| nibofefudegozu.yftejum.com/gdy?utm_term=usmc+promotion+warrant+pdf | 172.67.215.147 | 403 Forbidden | 13 kB |
URL User Request GET HTTP/1.1nibofefudegozu.yftejum.com/gdy?utm_term=usmc+promotion+warrant+pdf IP172.67.215.147:80
File typeHTML document, ASCII text, with very long lines (16128), with no line terminators Hasha65dc90efe9060a5c1c16b2e1953571e 0bd2bdfcfcbe3436b52cbc588bf2dc4c273cc9b4 a04a6178362be783900fe33efa0f7f29e09f0fa84c116101b5973cc097517852
GET /gdy?utm_term=usmc+promotion+warrant+pdf HTTP/1.1
Host: nibofefudegozu.yftejum.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 403 Forbidden
date: Sat, 04 May 2024 13:42:41 GMT
content-type: text/html; charset=UTF-8
accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
cross-origin-embedder-policy: require-corp
cross-origin-opener-policy: same-origin
cross-origin-resource-policy: same-origin
origin-agent-cluster: ?1
permissions-policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()
referrer-policy: same-origin
x-frame-options: SAMEORIGIN
cf-mitigated: challenge
cf-chl-out: 5Mb1ZwXFwhgkWkUceSRdUO8FOUn5B3k8tHcnH/sv9zgG3pcIpi8RVKK4vK0MQ6D2qEn4Jzz0copg9axTrIdjfXZ2VS1Dig93p6H3ziV0MkM=$kD2Ds0HYwKM22o2ujoo+EQ==
cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
expires: Thu, 01 Jan 1970 00:00:01 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=quA9FP%2Fs5tz6Q5XAXMBEn9AND940oe3EcPS5Dkh31Hm9FPGPgL5ji%2B5jDfnr5tDJkNIM1DVfm5%2Btnn34x0osGkpp8NqTVkz%2B5IrA5y3KwXuSpA5dwfyYSBscnaJD578Yu60GoZC7WU%2BMzkN1eg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87e8ea5fdb555689-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| nibofefudegozu.yftejum.com/cdn-cgi/challenge-platform/h/g/orchestrate/chl_page/v1?ray=87e8ea60bd4656a9 | 172.67.215.147 | | 113 kB |
URL nibofefudegozu.yftejum.com/cdn-cgi/challenge-platform/h/g/orchestrate/chl_page/v1?ray=87e8ea60bd4656a9 IP172.67.215.147:0
File typeJavaScript source, ASCII text, with very long lines (65536), with no line terminators Size113 kB (113204 bytes) Hash1b5f138b4bda89c8c27454b94aa78a05 12152c69a8cf8711acbe991184c5f2fd983824c4 c4fe6884d6cd00d011cffed5d166203a3b1d65ba485005e88e31185d51e1d839
GET /cdn-cgi/challenge-platform/h/g/orchestrate/chl_page/v1?ray=87e8ea60bd4656a9 HTTP/1.1
Host: nibofefudegozu.yftejum.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://nibofefudegozu.yftejum.com/gdy?utm_term=usmc+promotion+warrant+pdf&__cf_chl_rt_tk=Jd8ZeOQQ5zYHkBCHUoFftNFOJsLyutEkL4Z0Dq0Qg5U-1714830162-0.0.1.1-1301
DNT: 1
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 04 May 2024 13:42:42 GMT
Content-Type: application/javascript; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
vary: accept-encoding
content-encoding: gzip
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=XBdqKCnbMIFUSSi59irkKvuhdzWDwKX3gvCOcj25K%2FKHtS2vaTtX6uF4IciYdnXRjv0%2BkZEqDswENAyNI2HdV7FJ%2BMF33Ap%2BKw6JfF0ivH9RXg8MORTgBTPl2dLXihOvZgtUeSWaN6QJkNVCHA%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 87e8ea626bf956c7-OSL
alt-svc: h2=":443"; ma=60
|
|
| nibofefudegozu.yftejum.com/favicon.ico | 172.67.215.147 | | 5.8 kB |
URL GET nibofefudegozu.yftejum.com/favicon.ico IP172.67.215.147:0
Requested byhttp://nibofefudegozu.yftejum.com/gdy?utm_term=usmc+promotion+warrant+pdf
File typeHTML document, ASCII text, with very long lines (14360), with no line terminators Hash19e3490b187f4be71585c9049c6bd15d dfa4cb01984af954ba3caf1eacc1797d20fdd591 3fa8b667db6992b7203f0115d81da0a9287d30c5fb0d8858ae33ca09be384e67
GET /favicon.ico HTTP/1.1
Host: nibofefudegozu.yftejum.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://nibofefudegozu.yftejum.com/gdy?utm_term=usmc+promotion+warrant+pdf&__cf_chl_rt_tk=Jd8ZeOQQ5zYHkBCHUoFftNFOJsLyutEkL4Z0Dq0Qg5U-1714830162-0.0.1.1-1301
DNT: 1
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 403 Forbidden
Date: Sat, 04 May 2024 13:42:42 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
Accept-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
Cross-Origin-Embedder-Policy: require-corp
Cross-Origin-Opener-Policy: same-origin
Cross-Origin-Resource-Policy: same-origin
Origin-Agent-Cluster: ?1
Permissions-Policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()
Referrer-Policy: same-origin
X-Frame-Options: SAMEORIGIN
cf-mitigated: challenge
cf-chl-out: i7Q7Ed/Dqv5HjxW0strecvhEKHQ+JNb66mBYfkUwgPNbAynpAoo9KnkzenvuUzLVtl5X49nB04uL7SfSKOQWEFqBPJKAg3A8WdMqDYYYdkc=$Wr0x7diAhXw01AaVE/bhcQ==
Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=jjMPWQhLl84RypVw6uSzVCiegSXsHSoN07dHR8Luma%2BB3JwuZjxBCk4ORspTN9G5OnkweO04MBSqBAvi2wV%2By6AThpg4PfbvbHDelk6s73jaSgLcdHppOND0CFg%2Faj6tKzKXycpZn6w2GPG5rw%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 87e8ea62bc5756c7-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
|
|
| nibofefudegozu.yftejum.com/favicon.ico | 172.67.215.147 | | 5.8 kB |
URL GET nibofefudegozu.yftejum.com/favicon.ico IP172.67.215.147:0
Requested byhttp://nibofefudegozu.yftejum.com/gdy?utm_term=usmc+promotion+warrant+pdf
File typeHTML document, ASCII text, with very long lines (14275), with no line terminators Hash9dba1d0a8570881ea62cebdc08c2afde 73e08de1f71f5dc102bda0aec84ba979af4f1584 538459e73ac6e39c10c6bc4701491bfcb67ce8f86d2ae3fbcd2aa21e9c9baeda
GET /favicon.ico HTTP/1.1
Host: nibofefudegozu.yftejum.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://nibofefudegozu.yftejum.com/gdy?utm_term=usmc+promotion+warrant+pdf
DNT: 1
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 403 Forbidden
Date: Sat, 04 May 2024 13:42:42 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
Accept-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
Cross-Origin-Embedder-Policy: require-corp
Cross-Origin-Opener-Policy: same-origin
Cross-Origin-Resource-Policy: same-origin
Origin-Agent-Cluster: ?1
Permissions-Policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()
Referrer-Policy: same-origin
X-Frame-Options: SAMEORIGIN
cf-mitigated: challenge
cf-chl-out: A1iVCQUKSu5mk6ayzx0yoAZGDFKscONNUGPFn5Dpe0t+5lJzgSVb3qwgh3Dn9s53cTgOvJrbDK45OmDUeFi/L/dT+I+5esoMm8CK7OyDMn8=$VGHULDrGi3NQ61FtH0IurQ==
Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=XW3Qv8jYvX%2Bqzb48knjsJuTvyd5vavswl3%2FAfpY%2FFeBuNxBveBaEPKqKjU0ZF9Be7ZeHUW%2F2Ij%2BXGkjm0lHmNSZmn44nc%2FFipFoERXNOZfCTxP0mRXbgC0ep6VLiH9bRjYgm6v9fM%2B0ECSVGjA%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 87e8ea631949568a-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
|
|
| nibofefudegozu.yftejum.com/cdn-cgi/challenge-platform/h/g/flow/ov1/502846337:1714825901:Ud4jsAjWT7x1lgxxspecLGsoYbCGkT2sMyKvkkex9tQ/87e8ea60bd4656a9/efba59edca5852f | 172.67.215.147 | | 12 kB |
URL nibofefudegozu.yftejum.com/cdn-cgi/challenge-platform/h/g/flow/ov1/502846337:1714825901:Ud4jsAjWT7x1lgxxspecLGsoYbCGkT2sMyKvkkex9tQ/87e8ea60bd4656a9/efba59edca5852f IP172.67.215.147:0
File typeASCII text, with very long lines (16252), with no line terminators Hashd79f53fdd196a52c3cb29441c5c70a9a 149e1221c56414ad1783b9b0df22e82a032d6088 34bf15edb0ca5ccfb0cb3b326b542f9b478c5908589ee94181930b9a5a69bc34
POST /cdn-cgi/challenge-platform/h/g/flow/ov1/502846337:1714825901:Ud4jsAjWT7x1lgxxspecLGsoYbCGkT2sMyKvkkex9tQ/87e8ea60bd4656a9/efba59edca5852f HTTP/1.1
Host: nibofefudegozu.yftejum.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://nibofefudegozu.yftejum.com/gdy?utm_term=usmc+promotion+warrant+pdf
Content-type: application/x-www-form-urlencoded
CF-Challenge: efba59edca5852f
Content-Length: 1827
Origin: http://nibofefudegozu.yftejum.com
DNT: 1
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 04 May 2024 13:42:42 GMT
Content-Type: text/plain; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
cf-chl-gen: MpY0D7zMeabk7H9SpU4IuwE8QgreMvFFkfUzg+RKF6bGOgN/qxuDLqcWwTmk4zLD$HkQRu88P6R02k9JYPlcrDQ==
vary: accept-encoding
content-encoding: gzip
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=RCHP0VzAJLoo5Gl%2FLpePDoAg89VJqiriyia4uGfcattSMobDiZOPK8c3Y2E%2ByNt5IOtfLIYRSFLI9AgDFrcnId12EEB47goj64uNoumWQED7Rjoanm4OUGRud6u6Gg7b3n2ntKKmwk4D39FMww%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 87e8ea63e806b527-OSL
alt-svc: h2=":443"; ma=60
|
|
| challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/cdvbk/0x4AAAAAAAAjq6WYeRDKmebM/light/normal | 104.17.2.184 | | 26 kB |
URL challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/cdvbk/0x4AAAAAAAAjq6WYeRDKmebM/light/normal IP104.17.2.184:0
File typeHTML document, ASCII text, with very long lines (41702) Hashf665c16403a877ade804b40b629158d2 dacd34712f0934f68b4ddf103e64e873a432a47c f8534f1387cc85bd13fc0fb9a13722104cf81d5776f5b659146c2c46971cfeea
GET /cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/cdvbk/0x4AAAAAAAAjq6WYeRDKmebM/light/normal HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 04 May 2024 13:42:42 GMT
content-type: text/html; charset=UTF-8
referrer-policy: same-origin
permissions-policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()
content-security-policy: frame-src https://challenges.cloudflare.com/ blob:; base-uri 'self'
accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
origin-agent-cluster: ?1
critical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
cross-origin-resource-policy: cross-origin
cross-origin-embedder-policy: require-corp
cross-origin-opener-policy: same-origin
document-policy: js-profiling
vary: accept-encoding
server: cloudflare
cf-ray: 87e8ea64bb2f0b31-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/i/87e8ea64bb2f0b31/1714830163197/ERL-T2WV_TXgNGO | 104.17.2.184 | | 61 B |
URL challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/i/87e8ea64bb2f0b31/1714830163197/ERL-T2WV_TXgNGO IP104.17.2.184:0
File typePNG image data, 64 x 83, 8-bit/color RGB, non-interlaced Hash8cb7c1b6f8a8a0c4ae5e49a5c402798e e9eb1122504bda048b4feac27de6056cbc65bce3 20d639c9c7a4c3ec63394844b4542984aa834edbff4acfe158801805f0546a51
GET /cdn-cgi/challenge-platform/h/g/i/87e8ea64bb2f0b31/1714830163197/ERL-T2WV_TXgNGO HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/cdvbk/0x4AAAAAAAAjq6WYeRDKmebM/light/normal
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 04 May 2024 13:42:44 GMT
content-type: image/png
content-length: 61
server: cloudflare
cf-ray: 87e8ea72a8b60b31-OSL
alt-svc: h3=":443"; ma=86400
|
|
| challenges.cloudflare.com/reports/v0/post | 104.17.2.184 | | 1.1 kB |
URL challenges.cloudflare.com/reports/v0/post IP104.17.2.184:0
File typeSVG Scalable Vector Graphics image Hashb78e6c07110ff7bdd9d64db316e88936 8ed30c9ce2793e2d1943ce129b7c80a8cb9d59f3 932be8354e6d267bc659d506da370cf841c71d7702f717944f52c935b4558f09
POST /reports/v0/post HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/cdvbk/0x4AAAAAAAAjq6WYeRDKmebM/light/normal
Content-type: application/json
Content-Length: 60
Origin: https://challenges.cloudflare.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 04 May 2024 13:42:50 GMT
content-type: image/svg
content-length: 1115
vary: Accept-Encoding
server: cloudflare
cf-ray: 87e8ea9539200b31-OSL
alt-svc: h3=":443"; ma=86400
|
|
| nibofefudegozu.yftejum.com/cdn-cgi/challenge-platform/h/g/flow/ov1/502846337:1714825901:Ud4jsAjWT7x1lgxxspecLGsoYbCGkT2sMyKvkkex9tQ/87e8ea60bd4656a9/efba59edca5852f | 172.67.215.147 | | 1.8 kB |
URL nibofefudegozu.yftejum.com/cdn-cgi/challenge-platform/h/g/flow/ov1/502846337:1714825901:Ud4jsAjWT7x1lgxxspecLGsoYbCGkT2sMyKvkkex9tQ/87e8ea60bd4656a9/efba59edca5852f IP172.67.215.147:0
File typeASCII text, with very long lines (2328), with no line terminators Hashdec7f91a62985721970cd9006f796f8d cf1ffb0b2291933efa36fd479e300217abce23d7 aca93dfd330bb34e4952f13772f42903c89d7a185c0bfc3e6e802d5b12d515e3
POST /cdn-cgi/challenge-platform/h/g/flow/ov1/502846337:1714825901:Ud4jsAjWT7x1lgxxspecLGsoYbCGkT2sMyKvkkex9tQ/87e8ea60bd4656a9/efba59edca5852f HTTP/1.1
Host: nibofefudegozu.yftejum.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://nibofefudegozu.yftejum.com/gdy?utm_term=usmc+promotion+warrant+pdf
Content-type: application/x-www-form-urlencoded
CF-Challenge: efba59edca5852f
Content-Length: 2499
Origin: http://nibofefudegozu.yftejum.com
DNT: 1
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 04 May 2024 13:42:50 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
cf-chl-out-s: CWs0/NCk8rs7pf4kHx5I5A==$EUyHBXgoRZy11+pBNv1/Ww==
cf-chl-out: i0JeOYVli75gt4ieSfmeV2XikgRsjU0W0d+5ArOMNrVgj0MMDqiBqtuteK86T40rv7e+Be5zcbajjGBpzJ5U1JX3A1AvHj57fjAZ3FOWkO4=$zfl/kxTUlgiYzMeIkcRtTA==
vary: accept-encoding
content-encoding: gzip
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=T6TjVARD1VDeknrjNYaEyHC5ToorgI3OZ9JVKIp0ZotaLoPRZR7zpBWRdNeiKz8mp6IvjoxY13yUv0zMdfGc%2BQDLMkWusr7ggkBcWJqsT6GQKh725m%2FEsUC2pWCEIHn2ac%2FIIwKnjF%2BFyZGzng%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 87e8ea977e84b527-OSL
alt-svc: h2=":443"; ma=60
|
|
| nibofefudegozu.yftejum.com/gdy?utm_term=usmc+promotion+warrant+pdf | 172.67.215.147 | 403 Forbidden | 5.9 kB |
URL User Request GET HTTP/1.1nibofefudegozu.yftejum.com/gdy?utm_term=usmc+promotion+warrant+pdf IP172.67.215.147:80
File typeHTML document, ASCII text, with very long lines (14506), with no line terminators Hash3e15e207da5b74bbfcf7672db6452cfb c81eaa1aae6b810d29d352615ea9f50ad809f117 f72b3658c4375f09cad564ec80712913117dac52570cdf2c557d6b5f5f1f827b
GET /gdy?utm_term=usmc+promotion+warrant+pdf HTTP/1.1
Host: nibofefudegozu.yftejum.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Cookie: cf_chl_rc_i=1
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 403 Forbidden
Date: Sat, 04 May 2024 13:42:52 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
Accept-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
Cross-Origin-Embedder-Policy: require-corp
Cross-Origin-Opener-Policy: same-origin
Cross-Origin-Resource-Policy: same-origin
Origin-Agent-Cluster: ?1
Permissions-Policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()
Referrer-Policy: same-origin
X-Frame-Options: SAMEORIGIN
cf-mitigated: challenge
cf-chl-out: ajpcr4Rs7xOnMCY0aRKyKhVs+3UE/RDNGP5hXkJ0R8wwaD3TmzGh0ac5JQVFmfbcCzmR5GbVygKjK5T03lKmcjjnbRtI5XHWDF73gy+/2UI=$6Li3FFgwLZRYFb3u443aPg==
Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=teGlfDWpFZ4DI2gwqlNaWo1nX69In%2F0r%2B1bAMN4ZOf5nJJaW8jIcOijlOwCgYFoMGaXEnFfhMy2wQF1XX2a%2Bn37Yu8D8z2ueQgbgJUt4qIVYdUJtlNYr5OofVRWxnbJBCS45CFFZnIgcpOwr0w%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 87e8eaa44f44b527-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
|
|
| nibofefudegozu.yftejum.com/cdn-cgi/challenge-platform/h/g/orchestrate/chl_page/v1?ray=87e8eaa44f44b527 | 172.67.215.147 | | 113 kB |
URL nibofefudegozu.yftejum.com/cdn-cgi/challenge-platform/h/g/orchestrate/chl_page/v1?ray=87e8eaa44f44b527 IP172.67.215.147:0
File typeJavaScript source, ASCII text, with very long lines (65536), with no line terminators Size113 kB (113112 bytes) Hash41c8b248654c915167a019ec6c88f5a2 b03078735cc84550f49068ab0aead5d8ecaafb3b 396a0c313ce02af6be30ed032c2a81f40f24c452bc19b8affa076e375c53c672
GET /cdn-cgi/challenge-platform/h/g/orchestrate/chl_page/v1?ray=87e8eaa44f44b527 HTTP/1.1
Host: nibofefudegozu.yftejum.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://nibofefudegozu.yftejum.com/gdy?utm_term=usmc+promotion+warrant+pdf&__cf_chl_rt_tk=Pcp82InSUrYPVXhz1rXmhJVI4M15lDQA4oxNUWLyt1g-1714830172-0.0.1.1-1301
DNT: 1
Connection: keep-alive
Cookie: cf_chl_rc_i=1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 04 May 2024 13:42:52 GMT
Content-Type: application/javascript; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
vary: accept-encoding
content-encoding: gzip
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=z7zC1jR24VeMO5JvkmqxaDmpBgyhkUwyCqW95hDBGhU17qPzISOquxw%2BaP0SW0FXNDXCAuwml%2FQXFjwj36xnruelqIu7gGyIouCYYh%2FQjkw%2FCqwJ95axxo6hFAwwCzy7s8mwI7LTFrWrg9zveg%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 87e8eaa49d68568b-OSL
alt-svc: h2=":443"; ma=60
|
|
| nibofefudegozu.yftejum.com/favicon.ico | 172.67.215.147 | | 5.8 kB |
URL GET nibofefudegozu.yftejum.com/favicon.ico IP172.67.215.147:0
Requested byhttp://nibofefudegozu.yftejum.com/gdy?utm_term=usmc+promotion+warrant+pdf
File typeHTML document, ASCII text, with very long lines (14382), with no line terminators Hash776088f1ac225e1459915ab3b07f80d4 f2afb4961066044852465564006377f344e1005b d85bcea759d7d8880f82fc5a93015387fc318f775611aa0ac7df2c274fa446c4
GET /favicon.ico HTTP/1.1
Host: nibofefudegozu.yftejum.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://nibofefudegozu.yftejum.com/gdy?utm_term=usmc+promotion+warrant+pdf&__cf_chl_rt_tk=Pcp82InSUrYPVXhz1rXmhJVI4M15lDQA4oxNUWLyt1g-1714830172-0.0.1.1-1301
DNT: 1
Connection: keep-alive
Cookie: cf_chl_rc_i=1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 403 Forbidden
Date: Sat, 04 May 2024 13:42:52 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
Accept-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
Cross-Origin-Embedder-Policy: require-corp
Cross-Origin-Opener-Policy: same-origin
Cross-Origin-Resource-Policy: same-origin
Origin-Agent-Cluster: ?1
Permissions-Policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()
Referrer-Policy: same-origin
X-Frame-Options: SAMEORIGIN
cf-mitigated: challenge
cf-chl-out: iLFyCPYRwuawo5GxEbD/H+SW/KG/jxq9+T88PZ7CrJJZQ4zUWGUdpRr70pY7iIoPTqiexGVqmzBchA3+wt+b0RnlAKOFmr5QezvK6PxXyCA=$iQ/J6lMaSd8+U0yl2c6FZQ==
Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=bQLCW9hGweORv07h6uffDL3YfKAXAbNJXJUNKAWN42upngop3dsHK1WdJNMjT%2B7VowvqrAKvpUagO6qY30KOenJ5hbSKtL9gVeN6HcAMePysPJsFjn7P%2FVe8A2x5QFybBEIpTBsbPDCEhGqURA%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 87e8eaa4edd1568b-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
|
|
| nibofefudegozu.yftejum.com/favicon.ico | 172.67.215.147 | | 5.8 kB |
URL GET nibofefudegozu.yftejum.com/favicon.ico IP172.67.215.147:0
Requested byhttp://nibofefudegozu.yftejum.com/gdy?utm_term=usmc+promotion+warrant+pdf
File typeHTML document, ASCII text, with very long lines (14296), with no line terminators Hash3dfd66bab59f435a98bf7962433fc5f1 1f85c59d22fe364c2d26036a0adc594bfa74f9e4 b4d22d911bb3db431d7d2e1a79494958c8ac04a49d67bb71f20b30c74a05f1d3
GET /favicon.ico HTTP/1.1
Host: nibofefudegozu.yftejum.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://nibofefudegozu.yftejum.com/gdy?utm_term=usmc+promotion+warrant+pdf
DNT: 1
Connection: keep-alive
Cookie: cf_chl_rc_i=1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 403 Forbidden
Date: Sat, 04 May 2024 13:42:53 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
Accept-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
Cross-Origin-Embedder-Policy: require-corp
Cross-Origin-Opener-Policy: same-origin
Cross-Origin-Resource-Policy: same-origin
Origin-Agent-Cluster: ?1
Permissions-Policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()
Referrer-Policy: same-origin
X-Frame-Options: SAMEORIGIN
cf-mitigated: challenge
cf-chl-out: ffcjGWwkNDxKNI9mMMios0w/3fbJliP+flBifD2vP3nxv3cZInzS+4NdoJYvWkRGBGV2KVoa9nrfk5nMR6f3KROI8LQVTpxcu6CD7rkSFmU=$xFVMCIVd+O7oZmRIKWkwpg==
Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=CUcV5pMrhMWrOo%2Bh9lCyucPo6Vic5yM%2FU8FX26I4bXSWHiJHvvkWBbwf9yGtU%2FKbps6Krvzu7GC%2Byg8zUaIKEPXHjUv9qHfkwqDSsPnsF8nagstoOJ6SoS6x4WN300ec1ZiKXSZ7OfDSOfN3TQ%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 87e8eaa53e557127-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
|
|
| nibofefudegozu.yftejum.com/cdn-cgi/challenge-platform/h/g/flow/ov1/2051415837:1714829416:Fi-T2_SSw3xeXaEav9CWYsmIUAGrrUkvphgcK7H60wc/87e8eaa44f44b527/d5aef18d3b5d0dd | 172.67.215.147 | | 12 kB |
URL nibofefudegozu.yftejum.com/cdn-cgi/challenge-platform/h/g/flow/ov1/2051415837:1714829416:Fi-T2_SSw3xeXaEav9CWYsmIUAGrrUkvphgcK7H60wc/87e8eaa44f44b527/d5aef18d3b5d0dd IP172.67.215.147:0
File typeASCII text, with very long lines (16216), with no line terminators Hash3e6cf658a3b946a02f3464359c90311b 4bf19300a49ee3d5dde19c3ee62340a852cd8c56 2a72badc7a5ae80926ccb02e106a630df5e1704aa02ff4170b961638493275b6
POST /cdn-cgi/challenge-platform/h/g/flow/ov1/2051415837:1714829416:Fi-T2_SSw3xeXaEav9CWYsmIUAGrrUkvphgcK7H60wc/87e8eaa44f44b527/d5aef18d3b5d0dd HTTP/1.1
Host: nibofefudegozu.yftejum.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://nibofefudegozu.yftejum.com/gdy?utm_term=usmc+promotion+warrant+pdf
Content-type: application/x-www-form-urlencoded
CF-Challenge: d5aef18d3b5d0dd
Content-Length: 1792
Origin: http://nibofefudegozu.yftejum.com
DNT: 1
Connection: keep-alive
Cookie: cf_chl_rc_i=1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 04 May 2024 13:42:53 GMT
Content-Type: text/plain; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
cf-chl-gen: RtQ6Ra7VX/eFEGLmVc19UMGs74rWM8QjCje6eYI6F6+Y5H1BS24wnuYD+Z8W5UPW$m0K7g4wZ7jQtTcPiSNz6dA==
vary: accept-encoding
content-encoding: gzip
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=MVn2MhT7qFcQxyvBbETrcZ7dBejauPq7F4EKJlj3a%2FKcx1oxhTQlnqwcrVR%2BXuEJkcxL2QLM4QCu8bm%2Fz%2FXKG1sqTOo0vXAEktgmbHUgqYrfoM0ekFE5XuPkFrImQy7pUcIch%2BWsZ7Y%2BP83sEQ%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 87e8eaa60cc9712d-OSL
alt-svc: h2=":443"; ma=60
|
|
| challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/vaot6/0x4AAAAAAAAjq6WYeRDKmebM/light/normal | 104.17.2.184 | | 26 kB |
URL challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/vaot6/0x4AAAAAAAAjq6WYeRDKmebM/light/normal IP104.17.2.184:0
File typeHTML document, ASCII text, with very long lines (41702) Hash57b1d1824c24bd6bf85c4199028b6ef5 372c95941a440ffcfe54a33fb499d22c72a4daf5 57ec621fd3ba0af4ddd88d0beb638d94e9f23664db118be3cfafd1861ecdff27
GET /cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/vaot6/0x4AAAAAAAAjq6WYeRDKmebM/light/normal HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 04 May 2024 13:42:53 GMT
content-type: text/html; charset=UTF-8
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin
critical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
document-policy: js-profiling
origin-agent-cluster: ?1
cross-origin-embedder-policy: require-corp
referrer-policy: same-origin
content-security-policy: frame-src https://challenges.cloudflare.com/ blob:; base-uri 'self'
permissions-policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()
accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
vary: accept-encoding
server: cloudflare
cf-ray: 87e8eaa6c95a0b31-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/orchestrate/chl_api/v1?ray=87e8eaa6c95a0b31 | 104.17.2.184 | | 183 kB |
URL challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/orchestrate/chl_api/v1?ray=87e8eaa6c95a0b31 IP104.17.2.184:0
File typeJavaScript source, ASCII text, with very long lines (65536), with no line terminators Size183 kB (183377 bytes) Hash5d36bd6e0dd118a6565e157847dfeced 1b7d1f260c8c8d25090995d9024c04cadc5aee42 1a6390cf85c9d2637db2aca5673b47c57a506984e7c73ca39b66eaf298483872
GET /cdn-cgi/challenge-platform/h/g/orchestrate/chl_api/v1?ray=87e8eaa6c95a0b31 HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/vaot6/0x4AAAAAAAAjq6WYeRDKmebM/light/normal
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 04 May 2024 13:42:53 GMT
content-type: application/javascript; charset=UTF-8
cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
vary: accept-encoding
server: cloudflare
cf-ray: 87e8eaa749d30b31-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/i/87e8eaa6c95a0b31/1714830173636/tg1uPYdswTeqJFl | 104.17.2.184 | | 61 B |
URL challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/i/87e8eaa6c95a0b31/1714830173636/tg1uPYdswTeqJFl IP104.17.2.184:0
File typePNG image data, 35 x 6, 8-bit/color RGB, non-interlaced Hashac08decdf9f086aa78f34636478c3368 25056ee1345421d642ccd837ee79f7c9c1cadfb2 2854ed4d96dea39a2cfce961fad2b70736aa48bbf9ddaabca8d49b7c220c0a0f
GET /cdn-cgi/challenge-platform/h/g/i/87e8eaa6c95a0b31/1714830173636/tg1uPYdswTeqJFl HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/vaot6/0x4AAAAAAAAjq6WYeRDKmebM/light/normal
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 04 May 2024 13:42:55 GMT
content-type: image/png
content-length: 61
server: cloudflare
cf-ray: 87e8eab6ff650b31-OSL
alt-svc: h3=":443"; ma=86400
|
|
| challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/flow/ov1/1953809513:1714829576:8G9qPvL4RZVPfWOQ82Xe4iMXWj3e24tg17h2OnxI8Vc/87e8eaa6c95a0b31/fc92cdba2b5c2d0 | 104.17.2.184 | | 23 kB |
URL challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/flow/ov1/1953809513:1714829576:8G9qPvL4RZVPfWOQ82Xe4iMXWj3e24tg17h2OnxI8Vc/87e8eaa6c95a0b31/fc92cdba2b5c2d0 IP104.17.2.184:0
File typeASCII text, with very long lines (22288), with no line terminators Hash40e1390dccf74ad91e41ec2a1d0d4982 7f97e283fe193d864fd1b38c843c5bd3a697b7a8 769e43934b87d3fe32fb216c3173bc63594d04668e97dfd174b06001ecf28d93
POST /cdn-cgi/challenge-platform/h/g/flow/ov1/1953809513:1714829576:8G9qPvL4RZVPfWOQ82Xe4iMXWj3e24tg17h2OnxI8Vc/87e8eaa6c95a0b31/fc92cdba2b5c2d0 HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/vaot6/0x4AAAAAAAAjq6WYeRDKmebM/light/normal
Content-type: application/x-www-form-urlencoded
CF-Challenge: fc92cdba2b5c2d0
Content-Length: 27258
Origin: https://challenges.cloudflare.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 04 May 2024 13:42:56 GMT
content-type: text/plain; charset=UTF-8
cf-chl-gen: ZJamCKGIHJwx7k4P7o9p2GseUxnk16fABmLTN88EARo/0LNejEk5vXt6LNxPcsxR$tk9y3b6s4M1dqhjt6Z0Bcg==
vary: accept-encoding
server: cloudflare
cf-ray: 87e8eab7e8940b31-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| nibofefudegozu.yftejum.com/gdy?utm_term=usmc+promotion+warrant+pdf | 172.67.215.147 | 403 Forbidden | 5.9 kB |
URL User Request GET HTTP/1.1nibofefudegozu.yftejum.com/gdy?utm_term=usmc+promotion+warrant+pdf IP172.67.215.147:80
File typeHTML document, ASCII text, with very long lines (14485), with no line terminators Hash2964e8fccab87b80cbd3755387b5a3ef deeb0baa2fb68b56fd90e8fc1db56c27f0cb64fb a926a87381f92c80d1ac22a3f59c362126dd8dde4cec2284b9524cc52dbd89ca
GET /gdy?utm_term=usmc+promotion+warrant+pdf HTTP/1.1
Host: nibofefudegozu.yftejum.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Cookie: cf_chl_rc_i=2
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 403 Forbidden
Date: Sat, 04 May 2024 13:43:04 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
Accept-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
Cross-Origin-Embedder-Policy: require-corp
Cross-Origin-Opener-Policy: same-origin
Cross-Origin-Resource-Policy: same-origin
Origin-Agent-Cluster: ?1
Permissions-Policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()
Referrer-Policy: same-origin
X-Frame-Options: SAMEORIGIN
cf-mitigated: challenge
cf-chl-out: ctmzGR40xxLGus5AVvbf9DKCi8A4jbH+6jdyktduzenCegZa6CdnPHE8dy6mD+DUx3vRVzDPuv91klfcG9Pqe/KShkHKWs0HIsJVSf9eE3w=$PAn9G74Sd/wE74qHzXvJsg==
Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=5bWaNEdqOIZtzUwMU6uD9qv6pybSQwpxAYEn541uboIXsvByTuuRFsiuhKsxjdpoWIJKXOQWH8OSgcl4DS6oLP%2FitC330g9N3tVOWgZUnTcKvom7Ggw4ecOC9ZgJKxnrbzz9OagXmdMKGQUJNA%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 87e8eaec3ec5712d-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
|
|
| nibofefudegozu.yftejum.com/cdn-cgi/challenge-platform/h/g/orchestrate/chl_page/v1?ray=87e8eaec3ec5712d | 172.67.215.147 | 200 OK | 116 kB |
URL GET HTTP/1.1nibofefudegozu.yftejum.com/cdn-cgi/challenge-platform/h/g/orchestrate/chl_page/v1?ray=87e8eaec3ec5712d IP172.67.215.147:80
Requested byhttp://nibofefudegozu.yftejum.com/gdy?utm_term=usmc+promotion+warrant+pdf
File typeJavaScript source, ASCII text, with very long lines (65536), with no line terminators Size116 kB (116478 bytes) Hash02e6d7e4cb426eb235e1ddffb6bdbb14 0182d1fce298797c9b0bd539d032b3d82fa70c5e 18598855c8768fed9061151fd7da9f47f1632f1153bb0ca33c1eed0af0500784
GET /cdn-cgi/challenge-platform/h/g/orchestrate/chl_page/v1?ray=87e8eaec3ec5712d HTTP/1.1
Host: nibofefudegozu.yftejum.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://nibofefudegozu.yftejum.com/gdy?utm_term=usmc+promotion+warrant+pdf&__cf_chl_rt_tk=b.S.VzsyjHtkS641BOMIZXVkMzGUPDoZg_pf74V0A4s-1714830184-0.0.1.1-1301
DNT: 1
Connection: keep-alive
Cookie: cf_chl_rc_i=2
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 04 May 2024 13:43:04 GMT
Content-Type: application/javascript; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
vary: accept-encoding
content-encoding: gzip
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=TtaK0bZg0%2Bqra3NTKpz%2BSGoBd%2BQBsdcwgg38LC0nQ9Gy%2BbPdpHRnHLVVkP19DT7jy3IbNtV2ty3zvBe41JYgdNsjr46odmx%2BPk6wtkmXTly4IJgr8Aqd8Y1r0lXdodx03SFi0Pin3vgn1LAWag%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 87e8eaeca8ddb4f9-OSL
alt-svc: h2=":443"; ma=60
|
|
| nibofefudegozu.yftejum.com/favicon.ico | 172.67.215.147 | | 5.8 kB |
URL GET nibofefudegozu.yftejum.com/favicon.ico IP172.67.215.147:0
Requested byhttp://nibofefudegozu.yftejum.com/gdy?utm_term=usmc+promotion+warrant+pdf
File typeHTML document, ASCII text, with very long lines (14382), with no line terminators Hash3cf3cbb14380477e505ce4709157f14f af753c3efb8eba3df9b3791981ddd9612ad425ea db75d6bbb3b9e3c1619487bdba95ab71058713085eb5d87a0cf81af0048224e2
GET /favicon.ico HTTP/1.1
Host: nibofefudegozu.yftejum.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://nibofefudegozu.yftejum.com/gdy?utm_term=usmc+promotion+warrant+pdf&__cf_chl_rt_tk=b.S.VzsyjHtkS641BOMIZXVkMzGUPDoZg_pf74V0A4s-1714830184-0.0.1.1-1301
DNT: 1
Connection: keep-alive
Cookie: cf_chl_rc_i=2
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 403 Forbidden
Date: Sat, 04 May 2024 13:43:04 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
Accept-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
Cross-Origin-Embedder-Policy: require-corp
Cross-Origin-Opener-Policy: same-origin
Cross-Origin-Resource-Policy: same-origin
Origin-Agent-Cluster: ?1
Permissions-Policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()
Referrer-Policy: same-origin
X-Frame-Options: SAMEORIGIN
cf-mitigated: challenge
cf-chl-out: gJVOMIi+GcVlna/7Tl5s/cRJzAjYcWhKLXUng9D8Dk48wo3v9x0j+GUqkBB2aKWSHxxzz4xIF9vsSNBVzrdzw0w1Nl70UAQg317VrTbM8Eg=$7pmS2+jp3Q4rPsmUtxatog==
Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=F%2BOWatFO1o0l3afgg%2FMw5YOMdaW4Fdu9pvWdTL0l3JO4bDcv23n6cnfJJ%2FCtzulGC1CJZ58OIlQaOnfhu3ofasuFsoQ3Zr3y4Vamu5BYVc53qoaEAyMszPrp0jdYErdQdyFzq%2FovEqUUZPRPuQ%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 87e8eaed0965b4f9-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
|
|
| nibofefudegozu.yftejum.com/favicon.ico | 172.67.215.147 | | 5.8 kB |
URL GET nibofefudegozu.yftejum.com/favicon.ico IP172.67.215.147:0
Requested byhttp://nibofefudegozu.yftejum.com/gdy?utm_term=usmc+promotion+warrant+pdf
File typeHTML document, ASCII text, with very long lines (14296), with no line terminators Hash7fb2a62939f7d6ed11d676471191770f 084fa5abb8c2b9ec0bad0ecd088a0bdb7a679714 ea9d17e907f6c5547717e30a1b6d6e37a7edf943295f43d886a9cba2d82f82af
GET /favicon.ico HTTP/1.1
Host: nibofefudegozu.yftejum.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://nibofefudegozu.yftejum.com/gdy?utm_term=usmc+promotion+warrant+pdf
DNT: 1
Connection: keep-alive
Cookie: cf_chl_rc_i=2
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 403 Forbidden
Date: Sat, 04 May 2024 13:43:04 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
Accept-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
Cross-Origin-Embedder-Policy: require-corp
Cross-Origin-Opener-Policy: same-origin
Cross-Origin-Resource-Policy: same-origin
Origin-Agent-Cluster: ?1
Permissions-Policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()
Referrer-Policy: same-origin
X-Frame-Options: SAMEORIGIN
cf-mitigated: challenge
cf-chl-out: bWZbY4oaM0mEez4sggDBYug8+B8Upz1KAMOhKeLcloYmBf2OB/hpXViDbrmrJGRhmgxt0ZUYCdRYg5UthtyGBvjhGp4xO2tt4FdSis47HW8=$Pc9+MwL74IV3F1ho7c3Q7A==
Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=uND6PqjP2ONtsTDiGHNcOYU9Qdk3EYsVOjRnfGj2lPLNfYs25Ur0AalOxfqlRsrT20pNw8pJ%2FvnG%2BZeavFFnp8qRZNFSHwMbtNl31SeLGi8mUWTssaOaYl2NxMgR41YGkw1Ygy1Z5iz8SOZa9g%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 87e8eaed7d8bb518-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
|
|
| nibofefudegozu.yftejum.com/cdn-cgi/challenge-platform/h/g/flow/ov1/912997509:1714825915:5mIjef4CDXECPOkUijodbAYQuH-KFgY9v33nbAgGlv4/87e8eaec3ec5712d/bc521ab8ea0f1c7 | 172.67.215.147 | 200 OK | 12 kB |
URL POST HTTP/1.1nibofefudegozu.yftejum.com/cdn-cgi/challenge-platform/h/g/flow/ov1/912997509:1714825915:5mIjef4CDXECPOkUijodbAYQuH-KFgY9v33nbAgGlv4/87e8eaec3ec5712d/bc521ab8ea0f1c7 IP172.67.215.147:80
Requested byhttp://nibofefudegozu.yftejum.com/gdy?utm_term=usmc+promotion+warrant+pdf
File typeASCII text, with very long lines (16224), with no line terminators Hash5bf32b899c2a7092406026350e3454b1 f85f63bbc958ae741f91c857d858588f69c11afb 234f0072d26901f28ff52209d1766708637052d6c4b33440650f1f33715d4259
POST /cdn-cgi/challenge-platform/h/g/flow/ov1/912997509:1714825915:5mIjef4CDXECPOkUijodbAYQuH-KFgY9v33nbAgGlv4/87e8eaec3ec5712d/bc521ab8ea0f1c7 HTTP/1.1
Host: nibofefudegozu.yftejum.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://nibofefudegozu.yftejum.com/gdy?utm_term=usmc+promotion+warrant+pdf
Content-type: application/x-www-form-urlencoded
CF-Challenge: bc521ab8ea0f1c7
Content-Length: 1816
Origin: http://nibofefudegozu.yftejum.com
DNT: 1
Connection: keep-alive
Cookie: cf_chl_rc_i=2
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 04 May 2024 13:43:04 GMT
Content-Type: text/plain; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
cf-chl-gen: KhT2eEM1lhUpRHpsoIZDoFpd4OK7oyTkPyIjbLPslJwkW/hVZ89nv95c9lnfpP3c$HdGSYCxbNG+IvucUGO7bxw==
vary: accept-encoding
content-encoding: gzip
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=B1JpD8JkX1wclJHm5U84TjtJE7ycwJ3HZn5ffZqRFADZA7xz0pTt9FaVsCyuuSc9UQ20Mr2XHJgM4Dqn5LWsZRj3WpTdUzfWU%2FenGSSVg8IKtYzVYSa7Tt3jZBLxdclFYKyW%2FNYuyHwQXdFc6A%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 87e8eaee5c79712a-OSL
alt-svc: h2=":443"; ma=60
|
|
| challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/cmg/1/GLhOioXg0bs57t4qPrORXFsL1%2BWig2mIKbgpVPMu7ZQ%3D | 104.17.2.184 | | 61 B |
URL challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/cmg/1/GLhOioXg0bs57t4qPrORXFsL1%2BWig2mIKbgpVPMu7ZQ%3D IP104.17.2.184:0
File typePNG image data, 2 x 2, 8-bit/color RGB, non-interlaced Hash9246cca8fc3c00f50035f28e9f6b7f7d 3aa538440f70873b574f40cd793060f53ec17a5d c07d7d29e3c20fa6ca4c5d20663688d52bad13e129ad82ce06b80eb187d9dc84
GET /cdn-cgi/challenge-platform/h/g/cmg/1/GLhOioXg0bs57t4qPrORXFsL1%2BWig2mIKbgpVPMu7ZQ%3D HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/h8diw/0x4AAAAAAAAjq6WYeRDKmebM/light/normal
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 04 May 2024 13:43:04 GMT
content-type: image/png
content-length: 61
cache-control: max-age=2629800, public
server: cloudflare
cf-ray: 87e8eaefea2a0b31-OSL
alt-svc: h3=":443"; ma=86400
|
|
| challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/orchestrate/chl_api/v1?ray=87e8eaef49bf0b31 | 104.17.2.184 | | 169 kB |
URL challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/orchestrate/chl_api/v1?ray=87e8eaef49bf0b31 IP104.17.2.184:0
File typeJavaScript source, ASCII text, with very long lines (65536), with no line terminators Size169 kB (169413 bytes) Hash99e2ffa7ccc4aac11cc7d01816ea1d42 d32f062ab5c61dbe64f02c693143cfbbd9be3ab6 87c4fc6b9ec0bd38047e49c15bc970365b799da5ed3de4f62ed848799230cce0
GET /cdn-cgi/challenge-platform/h/g/orchestrate/chl_api/v1?ray=87e8eaef49bf0b31 HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/h8diw/0x4AAAAAAAAjq6WYeRDKmebM/light/normal
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 04 May 2024 13:43:04 GMT
content-type: application/javascript; charset=UTF-8
cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
vary: accept-encoding
server: cloudflare
cf-ray: 87e8eaefea2e0b31-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| challenges.cloudflare.com/turnstile/v0/g/d0ff3ebede6b/api.js?onload=XagHGl3&render=explicit | 0.0.0.0 | | 43 kB |
URL GET challenges.cloudflare.com/turnstile/v0/g/d0ff3ebede6b/api.js?onload=XagHGl3&render=explicit IP0.0.0.0:0
Requested byhttp://nibofefudegozu.yftejum.com/gdy?utm_term=usmc+promotion+warrant+pdf CertificateIssuerCloudflare, Inc. Subjectchallenges.cloudflare.com Fingerprint5F:E4:AA:8C:2E:24:D2:B1:69:9D:13:28:31:5C:65:FA:97:2A:E9:6E ValidityFri, 18 Aug 2023 00:00:00 GMT - Sat, 17 Aug 2024 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (42565) Hash65b0a652c40c95d12c4ddb3b4567c1ea c654efa19d01d6553ed4e0f500d350011e023ad1 c6b5cd0b65ebbb519dd845ba2979b40e58b056ca2c90f67a8bfea871d39615a7
GET /turnstile/v0/g/d0ff3ebede6b/api.js?onload=XagHGl3&render=explicit HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://nibofefudegozu.yftejum.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 13:43:04 GMT
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
cache-control: max-age=31536000
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding
server: cloudflare
cf-ray: 87e8eaed88650b31-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/h8diw/0x4AAAAAAAAjq6WYeRDKmebM/light/normal | 0.0.0.0 | | 80 kB |
URL GET challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/h8diw/0x4AAAAAAAAjq6WYeRDKmebM/light/normal IP0.0.0.0:0
Requested byhttp://nibofefudegozu.yftejum.com/gdy?utm_term=usmc+promotion+warrant+pdf CertificateIssuerCloudflare, Inc. Subjectchallenges.cloudflare.com Fingerprint5F:E4:AA:8C:2E:24:D2:B1:69:9D:13:28:31:5C:65:FA:97:2A:E9:6E ValidityFri, 18 Aug 2023 00:00:00 GMT - Sat, 17 Aug 2024 23:59:59 GMT
File typeHTML document, ASCII text, with very long lines (41702) Hashb551d4e28132252442c9aa79d15dd32d d503f6cc713945b32c2b241eff4424556e26e6ab 3978ba475b51ce976eb9db6ffa5610ac72afe9d977a7f89f3bb8fa4d228fd406
GET /cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/h8diw/0x4AAAAAAAAjq6WYeRDKmebM/light/normal HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 13:43:04 GMT
content-type: text/html; charset=UTF-8
cross-origin-resource-policy: cross-origin
content-security-policy: frame-src https://challenges.cloudflare.com/ blob:; base-uri 'self'
permissions-policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()
origin-agent-cluster: ?1
critical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
cross-origin-embedder-policy: require-corp
referrer-policy: same-origin
accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
document-policy: js-profiling
cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
cross-origin-opener-policy: same-origin
vary: accept-encoding
server: cloudflare
cf-ray: 87e8eaef49bf0b31-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|