| shopcavortress.com/aol/aol/new/auth/modernroofingexperts/270UOZ4N838DUZMOAK8NT1/ZGFybnUucnVnc2F0YXlhQGxlbmRsZWFzZS5jb20= | 162.241.87.113 | | 0 B |
URL shopcavortress.com/aol/aol/new/auth/modernroofingexperts/270UOZ4N838DUZMOAK8NT1/ZGFybnUucnVnc2F0YXlhQGxlbmRsZWFzZS5jb20= IP162.241.87.113:0 ASN#19871 NETWORK-SOLUTIONS-HOSTING
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer | Verdict | Alert | OpenPhish | phishing | Office365 |
GET /aol/aol/new/auth/modernroofingexperts/270UOZ4N838DUZMOAK8NT1/ZGFybnUucnVnc2F0YXlhQGxlbmRsZWFzZS5jb20= HTTP/1.1
Host: shopcavortress.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 19 Apr 2024 00:08:04 GMT
Server: Apache
refresh: 0;url=https://cloudflare-ipfs.com/ipfs/bafkreieupoobxo4lruczguywjqufdz3ixeg5fxlwlz6wbmzfogwhuzoghe#darnu.rugsataya@lendlease.com
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
|
|
| cloudflare-ipfs.com/favicon.ico | 104.17.96.13 | 404 Not Found | 14 B |
URL GET HTTP/3cloudflare-ipfs.com/favicon.ico IP104.17.96.13:443
Requested byhttps://cloudflare-ipfs.com/ipfs/bafkreieupoobxo4lruczguywjqufdz3ixeg5fxlwlz6wbmzfogwhuzoghe#darnu.rugsataya@lendlease.com CertificateIssuerLet's Encrypt Subjectcloudflare-ipfs.com Fingerprint18:E5:C9:71:96:8A:A9:48:E2:79:2A:29:91:D2:4E:46:90:B7:5D:9F ValiditySun, 25 Feb 2024 02:55:05 GMT - Sat, 25 May 2024 02:55:04 GMT
File typeASCII text, with no line terminators Hashd0fbda9855d118740f1105334305c126 bc3023b36063a7681db24681472b54fa11f0d4ec a469ab4ca4e55bf547566e9ebfa1b809c933207e9d558156bc0c4252b17533fe
Analyzer | Verdict | Alert | PhishTank | phishing | Other |
GET /favicon.ico HTTP/1.1
Host: cloudflare-ipfs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cloudflare-ipfs.com/ipfs/bafkreieupoobxo4lruczguywjqufdz3ixeg5fxlwlz6wbmzfogwhuzoghe
Cookie: __cf_bm=ExpXcyzsOaFL1gLL51htuyrhAjGFUklUl15.mQBh.UM-1713485284-1.0.1.1-3MPm4Ua.lzDaNlSNHGfm3HVqS.4BnNhXnttF3CNf28CxTN26eaiA8i9gbUoQw0gTdHiV9oU1x8f9QGGM04oUgA
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 404 Not Found
date: Fri, 19 Apr 2024 00:08:05 GMT
content-type: text/plain;charset=UTF-8
content-length: 14
vary: Accept-Encoding
server: cloudflare
cf-ray: 8768a87868550afa-OSL
alt-svc: h3=":443"; ma=86400
|
|
| cdn.socket.io/4.6.0/socket.io.min.js | 143.204.55.115 | 200 OK | 14 kB |
URL GET HTTP/2cdn.socket.io/4.6.0/socket.io.min.js IP143.204.55.115:443
Requested byhttps://cloudflare-ipfs.com/ipfs/bafkreieupoobxo4lruczguywjqufdz3ixeg5fxlwlz6wbmzfogwhuzoghe#darnu.rugsataya@lendlease.com CertificateIssuerAmazon Subjectcdn.socket.io FingerprintBB:7D:4E:26:70:F6:06:2A:12:E9:92:A8:F1:9F:CD:82:0B:BF:48:ED ValiditySun, 22 Oct 2023 00:00:00 GMT - Sun, 17 Nov 2024 23:59:59 GMT
File typegzip compressed data, from Unix Hash3844b587d5fa674b31c9c1a89fdd27b9 7d0c4647c78bc764cd75b12bf478820018290ae4 96818b9c6f6a7db66adcadd0e1d873d9cebaeacb73fad807d867383190371a09
GET /4.6.0/socket.io.min.js HTTP/1.1
Host: cdn.socket.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://cloudflare-ipfs.com
DNT: 1
Connection: keep-alive
Referer: https://cloudflare-ipfs.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
access-control-allow-origin: *
cache-control: public, max-age=31536000, immutable
content-disposition: inline; filename="socket.io.min.js"
content-encoding: gzip
date: Mon, 15 Jan 2024 16:33:26 GMT
etag: W/"80f5b8c6a9eeac15de93e5a112036a06"
server: Vercel
strict-transport-security: max-age=63072000
x-vercel-cache: HIT
x-vercel-id: fra1::gsg9m-1705336406533-adf1f7d78a76
x-cache: Hit from cloudfront
via: 1.1 185768229530368be94556dcab1c486a.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: yORjU-8gUEegpv6aXYFq_gS943N2GAhFwOtiuBQbF9UZVQlVjEacEA==
age: 8148879
X-Firefox-Spdy: h2
|
|
| www.w3schools.com/w3css/4/w3.css | 192.229.133.221 | 200 OK | 5.3 kB |
URL GET HTTP/2www.w3schools.com/w3css/4/w3.css IP192.229.133.221:443
Requested byhttps://cloudflare-ipfs.com/ipfs/bafkreieupoobxo4lruczguywjqufdz3ixeg5fxlwlz6wbmzfogwhuzoghe#darnu.rugsataya@lendlease.com CertificateIssuerDigiCert Inc Subject*.w3schools.com Fingerprint20:AF:FF:E1:FC:DB:58:C8:05:B7:D2:97:1F:8F:A1:C6:AD:ED:59:3A ValidityWed, 03 Apr 2024 00:00:00 GMT - Sun, 04 May 2025 23:59:59 GMT
File typeUnicode text, UTF-8 (with BOM) text Hashba0537e9574725096af97c27d7e54f76 bd46b47d74d344f435b5805114559d45979762d5 4a7611bc677873a0f87fe21727bc3a2a43f57a5ded3b10ce33a0f371a2e6030f
GET /w3css/4/w3.css HTTP/1.1
Host: www.w3schools.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cloudflare-ipfs.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-encoding: gzip
accept-ranges: bytes
age: 6629
cache-control: public,max-age=14400,public
content-security-policy: frame-ancestors 'self' https://mycourses.w3schools.com;
content-type: text/css
date: Fri, 19 Apr 2024 00:08:06 GMT
etag: "076f6bb690da1:0+gzip"
last-modified: Wed, 17 Apr 2024 10:57:32 GMT
server: ECS (ska/F716)
vary: Accept-Encoding
x-cache: HIT
x-content-security-policy: frame-ancestors 'self' https://mycourses.w3schools.com;
x-powered-by: ASP.NET
content-length: 5256
X-Firefox-Spdy: h2
|
|
| aadcdn.msftauth.net/shared/1.0/content/images/picker_verify_code_b41922ebdaebec16b19999fc6054a15a.svg | 152.199.23.37 | 200 OK | 790 B |
URL GET HTTP/2aadcdn.msftauth.net/shared/1.0/content/images/picker_verify_code_b41922ebdaebec16b19999fc6054a15a.svg IP152.199.23.37:443
Requested byhttps://cloudflare-ipfs.com/ipfs/bafkreieupoobxo4lruczguywjqufdz3ixeg5fxlwlz6wbmzfogwhuzoghe#darnu.rugsataya@lendlease.com CertificateIssuerDigiCert Inc Subjectaadcdn.msftauth.net Fingerprint3C:9E:70:F5:B3:D1:80:80:8C:97:1C:7B:7E:A8:2C:D8:7B:94:95:0B ValidityFri, 01 Dec 2023 00:00:00 GMT - Sun, 01 Dec 2024 23:59:59 GMT
File typeSVG Scalable Vector Graphics image Hashf7ab697e65b83ce9870a4736085deeec 5ff40bff26b523fbbeaa5228a2aac63e44afaa90 cbb3706e65b35a43bdcfebd23b5479dc0542ca7e23197869b683d12b524472fe
GET /shared/1.0/content/images/picker_verify_code_b41922ebdaebec16b19999fc6054a15a.svg HTTP/1.1
Host: aadcdn.msftauth.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cloudflare-ipfs.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-encoding: gzip
accept-ranges: bytes
access-control-allow-origin: *
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
age: 2152081
cache-control: public, max-age=31536000
content-md5: 1jQlecEJaGhFO2st5KXLhg==
content-type: image/svg+xml
date: Fri, 19 Apr 2024 00:08:06 GMT
etag: 0x8DB5C3F4AC59B47
last-modified: Wed, 24 May 2023 10:11:51 GMT
server: ECAcc (ska/F6A9)
vary: Accept-Encoding
x-cache: HIT
x-ms-blob-type: BlockBlob
x-ms-lease-status: unlocked
x-ms-request-id: 2a281429-101e-0042-725a-7edf33000000
x-ms-version: 2009-09-19
content-length: 790
X-Firefox-Spdy: h2
|
|
| aadcdn.msauth.net/shared/1.0/content/images/microsoft_logo_564db913a7fa0ca42727161c6d031bef.svg | 13.107.246.53 | 200 OK | 1.4 kB |
URL GET HTTP/2aadcdn.msauth.net/shared/1.0/content/images/microsoft_logo_564db913a7fa0ca42727161c6d031bef.svg IP13.107.246.53:443 ASN#8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested byhttps://cloudflare-ipfs.com/ipfs/bafkreieupoobxo4lruczguywjqufdz3ixeg5fxlwlz6wbmzfogwhuzoghe#darnu.rugsataya@lendlease.com CertificateIssuerDigiCert Inc Subjectaadcdn.msauth.net FingerprintEB:7C:D1:4E:EF:B5:D4:72:25:0B:1A:AF:5F:10:3D:EA:13:80:5A:47 ValidityMon, 29 Jan 2024 00:00:00 GMT - Wed, 29 Jan 2025 23:59:59 GMT
File typeSVG Scalable Vector Graphics image Hashee5c8d9fb6248c938fd0dc19370e90bd d01a22720918b781338b5bbf9202b241a5f99ee4 04d29248ee3a13a074518c93a18d6efc491bf1f298f9b87fc989a6ae4b9fad7a
GET /shared/1.0/content/images/microsoft_logo_564db913a7fa0ca42727161c6d031bef.svg HTTP/1.1
Host: aadcdn.msauth.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cloudflare-ipfs.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 19 Apr 2024 00:08:06 GMT
content-type: image/svg+xml
content-length: 1435
cache-control: public, max-age=31536000
content-encoding: gzip
last-modified: Wed, 24 May 2023 10:11:48 GMT
etag: 0x8DB5C3F4911527F
x-ms-request-id: 4b1e6589-401e-005e-7970-9024b0000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
access-control-allow-origin: *
x-azure-ref: 20240419T000806Z-17f9dd4c48bf6fqjwurn81dzp800000001f00000000052d6
x-fd-int-roxy-purgeid: 4554691
x-cache: TCP_HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| aadcdn.msauth.net/shared/1.0/content/images/backgrounds/2_11d9e3bcdfede9ce5ce5ace2d129f1c4.svg | 13.107.246.53 | 200 OK | 673 B |
URL GET HTTP/2aadcdn.msauth.net/shared/1.0/content/images/backgrounds/2_11d9e3bcdfede9ce5ce5ace2d129f1c4.svg IP13.107.246.53:443 ASN#8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested byhttps://cloudflare-ipfs.com/ipfs/bafkreieupoobxo4lruczguywjqufdz3ixeg5fxlwlz6wbmzfogwhuzoghe#darnu.rugsataya@lendlease.com CertificateIssuerDigiCert Inc Subjectaadcdn.msauth.net FingerprintEB:7C:D1:4E:EF:B5:D4:72:25:0B:1A:AF:5F:10:3D:EA:13:80:5A:47 ValidityMon, 29 Jan 2024 00:00:00 GMT - Wed, 29 Jan 2025 23:59:59 GMT
File typeSVG Scalable Vector Graphics image Hashbc3d32a696895f78c19df6c717586a5d 9191cb156a30a3ed79c44c0a16c95159e8ff689d 0e88b6fcbb8591edfd28184fa70a04b6dd3af8a14367c628edd7caba32e58c68
GET /shared/1.0/content/images/backgrounds/2_11d9e3bcdfede9ce5ce5ace2d129f1c4.svg HTTP/1.1
Host: aadcdn.msauth.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cloudflare-ipfs.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 19 Apr 2024 00:08:06 GMT
content-type: image/svg+xml
content-length: 673
cache-control: public, max-age=31536000
content-encoding: gzip
last-modified: Wed, 24 May 2023 10:11:46 GMT
etag: 0x8DB5C3F47E260FD
x-ms-request-id: 67cf9d40-501e-007b-1f84-903289000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
access-control-allow-origin: *
x-azure-ref: 20240419T000806Z-17f9dd4c48bf6fqjwurn81dzp800000001f00000000052d7
x-fd-int-roxy-purgeid: 4554691
x-cache: TCP_HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| aadcdn.msauth.net/shared/1.0/content/images/picker_verify_sms_12b7d768ba76f2e782cc74e328171091.svg | 13.107.246.53 | 200 OK | 199 B |
URL GET HTTP/2aadcdn.msauth.net/shared/1.0/content/images/picker_verify_sms_12b7d768ba76f2e782cc74e328171091.svg IP13.107.246.53:443 ASN#8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested byhttps://cloudflare-ipfs.com/ipfs/bafkreieupoobxo4lruczguywjqufdz3ixeg5fxlwlz6wbmzfogwhuzoghe#darnu.rugsataya@lendlease.com CertificateIssuerDigiCert Inc Subjectaadcdn.msauth.net FingerprintEB:7C:D1:4E:EF:B5:D4:72:25:0B:1A:AF:5F:10:3D:EA:13:80:5A:47 ValidityMon, 29 Jan 2024 00:00:00 GMT - Wed, 29 Jan 2025 23:59:59 GMT
File typeSVG Scalable Vector Graphics image Hash27a6d18b56f46818420e60a773c36d4e 346ec247500fddc51cc1d85b8f4b9a343f7a48d3 8ed8f3acb9b87f99e42c74463d4e2be96ee85b8a87cd6eb874295ace420a5904
GET /shared/1.0/content/images/picker_verify_sms_12b7d768ba76f2e782cc74e328171091.svg HTTP/1.1
Host: aadcdn.msauth.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cloudflare-ipfs.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 19 Apr 2024 00:08:06 GMT
content-type: image/svg+xml
content-length: 199
cache-control: public, max-age=31536000
content-encoding: gzip
last-modified: Wed, 24 May 2023 10:11:49 GMT
etag: 0x8DB5C3F49C21D98
x-ms-request-id: abd73eb4-b01e-0065-6fe6-9020b6000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
access-control-allow-origin: *
x-azure-ref: 20240419T000806Z-17f9dd4c48bf6fqjwurn81dzp800000001f00000000052d9
x-fd-int-roxy-purgeid: 4554691
x-cache: TCP_HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| aadcdn.msauth.net/shared/1.0/content/images/picker_verify_fluent_authenticator_59892f1e05e3adf9fd2f71b42d92a27f.svg | 13.107.246.53 | 200 OK | 2.4 kB |
URL GET HTTP/2aadcdn.msauth.net/shared/1.0/content/images/picker_verify_fluent_authenticator_59892f1e05e3adf9fd2f71b42d92a27f.svg IP13.107.246.53:443 ASN#8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested byhttps://cloudflare-ipfs.com/ipfs/bafkreieupoobxo4lruczguywjqufdz3ixeg5fxlwlz6wbmzfogwhuzoghe#darnu.rugsataya@lendlease.com CertificateIssuerDigiCert Inc Subjectaadcdn.msauth.net FingerprintEB:7C:D1:4E:EF:B5:D4:72:25:0B:1A:AF:5F:10:3D:EA:13:80:5A:47 ValidityMon, 29 Jan 2024 00:00:00 GMT - Wed, 29 Jan 2025 23:59:59 GMT
File typeSVG Scalable Vector Graphics image Hashb59c16ca9bf156438a8a96d45e33db64 4e51b7d3477414b220f688adabd76d3ae6472ee3 a7ee799dd5b6f6dbb70b043b766362a6724e71458f9839306c995f06b218c2f8
GET /shared/1.0/content/images/picker_verify_fluent_authenticator_59892f1e05e3adf9fd2f71b42d92a27f.svg HTTP/1.1
Host: aadcdn.msauth.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cloudflare-ipfs.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 19 Apr 2024 00:08:06 GMT
content-type: image/svg+xml
content-length: 2407
cache-control: public, max-age=31536000
content-encoding: gzip
last-modified: Wed, 24 May 2023 10:11:49 GMT
etag: 0x8DB5C3F499A9B99
x-ms-request-id: d49a0adb-901e-0023-1784-9009ab000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
access-control-allow-origin: *
x-azure-ref: 20240419T000806Z-17f9dd4c48bf6fqjwurn81dzp800000001f00000000052d8
x-fd-int-roxy-purgeid: 4554691
x-cache: TCP_HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| logincdn.msauth.net/shared/1.0/content/images/arrow_left_a9cc2824ef3517b6c4160dcf8ff7d410.svg | 13.107.213.53 | 200 OK | 276 B |
URL GET HTTP/2logincdn.msauth.net/shared/1.0/content/images/arrow_left_a9cc2824ef3517b6c4160dcf8ff7d410.svg IP13.107.213.53:443 ASN#8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested byhttps://cloudflare-ipfs.com/ipfs/bafkreieupoobxo4lruczguywjqufdz3ixeg5fxlwlz6wbmzfogwhuzoghe#darnu.rugsataya@lendlease.com CertificateIssuerMicrosoft Corporation Subjectidentitycdn.msauth.net Fingerprint15:1B:3E:26:F4:4A:EE:1C:C2:40:74:BB:BD:AE:20:E4:35:B0:40:40 ValidityWed, 17 Jan 2024 06:03:21 GMT - Sat, 11 Jan 2025 06:03:21 GMT
File typeSVG Scalable Vector Graphics image Hasha9cc2824ef3517b6c4160dcf8ff7d410 8db9aebad84ca6e4225bfdd2458ff3821cc4f064 34f9db946e89f031a80dfca7b16b2b686469c9886441261ae70a44da1dfa2d58
GET /shared/1.0/content/images/arrow_left_a9cc2824ef3517b6c4160dcf8ff7d410.svg HTTP/1.1
Host: logincdn.msauth.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cloudflare-ipfs.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 19 Apr 2024 00:08:06 GMT
content-type: image/svg+xml
content-length: 276
cache-control: public, max-age=31536000
content-encoding: gzip
last-modified: Wed, 22 Jan 2020 00:38:00 GMT
etag: 0x8D79ED35591CF44
x-ms-request-id: 0a6b7e73-401e-004e-45f1-909492000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
access-control-allow-origin: *
x-azure-ref: 20240419T000806Z-17f9dd4c48bv42sp4q9crgymww00000002ug000000003qhd
x-fd-int-roxy-purgeid: 67912908
x-cache: TCP_HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| www.gstatic.com/recaptcha/api2/logo_48.png | 142.250.74.35 | 200 OK | 2.2 kB |
URL GET HTTP/2www.gstatic.com/recaptcha/api2/logo_48.png IP142.250.74.35:443
Requested byhttps://cloudflare-ipfs.com/ipfs/bafkreieupoobxo4lruczguywjqufdz3ixeg5fxlwlz6wbmzfogwhuzoghe#darnu.rugsataya@lendlease.com CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com Fingerprint8F:81:43:71:C4:F3:8C:FA:6D:EC:B4:5E:1F:58:71:AA:48:42:0E:E9 ValidityMon, 04 Mar 2024 07:16:39 GMT - Mon, 27 May 2024 07:16:38 GMT
File typePNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced Hashef9941290c50cd3866e2ba6b793f010d 4736508c795667dcea21f8d864233031223b7832 1b9efb22c938500971aac2b2130a475fa23684dd69e43103894968df83145b8a
GET /recaptcha/api2/logo_48.png HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cloudflare-ipfs.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 2228
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 18 Apr 2024 02:54:07 GMT
expires: Thu, 25 Apr 2024 02:54:07 GMT
cache-control: public, max-age=604800
age: 76439
last-modified: Tue, 03 Mar 2020 20:15:00 GMT
content-type: image/png
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| twomancake.com/socket.io/?EIO=4&transport=polling&t=OxphgBV | 188.114.97.1 | 204 No Content | 0 B |
URL OPTIONS HTTP/3twomancake.com/socket.io/?EIO=4&transport=polling&t=OxphgBV IP188.114.97.1:443
Requested byhttps://cloudflare-ipfs.com/ipfs/bafkreieupoobxo4lruczguywjqufdz3ixeg5fxlwlz6wbmzfogwhuzoghe#darnu.rugsataya@lendlease.com CertificateIssuerLet's Encrypt Subjecttwomancake.com FingerprintAF:27:60:8A:CD:A9:93:0A:E2:7C:B9:F0:B3:9B:B4:E4:C1:DD:3D:1C ValidityTue, 09 Apr 2024 04:59:30 GMT - Mon, 08 Jul 2024 04:59:29 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /socket.io/?EIO=4&transport=polling&t=OxphgBV HTTP/1.1
Host: twomancake.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: auth_uid,session_email
Referer: https://cloudflare-ipfs.com/
Origin: https://cloudflare-ipfs.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 204 No Content
date: Fri, 19 Apr 2024 00:08:12 GMT
content-length: 0
access-control-allow-origin: *
access-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE
vary: Access-Control-Request-Headers
access-control-allow-headers: auth_uid,session_email
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=nYMnPwyVcuQtrQSpk9vmdQTTKob4UdlGhf0%2BXLemaviGCCsTJfw6YMFVrvGlhghlObGbsoblHmIbl0Z%2FXWcEwTXLl4LTTAjBeM3%2FIH%2F%2BVw5H6SoD7wjpZ%2BCLxeXdNbGIag%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8768a8a4c8c60b41-OSL
alt-svc: h3=":443"; ma=86400
|
|
| twomancake.com/socket.io/?EIO=4&transport=polling&t=OxphgEA | 188.114.97.1 | 200 OK | 0 B |
URL GET HTTP/3twomancake.com/socket.io/?EIO=4&transport=polling&t=OxphgEA IP188.114.97.1:443
Requested byhttps://cloudflare-ipfs.com/ipfs/bafkreieupoobxo4lruczguywjqufdz3ixeg5fxlwlz6wbmzfogwhuzoghe#darnu.rugsataya@lendlease.com CertificateIssuerLet's Encrypt Subjecttwomancake.com FingerprintAF:27:60:8A:CD:A9:93:0A:E2:7C:B9:F0:B3:9B:B4:E4:C1:DD:3D:1C ValidityTue, 09 Apr 2024 04:59:30 GMT - Mon, 08 Jul 2024 04:59:29 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /socket.io/?EIO=4&transport=polling&t=OxphgEA HTTP/1.1
Host: twomancake.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: auth_uid,session_email
Referer: https://cloudflare-ipfs.com/
Origin: https://cloudflare-ipfs.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 204 No Content
date: Fri, 19 Apr 2024 00:08:12 GMT
content-length: 0
access-control-allow-origin: *
access-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE
vary: Access-Control-Request-Headers
access-control-allow-headers: auth_uid,session_email
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=tnJ0TIYFGgWIfQxtxJyCnjFPb19fBc2grUrU%2Bp9g9frMAyZmqaRNIIAncvv69KpFMy6i37gUVW%2FFM2AWe10mNN2U4esLtJYZdlIZEpaKNvhX%2FFQ0JecTaBbulT6ifeIxHg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8768a8a5b8ea0b41-OSL
alt-svc: h3=":443"; ma=86400
|
|
| twomancake.com/socket.io/?EIO=4&transport=polling&t=OxphgIa&sid=HqZ-9JnBDYZhSsTdAAs3 | 188.114.97.1 | 200 OK | 0 B |
URL POST HTTP/3twomancake.com/socket.io/?EIO=4&transport=polling&t=OxphgIa&sid=HqZ-9JnBDYZhSsTdAAs3 IP188.114.97.1:443
Requested byhttps://cloudflare-ipfs.com/ipfs/bafkreieupoobxo4lruczguywjqufdz3ixeg5fxlwlz6wbmzfogwhuzoghe#darnu.rugsataya@lendlease.com CertificateIssuerLet's Encrypt Subjecttwomancake.com FingerprintAF:27:60:8A:CD:A9:93:0A:E2:7C:B9:F0:B3:9B:B4:E4:C1:DD:3D:1C ValidityTue, 09 Apr 2024 04:59:30 GMT - Mon, 08 Jul 2024 04:59:29 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /socket.io/?EIO=4&transport=polling&t=OxphgIa&sid=HqZ-9JnBDYZhSsTdAAs3 HTTP/1.1
Host: twomancake.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: auth_uid,session_email
Referer: https://cloudflare-ipfs.com/
Origin: https://cloudflare-ipfs.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 204 No Content
date: Fri, 19 Apr 2024 00:08:12 GMT
content-length: 0
access-control-allow-origin: *
access-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE
vary: Access-Control-Request-Headers
access-control-allow-headers: auth_uid,session_email
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=R%2Fvo3RO48INNXHR92%2FrEtQ6vL0fMymwoM5modsjFiNtuhSj20CiQnw0%2FcA7dpyumzrqbbUWp1y5BUOtef0Wn2eDlbd3s2iiX1aHW6FZwJcQjELfjMXw6hBxf%2Fu0CR1tMbg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8768a8a789300b41-OSL
alt-svc: h3=":443"; ma=86400
|
|
| twomancake.com/socket.io/?EIO=4&transport=polling&t=OxphgIj&sid=HqZ-9JnBDYZhSsTdAAs3 | 188.114.97.1 | 200 OK | 0 B |
URL GET HTTP/3twomancake.com/socket.io/?EIO=4&transport=polling&t=OxphgIj&sid=HqZ-9JnBDYZhSsTdAAs3 IP188.114.97.1:443
Requested byhttps://cloudflare-ipfs.com/ipfs/bafkreieupoobxo4lruczguywjqufdz3ixeg5fxlwlz6wbmzfogwhuzoghe#darnu.rugsataya@lendlease.com CertificateIssuerLet's Encrypt Subjecttwomancake.com FingerprintAF:27:60:8A:CD:A9:93:0A:E2:7C:B9:F0:B3:9B:B4:E4:C1:DD:3D:1C ValidityTue, 09 Apr 2024 04:59:30 GMT - Mon, 08 Jul 2024 04:59:29 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /socket.io/?EIO=4&transport=polling&t=OxphgIj&sid=HqZ-9JnBDYZhSsTdAAs3 HTTP/1.1
Host: twomancake.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: auth_uid,session_email
Referer: https://cloudflare-ipfs.com/
Origin: https://cloudflare-ipfs.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 204 No Content
date: Fri, 19 Apr 2024 00:08:12 GMT
content-length: 0
access-control-allow-origin: *
access-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE
vary: Access-Control-Request-Headers
access-control-allow-headers: auth_uid,session_email
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=rEkFln2U1aPQMwR3Nc2PlzliCSH4uBlr0bQeUGbbrAHaTpRqR6rsglIba%2BJH2cXk2WfQjttCNpp%2Bt%2BiCh84hjDSqQfBakArFqKWxtF4bltq2JYt17fUZ48C3fsMiqoRhgQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8768a8a799340b41-OSL
alt-svc: h3=":443"; ma=86400
|
|
| twomancake.com/socket.io/?EIO=4&transport=websocket&sid=HqZ-9JnBDYZhSsTdAAs3 | 188.114.97.1 | | 0 B |
URL twomancake.com/socket.io/?EIO=4&transport=websocket&sid=HqZ-9JnBDYZhSsTdAAs3 IP188.114.97.1:0
CertificateIssuerLet's Encrypt Subjecttwomancake.com FingerprintAF:27:60:8A:CD:A9:93:0A:E2:7C:B9:F0:B3:9B:B4:E4:C1:DD:3D:1C ValidityTue, 09 Apr 2024 04:59:30 GMT - Mon, 08 Jul 2024 04:59:29 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /socket.io/?EIO=4&transport=websocket&sid=HqZ-9JnBDYZhSsTdAAs3 HTTP/1.1
Host: twomancake.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: https://cloudflare-ipfs.com
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: FuOOriP+eYq+RF2iv9xo7A==
DNT: 1
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Date: Fri, 19 Apr 2024 00:08:13 GMT
Connection: upgrade
Upgrade: websocket
Sec-WebSocket-Accept: CRCT0b08V3iHf21t5V9W78dJP38=
Access-Control-Allow-Origin: *
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=tUB0kjVv1evYyj4hkLwGZxS8ZgSUa29w4yguXklLsCt6fHZhRLUTHrT3955ptNR%2BEgkFryXDAWAadPFirCxw1fwjlnKXpOaEAmzFeKG1W%2BeHVnD0Xg9EtgAfGB4OtT92rg%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 8768a8a7d9c956b4-OSL
alt-svc: h3=":443"; ma=86400
|
|
| twomancake.com/socket.io/?EIO=4&transport=polling&t=OxphgNA&sid=yaZPEVC_82uWAPNuAAs4 | 188.114.97.1 | 200 OK | 0 B |
URL POST HTTP/3twomancake.com/socket.io/?EIO=4&transport=polling&t=OxphgNA&sid=yaZPEVC_82uWAPNuAAs4 IP188.114.97.1:443
Requested byhttps://cloudflare-ipfs.com/ipfs/bafkreieupoobxo4lruczguywjqufdz3ixeg5fxlwlz6wbmzfogwhuzoghe#darnu.rugsataya@lendlease.com CertificateIssuerLet's Encrypt Subjecttwomancake.com FingerprintAF:27:60:8A:CD:A9:93:0A:E2:7C:B9:F0:B3:9B:B4:E4:C1:DD:3D:1C ValidityTue, 09 Apr 2024 04:59:30 GMT - Mon, 08 Jul 2024 04:59:29 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /socket.io/?EIO=4&transport=polling&t=OxphgNA&sid=yaZPEVC_82uWAPNuAAs4 HTTP/1.1
Host: twomancake.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: auth_uid,session_email
Referer: https://cloudflare-ipfs.com/
Origin: https://cloudflare-ipfs.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 204 No Content
date: Fri, 19 Apr 2024 00:08:13 GMT
content-length: 0
access-control-allow-origin: *
access-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE
vary: Access-Control-Request-Headers
access-control-allow-headers: auth_uid,session_email
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=jb9ELX3oQNSVsI3ALAB4e0QNV7INWR9MbyC1eBelGVZywCDTbuaM%2F4PzzWJWksCyPXsh5ofeZlPg4rfKgYu3M%2Bhyg1yNhXwy%2FQvJITqXcSFcx6MSJaveCfXH4SZu9QoWlw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8768a8a9599c0b41-OSL
alt-svc: h3=":443"; ma=86400
|
|
| twomancake.com/socket.io/?EIO=4&transport=polling&t=OxphgND&sid=yaZPEVC_82uWAPNuAAs4 | 188.114.97.1 | 204 No Content | 0 B |
URL OPTIONS HTTP/3twomancake.com/socket.io/?EIO=4&transport=polling&t=OxphgND&sid=yaZPEVC_82uWAPNuAAs4 IP188.114.97.1:443
Requested byhttps://cloudflare-ipfs.com/ipfs/bafkreieupoobxo4lruczguywjqufdz3ixeg5fxlwlz6wbmzfogwhuzoghe#darnu.rugsataya@lendlease.com CertificateIssuerLet's Encrypt Subjecttwomancake.com FingerprintAF:27:60:8A:CD:A9:93:0A:E2:7C:B9:F0:B3:9B:B4:E4:C1:DD:3D:1C ValidityTue, 09 Apr 2024 04:59:30 GMT - Mon, 08 Jul 2024 04:59:29 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /socket.io/?EIO=4&transport=polling&t=OxphgND&sid=yaZPEVC_82uWAPNuAAs4 HTTP/1.1
Host: twomancake.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: auth_uid,session_email
Referer: https://cloudflare-ipfs.com/
Origin: https://cloudflare-ipfs.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 204 No Content
date: Fri, 19 Apr 2024 00:08:13 GMT
content-length: 0
access-control-allow-origin: *
access-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE
vary: Access-Control-Request-Headers
access-control-allow-headers: auth_uid,session_email
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=VxL8hUD4iNz18YFU5sP2gsc3txda6DVeDqGZW3DoIFRVJonft8IRKvFnM1mBANugPPO993rTMf%2FKO%2Faw822JVMTJjotDQJtpIeHpY6wVQhg%2Fqoqf%2BF8xOHqsvazPoEXK0A%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8768a8a9699f0b41-OSL
alt-svc: h3=":443"; ma=86400
|
|
| twomancake.com/socket.io/?EIO=4&transport=polling&t=OxphgIj&sid=HqZ-9JnBDYZhSsTdAAs3 | 188.114.97.1 | 200 OK | 1 B |
URL GET HTTP/3twomancake.com/socket.io/?EIO=4&transport=polling&t=OxphgIj&sid=HqZ-9JnBDYZhSsTdAAs3 IP188.114.97.1:443
Requested byhttps://cloudflare-ipfs.com/ipfs/bafkreieupoobxo4lruczguywjqufdz3ixeg5fxlwlz6wbmzfogwhuzoghe#darnu.rugsataya@lendlease.com CertificateIssuerLet's Encrypt Subjecttwomancake.com FingerprintAF:27:60:8A:CD:A9:93:0A:E2:7C:B9:F0:B3:9B:B4:E4:C1:DD:3D:1C ValidityTue, 09 Apr 2024 04:59:30 GMT - Mon, 08 Jul 2024 04:59:29 GMT
File typevery short file (no magic) Hash1679091c5a880faf6fb5e6087eb1b2dc c1dfd96eea8cc2b62785275bca38ac261256e278 e7f6c011776e8db7cd330b54174fd76f7d0216b612387a5ffcfb81e6f0919683
GET /socket.io/?EIO=4&transport=polling&t=OxphgIj&sid=HqZ-9JnBDYZhSsTdAAs3 HTTP/1.1
Host: twomancake.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Auth_UID: USER21032024UNIQUE0901032106202420240321010906
Session_Email: darnu.rugsataya@lendlease.com
Origin: https://cloudflare-ipfs.com
DNT: 1
Connection: keep-alive
Referer: https://cloudflare-ipfs.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 19 Apr 2024 00:08:13 GMT
content-type: text/plain; charset=UTF-8
content-length: 1
access-control-allow-origin: *
cache-control: no-store
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=udAh5TpEJQ%2F9kGjMko5veZDNOYsuv4UQwIC07NlnAO%2BLRkbi02eWHS2ycyOGiRjzy1Sb45tMtETNwO%2FtYWJY5jzC4cfRCA3oMoUeya3KsQHmxqoP1YvVzwpM%2BHlzBabgBw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8768a8a8a96f0b41-OSL
alt-svc: h3=":443"; ma=86400
|
|
| twomancake.com/socket.io/?EIO=4&transport=websocket&sid=yaZPEVC_82uWAPNuAAs4 | 188.114.96.1 | | 0 B |
URL twomancake.com/socket.io/?EIO=4&transport=websocket&sid=yaZPEVC_82uWAPNuAAs4 IP188.114.96.1:0
CertificateIssuerLet's Encrypt Subjecttwomancake.com FingerprintAF:27:60:8A:CD:A9:93:0A:E2:7C:B9:F0:B3:9B:B4:E4:C1:DD:3D:1C ValidityTue, 09 Apr 2024 04:59:30 GMT - Mon, 08 Jul 2024 04:59:29 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /socket.io/?EIO=4&transport=websocket&sid=yaZPEVC_82uWAPNuAAs4 HTTP/1.1
Host: twomancake.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: https://cloudflare-ipfs.com
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: +qo/dp5D3LCNHMKFz7RAXQ==
DNT: 1
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Date: Fri, 19 Apr 2024 00:08:13 GMT
Connection: upgrade
Upgrade: websocket
Sec-WebSocket-Accept: Id8Md63YA7A7m7XhqeYmRrOq8OM=
Access-Control-Allow-Origin: *
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Mo3na6IlCeaqE28qNyRLBPUKQ%2B0y31YQatuoeW8ZhfgWTKDWAjfqaV%2Bm8Ufa7JiMfVw1qJgWTb0FPUvkk1IkkRiF0mLM13wcWKjYz2SCJxE9QcOut%2F0oeqU9v7xzzgaOKg%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 8768a8a9ddac56c7-OSL
alt-svc: h3=":443"; ma=86400
|
|
| twomancake.com/socket.io/?EIO=4&transport=polling&t=OxphgND&sid=yaZPEVC_82uWAPNuAAs4 | 188.114.97.1 | 204 No Content | 1 B |
URL OPTIONS HTTP/3twomancake.com/socket.io/?EIO=4&transport=polling&t=OxphgND&sid=yaZPEVC_82uWAPNuAAs4 IP188.114.97.1:443
Requested byhttps://cloudflare-ipfs.com/ipfs/bafkreieupoobxo4lruczguywjqufdz3ixeg5fxlwlz6wbmzfogwhuzoghe#darnu.rugsataya@lendlease.com CertificateIssuerLet's Encrypt Subjecttwomancake.com FingerprintAF:27:60:8A:CD:A9:93:0A:E2:7C:B9:F0:B3:9B:B4:E4:C1:DD:3D:1C ValidityTue, 09 Apr 2024 04:59:30 GMT - Mon, 08 Jul 2024 04:59:29 GMT
File typevery short file (no magic) Hash1679091c5a880faf6fb5e6087eb1b2dc c1dfd96eea8cc2b62785275bca38ac261256e278 e7f6c011776e8db7cd330b54174fd76f7d0216b612387a5ffcfb81e6f0919683
GET /socket.io/?EIO=4&transport=polling&t=OxphgND&sid=yaZPEVC_82uWAPNuAAs4 HTTP/1.1
Host: twomancake.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Auth_UID: USER21032024UNIQUE0901032106202420240321010906
Session_Email: darnu.rugsataya@lendlease.com
Origin: https://cloudflare-ipfs.com
DNT: 1
Connection: keep-alive
Referer: https://cloudflare-ipfs.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 19 Apr 2024 00:08:13 GMT
content-type: text/plain; charset=UTF-8
content-length: 1
access-control-allow-origin: *
cache-control: no-store
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ZM1MazOZ9gpQpcojblbgHHdBQg74spWxTNXB9ORFa4LMQP6a6UX8gEU9AG8G3FWw1Cmmb6CR1OfsK2t5mtxCp2Z%2BVjWtt8GV4oBIH5lFnH4td83PiU2KRk4bHo%2BVOXhchw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8768a8aa49cc0b41-OSL
alt-svc: h3=":443"; ma=86400
|
|
| aadcdn.msauth.net/shared/1.0/content/images/appbackgrounds/49_6ffe0a92d779c878835b40171ffc2e13.jpg | 13.107.246.53 | 200 OK | 18 kB |
URL GET HTTP/2aadcdn.msauth.net/shared/1.0/content/images/appbackgrounds/49_6ffe0a92d779c878835b40171ffc2e13.jpg IP13.107.246.53:443 ASN#8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested byhttps://cloudflare-ipfs.com/ipfs/bafkreieupoobxo4lruczguywjqufdz3ixeg5fxlwlz6wbmzfogwhuzoghe#darnu.rugsataya@lendlease.com CertificateIssuerDigiCert Inc Subjectaadcdn.msauth.net FingerprintEB:7C:D1:4E:EF:B5:D4:72:25:0B:1A:AF:5F:10:3D:EA:13:80:5A:47 ValidityMon, 29 Jan 2024 00:00:00 GMT - Wed, 29 Jan 2025 23:59:59 GMT
File typeJPEG image data, baseline, precision 8, 1920x1080, components 3 Hash7916a894ebde7d29c2cc29b267f1299f 78345ca08f9e2c3c2cc9b318950791b349211296 d8f5ab3e00202fd3b45be1acd95d677b137064001e171bc79b06826d98f1e1d3
GET /shared/1.0/content/images/appbackgrounds/49_6ffe0a92d779c878835b40171ffc2e13.jpg HTTP/1.1
Host: aadcdn.msauth.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cloudflare-ipfs.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 19 Apr 2024 00:08:20 GMT
content-type: image/jpeg
content-length: 17453
cache-control: public, max-age=31536000
last-modified: Wed, 24 May 2023 10:11:42 GMT
etag: 0x8DB5C3F4584F323
x-ms-request-id: 61ed8055-a01e-0040-7af0-90368f000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
access-control-allow-origin: *
x-azure-ref: 20240419T000820Z-17f9dd4c48bf6fqjwurn81dzp800000001f00000000052hb
x-fd-int-roxy-purgeid: 4554691
x-cache: TCP_HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| twomancake.com/jsnom.js | 188.114.97.1 | 200 OK | 202 kB |
IP188.114.97.1:443
Requested byhttps://cloudflare-ipfs.com/ipfs/bafkreieupoobxo4lruczguywjqufdz3ixeg5fxlwlz6wbmzfogwhuzoghe#darnu.rugsataya@lendlease.com CertificateIssuerLet's Encrypt Subjecttwomancake.com FingerprintAF:27:60:8A:CD:A9:93:0A:E2:7C:B9:F0:B3:9B:B4:E4:C1:DD:3D:1C ValidityTue, 09 Apr 2024 04:59:30 GMT - Mon, 08 Jul 2024 04:59:29 GMT
Size202 kB (202322 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /jsnom.js HTTP/1.1
Host: twomancake.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cloudflare-ipfs.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 19 Apr 2024 00:08:05 GMT
content-type: application/javascript; charset=UTF-8
x-powered-by: Express
access-control-allow-origin: *
cache-control: public, max-age=14400
last-modified: Tue, 02 Apr 2024 06:43:58 GMT
etag: W/"31652-18e9d8cde06"
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=e2Mj41GRQLcxX1aSn8kXpAbmRm7K%2BH79WYt08fs9zr0PleKXV8I8%2Bu795btO%2BeW%2BP18hJpZ4GUPN4O1DewyUkpALzgp%2F5P68n7PDG2weXpq%2BUBnY60o6Gtr6ur06Jxd2Fg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8768a877ad735699-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| twomancake.com/socket.io/?EIO=4&transport=websocket&sid=yaZPEVC_82uWAPNuAAs4 | 188.114.96.1 | 101 Switching Protocols | 0 B |
URL GET HTTP/1.1twomancake.com/socket.io/?EIO=4&transport=websocket&sid=yaZPEVC_82uWAPNuAAs4 IP188.114.96.1:443
Requested byhttps://cloudflare-ipfs.com/ipfs/bafkreieupoobxo4lruczguywjqufdz3ixeg5fxlwlz6wbmzfogwhuzoghe#darnu.rugsataya@lendlease.com CertificateIssuerLet's Encrypt Subjecttwomancake.com FingerprintAF:27:60:8A:CD:A9:93:0A:E2:7C:B9:F0:B3:9B:B4:E4:C1:DD:3D:1C ValidityTue, 09 Apr 2024 04:59:30 GMT - Mon, 08 Jul 2024 04:59:29 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /socket.io/?EIO=4&transport=websocket&sid=yaZPEVC_82uWAPNuAAs4 HTTP/1.1
Host: twomancake.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: https://cloudflare-ipfs.com
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: +qo/dp5D3LCNHMKFz7RAXQ==
DNT: 1
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Date: Fri, 19 Apr 2024 00:08:13 GMT
Connection: upgrade
Upgrade: websocket
Sec-WebSocket-Accept: Id8Md63YA7A7m7XhqeYmRrOq8OM=
Access-Control-Allow-Origin: *
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Mo3na6IlCeaqE28qNyRLBPUKQ%2B0y31YQatuoeW8ZhfgWTKDWAjfqaV%2Bm8Ufa7JiMfVw1qJgWTb0FPUvkk1IkkRiF0mLM13wcWKjYz2SCJxE9QcOut%2F0oeqU9v7xzzgaOKg%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 8768a8a9ddac56c7-OSL
alt-svc: h3=":443"; ma=86400
|
|
| cloudflare-ipfs.com/ipfs/bafkreieupoobxo4lruczguywjqufdz3ixeg5fxlwlz6wbmzfogwhuzoghe | 104.17.96.13 | 200 OK | 2.9 kB |
URL User Request GET HTTP/2cloudflare-ipfs.com/ipfs/bafkreieupoobxo4lruczguywjqufdz3ixeg5fxlwlz6wbmzfogwhuzoghe IP104.17.96.13:443
CertificateIssuerLet's Encrypt Subjectcloudflare-ipfs.com Fingerprint18:E5:C9:71:96:8A:A9:48:E2:79:2A:29:91:D2:4E:46:90:B7:5D:9F ValiditySun, 25 Feb 2024 02:55:05 GMT - Sat, 25 May 2024 02:55:04 GMT
File typeHTML document, ASCII text, with very long lines (2946), with no line terminators Hasheb628e8bbc2891854d8213f44ebddbef 2b468ba4353129b5fd372863548bb9a44ee4c3ca f7a65b21cac5a0ab91ee027472d860e4620d3a8ca6898298ddbb67917523fe5d
Analyzer | Verdict | Alert | OpenPhish | phishing | Office365 | PhishTank | phishing | Other |
GET /ipfs/bafkreieupoobxo4lruczguywjqufdz3ixeg5fxlwlz6wbmzfogwhuzoghe HTTP/1.1
Host: cloudflare-ipfs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 19 Apr 2024 00:08:04 GMT
content-type: text/html
cf-ray: 8768a873e977569a-OSL
cf-cache-status: HIT
access-control-allow-origin: *
age: 9419
cache-control: public, max-age=29030400, immutable
etag: W/"bafkreieupoobxo4lruczguywjqufdz3ixeg5fxlwlz6wbmzfogwhuzoghe"
vary: Accept-Encoding
access-control-allow-headers: Content-Type, Range, User-Agent, X-Requested-With
access-control-allow-methods: GET
access-control-expose-headers: Content-Length, Content-Range, X-Chunked-Output, X-Ipfs-Path, X-Ipfs-Roots, X-Stream-Output
x-cf-ipfs-cache-status: hit
x-ipfs-path: /ipfs/bafkreieupoobxo4lruczguywjqufdz3ixeg5fxlwlz6wbmzfogwhuzoghe
x-ipfs-roots: bafkreieupoobxo4lruczguywjqufdz3ixeg5fxlwlz6wbmzfogwhuzoghe
set-cookie: __cf_bm=ExpXcyzsOaFL1gLL51htuyrhAjGFUklUl15.mQBh.UM-1713485284-1.0.1.1-3MPm4Ua.lzDaNlSNHGfm3HVqS.4BnNhXnttF3CNf28CxTN26eaiA8i9gbUoQw0gTdHiV9oU1x8f9QGGM04oUgA; path=/; expires=Fri, 19-Apr-24 00:38:04 GMT; domain=.cloudflare-ipfs.com; HttpOnly; Secure; SameSite=None
server: cloudflare
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| twomancake.com/socket.io/?EIO=4&transport=websocket&sid=HqZ-9JnBDYZhSsTdAAs3 | 188.114.97.1 | 101 Switching Protocols | 0 B |
URL GET HTTP/1.1twomancake.com/socket.io/?EIO=4&transport=websocket&sid=HqZ-9JnBDYZhSsTdAAs3 IP188.114.97.1:443
Requested byhttps://cloudflare-ipfs.com/ipfs/bafkreieupoobxo4lruczguywjqufdz3ixeg5fxlwlz6wbmzfogwhuzoghe#darnu.rugsataya@lendlease.com CertificateIssuerLet's Encrypt Subjecttwomancake.com FingerprintAF:27:60:8A:CD:A9:93:0A:E2:7C:B9:F0:B3:9B:B4:E4:C1:DD:3D:1C ValidityTue, 09 Apr 2024 04:59:30 GMT - Mon, 08 Jul 2024 04:59:29 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /socket.io/?EIO=4&transport=websocket&sid=HqZ-9JnBDYZhSsTdAAs3 HTTP/1.1
Host: twomancake.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: https://cloudflare-ipfs.com
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: FuOOriP+eYq+RF2iv9xo7A==
DNT: 1
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Date: Fri, 19 Apr 2024 00:08:13 GMT
Connection: upgrade
Upgrade: websocket
Sec-WebSocket-Accept: CRCT0b08V3iHf21t5V9W78dJP38=
Access-Control-Allow-Origin: *
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=tUB0kjVv1evYyj4hkLwGZxS8ZgSUa29w4yguXklLsCt6fHZhRLUTHrT3955ptNR%2BEgkFryXDAWAadPFirCxw1fwjlnKXpOaEAmzFeKG1W%2BeHVnD0Xg9EtgAfGB4OtT92rg%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 8768a8a7d9c956b4-OSL
alt-svc: h3=":443"; ma=86400
|
|