r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 5d9435c884bf4a0777fdf4b57079ae09
7f04b9db47ffeec90ac6397416b7553e5336a550
fe77420ec3a11f547cf5172b68d30faa4fe0c13165ae305f0013b02914e61084
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "FE77420EC3A11F547CF5172B68D30FAA4FE0C13165AE305F0013B02914E61084"
Last-Modified: Sat, 25 Mar 2023 02:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14939
Expires: Sat, 25 Mar 2023 21:13:07 GMT
Date: Sat, 25 Mar 2023 17:04:08 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash dfd491ebe7381221b3674c2c8bf9e566
d2ac5badf17f348c28a52e9db10e6eb80e5a231a
34a026664386054b0b73c36cd1ddfce023551ee41963df0e38248bac1e1eb56c
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "34A026664386054B0B73C36CD1DDFCE023551EE41963DF0E38248BAC1E1EB56C"
Last-Modified: Fri, 24 Mar 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10088
Expires: Sat, 25 Mar 2023 19:52:16 GMT
Date: Sat, 25 Mar 2023 17:04:08 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 84db75194692d4afe13196bda6f22da8
4c1f49bc973a4917f146d93c8d598344edc021f6
a3bec66f95b3bdf1d310c726e8ed05f7b06c1901c62381a94582d581844d2c23
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Content-Type, Alert, Retry-After, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Sat, 25 Mar 2023 16:15:27 GMT
content-type: application/json
age: 2921
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 1313ee2f06606d09c45b06ff9e8e1001
285ca89d1d3ea45d35832bc6d9827f834b3bfe21
63463447d29550c3734f621be02ec85290fbdf4612f79f9fad7e94f7e066dcb0
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "63463447D29550C3734F621BE02EC85290FBDF4612F79F9FAD7E94F7E066DCB0"
Last-Modified: Fri, 24 Mar 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4476
Expires: Sat, 25 Mar 2023 18:18:44 GMT
Date: Sat, 25 Mar 2023 17:04:08 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-04-30-16-53-14.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-04-30-16-53-14.chain
IP
File type PEM certificate\012- , ASCII text
Hash e7bace7c1e04d44012e37ddffe36e5d5
3ac8d7c0a9d3e3f0b28b2530c7b8d8407b4042c2
6b4f80f2e95b26f6122ea8dcd0ef8d762299be822c69e839fc37581ca2bcb5f2
GET /chains/remote-settings.content-signature.mozilla.org-2023-04-30-16-53-14.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: 96hzb1V4Nmv3dHHBIx8yFde1AmB4DfD2mM7iGQ7uykQFQkkimuGGZ9L9poj8R5Os+1CfAfUOZcg=
x-amz-request-id: PDTRJ3CBJCAANHRA
x-amz-server-side-encryption: AES256
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Sat, 25 Mar 2023 16:54:59 GMT
age: 549
last-modified: Sat, 11 Mar 2023 16:53:15 GMT
etag: "e7bace7c1e04d44012e37ddffe36e5d5"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sat, 25 Mar 2023 17:04:08 GMT
content-type: application/json
content-length: 12
access-control-allow-credentials: true
access-control-expose-headers: content-type
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: ETag, Last-Modified, Retry-After, Content-Length, Alert, Cache-Control, Expires, Content-Type, Backoff, Pragma
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Sat, 25 Mar 2023 16:14:33 GMT
age: 2976
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
kddgsw.hhb369.com/
200 74 B IP
File type HTML document, ASCII text, with no line terminators
Hash a0d1eb39d34d10ad77daee2a7b85153c
a69914bcef7f18e5ac2d2b0fab5cb851944dfc27
18d97faef1a321a10110b2d404cdc78ee4bb1cd5672db598b84a3a4cbf2498ee
GET / HTTP/1.1
Host: kddgsw.hhb369.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200
cache-control: NO-CACHE
pragma: NO-CACHE
Connection: close
Content-Type: text/html;charset=UTF-8
Date: Sat, 25 Mar 2023 17:04:08 GMT
Set-Cookie: JSESSIONID=AA24ABCC7A555AA3762FF8D09146E4C4.sode06; domain=hhb369.com; Path=/; HttpOnly; Comment=CABIBCBC
visid_incap_2806257=+lzBDOCATKekb8Faga93vYgpH2QAAAAAQUIPAAAAAAAYvDmw1JvE7veZBuIEGEaE; expires=Sat, 23 Mar 2024 22:43:02 GMT; HttpOnly; path=/; Domain=.hhb369.com
nlbi_2806257=IznPefntoADWYU6T7JikaQAAAADycRkp34tRvPRnH5wgtYXv; path=/; Domain=.hhb369.com
incap_ses_632_2806257=DrA5fScIOH5keRb0kVHFCIgpH2QAAAAAQTV1pm8dQJ0e7WTPoK+OCw==; path=/; Domain=.hhb369.com
X-CDN: Imperva
Transfer-Encoding: chunked
X-Iinfo: 1004-16410997-16410999 NNNN CT(290 -1 0) RT(1679763847979 0) q(0 1 4 14) r(7 7) U24
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 70300b32357c46f3448d567189b64cb3
6ba66a5cf63cdbfeaec59b936151cc812bac56df
5a2b4f9fc5ebaa8062058bf68eae75fc28e06c6ef6a0e79c3c761c1d92f81cb9
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "5A2B4F9FC5EBAA8062058BF68EAE75FC28E06C6EF6A0E79C3C761C1D92F81CB9"
Last-Modified: Fri, 24 Mar 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8411
Expires: Sat, 25 Mar 2023 19:24:20 GMT
Date: Sat, 25 Mar 2023 17:04:09 GMT
Connection: keep-alive
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: NRtJROnU7BvJjZFyKDH6jw==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: qcD6V+7eJaJQhqxla3RvWjgASMk=
kddgsw.hhb369.com/?58fbe28e-1397-47f3-811c-f07735c45fb5
200 607 B URL HTTP/1.1 kddgsw.hhb369.com/?58fbe28e-1397-47f3-811c-f07735c45fb5
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF line terminators
Hash 0d1d4fddb1ae5211bc4451c7ace1d09b
8e438c012aa0e2360bc7d2bc4fb5580e6f3dc3db
8b6de80ff8c7909b5a11d33a9888e2ccae4904209d671ef8c41becac08037671
GET /?58fbe28e-1397-47f3-811c-f07735c45fb5 HTTP/1.1
Host: kddgsw.hhb369.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://kddgsw.hhb369.com/
Cookie: JSESSIONID=AA24ABCC7A555AA3762FF8D09146E4C4.sode06; visid_incap_2806257=+lzBDOCATKekb8Faga93vYgpH2QAAAAAQUIPAAAAAAAYvDmw1JvE7veZBuIEGEaE; nlbi_2806257=IznPefntoADWYU6T7JikaQAAAADycRkp34tRvPRnH5wgtYXv; incap_ses_632_2806257=DrA5fScIOH5keRb0kVHFCIgpH2QAAAAAQTV1pm8dQJ0e7WTPoK+OCw==
Upgrade-Insecure-Requests: 1
HTTP/1.1 200
Content-Type: text/html;charset=utf-8
Date: Sat, 25 Mar 2023 17:04:09 GMT
X-CDN: Imperva
Transfer-Encoding: chunked
X-Iinfo: 4-16410998-16411025 NNNN CT(290 -1 0) RT(1679763847979 726) q(0 0 2 -1) r(5 5) U24
kddgsw.hhb369.com/_index.jsp
302 0 B URL HTTP/1.1 kddgsw.hhb369.com/_index.jsp
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /_index.jsp HTTP/1.1
Host: kddgsw.hhb369.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://kddgsw.hhb369.com/?58fbe28e-1397-47f3-811c-f07735c45fb5
Cookie: JSESSIONID=AA24ABCC7A555AA3762FF8D09146E4C4.sode06; visid_incap_2806257=+lzBDOCATKekb8Faga93vYgpH2QAAAAAQUIPAAAAAAAYvDmw1JvE7veZBuIEGEaE; nlbi_2806257=IznPefntoADWYU6T7JikaQAAAADycRkp34tRvPRnH5wgtYXv; incap_ses_632_2806257=DrA5fScIOH5keRb0kVHFCIgpH2QAAAAAQTV1pm8dQJ0e7WTPoK+OCw==
Upgrade-Insecure-Requests: 1
HTTP/1.1 302
Location: /_index_kd.jsp
Content-Type: text/html;charset=utf-8
Content-Length: 0
Date: Sat, 25 Mar 2023 17:04:09 GMT
X-CDN: Imperva
X-Iinfo: 4-16410998-16411025 SNNN RT(1679763847979 1353) q(0 0 0 -1) r(3 3) U24
kddgsw.hhb369.com/tlbcp
200 0 B IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /tlbcp HTTP/1.1
Host: kddgsw.hhb369.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://kddgsw.hhb369.com/?58fbe28e-1397-47f3-811c-f07735c45fb5
Cookie: JSESSIONID=AA24ABCC7A555AA3762FF8D09146E4C4.sode06; visid_incap_2806257=+lzBDOCATKekb8Faga93vYgpH2QAAAAAQUIPAAAAAAAYvDmw1JvE7veZBuIEGEaE; nlbi_2806257=IznPefntoADWYU6T7JikaQAAAADycRkp34tRvPRnH5wgtYXv; incap_ses_632_2806257=DrA5fScIOH5keRb0kVHFCIgpH2QAAAAAQTV1pm8dQJ0e7WTPoK+OCw==
HTTP/1.1 200
CACHE-CONTROL: NO-CACHE
PRAGMA: NO-CACHE
Connection: close
Content-Type: text/html;charset=UTF-8
Content-Length: 0
Date: Sat, 25 Mar 2023 17:04:09 GMT
X-CDN: Imperva
X-Iinfo: 7-3598493-3598494 NNNN CT(289 -1 0) RT(1679763849340 0) q(0 0 3 -1) r(6 6) U24
kddgsw.hhb369.com/_index_kd.jsp
200 2.8 kB URL HTTP/1.1 kddgsw.hhb369.com/_index_kd.jsp
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (1333), with CRLF, LF line terminators
Hash 5ca4770754f6d88ae06e96b6b186a1a2
8d593bdcec81eb7d709900cd6bab06969676ff86
3873236f89d6ee7dc6d4918598275ea087a1c71e0727654a87811519f0ec7768
GET /_index_kd.jsp HTTP/1.1
Host: kddgsw.hhb369.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://kddgsw.hhb369.com/?58fbe28e-1397-47f3-811c-f07735c45fb5
Connection: keep-alive
Cookie: JSESSIONID=AA24ABCC7A555AA3762FF8D09146E4C4.sode06; visid_incap_2806257=+lzBDOCATKekb8Faga93vYgpH2QAAAAAQUIPAAAAAAAYvDmw1JvE7veZBuIEGEaE; nlbi_2806257=IznPefntoADWYU6T7JikaQAAAADycRkp34tRvPRnH5wgtYXv; incap_ses_632_2806257=DrA5fScIOH5keRb0kVHFCIgpH2QAAAAAQTV1pm8dQJ0e7WTPoK+OCw==
Upgrade-Insecure-Requests: 1
HTTP/1.1 200
Content-Type: text/html;charset=utf-8
Date: Sat, 25 Mar 2023 17:04:09 GMT
Transfer-Encoding: chunked
Content-Encoding: gzip
Vary: Accept-encoding
X-CDN: Imperva
X-Iinfo: 4-16410998-16411025 SNNN RT(1679763847979 1655) q(0 0 0 -1) r(3 3) U24
kddgsw.hhb369.com/favicon.ico
404 3 B URL HTTP/1.1 kddgsw.hhb369.com/favicon.ico
IP
File type ASCII text, with no line terminators
Hash 4f4adcbf8c6f66dcfc8a3282ac2bf10a
c35a9fc52bb556c79f8fa540df587a2bf465b940
6b3c238ebcf1f3c07cf0e556faa82c6b8fe96840ff4b6b7e9962a2d855843a0b
GET /favicon.ico HTTP/1.1
Host: kddgsw.hhb369.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://kddgsw.hhb369.com/?58fbe28e-1397-47f3-811c-f07735c45fb5
Cookie: JSESSIONID=AA24ABCC7A555AA3762FF8D09146E4C4.sode06; visid_incap_2806257=+lzBDOCATKekb8Faga93vYgpH2QAAAAAQUIPAAAAAAAYvDmw1JvE7veZBuIEGEaE; nlbi_2806257=IznPefntoADWYU6T7JikaQAAAADycRkp34tRvPRnH5wgtYXv; incap_ses_632_2806257=DrA5fScIOH5keRb0kVHFCIgpH2QAAAAAQTV1pm8dQJ0e7WTPoK+OCw==
HTTP/1.1 404
Content-Type: text/html;charset=UTF-8
Date: Sat, 25 Mar 2023 17:04:09 GMT
X-CDN: Imperva
Transfer-Encoding: chunked
X-Iinfo: 10-11797027-11797028 NNNN CT(289 -1 0) RT(1679763849441 1) q(0 0 3 -1) r(6 6) U24
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash b62c9b9530dd66bb7f03ba2ce3d835da
bf8560766de78dd925e395f59610ab2f1335e565
62a45c1bedd4241448ab43b535518e423b0500901328b3a0b984d758c9b0540d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "62A45C1BEDD4241448AB43B535518E423B0500901328B3A0B984D758C9B0540D"
Last-Modified: Fri, 24 Mar 2023 03:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8475
Expires: Sat, 25 Mar 2023 19:25:25 GMT
Date: Sat, 25 Mar 2023 17:04:10 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash b62c9b9530dd66bb7f03ba2ce3d835da
bf8560766de78dd925e395f59610ab2f1335e565
62a45c1bedd4241448ab43b535518e423b0500901328b3a0b984d758c9b0540d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "62A45C1BEDD4241448AB43B535518E423B0500901328B3A0B984D758C9B0540D"
Last-Modified: Fri, 24 Mar 2023 03:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8475
Expires: Sat, 25 Mar 2023 19:25:25 GMT
Date: Sat, 25 Mar 2023 17:04:10 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fca67e232-d39a-48ac-a0be-316741df0c53.jpeg
200 OK 5.3 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fca67e232-d39a-48ac-a0be-316741df0c53.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash aecd210f66f83c73c3450d047ae7448a
d68861e96e12e8a3f293dbae8b687f05b6e15afb
22b69c41c56e5538d91f824d5dc2e63ab5563f99ae8e429c9166f4b397cacd0e
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fca67e232-d39a-48ac-a0be-316741df0c53.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5296
x-amzn-requestid: 11fdf0c8-244c-4cd5-bfa7-4c77d777174f
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: CTiuzEqkIAMFXOw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-641e17f8-5c241d63598dbf595b54ead5;Sampled=0
x-amzn-remapped-date: Fri, 24 Mar 2023 21:36:56 GMT
x-amz-cf-pop: HIO52-P1, SEA19-C1
x-cache: Hit from cloudfront
x-amz-cf-id: b1KWFmKdRQ4DU0v5JmC7AJatpv2B5FAHKVWL7pFiyh13fqYDA5qydA==
via: 1.1 b5695e36d7fbc522ece27885d73757ae.cloudfront.net (CloudFront), 1.1 deaaf0548506de20925615eb51a7ea7e.cloudfront.net (CloudFront), 1.1 google
date: Fri, 24 Mar 2023 21:57:13 GMT
age: 68817
etag: "d68861e96e12e8a3f293dbae8b687f05b6e15afb"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdaf1038f-e1d8-41a0-a039-85a85d278271.jpeg
200 OK 6.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdaf1038f-e1d8-41a0-a039-85a85d278271.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 02e0767e0c72d95e30337ad42f5d15b3
79aa21ca35c9d98ea7d0713d219e9b67083bdc05
7991a0c4d409cca49259cb626d0de39684635f14fad72e074b303235026673a9
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdaf1038f-e1d8-41a0-a039-85a85d278271.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6511
x-amzn-requestid: 38d33f4d-2b85-4666-b778-04f4b4dfdf10
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: CTihSFIdIAMFRjA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-641e17a1-036a28e75189d05209396933;Sampled=0
x-amzn-remapped-date: Fri, 24 Mar 2023 21:35:29 GMT
x-amz-cf-pop: HIO52-P1, SEA19-C1
x-cache: Hit from cloudfront
x-amz-cf-id: eYAgUDZFGkaskq0A77VgX54hvvjtQtClrFyED3COkankS76uD7hTAQ==
via: 1.1 53ee82a7eb57de316cba44c26680b4a6.cloudfront.net (CloudFront), 1.1 1ec2938341958d70d56193d709c89dee.cloudfront.net (CloudFront), 1.1 google
date: Fri, 24 Mar 2023 21:43:52 GMT
age: 69618
etag: "79aa21ca35c9d98ea7d0713d219e9b67083bdc05"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe6f9abe8-74dc-41f6-984c-4a9e53a6198a.jpeg
200 OK 6.2 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe6f9abe8-74dc-41f6-984c-4a9e53a6198a.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash dd191e3a122d6e31f81e6e9d434c58d6
aec88022970c93289434f8097e4a663da33e5271
1f00c901ef479637ec703d7924526a970cb13dd2635b2bbb68b285df9d98e011
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe6f9abe8-74dc-41f6-984c-4a9e53a6198a.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6185
x-amzn-requestid: 223de50b-9a7e-4ac7-9305-336658eec4ac
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: CTiwYHoLoAMFXtg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-641e1802-226bd8524ade75234053ff50;Sampled=0
x-amzn-remapped-date: Fri, 24 Mar 2023 21:37:06 GMT
x-amz-cf-pop: HIO52-P1, SEA19-C1
x-cache: Hit from cloudfront
x-amz-cf-id: Ye0ADORg1hFVLxcNVj-qS60tlfguOEtyTx_XFU4ooJOcDHqNsqV3kw==
via: 1.1 3698a5f586d9ecca74d570e41f4c8516.cloudfront.net (CloudFront), 1.1 1ec2938341958d70d56193d709c89dee.cloudfront.net (CloudFront), 1.1 google
date: Fri, 24 Mar 2023 21:57:14 GMT
age: 68816
etag: "aec88022970c93289434f8097e4a663da33e5271"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4af2ab94-b5c3-4517-b9d7-97ddb369f62d.jpeg
200 OK 7.8 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4af2ab94-b5c3-4517-b9d7-97ddb369f62d.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 5773974a7341690f006b052ad02c94db
1b11316c952e2195da1646dd94671669e7e3bc2b
a06b72138745500cacc919fea29536ebd4188a1c483f6123e3402458e299f16a
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4af2ab94-b5c3-4517-b9d7-97ddb369f62d.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7800
x-amzn-requestid: bad99b1e-3923-4de9-8bea-4dd04e96f7cd
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: CTigfFGcIAMFdBA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-641e179c-0826b92d4c4af16553503600;Sampled=0
x-amzn-remapped-date: Fri, 24 Mar 2023 21:35:24 GMT
x-amz-cf-pop: HIO52-P1, SEA19-C1
x-cache: Hit from cloudfront
x-amz-cf-id: 9AGLmjvUSTKIsYIWECOR8QwdF4PP1tP1TweUm0VYvxQ0qskqj3YuLA==
via: 1.1 3698a5f586d9ecca74d570e41f4c8516.cloudfront.net (CloudFront), 1.1 995664ee945c06fc706b5cb8e0e650dc.cloudfront.net (CloudFront), 1.1 google
date: Fri, 24 Mar 2023 21:43:53 GMT
age: 69617
etag: "1b11316c952e2195da1646dd94671669e7e3bc2b"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7bda2583-e595-45ff-852f-d4b6bd713109.jpeg
200 OK 8.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7bda2583-e595-45ff-852f-d4b6bd713109.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 73f9697594d173d623b331b5c35eab8d
6323f751f6b7517f062a0442480f672086ea02a1
116cb71658b31e87f19c390b242c684f6505cc8edf90b7fc934ac726fc7ddd18
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7bda2583-e595-45ff-852f-d4b6bd713109.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8635
x-amzn-requestid: fc715b03-f48f-4300-b752-ab157a684f08
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: CTihcETyIAMFhYQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-641e17a2-68f685ec0f50dae026ea3f64;Sampled=0
x-amzn-remapped-date: Fri, 24 Mar 2023 21:35:30 GMT
x-amz-cf-pop: HIO52-P1, SEA19-C1
x-cache: Hit from cloudfront
x-amz-cf-id: i6dsVaC_gPijsRqh_EL5tZYZpjNEbQJvKIpPq501TIJZzcLUWeRz9w==
via: 1.1 ba490acb2ea716cd57876286ed686786.cloudfront.net (CloudFront), 1.1 34f8ef0e4c880df0650a814412a26ea6.cloudfront.net (CloudFront), 1.1 google
date: Fri, 24 Mar 2023 21:45:56 GMT
age: 69494
etag: "6323f751f6b7517f062a0442480f672086ea02a1"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F255e6a5a-97bb-4a35-8a48-4d120747a63c.jpeg
200 OK 4.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F255e6a5a-97bb-4a35-8a48-4d120747a63c.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 85351059b67b0a42eda7e69a31b3b4b4
b798268806dc2f79f033e5872676019faf0e0cc1
86e163b7159b197d6358ab01333ac6da221de0ebe1c5da8d5cef2977d38625fe
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F255e6a5a-97bb-4a35-8a48-4d120747a63c.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4000
x-amzn-requestid: 68dc01d7-3eed-48f6-8532-8efaa96cc1ec
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: CJpraEqyoAMFgNQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-641a2315-3852cc8961365a560d1fa02f;Sampled=0
x-amzn-remapped-date: Tue, 21 Mar 2023 21:35:17 GMT
x-amz-cf-pop: SEA19-C1
x-cache: Hit from cloudfront
x-amz-cf-id: I3GuoZ4ZxAtz0sKe3wrW67aitLlCAbaZkiPw23fl0F3FoumJDEnXiQ==
via: 1.1 288c777a01e22425da9494dad7a69734.cloudfront.net (CloudFront), 1.1 d90109c5a0c30f43223e0db85921c5c2.cloudfront.net (CloudFront), 1.1 google
date: Sat, 25 Mar 2023 05:56:24 GMT
age: 40066
etag: "b798268806dc2f79f033e5872676019faf0e0cc1"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
kddgsw.hhb369.com/CSS/frontend/master_frontend.css
200 2.0 kB URL HTTP/1.1 kddgsw.hhb369.com/CSS/frontend/master_frontend.css
IP
File type ASCII text, with CRLF line terminators
Hash 50f314baac2fe9a2a48340e07908a12e
501747bc50e31c829d56a7bf1ad78aff2f2cdbb5
b18c1c4df374ae76948f6d49af689c23bc10806b085e8e80bb35917a2ad9288b
GET /CSS/frontend/master_frontend.css HTTP/1.1
Host: kddgsw.hhb369.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://kddgsw.hhb369.com/_index_kd.jsp
Cookie: JSESSIONID=AA24ABCC7A555AA3762FF8D09146E4C4.sode06; visid_incap_2806257=+lzBDOCATKekb8Faga93vYgpH2QAAAAAQUIPAAAAAAAYvDmw1JvE7veZBuIEGEaE; nlbi_2806257=IznPefntoADWYU6T7JikaQAAAADycRkp34tRvPRnH5wgtYXv; incap_ses_632_2806257=DrA5fScIOH5keRb0kVHFCIgpH2QAAAAAQTV1pm8dQJ0e7WTPoK+OCw==
HTTP/1.1 200
Accept-Ranges: bytes
ETag: W/"6849-1609828466000"
Last-Modified: Tue, 05 Jan 2021 06:34:26 GMT
Content-Type: text/css
Date: Sat, 25 Mar 2023 17:04:09 GMT
Transfer-Encoding: chunked
Content-Encoding: gzip
Vary: Accept-encoding
X-CDN: Imperva
X-Iinfo: 4-16410998-16411025 SNNN RT(1679763847979 1966) q(0 0 0 -1) r(3 3) U24
kddgsw.hhb369.com/_Incapsula_Resource?SWJIYLWA=719d34d31c8e3a6e6fffd425f7e032f3&ns=6&cb=459247078
200 OK 20 kB URL HTTP/1.1 kddgsw.hhb369.com/_Incapsula_Resource?SWJIYLWA=719d34d31c8e3a6e6fffd425f7e032f3&ns=6&cb=459247078
IP
File type ASCII text, with very long lines (65536), with no line terminators
Hash 62e36e052038321de04f0484351748e6
387cf30da40a5483bbfbae403be2ec0d80228390
07c50bb4e2270629fa59f8ad9bd80c915f9e5eed62d7bc6c290e71594aebd7e6
NIDS Severity Alert suricata medium ETPRO HUNTING Observed Suspicious Hex Encoded String Inbound (decodeURIComponent)
GET /_Incapsula_Resource?SWJIYLWA=719d34d31c8e3a6e6fffd425f7e032f3&ns=6&cb=459247078 HTTP/1.1
Host: kddgsw.hhb369.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://kddgsw.hhb369.com/_index_kd.jsp
Cookie: JSESSIONID=AA24ABCC7A555AA3762FF8D09146E4C4.sode06; visid_incap_2806257=+lzBDOCATKekb8Faga93vYgpH2QAAAAAQUIPAAAAAAAYvDmw1JvE7veZBuIEGEaE; nlbi_2806257=IznPefntoADWYU6T7JikaQAAAADycRkp34tRvPRnH5wgtYXv; incap_ses_632_2806257=DrA5fScIOH5keRb0kVHFCIgpH2QAAAAAQTV1pm8dQJ0e7WTPoK+OCw==
HTTP/1.1 200 OK
Cache-Control: no-cache, no-store
Content-Type: application/javascript
Content-Encoding: gzip
X-Robots-Tag: noindex
Content-Length: 20395
kddgsw.hhb369.com/js/_index.js
200 2.3 kB URL HTTP/1.1 kddgsw.hhb369.com/js/_index.js
IP
File type ASCII text, with CRLF line terminators
Hash 032c1422f854beaf49f5cf45b72379d7
85e3cd4047be32d64b135bccbffb41dbdc0e94f9
707c3aee5d6b235c74caa695a8c08ba71eb3e23bcd0cd0bd5b9bea615806a208
GET /js/_index.js HTTP/1.1
Host: kddgsw.hhb369.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://kddgsw.hhb369.com/_index_kd.jsp
Cookie: JSESSIONID=AA24ABCC7A555AA3762FF8D09146E4C4.sode06; visid_incap_2806257=+lzBDOCATKekb8Faga93vYgpH2QAAAAAQUIPAAAAAAAYvDmw1JvE7veZBuIEGEaE; nlbi_2806257=IznPefntoADWYU6T7JikaQAAAADycRkp34tRvPRnH5wgtYXv; incap_ses_632_2806257=DrA5fScIOH5keRb0kVHFCIgpH2QAAAAAQTV1pm8dQJ0e7WTPoK+OCw==
HTTP/1.1 200
Accept-Ranges: bytes
ETag: W/"8117-1655258840000"
Last-Modified: Wed, 15 Jun 2022 02:07:20 GMT
Content-Type: text/html;charset=UTF-8
Date: Sat, 25 Mar 2023 17:04:10 GMT
Transfer-Encoding: chunked
Content-Encoding: gzip
Vary: Accept-encoding
X-CDN: Imperva
X-Iinfo: 10-11797027-11797028 SNNN RT(1679763849441 590) q(0 0 0 -1) r(3 3) U24
kddgsw.hhb369.com/mask.js
200 1.2 kB URL HTTP/1.1 kddgsw.hhb369.com/mask.js
IP
File type Unicode text, UTF-8 (with BOM) text, with CRLF line terminators
Hash fa5b38a6fea39def62d8427d09e544de
3d2ec779ab45b1e13bff513f2f6b12ae5c20fc56
4d0e9bcc3da522d2662900ac91de972496783560ddbf61435701196ecd95375c
GET /mask.js HTTP/1.1
Host: kddgsw.hhb369.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://kddgsw.hhb369.com/_index_kd.jsp
Cookie: JSESSIONID=AA24ABCC7A555AA3762FF8D09146E4C4.sode06; visid_incap_2806257=+lzBDOCATKekb8Faga93vYgpH2QAAAAAQUIPAAAAAAAYvDmw1JvE7veZBuIEGEaE; nlbi_2806257=IznPefntoADWYU6T7JikaQAAAADycRkp34tRvPRnH5wgtYXv; incap_ses_632_2806257=DrA5fScIOH5keRb0kVHFCIgpH2QAAAAAQTV1pm8dQJ0e7WTPoK+OCw==
HTTP/1.1 200
Accept-Ranges: bytes
ETag: W/"4357-1421744670000"
Last-Modified: Tue, 20 Jan 2015 09:04:30 GMT
Content-Type: text/html;charset=UTF-8
Date: Sat, 25 Mar 2023 17:04:10 GMT
Transfer-Encoding: chunked
Content-Encoding: gzip
Vary: Accept-encoding
X-CDN: Imperva
X-Iinfo: 5-27234900-27234901 NNNN CT(286 -1 0) RT(1679763849955 0) q(0 0 3 -1) r(6 6) U24
kddgsw.hhb369.com/preloadImages.js
200 845 B URL HTTP/1.1 kddgsw.hhb369.com/preloadImages.js
IP
File type Unicode text, UTF-8 (with BOM) text, with CRLF line terminators
Hash 524702202f912668c8219f01dcc53b4b
4f61720860ffb3ddaf5b3a090fc56428e856eb10
41b37b07967b8f462344e103865b1507e542fca3ec02b263f56bdb2c6282fea3
GET /preloadImages.js HTTP/1.1
Host: kddgsw.hhb369.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://kddgsw.hhb369.com/_index_kd.jsp
Cookie: JSESSIONID=AA24ABCC7A555AA3762FF8D09146E4C4.sode06; visid_incap_2806257=+lzBDOCATKekb8Faga93vYgpH2QAAAAAQUIPAAAAAAAYvDmw1JvE7veZBuIEGEaE; nlbi_2806257=IznPefntoADWYU6T7JikaQAAAADycRkp34tRvPRnH5wgtYXv; incap_ses_632_2806257=DrA5fScIOH5keRb0kVHFCIgpH2QAAAAAQTV1pm8dQJ0e7WTPoK+OCw==
HTTP/1.1 200
Accept-Ranges: bytes
ETag: W/"845-1421744450000"
Last-Modified: Tue, 20 Jan 2015 09:00:50 GMT
Content-Type: text/html;charset=UTF-8
Date: Sat, 25 Mar 2023 17:04:10 GMT
X-CDN: Imperva
Transfer-Encoding: chunked
X-Iinfo: 2-7511379-7511380 NNNN CT(289 -1 0) RT(1679763849956 0) q(0 0 3 -1) r(6 6) U24
kddgsw.hhb369.com/js/drop_down.js
200 419 B URL HTTP/1.1 kddgsw.hhb369.com/js/drop_down.js
IP
File type ASCII text, with CRLF line terminators
Hash 76d14236efef170457ac1e203776384b
fd0157ae262555fcd9f9a7466bed103e7089fc38
b3ba0f3f215a9476ea354fd58974d25cd09d19bf21695dc3e717f5b8e55840af
GET /js/drop_down.js HTTP/1.1
Host: kddgsw.hhb369.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://kddgsw.hhb369.com/_index_kd.jsp
Cookie: JSESSIONID=AA24ABCC7A555AA3762FF8D09146E4C4.sode06; visid_incap_2806257=+lzBDOCATKekb8Faga93vYgpH2QAAAAAQUIPAAAAAAAYvDmw1JvE7veZBuIEGEaE; nlbi_2806257=IznPefntoADWYU6T7JikaQAAAADycRkp34tRvPRnH5wgtYXv; incap_ses_632_2806257=DrA5fScIOH5keRb0kVHFCIgpH2QAAAAAQTV1pm8dQJ0e7WTPoK+OCw==
HTTP/1.1 200
Accept-Ranges: bytes
ETag: W/"419-1421744620000"
Last-Modified: Tue, 20 Jan 2015 09:03:40 GMT
Content-Type: text/html;charset=UTF-8
Date: Sat, 25 Mar 2023 17:04:10 GMT
X-CDN: Imperva
Transfer-Encoding: chunked
X-Iinfo: 7-3598498-3598499 NNNN CT(296 -1 0) RT(1679763849956 0) q(0 0 3 -1) r(6 6) U24
kddgsw.hhb369.com/js/jquery/jquery-1.8.3.min.js
200 34 kB URL HTTP/1.1 kddgsw.hhb369.com/js/jquery/jquery-1.8.3.min.js
IP
File type ASCII text, with very long lines (65482), with CRLF line terminators
Hash 31a719e42068ec34e850e0e8d92462f3
9017ba4cdb1a0bda51870abfee8e8394ae4d2cc1
ae6e5502dc7390c198fd7fd3ee8cbfcd5d32c48541344a472e79a2d725daebab
GET /js/jquery/jquery-1.8.3.min.js HTTP/1.1
Host: kddgsw.hhb369.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://kddgsw.hhb369.com/_index_kd.jsp
Cookie: JSESSIONID=AA24ABCC7A555AA3762FF8D09146E4C4.sode06; visid_incap_2806257=+lzBDOCATKekb8Faga93vYgpH2QAAAAAQUIPAAAAAAAYvDmw1JvE7veZBuIEGEaE; nlbi_2806257=IznPefntoADWYU6T7JikaQAAAADycRkp34tRvPRnH5wgtYXv; incap_ses_632_2806257=DrA5fScIOH5keRb0kVHFCIgpH2QAAAAAQTV1pm8dQJ0e7WTPoK+OCw==
HTTP/1.1 200
Accept-Ranges: bytes
ETag: W/"93637-1421744620000"
Last-Modified: Tue, 20 Jan 2015 09:03:40 GMT
Content-Type: text/html;charset=UTF-8
Date: Sat, 25 Mar 2023 17:04:10 GMT
Transfer-Encoding: chunked
Content-Encoding: gzip
Vary: Accept-encoding
X-CDN: Imperva
X-Iinfo: 4-16411106-16411107 NNNN CT(299 -1 0) RT(1679763849954 0) q(0 0 3 -1) r(6 6) U24
kddgsw.hhb369.com/_Incapsula_Resource?SWKMTFSR=1&e=0.15163934498460618
200 OK 1 B URL HTTP/1.1 kddgsw.hhb369.com/_Incapsula_Resource?SWKMTFSR=1&e=0.15163934498460618
IP
File type very short file (no magic)
Hash c4ca4238a0b923820dcc509a6f75849b
356a192b7913b04c54574d18c28d46e6395428ab
6b86b273ff34fce19d6b804eff5a3f5747ada4eaa22f1d49c01e52ddb7875b4b
GET /_Incapsula_Resource?SWKMTFSR=1&e=0.15163934498460618 HTTP/1.1
Host: kddgsw.hhb369.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://kddgsw.hhb369.com/_index_kd.jsp
Cookie: JSESSIONID=AA24ABCC7A555AA3762FF8D09146E4C4.sode06; visid_incap_2806257=+lzBDOCATKekb8Faga93vYgpH2QAAAAAQUIPAAAAAAAYvDmw1JvE7veZBuIEGEaE; nlbi_2806257=IznPefntoADWYU6T7JikaQAAAADycRkp34tRvPRnH5wgtYXv; incap_ses_632_2806257=DrA5fScIOH5keRb0kVHFCIgpH2QAAAAAQTV1pm8dQJ0e7WTPoK+OCw==; ___utmvc=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
HTTP/1.1 200 OK
Cache-Control: no-cache, no-store
Content-Type: text/plain
X-Robots-Tag: noindex
Content-Length: 1
kddgsw.hhb369.com/img.jpg?0.24115740407330244
200 3.6 kB URL HTTP/1.1 kddgsw.hhb369.com/img.jpg?0.24115740407330244
IP
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 205x45, components 3\012- data
Hash 5efd627c29d308649a4147e5016df640
f1b65e53cee74edb4d4dd2f5a0ce12c4ca8b93dc
090dd0a5aef7eb3d70175ea5d4fe59edabc4f3816fce393d9ba7e1ebb1bbe617
GET /img.jpg?0.24115740407330244 HTTP/1.1
Host: kddgsw.hhb369.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://kddgsw.hhb369.com/_index_kd.jsp
Cookie: JSESSIONID=AA24ABCC7A555AA3762FF8D09146E4C4.sode06; visid_incap_2806257=+lzBDOCATKekb8Faga93vYgpH2QAAAAAQUIPAAAAAAAYvDmw1JvE7veZBuIEGEaE; nlbi_2806257=IznPefntoADWYU6T7JikaQAAAADycRkp34tRvPRnH5wgtYXv; incap_ses_632_2806257=DrA5fScIOH5keRb0kVHFCIgpH2QAAAAAQTV1pm8dQJ0e7WTPoK+OCw==
HTTP/1.1 200
Content-Type: image/jpg;charset=UTF-8
Content-Length: 3585
Date: Sat, 25 Mar 2023 17:04:11 GMT
X-CDN: Imperva
X-Iinfo: 10-11797027-11797028 SNNN RT(1679763849441 2052) q(0 0 0 -1) r(3 3) U24
kddgsw.hhb369.com/images/icon_all.gif
200 54 B URL HTTP/1.1 kddgsw.hhb369.com/images/icon_all.gif
IP
File type GIF image data, version 89a, 20 x 4\012- data
Hash 834f4a370c7cd95a5ab1cc749eac7ad8
8601ab4e042a6d021547abd510b1e4fe610d0be7
2d4759fcd7bbb9015dd90060eba88413e54655219e48bff2c01e47ec5f2faffa
GET /images/icon_all.gif HTTP/1.1
Host: kddgsw.hhb369.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://kddgsw.hhb369.com/CSS/frontend/master_frontend.css
Cookie: JSESSIONID=AA24ABCC7A555AA3762FF8D09146E4C4.sode06; visid_incap_2806257=+lzBDOCATKekb8Faga93vYgpH2QAAAAAQUIPAAAAAAAYvDmw1JvE7veZBuIEGEaE; nlbi_2806257=IznPefntoADWYU6T7JikaQAAAADycRkp34tRvPRnH5wgtYXv; incap_ses_632_2806257=DrA5fScIOH5keRb0kVHFCIgpH2QAAAAAQTV1pm8dQJ0e7WTPoK+OCw==
HTTP/1.1 200
Accept-Ranges: bytes
ETag: W/"54-1421744510000"
Last-Modified: Tue, 20 Jan 2015 09:01:50 GMT
Content-Type: image/gif
Content-Length: 54
Date: Sat, 25 Mar 2023 17:04:11 GMT
X-CDN: Imperva
X-Iinfo: 5-27234900-27234901 SNNN RT(1679763849955 1543) q(0 0 0 -1) r(3 3) U24
kddgsw.hhb369.com/frontend_images/browser_icon.png
200 7.0 kB URL HTTP/1.1 kddgsw.hhb369.com/frontend_images/browser_icon.png
IP
File type PNG image data, 26 x 112, 8-bit/color RGBA, interlaced\012- data
Hash e2f01fcad75d22936cb13f2a8efcaa6b
da733142d6091355524e1e3cdfa0bab54c027ca5
11cd56848295d6ca12a4cca3efa88361cd531957b305da5a0ba8c0477332e662
GET /frontend_images/browser_icon.png HTTP/1.1
Host: kddgsw.hhb369.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://kddgsw.hhb369.com/CSS/frontend/master_frontend.css
Cookie: JSESSIONID=AA24ABCC7A555AA3762FF8D09146E4C4.sode06; visid_incap_2806257=+lzBDOCATKekb8Faga93vYgpH2QAAAAAQUIPAAAAAAAYvDmw1JvE7veZBuIEGEaE; nlbi_2806257=IznPefntoADWYU6T7JikaQAAAADycRkp34tRvPRnH5wgtYXv; incap_ses_632_2806257=DrA5fScIOH5keRb0kVHFCIgpH2QAAAAAQTV1pm8dQJ0e7WTPoK+OCw==
HTTP/1.1 200
Accept-Ranges: bytes
ETag: W/"7046-1606197944000"
Last-Modified: Tue, 24 Nov 2020 06:05:44 GMT
Content-Type: image/png
Content-Length: 7046
Date: Sat, 25 Mar 2023 17:04:11 GMT
X-CDN: Imperva
X-Iinfo: 2-7511379-7511380 SNNN RT(1679763849956 1543) q(0 1 1 -1) r(3 3) U24
ocsp.sectigo.com/
200 OK 471 B IP
Hash d6e7003919eb0959c0d5b5633a945580
4953d00a351feea530c1c0fed09192b85a26144a
e36c871d86d12413d499f164e902d6e56d52c03518048a5e450fa52bdc0fd92d
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 25 Mar 2023 17:04:13 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Wed, 22 Mar 2023 20:40:58 GMT
Expires: Wed, 29 Mar 2023 20:40:57 GMT
Etag: "4953d00a351feea530c1c0fed09192b85a26144a"
Cache-Control: max-age=358004,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb5
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7ad8bb5109fc1bfe-OSL
ocsp.sectigo.com/
200 OK 471 B IP
Hash d6e7003919eb0959c0d5b5633a945580
4953d00a351feea530c1c0fed09192b85a26144a
e36c871d86d12413d499f164e902d6e56d52c03518048a5e450fa52bdc0fd92d
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 25 Mar 2023 17:04:13 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Wed, 22 Mar 2023 20:40:58 GMT
Expires: Wed, 29 Mar 2023 20:40:57 GMT
Etag: "4953d00a351feea530c1c0fed09192b85a26144a"
Cache-Control: max-age=358003,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb4
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7ad8bb510fb5b511-OSL
kddgsw.hhb369.com/images/loginBg.jpg
200 70 kB URL HTTP/1.1 kddgsw.hhb369.com/images/loginBg.jpg
IP
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], progressive, precision 8, 1920x1200, components 3\012- data
Hash 0c1333ef02b4e2a0d35e6b0630b40d1d
03bdc58b7c8be4df8f673f5938ade95b3ca110cf
caa1b0ae2eb19c27531a00a520935d68cad88c6c4f0273ef2ee48a93620e2359
GET /images/loginBg.jpg HTTP/1.1
Host: kddgsw.hhb369.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://kddgsw.hhb369.com/CSS/frontend/master_frontend.css
Cookie: JSESSIONID=AA24ABCC7A555AA3762FF8D09146E4C4.sode06; visid_incap_2806257=+lzBDOCATKekb8Faga93vYgpH2QAAAAAQUIPAAAAAAAYvDmw1JvE7veZBuIEGEaE; nlbi_2806257=IznPefntoADWYU6T7JikaQAAAADycRkp34tRvPRnH5wgtYXv; incap_ses_632_2806257=DrA5fScIOH5keRb0kVHFCIgpH2QAAAAAQTV1pm8dQJ0e7WTPoK+OCw==
HTTP/1.1 200
Accept-Ranges: bytes
ETag: W/"70456-1609828466000"
Last-Modified: Tue, 05 Jan 2021 06:34:26 GMT
Content-Type: image/jpeg
Content-Length: 70456
Date: Sat, 25 Mar 2023 17:04:11 GMT
X-CDN: Imperva
X-Iinfo: 4-16411106-16411107 SNNN RT(1679763849954 1538) q(0 0 0 -1) r(3 3) U24
kdssl.hhb369.com/pixel.png?0.47801040770557324
200 OK 862 B URL HTTP/1.1 kdssl.hhb369.com/pixel.png?0.47801040770557324
IP
ASN #54994 QUANTILNETWORKS
File type PNG image data, 7 x 30, 8-bit/color RGBA, non-interlaced\012- data
Hash 7c38a9e85ce9e97141ad826c8ea99e3e
220a24256d2851e67dde1ef10b4a9335fe256e32
b20fd0a47ebc87e989079dfdefcc3f308dfcf06baf00f7b2e35b51cbee4d8046
GET /pixel.png?0.47801040770557324 HTTP/1.1
Host: kdssl.hhb369.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://kddgsw.hhb369.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Sat, 25 Mar 2023 17:04:13 GMT
Content-Type: text/html;charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Accept-Ranges: bytes
ETag: W/"3617-1421744572000"
Last-Modified: Tue, 20 Jan 2015 09:02:52 GMT
Content-Encoding: gzip
Via: 1.1 PS-FRA-01Qsa154:9 (W), 1.1 PShlamstdAMS1se91:17 (W)
X-Px: ms PShlamstdAMS1se91AMS,ms PS-FRA-01Qsa154FRA(origin)
X-Ws-Request-Id: 641f298d_PShlamstdAMS1se91_8651-48524
Server: PWS/8.3.1.0.8
kdhbvf.hhb369.com/pixel.png?0.1863007916125966
200 OK 862 B URL HTTP/1.1 kdhbvf.hhb369.com/pixel.png?0.1863007916125966
IP
ASN #54994 QUANTILNETWORKS
File type PNG image data, 7 x 30, 8-bit/color RGBA, non-interlaced\012- data
Hash 7c38a9e85ce9e97141ad826c8ea99e3e
220a24256d2851e67dde1ef10b4a9335fe256e32
b20fd0a47ebc87e989079dfdefcc3f308dfcf06baf00f7b2e35b51cbee4d8046
GET /pixel.png?0.1863007916125966 HTTP/1.1
Host: kdhbvf.hhb369.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://kddgsw.hhb369.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Sat, 25 Mar 2023 17:04:13 GMT
Content-Type: text/html;charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Accept-Ranges: bytes
ETag: W/"3617-1421744572000"
Last-Modified: Tue, 20 Jan 2015 09:02:52 GMT
Content-Encoding: gzip
Via: 1.1 PShlamstdAMS1se91:17 (W)
X-Px: ms PShlamstdAMS1se91AMS(origin)
X-Ws-Request-Id: 641f298d_PShlamstdAMS1cc96_27181-27058
Server: PWS/8.3.1.0.8
107.154.76.179
163.171.140.79
23.36.77.32