spiralgambit.info/new/auth/sf_rand_string_lowercase6/YW1hbmRhLmN1bW1AaW5maW5pdGVseXZpcnR1YWwuY29t
162.241.124.47 0 B URL spiralgambit.info/new/auth/sf_rand_string_lowercase6/YW1hbmRhLmN1bW1AaW5maW5pdGVseXZpcnR1YWwuY29t
IP 162.241.124.47:0
ASN #46606 UNIFIEDLAYER-AS-1
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert urlquery phishing Phishing - Microsoft Outlook
GET /new/auth/sf_rand_string_lowercase6/YW1hbmRhLmN1bW1AaW5maW5pdGVseXZpcnR1YWwuY29t HTTP/1.1
Host: spiralgambit.info
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 09 Jun 2023 20:52:17 GMT
Server: Apache
refresh: 0;url=https://7abe8fae.c722cec9719b69e4d656e528.workers.dev/?qrc=amanda.cumm@infinitelyvirtual.com
Content-Length: 0
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8
newassets.hcaptcha.com/captcha/v1/2220dfa/hcaptcha.js
104.16.168.131200 OK 316 kB URL GET HTTP/3 newassets.hcaptcha.com/captcha/v1/2220dfa/hcaptcha.js
IP 104.16.168.131:443
Requested by https://newassets.hcaptcha.com/captcha/v1/2220dfa/static/hcaptcha.html#frame=checkbox&id=0zpdz20bdv6&host=7abe8fae.c722cec9719b69e4d656e528.workers.dev&sentry=true&reportapi=https%3A%2F%2Faccounts.hcaptcha.com&recaptchacompat=true&custom=false&hl=en&tplinks=on&sitekey=43d73dac-3e57-4783-ace6-7e8278ff6ede&theme=light&origin=https%3A%2F%2F7abe8fae.c722cec9719b69e4d656e528.workers.dev
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintD9:E8:78:82:B2:9B:0F:1B:5F:0B:B7:EF:93:24:6D:07:2D:83:BA:24
ValiditySat, 15 Apr 2023 00:00:00 GMT - Sun, 14 Apr 2024 23:59:59 GMT
Size 316 kB (315915 bytes)
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /captcha/v1/2220dfa/hcaptcha.js HTTP/1.1
Host: newassets.hcaptcha.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://newassets.hcaptcha.com/captcha/v1/2220dfa/static/hcaptcha.html
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 09 Jun 2023 20:52:19 GMT
content-type: application/javascript
cf-ray: 7d4c41f36828b4ff-OSL
cf-cache-status: HIT
access-control-allow-origin: *
age: 241543
cache-control: max-age=1209600
etag: W/"f49e582564aee579c45f508beaae8208"
last-modified: Tue, 06 Jun 2023 19:48:46 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
via: 1.1 8bdae94273544c8186e20a3c31375f98.cloudfront.net (CloudFront)
cross-origin-resource-policy: cross-origin
x-amz-cf-id: 5zcc2psEgyE9JH3CyC3xQQwCZsTHRIDkPm4AB7nTnGjcoJS3GQEUJQ==
x-amz-cf-pop: ARN1-C1
x-amz-server-side-encryption: AES256
x-amz-version-id: jjQvNXe_OJ9gOBl2eZ7IUgySFeNl87ZL
x-cache: Hit from cloudfront
x-content-type-options: nosniff
vary: Accept-Encoding
server: cloudflare
content-encoding: br
alt-svc: h3=":443"; ma=86400
hcaptcha.com/checksiteconfig?v=2220dfa&host=7abe8fae.c722cec9719b69e4d656e528.workers.dev&sitekey=43d73dac-3e57-4783-ace6-7e8278ff6ede&sc=1&swa=1&spst=0
104.16.168.131200 OK 853 B URL POST HTTP/3 hcaptcha.com/checksiteconfig?v=2220dfa&host=7abe8fae.c722cec9719b69e4d656e528.workers.dev&sitekey=43d73dac-3e57-4783-ace6-7e8278ff6ede&sc=1&swa=1&spst=0
IP 104.16.168.131:443
Requested by https://newassets.hcaptcha.com/captcha/v1/2220dfa/static/hcaptcha.html#frame=checkbox&id=0zpdz20bdv6&host=7abe8fae.c722cec9719b69e4d656e528.workers.dev&sentry=true&reportapi=https%3A%2F%2Faccounts.hcaptcha.com&recaptchacompat=true&custom=false&hl=en&tplinks=on&sitekey=43d73dac-3e57-4783-ace6-7e8278ff6ede&theme=light&origin=https%3A%2F%2F7abe8fae.c722cec9719b69e4d656e528.workers.dev
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintD9:E8:78:82:B2:9B:0F:1B:5F:0B:B7:EF:93:24:6D:07:2D:83:BA:24
ValiditySat, 15 Apr 2023 00:00:00 GMT - Sun, 14 Apr 2024 23:59:59 GMT
File type troff or preprocessor input, ASCII text, with very long lines (867), with no line terminators
Hash ded0d909cab76fa2157fe3946841919d
d474a8f9ecd4f1759bbc877bcfa9e272b382581a
8265aeee03c840a2186492fa7cd3f87f13477468a537f4fc53f39b565bc2f009
POST /checksiteconfig?v=2220dfa&host=7abe8fae.c722cec9719b69e4d656e528.workers.dev&sitekey=43d73dac-3e57-4783-ace6-7e8278ff6ede&sc=1&swa=1&spst=0 HTTP/1.1
Host: hcaptcha.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: https://newassets.hcaptcha.com
DNT: 1
Connection: keep-alive
Referer: https://newassets.hcaptcha.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
Content-Length: 0
HTTP/3 200 OK
date: Fri, 09 Jun 2023 20:52:19 GMT
content-type: application/json
access-control-allow-origin: https://newassets.hcaptcha.com
vary: Origin, Accept-Encoding
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control, Content-Type, DNT, Referer, User-Agent, challenge-bypass-token, cf-chl-bypass, challenge-bypass-token, challenge-bypass-host, challenge-bypass-path
access-control-allow-methods: GET, HEAD, POST, OPTIONS
cf-chl-bypass: 2
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 7d4c41f4fb07b4ff-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
js.hcaptcha.com/1/api.js?onload=onloadCallback&render=explicit
104.16.168.131200 OK 316 kB URL GET HTTP/2 js.hcaptcha.com/1/api.js?onload=onloadCallback&render=explicit
IP 104.16.168.131:443
Requested by https://7abe8fae.c722cec9719b69e4d656e528.workers.dev/?qrc=amanda.cumm@infinitelyvirtual.com
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintD9:E8:78:82:B2:9B:0F:1B:5F:0B:B7:EF:93:24:6D:07:2D:83:BA:24
ValiditySat, 15 Apr 2023 00:00:00 GMT - Sun, 14 Apr 2024 23:59:59 GMT
Size 316 kB (315915 bytes)
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /1/api.js?onload=onloadCallback&render=explicit HTTP/1.1
Host: js.hcaptcha.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://7abe8fae.c722cec9719b69e4d656e528.workers.dev/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 09 Jun 2023 20:52:18 GMT
content-type: application/javascript
cf-ray: 7d4c41f11a1fb50c-OSL
cf-cache-status: HIT
age: 0
cache-control: max-age=120
etag: W/"f49e582564aee579c45f508beaae8208"
last-modified: Tue, 06 Jun 2023 19:48:46 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
via: 1.1 8bdae94273544c8186e20a3c31375f98.cloudfront.net (CloudFront)
cross-origin-resource-policy: cross-origin
x-amz-cf-id: 5zcc2psEgyE9JH3CyC3xQQwCZsTHRIDkPm4AB7nTnGjcoJS3GQEUJQ==
x-amz-cf-pop: ARN1-C1
x-amz-server-side-encryption: AES256
x-amz-version-id: jjQvNXe_OJ9gOBl2eZ7IUgySFeNl87ZL
x-cache: Hit from cloudfront
x-content-type-options: nosniff
vary: Accept-Encoding
server: cloudflare
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
7abe8fae.c722cec9719b69e4d656e528.workers.dev/favicon.ico
104.21.17.164200 OK 426 B URL GET HTTP/3 7abe8fae.c722cec9719b69e4d656e528.workers.dev/favicon.ico
IP 104.21.17.164:443
Requested by https://7abe8fae.c722cec9719b69e4d656e528.workers.dev/?qrc=amanda.cumm@infinitelyvirtual.com
Certificate IssuerGoogle Trust Services LLC
Subjectc722cec9719b69e4d656e528.workers.dev
Fingerprint1A:F9:AF:48:8A:F9:E0:94:89:FF:86:19:1B:FB:DE:93:D5:36:03:BF
ValidityWed, 17 May 2023 09:10:57 GMT - Tue, 15 Aug 2023 09:10:56 GMT
File type HTML document text\012- HTML document, ASCII text, with very long lines (432), with no line terminators
Hash d5bf8c8e47f634d077fe0e7d9c5f7f1b
214f34cf9cab6424fe603574106904ea73b0c91e
9b6f1d0399df02a09e109038e44e33b10d0642c635bbb5fc71f3d5910cf07d31
GET /favicon.ico HTTP/1.1
Host: 7abe8fae.c722cec9719b69e4d656e528.workers.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://7abe8fae.c722cec9719b69e4d656e528.workers.dev/?qrc=amanda.cumm@infinitelyvirtual.com
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 09 Jun 2023 20:52:18 GMT
content-type: text/html;charset=UTF-8
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=W1iz%2FSQfo4QCndiLtL38Rv%2F67SF6CEWSzOrOdj%2BjSNnI3avyIUwWMG%2FbYgYapWPjooEW96%2BwQ3UCmBY%2FN4qpcUUC%2FW1BRvzWyMZLGJSB1hJo1qstV4akN2lggZF%2F%2BhJLGNp7h40rMShSLlMun%2FYppsa%2BqttMvKGfNUZEGGgKKbc%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7d4c41f1dcf60afa-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
newassets.hcaptcha.com/captcha/v1/2220dfa/static/hcaptcha.html
104.16.168.131200 OK 1.9 kB URL GET HTTP/3 newassets.hcaptcha.com/captcha/v1/2220dfa/static/hcaptcha.html
IP 104.16.168.131:443
Requested by https://7abe8fae.c722cec9719b69e4d656e528.workers.dev/?qrc=amanda.cumm@infinitelyvirtual.com
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintD9:E8:78:82:B2:9B:0F:1B:5F:0B:B7:EF:93:24:6D:07:2D:83:BA:24
ValiditySat, 15 Apr 2023 00:00:00 GMT - Sun, 14 Apr 2024 23:59:59 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (1960), with no line terminators
Hash 9f167c8561d77c9b07b5904cac4b447f
9f07006fab7f2abad7e69a0fe088e51f48f31785
9dfd06e60d4f6aee767b79d3d95d61f7a0f2c2d17fb123d43b8086eca8d2b7de
GET /captcha/v1/2220dfa/static/hcaptcha.html HTTP/1.1
Host: newassets.hcaptcha.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://7abe8fae.c722cec9719b69e4d656e528.workers.dev/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 09 Jun 2023 20:52:18 GMT
content-type: text/html
cf-ray: 7d4c41f28ec0b4ff-OSL
cf-cache-status: HIT
access-control-allow-origin: *
age: 241537
cache-control: max-age=1209600
last-modified: Tue, 06 Jun 2023 19:48:46 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
via: 1.1 732d3ca1627bbec3dcfe750ff23e18bc.cloudfront.net (CloudFront)
cross-origin-embedder-policy: credentialless
cross-origin-resource-policy: cross-origin
x-amz-cf-id: qhGSxF5Yy2dlyv9rv20FQSiSJ_uyxYaLIhhQJpfW0AYPIgVeoHXd7Q==
x-amz-cf-pop: HEL51-P1
x-amz-server-side-encryption: AES256
x-amz-version-id: VL5KtAtv9OnK1ye4wnSygkLiMSftJgIO
x-cache: Hit from cloudfront
x-content-type-options: nosniff
vary: Accept-Encoding
server: cloudflare
content-encoding: br
alt-svc: h3=":443"; ma=86400
newassets.hcaptcha.com/captcha/v1/2220dfa/hcaptcha.js
104.16.168.131200 OK 316 kB URL GET HTTP/3 newassets.hcaptcha.com/captcha/v1/2220dfa/hcaptcha.js
IP 104.16.168.131:443
Requested by https://newassets.hcaptcha.com/captcha/v1/2220dfa/static/hcaptcha.html#frame=challenge&id=0zpdz20bdv6&host=7abe8fae.c722cec9719b69e4d656e528.workers.dev&sentry=true&reportapi=https%3A%2F%2Faccounts.hcaptcha.com&recaptchacompat=true&custom=false&hl=en&tplinks=on&sitekey=43d73dac-3e57-4783-ace6-7e8278ff6ede&theme=light&origin=https%3A%2F%2F7abe8fae.c722cec9719b69e4d656e528.workers.dev
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintD9:E8:78:82:B2:9B:0F:1B:5F:0B:B7:EF:93:24:6D:07:2D:83:BA:24
ValiditySat, 15 Apr 2023 00:00:00 GMT - Sun, 14 Apr 2024 23:59:59 GMT
Size 316 kB (315915 bytes)
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /captcha/v1/2220dfa/hcaptcha.js HTTP/1.1
Host: newassets.hcaptcha.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://newassets.hcaptcha.com/captcha/v1/2220dfa/static/hcaptcha.html
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 09 Jun 2023 20:52:19 GMT
content-type: application/javascript
cf-ray: 7d4c41f34fe6b4ff-OSL
cf-cache-status: HIT
access-control-allow-origin: *
age: 241543
cache-control: max-age=1209600
etag: W/"f49e582564aee579c45f508beaae8208"
last-modified: Tue, 06 Jun 2023 19:48:46 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
via: 1.1 8bdae94273544c8186e20a3c31375f98.cloudfront.net (CloudFront)
cross-origin-resource-policy: cross-origin
x-amz-cf-id: 5zcc2psEgyE9JH3CyC3xQQwCZsTHRIDkPm4AB7nTnGjcoJS3GQEUJQ==
x-amz-cf-pop: ARN1-C1
x-amz-server-side-encryption: AES256
x-amz-version-id: jjQvNXe_OJ9gOBl2eZ7IUgySFeNl87ZL
x-cache: Hit from cloudfront
x-content-type-options: nosniff
vary: Accept-Encoding
server: cloudflare
content-encoding: br
alt-svc: h3=":443"; ma=86400
7abe8fae.c722cec9719b69e4d656e528.workers.dev/?qrc=amanda.cumm@infinitelyvirtual.com
104.21.17.164200 OK 426 B URL User Request GET HTTP/2 7abe8fae.c722cec9719b69e4d656e528.workers.dev/?qrc=amanda.cumm@infinitelyvirtual.com
IP 104.21.17.164:443
Certificate IssuerGoogle Trust Services LLC
Subjectc722cec9719b69e4d656e528.workers.dev
Fingerprint1A:F9:AF:48:8A:F9:E0:94:89:FF:86:19:1B:FB:DE:93:D5:36:03:BF
ValidityWed, 17 May 2023 09:10:57 GMT - Tue, 15 Aug 2023 09:10:56 GMT
File type HTML document text\012- HTML document, ASCII text, with very long lines (432), with no line terminators
Hash d5bf8c8e47f634d077fe0e7d9c5f7f1b
214f34cf9cab6424fe603574106904ea73b0c91e
9b6f1d0399df02a09e109038e44e33b10d0642c635bbb5fc71f3d5910cf07d31
Analyzer Verdict Alert urlquery phishing Phishing - Microsoft Outlook
GET /?qrc=amanda.cumm@infinitelyvirtual.com HTTP/1.1
Host: 7abe8fae.c722cec9719b69e4d656e528.workers.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 09 Jun 2023 20:52:18 GMT
content-type: text/html;charset=UTF-8
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ModHaJhH96zC6TNtpF7N8ohWrWQLZDgF8quRhKjtsrtaRwxqtwH5tOOV5uvULhjHsfbrTCqkQsim321PLc7cwf3qRBBg%2Be%2FSFNG7R8l7YfLPNRzb2bBrDF1n3LbaKQQovos3RiIiQSQyGR3wYfzGAC3PKiYCnUY8HPFuj4znBn0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7d4c41effef3b51b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
1d192bbf.captcha222.pages.dev/style.js
172.66.46.232200 OK 2.2 kB URL GET HTTP/2 1d192bbf.captcha222.pages.dev/style.js
IP 172.66.46.232:443
Requested by https://7abe8fae.c722cec9719b69e4d656e528.workers.dev/?qrc=amanda.cumm@infinitelyvirtual.com
Certificate IssuerGoogle Trust Services LLC
Subjectcaptcha222.pages.dev
FingerprintD7:04:26:B2:C7:D3:D3:58:DF:7B:41:8E:9C:0B:5E:B8:99:BD:41:EE
ValidityThu, 20 Apr 2023 00:53:24 GMT - Wed, 19 Jul 2023 00:53:23 GMT
File type ASCII text, with very long lines (2253), with no line terminators
Hash 351d5e6d656d79d03d66a119924c8515
cbceefbd24e3a5bdf21ce6cf35b687d6fab6fe16
3124f98b4b316fe50ba532babb93564621e252204cff54317672fea9f258b182
GET /style.js HTTP/1.1
Host: 1d192bbf.captcha222.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://7abe8fae.c722cec9719b69e4d656e528.workers.dev/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 09 Jun 2023 20:52:18 GMT
content-type: text/javascript; charset=utf-8
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: W/"119584a8f7464eefbbe3b0f50b7a7f00"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
x-robots-tag: noindex
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=DYQy56Lmig1WdlenmrU4c9aEcdYqDQKGKof8dIalkjGCQS1rlj8AvM5EBKzeDTDlUAPOh0AKZ9b9tNpoFjSHrStvWIFeomSnEui09XP1ETrTublT1p1tyhymLJoXX8aDum7I5Nk%2Fp%2F8XvRSTbTtI4w%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7d4c41f10f16b503-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
newassets.hcaptcha.com/captcha/v1/2220dfa/static/hcaptcha.html
104.16.168.131200 OK 1.9 kB URL GET HTTP/3 newassets.hcaptcha.com/captcha/v1/2220dfa/static/hcaptcha.html
IP 104.16.168.131:443
Requested by https://7abe8fae.c722cec9719b69e4d656e528.workers.dev/?qrc=amanda.cumm@infinitelyvirtual.com
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintD9:E8:78:82:B2:9B:0F:1B:5F:0B:B7:EF:93:24:6D:07:2D:83:BA:24
ValiditySat, 15 Apr 2023 00:00:00 GMT - Sun, 14 Apr 2024 23:59:59 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (1960), with no line terminators
Hash 9f167c8561d77c9b07b5904cac4b447f
9f07006fab7f2abad7e69a0fe088e51f48f31785
9dfd06e60d4f6aee767b79d3d95d61f7a0f2c2d17fb123d43b8086eca8d2b7de
GET /captcha/v1/2220dfa/static/hcaptcha.html HTTP/1.1
Host: newassets.hcaptcha.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://7abe8fae.c722cec9719b69e4d656e528.workers.dev/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 09 Jun 2023 20:52:18 GMT
content-type: text/html
cf-ray: 7d4c41f28ec2b4ff-OSL
cf-cache-status: HIT
access-control-allow-origin: *
age: 241537
cache-control: max-age=1209600
last-modified: Tue, 06 Jun 2023 19:48:46 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
via: 1.1 732d3ca1627bbec3dcfe750ff23e18bc.cloudfront.net (CloudFront)
cross-origin-embedder-policy: credentialless
cross-origin-resource-policy: cross-origin
x-amz-cf-id: qhGSxF5Yy2dlyv9rv20FQSiSJ_uyxYaLIhhQJpfW0AYPIgVeoHXd7Q==
x-amz-cf-pop: HEL51-P1
x-amz-server-side-encryption: AES256
x-amz-version-id: VL5KtAtv9OnK1ye4wnSygkLiMSftJgIO
x-cache: Hit from cloudfront
x-content-type-options: nosniff
vary: Accept-Encoding
server: cloudflare
content-encoding: br
alt-svc: h3=":443"; ma=86400