ua\"\r\n\r\nMozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\n-----------------------------32887725227002269494126622402\r\nContent-Disposition: form-data; name=\"sr\"\r\n\r\n1280x1024\r\n-----------------------------32887725227002269494126622402\r\nContent-Disposition: form-data; name=\"lang\"\r\n\r\nen-US\r\n-----------------------------32887725227002269494126622402\r\nContent-Disposition: form-data; name=\"tz\"\r\n\r\n0\r\n-----------------------------32887725227002269494126622402\r\nContent-Disposition: form-data; name=\"sid\"\r\n\r\n1030070\r\n-----------------------------32887725227002269494126622402\r\nContent-Disposition: form-data; name=\"uid\"\r\n\r\n\r\n-----------------------------32887725227002269494126622402\r\nContent-Disposition: form-data; name=\"e\"\r\n\r\n\r\n-----------------------------32887725227002269494126622402--\r\n"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 19 Mar 2026 12:30:08 GMT\r\ncontent-type: text/html\r\ncf-ray: 9dec7c96be052efa-OSL\r\ncf-cache-status: DYNAMIC\r\naccess-control-allow-origin: *\r\ncache-control: no-cache\r\nserver: cloudflare\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nvary: Origin, accept-encoding\r\naccess-control-allow-methods: OPTIONS, POST\r\naccess-control-expose-headers: \r\naccess-control-max-age: 7200\r\ncontent-security-policy: default-src 'self' *.g2crowd.com *.g2.com; connect-src 'self' *.g2crowd.com *.g2.com; font-src 'self' *.g2crowd.com *.g2.com; form-action 'self' *.g2crowd.com *.g2.com; frame-src 'self' *.g2crowd.com *.g2.com; img-src 'self' *.g2crowd.com *.g2.com; manifest-src 'self' *.g2crowd.com *.g2.com; media-src 'self' *.g2crowd.com *.g2.com; object-src 'self' *.g2crowd.com *.g2.com; script-src 'self' *.g2crowd.com *.g2.com; style-src 'self' *.g2crowd.com *.g2.com; worker-src 'self' *.g2crowd.com *.g2.com\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-request-id: a6b11a0dfe6b25dc196ac17d56454db2\r\nx-runtime: 0.002659\r\nx-xss-protection: 1; mode=block\r\nset-cookie: __cf_bm=JapIff3Ds6jhXsxqxuNUgXwGI6mh6AlIt6k7AEWjXFg-1773923408.4385207-1.0.1.1-f.pdr58d6BrmllShV75SfeWsjq0Nsm1w_dg0liIbUw_JwaxCAxqVQ91AFY_9iQPaFMCpZb53onmjjfD3nfDTOAd_DTvJ9PEZietsBlUp3TbFnb3HVONoXpQ.3s6HjvcN; HttpOnly; Secure; Path=/; Domain=g2.com; Expires=Thu, 19 Mar 2026 13:00:08 GMT\r\npriority: u=6,i=?0\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cloudflare_ended_at;desc=1773923408578, cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T00:47:03.388486Z","times_seen":13352920,"resource_available":true,"data":null}},"time_used":157,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":157,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}