| r10.o.lencr.org/ | 23.36.76.226 | | 504 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hash946bd983da8ed3f6d5c12abcab5273e0 eaf94210f1202240080722b9f0a78aa64b6cc1b3 f772e410f6d95169a72a7473bf8ff96f7c642b0e8cd820c34b9debdfc367c44e
POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "F772E410F6D95169A72A7473BF8FF96F7C642B0E8CD820C34B9DEBDFC367C44E"
Last-Modified: Tue, 17 Sep 2024 14:37:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2407
Expires: Wed, 18 Sep 2024 04:47:04 GMT
Date: Wed, 18 Sep 2024 04:06:57 GMT
Connection: keep-alive
|
|
| www.google.com/url?q=https://www.google.com/url?q=3HOSozuuQiApLjODz3yh&rct=tTPSJ3J3wD5CHARyycT&sa=t&esrc=7CrVJLLAFgECA0xys8Em2FL&source=&cd=HXUursu8uEcr4eTiw9XH&cad=XpPkDfJ6CHARlDJVS0Y&ved=xjnktlqryYWwZIBRrgvK&uact=&url=amp/cells2go.co/one/.me/IiPfZUuDtKYtDLfdgBOD8/cXVlc3Rpb25zQGFlc2luZGlhbmFyZWJhdGVzLmNvbQ== | 142.250.74.164 | | 310 B |
URL www.google.com/url?q=https://www.google.com/url?q=3HOSozuuQiApLjODz3yh&rct=tTPSJ3J3wD5CHARyycT&sa=t&esrc=7CrVJLLAFgECA0xys8Em2FL&source=&cd=HXUursu8uEcr4eTiw9XH&cad=XpPkDfJ6CHARlDJVS0Y&ved=xjnktlqryYWwZIBRrgvK&uact=&url=amp/cells2go.co/one/.me/IiPfZUuDtKYtDLfdgBOD8/cXVlc3Rpb25zQGFlc2luZGlhbmFyZWJhdGVzLmNvbQ== IP142.250.74.164:0
File typeHTML document, ASCII text, with CRLF, LF line terminators Hash028a5ef5a22317e35a8a99b1fed9b0d1 bb83bd04307dfa27114907036cbcc87d4cf986dc 9d5c00fff9ba54e2e467a74dd343e4e600918d0354339e4f30c49c39a4deb7c5
GET /url?q=https://www.google.com/url?q=3HOSozuuQiApLjODz3yh&rct=tTPSJ3J3wD5CHARyycT&sa=t&esrc=7CrVJLLAFgECA0xys8Em2FL&source=&cd=HXUursu8uEcr4eTiw9XH&cad=XpPkDfJ6CHARlDJVS0Y&ved=xjnktlqryYWwZIBRrgvK&uact=&url=amp/cells2go.co/one/.me/IiPfZUuDtKYtDLfdgBOD8/cXVlc3Rpb25zQGFlc2luZGlhbmFyZWJhdGVzLmNvbQ== HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Cookie: SOCS=CAESHAgBEhJnd3NfMjAyMjA5MjktMF9SQzEaAnJvIAEaBgiAkvOZBg
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
location: https://www.google.com/amp/cells2go.co/one/.me/IiPfZUuDtKYtDLfdgBOD8/cXVlc3Rpb25zQGFlc2luZGlhbmFyZWJhdGVzLmNvbQ==
cache-control: private
content-type: text/html; charset=UTF-8
strict-transport-security: max-age=31536000
content-security-policy: object-src 'none';base-uri 'self';script-src 'nonce-Cjh0URWdOzUPWIbbNuvRmw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other
p3p: CP="This is not a P3P policy! See g.co/p3phelp for more info."
date: Wed, 18 Sep 2024 04:06:57 GMT
server: gws
content-length: 310
x-xss-protection: 0
set-cookie: __Secure-ENID=22.SE=ZB_y9VcC4YIZYs2sxIXbsXvFfRut0b7aCqSVcClGuyAsekYvxpTkJVlN2b8YdsBTAjbCcRIAC28mTTb-A-GxP_EdzUd2_hkhY5mqXUWXOUMWOWRckSO7Ok0eTxjZxjMcGqHEFNonUO8H1AaLBDyZ9pHYluJn-_9Za388PYKxzMcb_2fnOmtWEpV2iiSl1bBJ4csN_lIEOV5fKv7KFJxkbWfEofgxTXBwq87pkPI; expires=Sat, 18-Oct-2025 20:25:15 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=lax
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| www.google.com/amp/cells2go.co/one/.me/IiPfZUuDtKYtDLfdgBOD8/cXVlc3Rpb25zQGFlc2luZGlhbmFyZWJhdGVzLmNvbQ== | 142.250.74.164 | | 290 B |
URL www.google.com/amp/cells2go.co/one/.me/IiPfZUuDtKYtDLfdgBOD8/cXVlc3Rpb25zQGFlc2luZGlhbmFyZWJhdGVzLmNvbQ== IP142.250.74.164:0
File typeHTML document, ASCII text, with CRLF, LF line terminators Hashe2ec8eb513c70c5cd86157b9771725e2 49596dfbfc97da8fad5241295228570a508bb392 f32593408213a1480474f0cb27d19d2235d13e5b24dee3c2814c84707b8d1f4a
GET /amp/cells2go.co/one/.me/IiPfZUuDtKYtDLfdgBOD8/cXVlc3Rpb25zQGFlc2luZGlhbmFyZWJhdGVzLmNvbQ== HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: SOCS=CAESHAgBEhJnd3NfMjAyMjA5MjktMF9SQzEaAnJvIAEaBgiAkvOZBg; __Secure-ENID=22.SE=ZB_y9VcC4YIZYs2sxIXbsXvFfRut0b7aCqSVcClGuyAsekYvxpTkJVlN2b8YdsBTAjbCcRIAC28mTTb-A-GxP_EdzUd2_hkhY5mqXUWXOUMWOWRckSO7Ok0eTxjZxjMcGqHEFNonUO8H1AaLBDyZ9pHYluJn-_9Za388PYKxzMcb_2fnOmtWEpV2iiSl1bBJ4csN_lIEOV5fKv7KFJxkbWfEofgxTXBwq87pkPI
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 302 Found
location: http://cells2go.co/one/.me/IiPfZUuDtKYtDLfdgBOD8/cXVlc3Rpb25zQGFlc2luZGlhbmFyZWJhdGVzLmNvbQ==
cache-control: private
x-robots-tag: noindex
content-type: text/html; charset=UTF-8
content-security-policy: object-src 'none';base-uri 'self';script-src 'nonce-Y8meScjK6FaR7c6hRMeYKQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/fff
cross-origin-opener-policy: same-origin-allow-popups; report-to="gws"
report-to: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/fff"}]}
date: Wed, 18 Sep 2024 04:06:57 GMT
server: gws
content-length: 290
x-xss-protection: 0
x-frame-options: SAMEORIGIN
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| cells2go.co/one/.me/IiPfZUuDtKYtDLfdgBOD8/cXVlc3Rpb25zQGFlc2luZGlhbmFyZWJhdGVzLmNvbQ== | 103.83.194.5 | | 0 B |
URL cells2go.co/one/.me/IiPfZUuDtKYtDLfdgBOD8/cXVlc3Rpb25zQGFlc2luZGlhbmFyZWJhdGVzLmNvbQ== IP103.83.194.5:0 ASN#393960 HOST4GEEKS-LLC
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /one/.me/IiPfZUuDtKYtDLfdgBOD8/cXVlc3Rpb25zQGFlc2luZGlhbmFyZWJhdGVzLmNvbQ== HTTP/1.1
Host: cells2go.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 18 Sep 2024 04:06:57 GMT
Server: Apache
refresh: 0;url=https://g3j6.vitiacarc.com/7Zg4xu6/#Mquestions@aesindianarebates.com
Content-Length: 0
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8
|
|
| cdnjs.cloudflare.com/ajax/libs/crypto-js/4.1.1/crypto-js.min.js | 104.17.24.14 | 200 OK | 14 kB |
URL GET HTTP/2cdnjs.cloudflare.com/ajax/libs/crypto-js/4.1.1/crypto-js.min.js IP104.17.24.14:443
Requested byhttps://g3j6.vitiacarc.com/7Zg4xu6/#Mquestions@aesindianarebates.com CertificateIssuerGoogle Trust Services Subjectcdnjs.cloudflare.com Fingerprint00:EC:C6:E9:D9:C1:6D:05:88:6E:33:AF:3B:E7:7B:86:81:20:66:CA ValidityWed, 31 Jul 2024 04:16:10 GMT - Tue, 29 Oct 2024 04:16:09 GMT
File typeJavaScript source, ASCII text, with very long lines (48316), with no line terminators Hash2ca03ad87885ab983541092b87adb299 1a17f60bf776a8c468a185c1e8e985c41a50dc27 8e3b0117f4df4be452c0b6af5b8f0a0acf9d4ade23d08d55d7e312af22077762
GET /ajax/libs/crypto-js/4.1.1/crypto-js.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://g3j6.vitiacarc.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 18 Sep 2024 04:06:58 GMT
content-type: application/javascript; charset=utf-8
content-length: 13972
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "61182885-3694"
last-modified: Sat, 14 Aug 2021 20:33:09 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 36874
expires: Mon, 08 Sep 2025 04:06:58 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=aGO9dusgHH%2Bhe8ml9gCS8FFTvdapJHuFNpssAhYS3rJPL6WKYsgoB%2F5y9l59dpjkI33mUEKlfikSUELbMZrkLJKrq%2B9Yapfl6x%2BOE9AYqyqp2Hj%2BZOkDBEsMplehJrxF0%2FZVMAYE"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 8c4e7769e90a712e-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| challenges.cloudflare.com/turnstile/v0/api.js?render=explicit | 104.18.95.41 | 302 Found | 0 B |
URL GET HTTP/2challenges.cloudflare.com/turnstile/v0/api.js?render=explicit IP104.18.95.41:443
Requested byhttps://g3j6.vitiacarc.com/7Zg4xu6/#Mquestions@aesindianarebates.com CertificateIssuerGoogle Trust Services Subjectchallenges.cloudflare.com Fingerprint65:75:A9:DF:EC:98:9B:14:E5:F1:43:E6:B9:E2:E3:9C:50:C4:E8:A4 ValidityThu, 05 Sep 2024 16:26:55 GMT - Wed, 04 Dec 2024 17:26:54 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /turnstile/v0/api.js?render=explicit HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://g3j6.vitiacarc.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
date: Wed, 18 Sep 2024 04:06:58 GMT
content-length: 0
access-control-allow-origin: *
cache-control: max-age=300, stale-if-error=10800, stale-while-revalidate=300, public
cross-origin-resource-policy: cross-origin
location: /turnstile/v0/b/388c99dd0998/api.js
vary: Accept-Encoding
server: cloudflare
cf-ray: 8c4e7769ede756bf-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| code.jquery.com/jquery-3.6.0.min.js | 151.101.2.137 | 200 OK | 31 kB |
URL GET HTTP/2code.jquery.com/jquery-3.6.0.min.js IP151.101.2.137:443
Requested byhttps://g3j6.vitiacarc.com/7Zg4xu6/#Mquestions@aesindianarebates.com CertificateIssuerSectigo Limited Subject*.jquery.com FingerprintCD:B5:6E:05:85:0C:5A:AE:47:12:80:2A:5B:C6:E5:8F:11:72:E2:B5 ValidityTue, 25 Jun 2024 00:00:00 GMT - Wed, 25 Jun 2025 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (65447) Hash8fb8fee4fcc3cc86ff6c724154c49c42 b82d238d4e31fdf618bae8ac11a6c812c03dd0d4 ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e
GET /jquery-3.6.0.min.js HTTP/1.1
Host: code.jquery.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://g3j6.vitiacarc.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Fri, 18 Oct 1991 12:00:00 GMT
etag: W/"28feccc0-15d9d"
cache-control: public, max-age=31536000, stale-while-revalidate=604800
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Wed, 18 Sep 2024 04:06:58 GMT
age: 2824525
x-served-by: cache-lga21931-LGA, cache-hel1410027-HEL
x-cache: HIT, HIT
x-cache-hits: 71, 543903
x-timer: S1726632419.919501,VS0,VE0
vary: Accept-Encoding
content-length: 30875
X-Firefox-Spdy: h2
|
|
| challenges.cloudflare.com/turnstile/v0/b/388c99dd0998/api.js | 104.18.95.41 | 200 OK | 58 kB |
URL GET HTTP/2challenges.cloudflare.com/turnstile/v0/b/388c99dd0998/api.js IP104.18.95.41:443
Requested byhttps://g3j6.vitiacarc.com/7Zg4xu6/#Mquestions@aesindianarebates.com CertificateIssuerGoogle Trust Services Subjectchallenges.cloudflare.com Fingerprint65:75:A9:DF:EC:98:9B:14:E5:F1:43:E6:B9:E2:E3:9C:50:C4:E8:A4 ValidityThu, 05 Sep 2024 16:26:55 GMT - Wed, 04 Dec 2024 17:26:54 GMT
File typeJavaScript source, ASCII text, with very long lines (47261) Hashd7bb07b6ecd6fb1a2e123203006c33ba 09cc76938fa366e40992880ff94accd8be0c6640 8eae5159c56bf66c17e0cb002b25fc2e343f3e009dc2a39a7e230f08b7b8c672
GET /turnstile/v0/b/388c99dd0998/api.js HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://g3j6.vitiacarc.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 18 Sep 2024 04:06:58 GMT
content-type: application/javascript; charset=UTF-8
last-modified: Wed, 11 Sep 2024 15:58:53 GMT
cache-control: max-age=31536000, stale-if-error=10800, stale-while-revalidate=31536000, public
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding
server: cloudflare
cf-ray: 8c4e776a3e1656bf-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/i/8c4e776b2f8ab521/1726632419422/ty7NXVmLbPQ0jP3 | 104.18.95.41 | 200 OK | 61 B |
URL GET HTTP/3challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/i/8c4e776b2f8ab521/1726632419422/ty7NXVmLbPQ0jP3 IP104.18.95.41:443
Requested byhttps://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/41lqu/0x4AAAAAAAigph6sU-lio1_P/auto/fbE/normal/auto/ CertificateIssuerGoogle Trust Services Subjectchallenges.cloudflare.com Fingerprint65:75:A9:DF:EC:98:9B:14:E5:F1:43:E6:B9:E2:E3:9C:50:C4:E8:A4 ValidityThu, 05 Sep 2024 16:26:55 GMT - Wed, 04 Dec 2024 17:26:54 GMT
File typePNG image data, 70 x 17, 8-bit/color RGB, non-interlaced Hash29c836f5ba5ac4e1c53c243103ba188b d1c80fc41d6dedaa896381c613e77492f2a21fd2 6c71f5180c61c81a4ecfb08bcc842c25821a5448691262891191f475f8ae060d
GET /cdn-cgi/challenge-platform/h/b/i/8c4e776b2f8ab521/1726632419422/ty7NXVmLbPQ0jP3 HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/41lqu/0x4AAAAAAAigph6sU-lio1_P/auto/fbE/normal/auto/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 18 Sep 2024 04:06:59 GMT
content-type: image/png
content-length: 61
server: cloudflare
cf-ray: 8c4e77704a39b521-OSL
alt-svc: h3=":443"; ma=86400
|
|
| challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/pat/8c4e776b2f8ab521/1726632419425/77df885a0dedb7aba994c4c8d8cab77c78155c11d33f6b77acc22450f1ff8058/QJ4ntilHAxd8D_X | 104.18.95.41 | 401 Unauthorized | 1 B |
URL GET HTTP/3challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/pat/8c4e776b2f8ab521/1726632419425/77df885a0dedb7aba994c4c8d8cab77c78155c11d33f6b77acc22450f1ff8058/QJ4ntilHAxd8D_X IP104.18.95.41:443
Requested byhttps://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/41lqu/0x4AAAAAAAigph6sU-lio1_P/auto/fbE/normal/auto/ CertificateIssuerGoogle Trust Services Subjectchallenges.cloudflare.com Fingerprint65:75:A9:DF:EC:98:9B:14:E5:F1:43:E6:B9:E2:E3:9C:50:C4:E8:A4 ValidityThu, 05 Sep 2024 16:26:55 GMT - Wed, 04 Dec 2024 17:26:54 GMT
File typevery short file (no magic) Hashff44570aca8241914870afbc310cdb85 58668e7669fd564d99db5d581fcdb6a5618440b5 6da43b944e494e885e69af021f93c6d9331c78aa228084711429160a5bbd15b5
GET /cdn-cgi/challenge-platform/h/b/pat/8c4e776b2f8ab521/1726632419425/77df885a0dedb7aba994c4c8d8cab77c78155c11d33f6b77acc22450f1ff8058/QJ4ntilHAxd8D_X HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/41lqu/0x4AAAAAAAigph6sU-lio1_P/auto/fbE/normal/auto/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 401 Unauthorized
date: Wed, 18 Sep 2024 04:07:00 GMT
content-type: text/plain; charset=UTF-8
content-length: 1
www-authenticate: PrivateToken challenge="AAIAGXBhdC1pc3N1ZXIuY2xvdWRmbGFyZS5jb20gd9-IWg3tt6uplMTI2Mq3fHgVXBHTP2t3rMIkUPH_gFgAGWNoYWxsZW5nZXMuY2xvdWRmbGFyZS5jb20=", token-key="MIIBUjA9BgkqhkiG9w0BAQowMKANMAsGCWCGSAFlAwQCAqEaMBgGCSqGSIb3DQEBCDALBglghkgBZQMEAgKiAwIBMAOCAQ8AMIIBCgKCAQEAscjm_UO_k901rNdCKgLw5bvI4i6M_jDNCIXpfs2LRbtxwLOrUyplqVvML_hVlB5tIDMuj0ihhaOFHose-Y0_UjQnNUGE_vol46VvGgscTMtTjU4xINriap8AMTIygvljEBt6my-nBwkUGhY3U9v5iKC-eWR5bTfvrqFsuIVxafkSfhHqDXB4KLGNjvOOV71GGJ9x4yxA-C2OcULZ1uDDKuvAaMhuiWdF6OzSTXruP9yPg1vmuteavOW1re0YDbCbtK16PhHdSzWym7v_FrvId-2zf26j50FlTd_vl_DcKNDVCgWDoU0uX3cU6V3rSQoVXREEqPr-2ywSGru8ZuXRoQIDAQAB", max-age=20, PrivateToken challenge="AAIAHXNhdC5wYXQtaXNzdWVyLmNsb3VkZmxhcmUuY29tIHffiFoN7berqZTEyNjKt3x4FVwR0z9rd6zCJFDx_4BYABljaGFsbGVuZ2VzLmNsb3VkZmxhcmUuY29t", token-key="MIIBUjA9BgkqhkiG9w0BAQowMKANMAsGCWCGSAFlAwQCAqEaMBgGCSqGSIb3DQEBCDALBglghkgBZQMEAgKiAwIBMAOCAQ8AMIIBCgKCAQEAsLS4HBnLGydwK-bLQGRCaoyMsrXBRrDgQVmxS06j3UF0nYSd6GdTGCKIu1WV60eg-tJtTttfEVq7wHVQf4vzjYBidmCh88ebzxKv2GB6PESSodf5MsEup9xd5dxpkYScgL1CCJq89kRrOQ_CS61bvkL_oGyZf4ffqG5THgaOsopqj8dFLH6_SMy9yf8EgMYqpyjxfKsD-1_qb1m1DRjJEKPWKIGwmHXIKQJUqsxZFm4_Inwkxx7QMpVP4GyqlTxFVz7stWwJRSkMLHjEM_IWLUYfPhuwIUVqmRjGsY1n8flA1bRfxaWHNDxoi25-M2BKTP9NkNNJBbTKErhrZ9LGywIDAQAB", max-age=20, PrivateToken challenge="AAIALHBwLWlzc3Vlci1wcm9kdWN0aW9uLnJlc2VhcmNoLmNsb3VkZmxhcmUuY29tIHffiFoN7berqZTEyNjKt3x4FVwR0z9rd6zCJFDx_4BYABljaGFsbGVuZ2VzLmNsb3VkZmxhcmUuY29t", token-key="MIIBUjA9BgkqhkiG9w0BAQowMKANMAsGCWCGSAFlAwQCAqEaMBgGCSqGSIb3DQEBCDALBglghkgBZQMEAgKiAwIBMAOCAQ8AMIIBCgKCAQEAuJroJOc-tyeoeQjFgfJ8GZidY1pYZ3E6vnRPKA0M4VuvYINC4ZmqLOQzac3aJzNuRrxrQ8vCXrvu97kqdHJSuD7c4F3hVN6pS2ay8sAL7u7jJt6lacsQHuSPC9EIde0igAXxPC2mDw7WVmKBnW1L8eX49fv385hVn2lkvVbn6g2RCo-8cr_vCaywLT1Y4m5m_6XjP6Oekt71A2a9NKotkb81Y8DjanuZ8fdTQWt6O8NqyhDobyHRcF9-9o8acjcIRT5cfkSGzFdMpznnIFdDtr33BOQv2usHcnClM6om78iaqVMykh3JylHkrYXv9gOBIy3r8i0wOr_0t9XKtgxipQIDAQAB", max-age=20
server: cloudflare
cf-ray: 8c4e77758e25b521-OSL
alt-svc: h3=":443"; ma=86400
|
|
| challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/cmg/1/GLhOioXg0bs57t4qPrORXFsL1%2BWig2mIKbgpVPMu7ZQ%3D | 104.18.95.41 | 200 OK | 61 B |
URL GET HTTP/3challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/cmg/1/GLhOioXg0bs57t4qPrORXFsL1%2BWig2mIKbgpVPMu7ZQ%3D IP104.18.95.41:443
Requested byhttps://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/41lqu/0x4AAAAAAAigph6sU-lio1_P/auto/fbE/normal/auto/ CertificateIssuerGoogle Trust Services Subjectchallenges.cloudflare.com Fingerprint65:75:A9:DF:EC:98:9B:14:E5:F1:43:E6:B9:E2:E3:9C:50:C4:E8:A4 ValidityThu, 05 Sep 2024 16:26:55 GMT - Wed, 04 Dec 2024 17:26:54 GMT
File typePNG image data, 2 x 2, 8-bit/color RGB, non-interlaced Hash9246cca8fc3c00f50035f28e9f6b7f7d 3aa538440f70873b574f40cd793060f53ec17a5d c07d7d29e3c20fa6ca4c5d20663688d52bad13e129ad82ce06b80eb187d9dc84
GET /cdn-cgi/challenge-platform/h/b/cmg/1/GLhOioXg0bs57t4qPrORXFsL1%2BWig2mIKbgpVPMu7ZQ%3D HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/41lqu/0x4AAAAAAAigph6sU-lio1_P/auto/fbE/normal/auto/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 18 Sep 2024 04:06:59 GMT
content-type: image/png
content-length: 61
cache-control: max-age=2629800, public
server: cloudflare
cf-ray: 8c4e776bbfd9b521-OSL
alt-svc: h3=":443"; ma=86400
|
|
| challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=8c4e776b2f8ab521&lang=auto | 104.18.95.41 | 200 OK | 118 kB |
URL GET HTTP/3challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=8c4e776b2f8ab521&lang=auto IP104.18.95.41:443
Requested byhttps://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/41lqu/0x4AAAAAAAigph6sU-lio1_P/auto/fbE/normal/auto/ CertificateIssuerGoogle Trust Services Subjectchallenges.cloudflare.com Fingerprint65:75:A9:DF:EC:98:9B:14:E5:F1:43:E6:B9:E2:E3:9C:50:C4:E8:A4 ValidityThu, 05 Sep 2024 16:26:55 GMT - Wed, 04 Dec 2024 17:26:54 GMT
File typeJavaScript source, ASCII text, with very long lines (65536), with no line terminators Size118 kB (117665 bytes) Hash36288ce61934788b43a1d09d8a808780 144326167609198ee1582189071d652fb487cd50 fe95ccaf505d4d6022cff52f58c46cdb935597968ded87b2f1d9d9b24b9fecd5
GET /cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=8c4e776b2f8ab521&lang=auto HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/41lqu/0x4AAAAAAAigph6sU-lio1_P/auto/fbE/normal/auto/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 18 Sep 2024 04:06:59 GMT
content-type: application/javascript; charset=UTF-8
cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
server: cloudflare
cf-ray: 8c4e776bbfe0b521-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/flow/ov1/686540809:1726630034:p6o0r58mbHMbskc9YVAj-wdjktqFzBv4slYcj8mo2CQ/8c4e776b2f8ab521/31e2a445427ea5d | 104.18.95.41 | 200 OK | 140 kB |
URL POST HTTP/3challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/flow/ov1/686540809:1726630034:p6o0r58mbHMbskc9YVAj-wdjktqFzBv4slYcj8mo2CQ/8c4e776b2f8ab521/31e2a445427ea5d IP104.18.95.41:443
Requested byhttps://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/41lqu/0x4AAAAAAAigph6sU-lio1_P/auto/fbE/normal/auto/ CertificateIssuerGoogle Trust Services Subjectchallenges.cloudflare.com Fingerprint65:75:A9:DF:EC:98:9B:14:E5:F1:43:E6:B9:E2:E3:9C:50:C4:E8:A4 ValidityThu, 05 Sep 2024 16:26:55 GMT - Wed, 04 Dec 2024 17:26:54 GMT
File typeASCII text, with very long lines (65536), with no line terminators Size140 kB (140380 bytes) Hashe853303797bc7439f8d0625ba72fffa1 77c6a2d4c17f1fdbbe74a59c70a6ae25eb167f26 5bf9f1e4bc608431b14677cd7fe4cbf0d7de9ab2c3142bda8225d6aea0676d77
POST /cdn-cgi/challenge-platform/h/b/flow/ov1/686540809:1726630034:p6o0r58mbHMbskc9YVAj-wdjktqFzBv4slYcj8mo2CQ/8c4e776b2f8ab521/31e2a445427ea5d HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/41lqu/0x4AAAAAAAigph6sU-lio1_P/auto/fbE/normal/auto/
Content-type: application/x-www-form-urlencoded
CF-Challenge: 31e2a445427ea5d
Content-Length: 2551
Origin: https://challenges.cloudflare.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 18 Sep 2024 04:06:59 GMT
content-type: text/plain; charset=UTF-8
cf-chl-gen: 3uYnJFPySie2xXObhPAjHlOwfrjB0ercBAy8Ctfz7kOlI7tOYgDmHotR/4hialW+NxDlg+JC5QYXlYBtcJRB/OH/TSnqIG2Lw3YqlN262xBnRCrAW/HJOF6SKoENFTdnHlzUcESWUQCCe2LDxvkUY41i6gXbqFFQ+0ic0I8aFD4SPH6Z2btuQL3szQMcvWDGrpnLw5fCfRtJPILregH+ZTv04pv1YIThdBuF3nvBEHP+U8UzAZHJCiSpyBjHs+Igns7fxHx6zLuUdtR5N6YuNyx9hLOG3Gys1yqt1LF42KbEMDdJSrx0+5kNl6eP1sWm5Ob9ArV3WmOn4w/3rc9J5QZJs9TIaOOkShi4lKPI5FC+0P+Dg66p7qt6Q8OjfPDaI5SE5DO77gNGykWhAwk/xr+4K0aJHRTlJUHr7XkBokP3F7EkujeLHMo+nZHxvEq/Ol7TAnUQRbWaqn7wcA==$almuj6fEIresEjA2
server: cloudflare
cf-ray: 8c4e776d48a5b521-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| g3j6.vitiacarc.com/7Zg4xu6/ | 172.67.213.146 | 200 OK | 17 kB |
URL User Request GET HTTP/2g3j6.vitiacarc.com/7Zg4xu6/ IP172.67.213.146:443
CertificateIssuerGoogle Trust Services Subjectvitiacarc.com Fingerprint1E:B5:AF:BE:D3:7A:D5:46:B3:94:23:F9:77:53:BA:06:C1:94:82:1E ValiditySun, 01 Sep 2024 06:18:41 GMT - Sat, 30 Nov 2024 06:18:40 GMT
File typeHTML document, ASCII text, with very long lines (6213), with CRLF line terminators Hasha1878dd4e870ece8152e3d60dae3e28e f53245634811f2957ee9accacc3567e6b0e379bc 3bd4ed6d219135a71a1c96b118da6d6204d0be25e3b4c894aa8a71e16665997c
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /7Zg4xu6/ HTTP/1.1
Host: g3j6.vitiacarc.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 18 Sep 2024 04:06:58 GMT
content-type: text/html; charset=UTF-8
cache-control: no-cache, private
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=qZEenF39RpQeJWounvZ2bk2gJQPd8d9ODVOxj0H8r8jExgKSO7ascdUDGk4X3Oda4O5ZfrQ9uTHtmBameds%2FHYrJEcrQRvF5yrG5XTxUruwYm4COo1uPFmUmNtvYzQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
set-cookie: XSRF-TOKEN=eyJpdiI6IkhzWDlEZVhtZUFlZ3M3ZHM3NEFHbkE9PSIsInZhbHVlIjoiS0lIcWxzOTV4QXgvck9WR1FMWXVUSHVFRC9pNEhBVVkxdlI4azNDeXR6dDJIZmQyS1diRk9XaU55NFNodk16dFpPUDEwU2VQLzRsdmIxOWRieUxBemtaUzdmL0hqbm1WNDBUV2hxZTJseEVjRlh5eFJnMFc3eGl1WlVHYlR4Q2MiLCJtYWMiOiIzNWFjM2JlZTQ1NzM4ZTYzMTcyNGJiMzU4YjVhYjI1ZTI0ZTMyZjlmMWQ5ZDc1YzEwNTFkZDNiOTM0NDJjNTRlIiwidGFnIjoiIn0%3D; expires=Wed, 18-Sep-2024 06:06:58 GMT; Max-Age=7200; path=/; secure; samesite=none
laravel_session=eyJpdiI6IlFWY1I2QnVSZFVieU1WbElnZE5ES0E9PSIsInZhbHVlIjoicjZNYTVjUEtqRHhLVloxdG1uSzJHOFZyMDBoOWNuWlBsam5mL1hMdmtWU3ROZmlra2d5MkYyQUpIUWk0aEg1QlVyQ0piYVFQODl4TCtBMFp4N1FCSktITm9RME0xZFFlRjVtbE9odXdLeHlSNmdJTWpTMGlKVzdoQ2h5L0ZMRWkiLCJtYWMiOiJhZDJjYWRiNmY0NWI5YTljMmIzNmQwMjg4MGY1ZTczYzUxMTMzZTEyODhiYTRjZmI1M2M5YzMyNmYyYWUyYTgzIiwidGFnIjoiIn0%3D; expires=Wed, 18-Sep-2024 06:06:58 GMT; Max-Age=7200; path=/; secure; httponly; samesite=none
server: cloudflare
cf-ray: 8c4e77651b4eb521-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/41lqu/0x4AAAAAAAigph6sU-lio1_P/auto/fbE/normal/auto/ | 104.18.95.41 | 200 OK | 165 kB |
URL GET HTTP/3challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/41lqu/0x4AAAAAAAigph6sU-lio1_P/auto/fbE/normal/auto/ IP104.18.95.41:443
Requested byhttps://g3j6.vitiacarc.com/7Zg4xu6/#Mquestions@aesindianarebates.com CertificateIssuerGoogle Trust Services Subjectchallenges.cloudflare.com Fingerprint65:75:A9:DF:EC:98:9B:14:E5:F1:43:E6:B9:E2:E3:9C:50:C4:E8:A4 ValidityThu, 05 Sep 2024 16:26:55 GMT - Wed, 04 Dec 2024 17:26:54 GMT
File typeHTML document, ASCII text, with very long lines (42605) Size165 kB (164722 bytes) Hash461323d2819ca4b27c94e6af45c1b09d 2affce005b0c53437177fa837f5eec818a95af39 e8319e84c8592a52bdc1431cee8cb2c78a79589881fbcaaeda1001f3fd03125f
GET /cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/41lqu/0x4AAAAAAAigph6sU-lio1_P/auto/fbE/normal/auto/ HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://g3j6.vitiacarc.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 18 Sep 2024 04:06:59 GMT
content-type: text/html; charset=UTF-8
cross-origin-resource-policy: cross-origin
accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
cross-origin-embedder-policy: require-corp
origin-agent-cluster: ?1
cross-origin-opener-policy: same-origin
cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
critical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
content-security-policy: frame-src https://challenges.cloudflare.com/ blob:; base-uri 'self'
document-policy: js-profiling
permissions-policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()
referrer-policy: same-origin
server: cloudflare
cf-ray: 8c4e776b2f8ab521-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| g3j6.vitiacarc.com/favicon.ico | 172.67.213.146 | 404 Not Found | 0 B |
URL GET HTTP/3g3j6.vitiacarc.com/favicon.ico IP172.67.213.146:443
Requested byhttps://g3j6.vitiacarc.com/7Zg4xu6/#Mquestions@aesindianarebates.com CertificateIssuerGoogle Trust Services Subjectvitiacarc.com Fingerprint1E:B5:AF:BE:D3:7A:D5:46:B3:94:23:F9:77:53:BA:06:C1:94:82:1E ValiditySun, 01 Sep 2024 06:18:41 GMT - Sat, 30 Nov 2024 06:18:40 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /favicon.ico HTTP/1.1
Host: g3j6.vitiacarc.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://g3j6.vitiacarc.com/7Zg4xu6/
Cookie: XSRF-TOKEN=eyJpdiI6IkhzWDlEZVhtZUFlZ3M3ZHM3NEFHbkE9PSIsInZhbHVlIjoiS0lIcWxzOTV4QXgvck9WR1FMWXVUSHVFRC9pNEhBVVkxdlI4azNDeXR6dDJIZmQyS1diRk9XaU55NFNodk16dFpPUDEwU2VQLzRsdmIxOWRieUxBemtaUzdmL0hqbm1WNDBUV2hxZTJseEVjRlh5eFJnMFc3eGl1WlVHYlR4Q2MiLCJtYWMiOiIzNWFjM2JlZTQ1NzM4ZTYzMTcyNGJiMzU4YjVhYjI1ZTI0ZTMyZjlmMWQ5ZDc1YzEwNTFkZDNiOTM0NDJjNTRlIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlFWY1I2QnVSZFVieU1WbElnZE5ES0E9PSIsInZhbHVlIjoicjZNYTVjUEtqRHhLVloxdG1uSzJHOFZyMDBoOWNuWlBsam5mL1hMdmtWU3ROZmlra2d5MkYyQUpIUWk0aEg1QlVyQ0piYVFQODl4TCtBMFp4N1FCSktITm9RME0xZFFlRjVtbE9odXdLeHlSNmdJTWpTMGlKVzdoQ2h5L0ZMRWkiLCJtYWMiOiJhZDJjYWRiNmY0NWI5YTljMmIzNmQwMjg4MGY1ZTczYzUxMTMzZTEyODhiYTRjZmI1M2M5YzMyNmYyYWUyYTgzIiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 404 Not Found
date: Wed, 18 Sep 2024 04:06:59 GMT
content-type: text/html; charset=UTF-8
cache-control: max-age=14400
age: 12567
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=z9pD2w2hnMaPGdWjjMGwHSMwokzwwB11lNODY3BTCwlsZ6Mq%2FbwATffWJbm2UiKSwb4MvPvgzkSXUaTJkBHvbLSEbMu71suTRtjOJr9prNZQtZKrgAv%2B9cFAzW52KA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
cf-cache-status: HIT
server: cloudflare
cf-ray: 8c4e776b38fa569c-OSL
content-encoding: br
|
|
| challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/flow/ov1/686540809:1726630034:p6o0r58mbHMbskc9YVAj-wdjktqFzBv4slYcj8mo2CQ/8c4e776b2f8ab521/31e2a445427ea5d | 104.18.95.41 | 200 OK | 28 kB |
URL POST HTTP/3challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/flow/ov1/686540809:1726630034:p6o0r58mbHMbskc9YVAj-wdjktqFzBv4slYcj8mo2CQ/8c4e776b2f8ab521/31e2a445427ea5d IP104.18.95.41:443
Requested byhttps://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/41lqu/0x4AAAAAAAigph6sU-lio1_P/auto/fbE/normal/auto/ CertificateIssuerGoogle Trust Services Subjectchallenges.cloudflare.com Fingerprint65:75:A9:DF:EC:98:9B:14:E5:F1:43:E6:B9:E2:E3:9C:50:C4:E8:A4 ValidityThu, 05 Sep 2024 16:26:55 GMT - Wed, 04 Dec 2024 17:26:54 GMT
File typeASCII text, with very long lines (28048), with no line terminators Hash2444a63519bd67c818ef8e0b5cab58bd 5c9403fe0f3aea94f72a960057983f6b5cdcb0cd 2520e3e8c00cccd800ed6f0ce1331974cea9202273030d471b808550d7d83dec
POST /cdn-cgi/challenge-platform/h/b/flow/ov1/686540809:1726630034:p6o0r58mbHMbskc9YVAj-wdjktqFzBv4slYcj8mo2CQ/8c4e776b2f8ab521/31e2a445427ea5d HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/41lqu/0x4AAAAAAAigph6sU-lio1_P/auto/fbE/normal/auto/
Content-type: application/x-www-form-urlencoded
CF-Challenge: 31e2a445427ea5d
Content-Length: 27871
Origin: https://challenges.cloudflare.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 18 Sep 2024 04:07:01 GMT
content-type: text/plain; charset=UTF-8
cf-chl-gen: 3+FdRThD16MgWaQH9hbf/B2n1A3Phw8nBgxYET90fEkxx3BUCkvWjgYP9Fh5YYhz8/pPwIwDpXekGf4h$pT/cBZG3Izl8jwaF
server: cloudflare
cf-ray: 8c4e777bb90bb521-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|