{"report_id":"1533fcd6-f334-4f5a-9bc7-fb0b4ce5d0dd","version":6,"status":"done","tags":[],"date":"2025-06-07T09:50:26Z","url":{"schema":"http","addr":"f.eruditor.link/file/2943863/","fqdn":"f.eruditor.link","domain":"eruditor.link","tld":"link"},"ip":{"addr":"172.67.175.155","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"f.eruditor.link/file/2943863/","fqdn":"f.eruditor.link","domain":"eruditor.link","tld":"link"},"title":"Подтвердите, что Вы не робот / Please confirm you are not a robot"},"submit":{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":""},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-16T09:50:26Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"f.eruditor.link","ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2022-05-20","domain_rank":0,"first_seen":"2025-03-07T19:27:52.790735Z","last_seen":"2025-03-07T19:27:52.790735Z","alert_count":3,"request_count":5,"received_data":18358,"sent_data":2465,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":[{"sensor_name":"suricata","title":"","description":"","date":"2025-06-07T09:50:04Z","timestamp":1749289804,"ip_dst":{"addr":"188.114.97.1","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.12","port":34194,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ETPRO INFO HTTP Request to a *.link domain","source":"{\"timestamp\":\"2025-06-07T09:50:04.756357+0000\",\"flow_id\":1406803842452583,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.12\",\"src_port\":34194,\"dest_ip\":\"188.114.97.1\",\"dest_port\":80,\"proto\":\"TCP\",\"metadata\":{\"flowbits\":[\"ET.SuspExeTLDs\"]},\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2858678,\"rev\":1,\"signature\":\"ETPRO INFO HTTP Request to a *.link domain\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2024_10_10\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2024_10_10\"]}},\"http\":{\"hostname\":\"f.eruditor.link\",\"url\":\"/file/2943863/\",\"http_user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"http_content_type\":\"text/html\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"status\":301,\"redirect\":\"https://f.eruditor.link/file/2943863/\",\"length\":167},\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":3,\"bytes_toserver\":685,\"bytes_toclient\":1267,\"start\":\"2025-06-07T09:50:04.740455+0000\"}}"}]}],"analyzer":[{"sensor_name":"infosec_yara","type":"yara","description":"Public InfoSec YARA rules","link":"","alerts":null},{"sensor_name":"openphish","type":"url","description":"OpenPhish","link":"","alerts":null},{"sensor_name":"phishtank","type":"url","description":"PhishTank","link":"","alerts":null},{"sensor_name":"quad9","type":"domain","description":"Quad9 DNS","link":"","alerts":null},{"sensor_name":"threatfox","type":"url","description":"ThreatFox","link":"","alerts":null}],"urlquery":null},"javascript":{"script":null,"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"f.eruditor.link/file/2943863/","fqdn":"f.eruditor.link","domain":"eruditor.link","tld":"link"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"","requested_by":"","date":"2025-06-07T09:50:04.225Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eruditor.link","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Jun 2025 13:48:51 GMT","end":"Sat, 30 Aug 2025 14:45:52 GMT"},"fingerprint":{"sha1":"84:F0:8A:EE:A6:59:CA:4A:23:1B:6A:71:C3:79:7B:43:F2:37:97:4A","sha256":"35:46:A4:2C:0A:EC:9A:C6:27:21:15:87:6A:21:29:70:1C:2F:78:73:EA:4D:28:CF:AA:74:2F:3A:4B:7D:FE:34"}}},"request":{"raw":"GET /file/2943863/ HTTP/1.1\r\nHost: f.eruditor.link\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET","post_data":{"size":1877,"data":"{\"signature\":\"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\"}"}},"response":{"raw":"HTTP/2 403 Forbidden\r\ndate: Sat, 07 Jun 2025 09:50:04 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver-timing: db;dur=0.00, total;dur=0.45\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2F3bZbnIxahfmLwW5zFZuMc1aLb%2FkPE6HW0orRstUJw9P5TtYZwHwHL9gI4b%2BifFPAO7s4h%2BpqsJuO6nYOoNFrLERGPvheH8kUfEkzLk%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncf-ray: 94bf3e3cad4856bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":null,"data":{"size":3017,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with CRLF line terminators","md5":"9f4573f16dd973f9811da622d6da2a8f","sha1":"4ab7545c4a88f689dab58919551d4bcae9054781","sha256":"63f6c819e7f0a4b545cad5cb5b1a6bc5d2c6596a04477179dddf4778831942e8","sha512":"f5e9d08f231d587bda3c3beb21df1649c0e62c8f9514301a84ee20ef7680391a9650f34bcfaca9c2b84a3f03eed29cd6f7dc3779b7b820967bd418c8e30906f4","ssdeep":"","tlshash":"b651963281c1194140351439f947f64afe61867ba74b462135cc59bbaff9070c1b3f8d","first_seen":"2025-06-07T09:50:27.495599Z","last_seen":"2025-06-07T09:50:27.495599Z","times_seen":1,"resource_available":false,"data":null}},"time_used":430,"timings":{"blocked":42,"dns":10,"connect":1,"send":0,"wait":346,"receive":0,"ssl":26},"alerts":{"ids":[{"sensor_name":"suricata","title":"","description":"","date":"2025-06-07T09:50:04Z","timestamp":1749289804,"ip_dst":{"addr":"188.114.97.1","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.12","port":34194,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ETPRO INFO HTTP Request to a *.link domain","source":"{\"timestamp\":\"2025-06-07T09:50:04.756357+0000\",\"flow_id\":1406803842452583,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.12\",\"src_port\":34194,\"dest_ip\":\"188.114.97.1\",\"dest_port\":80,\"proto\":\"TCP\",\"metadata\":{\"flowbits\":[\"ET.SuspExeTLDs\"]},\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2858678,\"rev\":1,\"signature\":\"ETPRO INFO HTTP Request to a *.link domain\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2024_10_10\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2024_10_10\"]}},\"http\":{\"hostname\":\"f.eruditor.link\",\"url\":\"/file/2943863/\",\"http_user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"http_content_type\":\"text/html\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"status\":301,\"redirect\":\"https://f.eruditor.link/file/2943863/\",\"length\":167},\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":3,\"bytes_toserver\":685,\"bytes_toclient\":1267,\"start\":\"2025-06-07T09:50:04.740455+0000\"}}"}],"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"f.eruditor.link/file/2943863/","fqdn":"f.eruditor.link","domain":"eruditor.link","tld":"link"},"ip":{"addr":"188.114.97.1","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"","requested_by":"","date":"2025-06-07T09:50:04.734Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /file/2943863/ HTTP/1.1\r\nHost: f.eruditor.link\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET","post_data":{"size":76,"data":"{\"productId\":\"PCHas53duTI4rGn45WSWRM2Dnv0XWvxc\",\"bizCode\":\"REGISTER_BANNER\"}"}},"response":{"raw":"HTTP/1.1 301 Moved Permanently\r\nDate: Sat, 07 Jun 2025 09:50:04 GMT\r\nContent-Type: text/html\r\nContent-Length: 167\r\nConnection: keep-alive\r\nCache-Control: max-age=3600\r\nExpires: Sat, 07 Jun 2025 10:50:04 GMT\r\nLocation: https://f.eruditor.link/file/2943863/\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=v1PEkIBOUg7ttj1hchIVreeuJe29DRexT405Wh8CtSAhNTZG6ADtgDMGppDFn8czOAub6plaw%2F7%2F%2Bq%2BD5%2BVj4yGIfdWXKHC4CKZBi2F3JR1IOyq%2BqCWzhTdZaSPH%2BzO%2FZsA%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nNEL: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nVary: Accept-Encoding\r\nServer: cloudflare\r\nCF-RAY: 94bf3e3f9a6756c7-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=451\u0026min_rtt=451\u0026rtt_var=225\u0026sent=1\u0026recv=3\u0026lost=0\u0026retrans=0\u0026sent_bytes=0\u0026recv_bytes=413\u0026delivery_rate=0\u0026cwnd=249\u0026unsent_bytes=0\u0026cid=0000000000000000\u0026ts=0\u0026x=0\"\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":null,"data":{"size":3017,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T13:49:31.916752Z","times_seen":13333799,"resource_available":true,"data":null}},"time_used":33,"timings":{"blocked":8,"dns":9,"connect":1,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":[{"sensor_name":"suricata","title":"","description":"","date":"2025-06-07T09:50:04Z","timestamp":1749289804,"ip_dst":{"addr":"188.114.97.1","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.12","port":34194,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ETPRO INFO HTTP Request to a *.link domain","source":"{\"timestamp\":\"2025-06-07T09:50:04.756357+0000\",\"flow_id\":1406803842452583,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.12\",\"src_port\":34194,\"dest_ip\":\"188.114.97.1\",\"dest_port\":80,\"proto\":\"TCP\",\"metadata\":{\"flowbits\":[\"ET.SuspExeTLDs\"]},\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2858678,\"rev\":1,\"signature\":\"ETPRO INFO HTTP Request to a *.link domain\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2024_10_10\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2024_10_10\"]}},\"http\":{\"hostname\":\"f.eruditor.link\",\"url\":\"/file/2943863/\",\"http_user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"http_content_type\":\"text/html\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"status\":301,\"redirect\":\"https://f.eruditor.link/file/2943863/\",\"length\":167},\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":3,\"bytes_toserver\":685,\"bytes_toclient\":1267,\"start\":\"2025-06-07T09:50:04.740455+0000\"}}"}],"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"f.eruditor.link/file/2943863/","fqdn":"f.eruditor.link","domain":"eruditor.link","tld":"link"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"","requested_by":"","date":"2025-06-07T09:50:04.763Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eruditor.link","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Jun 2025 13:48:51 GMT","end":"Sat, 30 Aug 2025 14:45:52 GMT"},"fingerprint":{"sha1":"84:F0:8A:EE:A6:59:CA:4A:23:1B:6A:71:C3:79:7B:43:F2:37:97:4A","sha256":"35:46:A4:2C:0A:EC:9A:C6:27:21:15:87:6A:21:29:70:1C:2F:78:73:EA:4D:28:CF:AA:74:2F:3A:4B:7D:FE:34"}}},"request":{"raw":"GET /file/2943863/ HTTP/1.1\r\nHost: f.eruditor.link\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 403 Forbidden\r\ndate: Sat, 07 Jun 2025 09:50:05 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: cloudflare\r\ncf-cache-status: DYNAMIC\r\npriority: u=1,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gR8kV89v46iKV4qQioCZ8l0b5jr21r9Scs6zWXTtAdjbQ6ucvoWcDUuPlKFopVpLQtwbI4mDY5FClmg5yoUeT%2B2JOxM89fDwno8NhQs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 94bf3e3fcbc6b527-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: db;dur=0.00, total;dur=0.36, cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":null,"data":{"size":3017,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with CRLF line terminators","md5":"9970014fd1bf78631801dfce23fd2c35","sha1":"cc47f3ab53fcc49d1240b2a98e0166d5d9175b1f","sha256":"27c76687fb18f715db739757ed2f710da0d5d9624cf4e74afa0960de7090e83c","sha512":"1e82bfbc30f3c39eb5064e3a2007914d5bbed2670a90d8948bf3b818a0df672346671d412c324e57e176a2c2cfff25b87a62d0a274e73807e33b1b4629bf628c","ssdeep":"","tlshash":"5951b536c1e1150450716429fd87f64afda182bba74f4627358c29bbabf9070c1b3b8c","first_seen":"2025-06-07T09:50:27.500524Z","last_seen":"2025-06-07T09:50:27.500524Z","times_seen":1,"resource_available":false,"data":null}},"time_used":346,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":345,"receive":0,"ssl":0},"alerts":{"ids":[{"sensor_name":"suricata","title":"","description":"","date":"2025-06-07T09:50:04Z","timestamp":1749289804,"ip_dst":{"addr":"188.114.97.1","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.12","port":34194,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ETPRO INFO HTTP Request to a *.link domain","source":"{\"timestamp\":\"2025-06-07T09:50:04.756357+0000\",\"flow_id\":1406803842452583,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.12\",\"src_port\":34194,\"dest_ip\":\"188.114.97.1\",\"dest_port\":80,\"proto\":\"TCP\",\"metadata\":{\"flowbits\":[\"ET.SuspExeTLDs\"]},\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2858678,\"rev\":1,\"signature\":\"ETPRO INFO HTTP Request to a *.link domain\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2024_10_10\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2024_10_10\"]}},\"http\":{\"hostname\":\"f.eruditor.link\",\"url\":\"/file/2943863/\",\"http_user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"http_content_type\":\"text/html\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"status\":301,\"redirect\":\"https://f.eruditor.link/file/2943863/\",\"length\":167},\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":3,\"bytes_toserver\":685,\"bytes_toclient\":1267,\"start\":\"2025-06-07T09:50:04.740455+0000\"}}"}],"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"f.eruditor.link/captcha/?data=779F9GWTDTR6KBSP6GT8GTXC4JBZ9YNMGKUMMHJRBRGKWYGKC8YHADXZEBDAQEA8KNB7DLTH5Y65PAEQTLAFKNUA9FN16TASWNWKRBCP7X9ZSS77R2D6QA4X8L8DZYCAWYRDLE783CTQ36XUUHGJJJESMrD","fqdn":"f.eruditor.link","domain":"eruditor.link","tld":"link"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://f.eruditor.link/file/2943863/","date":"2025-06-07T09:50:05.244Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eruditor.link","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Jun 2025 13:48:51 GMT","end":"Sat, 30 Aug 2025 14:45:52 GMT"},"fingerprint":{"sha1":"84:F0:8A:EE:A6:59:CA:4A:23:1B:6A:71:C3:79:7B:43:F2:37:97:4A","sha256":"35:46:A4:2C:0A:EC:9A:C6:27:21:15:87:6A:21:29:70:1C:2F:78:73:EA:4D:28:CF:AA:74:2F:3A:4B:7D:FE:34"}}},"request":{"raw":"GET /captcha/?data=779F9GWTDTR6KBSP6GT8GTXC4JBZ9YNMGKUMMHJRBRGKWYGKC8YHADXZEBDAQEA8KNB7DLTH5Y65PAEQTLAFKNUA9FN16TASWNWKRBCP7X9ZSS77R2D6QA4X8L8DZYCAWYRDLE783CTQ36XUUHGJJJESMrD HTTP/1.1\r\nHost: f.eruditor.link\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://f.eruditor.link/file/2943863/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET","post_data":{"size":70,"data":"{\"productId\":\"PCHas53duTI4rGn45WSWRM2Dnv0XWvxc\",\"bizCode\":\"ENTRY_IMG\"}"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 07 Jun 2025 09:50:05 GMT\r\ncontent-type: image/png\r\ncontent-length: 4418\r\nserver: cloudflare\r\npragma: no-cache\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=796OM%2BHo3JemVJQ95pSK3%2F8INqU6Y%2Fu3dKt2GQ1r%2FuXVHP4SS%2F6Wdd%2B9t4QNmcaDAUNC4SYCx%2F3TIeTyofSVCKDVR9RNE8oin6PVeAc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 94bf3e42cf9eb527-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: db;dur=0.00, total;dur=8.41, cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":4418,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 130 x 30, 8-bit/color RGBA, non-interlaced","md5":"680d4ca4dddbe2d9c48169b057f9b13f","sha1":"24a4eca9b48a3feced627410eb05ebeefb14424f","sha256":"93e9f6cfe9bf23e0612d13b965a30cdf51d035fea84a838e2b5762aad63e241a","sha512":"3f3b271cddbc3198e857cda8d232d214a8989e2f74ac4149ed16e521dcbdc954734f739668683fec04cd511e87e2dc4972722c124c9b3ade7abc6543e56526a8","ssdeep":"96:a8qn0QWGbZCXpMRJzF+vFtx8zjM+/YKwsioM3bHtqMICkX:aeQBS+MGzjMaV8bNqgkX","tlshash":"91918d52c7557e6ca91e217182cc2bcc48b7185aa04f7300edd0c1a3217e5e687c036d","first_seen":"2025-06-07T09:50:27.503638Z","last_seen":"2025-06-07T09:50:27.503638Z","times_seen":1,"resource_available":false,"data":null}},"time_used":257,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":253,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"f.eruditor.link/favicon.ico","fqdn":"f.eruditor.link","domain":"eruditor.link","tld":"link"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://f.eruditor.link/file/2943863/","date":"2025-06-07T09:50:05.382Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eruditor.link","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Jun 2025 13:48:51 GMT","end":"Sat, 30 Aug 2025 14:45:52 GMT"},"fingerprint":{"sha1":"84:F0:8A:EE:A6:59:CA:4A:23:1B:6A:71:C3:79:7B:43:F2:37:97:4A","sha256":"35:46:A4:2C:0A:EC:9A:C6:27:21:15:87:6A:21:29:70:1C:2F:78:73:EA:4D:28:CF:AA:74:2F:3A:4B:7D:FE:34"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: f.eruditor.link\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://f.eruditor.link/file/2943863/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET","post_data":{"size":58,"data":"{\"productId\":\"PCHas53duTI4rGn45WSWRM2Dnv0XWvxc\",\"flage\":1}"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 07 Jun 2025 09:50:05 GMT\r\ncontent-type: image/x-icon\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Sun, 07 Jan 2024 06:14:55 GMT\r\nexpires: Mon, 07 Jul 2025 09:50:05 GMT\r\ncache-control: max-age=2592000, private\r\ncf-cache-status: BYPASS\r\npriority: u=6,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Q%2FBNRWThbwDlBCNKO0m%2FRKekQxU9yzEwJlqGTI5ctaceHQAs%2F67MWzNZIuoksPcIQCAVRWNyXrYUT3%2F73lX0plWcaUWJ2l97I3PiGS0%3D\"}]}\r\netag: W/\"1da4130d514dcfe\"\r\ncontent-encoding: br\r\ncf-ray: 94bf3e4398b5b527-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: db;dur=0.00, total;dur=0.79, cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1406,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 16x16, 8 bits/pixel","md5":"ce4de18ffa91816cb4af6d89da54c452","sha1":"1f541a38a8ac0d09167aa529244a0e5062684f8c","sha256":"804618e1882e2e543101354e9280d24807ead8eb9d51e9e4adbac63877092f0d","sha512":"23b450b11fb733224c4ffb1df1911a61994e6021fb6f1fa33ff613794a6e2604d4d76c2eda663458b49af3b4f9ce135087b065d67547103cd50e8aa87c8fbf16","ssdeep":"","tlshash":"a721dc9b25b4ec0fc87849bacfc246e24634f128ceaa135b2cc990c8997204b058d6e4","first_seen":"2025-06-07T09:50:27.506961Z","last_seen":"2026-01-07T14:45:49.182773Z","times_seen":3,"resource_available":false,"data":null}},"time_used":185,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":185,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}