| r10.o.lencr.org/ | 23.36.77.32 | | 504 B |
IP 23.36.77.32:0
ASN#20940 Akamai International B.V.
Hashdf85487917ffcb9ff9393daa9c628bc8 73e600fa168021b1cfd00f6a00dff1678e018aaa c694b95afc4423cf3e039cea969256e7957ff30ee11fa6cd2c5432bd7b72686b
POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "C694B95AFC4423CF3E039CEA969256E7957FF30EE11FA6CD2C5432BD7B72686B"
Last-Modified: Mon, 15 Jul 2024 19:16:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9121
Expires: Tue, 16 Jul 2024 02:57:35 GMT
Date: Tue, 16 Jul 2024 00:25:34 GMT
Connection: keep-alive
|
|
| r10.o.lencr.org/ | 23.36.77.32 | | 504 B |
IP 23.36.77.32:0
ASN#20940 Akamai International B.V.
Hash0ba28ae3ca920c46edf9c7a1f79db3ca b96f7bd71a6b1f9e08b5a0179c66553bf42875d2 e4acaf4113d4cda75edbbae5d28e17dffb959489cd6912b854c9e87a3ab50fd2
POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "E4ACAF4113D4CDA75EDBBAE5D28E17DFFB959489CD6912B854C9E87A3AB50FD2"
Last-Modified: Mon, 15 Jul 2024 20:21:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=19846
Expires: Tue, 16 Jul 2024 05:56:20 GMT
Date: Tue, 16 Jul 2024 00:25:34 GMT
Connection: keep-alive
|
|
| r10.o.lencr.org/ | 23.36.77.32 | | 504 B |
IP 23.36.77.32:0
ASN#20940 Akamai International B.V.
Hash3ce85b1d34b1e8024ca9a37cff66221a 39236c242bdb2053821ca7b473582450acff9b39 4efba0f7a3c02e999ff66fdeea5e0170ef5feb724739a1eeb9b4719772c0deac
POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "4EFBA0F7A3C02E999FF66FDEEA5E0170EF5FEB724739A1EEB9B4719772C0DEAC"
Last-Modified: Sun, 14 Jul 2024 23:47:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2540
Expires: Tue, 16 Jul 2024 01:07:55 GMT
Date: Tue, 16 Jul 2024 00:25:35 GMT
Connection: keep-alive
|
|
| GET gempth.com/invite/Y4IO6M | 104.21.63.32 | 403 Forbidden | 167 B |
URL User Request GET HTTP/3IP 104.21.63.32:443
CertificateIssuerGoogle Trust Services Subjectgempth.com Fingerprint5D:BE:35:0C:96:28:D0:C4:CD:7F:96:2D:01:DF:EE:66:EE:40:BE:B3 ValidityThu, 11 Jul 2024 18:08:47 GMT - Wed, 09 Oct 2024 18:08:46 GMT
File typeHTML document, ASCII text, with CRLF line terminators Hash0104c301c5e02bd6148b8703d19b3a73 7436e0b4b1f8c222c38069890b75fa2baf9ca620 446a6087825fa73eadb045e5a2e9e2adf7df241b571228187728191d961dda1f
GET /invite/Y4IO6M HTTP/1.1
Host: gempth.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 301 Moved Permanently
Date: Tue, 16 Jul 2024 00:25:35 GMT
Content-Type: text/html
Content-Length: 167
Connection: keep-alive
Cache-Control: max-age=3600
Expires: Tue, 16 Jul 2024 01:25:35 GMT
Location: https://gempth.com/invite/Y4IO6M
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=QTADG1hdXUUyFCKhp%2BFV8KcBezRqRC%2F8h0lhhgoCsiv5NFOrEkL8BhfA%2BDZxDng4LDiAAK1M%2BvPt6fpFxlHmRZPUJG2psReGqBGi0HEIw7XxYcmRxInOEFD0kpkf"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 8a3ddb1d8a7c5694-OSL
alt-svc: h2=":443"; ma=60
|
|
| r10.o.lencr.org/ | 23.36.77.32 | | 504 B |
IP 23.36.77.32:0
ASN#20940 Akamai International B.V.
Hash851cd50083ec4a0cf653cb0f0e4965b7 5c65b0e574b717e61e548dfbe958f30464739e4f 1e08a73fa54952429a067b3cd08bdcae14df1354ca56c0f29fdf5731acd63989
POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "1E08A73FA54952429A067B3CD08BDCAE14DF1354CA56C0F29FDF5731ACD63989"
Last-Modified: Sun, 14 Jul 2024 16:18:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2877
Expires: Tue, 16 Jul 2024 01:13:32 GMT
Date: Tue, 16 Jul 2024 00:25:35 GMT
Connection: keep-alive
|
|
| r10.o.lencr.org/ | 23.36.76.226 | | 504 B |
IP 23.36.76.226:0
ASN#20940 Akamai International B.V.
Hashaaea61f25ae478356ba17d6a880cf7e9 f98dbbbe8056956136db3881f5cf0b5f82bcc79f 87d137fcf3642e83d7d80b92c3071a241550f6e6e1f1981653373ae4367a723d
POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "87D137FCF3642E83D7D80B92C3071A241550F6E6E1F1981653373AE4367A723D"
Last-Modified: Mon, 15 Jul 2024 20:19:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=16106
Expires: Tue, 16 Jul 2024 04:54:01 GMT
Date: Tue, 16 Jul 2024 00:25:35 GMT
Connection: keep-alive
|
|
| gempth.com/cdn-cgi/challenge-platform/h/g/orchestrate/chl_page/v1?ray=8a3ddb1daefb1c12 | 172.67.142.173 | | 36 kB |
URL gempth.com/cdn-cgi/challenge-platform/h/g/orchestrate/chl_page/v1?ray=8a3ddb1daefb1c12 IP 172.67.142.173:0
CertificateIssuerGoogle Trust Services Subjectgempth.com Fingerprint5D:BE:35:0C:96:28:D0:C4:CD:7F:96:2D:01:DF:EE:66:EE:40:BE:B3 ValidityThu, 11 Jul 2024 18:08:47 GMT - Wed, 09 Oct 2024 18:08:46 GMT
File typeJavaScript source, ASCII text, with very long lines (65536), with no line terminators Hash159ed7e5183bd494142b077ac6f2a04c dae55dc82492cbd4ef1d1444a90cfdf9912958b3 42d0de927d0862dfa62f929a46c8d8a6c0ad72d00f29e635f578fd0b34f82e03
GET /cdn-cgi/challenge-platform/h/g/orchestrate/chl_page/v1?ray=8a3ddb1daefb1c12 HTTP/1.1
Host: gempth.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://gempth.com/invite/Y4IO6M?__cf_chl_rt_tk=LRkapJILQQ1S.6apO2h9wiLv99EBm9uemxFn8vxqhr4-1721089535-0.0.1.1-3753
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 16 Jul 2024 00:25:35 GMT
content-type: application/javascript; charset=UTF-8
cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=aB8YILkpPGIeGNgC8L6VTy86nCNiryNnpjNsF7Aq%2BCEFf9jiY3La2KFGDwyTfk6BgKp0PWiGslL%2BSpwtWx6vYETuJYCSdCKlsZelCjoKxFBSdCTobvr5d0472Ub2"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8a3ddb1fff871c12-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| GET gempth.com/invite/Y4IO6M | 172.67.142.173 | 403 Forbidden | 6.8 kB |
URL User Request GET HTTP/3IP 172.67.142.173:443
CertificateIssuerGoogle Trust Services Subjectgempth.com Fingerprint5D:BE:35:0C:96:28:D0:C4:CD:7F:96:2D:01:DF:EE:66:EE:40:BE:B3 ValidityThu, 11 Jul 2024 18:08:47 GMT - Wed, 09 Oct 2024 18:08:46 GMT
File typeHTML document, ASCII text, with very long lines (15738), with no line terminators Hash0d99d4399595a5a8c9a94e5de54cb952 f5b515f363d987ecb895ecea80f5f4752261ae8b 75640cca366e5afd699e3ebae1c4c9588e7bd20490558004134c1e146487a32f
GET /invite/Y4IO6M HTTP/1.1
Host: gempth.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 403 Forbidden
date: Tue, 16 Jul 2024 00:25:35 GMT
content-type: text/html; charset=UTF-8
accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
critical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
cross-origin-embedder-policy: require-corp
cross-origin-opener-policy: same-origin
cross-origin-resource-policy: same-origin
origin-agent-cluster: ?1
permissions-policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()
referrer-policy: same-origin
x-content-options: nosniff
x-frame-options: SAMEORIGIN
cf-mitigated: challenge
cf-chl-out: NaW+Vs4CkAbYPQKWLEAmwZ4yU2DiAnxcTevob99mDDrM38OUr+li41fLdNM03gxqsGQae5M9lzZq11OTQknuol60dCTV2A39+zgOIGJKsJk=$7b9YU2SP1FP2htxmnxldhg==
cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
expires: Thu, 01 Jan 1970 00:00:01 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=gQIz7TiGe7HuBn9GU4haUWJQl8HUfaZdIT3jMUp5%2FoCO3T0aq5OSu4%2B7FdbV%2FdLm7HVfh2ltj1PCJ56L6tRyxp0qXajJcROTkWYo8XKHGfqA8rgS24P9bz2J4nK%2B"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8a3ddb1babf91c02-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| challenges.cloudflare.com/turnstile/v0/g/7a55c9ccbaaa/api.js?onload=Yidy0&render=explicit | 104.17.3.184 | | 15 kB |
URL challenges.cloudflare.com/turnstile/v0/g/7a55c9ccbaaa/api.js?onload=Yidy0&render=explicit IP 104.17.3.184:0
File typeJavaScript source, ASCII text, with very long lines (43882) Hashe83034eacfe1964f7926ec2cccb839f9 7ea752c44af30f970363d2070abfc1e60aa115d4 de7d1e230009b19b7bbef1d1b1a7bea78e8ae39f428eb1bde0e84f0a2119fc8a
GET /turnstile/v0/g/7a55c9ccbaaa/api.js?onload=Yidy0&render=explicit HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://gempth.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 16 Jul 2024 00:25:36 GMT
content-type: application/javascript; charset=UTF-8
last-modified: Wed, 10 Jul 2024 18:24:02 GMT
cache-control: max-age=31536000
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding
server: cloudflare
cf-ray: 8a3ddb210b7156bf-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| GET gempth.com/favicon.ico | 172.67.142.173 | 200 OK | 58 kB |
IP 172.67.142.173:443
Requested byhttps://gempth.com/login_register CertificateIssuerGoogle Trust Services Subjectgempth.com Fingerprint5D:BE:35:0C:96:28:D0:C4:CD:7F:96:2D:01:DF:EE:66:EE:40:BE:B3 ValidityThu, 11 Jul 2024 18:08:47 GMT - Wed, 09 Oct 2024 18:08:46 GMT
File typeMS Windows icon resource - 1 icon, 32x32, 32 bits/pixel Hash3f256c6bd3e26edfc755bdcbe41c48ef 13306cf75309e2cac5a158694899e6df90923937 b11e5eadf004b5d763b8c48d3faf88435c191ee88ed28889dd47bb5403639c63
GET /favicon.ico HTTP/1.1
Host: gempth.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://gempth.com/invite/Y4IO6M
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 16 Jul 2024 00:25:36 GMT
content-type: image/x-icon
x-powered-by: Express
cache-control: public, max-age=14400
last-modified: Tue, 02 Jul 2024 11:30:05 GMT
etag: W/"10be-19073358248"
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=xDsWi38VbLFHlGpTECIXbwyXxY%2FyX29P0qHN%2FCRvkVWuNOUY6M7ff9WiisQsXsUHMpUilDTCEULnBHTjOz8s1LtzPR8Ur2iPfiu2b%2BQfbvD36MR2p2pUdSeRs5kF"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8a3ddb20afb41c12-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/flow/ov1/2121435322:1721088592:RUawJWQ1R99breBIThp_uUvhHNl7UXJT-ov8K2kC2wE/8a3ddb233a9056c0/a8ad57d8f7a9075 | 104.17.3.184 | | 91 kB |
URL challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/flow/ov1/2121435322:1721088592:RUawJWQ1R99breBIThp_uUvhHNl7UXJT-ov8K2kC2wE/8a3ddb233a9056c0/a8ad57d8f7a9075 IP 104.17.3.184:0
File typeASCII text, with very long lines (65536), with no line terminators Hashf5d66ee767fb1e47e170b512b0fa267b 36a4dd6520db3f56414ec3eb88f2198cda20ce7c b870fa97a957124023633692e08c37084587bc05c8e0e0439681f6c592a89bb2
POST /cdn-cgi/challenge-platform/h/g/flow/ov1/2121435322:1721088592:RUawJWQ1R99breBIThp_uUvhHNl7UXJT-ov8K2kC2wE/8a3ddb233a9056c0/a8ad57d8f7a9075 HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/vpozo/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/normal/auto/
Content-type: application/x-www-form-urlencoded
CF-Challenge: a8ad57d8f7a9075
Content-Length: 3310
Origin: https://challenges.cloudflare.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 16 Jul 2024 00:25:36 GMT
content-type: text/plain; charset=UTF-8
cf-chl-gen: sROGqmOczNjH0dN0a3AVmr/duT3XC1/cE7Ln58KSiCOGbfUxDDglPHINsTa0uzITS7pzGdWskQQQ+BIFWe/jDZAf5u6PYWy722rgj79dx9w44yy28nmKOT3WI9ao8lQ7HNkkYfzmPev6TK91cX7Es9yjqqDZmkw5ju2fRLsy/iQWIZoCjCZx/pkFjBPVSVhYSVeaY2yswiia3eF39VjOPjp03Jk0wHrvD8mRWWgwmGC2xQ5fO2CXLX9YE/1S6unGUZfNbefPDZWUevAqMZI0afarKWLE5INXyCo5R7rSUkxpaOfAuQrBVEmrdT8KgrenyjkLKmhLwO1B+63/TTdMYfAaY7AqvEzOLDS8ErbVbpGzecq1ARn70IB4NoXlwG3xVwue0cSfGMizfA8D+k79kiWPPEq8Fe/tr+FZ7my8tPwXIyqgyQsgJ4ANvA4J94Tj$Fkig6tIN4/gpIAwV
server: cloudflare
cf-ray: 8a3ddb25ebd056c0-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| r10.o.lencr.org/ | 23.36.77.32 | | 504 B |
IP 23.36.77.32:0
ASN#20940 Akamai International B.V.
Hashc5fe3e5860e9afb843ae32b8f349f4c7 78e8faf3194e82bcb4fed0d89bd1989501dd8d2a 806921e95846539e7849756068c5afcd2fb93d1ccbb7604b5d8d18805538faf5
POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "806921E95846539E7849756068C5AFCD2FB93D1CCBB7604B5D8D18805538FAF5"
Last-Modified: Mon, 15 Jul 2024 20:19:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13258
Expires: Tue, 16 Jul 2024 04:06:36 GMT
Date: Tue, 16 Jul 2024 00:25:38 GMT
Connection: keep-alive
|
|
| r10.o.lencr.org/ | 23.36.77.32 | | 504 B |
IP 23.36.77.32:0
ASN#20940 Akamai International B.V.
Hashc5fe3e5860e9afb843ae32b8f349f4c7 78e8faf3194e82bcb4fed0d89bd1989501dd8d2a 806921e95846539e7849756068c5afcd2fb93d1ccbb7604b5d8d18805538faf5
POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "806921E95846539E7849756068C5AFCD2FB93D1CCBB7604B5D8D18805538FAF5"
Last-Modified: Mon, 15 Jul 2024 20:19:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13258
Expires: Tue, 16 Jul 2024 04:06:36 GMT
Date: Tue, 16 Jul 2024 00:25:38 GMT
Connection: keep-alive
|
|
| r10.o.lencr.org/ | 23.36.77.32 | | 504 B |
IP 23.36.77.32:0
ASN#20940 Akamai International B.V.
Hashc5fe3e5860e9afb843ae32b8f349f4c7 78e8faf3194e82bcb4fed0d89bd1989501dd8d2a 806921e95846539e7849756068c5afcd2fb93d1ccbb7604b5d8d18805538faf5
POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "806921E95846539E7849756068C5AFCD2FB93D1CCBB7604B5D8D18805538FAF5"
Last-Modified: Mon, 15 Jul 2024 20:19:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13258
Expires: Tue, 16 Jul 2024 04:06:36 GMT
Date: Tue, 16 Jul 2024 00:25:38 GMT
Connection: keep-alive
|
|
| r10.o.lencr.org/ | 23.36.77.32 | | 504 B |
IP 23.36.77.32:0
ASN#20940 Akamai International B.V.
Hashc5fe3e5860e9afb843ae32b8f349f4c7 78e8faf3194e82bcb4fed0d89bd1989501dd8d2a 806921e95846539e7849756068c5afcd2fb93d1ccbb7604b5d8d18805538faf5
POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "806921E95846539E7849756068C5AFCD2FB93D1CCBB7604B5D8D18805538FAF5"
Last-Modified: Mon, 15 Jul 2024 20:19:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13258
Expires: Tue, 16 Jul 2024 04:06:36 GMT
Date: Tue, 16 Jul 2024 00:25:38 GMT
Connection: keep-alive
|
|
| r10.o.lencr.org/ | 23.36.77.32 | | 504 B |
IP 23.36.77.32:0
ASN#20940 Akamai International B.V.
Hashc5fe3e5860e9afb843ae32b8f349f4c7 78e8faf3194e82bcb4fed0d89bd1989501dd8d2a 806921e95846539e7849756068c5afcd2fb93d1ccbb7604b5d8d18805538faf5
POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "806921E95846539E7849756068C5AFCD2FB93D1CCBB7604B5D8D18805538FAF5"
Last-Modified: Mon, 15 Jul 2024 20:19:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13258
Expires: Tue, 16 Jul 2024 04:06:36 GMT
Date: Tue, 16 Jul 2024 00:25:38 GMT
Connection: keep-alive
|
|
| challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/pat/8a3ddb233a9056c0/1721089536963/37baea36b2dc3c7e1734258e6c86c5ed1474400472decbb4ddb0eee94dd8c784/UUHLr8DjvOoqhA- | 104.17.3.184 | | 1 B |
URL challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/pat/8a3ddb233a9056c0/1721089536963/37baea36b2dc3c7e1734258e6c86c5ed1474400472decbb4ddb0eee94dd8c784/UUHLr8DjvOoqhA- IP 104.17.3.184:0
File typevery short file (no magic) Hashff44570aca8241914870afbc310cdb85 58668e7669fd564d99db5d581fcdb6a5618440b5 6da43b944e494e885e69af021f93c6d9331c78aa228084711429160a5bbd15b5
GET /cdn-cgi/challenge-platform/h/g/pat/8a3ddb233a9056c0/1721089536963/37baea36b2dc3c7e1734258e6c86c5ed1474400472decbb4ddb0eee94dd8c784/UUHLr8DjvOoqhA- HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/vpozo/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/normal/auto/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 401 Unauthorized
date: Tue, 16 Jul 2024 00:25:38 GMT
content-type: text/plain; charset=UTF-8
content-length: 1
www-authenticate: PrivateToken challenge="AAIAGXBhdC1pc3N1ZXIuY2xvdWRmbGFyZS5jb20gN7rqNrLcPH4XNCWObIbF7RR0QARy3su03bDu6U3Yx4QAGWNoYWxsZW5nZXMuY2xvdWRmbGFyZS5jb20=", token-key="MIIBUjA9BgkqhkiG9w0BAQowMKANMAsGCWCGSAFlAwQCAqEaMBgGCSqGSIb3DQEBCDALBglghkgBZQMEAgKiAwIBMAOCAQ8AMIIBCgKCAQEAj97f1ZYzqOz9uZOInjqnroOiRWozsb8-AGdrIys2h3QFK5IZrkOGHTHqwWtjbIQrQZZ9_GRg__UmOeszM9suMLDzs6ZswmFMyUhRlM-In-8D7wEx46F0qun6lQGUfOcvRaAQn29a3TkvpBEZsQJRO7ZXNWmJKtuzYxRvdKRysxXZz821Ru5Y1SbP9X81FgY-6qfZoEnuDNUVtP0s1x1mtXB-8jKUEhtasxg9zX1lOALi6aFUdjNZKYAV_HeFWsNF_K2I7c9LAcKYSkLYhLTK5HbtNadZFenSNIUWWg75Yml_iz24vEuWGXuoDTKGN0A62amDVvmcAKAOZy6LRqTpFQIDAQAB", max-age=20, PrivateToken challenge="AAIAHXNhdC5wYXQtaXNzdWVyLmNsb3VkZmxhcmUuY29tIDe66jay3Dx-FzQljmyGxe0UdEAEct7LtN2w7ulN2MeEABljaGFsbGVuZ2VzLmNsb3VkZmxhcmUuY29t", token-key="MIIBUjA9BgkqhkiG9w0BAQowMKANMAsGCWCGSAFlAwQCAqEaMBgGCSqGSIb3DQEBCDALBglghkgBZQMEAgKiAwIBMAOCAQ8AMIIBCgKCAQEAuOxqd5w4x94c5kJNZ2XRktqNIqGa8kZ99a4bR4a3MG42Haz0jlBIlIIlBDi3DmBmSE05ubIgBeyQDrMEvSHe88hB7QRQdp-QTZPamTgp7DhXVan_6UHzBLH2kRMkE8231rLW9MPNiz-L3tICupszueDJ-V4Etz8D2lgQAUbNISTXhJBO0mw3hrGpYYgLVirLFZqr-lxMtSZszk1beQxGoI3tKos-KE0UB7y_Ym_u7Xm8g78ZhxM6nnBRd9rfoKvSlwBs90Te3zpuKQCAZ8pbhj9PHbYM5LbtmlCYGDDVuNWc2-j6TxI_JsNxdupc7i6OjthVAt2baPDSxH9yc6b8CQIDAQAB", max-age=20, PrivateToken challenge="AAIALHBwLWlzc3Vlci1wcm9kdWN0aW9uLnJlc2VhcmNoLmNsb3VkZmxhcmUuY29tIDe66jay3Dx-FzQljmyGxe0UdEAEct7LtN2w7ulN2MeEABljaGFsbGVuZ2VzLmNsb3VkZmxhcmUuY29t", token-key="MIIBUjA9BgkqhkiG9w0BAQowMKANMAsGCWCGSAFlAwQCAqEaMBgGCSqGSIb3DQEBCDALBglghkgBZQMEAgKiAwIBMAOCAQ8AMIIBCgKCAQEAyhdYw1_euMTy-KtR-jTWxm4D-8wOhNUyQuLTdQC4yZCfo3QeGcHjtm5-n9WD7-3YGQsE-UsEJErlACuU2xZLTl0c9BGqIRhieSlpH0bXdQvQYNBgSF819iJSGgK6lchrXmfARE4v_svxCSBlP_7OhtlFg3tq5Alc6LmVaOvNgcc0K5p5HUoNC6IHFIHj_ahsjRtpQ2b5W9b623GAppiEWLhpE2JvChR6K2GISkBY4ujrV21oDZ8XXPObS3RYqnPtbYP3KZhpz1fNhQdzg_FEUazEtBEox_hCGVKeIVP1Gb2De1X3bUJCMT0AemR9kUeFG2bCXK8LQCd3AZ6aBqJF1wIDAQAB", max-age=20
server: cloudflare
cf-ray: 8a3ddb31b90856c0-OSL
alt-svc: h3=":443"; ma=86400
|
|
| challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/i/8a3ddb233a9056c0/1721089536964/zNRY47rFiMy9iTl | 104.17.3.184 | | 61 B |
URL challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/i/8a3ddb233a9056c0/1721089536964/zNRY47rFiMy9iTl IP 104.17.3.184:0
File typePNG image data, 1 x 32, 8-bit/color RGB, non-interlaced Hash43d5274c27cc8fa664b7e9b3eab47cf3 fd463e08027e2ced9b95fac8acf3f8450b20e1c0 6ce92edd676c1278a1b1d6ff4113721db052110420cbf03ae973f0c7ec17cc4c
GET /cdn-cgi/challenge-platform/h/g/i/8a3ddb233a9056c0/1721089536964/zNRY47rFiMy9iTl HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/vpozo/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/normal/auto/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 16 Jul 2024 00:25:38 GMT
content-type: image/png
content-length: 61
server: cloudflare
cf-ray: 8a3ddb32193756c0-OSL
alt-svc: h3=":443"; ma=86400
|
|
| GET gempth.com/getReferralCodeFromSession | 172.67.142.173 | 200 OK | 25 B |
URL GET HTTP/3gempth.com/getReferralCodeFromSession IP 172.67.142.173:443
Requested byhttps://gempth.com/login_register CertificateIssuerGoogle Trust Services Subjectgempth.com Fingerprint5D:BE:35:0C:96:28:D0:C4:CD:7F:96:2D:01:DF:EE:66:EE:40:BE:B3 ValidityThu, 11 Jul 2024 18:08:47 GMT - Wed, 09 Oct 2024 18:08:46 GMT
Hashe6652ed29e04ac4990e50118a4c7827e 4e66e5aaff0e39f5af6e3b4056a202651c6d610d 991860ffefa99da3cb7ed215180f36fc96a38abeed277c1b75f8c6830b4305ff
GET /getReferralCodeFromSession HTTP/1.1
Host: gempth.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://gempth.com/login_register
DNT: 1
Connection: keep-alive
Cookie: cf_clearance=HIhj_jJR7sw1NDHRT5X9DsSi2KJqX1zbeNXJwKaxn7E-1721089535-1.0.1.1-k8KdIWzlUG6CkcFDDOsEN1xoFEA4j5YsdF2gRGiNlaBI4AXsuVij5cKpmbap0PZ4t5pAg3kOdNlFPYiFoaJEAA; connect.sid=s%3A6UnzDD7C-ARrvW3hfj_k0imDaX6m4ePS.FHO%2B8RePDNTH%2FG9RF9e03w9y5jJEpg7rfxkum7zXgUs
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 16 Jul 2024 00:25:43 GMT
content-type: application/json; charset=utf-8
content-length: 25
x-powered-by: Express
etag: W/"19-Tmblqv8OOfWvbjtAVqICZRxtYQ0"
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Yzl15Dozu3F9wcqa3fE5DdOB1I0QQKMqu1jjgAWBh%2BE%2BythYlaClj1MeFpVvj3L1BWuR0VRvfQ6eO73vpf3KVtf58BDRMfEmvcigMSDR92JusxZBclF%2FnsyA52Pp"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8a3ddb4dce931c12-OSL
alt-svc: h3=":443"; ma=86400
|
|
| GET gempth.com/getErrorMessageFromSession | 172.67.142.173 | 200 OK | 2 B |
URL GET HTTP/3gempth.com/getErrorMessageFromSession IP 172.67.142.173:443
Requested byhttps://gempth.com/login_register CertificateIssuerGoogle Trust Services Subjectgempth.com Fingerprint5D:BE:35:0C:96:28:D0:C4:CD:7F:96:2D:01:DF:EE:66:EE:40:BE:B3 ValidityThu, 11 Jul 2024 18:08:47 GMT - Wed, 09 Oct 2024 18:08:46 GMT
Hash99914b932bd37a50b983c5e7c90ae93b bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
GET /getErrorMessageFromSession HTTP/1.1
Host: gempth.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://gempth.com/login_register
DNT: 1
Connection: keep-alive
Cookie: cf_clearance=HIhj_jJR7sw1NDHRT5X9DsSi2KJqX1zbeNXJwKaxn7E-1721089535-1.0.1.1-k8KdIWzlUG6CkcFDDOsEN1xoFEA4j5YsdF2gRGiNlaBI4AXsuVij5cKpmbap0PZ4t5pAg3kOdNlFPYiFoaJEAA; connect.sid=s%3A6UnzDD7C-ARrvW3hfj_k0imDaX6m4ePS.FHO%2B8RePDNTH%2FG9RF9e03w9y5jJEpg7rfxkum7zXgUs
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 16 Jul 2024 00:25:43 GMT
content-type: application/json; charset=utf-8
content-length: 2
x-powered-by: Express
etag: W/"2-vyGp6PvFo4RvsFtPoIWeCReyIC8"
set-cookie: connect.sid=s%3A6UnzDD7C-ARrvW3hfj_k0imDaX6m4ePS.FHO%2B8RePDNTH%2FG9RF9e03w9y5jJEpg7rfxkum7zXgUs; Path=/; Expires=Wed, 17 Jul 2024 00:25:43 GMT; HttpOnly
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Hvgg6jBQMXyyfzY4W1zQCp4iOEeaH9NQzuhLI5YP%2BI8TKqGnz6PUF%2BCkryS7M8wR%2BHBkPvR2aM6X%2BgtVoDr1oAuzYuf4GaG1e3Uk0e6IwXiubquXdmReYlxfaX8P"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8a3ddb4dce941c12-OSL
alt-svc: h3=":443"; ma=86400
|
|
| gempth.com/cdn-cgi/challenge-platform/h/g/flow/ov1/687406219:1721088694:P9vqEUd5K0MvinZcj1cVLOjmppo2b8NaNBB2mbVPvdg/8a3ddb1daefb1c12/2a2e5413ad6bf88 | 172.67.142.173 | | 12 kB |
URL gempth.com/cdn-cgi/challenge-platform/h/g/flow/ov1/687406219:1721088694:P9vqEUd5K0MvinZcj1cVLOjmppo2b8NaNBB2mbVPvdg/8a3ddb1daefb1c12/2a2e5413ad6bf88 IP 172.67.142.173:0
CertificateIssuerGoogle Trust Services Subjectgempth.com Fingerprint5D:BE:35:0C:96:28:D0:C4:CD:7F:96:2D:01:DF:EE:66:EE:40:BE:B3 ValidityThu, 11 Jul 2024 18:08:47 GMT - Wed, 09 Oct 2024 18:08:46 GMT
File typeASCII text, with very long lines (4312), with no line terminators Hash715d456d428ada2d1c9fe70b45c97e7f 78def76874544691a9a6516f2b0d10d529777299 3aa861f6b45a16caf25846f9717ec7f68669cb1ec66068e230c06061f872b6c0
POST /cdn-cgi/challenge-platform/h/g/flow/ov1/687406219:1721088694:P9vqEUd5K0MvinZcj1cVLOjmppo2b8NaNBB2mbVPvdg/8a3ddb1daefb1c12/2a2e5413ad6bf88 HTTP/1.1
Host: gempth.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://gempth.com/invite/Y4IO6M
Content-type: application/x-www-form-urlencoded
CF-Challenge: 2a2e5413ad6bf88
Content-Length: 3074
Origin: https://gempth.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 16 Jul 2024 00:25:42 GMT
content-type: text/html; charset=UTF-8
cf-chl-out-s: nol9A2/n49vWDczhHrMZa9RIvuN6qmXAYHvq87kA5sgTOLCQaaHV5AoxsEhGtKz9nJnKA7C0HRtu2+UbJfHMnjHqg+twT0a/Lm2chjqsyE9F/QYUPOlRaD+g5yQoEWs19ASYrRaYyUghmfc5H7rAm+h05RLC1VIx2GrZXMTD5WsODURFi1U8G86sAstfPo29GNvI7QDDGC5mNGikRfAWGKT9fEIjM/1p+XCC9398wPYaurCkx+DiItH6Bco1Kebgh6JToLRUV3Wn0P7h7wsEfIZzcRIZEv3/ewxXumSXEuaOQgur/B8ay2I83UmG8pMZsJdLJxM8CWC7O6RAzkqFs4k4AWNQ68n4Ux8i27YDirbjyTWrjGcN+ZNnFLEp2S/ICwVSYDq8RXWENnCUiv1Hmkw2Df+gFne3dnB2epAcWCoBfUzmBYY9HzbVSMz5O979FHCi2zarqDCa5etlZ69N9Q==$xtrk8+BM8Pc7EYg1
set-cookie: cf_chl_rc_m=;Expires=Mon, 15 Jul 2024 00:25:42 GMT;SameSite=Strict
cf-chl-out: qzET/ko1kI+M7I8tzPsQzODqBa7tOvUQ1w1eW65Bv4zeHXiolakPCn5BiPjXI4qNwfk869jOz/DtmlYb9nHJse7vPPjU$hj9IaHIb4uz894pU
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=JPpvkNn4DrHhdzmQae8lnaLtZgt0EYO44lIB%2FHtlaKhRfxmGV0EhVGR0Q79o2PecQ2IFu0XQ1mSVcc6YI8K5tfu5vKh2ts%2BUfRlWd47hkdZExJ05TI%2BNhd%2FrqPJP"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8a3ddb4a2d8b1c12-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/flow/ov1/2121435322:1721088592:RUawJWQ1R99breBIThp_uUvhHNl7UXJT-ov8K2kC2wE/8a3ddb233a9056c0/a8ad57d8f7a9075 | 104.17.3.184 | | 26 kB |
URL challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/flow/ov1/2121435322:1721088592:RUawJWQ1R99breBIThp_uUvhHNl7UXJT-ov8K2kC2wE/8a3ddb233a9056c0/a8ad57d8f7a9075 IP 104.17.3.184:0
File typeASCII text, with very long lines (24172), with no line terminators Hashed9db459f6bc0097cfc5087791d1d77c c9668f3298dc559055c16fabfa0875d06e46f748 1c91f43014eaf5b03281b6e699504d30bbddbe5d94354874e70603ea34600c01
POST /cdn-cgi/challenge-platform/h/g/flow/ov1/2121435322:1721088592:RUawJWQ1R99breBIThp_uUvhHNl7UXJT-ov8K2kC2wE/8a3ddb233a9056c0/a8ad57d8f7a9075 HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/vpozo/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/normal/auto/
Content-type: application/x-www-form-urlencoded
CF-Challenge: a8ad57d8f7a9075
Content-Length: 28241
Origin: https://challenges.cloudflare.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 16 Jul 2024 00:25:39 GMT
content-type: text/plain; charset=UTF-8
cf-chl-gen: /N+XRqP5/hqbj1xKHDJdt5a1KAlz7l1dTrGj4W3BoOk37YfI/VP3xKr1TNg+OGn1nHBEY8pM+ZcVWXyC$F8duTala5CFAcDCo
server: cloudflare
cf-ray: 8a3ddb3359d456c0-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| GET gempth.com/getReferralInfo | 172.67.142.173 | 401 Unauthorized | 18 B |
URL GET HTTP/3gempth.com/getReferralInfo IP 172.67.142.173:443
Requested byhttps://gempth.com/login_register CertificateIssuerGoogle Trust Services Subjectgempth.com Fingerprint5D:BE:35:0C:96:28:D0:C4:CD:7F:96:2D:01:DF:EE:66:EE:40:BE:B3 ValidityThu, 11 Jul 2024 18:08:47 GMT - Wed, 09 Oct 2024 18:08:46 GMT
File typeASCII text, with no line terminators Hashb5568aa086824fefee12ff7181b0d847 38f1bffaa68d57a86e9555662ae115e8dffee007 8039ca5dfd55821aeb7cf21b4abf3ea6e479b088cc9d2f2ed4234b5065b45938
GET /getReferralInfo HTTP/1.1
Host: gempth.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://gempth.com/login_register
DNT: 1
Connection: keep-alive
Cookie: cf_clearance=HIhj_jJR7sw1NDHRT5X9DsSi2KJqX1zbeNXJwKaxn7E-1721089535-1.0.1.1-k8KdIWzlUG6CkcFDDOsEN1xoFEA4j5YsdF2gRGiNlaBI4AXsuVij5cKpmbap0PZ4t5pAg3kOdNlFPYiFoaJEAA; connect.sid=s%3A6UnzDD7C-ARrvW3hfj_k0imDaX6m4ePS.FHO%2B8RePDNTH%2FG9RF9e03w9y5jJEpg7rfxkum7zXgUs
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 401 Unauthorized
date: Tue, 16 Jul 2024 00:25:43 GMT
content-type: text/html; charset=utf-8
x-powered-by: Express
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=a08oyFdDbaunPUhs5sSZCDZRqQ%2B3h4GOLipEjGIQ76Bmdyxo%2BLNWimGVrYgAYLLUhNLtAFqGEf%2FfQ0vH9sBGjMxRzCzjvaALlLBXAi1hku%2BIRr%2BFVWARip4SHAjt"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8a3ddb4dce921c12-OSL
alt-svc: h3=":443"; ma=86400
|
|
| GET gempth.com/login_register | 172.67.142.173 | 200 OK | 10 kB |
URL User Request GET HTTP/3gempth.com/login_register IP 172.67.142.173:443
CertificateIssuerGoogle Trust Services Subjectgempth.com Fingerprint5D:BE:35:0C:96:28:D0:C4:CD:7F:96:2D:01:DF:EE:66:EE:40:BE:B3 ValidityThu, 11 Jul 2024 18:08:47 GMT - Wed, 09 Oct 2024 18:08:46 GMT
File typeHTML document, ASCII text, with CRLF line terminators Hashd62d0233cf847c5661f2a5998516ae8c 083dbec3bcddad04ee64c5b8c16b58b108f8e14a 33dd17eba7c93f0d03c1fe4fac7adb76e50ae345411c1f5db828fdaf44c9134f
GET /login_register HTTP/1.1
Host: gempth.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://gempth.com/invite/Y4IO6M?__cf_chl_tk=LRkapJILQQ1S.6apO2h9wiLv99EBm9uemxFn8vxqhr4-1721089535-0.0.1.1-3753
DNT: 1
Connection: keep-alive
Cookie: cf_clearance=HIhj_jJR7sw1NDHRT5X9DsSi2KJqX1zbeNXJwKaxn7E-1721089535-1.0.1.1-k8KdIWzlUG6CkcFDDOsEN1xoFEA4j5YsdF2gRGiNlaBI4AXsuVij5cKpmbap0PZ4t5pAg3kOdNlFPYiFoaJEAA; connect.sid=s%3A6UnzDD7C-ARrvW3hfj_k0imDaX6m4ePS.FHO%2B8RePDNTH%2FG9RF9e03w9y5jJEpg7rfxkum7zXgUs
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Sec-Fetch-User: ?1
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 16 Jul 2024 00:25:43 GMT
content-type: text/html; charset=UTF-8
x-powered-by: Express
cache-control: public, max-age=0
last-modified: Mon, 08 Jul 2024 17:08:59 GMT
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=8hTL88Fj74AQItK5wPCcNj5x9f71%2B3K1WLz1yVeTH0BlDbTE0xWT64QkcQ%2F4UJnBTpLtiWhSaBp%2FV76mTmz0h2nRdgA2Vtv%2BdFa9%2FmnmTwYxFIvk6m3zeBIEv5IY"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8a3ddb4c4e2d1c12-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|