sniffed SSL-encrypted HTTP traffic

POST /check_license HTTP/1.1
Content-Type: application/json
Accept-Language: en
Host: api.**********
Connection: Keep-Alive
Accept-Encoding: gzip
Content-Length: 67

{"licenseKey":"ABCDE-12345","version":"1.3;A;en\/US;Nexus 4;4.4.2"}
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 08 Mar 2014 14:10:32 GMT
Content-Type: application/json; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive

10
{"success":true}
0


POST /check_license HTTP/1.1
Content-Type: application/json
Accept-Language: en
Host: api.**********
Connection: Keep-Alive
Accept-Encoding: gzip
Content-Length: 97

{"licenseKey":"ABCDE-12345","deviceId":"abcdef0123456789","version":"1.3;A;en\/US;Nexus 4;4.4.2"}
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 08 Mar 2014 14:10:33 GMT
Content-Type: application/json; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive

10
{"success":true}
0


POST /identity/create HTTP/1.1
Content-Type: application/json
Accept-Language: en
Host: api.**********
Connection: Keep-Alive
Accept-Encoding: gzip
Content-Length: 60

{"publicKey":"cGs6S+z5sWUDbpZvd1Kr49ttSWISXEUdfShsXTa8rEo="}
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 08 Mar 2014 14:10:56 GMT
Content-Type: application/json; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive

7c
{"token":"+xA2YQ9Vg+2ZyTJChh4Rc+7M9IuC7a6n55DMXZtS7gQ=","tokenRespKeyPub":"6DsxFgjFcMVU\/oI\/j0YS7H2v680IrLbnf\/BY6gqiV3Y="}
0


POST /identity/create HTTP/1.1
Content-Type: application/json
Accept-Language: en
Host: api.**********
Connection: Keep-Alive
Accept-Encoding: gzip
Content-Length: 220

{"licenseKey":"ABCDE-12345","response":"QeCD0xJ4SgT8kvpkeZBLExNgxH4wjClmUYv0oCMB6VzOuysIXMW8erF0cznWpXMi","publicKey":"cGs6S+z5sWUDbpZvd1Kr49ttSWISXEUdfShsXTa8rEo=","token":"+xA2YQ9Vg+2ZyTJChh4Rc+7M9IuC7a6n55DMXZtS7gQ="}
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 08 Mar 2014 14:10:56 GMT
Content-Type: application/json; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive

39
{"success":true,"identity":"7N5KWMD4","serverGroup":"42"}
0


POST /identity/set_groupchat HTTP/1.1
Content-Type: application/json
Accept-Language: en
Host: api.**********
Connection: Keep-Alive
Accept-Encoding: gzip
Content-Length: 40

{"groupChat":true,"identity":"7N5KWMD4"}
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 08 Mar 2014 14:10:56 GMT
Content-Type: application/json; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive

80
{"token":"Uxsk8BNacOJvCdTHnmatM+zHzo5AwnrsnrhjkLtS7UhwoPas","tokenRespKeyPub":"6DsxFgjFcMVU\/oI\/j0YS7H2v680IrLbnf\/BY6gqiV3Y="}
0


POST /identity/set_groupchat HTTP/1.1
Content-Type: application/json
Accept-Language: en
Host: api.**********
Connection: Keep-Alive
Accept-Encoding: gzip
Content-Length: 229

{"response":"2uVkz70vuWUH78U4QpPp7x1nQMJ5F\/WSnf5uXAhzZ0U4zB6cjWk1RIcpu+DNloLfQtdbXA==","identity":"7N5KWMD4","nonce":"9On3eCmX2gnutWCIZ7JdPmuS3r6i+Tyt","token":"Uxsk8BNacOJvCdTHnmatM+zHzo5AwnrsnrhjkLtS7UhwoPas","groupChat":true}
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 08 Mar 2014 14:10:56 GMT
Content-Type: application/json; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive

10
{"success":true}
0


POST /identity/link_email HTTP/1.1
Content-Type: application/json
Accept-Language: en
Host: api.**********
Connection: Keep-Alive
Accept-Encoding: gzip
Content-Length: 62

{"lang":"en","email":"mail@sslhack.com","identity":"7N5KWMD4"}
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 08 Mar 2014 14:11:43 GMT
Content-Type: application/json; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive

8f
{"linked":false,"token":"UxslH+rOU6FVKzZtn9C0QKIBxHWGrGCcEHqQKF3co7LdNaOu","tokenRespKeyPub":"6DsxFgjFcMVU\/oI\/j0YS7H2v680IrLbnf\/BY6gqiV3Y="}
0


POST /identity/link_email HTTP/1.1
Content-Type: application/json
Accept-Language: en
Host: api.**********
Connection: Keep-Alive
Accept-Encoding: gzip
Content-Length: 254

{"response":"DSYK2v4qB3ac+hxZDB9SQLtiJ7EiKrgybedhzDx\/+a\/6R9H0N\/fPbvTGU\/QPbXthKumoRQ==","identity":"7N5KWMD4","nonce":"1SIoEW6kWpEO9wnyHVilfNgo4xkwx4S+","token":"UxslH+rOU6FVKzZtn9C0QKIBxHWGrGCcEHqQKF3co7LdNaOu","lang":"en","email":"mail@sslhack.com"}
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 08 Mar 2014 14:11:44 GMT
Content-Type: application/json; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive

10
{"success":true}
0


POST /identity/link_email HTTP/1.1
Content-Type: application/json
Accept-Language: en
Host: api.**********
Connection: Keep-Alive
Accept-Encoding: gzip
Content-Length: 50

{"email":"mail@sslhack.com","identity":"7N5KWMD4"}
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 08 Mar 2014 14:12:21 GMT
Content-Type: application/json; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive

90
{"linked":false,"token":"UxslRZt4vn1BhEoLSYXEftf\/fvjHRCagFDWn0hLexJMyoIAn","tokenRespKeyPub":"6DsxFgjFcMVU\/oI\/j0YS7H2v680IrLbnf\/BY6gqiV3Y="}
0


POST /check_license HTTP/1.1
Content-Type: application/json
Accept-Language: en
Host: api.**********
Connection: Keep-Alive
Accept-Encoding: gzip
Content-Length: 97

{"licenseKey":"ABCDE-12345","deviceId":"abcdef0123456789","version":"1.3;A;en\/US;Nexus 4;4.4.2"}
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 08 Mar 2014 14:13:35 GMT
Content-Type: application/json; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive

10
{"success":true}
0


------------------------------------------------------------------------------------
after visiting verification link:

POST /identity/link_email HTTP/1.1
Content-Type: application/json
Accept-Language: en
Host: api.**********
Connection: Keep-Alive
Accept-Encoding: gzip
Content-Length: 50

{"email":"mail@sslhack.com","identity":"7N5KWMD4"}
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 08 Mar 2014 14:13:55 GMT
Content-Type: application/json; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive

f
{"linked":true}
0


POST /check_license HTTP/1.1
Content-Type: application/json
Accept-Language: en
Host: api.**********
Connection: Keep-Alive
Accept-Encoding: gzip
Content-Length: 97

{"licenseKey":"ABCDE-12345","deviceId":"abcdef0123456789","version":"1.3;A;en\/US;Nexus 4;4.4.2"}
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 08 Mar 2014 14:17:24 GMT
Content-Type: application/json; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive

10
{"success":true}
0


GET /identity/NFFY2DZM HTTP/1.1
Accept-Language: en
Host: api.**********
Connection: Keep-Alive
Accept-Encoding: gzip


HTTP/1.1 200 OK
Server: nginx
Date: Sat, 08 Mar 2014 14:19:27 GMT
Content-Type: application/json; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive

52
{"identity":"NFFY2DZM","publicKey":"crCG+oUkhLiabcTY1C2SNHktAsQHT+9WZzlrRMCZS2g="}
0


POST /identity/check_groupchat HTTP/1.1
Content-Type: application/json
Accept-Language: en
Host: api.**********
Connection: Keep-Alive
Accept-Encoding: gzip
Content-Length: 27

{"identities":["NFFY2DZM"]}
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 08 Mar 2014 14:19:27 GMT
Content-Type: application/json; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive

24
{"groupChatIdentities":["NFFY2DZM"]}
0


POST /check_license HTTP/1.1
Content-Type: application/json
Accept-Language: en
Host: api.**********
Connection: Keep-Alive
Accept-Encoding: gzip
Content-Length: 97

{"licenseKey":"ABCDE-12345","deviceId":"abcdef0123456789","version":"1.3;A;en\/US;Nexus 4;4.4.2"}
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 08 Mar 2014 14:19:42 GMT
Content-Type: application/json; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive

10
{"success":true}
0


POST /check_license HTTP/1.1
Content-Type: application/json
Accept-Language: en
Host: api.**********
Connection: Keep-Alive
Accept-Encoding: gzip
Content-Length: 97

{"licenseKey":"ABCDE-12345","deviceId":"abcdef0123456789","version":"1.3;A;en\/US;Nexus 4;4.4.2"}
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 08 Mar 2014 14:22:03 GMT
Content-Type: application/json; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive

10
{"success":true}
0


POST /check_license HTTP/1.1
Content-Type: application/json
Accept-Language: en
Host: api.**********
Connection: Keep-Alive
Accept-Encoding: gzip
Content-Length: 97

{"licenseKey":"ABCDE-12345","deviceId":"abcdef0123456789","version":"1.3;A;en\/US;Nexus 4;4.4.2"}
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 08 Mar 2014 14:22:20 GMT
Content-Type: application/json; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive

10
{"success":true}
0


POST /check_license HTTP/1.1
Content-Type: application/json
Accept-Language: en
Host: api.**********
Connection: Keep-Alive
Accept-Encoding: gzip
Content-Length: 97

{"licenseKey":"ABCDE-12345","deviceId":"abcdef0123456789","version":"1.3;A;en\/US;Nexus 4;4.4.2"}
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 08 Mar 2014 14:23:12 GMT
Content-Type: application/json; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive

10
{"success":true}
0


POST /check_license HTTP/1.1
Content-Type: application/json
Accept-Language: en
Host: api.**********
Connection: Keep-Alive
Accept-Encoding: gzip
Content-Length: 97

{"licenseKey":"ABCDE-12345","deviceId":"abcdef0123456789","version":"1.3;A;en\/US;Nexus 4;4.4.2"}
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 08 Mar 2014 14:24:26 GMT
Content-Type: application/json; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive

10
{"success":true}
0


POST /identity/match HTTP/1.1
Content-Type: application/json
Accept-Language: en
Host: api.**********
Connection: Keep-Alive
Accept-Encoding: gzip
Content-Length: 224

{"emailHashes":["0soccn6F+5oS6O1AwzbRsZIfmn9HpMUO2nzaLAlfUBg=","YWJjZGVmMDEyMzQ1Njc4OWFiY2RlZjAxMjM0NTY3ODk="],"mobileNoHashes":["hoLIzidITywES0aP6hD6hzL+nGOM+sUkGTpqpHtHIPA=","YWJjZGVmMDEyMzQ1Njc4OWFiY2RlZjAxMjM0NTY3ODk="]}
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 08 Mar 2014 18:31:18 GMT
Content-Type: application/json; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive

f2
{"checkInterval":86400,"identities":[{"identity":"NFFY2DZM","publicKey":"crCG+oUkhLiabcTY1C2SNHktAsQHT+9WZzlrRMCZS2g=","emailHash":"0soccn6F+5oS6O1AwzbRsZIfmn9HpMUO2nzaLAlfUBg=","mobileNoHash":"hoLIzidITywES0aP6hD6hzL+nGOM+sUkGTpqpHtHIPA="}]}
0