Report - thedirsite.com/soothe/pniewski?delays=&eyed=hogan&SHVhd2VpIEhpc2lsaWNvbiBGaXJtd2FyZSBXcml0ZXISHV=ZG93bmxvYWR8ZWMzWlc4d2ZId3hOalk0T0RjMk9UYzFmSHd5TlRrd2ZId29UU2tnVjI5eVpIQnlaWE56SUZ0WVRVeFNVRU1nVmpJZ1VFUkdYUQ&motivating=shortcakes

Report Overview

Submitted URL
thedirsite.com/soothe/pniewski?delays=&eyed=hogan&SHVhd2VpIEhpc2lsaWNvbiBGaXJtd2FyZSBXcml0ZXISHV=ZG93bmxvYWR8ZWMzWlc4d2ZId3hOalk0T0RjMk9UYzFmSHd5TlRrd2ZId29UU2tnVjI5eVpIQnlaWE56SUZ0WVRVeFNVRU1nVmpJZ1VFUkdYUQ&motivating=shortcakes
IP
188.114.96.1
ASN
#13335 CLOUDFLARENET
Submitted
2023-05-30 15:04:52
Access
public
Website Title
Final URL
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
4

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
newassets.hcaptcha.com	11055	2018-01-12	2021-03-22	2023-05-29	3.0 kB	474 kB	104.16.168.131
imgs.hcaptcha.com	22116	2018-01-12	2019-07-26	2023-05-29	14 kB	85 kB	104.16.168.131
bibtu.com	unknown	2023-05-11	2020-07-06	2023-05-29	1.0 kB	5.2 kB	188.114.96.1
hcaptcha.com	5458	2018-01-12	2018-04-03	2023-05-29	1.2 kB	12 kB	104.16.168.131
thedirsite.com	unknown	2010-06-30	2012-12-05	2023-05-29	687 B	2.3 kB	188.114.97.1
www.hcaptcha.com	91052	2018-01-12	2019-09-05	2023-05-29	397 B	316 kB	104.16.168.131

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

OpenPhish

No alerts detected

PhishTank

No alerts detected

Fortinet's Web Filter

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2023-05-30	medium	bibtu.com
2023-05-30	medium	bibtu.com

ThreatFox

No alerts detected

JavaScript (6)

	URL	Size	First Seen	Last Seen
	newassets.hcaptcha.com/captcha/v1/30d2bc2/hcaptcha.js	315 kB	2023-05-24	2023-05-31
Pretty URL newassets.hcaptcha.com/captcha/v1/30d2bc2/hcaptcha.js IP 104.16.168.131 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-05-24 13:00:31 Last Seen2023-05-31 13:03:23 Times Seen712 Hash 26702637f099805c232e40dbc6b2c680 a59af8bad214c637a46edd89b3d8f1e5b4e8f796 de72ee524d3a176075ee33ac030a0edaf7e32becf9f1d7bca1bc6bb4e807f675 Loading...

	unknown	48 B	2023-04-11	2024-04-26
Pretty Introduced by Function Embedded in HTML false Observations First Seen2023-04-11 22:45:29 Last Seen2024-04-26 22:27:08 Times Seen18930 Hash 43d643e449b4ea13394fe737b1d6a447 1c03d56d955fd266d7659379e63d5711bd5382db 4817661f6ac7d2e1691bc3aeb9966e66012891ccda569ff872dc0932010c540d Loading...

	newassets.hcaptcha.com/captcha/challenge/image_label_binary/30d2bc2/challenge.js	52 kB	2023-05-24	2023-05-31
Pretty URL newassets.hcaptcha.com/captcha/challenge/image_label_binary/30d2bc2/challenge.js IP 104.16.168.131 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-05-24 13:55:30 Last Seen2023-05-31 10:16:08 Times Seen288 Hash e911c8722eb6500a58d066854767c4d0 b168420422f4888b24c3a329da5dfb18649f4e44 885d8b7984ae842223c5d08f2b6a71c3b1cbb159bba8670da0091051681f906f Loading...

	unknown	136 kB	2023-05-22	2023-06-09
Pretty Introduced by Function Embedded in HTML false Observations First Seen2023-05-22 17:29:45 Last Seen2023-06-09 22:16:47 Times Seen264 Hash 50117a69cbff946d9c370d575e889d48 6efe1f65de9e3ec3231cdd7710263f90036de181 f6338fb17f52399d0368d3686b5d22d70f9053be3432382d91f15b5695754352 Loading...

	bibtu.com/eee6b53f6bef073a8aa16130cb8a7d5fSsicCXajx6zr2kdj8Q5swqCIbER7PQxg-DI	0 B	2023-03-07	2024-04-26
Pretty URL bibtu.com/eee6b53f6bef073a8aa16130cb8a7d5fSsicCXajx6zr2kdj8Q5swqCIbER7PQxg-DI IP 188.114.96.1 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 01:01:59 Last Seen2024-04-26 23:14:53 Times Seen37104366 Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Loading...

	newassets.hcaptcha.com/c/0d2aecf/hsw.js	467 kB	2023-05-22	2023-06-09
Pretty URL newassets.hcaptcha.com/c/0d2aecf/hsw.js IP 104.16.168.131 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-05-22 17:29:45 Last Seen2023-06-09 22:16:47 Times Seen526 Hash 27081fb320c1f7d7b2af58b9dd40ea16 28f5eba6023cd8819b5ec2a6c6dd394498114082 b7c3c885c8ccdb372b310bdc5784e773a1e3ca530202ea9fb2877102e4d36ec1 Loading...

HTTP Transactions (33)

URL IP Response Size

newassets.hcaptcha.com/i/0d2aecf/e

104.16.168.131

200 OK

136 kB

URL GET HTTP/3
newassets.hcaptcha.com/i/0d2aecf/e
IP
104.16.168.131:443
ASN
#13335 CLOUDFLARENET

Requested by
https://newassets.hcaptcha.com/captcha/v1/30d2bc2/static/hcaptcha.html#frame=challenge&id=0oi03o16bldm&host=bibtu.com&sentry=true&reportapi=https%3A%2F%2Faccounts.hcaptcha.com&recaptchacompat=true&custom=false&hl=en&tplinks=on&sitekey=c2adcb87-2c2c-408a-8990-d25035251688&theme=light&origin=https%3A%2F%2Fbibtu.com
Certificate
IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintD9:E8:78:82:B2:9B:0F:1B:5F:0B:B7:EF:93:24:6D:07:2D:83:BA:24
ValiditySat, 15 Apr 2023 00:00:00 GMT - Sun, 14 Apr 2024 23:59:59 GMT

File type
data
Size
136 kB (135859 bytes)
Hash
793d94dfacb23c74b4c43e0392dc1a85
4c4f45af7668c27e9c94bd75d1ca0f895cbf1390
76120facd34439c52cd6da24cce0a1907d396fbe130f8b0878a746cbf44fa74c

HTTP Headers

GET /i/0d2aecf/e HTTP/1.1
Host: newassets.hcaptcha.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://newassets.hcaptcha.com/captcha/v1/30d2bc2/static/hcaptcha.html
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Tue, 30 May 2023 15:04:36 GMT
content-type: application/octet-stream
content-length: 135859
cf-ray: 7cf7ded93abeb527-OSL
cf-cache-status: HIT
accept-ranges: bytes
access-control-allow-origin: *
age: 5873
cache-control: max-age=3024000
etag: "793d94dfacb23c74b4c43e0392dc1a85"
last-modified: Mon, 22 May 2023 09:06:38 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
via: 1.1 a62f7ce6b39c676fcfdde0f9a6fcf08e.cloudfront.net (CloudFront)
cross-origin-resource-policy: cross-origin
x-amz-cf-id: wdxn4sxEuXtTeTY335tiW-vgbhRY0dafBrL2lFOjL_9f_UWN7-7xSg==
x-amz-cf-pop: ARN1-C1
x-amz-server-side-encryption: AES256
x-amz-version-id: RUXVva8Sg17TYbslo1WBgLfWjxPdxk1y
x-cache: Hit from cloudfront
x-content-type-options: nosniff
vary: Accept-Encoding
server: cloudflare
alt-svc: h3=":443"; ma=86400

imgs.hcaptcha.com/Ya9Uz9d77m59OmbfXv7Ts3i2HS1R3pDOJByY+VOqhLH39tGX63OEFyKKQsgsX172SNTRn2jOc7uskevvcV37qMhWWja/mytklJUwE5W6+jSHmPqkci9NiN2gCRnT9iuWOUgiqNXso4Grj07rrCB4whSTOTSCtf29qPxKVPSJ6zjKRwjhvmsPHpk1RZ3DYoG+hjLasxD41MxIJajDGN8kXQYtObTYXrczdE4ogPtrfHQb2MRkrBXsnbJOAZHJIbGAZavs

104.16.168.131

200 OK

2.9 kB

URL GET HTTP/3
imgs.hcaptcha.com/Ya9Uz9d77m59OmbfXv7Ts3i2HS1R3pDOJByY+VOqhLH39tGX63OEFyKKQsgsX172SNTRn2jOc7uskevvcV37qMhWWja/mytklJUwE5W6+jSHmPqkci9NiN2gCRnT9iuWOUgiqNXso4Grj07rrCB4whSTOTSCtf29qPxKVPSJ6zjKRwjhvmsPHpk1RZ3DYoG+hjLasxD41MxIJajDGN8kXQYtObTYXrczdE4ogPtrfHQb2MRkrBXsnbJOAZHJIbGAZavs
IP
104.16.168.131:443
ASN
#13335 CLOUDFLARENET

Requested by
https://newassets.hcaptcha.com/captcha/v1/30d2bc2/static/hcaptcha.html#frame=challenge&id=0oi03o16bldm&host=bibtu.com&sentry=true&reportapi=https%3A%2F%2Faccounts.hcaptcha.com&recaptchacompat=true&custom=false&hl=en&tplinks=on&sitekey=c2adcb87-2c2c-408a-8990-d25035251688&theme=light&origin=https%3A%2F%2Fbibtu.com
Certificate
IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintD9:E8:78:82:B2:9B:0F:1B:5F:0B:B7:EF:93:24:6D:07:2D:83:BA:24
ValiditySat, 15 Apr 2023 00:00:00 GMT - Sun, 14 Apr 2024 23:59:59 GMT

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 128x128, components 3\012- data
Size
2.9 kB (2866 bytes)
Hash
c7d4fb04411605b1c486b2f07f800fd7
cac626df7141f23435aab22935694c31f190abe1
1054936b1a965c8e672692e55afb7ca345aa0c21bcfcef52bc5f1f66b8e7a251

HTTP Headers

GET /Ya9Uz9d77m59OmbfXv7Ts3i2HS1R3pDOJByY+VOqhLH39tGX63OEFyKKQsgsX172SNTRn2jOc7uskevvcV37qMhWWja/mytklJUwE5W6+jSHmPqkci9NiN2gCRnT9iuWOUgiqNXso4Grj07rrCB4whSTOTSCtf29qPxKVPSJ6zjKRwjhvmsPHpk1RZ3DYoG+hjLasxD41MxIJajDGN8kXQYtObTYXrczdE4ogPtrfHQb2MRkrBXsnbJOAZHJIbGAZavs HTTP/1.1
Host: imgs.hcaptcha.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://newassets.hcaptcha.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Tue, 30 May 2023 15:04:36 GMT
content-type: image/jpeg
content-length: 2866
cf-ray: 7cf7dedebaeab527-OSL
cf-cache-status: HIT
accept-ranges: bytes
access-control-allow-origin: *
age: 193
cache-control: max-age=86400,s-maxage=86400
etag: "c7d4fb04411605b1c486b2f07f800fd7"
last-modified: Tue, 30 May 2023 14:57:48 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
via: 1.1 797e08d987207122bff536abc6502d6c.cloudfront.net (CloudFront)
cross-origin-resource-policy: cross-origin
x-amz-cf-id: JbZL3bV2Jtl2GFW4eYPNv7jfVSX8qx1_fa-l_fgDpilbl0i7qt0VSg==
x-amz-cf-pop: ARN56-P1
x-amz-expiration: expiry-date="Mon, 27 Nov 2023 00:00:00 GMT", rule-id="Expire after 180 days"
x-amz-server-side-encryption: AES256
x-amz-version-id: oKukACv8WCrBvgP6PkAl6MpZ8yPUVZXD
x-cache: Hit from cloudfront
x-content-type-options: nosniff
vary: Accept-Encoding
server: cloudflare
alt-svc: h3=":443"; ma=86400

imgs.hcaptcha.com/yX6DP0Vsjv1Mi6kQiZsF1NYqE2W/1kUtoT3h/v/9qQjYuzFLeEnTZoeOAb50SR+EIDIaCfemio9WpaThwxzV7y7yHQcisNjPtZk+iqOZ91R+ZL65gpkP0Ed90O5+3qBDx0y+6PKK/cPRWAKmu9aH5ve53x3Pnw0ji7rSR42z9oRfPzj/WP1UI1mvj5dXKSBDLqmbEVs/fMO2yfVZrZ591auDd4evUq0bBJdHKGdUbARVkFq1lg==h4HToMbYxE8+uhnF

104.16.168.131

200 OK

3.4 kB

URL GET HTTP/3
imgs.hcaptcha.com/yX6DP0Vsjv1Mi6kQiZsF1NYqE2W/1kUtoT3h/v/9qQjYuzFLeEnTZoeOAb50SR+EIDIaCfemio9WpaThwxzV7y7yHQcisNjPtZk+iqOZ91R+ZL65gpkP0Ed90O5+3qBDx0y+6PKK/cPRWAKmu9aH5ve53x3Pnw0ji7rSR42z9oRfPzj/WP1UI1mvj5dXKSBDLqmbEVs/fMO2yfVZrZ591auDd4evUq0bBJdHKGdUbARVkFq1lg==h4HToMbYxE8+uhnF
IP
104.16.168.131:443
ASN
#13335 CLOUDFLARENET

Requested by
https://newassets.hcaptcha.com/captcha/v1/30d2bc2/static/hcaptcha.html#frame=challenge&id=0oi03o16bldm&host=bibtu.com&sentry=true&reportapi=https%3A%2F%2Faccounts.hcaptcha.com&recaptchacompat=true&custom=false&hl=en&tplinks=on&sitekey=c2adcb87-2c2c-408a-8990-d25035251688&theme=light&origin=https%3A%2F%2Fbibtu.com
Certificate
IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintD9:E8:78:82:B2:9B:0F:1B:5F:0B:B7:EF:93:24:6D:07:2D:83:BA:24
ValiditySat, 15 Apr 2023 00:00:00 GMT - Sun, 14 Apr 2024 23:59:59 GMT

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 128x128, components 3\012- data
Size
3.4 kB (3421 bytes)
Hash
c9d958f5526be83a6a3b9f545ed279cd
ee4389820bfbf1f57fb236f7e3c0754f284e733f
a5a4e4881e75f6c1757d8183f9414eb3e14f337777327c4d050ac57d72ab7837

HTTP Headers

GET /yX6DP0Vsjv1Mi6kQiZsF1NYqE2W/1kUtoT3h/v/9qQjYuzFLeEnTZoeOAb50SR+EIDIaCfemio9WpaThwxzV7y7yHQcisNjPtZk+iqOZ91R+ZL65gpkP0Ed90O5+3qBDx0y+6PKK/cPRWAKmu9aH5ve53x3Pnw0ji7rSR42z9oRfPzj/WP1UI1mvj5dXKSBDLqmbEVs/fMO2yfVZrZ591auDd4evUq0bBJdHKGdUbARVkFq1lg==h4HToMbYxE8+uhnF HTTP/1.1
Host: imgs.hcaptcha.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://newassets.hcaptcha.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Tue, 30 May 2023 15:04:36 GMT
content-type: image/jpeg
content-length: 3421
cf-ray: 7cf7dedebae8b527-OSL
cf-cache-status: HIT
accept-ranges: bytes
access-control-allow-origin: *
age: 191
cache-control: max-age=86400,s-maxage=86400
etag: "c9d958f5526be83a6a3b9f545ed279cd"
last-modified: Tue, 30 May 2023 14:57:23 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
via: 1.1 972139976e4412f67b110b0eeb969592.cloudfront.net (CloudFront)
cross-origin-resource-policy: cross-origin
x-amz-cf-id: RE72v3ZLowIPp811_Dw6EAM5mywwBnYIaYcDYQy-YTPZsxXf1ajKgA==
x-amz-cf-pop: CPH50-P1
x-amz-expiration: expiry-date="Mon, 27 Nov 2023 00:00:00 GMT", rule-id="Expire after 180 days"
x-amz-server-side-encryption: AES256
x-amz-version-id: fwjP9RRcdKLtZZJgPVZg_89fTPDXJPuJ
x-cache: Hit from cloudfront
x-content-type-options: nosniff
vary: Accept-Encoding
server: cloudflare
alt-svc: h3=":443"; ma=86400

imgs.hcaptcha.com/SHOHyadz9PD4VMs7jnt6LJFeuU9kHTzvBNhmHa8Op6JzlCSeeZ7UaVMsT3vjntES6/jqXVmPljX8yU69q309eZ+HfSDin7jt2fPZkOuNP3JBaLGXaH5iF+iatyrpOJn7qBii78UFMXFLOAg2R7/bE1sksigmblMYIe9e8IcpuUHnUHomJpzRDrMpcDxwU3OrnB4UM63HB3aIpFl4CfrP++B4dg79GNqzAXrxgZirxviY37Y=YfUz20CkyZHNUJPV

104.16.168.131

200 OK

3.0 kB

URL GET HTTP/3
imgs.hcaptcha.com/SHOHyadz9PD4VMs7jnt6LJFeuU9kHTzvBNhmHa8Op6JzlCSeeZ7UaVMsT3vjntES6/jqXVmPljX8yU69q309eZ+HfSDin7jt2fPZkOuNP3JBaLGXaH5iF+iatyrpOJn7qBii78UFMXFLOAg2R7/bE1sksigmblMYIe9e8IcpuUHnUHomJpzRDrMpcDxwU3OrnB4UM63HB3aIpFl4CfrP++B4dg79GNqzAXrxgZirxviY37Y=YfUz20CkyZHNUJPV
IP
104.16.168.131:443
ASN
#13335 CLOUDFLARENET

Requested by
https://newassets.hcaptcha.com/captcha/v1/30d2bc2/static/hcaptcha.html#frame=challenge&id=0oi03o16bldm&host=bibtu.com&sentry=true&reportapi=https%3A%2F%2Faccounts.hcaptcha.com&recaptchacompat=true&custom=false&hl=en&tplinks=on&sitekey=c2adcb87-2c2c-408a-8990-d25035251688&theme=light&origin=https%3A%2F%2Fbibtu.com
Certificate
IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintD9:E8:78:82:B2:9B:0F:1B:5F:0B:B7:EF:93:24:6D:07:2D:83:BA:24
ValiditySat, 15 Apr 2023 00:00:00 GMT - Sun, 14 Apr 2024 23:59:59 GMT

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 128x128, components 3\012- data
Size
3.0 kB (2950 bytes)
Hash
a3efa4cf74df316d4c3d2ff37319d539
ca77f7ca13473d02c5410a082b3e08e5f27500e7
d5508dfd071d7ec7bd5bd21800918572480efb64941947be1a6d16bcbc516617

HTTP Headers

GET /SHOHyadz9PD4VMs7jnt6LJFeuU9kHTzvBNhmHa8Op6JzlCSeeZ7UaVMsT3vjntES6/jqXVmPljX8yU69q309eZ+HfSDin7jt2fPZkOuNP3JBaLGXaH5iF+iatyrpOJn7qBii78UFMXFLOAg2R7/bE1sksigmblMYIe9e8IcpuUHnUHomJpzRDrMpcDxwU3OrnB4UM63HB3aIpFl4CfrP++B4dg79GNqzAXrxgZirxviY37Y=YfUz20CkyZHNUJPV HTTP/1.1
Host: imgs.hcaptcha.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://newassets.hcaptcha.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Tue, 30 May 2023 15:04:36 GMT
content-type: image/jpeg
content-length: 2950
cf-ray: 7cf7dedebae6b527-OSL
cf-cache-status: HIT
accept-ranges: bytes
access-control-allow-origin: *
age: 206
cache-control: max-age=86400,s-maxage=86400
etag: "a3efa4cf74df316d4c3d2ff37319d539"
last-modified: Tue, 30 May 2023 14:57:58 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
via: 1.1 0b29dbae3ec4657017234abf5689a8f8.cloudfront.net (CloudFront)
cross-origin-resource-policy: cross-origin
x-amz-cf-id: TI5AWkMzIiqHoL9GmscZgxA3CiyrfozZQbJgdD8HJTNie4KUL3Vrtw==
x-amz-cf-pop: HEL50-C1
x-amz-expiration: expiry-date="Mon, 27 Nov 2023 00:00:00 GMT", rule-id="Expire after 180 days"
x-amz-server-side-encryption: AES256
x-amz-version-id: Wk_v94DwaIKgg.F2jSlhp9kFs5eL0h2Z
x-cache: Hit from cloudfront
x-content-type-options: nosniff
vary: Accept-Encoding
server: cloudflare
alt-svc: h3=":443"; ma=86400

imgs.hcaptcha.com/DzgtTenFWSv76UPihNacaLOu19NKeeqTfR1ZtYkrdXa6tunosxiiToVrY4xHRtKFW2JT/ntxJTj9ykCwwRAghfEYVv2VJ+ohgNyk+lQ8U+fRRtViu5Pbe9XAhSs1Bm+adnaqS+OTELKOAAeDfRuVeQKa7YRK/1m+FqyolQQ6tCe58Hb0LtmOjzuYQOuRrjP3tc/ADLlKiZCox6fZhj2jzUdxO5AlujwvieF7NJYvq0z6N6M=z/7IfeDLQ/zrEff1

104.16.168.131

200 OK

3.0 kB

URL GET HTTP/3
imgs.hcaptcha.com/DzgtTenFWSv76UPihNacaLOu19NKeeqTfR1ZtYkrdXa6tunosxiiToVrY4xHRtKFW2JT/ntxJTj9ykCwwRAghfEYVv2VJ+ohgNyk+lQ8U+fRRtViu5Pbe9XAhSs1Bm+adnaqS+OTELKOAAeDfRuVeQKa7YRK/1m+FqyolQQ6tCe58Hb0LtmOjzuYQOuRrjP3tc/ADLlKiZCox6fZhj2jzUdxO5AlujwvieF7NJYvq0z6N6M=z/7IfeDLQ/zrEff1
IP
104.16.168.131:443
ASN
#13335 CLOUDFLARENET

Requested by
https://newassets.hcaptcha.com/captcha/v1/30d2bc2/static/hcaptcha.html#frame=challenge&id=0oi03o16bldm&host=bibtu.com&sentry=true&reportapi=https%3A%2F%2Faccounts.hcaptcha.com&recaptchacompat=true&custom=false&hl=en&tplinks=on&sitekey=c2adcb87-2c2c-408a-8990-d25035251688&theme=light&origin=https%3A%2F%2Fbibtu.com
Certificate
IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintD9:E8:78:82:B2:9B:0F:1B:5F:0B:B7:EF:93:24:6D:07:2D:83:BA:24
ValiditySat, 15 Apr 2023 00:00:00 GMT - Sun, 14 Apr 2024 23:59:59 GMT

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 128x128, components 3\012- data
Size
3.0 kB (2977 bytes)
Hash
f31f55859f7ba24912a3c4bd65934914
99b1248f0ae6f992006f5fbf6f21686e0c73ed0a
861e7aee7bd7453731b1149fc8462cb462c2227173951b6e3685efb40df9e280

HTTP Headers

GET /DzgtTenFWSv76UPihNacaLOu19NKeeqTfR1ZtYkrdXa6tunosxiiToVrY4xHRtKFW2JT/ntxJTj9ykCwwRAghfEYVv2VJ+ohgNyk+lQ8U+fRRtViu5Pbe9XAhSs1Bm+adnaqS+OTELKOAAeDfRuVeQKa7YRK/1m+FqyolQQ6tCe58Hb0LtmOjzuYQOuRrjP3tc/ADLlKiZCox6fZhj2jzUdxO5AlujwvieF7NJYvq0z6N6M=z/7IfeDLQ/zrEff1 HTTP/1.1
Host: imgs.hcaptcha.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://newassets.hcaptcha.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Tue, 30 May 2023 15:04:36 GMT
content-type: image/jpeg
content-length: 2977
cf-ray: 7cf7dedebaedb527-OSL
cf-cache-status: HIT
accept-ranges: bytes
access-control-allow-origin: *
age: 190
cache-control: max-age=86400,s-maxage=86400
etag: "f31f55859f7ba24912a3c4bd65934914"
last-modified: Tue, 30 May 2023 14:57:23 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
via: 1.1 1fb0b89a5ccfb45255b8e8539e256ee2.cloudfront.net (CloudFront)
cross-origin-resource-policy: cross-origin
x-amz-cf-id: YaXQhMonMjXfkONbZ5CFWxE3tFom_WoSipBw5rB7XhLjqeKEDsnYhg==
x-amz-cf-pop: ARN56-P1
x-amz-expiration: expiry-date="Mon, 27 Nov 2023 00:00:00 GMT", rule-id="Expire after 180 days"
x-amz-server-side-encryption: AES256
x-amz-version-id: nJDfjq.yA7YXoy__CJ3zIIOdzK_YGvt4
x-cache: Miss from cloudfront
x-content-type-options: nosniff
vary: Accept-Encoding
server: cloudflare
alt-svc: h3=":443"; ma=86400

imgs.hcaptcha.com//QFRjEW7m/Uk6TNX/BGEsH9YfprcF235YPKcIk7mAN3bb9g5W655OUnNG4g0XITAx77wlBVE742CrKqWrEJINbvh2D/YaDuHMC/CFVgKhwrrH4ADkJw+zFGMLJDUx+MdZKVF56z45Masm4tZH69zLG2/kBfG/aRP/fJ+BRbEcrxgGEyT7xioLQHzw1kNc1T8wDydTUNvHHdW4+/pIf4sFPZ9HuemB3aeDZcQr8swJHhcnnSn6Rc4gljz7JnSp8r9dAdu

104.16.168.131

200 OK

3.1 kB

URL GET HTTP/3
imgs.hcaptcha.com//QFRjEW7m/Uk6TNX/BGEsH9YfprcF235YPKcIk7mAN3bb9g5W655OUnNG4g0XITAx77wlBVE742CrKqWrEJINbvh2D/YaDuHMC/CFVgKhwrrH4ADkJw+zFGMLJDUx+MdZKVF56z45Masm4tZH69zLG2/kBfG/aRP/fJ+BRbEcrxgGEyT7xioLQHzw1kNc1T8wDydTUNvHHdW4+/pIf4sFPZ9HuemB3aeDZcQr8swJHhcnnSn6Rc4gljz7JnSp8r9dAdu
IP
104.16.168.131:443
ASN
#13335 CLOUDFLARENET

Requested by
https://newassets.hcaptcha.com/captcha/v1/30d2bc2/static/hcaptcha.html#frame=challenge&id=0oi03o16bldm&host=bibtu.com&sentry=true&reportapi=https%3A%2F%2Faccounts.hcaptcha.com&recaptchacompat=true&custom=false&hl=en&tplinks=on&sitekey=c2adcb87-2c2c-408a-8990-d25035251688&theme=light&origin=https%3A%2F%2Fbibtu.com
Certificate
IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintD9:E8:78:82:B2:9B:0F:1B:5F:0B:B7:EF:93:24:6D:07:2D:83:BA:24
ValiditySat, 15 Apr 2023 00:00:00 GMT - Sun, 14 Apr 2024 23:59:59 GMT

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 128x128, components 3\012- data
Size
3.1 kB (3134 bytes)
Hash
16041f7ab9c52d2254ae735bfe1ac344
7ffb07e40248bb77e4a62fcef3239631a2ee4ad4
29a60a61a0a25a87954be7f71c0dc47a09a37b6c4762e1f6b601e6d0819c43a9

HTTP Headers

GET //QFRjEW7m/Uk6TNX/BGEsH9YfprcF235YPKcIk7mAN3bb9g5W655OUnNG4g0XITAx77wlBVE742CrKqWrEJINbvh2D/YaDuHMC/CFVgKhwrrH4ADkJw+zFGMLJDUx+MdZKVF56z45Masm4tZH69zLG2/kBfG/aRP/fJ+BRbEcrxgGEyT7xioLQHzw1kNc1T8wDydTUNvHHdW4+/pIf4sFPZ9HuemB3aeDZcQr8swJHhcnnSn6Rc4gljz7JnSp8r9dAdu HTTP/1.1
Host: imgs.hcaptcha.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://newassets.hcaptcha.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Tue, 30 May 2023 15:04:36 GMT
content-type: image/jpeg
content-length: 3134
cf-ray: 7cf7dedebaf5b527-OSL
cf-cache-status: HIT
accept-ranges: bytes
access-control-allow-origin: *
age: 207
cache-control: max-age=86400,s-maxage=86400
etag: "16041f7ab9c52d2254ae735bfe1ac344"
last-modified: Tue, 30 May 2023 14:57:52 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
via: 1.1 ade5112c66aed0b9382e1d5c2fd9bde4.cloudfront.net (CloudFront)
cross-origin-resource-policy: cross-origin
x-amz-cf-id: 95lMgbBLFcf6ZqlWJgDoafEgr4sNVRbCftSlLUkkfHdY9osMwl1rGA==
x-amz-cf-pop: HEL50-C1
x-amz-expiration: expiry-date="Mon, 27 Nov 2023 00:00:00 GMT", rule-id="Expire after 180 days"
x-amz-server-side-encryption: AES256
x-amz-version-id: G49vU3aDiuWAtDe4JeYtYbaGACUwMf.Q
x-cache: Hit from cloudfront
x-content-type-options: nosniff
vary: Accept-Encoding
server: cloudflare
alt-svc: h3=":443"; ma=86400

imgs.hcaptcha.com/wWhmNr2Ek2uWu656rRS96BSVYPGySr6WDvfi2rJwpj19+ey70bM5Gzo4sW0cgfqoTjcw8G8w3voBpQIwOSCVGvEVLPbmla2MAi3OgVsdmvO44yOgijoU3IGcmI6MF9keLjqd9yW7JJCbpt+otRnoYI6wAvrakGgxw5/kCKURVPn3O/uQwppSbb52AEfF0pTCVrrZ9vNqA5kLPkrA9jZCdmk7jJB5rFxxYob+RrdHkd/zq7UIX9cJjyA=7AMU1KZgcXlF43tr

104.16.168.131

200 OK

3.5 kB

URL GET HTTP/3
imgs.hcaptcha.com/wWhmNr2Ek2uWu656rRS96BSVYPGySr6WDvfi2rJwpj19+ey70bM5Gzo4sW0cgfqoTjcw8G8w3voBpQIwOSCVGvEVLPbmla2MAi3OgVsdmvO44yOgijoU3IGcmI6MF9keLjqd9yW7JJCbpt+otRnoYI6wAvrakGgxw5/kCKURVPn3O/uQwppSbb52AEfF0pTCVrrZ9vNqA5kLPkrA9jZCdmk7jJB5rFxxYob+RrdHkd/zq7UIX9cJjyA=7AMU1KZgcXlF43tr
IP
104.16.168.131:443
ASN
#13335 CLOUDFLARENET

Requested by
https://newassets.hcaptcha.com/captcha/v1/30d2bc2/static/hcaptcha.html#frame=challenge&id=0oi03o16bldm&host=bibtu.com&sentry=true&reportapi=https%3A%2F%2Faccounts.hcaptcha.com&recaptchacompat=true&custom=false&hl=en&tplinks=on&sitekey=c2adcb87-2c2c-408a-8990-d25035251688&theme=light&origin=https%3A%2F%2Fbibtu.com
Certificate
IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintD9:E8:78:82:B2:9B:0F:1B:5F:0B:B7:EF:93:24:6D:07:2D:83:BA:24
ValiditySat, 15 Apr 2023 00:00:00 GMT - Sun, 14 Apr 2024 23:59:59 GMT

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 128x128, components 3\012- data
Size
3.5 kB (3507 bytes)
Hash
93ba37536b3b202c24e2902d463475af
0fcf23d37ded40b9bd7e6b93d3bad57b1372e5be
7e8d6c396da82011a949a7fd3d3c6518295b97ff4932e916357521c3aab2e5e8

HTTP Headers

GET /wWhmNr2Ek2uWu656rRS96BSVYPGySr6WDvfi2rJwpj19+ey70bM5Gzo4sW0cgfqoTjcw8G8w3voBpQIwOSCVGvEVLPbmla2MAi3OgVsdmvO44yOgijoU3IGcmI6MF9keLjqd9yW7JJCbpt+otRnoYI6wAvrakGgxw5/kCKURVPn3O/uQwppSbb52AEfF0pTCVrrZ9vNqA5kLPkrA9jZCdmk7jJB5rFxxYob+RrdHkd/zq7UIX9cJjyA=7AMU1KZgcXlF43tr HTTP/1.1
Host: imgs.hcaptcha.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://newassets.hcaptcha.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Tue, 30 May 2023 15:04:36 GMT
content-type: image/jpeg
content-length: 3507
cf-ray: 7cf7dedebae9b527-OSL
cf-cache-status: HIT
accept-ranges: bytes
access-control-allow-origin: *
age: 209
cache-control: max-age=86400,s-maxage=86400
etag: "93ba37536b3b202c24e2902d463475af"
last-modified: Tue, 30 May 2023 14:57:35 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
via: 1.1 d7969a7dfe0a063d186d3c72531d67be.cloudfront.net (CloudFront)
cross-origin-resource-policy: cross-origin
x-amz-cf-id: vyYjlnTRtphLrHk2KccwxONFglQx1JqugWKMy2hoTy_CIqU5ps3VgQ==
x-amz-cf-pop: ARN56-P1
x-amz-expiration: expiry-date="Mon, 27 Nov 2023 00:00:00 GMT", rule-id="Expire after 180 days"
x-amz-server-side-encryption: AES256
x-amz-version-id: Rsk5AbIitlxUFe.8JfZl98NgIBSIOEzK
x-cache: Hit from cloudfront
x-content-type-options: nosniff
vary: Accept-Encoding
server: cloudflare
alt-svc: h3=":443"; ma=86400

imgs.hcaptcha.com/O+1nIqTSSyJpy8yYCx9FBiMd+TM6m9MrQa/lt4jV6VR8AkiY0puVZ1ig7UxdKlwhM4RPqwcfTkKuPFhH5WDAtmpX+5boXsLLDHR4CjxQ+xg75hkq7rnLygJse7RcJW5lisFwwQVGhS9xW9XJhpcozMHP1NvN0YrZfDxUD2xxgk6HMT4SF47x5WArCsq2AcDxSycb6V/zQqFLbr25oLUk+NyM9YY/Bzda90TREFXAn/K+Quf6Zg==OY1yUZX/Es1kK9Vi

104.16.168.131

200 OK

3.4 kB

URL GET HTTP/3
imgs.hcaptcha.com/O+1nIqTSSyJpy8yYCx9FBiMd+TM6m9MrQa/lt4jV6VR8AkiY0puVZ1ig7UxdKlwhM4RPqwcfTkKuPFhH5WDAtmpX+5boXsLLDHR4CjxQ+xg75hkq7rnLygJse7RcJW5lisFwwQVGhS9xW9XJhpcozMHP1NvN0YrZfDxUD2xxgk6HMT4SF47x5WArCsq2AcDxSycb6V/zQqFLbr25oLUk+NyM9YY/Bzda90TREFXAn/K+Quf6Zg==OY1yUZX/Es1kK9Vi
IP
104.16.168.131:443
ASN
#13335 CLOUDFLARENET

Requested by
https://newassets.hcaptcha.com/captcha/v1/30d2bc2/static/hcaptcha.html#frame=challenge&id=0oi03o16bldm&host=bibtu.com&sentry=true&reportapi=https%3A%2F%2Faccounts.hcaptcha.com&recaptchacompat=true&custom=false&hl=en&tplinks=on&sitekey=c2adcb87-2c2c-408a-8990-d25035251688&theme=light&origin=https%3A%2F%2Fbibtu.com
Certificate
IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintD9:E8:78:82:B2:9B:0F:1B:5F:0B:B7:EF:93:24:6D:07:2D:83:BA:24
ValiditySat, 15 Apr 2023 00:00:00 GMT - Sun, 14 Apr 2024 23:59:59 GMT

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 128x128, components 3\012- data
Size
3.4 kB (3434 bytes)
Hash
f1c385752de7bb2c814ce29c2304787f
2e4d525f1f157ee40162c2b14936f3a27bed2e5b
8e4fd6fec4b0218b5d8f2687b246f7a1cf29e7b5952d334cc4f0baa096c70323

HTTP Headers

GET /O+1nIqTSSyJpy8yYCx9FBiMd+TM6m9MrQa/lt4jV6VR8AkiY0puVZ1ig7UxdKlwhM4RPqwcfTkKuPFhH5WDAtmpX+5boXsLLDHR4CjxQ+xg75hkq7rnLygJse7RcJW5lisFwwQVGhS9xW9XJhpcozMHP1NvN0YrZfDxUD2xxgk6HMT4SF47x5WArCsq2AcDxSycb6V/zQqFLbr25oLUk+NyM9YY/Bzda90TREFXAn/K+Quf6Zg==OY1yUZX/Es1kK9Vi HTTP/1.1
Host: imgs.hcaptcha.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://newassets.hcaptcha.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Tue, 30 May 2023 15:04:36 GMT
content-type: image/jpeg
content-length: 3434
cf-ray: 7cf7dedebaf4b527-OSL
cf-cache-status: HIT
accept-ranges: bytes
access-control-allow-origin: *
age: 129
cache-control: max-age=86400,s-maxage=86400
etag: "f1c385752de7bb2c814ce29c2304787f"
last-modified: Tue, 30 May 2023 14:58:42 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
via: 1.1 7ddb2b9bba2e00f11b5de58d7aa1249c.cloudfront.net (CloudFront)
cross-origin-resource-policy: cross-origin
x-amz-cf-id: fhhi18cYwkQjKlOz0P5VpRavwL57VxDl583qoE_qP5ZOtRPxw3kMqg==
x-amz-cf-pop: HEL50-C1
x-amz-expiration: expiry-date="Mon, 27 Nov 2023 00:00:00 GMT", rule-id="Expire after 180 days"
x-amz-server-side-encryption: AES256
x-amz-version-id: r0Hf6rXGykR_KE33QPnooqpsW1Ta7HY0
x-cache: Hit from cloudfront
x-content-type-options: nosniff
vary: Accept-Encoding
server: cloudflare
alt-svc: h3=":443"; ma=86400

imgs.hcaptcha.com/tem7lZAskrMtLL6Tg/NfTVvb747quAlnXhT3dJxC/pigu97WiPUiQkszHg6EAwOMblSTlnXyQTdeYEMl0zC3sIg6vLgUrSzsYdn1AsozdkjiFhsFSuOdbACE7ssFZsgDKUcuamXf950FNAdR/uAIzpWGBEfZtRD8bFI8BEMehuZb8nF715jZiI0aiLMM1fHTbsy+0hL56Jw6hktcmT4vOA04zlc5iq5zEs76qU6r+jElB5m5SJl5RL8=Rb2bAonTnnvP7ijQ

104.16.168.131

200 OK

3.5 kB

URL GET HTTP/3
imgs.hcaptcha.com/tem7lZAskrMtLL6Tg/NfTVvb747quAlnXhT3dJxC/pigu97WiPUiQkszHg6EAwOMblSTlnXyQTdeYEMl0zC3sIg6vLgUrSzsYdn1AsozdkjiFhsFSuOdbACE7ssFZsgDKUcuamXf950FNAdR/uAIzpWGBEfZtRD8bFI8BEMehuZb8nF715jZiI0aiLMM1fHTbsy+0hL56Jw6hktcmT4vOA04zlc5iq5zEs76qU6r+jElB5m5SJl5RL8=Rb2bAonTnnvP7ijQ
IP
104.16.168.131:443
ASN
#13335 CLOUDFLARENET

Requested by
https://newassets.hcaptcha.com/captcha/v1/30d2bc2/static/hcaptcha.html#frame=challenge&id=0oi03o16bldm&host=bibtu.com&sentry=true&reportapi=https%3A%2F%2Faccounts.hcaptcha.com&recaptchacompat=true&custom=false&hl=en&tplinks=on&sitekey=c2adcb87-2c2c-408a-8990-d25035251688&theme=light&origin=https%3A%2F%2Fbibtu.com
Certificate
IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintD9:E8:78:82:B2:9B:0F:1B:5F:0B:B7:EF:93:24:6D:07:2D:83:BA:24
ValiditySat, 15 Apr 2023 00:00:00 GMT - Sun, 14 Apr 2024 23:59:59 GMT

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 128x128, components 3\012- data
Size
3.5 kB (3541 bytes)
Hash
8d5922f48cae55f711952ffb030ce93a
1d911bd894852b65469c02cdc3de6b9465299576
356936a07cc0a02002fb43673fbcf196dc74dd9f76549a46a77bacb66ce4c59d

HTTP Headers

GET /tem7lZAskrMtLL6Tg/NfTVvb747quAlnXhT3dJxC/pigu97WiPUiQkszHg6EAwOMblSTlnXyQTdeYEMl0zC3sIg6vLgUrSzsYdn1AsozdkjiFhsFSuOdbACE7ssFZsgDKUcuamXf950FNAdR/uAIzpWGBEfZtRD8bFI8BEMehuZb8nF715jZiI0aiLMM1fHTbsy+0hL56Jw6hktcmT4vOA04zlc5iq5zEs76qU6r+jElB5m5SJl5RL8=Rb2bAonTnnvP7ijQ HTTP/1.1
Host: imgs.hcaptcha.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://newassets.hcaptcha.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Tue, 30 May 2023 15:04:36 GMT
content-type: image/jpeg
content-length: 3541
cf-ray: 7cf7dedebaefb527-OSL
cf-cache-status: HIT
accept-ranges: bytes
access-control-allow-origin: *
age: 111
cache-control: max-age=86400,s-maxage=86400
etag: "8d5922f48cae55f711952ffb030ce93a"
last-modified: Tue, 30 May 2023 14:57:47 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
via: 1.1 94251f2595ef5679fba3c952e8743886.cloudfront.net (CloudFront)
cross-origin-resource-policy: cross-origin
x-amz-cf-id: EaWu0i81DHgPdvdXN1sfJxz4BJLcDYHJ-VNbxa19-EpGu1j6Sv94Og==
x-amz-cf-pop: ARN56-P1
x-amz-expiration: expiry-date="Mon, 27 Nov 2023 00:00:00 GMT", rule-id="Expire after 180 days"
x-amz-server-side-encryption: AES256
x-amz-version-id: .9gEwyHA67GuKuAb8UV3rxhh.rfFhKRP
x-cache: Hit from cloudfront
x-content-type-options: nosniff
vary: Accept-Encoding
server: cloudflare
alt-svc: h3=":443"; ma=86400

newassets.hcaptcha.com/c/0d2aecf/hsw.js

104.16.168.131

200 OK

186 kB

URL GET HTTP/3
newassets.hcaptcha.com/c/0d2aecf/hsw.js
IP
104.16.168.131:443
ASN
#13335 CLOUDFLARENET

Requested by
https://newassets.hcaptcha.com/captcha/v1/30d2bc2/static/hcaptcha.html#frame=challenge&id=0oi03o16bldm&host=bibtu.com&sentry=true&reportapi=https%3A%2F%2Faccounts.hcaptcha.com&recaptchacompat=true&custom=false&hl=en&tplinks=on&sitekey=c2adcb87-2c2c-408a-8990-d25035251688&theme=light&origin=https%3A%2F%2Fbibtu.com
Certificate
IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintD9:E8:78:82:B2:9B:0F:1B:5F:0B:B7:EF:93:24:6D:07:2D:83:BA:24
ValiditySat, 15 Apr 2023 00:00:00 GMT - Sun, 14 Apr 2024 23:59:59 GMT

File type
ASCII text, with very long lines (65536), with no line terminators
Size
186 kB (185998 bytes)
Hash
27081fb320c1f7d7b2af58b9dd40ea16
28f5eba6023cd8819b5ec2a6c6dd394498114082
b7c3c885c8ccdb372b310bdc5784e773a1e3ca530202ea9fb2877102e4d36ec1

HTTP Headers

GET /c/0d2aecf/hsw.js HTTP/1.1
Host: newassets.hcaptcha.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://newassets.hcaptcha.com/captcha/v1/30d2bc2/static/hcaptcha.html
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Tue, 30 May 2023 15:04:35 GMT
content-type: application/javascript
cf-ray: 7cf7ded8ca36b527-OSL
cf-cache-status: HIT
access-control-allow-origin: *
age: 5839
cache-control: max-age=3024000
etag: W/"27081fb320c1f7d7b2af58b9dd40ea16"
last-modified: Mon, 22 May 2023 09:06:39 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
via: 1.1 8c6057fa6de6f566cdf8dbf994c18e80.cloudfront.net (CloudFront)
cross-origin-resource-policy: cross-origin
x-amz-cf-id: eoI0CPTENtE0V6GUcur3-E9qwyd0SiGdNDFwqQMBSUJqw7VtFfvs5g==
x-amz-cf-pop: HEL51-P1
x-amz-server-side-encryption: AES256
x-amz-version-id: 4FMKIW.qhGqOQEE7HYvBFrGpKia.745s
x-cache: Miss from cloudfront
x-content-type-options: nosniff
vary: Accept-Encoding
server: cloudflare
content-encoding: br
alt-svc: h3=":443"; ma=86400

imgs.hcaptcha.com/LjHSkoMN5Uxrz22rXalOMdf3C11vYKlwLBtGmv08YG0VD/MHoOWHWMJJ7BN1WG/qkAwZxF7RdlSkwc4OVW7Xqf9GBt6CuIBmQtRqmuvxcgBwOe0q7D/JNEEuj7p0SOpjf1Ldv02WkJQ/SI32V3mIu34bYVr7lx17jaA0hLQ4dmkO1OOsQJwBLgmQ8cSNNYZkPT1nhuha/39r2AUeoqe+T0BagH8zdw2tEx5DQmjDkGCXh4/duV40XRGpuTzsd18Clyix

104.16.168.131

200 OK

3.0 kB

URL GET HTTP/3
imgs.hcaptcha.com/LjHSkoMN5Uxrz22rXalOMdf3C11vYKlwLBtGmv08YG0VD/MHoOWHWMJJ7BN1WG/qkAwZxF7RdlSkwc4OVW7Xqf9GBt6CuIBmQtRqmuvxcgBwOe0q7D/JNEEuj7p0SOpjf1Ldv02WkJQ/SI32V3mIu34bYVr7lx17jaA0hLQ4dmkO1OOsQJwBLgmQ8cSNNYZkPT1nhuha/39r2AUeoqe+T0BagH8zdw2tEx5DQmjDkGCXh4/duV40XRGpuTzsd18Clyix
IP
104.16.168.131:443
ASN
#13335 CLOUDFLARENET

Requested by
https://newassets.hcaptcha.com/captcha/v1/30d2bc2/static/hcaptcha.html#frame=challenge&id=0oi03o16bldm&host=bibtu.com&sentry=true&reportapi=https%3A%2F%2Faccounts.hcaptcha.com&recaptchacompat=true&custom=false&hl=en&tplinks=on&sitekey=c2adcb87-2c2c-408a-8990-d25035251688&theme=light&origin=https%3A%2F%2Fbibtu.com
Certificate
IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintD9:E8:78:82:B2:9B:0F:1B:5F:0B:B7:EF:93:24:6D:07:2D:83:BA:24
ValiditySat, 15 Apr 2023 00:00:00 GMT - Sun, 14 Apr 2024 23:59:59 GMT

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 128x128, components 3\012- data
Size
3.0 kB (3029 bytes)
Hash
7eeb5a0e56948a4f2661eda178756402
47062d3b85cb52759e0626ae51c991f90e4d61a9
5b1b0e3d0a9720498f274661d7bdb10081090d1fcf41ae1fb74f8b8162b7dc4b

HTTP Headers

GET /LjHSkoMN5Uxrz22rXalOMdf3C11vYKlwLBtGmv08YG0VD/MHoOWHWMJJ7BN1WG/qkAwZxF7RdlSkwc4OVW7Xqf9GBt6CuIBmQtRqmuvxcgBwOe0q7D/JNEEuj7p0SOpjf1Ldv02WkJQ/SI32V3mIu34bYVr7lx17jaA0hLQ4dmkO1OOsQJwBLgmQ8cSNNYZkPT1nhuha/39r2AUeoqe+T0BagH8zdw2tEx5DQmjDkGCXh4/duV40XRGpuTzsd18Clyix HTTP/1.1
Host: imgs.hcaptcha.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://newassets.hcaptcha.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Tue, 30 May 2023 15:04:36 GMT
content-type: image/jpeg
content-length: 3029
cf-ray: 7cf7dedebaebb527-OSL
cf-cache-status: HIT
accept-ranges: bytes
access-control-allow-origin: *
cache-control: max-age=86400,s-maxage=86400
etag: "7eeb5a0e56948a4f2661eda178756402"
last-modified: Tue, 30 May 2023 14:58:37 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
via: 1.1 62106b168ab54fb8472f59ef6c264a5c.cloudfront.net (CloudFront)
cross-origin-resource-policy: cross-origin
x-amz-cf-id: 9_xYqautzJa2nHwBcjDIjoM6nBf-LQNcPPbYL0mygEY4L-BB9PkFBg==
x-amz-cf-pop: CPH50-P1
x-amz-expiration: expiry-date="Mon, 27 Nov 2023 00:00:00 GMT", rule-id="Expire after 180 days"
x-amz-server-side-encryption: AES256
x-amz-version-id: 5AuahdJ7oGU4zvnUzRtchhoXGBBMT9mZ
x-cache: Hit from cloudfront
x-content-type-options: nosniff
vary: Accept-Encoding
server: cloudflare
alt-svc: h3=":443"; ma=86400

bibtu.com/eee6b53f6bef073a8aa16130cb8a7d5fSsicCXajx6zr2kdj8Q5swqCIbER7PQxg-DI

188.114.96.1

200 OK

3.5 kB

URL User Request GET HTTP/2
bibtu.com/eee6b53f6bef073a8aa16130cb8a7d5fSsicCXajx6zr2kdj8Q5swqCIbER7PQxg-DI
IP
188.114.96.1:443
ASN
#13335 CLOUDFLARENET

Certificate
IssuerGoogle Trust Services LLC
Subjectbibtu.com
Fingerprint2D:FC:BE:C5:47:5D:D5:56:FD:4F:0B:1A:4E:9A:69:13:12:6B:5C:92
ValidityThu, 11 May 2023 06:49:24 GMT - Wed, 09 Aug 2023 06:49:23 GMT

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with CRLF line terminators
Size
3.5 kB (3453 bytes)
Hash
b1bba755ccae310052d3ecb475f8c7c6
8fd18dc368e2f08a49c2c02f1c88bde4ede0d548
341d7870d7bd656fde92d6943c2077719839576eb688e913697d4e08da0ae062

Detections

Analyzer	Verdict	Alert
quad9	Sinkholed

HTTP Headers

GET /eee6b53f6bef073a8aa16130cb8a7d5fSsicCXajx6zr2kdj8Q5swqCIbER7PQxg-DI HTTP/1.1
Host: bibtu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Tue, 30 May 2023 15:04:34 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=r%2FjLC7zbOcgbdbDxeN2CU2%2BKePjyikcv%2FTSzPekfiQENGdL8w%2BoL79lQvvNK9Pi%2BZoDY3OcvBUK9ryupgQ9C%2Fl0pK0lStfGhRofSGrpz%2Bv1ctUgUHOajzzgskls%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7cf7ded18bf6b52d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

imgs.hcaptcha.com/7NQDYKSqgVj5Tguu3BXDeeHRL1dXarapvEwdkGzqx7YT0u6NM8hzp489c6DO77zPw0lFe3T60OU/vSfhDDWPGHmjZsVB51uO8LgABb0XaKHMTSHT74iuIg9s87Ajs2vbcrw4N5w1aRcS8a+i2TH5S50gB1yftY37Zirj67IDqGazUROqLkW8f1NXeMtGYUAQBCDvjPvCm/vikhnpUn91roU3xFI/QX019AL4GYIAfRN464Q=sNFcthy38yL13fK4

104.16.168.131

200 OK

3.1 kB

URL GET HTTP/3
imgs.hcaptcha.com/7NQDYKSqgVj5Tguu3BXDeeHRL1dXarapvEwdkGzqx7YT0u6NM8hzp489c6DO77zPw0lFe3T60OU/vSfhDDWPGHmjZsVB51uO8LgABb0XaKHMTSHT74iuIg9s87Ajs2vbcrw4N5w1aRcS8a+i2TH5S50gB1yftY37Zirj67IDqGazUROqLkW8f1NXeMtGYUAQBCDvjPvCm/vikhnpUn91roU3xFI/QX019AL4GYIAfRN464Q=sNFcthy38yL13fK4
IP
104.16.168.131:443
ASN
#13335 CLOUDFLARENET

Requested by
https://newassets.hcaptcha.com/captcha/v1/30d2bc2/static/hcaptcha.html#frame=challenge&id=0oi03o16bldm&host=bibtu.com&sentry=true&reportapi=https%3A%2F%2Faccounts.hcaptcha.com&recaptchacompat=true&custom=false&hl=en&tplinks=on&sitekey=c2adcb87-2c2c-408a-8990-d25035251688&theme=light&origin=https%3A%2F%2Fbibtu.com
Certificate
IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintD9:E8:78:82:B2:9B:0F:1B:5F:0B:B7:EF:93:24:6D:07:2D:83:BA:24
ValiditySat, 15 Apr 2023 00:00:00 GMT - Sun, 14 Apr 2024 23:59:59 GMT

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 128x128, components 3\012- data
Size
3.1 kB (3141 bytes)
Hash
bbb9724ca04b41a6f3bc403481a012a4
8650d1de69fd055be2ef40ef08a2203d0719ea23
c7d9e91614ea83516c227fd11c426ed1895f0ba1292b97fe03bbb3733e6da633

HTTP Headers

GET /7NQDYKSqgVj5Tguu3BXDeeHRL1dXarapvEwdkGzqx7YT0u6NM8hzp489c6DO77zPw0lFe3T60OU/vSfhDDWPGHmjZsVB51uO8LgABb0XaKHMTSHT74iuIg9s87Ajs2vbcrw4N5w1aRcS8a+i2TH5S50gB1yftY37Zirj67IDqGazUROqLkW8f1NXeMtGYUAQBCDvjPvCm/vikhnpUn91roU3xFI/QX019AL4GYIAfRN464Q=sNFcthy38yL13fK4 HTTP/1.1
Host: imgs.hcaptcha.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://newassets.hcaptcha.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Tue, 30 May 2023 15:04:36 GMT
content-type: image/jpeg
content-length: 3141
cf-ray: 7cf7dededb1bb527-OSL
cf-cache-status: HIT
accept-ranges: bytes
access-control-allow-origin: *
age: 195
cache-control: max-age=86400,s-maxage=86400
etag: "bbb9724ca04b41a6f3bc403481a012a4"
last-modified: Tue, 30 May 2023 14:57:50 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
via: 1.1 1df45692f7304ec32e8154a5de939176.cloudfront.net (CloudFront)
cross-origin-resource-policy: cross-origin
x-amz-cf-id: yEwv5UhACrdMC9KnFEMrCNgk7WDzGjQh6TqKRr56_C-IkDI6--1p9g==
x-amz-cf-pop: CPH50-P1
x-amz-expiration: expiry-date="Mon, 27 Nov 2023 00:00:00 GMT", rule-id="Expire after 180 days"
x-amz-server-side-encryption: AES256
x-amz-version-id: 4QX2jNNIyQ_PnsKLLwWpjfQBvJO9obb6
x-cache: Hit from cloudfront
x-content-type-options: nosniff
vary: Accept-Encoding
server: cloudflare
alt-svc: h3=":443"; ma=86400

imgs.hcaptcha.com/nMG6xwixJmfHjoxWrY+E/Sy9eIg/dZv52CCf/qZcLNC8QSAK/qFT3RXv8SKCyYDnreXfI+5YNHKPxJIjxi0j9RxR+3qF+cM8nI/XYZBOor5hvAWaXJE4d639b8EbGIOg8lDs/VJf78JhTyzDMdHar+HPmhKeffCihTxh8UKDUMOlXzJC7KBJk8tZdvxaDw==7qXfe+PD59p99DK9

104.16.168.131

200 OK

2.5 kB

URL GET HTTP/3
imgs.hcaptcha.com/nMG6xwixJmfHjoxWrY+E/Sy9eIg/dZv52CCf/qZcLNC8QSAK/qFT3RXv8SKCyYDnreXfI+5YNHKPxJIjxi0j9RxR+3qF+cM8nI/XYZBOor5hvAWaXJE4d639b8EbGIOg8lDs/VJf78JhTyzDMdHar+HPmhKeffCihTxh8UKDUMOlXzJC7KBJk8tZdvxaDw==7qXfe+PD59p99DK9
IP
104.16.168.131:443
ASN
#13335 CLOUDFLARENET

Requested by
https://newassets.hcaptcha.com/captcha/v1/30d2bc2/static/hcaptcha.html#frame=challenge&id=0oi03o16bldm&host=bibtu.com&sentry=true&reportapi=https%3A%2F%2Faccounts.hcaptcha.com&recaptchacompat=true&custom=false&hl=en&tplinks=on&sitekey=c2adcb87-2c2c-408a-8990-d25035251688&theme=light&origin=https%3A%2F%2Fbibtu.com
Certificate
IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintD9:E8:78:82:B2:9B:0F:1B:5F:0B:B7:EF:93:24:6D:07:2D:83:BA:24
ValiditySat, 15 Apr 2023 00:00:00 GMT - Sun, 14 Apr 2024 23:59:59 GMT

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 128x128, components 3\012- data
Size
2.5 kB (2457 bytes)
Hash
934caa65075d0604887abbf29a71bc85
58fe556315e4b4c4e555d567ffde1a3b753c88d7
ae79a6de40d119ceafb5dca09b82bf77892b39e5267f1d284a84dbc923ec782d

HTTP Headers

GET /nMG6xwixJmfHjoxWrY+E/Sy9eIg/dZv52CCf/qZcLNC8QSAK/qFT3RXv8SKCyYDnreXfI+5YNHKPxJIjxi0j9RxR+3qF+cM8nI/XYZBOor5hvAWaXJE4d639b8EbGIOg8lDs/VJf78JhTyzDMdHar+HPmhKeffCihTxh8UKDUMOlXzJC7KBJk8tZdvxaDw==7qXfe+PD59p99DK9 HTTP/1.1
Host: imgs.hcaptcha.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://newassets.hcaptcha.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Tue, 30 May 2023 15:04:36 GMT
content-type: image/jpeg
content-length: 2457
cf-ray: 7cf7dedefb66b527-OSL
cf-cache-status: HIT
accept-ranges: bytes
access-control-allow-origin: *
age: 74
cache-control: max-age=86400,s-maxage=86400
etag: "934caa65075d0604887abbf29a71bc85"
last-modified: Wed, 24 May 2023 08:35:59 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
via: 1.1 95ad0c949c0fe7e97075c6690b8574aa.cloudfront.net (CloudFront)
alt-svc: h3=":443"; ma=86400
cross-origin-resource-policy: cross-origin
x-amz-cf-id: v5SymU4ojav-E0icbEH_9Mnse7X0l2c68R1TiMchj38jwkpx_VJxhA==
x-amz-cf-pop: HEL51-P1
x-amz-server-side-encryption: AES256
x-amz-version-id: .A4MrPJnohy3yxO41rhxBDl4BooMUk3v
x-cache: Hit from cloudfront
x-content-type-options: nosniff
vary: Accept-Encoding
server: cloudflare

imgs.hcaptcha.com/4ml2330gAAoc0gNOAaYLc5oNYUHGNfFA+iBC57fhxjhKISMXrnM6XFkS40dQa3Pc84lu4rSqwex1bMCkWdoYBVtiUxVG2RVDcaW1rtg3ix+bB8jujrnQ3OIuwKy0drupaMEnyAf+U2RuTgmWRlLPzJuQNVr2JRUZ03rY7wcuSpdf7u9e8g1+04UGtD5FAA==nPsOw/MDm2QJj3xm

104.16.168.131

200 OK

2.6 kB

URL GET HTTP/3
imgs.hcaptcha.com/4ml2330gAAoc0gNOAaYLc5oNYUHGNfFA+iBC57fhxjhKISMXrnM6XFkS40dQa3Pc84lu4rSqwex1bMCkWdoYBVtiUxVG2RVDcaW1rtg3ix+bB8jujrnQ3OIuwKy0drupaMEnyAf+U2RuTgmWRlLPzJuQNVr2JRUZ03rY7wcuSpdf7u9e8g1+04UGtD5FAA==nPsOw/MDm2QJj3xm
IP
104.16.168.131:443
ASN
#13335 CLOUDFLARENET

Requested by
https://newassets.hcaptcha.com/captcha/v1/30d2bc2/static/hcaptcha.html#frame=challenge&id=0oi03o16bldm&host=bibtu.com&sentry=true&reportapi=https%3A%2F%2Faccounts.hcaptcha.com&recaptchacompat=true&custom=false&hl=en&tplinks=on&sitekey=c2adcb87-2c2c-408a-8990-d25035251688&theme=light&origin=https%3A%2F%2Fbibtu.com
Certificate
IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintD9:E8:78:82:B2:9B:0F:1B:5F:0B:B7:EF:93:24:6D:07:2D:83:BA:24
ValiditySat, 15 Apr 2023 00:00:00 GMT - Sun, 14 Apr 2024 23:59:59 GMT

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 128x128, components 3\012- data
Size
2.6 kB (2642 bytes)
Hash
993e32819d7ba22afa11f1ef54284743
b2a8680ab8128df17e723af312883c4c2ce7bc34
1d6d265b9dcd6bd732dc9bdc5d285c4614002b229ad1c3a88a79bbc202426861

HTTP Headers

GET /4ml2330gAAoc0gNOAaYLc5oNYUHGNfFA+iBC57fhxjhKISMXrnM6XFkS40dQa3Pc84lu4rSqwex1bMCkWdoYBVtiUxVG2RVDcaW1rtg3ix+bB8jujrnQ3OIuwKy0drupaMEnyAf+U2RuTgmWRlLPzJuQNVr2JRUZ03rY7wcuSpdf7u9e8g1+04UGtD5FAA==nPsOw/MDm2QJj3xm HTTP/1.1
Host: imgs.hcaptcha.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://newassets.hcaptcha.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Tue, 30 May 2023 15:04:36 GMT
content-type: image/jpeg
content-length: 2642
cf-ray: 7cf7dedefb64b527-OSL
cf-cache-status: HIT
accept-ranges: bytes
access-control-allow-origin: *
age: 74
cache-control: max-age=86400,s-maxage=86400
etag: "993e32819d7ba22afa11f1ef54284743"
last-modified: Wed, 24 May 2023 08:38:26 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
via: 1.1 d8b0b3928e53502c6ce822abc3cc3d70.cloudfront.net (CloudFront)
alt-svc: h3=":443"; ma=86400
cross-origin-resource-policy: cross-origin
x-amz-cf-id: WPJJMi0pYOTEFo-hCNeMFI0Z7oHfMJhCdCoMviwMxtH5NrIUJbDbOA==
x-amz-cf-pop: HEL51-P1
x-amz-server-side-encryption: AES256
x-amz-version-id: fkVhsUfP5dVWzHONo9WtE4dv94y2ouyt
x-cache: Hit from cloudfront
x-content-type-options: nosniff
vary: Accept-Encoding
server: cloudflare

imgs.hcaptcha.com/KCryagzdiUvmQ03rqpZ1eajyftFludgy0KmDZ4Dm7QJYRbwls5ZNNNJRSaWuxXdvK4TVdqb/s1NmVQTkgz3VJ+X5FaAYrKcXpaW6mi9rvRmpsNFbLAdgOnvD6Swa5uyDaDGPv8+5tv9IbZi16AEMEpfPZGVEBn13p6nLJSG60SkWHTht3Kc6pMFJsaBJLw==gWugef16oQrNVKRC

104.16.168.131

200 OK

3.4 kB

URL GET HTTP/3
imgs.hcaptcha.com/KCryagzdiUvmQ03rqpZ1eajyftFludgy0KmDZ4Dm7QJYRbwls5ZNNNJRSaWuxXdvK4TVdqb/s1NmVQTkgz3VJ+X5FaAYrKcXpaW6mi9rvRmpsNFbLAdgOnvD6Swa5uyDaDGPv8+5tv9IbZi16AEMEpfPZGVEBn13p6nLJSG60SkWHTht3Kc6pMFJsaBJLw==gWugef16oQrNVKRC
IP
104.16.168.131:443
ASN
#13335 CLOUDFLARENET

Requested by
https://newassets.hcaptcha.com/captcha/v1/30d2bc2/static/hcaptcha.html#frame=challenge&id=0oi03o16bldm&host=bibtu.com&sentry=true&reportapi=https%3A%2F%2Faccounts.hcaptcha.com&recaptchacompat=true&custom=false&hl=en&tplinks=on&sitekey=c2adcb87-2c2c-408a-8990-d25035251688&theme=light&origin=https%3A%2F%2Fbibtu.com
Certificate
IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintD9:E8:78:82:B2:9B:0F:1B:5F:0B:B7:EF:93:24:6D:07:2D:83:BA:24
ValiditySat, 15 Apr 2023 00:00:00 GMT - Sun, 14 Apr 2024 23:59:59 GMT

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 128x128, components 3\012- data
Size
3.4 kB (3428 bytes)
Hash
3946a388197433b0afcbc4c8e3f07774
f90b7db5ecd99fd6c13d83f652a6a083e573e9dd
11f527b6a6a34a3ea512203d4937808752ebd3b90e94a99e946c5cdc71ccb948

HTTP Headers

GET /KCryagzdiUvmQ03rqpZ1eajyftFludgy0KmDZ4Dm7QJYRbwls5ZNNNJRSaWuxXdvK4TVdqb/s1NmVQTkgz3VJ+X5FaAYrKcXpaW6mi9rvRmpsNFbLAdgOnvD6Swa5uyDaDGPv8+5tv9IbZi16AEMEpfPZGVEBn13p6nLJSG60SkWHTht3Kc6pMFJsaBJLw==gWugef16oQrNVKRC HTTP/1.1
Host: imgs.hcaptcha.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://newassets.hcaptcha.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Tue, 30 May 2023 15:04:36 GMT
content-type: image/jpeg
content-length: 3428
cf-ray: 7cf7dedefb65b527-OSL
cf-cache-status: HIT
accept-ranges: bytes
access-control-allow-origin: *
age: 74
cache-control: max-age=86400,s-maxage=86400
etag: "3946a388197433b0afcbc4c8e3f07774"
last-modified: Wed, 24 May 2023 08:35:28 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
via: 1.1 732d3ca1627bbec3dcfe750ff23e18bc.cloudfront.net (CloudFront)
alt-svc: h3=":443"; ma=86400
cross-origin-resource-policy: cross-origin
x-amz-cf-id: 3sYPniIXrvXIW1jVSRhmUDDNXKjT2aAOQMcrp6hycwmrE7vusg0Z_Q==
x-amz-cf-pop: HEL51-P1
x-amz-server-side-encryption: AES256
x-amz-version-id: 7Jz_zKqZYvmK0PgZtY40JVb6hOTCbfon
x-cache: Hit from cloudfront
x-content-type-options: nosniff
vary: Accept-Encoding
server: cloudflare

imgs.hcaptcha.com/5J/xegrF5PQJEv7QVXr65de76p6hzD8Pt+kXBb59IQOgB20EPAYyN5jpDa9wISXGD4XqJ8KiPE3AiyM2hsPnzEZwp8SsAHtP5H0rT2ruCjOlZ+Sq1r0a3Xt6ZSJtCo2kdAGNxQt6df0heoYYb7UeWCLM4GGCvGh2gUOzFNVtDkJatIWDITLbkfsv3olmD8MYbrdTnTQyefwCjVQmRnjKh3yc2E1ikSLQBedJi6wooSMG1OMrkQ==o2L9Wp+riJhLybHC

104.16.168.131

200 OK

3.2 kB

URL GET HTTP/3
imgs.hcaptcha.com/5J/xegrF5PQJEv7QVXr65de76p6hzD8Pt+kXBb59IQOgB20EPAYyN5jpDa9wISXGD4XqJ8KiPE3AiyM2hsPnzEZwp8SsAHtP5H0rT2ruCjOlZ+Sq1r0a3Xt6ZSJtCo2kdAGNxQt6df0heoYYb7UeWCLM4GGCvGh2gUOzFNVtDkJatIWDITLbkfsv3olmD8MYbrdTnTQyefwCjVQmRnjKh3yc2E1ikSLQBedJi6wooSMG1OMrkQ==o2L9Wp+riJhLybHC
IP
104.16.168.131:443
ASN
#13335 CLOUDFLARENET

Requested by
https://newassets.hcaptcha.com/captcha/v1/30d2bc2/static/hcaptcha.html#frame=challenge&id=0oi03o16bldm&host=bibtu.com&sentry=true&reportapi=https%3A%2F%2Faccounts.hcaptcha.com&recaptchacompat=true&custom=false&hl=en&tplinks=on&sitekey=c2adcb87-2c2c-408a-8990-d25035251688&theme=light&origin=https%3A%2F%2Fbibtu.com
Certificate
IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintD9:E8:78:82:B2:9B:0F:1B:5F:0B:B7:EF:93:24:6D:07:2D:83:BA:24
ValiditySat, 15 Apr 2023 00:00:00 GMT - Sun, 14 Apr 2024 23:59:59 GMT

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 128x128, components 3\012- data
Size
3.2 kB (3239 bytes)
Hash
50dcafebb3ff67f042faced3a39e9eea
c077e9b407d5bdadb11cb34a34a5a7a204b6b0a6
64b268953b81b5d3addd12fcfd0951b27e8706e785a25cf4ea1f5d33f89b0d3b

HTTP Headers

GET /5J/xegrF5PQJEv7QVXr65de76p6hzD8Pt+kXBb59IQOgB20EPAYyN5jpDa9wISXGD4XqJ8KiPE3AiyM2hsPnzEZwp8SsAHtP5H0rT2ruCjOlZ+Sq1r0a3Xt6ZSJtCo2kdAGNxQt6df0heoYYb7UeWCLM4GGCvGh2gUOzFNVtDkJatIWDITLbkfsv3olmD8MYbrdTnTQyefwCjVQmRnjKh3yc2E1ikSLQBedJi6wooSMG1OMrkQ==o2L9Wp+riJhLybHC HTTP/1.1
Host: imgs.hcaptcha.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://newassets.hcaptcha.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Tue, 30 May 2023 15:04:36 GMT
content-type: image/jpeg
content-length: 3239
cf-ray: 7cf7dedefb5fb527-OSL
cf-cache-status: HIT
accept-ranges: bytes
access-control-allow-origin: *
age: 207
cache-control: max-age=86400,s-maxage=86400
etag: "50dcafebb3ff67f042faced3a39e9eea"
last-modified: Tue, 30 May 2023 14:58:38 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
via: 1.1 648da69bb4c2221c403be08a06311d98.cloudfront.net (CloudFront)
cross-origin-resource-policy: cross-origin
x-amz-cf-id: g6Kep7PGie9CHf2J-9fTHbZ4BwYTmtWC8gJUMPjgdJd6EKFoUvOgTA==
x-amz-cf-pop: ARN56-P1
x-amz-expiration: expiry-date="Mon, 27 Nov 2023 00:00:00 GMT", rule-id="Expire after 180 days"
x-amz-server-side-encryption: AES256
x-amz-version-id: 2bSLF9R8fnaZ_cBrdJSQB6sw3XNI_dPJ
x-cache: Hit from cloudfront
x-content-type-options: nosniff
vary: Accept-Encoding
server: cloudflare
alt-svc: h3=":443"; ma=86400

newassets.hcaptcha.com/captcha/v1/30d2bc2/hcaptcha.js

104.16.168.131

200 OK

92 kB

URL GET HTTP/3
newassets.hcaptcha.com/captcha/v1/30d2bc2/hcaptcha.js
IP
104.16.168.131:443
ASN
#13335 CLOUDFLARENET

Requested by
https://newassets.hcaptcha.com/captcha/v1/30d2bc2/static/hcaptcha.html#frame=checkbox&id=0oi03o16bldm&host=bibtu.com&sentry=true&reportapi=https%3A%2F%2Faccounts.hcaptcha.com&recaptchacompat=true&custom=false&hl=en&tplinks=on&sitekey=c2adcb87-2c2c-408a-8990-d25035251688&theme=light&origin=https%3A%2F%2Fbibtu.com
Certificate
IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintD9:E8:78:82:B2:9B:0F:1B:5F:0B:B7:EF:93:24:6D:07:2D:83:BA:24
ValiditySat, 15 Apr 2023 00:00:00 GMT - Sun, 14 Apr 2024 23:59:59 GMT

File type
Unicode text, UTF-8 text, with very long lines (41625)
Size
92 kB (92029 bytes)
Hash
26702637f099805c232e40dbc6b2c680
a59af8bad214c637a46edd89b3d8f1e5b4e8f796
de72ee524d3a176075ee33ac030a0edaf7e32becf9f1d7bca1bc6bb4e807f675

HTTP Headers

GET /captcha/v1/30d2bc2/hcaptcha.js HTTP/1.1
Host: newassets.hcaptcha.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://newassets.hcaptcha.com/captcha/v1/30d2bc2/static/hcaptcha.html
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Tue, 30 May 2023 15:04:35 GMT
content-type: application/javascript
cf-ray: 7cf7ded6ff80b527-OSL
cf-cache-status: HIT
access-control-allow-origin: *
age: 32294
cache-control: max-age=1209600
etag: W/"d19f3ab0a4d51db4bc7cc4ae6603d842"
last-modified: Wed, 24 May 2023 09:24:51 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
via: 1.1 8f67e81092ebd47bc649d954af911676.cloudfront.net (CloudFront)
cross-origin-resource-policy: cross-origin
x-amz-cf-id: NQFtMLDUEtO0NIzV6zEGazKwsKpu-XPWl4edAEc7O8jG4U0TjWZDoQ==
x-amz-cf-pop: HEL51-P1
x-amz-server-side-encryption: AES256
x-amz-version-id: _fbTW5MoLL7pD4vHjYsute3d7cLyGEJO
x-cache: Hit from cloudfront
x-content-type-options: nosniff
vary: Accept-Encoding
server: cloudflare
content-encoding: br
alt-svc: h3=":443"; ma=86400

imgs.hcaptcha.com/TPZJO9Da3/UHwNBo2ikGwnZ4s2HvOJ72T8U9gVjbCVdNcrI2GB4qo/3vWXioLanlgrbY8TFICiym2rZVE/BBlKQDVK/k3vAZEs/KDt0wFLHMzaTSKJ4UX8FBmQHuO6S295dfEbt+MSk49N9t87bb5wpNqy3ofgXr5EvDeXXtJ1xrpvLFHx75i8jyLdh9eI5Zg/9g9pfOH3vW3I1EX5hv2U4xwnP5I95IFkc33AOZ3op70gSPJA==5qiSh2kF1OJrye06

104.16.168.131

200 OK

2.8 kB

URL GET HTTP/3
imgs.hcaptcha.com/TPZJO9Da3/UHwNBo2ikGwnZ4s2HvOJ72T8U9gVjbCVdNcrI2GB4qo/3vWXioLanlgrbY8TFICiym2rZVE/BBlKQDVK/k3vAZEs/KDt0wFLHMzaTSKJ4UX8FBmQHuO6S295dfEbt+MSk49N9t87bb5wpNqy3ofgXr5EvDeXXtJ1xrpvLFHx75i8jyLdh9eI5Zg/9g9pfOH3vW3I1EX5hv2U4xwnP5I95IFkc33AOZ3op70gSPJA==5qiSh2kF1OJrye06
IP
104.16.168.131:443
ASN
#13335 CLOUDFLARENET

Requested by
https://newassets.hcaptcha.com/captcha/v1/30d2bc2/static/hcaptcha.html#frame=challenge&id=0oi03o16bldm&host=bibtu.com&sentry=true&reportapi=https%3A%2F%2Faccounts.hcaptcha.com&recaptchacompat=true&custom=false&hl=en&tplinks=on&sitekey=c2adcb87-2c2c-408a-8990-d25035251688&theme=light&origin=https%3A%2F%2Fbibtu.com
Certificate
IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintD9:E8:78:82:B2:9B:0F:1B:5F:0B:B7:EF:93:24:6D:07:2D:83:BA:24
ValiditySat, 15 Apr 2023 00:00:00 GMT - Sun, 14 Apr 2024 23:59:59 GMT

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 128x128, components 3\012- data
Size
2.8 kB (2835 bytes)
Hash
c165d11ac79bab25ab18cd63ed82af58
f14cae4924d01f2e663f5d993964e17c0e3dcf77
d3dbc96a171f67c375893e3dc39c8c10d31ac3e2b9072243680fdc89496b6b1f

HTTP Headers

GET /TPZJO9Da3/UHwNBo2ikGwnZ4s2HvOJ72T8U9gVjbCVdNcrI2GB4qo/3vWXioLanlgrbY8TFICiym2rZVE/BBlKQDVK/k3vAZEs/KDt0wFLHMzaTSKJ4UX8FBmQHuO6S295dfEbt+MSk49N9t87bb5wpNqy3ofgXr5EvDeXXtJ1xrpvLFHx75i8jyLdh9eI5Zg/9g9pfOH3vW3I1EX5hv2U4xwnP5I95IFkc33AOZ3op70gSPJA==5qiSh2kF1OJrye06 HTTP/1.1
Host: imgs.hcaptcha.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://newassets.hcaptcha.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Tue, 30 May 2023 15:04:36 GMT
content-type: image/jpeg
content-length: 2835
cf-ray: 7cf7dedefb63b527-OSL
cf-cache-status: HIT
accept-ranges: bytes
access-control-allow-origin: *
age: 90
cache-control: max-age=86400,s-maxage=86400
etag: "c165d11ac79bab25ab18cd63ed82af58"
last-modified: Tue, 30 May 2023 14:58:42 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
via: 1.1 1360936ca0d2a8ac3134ac7c537d0e76.cloudfront.net (CloudFront)
cross-origin-resource-policy: cross-origin
x-amz-cf-id: eVjGWun20ukJ4am2d5Ro-5CwIAZSfjs3uC_rt-Pu-Aig2lYSehQHZA==
x-amz-cf-pop: HEL50-C1
x-amz-expiration: expiry-date="Mon, 27 Nov 2023 00:00:00 GMT", rule-id="Expire after 180 days"
x-amz-server-side-encryption: AES256
x-amz-version-id: TVSWCPivFR9gbXBhPT87wo6OrrV5azD_
x-cache: Hit from cloudfront
x-content-type-options: nosniff
vary: Accept-Encoding
server: cloudflare
alt-svc: h3=":443"; ma=86400

imgs.hcaptcha.com/dIDnCGbMDEy8DGjcvjmpCMRcEdyttHRt8/2aEFRcjIcTBBgzMjfIRWDcg45sNHw2YhZFD227/mDFec3cMK4EEdHM4cy415W7YI9HGMLlBVQ5lnoAZ4me7JcV6rqhiyJcHyS4cqiA4tMeMUdfaAgdZvBOp4oZtYQ91uW8IHLH2vCQZ4C6RkMUTpYvX6Qk8x84P3XcnN7mN7F/yq07g6qqT06Z28P+1HmUDg5Vr4Aj3NfnT9+JIA==jERKCVm575iTK5D3

104.16.168.131

200 OK

2.9 kB

URL GET HTTP/3
imgs.hcaptcha.com/dIDnCGbMDEy8DGjcvjmpCMRcEdyttHRt8/2aEFRcjIcTBBgzMjfIRWDcg45sNHw2YhZFD227/mDFec3cMK4EEdHM4cy415W7YI9HGMLlBVQ5lnoAZ4me7JcV6rqhiyJcHyS4cqiA4tMeMUdfaAgdZvBOp4oZtYQ91uW8IHLH2vCQZ4C6RkMUTpYvX6Qk8x84P3XcnN7mN7F/yq07g6qqT06Z28P+1HmUDg5Vr4Aj3NfnT9+JIA==jERKCVm575iTK5D3
IP
104.16.168.131:443
ASN
#13335 CLOUDFLARENET

Requested by
https://newassets.hcaptcha.com/captcha/v1/30d2bc2/static/hcaptcha.html#frame=challenge&id=0oi03o16bldm&host=bibtu.com&sentry=true&reportapi=https%3A%2F%2Faccounts.hcaptcha.com&recaptchacompat=true&custom=false&hl=en&tplinks=on&sitekey=c2adcb87-2c2c-408a-8990-d25035251688&theme=light&origin=https%3A%2F%2Fbibtu.com
Certificate
IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintD9:E8:78:82:B2:9B:0F:1B:5F:0B:B7:EF:93:24:6D:07:2D:83:BA:24
ValiditySat, 15 Apr 2023 00:00:00 GMT - Sun, 14 Apr 2024 23:59:59 GMT

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 128x128, components 3\012- data
Size
2.9 kB (2933 bytes)
Hash
fc87c508c4df0551ec6b1b4e3aec5080
a5a83055dafbd8964d15081091ea8ecd988fd05f
3fe741d7d1321ae2514d9b4dd630124b5f3c3a4ca9abd5acec62b56d50d0f3c7

HTTP Headers

GET /dIDnCGbMDEy8DGjcvjmpCMRcEdyttHRt8/2aEFRcjIcTBBgzMjfIRWDcg45sNHw2YhZFD227/mDFec3cMK4EEdHM4cy415W7YI9HGMLlBVQ5lnoAZ4me7JcV6rqhiyJcHyS4cqiA4tMeMUdfaAgdZvBOp4oZtYQ91uW8IHLH2vCQZ4C6RkMUTpYvX6Qk8x84P3XcnN7mN7F/yq07g6qqT06Z28P+1HmUDg5Vr4Aj3NfnT9+JIA==jERKCVm575iTK5D3 HTTP/1.1
Host: imgs.hcaptcha.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://newassets.hcaptcha.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Tue, 30 May 2023 15:04:36 GMT
content-type: image/jpeg
content-length: 2933
cf-ray: 7cf7dedefb68b527-OSL
cf-cache-status: HIT
accept-ranges: bytes
access-control-allow-origin: *
age: 124
cache-control: max-age=86400,s-maxage=86400
etag: "fc87c508c4df0551ec6b1b4e3aec5080"
last-modified: Tue, 30 May 2023 14:57:35 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
via: 1.1 e2bc8da8a8d03748525187195f797d86.cloudfront.net (CloudFront)
cross-origin-resource-policy: cross-origin
x-amz-cf-id: GUqvmHlhshJfXee0pHc1ndokEoAUqqSdACxlCcrAwUcaejjq_TRcEQ==
x-amz-cf-pop: ARN56-P1
x-amz-expiration: expiry-date="Mon, 27 Nov 2023 00:00:00 GMT", rule-id="Expire after 180 days"
x-amz-server-side-encryption: AES256
x-amz-version-id: Dv9Xq1ApkiXwcOpR.Ehj6gHT0IN35F0r
x-cache: Hit from cloudfront
x-content-type-options: nosniff
vary: Accept-Encoding
server: cloudflare
alt-svc: h3=":443"; ma=86400

imgs.hcaptcha.com/dGgCk00N9SueBxI/svtfYwVHyBon4kYFCulBqzSGs42LS8e/RVebWe/DQWI/U7ZkHA7LThNUcOr5XzhObclPtVdWH9FoxoT01PFYj8rSCiGnCpldCdvqDL2MgEQwegUElQc6WSh0K4CmxclMC5MI9aTUIpobAUXuvGUKzGlwSLU26Col60c+329whNTLm/TyTx2YRNd3yvqxCbDcthvXhNd18AaNRr8Gvyr26dlBoxp0dHA=aYKCYKg1DvEAKOrJ

104.16.168.131

200 OK

2.9 kB

URL GET HTTP/3
imgs.hcaptcha.com/dGgCk00N9SueBxI/svtfYwVHyBon4kYFCulBqzSGs42LS8e/RVebWe/DQWI/U7ZkHA7LThNUcOr5XzhObclPtVdWH9FoxoT01PFYj8rSCiGnCpldCdvqDL2MgEQwegUElQc6WSh0K4CmxclMC5MI9aTUIpobAUXuvGUKzGlwSLU26Col60c+329whNTLm/TyTx2YRNd3yvqxCbDcthvXhNd18AaNRr8Gvyr26dlBoxp0dHA=aYKCYKg1DvEAKOrJ
IP
104.16.168.131:443
ASN
#13335 CLOUDFLARENET

Requested by
https://newassets.hcaptcha.com/captcha/v1/30d2bc2/static/hcaptcha.html#frame=challenge&id=0oi03o16bldm&host=bibtu.com&sentry=true&reportapi=https%3A%2F%2Faccounts.hcaptcha.com&recaptchacompat=true&custom=false&hl=en&tplinks=on&sitekey=c2adcb87-2c2c-408a-8990-d25035251688&theme=light&origin=https%3A%2F%2Fbibtu.com
Certificate
IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintD9:E8:78:82:B2:9B:0F:1B:5F:0B:B7:EF:93:24:6D:07:2D:83:BA:24
ValiditySat, 15 Apr 2023 00:00:00 GMT - Sun, 14 Apr 2024 23:59:59 GMT

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 128x128, components 3\012- data
Size
2.9 kB (2865 bytes)
Hash
5be3fc8bd0298b9b53bd130fb5cb16cf
9177f78853da34214152e4a3c9bb2e38a314fb36
a5650c7db8ba2872587e3a57000e0e76a6fa7e41955d59f2c011deaa00e527cc

HTTP Headers

GET /dGgCk00N9SueBxI/svtfYwVHyBon4kYFCulBqzSGs42LS8e/RVebWe/DQWI/U7ZkHA7LThNUcOr5XzhObclPtVdWH9FoxoT01PFYj8rSCiGnCpldCdvqDL2MgEQwegUElQc6WSh0K4CmxclMC5MI9aTUIpobAUXuvGUKzGlwSLU26Col60c+329whNTLm/TyTx2YRNd3yvqxCbDcthvXhNd18AaNRr8Gvyr26dlBoxp0dHA=aYKCYKg1DvEAKOrJ HTTP/1.1
Host: imgs.hcaptcha.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://newassets.hcaptcha.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Tue, 30 May 2023 15:04:36 GMT
content-type: image/jpeg
content-length: 2865
cf-ray: 7cf7dedefb62b527-OSL
cf-cache-status: HIT
accept-ranges: bytes
access-control-allow-origin: *
age: 200
cache-control: max-age=86400,s-maxage=86400
etag: "5be3fc8bd0298b9b53bd130fb5cb16cf"
last-modified: Tue, 30 May 2023 14:57:21 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
via: 1.1 a529b95d300020af7b6819ecefd572f4.cloudfront.net (CloudFront)
cross-origin-resource-policy: cross-origin
x-amz-cf-id: qVWfbSl2rf95Y5fpongaoJ2bsQ7PAd4uya_QnLoaAMIOUDIxUnztJw==
x-amz-cf-pop: HEL50-C1
x-amz-expiration: expiry-date="Mon, 27 Nov 2023 00:00:00 GMT", rule-id="Expire after 180 days"
x-amz-server-side-encryption: AES256
x-amz-version-id: VNlSxiPTE09Jx8_tss3u16E7JyQWeaKl
x-cache: Miss from cloudfront
x-content-type-options: nosniff
vary: Accept-Encoding
server: cloudflare
alt-svc: h3=":443"; ma=86400

imgs.hcaptcha.com/LxEpnhJ1gFJWyfnrCTsHG4/cXmaWnfT3geSf1qEfYQFQn+5CJTZ6K9eUJSYr+OEOnn/shmnbmJBVx60K0pA1Y7nuubLwoWU4Bl9vfoYn+H+sTfUtAKhUawkPNhR1Tx/Nh1/Z20E4fJLS6Bx4hUmBCUBnGSt8fJLllTvPl3meXB7mKiJEIAW1r1zEFdWWU2b8FyAs+JbQmm6bfIX+FO3PgaQRg2u4+sKtU8Chrj5ubhWreGNq1IlionY=Gf9Mmev4lSIO3Yv9

104.16.168.131

200 OK

3.3 kB

URL GET HTTP/3
imgs.hcaptcha.com/LxEpnhJ1gFJWyfnrCTsHG4/cXmaWnfT3geSf1qEfYQFQn+5CJTZ6K9eUJSYr+OEOnn/shmnbmJBVx60K0pA1Y7nuubLwoWU4Bl9vfoYn+H+sTfUtAKhUawkPNhR1Tx/Nh1/Z20E4fJLS6Bx4hUmBCUBnGSt8fJLllTvPl3meXB7mKiJEIAW1r1zEFdWWU2b8FyAs+JbQmm6bfIX+FO3PgaQRg2u4+sKtU8Chrj5ubhWreGNq1IlionY=Gf9Mmev4lSIO3Yv9
IP
104.16.168.131:443
ASN
#13335 CLOUDFLARENET

Requested by
https://newassets.hcaptcha.com/captcha/v1/30d2bc2/static/hcaptcha.html#frame=challenge&id=0oi03o16bldm&host=bibtu.com&sentry=true&reportapi=https%3A%2F%2Faccounts.hcaptcha.com&recaptchacompat=true&custom=false&hl=en&tplinks=on&sitekey=c2adcb87-2c2c-408a-8990-d25035251688&theme=light&origin=https%3A%2F%2Fbibtu.com
Certificate
IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintD9:E8:78:82:B2:9B:0F:1B:5F:0B:B7:EF:93:24:6D:07:2D:83:BA:24
ValiditySat, 15 Apr 2023 00:00:00 GMT - Sun, 14 Apr 2024 23:59:59 GMT

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 128x128, components 3\012- data
Size
3.3 kB (3316 bytes)
Hash
d7760625d8d2af9977b3684463160a2f
0d492616b351941ba951c8b2bc5dab0c1c2ef9d4
4ae92b7be215644be2112710f944c1fb3781166df2b81e71a2108717fab4392a

HTTP Headers

GET /LxEpnhJ1gFJWyfnrCTsHG4/cXmaWnfT3geSf1qEfYQFQn+5CJTZ6K9eUJSYr+OEOnn/shmnbmJBVx60K0pA1Y7nuubLwoWU4Bl9vfoYn+H+sTfUtAKhUawkPNhR1Tx/Nh1/Z20E4fJLS6Bx4hUmBCUBnGSt8fJLllTvPl3meXB7mKiJEIAW1r1zEFdWWU2b8FyAs+JbQmm6bfIX+FO3PgaQRg2u4+sKtU8Chrj5ubhWreGNq1IlionY=Gf9Mmev4lSIO3Yv9 HTTP/1.1
Host: imgs.hcaptcha.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://newassets.hcaptcha.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Tue, 30 May 2023 15:04:36 GMT
content-type: image/jpeg
content-length: 3316
cf-ray: 7cf7dedefb5db527-OSL
cf-cache-status: HIT
accept-ranges: bytes
access-control-allow-origin: *
cache-control: max-age=86400,s-maxage=86400
etag: "d7760625d8d2af9977b3684463160a2f"
last-modified: Tue, 30 May 2023 14:57:38 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
via: 1.1 c04417bae552ee23bdd9519ac6fdfa34.cloudfront.net (CloudFront)
cross-origin-resource-policy: cross-origin
x-amz-cf-id: Q2MpKS_BdLe4cVbkFJPuNUwRzMIt_ob9v5hIbxaDWkop37mtovE7Vw==
x-amz-cf-pop: CPH50-P1
x-amz-expiration: expiry-date="Mon, 27 Nov 2023 00:00:00 GMT", rule-id="Expire after 180 days"
x-amz-server-side-encryption: AES256
x-amz-version-id: uuzyFMCVmQdmy00X.H_T1RQ4vliKErkS
x-cache: Miss from cloudfront
x-content-type-options: nosniff
vary: Accept-Encoding
server: cloudflare
alt-svc: h3=":443"; ma=86400

bibtu.com/favicon.ico

188.114.96.1

403 Forbidden

534 B

URL GET HTTP/3
bibtu.com/favicon.ico
IP
188.114.96.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://bibtu.com/eee6b53f6bef073a8aa16130cb8a7d5fSsicCXajx6zr2kdj8Q5swqCIbER7PQxg-DI
Certificate
IssuerGoogle Trust Services LLC
Subjectbibtu.com
Fingerprint2D:FC:BE:C5:47:5D:D5:56:FD:4F:0B:1A:4E:9A:69:13:12:6B:5C:92
ValidityThu, 11 May 2023 06:49:24 GMT - Wed, 09 Aug 2023 06:49:23 GMT

File type
HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (546), with no line terminators
Size
534 B (534 bytes)
Hash
05e7b6e32c979518c41042c8c81d537e
34f0b0350a2a1deeafafcd43d362a25821f88033
7f4ff262932d87ef1437fe5a115535ad90182000a0ed512756b1d9e50f1a32b2

Detections

Analyzer	Verdict	Alert
quad9	Sinkholed

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: bibtu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bibtu.com/eee6b53f6bef073a8aa16130cb8a7d5fSsicCXajx6zr2kdj8Q5swqCIbER7PQxg-DI
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 403 Forbidden
date: Tue, 30 May 2023 15:04:35 GMT
content-type: text/html; charset=UTF-8
cf-cache-status: BYPASS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=6QiAhdf%2B418eVWI01UsiQr0HdvfDtczobB7U4Vqd%2FB1qjnLM0neyXE0V%2Bp1a9hS4%2BZiUSCCIaXy9vb2OI7cSo97ZwCepmJmmhTm1lLE%2FpmuTJCN%2F%2BBzKzMDGFIo%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7cf7ded55cec0b31-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

imgs.hcaptcha.com/5npE9k9CcL0IZftEN5cx80BV6BZujJMIQftJMigxbZfJGxO8vqLpHixjiUX9oNbBug6664MWoQ3GV0bih2CjIE5nXIOI59dVRaE3LfPvPgIuoStIcRQmwUU6SGbeux+qHhzTPlYBj80TxDl6FPrPiXnhXBSFxHWXYwOoA3rDlPXKJ0ePqIpyvFIl++U0+ffq3jDPv11By0V8xgFsJHrNsvHyONeAdPEYKH2a/YO2uSlkLTjHytJPx3s=1piVV/Mj4Nz51VGA

104.16.168.131

200 OK

2.9 kB

URL GET HTTP/3
imgs.hcaptcha.com/5npE9k9CcL0IZftEN5cx80BV6BZujJMIQftJMigxbZfJGxO8vqLpHixjiUX9oNbBug6664MWoQ3GV0bih2CjIE5nXIOI59dVRaE3LfPvPgIuoStIcRQmwUU6SGbeux+qHhzTPlYBj80TxDl6FPrPiXnhXBSFxHWXYwOoA3rDlPXKJ0ePqIpyvFIl++U0+ffq3jDPv11By0V8xgFsJHrNsvHyONeAdPEYKH2a/YO2uSlkLTjHytJPx3s=1piVV/Mj4Nz51VGA
IP
104.16.168.131:443
ASN
#13335 CLOUDFLARENET

Requested by
https://newassets.hcaptcha.com/captcha/v1/30d2bc2/static/hcaptcha.html#frame=challenge&id=0oi03o16bldm&host=bibtu.com&sentry=true&reportapi=https%3A%2F%2Faccounts.hcaptcha.com&recaptchacompat=true&custom=false&hl=en&tplinks=on&sitekey=c2adcb87-2c2c-408a-8990-d25035251688&theme=light&origin=https%3A%2F%2Fbibtu.com
Certificate
IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintD9:E8:78:82:B2:9B:0F:1B:5F:0B:B7:EF:93:24:6D:07:2D:83:BA:24
ValiditySat, 15 Apr 2023 00:00:00 GMT - Sun, 14 Apr 2024 23:59:59 GMT

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 128x128, components 3\012- data
Size
2.9 kB (2860 bytes)
Hash
5d746e2c3999e52fe98e02842c26ad35
9ece35b18dc19080d8dbb290bb0db61f6d121c3b
b22a309a4c9d40e6edf4214137ec4350cc412a8786a2322fec22cf0ec9547d13

HTTP Headers

GET /5npE9k9CcL0IZftEN5cx80BV6BZujJMIQftJMigxbZfJGxO8vqLpHixjiUX9oNbBug6664MWoQ3GV0bih2CjIE5nXIOI59dVRaE3LfPvPgIuoStIcRQmwUU6SGbeux+qHhzTPlYBj80TxDl6FPrPiXnhXBSFxHWXYwOoA3rDlPXKJ0ePqIpyvFIl++U0+ffq3jDPv11By0V8xgFsJHrNsvHyONeAdPEYKH2a/YO2uSlkLTjHytJPx3s=1piVV/Mj4Nz51VGA HTTP/1.1
Host: imgs.hcaptcha.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://newassets.hcaptcha.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Tue, 30 May 2023 15:04:36 GMT
content-type: image/jpeg
content-length: 2860
cf-ray: 7cf7dedebaf3b527-OSL
cf-cache-status: HIT
accept-ranges: bytes
access-control-allow-origin: *
age: 196
cache-control: max-age=86400,s-maxage=86400
etag: "5d746e2c3999e52fe98e02842c26ad35"
last-modified: Tue, 30 May 2023 14:58:35 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
via: 1.1 3ccf7f7aced0e7c558f0790a4da88a92.cloudfront.net (CloudFront)
cross-origin-resource-policy: cross-origin
x-amz-cf-id: A7gDCGF9zZRJaajVuR_FTVFUYBM3knSfNjE72aV6QQ8wqlPwvWEsxQ==
x-amz-cf-pop: CPH50-P1
x-amz-expiration: expiry-date="Mon, 27 Nov 2023 00:00:00 GMT", rule-id="Expire after 180 days"
x-amz-server-side-encryption: AES256
x-amz-version-id: PbmMq_Nqt.5QY2uAEX1rY8.MiBai9Ptf
x-cache: Hit from cloudfront
x-content-type-options: nosniff
vary: Accept-Encoding
server: cloudflare
alt-svc: h3=":443"; ma=86400

newassets.hcaptcha.com/captcha/v1/30d2bc2/static/hcaptcha.html

104.16.168.131

200 OK

1.9 kB

URL GET HTTP/3
newassets.hcaptcha.com/captcha/v1/30d2bc2/static/hcaptcha.html
IP
104.16.168.131:443
ASN
#13335 CLOUDFLARENET

Requested by
https://bibtu.com/eee6b53f6bef073a8aa16130cb8a7d5fSsicCXajx6zr2kdj8Q5swqCIbER7PQxg-DI
Certificate
IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintD9:E8:78:82:B2:9B:0F:1B:5F:0B:B7:EF:93:24:6D:07:2D:83:BA:24
ValiditySat, 15 Apr 2023 00:00:00 GMT - Sun, 14 Apr 2024 23:59:59 GMT

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (1960), with no line terminators
Size
1.9 kB (1917 bytes)
Hash
bc68b044dfabdaabcf0ff19b49afca39
a0e6417c9441fcdc273c33a313990e59995b0b18
0b7ecab50d4e1d85a46a3e887513df08088b9ca2abea120db33f717d67f90259

HTTP Headers

GET /captcha/v1/30d2bc2/static/hcaptcha.html HTTP/1.1
Host: newassets.hcaptcha.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bibtu.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Tue, 30 May 2023 15:04:35 GMT
content-type: text/html
cf-ray: 7cf7ded5ad75b527-OSL
cf-cache-status: HIT
access-control-allow-origin: *
age: 32291
cache-control: max-age=1209600
last-modified: Wed, 24 May 2023 09:24:50 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
via: 1.1 c908cbeaf223c80632fd467b8ff1278a.cloudfront.net (CloudFront)
cross-origin-resource-policy: cross-origin
x-amz-cf-id: 2K0B8gybaavXV9e0L9fSzjTZekhPF2kiudnHhUYutqyjgW3zYTAuYA==
x-amz-cf-pop: ARN1-C1
x-amz-server-side-encryption: AES256
x-amz-version-id: YuewjiA2B07deLtdxJKZ7Hm1EgcxGxPi
x-cache: Miss from cloudfront
x-content-type-options: nosniff
vary: Accept-Encoding
server: cloudflare
content-encoding: br
alt-svc: h3=":443"; ma=86400

hcaptcha.com/checksiteconfig?v=30d2bc2&host=bibtu.com&sitekey=c2adcb87-2c2c-408a-8990-d25035251688&sc=1&swa=1

104.16.168.131

200 OK

853 B

URL POST HTTP/3
hcaptcha.com/checksiteconfig?v=30d2bc2&host=bibtu.com&sitekey=c2adcb87-2c2c-408a-8990-d25035251688&sc=1&swa=1
IP
104.16.168.131:443
ASN
#13335 CLOUDFLARENET

Requested by
https://newassets.hcaptcha.com/captcha/v1/30d2bc2/static/hcaptcha.html#frame=checkbox&id=0oi03o16bldm&host=bibtu.com&sentry=true&reportapi=https%3A%2F%2Faccounts.hcaptcha.com&recaptchacompat=true&custom=false&hl=en&tplinks=on&sitekey=c2adcb87-2c2c-408a-8990-d25035251688&theme=light&origin=https%3A%2F%2Fbibtu.com
Certificate
IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintD9:E8:78:82:B2:9B:0F:1B:5F:0B:B7:EF:93:24:6D:07:2D:83:BA:24
ValiditySat, 15 Apr 2023 00:00:00 GMT - Sun, 14 Apr 2024 23:59:59 GMT

File type
troff or preprocessor input, ASCII text, with very long lines (867), with no line terminators
Size
853 B (853 bytes)
Hash
789603b795c939a59e21e25a1a96077f
11b8a6b42a0d960614eb6fafd48f895d46d29037
90946dff4169b068e0fe5181395553f8d7d442879aa1ec4d77e7e5b7bcca1e2a

HTTP Headers

POST /checksiteconfig?v=30d2bc2&host=bibtu.com&sitekey=c2adcb87-2c2c-408a-8990-d25035251688&sc=1&swa=1 HTTP/1.1
Host: hcaptcha.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: https://newassets.hcaptcha.com
DNT: 1
Connection: keep-alive
Referer: https://newassets.hcaptcha.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
Content-Length: 0

HTTP/3 200 OK
date: Tue, 30 May 2023 15:04:35 GMT
content-type: application/json
access-control-allow-origin: https://newassets.hcaptcha.com
vary: Origin, Accept-Encoding
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control, Content-Type, DNT, Referer, User-Agent, challenge-bypass-token, cf-chl-bypass, challenge-bypass-token, challenge-bypass-host, challenge-bypass-path
access-control-allow-methods: GET, HEAD, POST, OPTIONS
cf-chl-bypass: 2
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 7cf7ded8696db527-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

imgs.hcaptcha.com/IHa3XntSKYDmqYv9svjzbbMXQgaAflp0Yr7qkPkgVuxz7RZYgk2gp7PE6Azuz+LBYBiVlnw+ej5ZLvj2LWXkaycaJog/wT/yoRyU7adcQ6JDSRpHH8O85UbZlWz2+p94FSakYRgr0shYW2Pu3/FyCK+vTYO3FkFREwFozPtKl1HCS2tTQsyDrcDiLHFdSP7nU2cTk5jqjelK4zEr1jq/7P9CXEFj55CWwUBw1ubeGKDLFq8=2XSVo4dnjcBIqgWN

104.16.168.131

200 OK

3.5 kB

URL GET HTTP/3
imgs.hcaptcha.com/IHa3XntSKYDmqYv9svjzbbMXQgaAflp0Yr7qkPkgVuxz7RZYgk2gp7PE6Azuz+LBYBiVlnw+ej5ZLvj2LWXkaycaJog/wT/yoRyU7adcQ6JDSRpHH8O85UbZlWz2+p94FSakYRgr0shYW2Pu3/FyCK+vTYO3FkFREwFozPtKl1HCS2tTQsyDrcDiLHFdSP7nU2cTk5jqjelK4zEr1jq/7P9CXEFj55CWwUBw1ubeGKDLFq8=2XSVo4dnjcBIqgWN
IP
104.16.168.131:443
ASN
#13335 CLOUDFLARENET

Requested by
https://newassets.hcaptcha.com/captcha/v1/30d2bc2/static/hcaptcha.html#frame=challenge&id=0oi03o16bldm&host=bibtu.com&sentry=true&reportapi=https%3A%2F%2Faccounts.hcaptcha.com&recaptchacompat=true&custom=false&hl=en&tplinks=on&sitekey=c2adcb87-2c2c-408a-8990-d25035251688&theme=light&origin=https%3A%2F%2Fbibtu.com
Certificate
IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintD9:E8:78:82:B2:9B:0F:1B:5F:0B:B7:EF:93:24:6D:07:2D:83:BA:24
ValiditySat, 15 Apr 2023 00:00:00 GMT - Sun, 14 Apr 2024 23:59:59 GMT

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 128x128, components 3\012- data
Size
3.5 kB (3509 bytes)
Hash
9894a039af08a3956580f4ea88472383
70eee6e4836849367e0331bdce104311a5d852f8
32aaabc790dd211f0ddc196815b742ca8dd90d791e36d6bebc7ecb1e07126709

HTTP Headers

GET /IHa3XntSKYDmqYv9svjzbbMXQgaAflp0Yr7qkPkgVuxz7RZYgk2gp7PE6Azuz+LBYBiVlnw+ej5ZLvj2LWXkaycaJog/wT/yoRyU7adcQ6JDSRpHH8O85UbZlWz2+p94FSakYRgr0shYW2Pu3/FyCK+vTYO3FkFREwFozPtKl1HCS2tTQsyDrcDiLHFdSP7nU2cTk5jqjelK4zEr1jq/7P9CXEFj55CWwUBw1ubeGKDLFq8=2XSVo4dnjcBIqgWN HTTP/1.1
Host: imgs.hcaptcha.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://newassets.hcaptcha.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Tue, 30 May 2023 15:04:36 GMT
content-type: image/jpeg
content-length: 3509
cf-ray: 7cf7dedefb60b527-OSL
cf-cache-status: HIT
accept-ranges: bytes
access-control-allow-origin: *
age: 201
cache-control: max-age=86400,s-maxage=86400
etag: "9894a039af08a3956580f4ea88472383"
last-modified: Tue, 30 May 2023 14:57:23 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
via: 1.1 472198048b2177f6905d44f001875bcc.cloudfront.net (CloudFront)
cross-origin-resource-policy: cross-origin
x-amz-cf-id: sUT16G618imuEvoalR7dpIrol5ZHCKNaNL9dvBmvQrOv0yoLUrYW1Q==
x-amz-cf-pop: ARN56-P1
x-amz-expiration: expiry-date="Mon, 27 Nov 2023 00:00:00 GMT", rule-id="Expire after 180 days"
x-amz-server-side-encryption: AES256
x-amz-version-id: 0ysW9n5uExjWU5a8Aha36n7GXdqx1JcK
x-cache: Miss from cloudfront
x-content-type-options: nosniff
vary: Accept-Encoding
server: cloudflare
alt-svc: h3=":443"; ma=86400

imgs.hcaptcha.com/vaBqScH8mP02f7hs3XgSkW1JVmM/cgzvZfZbnqZn53PTEEvbKf4pKi1QfHcb/pi33aOLfvI2gv0Z6kV1BmMvjXr3YwCkFT0gO1ErTlmQZgVEPC73pnCN8RzJoK469vMcqMia4fQtWofBD+yxrIiwU0RNknDiGBrgAoowAkI9nspCaKEeGV2EmeF7eQnUFzbvozGrQ9Go7uoc+D1lIrxZA6y5y+YWOBtoR55mqhn4GNLU6BcvbQ==S+dBm1z0JaA5hgMc

104.16.168.131

200 OK

3.1 kB

URL GET HTTP/3
imgs.hcaptcha.com/vaBqScH8mP02f7hs3XgSkW1JVmM/cgzvZfZbnqZn53PTEEvbKf4pKi1QfHcb/pi33aOLfvI2gv0Z6kV1BmMvjXr3YwCkFT0gO1ErTlmQZgVEPC73pnCN8RzJoK469vMcqMia4fQtWofBD+yxrIiwU0RNknDiGBrgAoowAkI9nspCaKEeGV2EmeF7eQnUFzbvozGrQ9Go7uoc+D1lIrxZA6y5y+YWOBtoR55mqhn4GNLU6BcvbQ==S+dBm1z0JaA5hgMc
IP
104.16.168.131:443
ASN
#13335 CLOUDFLARENET

Requested by
https://newassets.hcaptcha.com/captcha/v1/30d2bc2/static/hcaptcha.html#frame=challenge&id=0oi03o16bldm&host=bibtu.com&sentry=true&reportapi=https%3A%2F%2Faccounts.hcaptcha.com&recaptchacompat=true&custom=false&hl=en&tplinks=on&sitekey=c2adcb87-2c2c-408a-8990-d25035251688&theme=light&origin=https%3A%2F%2Fbibtu.com
Certificate
IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintD9:E8:78:82:B2:9B:0F:1B:5F:0B:B7:EF:93:24:6D:07:2D:83:BA:24
ValiditySat, 15 Apr 2023 00:00:00 GMT - Sun, 14 Apr 2024 23:59:59 GMT

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 128x128, components 3\012- data
Size
3.1 kB (3109 bytes)
Hash
d48153f072902a187bf5e9d87ccf6bd7
e6606c153e1f6abdc66a77c0cde4af51283a52b0
e68efcbee00cd50356826841e05d6b2ad4be19ff90413e1f1361e7e041b6c940

HTTP Headers

GET /vaBqScH8mP02f7hs3XgSkW1JVmM/cgzvZfZbnqZn53PTEEvbKf4pKi1QfHcb/pi33aOLfvI2gv0Z6kV1BmMvjXr3YwCkFT0gO1ErTlmQZgVEPC73pnCN8RzJoK469vMcqMia4fQtWofBD+yxrIiwU0RNknDiGBrgAoowAkI9nspCaKEeGV2EmeF7eQnUFzbvozGrQ9Go7uoc+D1lIrxZA6y5y+YWOBtoR55mqhn4GNLU6BcvbQ==S+dBm1z0JaA5hgMc HTTP/1.1
Host: imgs.hcaptcha.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://newassets.hcaptcha.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Tue, 30 May 2023 15:04:36 GMT
content-type: image/jpeg
content-length: 3109
cf-ray: 7cf7dedebaf0b527-OSL
cf-cache-status: HIT
accept-ranges: bytes
access-control-allow-origin: *
age: 135
cache-control: max-age=86400,s-maxage=86400
etag: "d48153f072902a187bf5e9d87ccf6bd7"
last-modified: Tue, 30 May 2023 14:57:42 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
via: 1.1 9fde400234236c10982fe8b8a3ca9eb2.cloudfront.net (CloudFront)
cross-origin-resource-policy: cross-origin
x-amz-cf-id: jrz1Y_6gKH3bc8e2QWiUtung7_Dnb33_Svc0bTuxxCb3-PNZraMW1g==
x-amz-cf-pop: ARN56-P1
x-amz-expiration: expiry-date="Mon, 27 Nov 2023 00:00:00 GMT", rule-id="Expire after 180 days"
x-amz-server-side-encryption: AES256
x-amz-version-id: DGNAuM5dbdpZvzzuiXT2t5VRRfPUeNG2
x-cache: Hit from cloudfront
x-content-type-options: nosniff
vary: Accept-Encoding
server: cloudflare
alt-svc: h3=":443"; ma=86400

hcaptcha.com/getcaptcha/c2adcb87-2c2c-408a-8990-d25035251688

104.16.168.131

200 OK

9.1 kB

URL POST HTTP/3
hcaptcha.com/getcaptcha/c2adcb87-2c2c-408a-8990-d25035251688
IP
104.16.168.131:443
ASN
#13335 CLOUDFLARENET

Requested by
https://newassets.hcaptcha.com/captcha/v1/30d2bc2/static/hcaptcha.html#frame=challenge&id=0oi03o16bldm&host=bibtu.com&sentry=true&reportapi=https%3A%2F%2Faccounts.hcaptcha.com&recaptchacompat=true&custom=false&hl=en&tplinks=on&sitekey=c2adcb87-2c2c-408a-8990-d25035251688&theme=light&origin=https%3A%2F%2Fbibtu.com
Certificate
IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintD9:E8:78:82:B2:9B:0F:1B:5F:0B:B7:EF:93:24:6D:07:2D:83:BA:24
ValiditySat, 15 Apr 2023 00:00:00 GMT - Sun, 14 Apr 2024 23:59:59 GMT

File type
troff or preprocessor input, ASCII text, with very long lines (9342), with no line terminators
Size
9.1 kB (9116 bytes)
Hash
f804c8c0d0a4c1e7a11394617995097b
016e6f2d958098ec1edfb2d56494a334a583004f
04e17d667e55d799dbe1c96e2e1b5cf8a3830b697bdfbd418b2d582cca4b0134

HTTP Headers

POST /getcaptcha/c2adcb87-2c2c-408a-8990-d25035251688 HTTP/1.1
Host: hcaptcha.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: application/x-www-form-urlencoded
Content-Length: 12223
Origin: https://newassets.hcaptcha.com
DNT: 1
Connection: keep-alive
Referer: https://newassets.hcaptcha.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Tue, 30 May 2023 15:04:36 GMT
content-type: application/json
cf-ray: 7cf7dedd592db527-OSL
cf-cache-status: DYNAMIC
access-control-allow-origin: https://newassets.hcaptcha.com
strict-transport-security: max-age=31536000; includeSubDomains; preload
vary: Origin, Accept-Encoding
access-control-allow-credentials: true
set-cookie: INGRESSCOOKIE=1685459077.794.26.741647|8ad9e52e7227a1781f7d2cc2db535011; Path=/; HttpOnly; SameSite=None
hmt_id=dc05aca6-5421-4d60-8ab5-5d457cabe4b4; Expires=Thu, 29 Jun 2023 15:04:36 GMT; Secure; Path=/; SameSite=None
__cflb=02DiuHLwzyAZNoSCVjnt7XQujxDoodH3XomH78rc9daag; SameSite=Lax; path=/; expires=Wed, 31-May-23 14:04:36 GMT; HttpOnly
x-content-type-options: nosniff
x-esid: 339510303
server: cloudflare
content-encoding: br
alt-svc: h3=":443"; ma=86400

newassets.hcaptcha.com/captcha/challenge/image_label_binary/30d2bc2/challenge.js

104.16.168.131

200 OK

52 kB

URL GET HTTP/3
newassets.hcaptcha.com/captcha/challenge/image_label_binary/30d2bc2/challenge.js
IP
104.16.168.131:443
ASN
#13335 CLOUDFLARENET

Requested by
https://newassets.hcaptcha.com/captcha/v1/30d2bc2/static/hcaptcha.html#frame=challenge&id=0oi03o16bldm&host=bibtu.com&sentry=true&reportapi=https%3A%2F%2Faccounts.hcaptcha.com&recaptchacompat=true&custom=false&hl=en&tplinks=on&sitekey=c2adcb87-2c2c-408a-8990-d25035251688&theme=light&origin=https%3A%2F%2Fbibtu.com
Certificate
IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintD9:E8:78:82:B2:9B:0F:1B:5F:0B:B7:EF:93:24:6D:07:2D:83:BA:24
ValiditySat, 15 Apr 2023 00:00:00 GMT - Sun, 14 Apr 2024 23:59:59 GMT

File type
ASCII text, with very long lines (51530)
Size
52 kB (51566 bytes)
Hash
e911c8722eb6500a58d066854767c4d0
b168420422f4888b24c3a329da5dfb18649f4e44
885d8b7984ae842223c5d08f2b6a71c3b1cbb159bba8670da0091051681f906f

HTTP Headers

GET /captcha/challenge/image_label_binary/30d2bc2/challenge.js HTTP/1.1
Host: newassets.hcaptcha.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://newassets.hcaptcha.com/captcha/v1/30d2bc2/static/hcaptcha.html
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Tue, 30 May 2023 15:04:36 GMT
content-type: text/javascript
cf-ray: 7cf7dede5a65b527-OSL
cf-cache-status: HIT
access-control-allow-origin: *
age: 6103
cache-control: max-age=1209600
etag: W/"0497368fb8d9161597108163686dc6b4"
last-modified: Wed, 24 May 2023 09:24:55 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
via: 1.1 b71ee3139663184bee1555c303dce71e.cloudfront.net (CloudFront)
cross-origin-resource-policy: cross-origin
x-amz-cf-id: o18ZZggzcVQY6F-urGn5MO-n8gPF3gqzgOF82YPKvKf-wkEB1O6rKA==
x-amz-cf-pop: HEL51-P1
x-amz-server-side-encryption: AES256
x-amz-version-id: SWGmTKd_WA236G7LAeRlT884c7h3Eun2
x-cache: Hit from cloudfront
x-content-type-options: nosniff
vary: Accept-Encoding
server: cloudflare
content-encoding: br
alt-svc: h3=":443"; ma=86400

thedirsite.com/soothe/pniewski?delays=&eyed=hogan&SHVhd2VpIEhpc2lsaWNvbiBGaXJtd2FyZSBXcml0ZXISHV=ZG93bmxvYWR8ZWMzWlc4d2ZId3hOalk0T0RjMk9UYzFmSHd5TlRrd2ZId29UU2tnVjI5eVpIQnlaWE56SUZ0WVRVeFNVRU1nVmpJZ1VFUkdYUQ&motivating=shortcakes

188.114.97.1

302 Found

1.5 kB

URL User Request GET HTTP/2
thedirsite.com/soothe/pniewski?delays=&eyed=hogan&SHVhd2VpIEhpc2lsaWNvbiBGaXJtd2FyZSBXcml0ZXISHV=ZG93bmxvYWR8ZWMzWlc4d2ZId3hOalk0T0RjMk9UYzFmSHd5TlRrd2ZId29UU2tnVjI5eVpIQnlaWE56SUZ0WVRVeFNVRU1nVmpJZ1VFUkdYUQ&motivating=shortcakes
IP
188.114.97.1:443
ASN
#13335 CLOUDFLARENET

Certificate
IssuerLet's Encrypt
Subjectthedirsite.com
Fingerprint89:84:08:7B:97:59:AF:65:58:25:A5:7B:B5:B4:44:00:D7:19:BB:5B
ValidityWed, 17 May 2023 07:33:32 GMT - Tue, 15 Aug 2023 07:33:31 GMT

File type

Size
1.5 kB (1484 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /soothe/pniewski?delays=&eyed=hogan&SHVhd2VpIEhpc2lsaWNvbiBGaXJtd2FyZSBXcml0ZXISHV=ZG93bmxvYWR8ZWMzWlc4d2ZId3hOalk0T0RjMk9UYzFmSHd5TlRrd2ZId29UU2tnVjI5eVpIQnlaWE56SUZ0WVRVeFNVRU1nVmpJZ1VFUkdYUQ&motivating=shortcakes HTTP/1.1
Host: thedirsite.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 302 Found
date: Tue, 30 May 2023 15:04:34 GMT
content-type: text/html; charset=UTF-8
location: https://bibtu.com/eee6b53f6bef073a8aa16130cb8a7d5fSsicCXajx6zr2kdj8Q5swqCIbER7PQxg-DI
expires: Tue, 03 Jul 2001 06:00:00 GMT
cache-control: no-store, no-cache, must-revalidate, max-age=0, post-check=0, pre-check=0
pragma: no-cache
last-modified: Tue, 30 May 2023 15:04:34 GMT
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=rrbDiKSI%2FxdYRo91C1VRIOp3OpmATNhmUq1hFq4huAuDZoSEJoegPK9yZm%2B1yTkruQYE2ETe8SM2DPzVddZdcNZHDJ2GcKtFRc2NLOrWcWHPkujQLFhBVyL0r%2FbnXzlBSw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7cf7ded03b5f067b-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

www.hcaptcha.com/1/api.js

104.16.168.131

200 OK

315 kB

URL GET HTTP/2
www.hcaptcha.com/1/api.js
IP
104.16.168.131:443
ASN
#13335 CLOUDFLARENET

Requested by
https://bibtu.com/eee6b53f6bef073a8aa16130cb8a7d5fSsicCXajx6zr2kdj8Q5swqCIbER7PQxg-DI
Certificate
IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintD9:E8:78:82:B2:9B:0F:1B:5F:0B:B7:EF:93:24:6D:07:2D:83:BA:24
ValiditySat, 15 Apr 2023 00:00:00 GMT - Sun, 14 Apr 2024 23:59:59 GMT

File type

Size
315 kB (314805 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /1/api.js HTTP/1.1
Host: www.hcaptcha.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bibtu.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Tue, 30 May 2023 15:04:35 GMT
content-type: application/javascript
cf-ray: 7cf7ded49ad00b55-OSL
cf-cache-status: HIT
age: 0
cache-control: max-age=120
etag: W/"d19f3ab0a4d51db4bc7cc4ae6603d842"
last-modified: Wed, 24 May 2023 09:24:51 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
via: 1.1 8f67e81092ebd47bc649d954af911676.cloudfront.net (CloudFront)
cross-origin-resource-policy: cross-origin
x-amz-cf-id: NQFtMLDUEtO0NIzV6zEGazKwsKpu-XPWl4edAEc7O8jG4U0TjWZDoQ==
x-amz-cf-pop: HEL51-P1
x-amz-server-side-encryption: AES256
x-amz-version-id: _fbTW5MoLL7pD4vHjYsute3d7cLyGEJO
x-cache: Hit from cloudfront
x-content-type-options: nosniff
vary: Accept-Encoding
server: cloudflare
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

newassets.hcaptcha.com/captcha/v1/30d2bc2/static/hcaptcha.html

104.16.168.131

200 OK

1.9 kB

URL GET HTTP/3
newassets.hcaptcha.com/captcha/v1/30d2bc2/static/hcaptcha.html
IP
104.16.168.131:443
ASN
#13335 CLOUDFLARENET

Requested by
https://bibtu.com/eee6b53f6bef073a8aa16130cb8a7d5fSsicCXajx6zr2kdj8Q5swqCIbER7PQxg-DI
Certificate
IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintD9:E8:78:82:B2:9B:0F:1B:5F:0B:B7:EF:93:24:6D:07:2D:83:BA:24
ValiditySat, 15 Apr 2023 00:00:00 GMT - Sun, 14 Apr 2024 23:59:59 GMT

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (1960), with no line terminators
Size
1.9 kB (1917 bytes)
Hash
bc68b044dfabdaabcf0ff19b49afca39
a0e6417c9441fcdc273c33a313990e59995b0b18
0b7ecab50d4e1d85a46a3e887513df08088b9ca2abea120db33f717d67f90259

HTTP Headers

GET /captcha/v1/30d2bc2/static/hcaptcha.html HTTP/1.1
Host: newassets.hcaptcha.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bibtu.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Tue, 30 May 2023 15:04:35 GMT
content-type: text/html
cf-ray: 7cf7ded5ad71b527-OSL
cf-cache-status: HIT
access-control-allow-origin: *
age: 32291
cache-control: max-age=1209600
last-modified: Wed, 24 May 2023 09:24:50 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
via: 1.1 c908cbeaf223c80632fd467b8ff1278a.cloudfront.net (CloudFront)
cross-origin-resource-policy: cross-origin
x-amz-cf-id: 2K0B8gybaavXV9e0L9fSzjTZekhPF2kiudnHhUYutqyjgW3zYTAuYA==
x-amz-cf-pop: ARN1-C1
x-amz-server-side-encryption: AES256
x-amz-version-id: YuewjiA2B07deLtdxJKZ7Hm1EgcxGxPi
x-cache: Miss from cloudfront
x-content-type-options: nosniff
vary: Accept-Encoding
server: cloudflare
content-encoding: br
alt-svc: h3=":443"; ma=86400

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

OpenPhish

PhishTank

Fortinet's Web Filter

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (6)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (33)

URL GET HTTP/3

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/3

IP

ASN

Requested by

Certificate

File type

Size

Hash