| foliaencantada.com.br/cgi-bin/auth/2/am93ZW5zQGJrZm9yZC5jb20= | 108.179.252.148 | | 0 B |
URL foliaencantada.com.br/cgi-bin/auth/2/am93ZW5zQGJrZm9yZC5jb20= IP108.179.252.148:0 ASN#19871 NETWORK-SOLUTIONS-HOSTING
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer | Verdict | Alert | urlquery | phishing | Phishing - Microsoft Outlook |
GET /cgi-bin/auth/2/am93ZW5zQGJrZm9yZC5jb20= HTTP/1.1
Host: foliaencantada.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 24 Apr 2024 19:31:33 GMT
server: nginx/1.23.4
content-type: text/html; charset=UTF-8
content-length: 0
refresh: 0;url=https://link.mail.beehiiv.com/ls/click?upn=u001.Nq-2Bwv5d-2Fp8t7aJzFPq57Cnk3gsi-2F-2BrdVbZy-2FRq9Xoh9CssT0icF94SeYqDh4PnSbMBk-2FigXZgJaS-2FYebPfhp8sRXvIzjkT8dU-2B6sjpF7dD3vqNe9Gcduj9y2ivhIkmc6oESJuSIcVtFAMQqEoJoPbuPRfnFpnTHJyI5p7w4htZKFdB7mQ-2FX5wPx7V4qlBxaCw4L3_6vELXDU9KZ1iFJaR21H6607UfE8a5rAlES7g2JPVe78ychpezAp9z7qTJ6rc6w6PAc4G-2FhEDcs2bgwt0G4zD0-2FIAtdo7BiHlCEQvoCXbFdeQwGYwBZrfGS96REdKNfnDL-2BJicmGtuqwsZmTFeDPcY8qVHPs-2FPDU1x4aDTPOh3WYcckJvICEkn66978YyxZWihV-2F6lWyKTx4ZlB8MuFA8w8kBJhAwAi8TS76Vq7LWM7tpE46aEs8C3X6VcoR2bqax-2FMp5nDADTirzUBKZT-2FA4xMoXF0u8eJgNx9bD35OTSMmqzOF8h4wLUniuTbVPTEEMRZR2DmkrXbEzLOWxz8sAfX4t4AsqDbRmMxiipBoOpl0YD6iN0R9yW64k09emgoSIvZ-2BpwPOLr04ZlEMFlWVdAlJ3xcR9R3g0nUGwxUiYW3s-2BoBzU3m-2FY8smcbZmB-2BQ-2F5#jowens@bkford.com
cache-control: max-age=7200
expires: Wed, 24 Apr 2024 21:31:33 GMT
x-endurance-cache-level: 2
x-nginx-cache: WordPress
x-server-cache: false
X-Firefox-Spdy: h2
|
|
| educdtmonline.com/pg?utm_source=theresas-newsletter-9e90b6.beehiiv.com&utm_medium=newsletter&utm_campaign=calfrist-time | 81.25.127.181 | | 344 B |
URL educdtmonline.com/pg?utm_source=theresas-newsletter-9e90b6.beehiiv.com&utm_medium=newsletter&utm_campaign=calfrist-time IP81.25.127.181:0 ASN#41541 sw hosting & communications technologies SL
File typeHTML document, ASCII text Hashddbb2cf2db173a6e7a28ac4ef6803434 faa61f9db6fa52dac45fbd2d780d0f49bdce072b 50eefc1e75e448355c850494dbe6eeb511daaef36716212386e7453a1e84d1a7
GET /pg?utm_source=theresas-newsletter-9e90b6.beehiiv.com&utm_medium=newsletter&utm_campaign=calfrist-time HTTP/1.1
Host: educdtmonline.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 301 Moved Permanently
Date: Wed, 24 Apr 2024 19:31:32 GMT
Server: Apache
Location: https://educdtmonline.com/pg/?utm_source=theresas-newsletter-9e90b6.beehiiv.com&utm_medium=newsletter&utm_campaign=calfrist-time
Content-Length: 344
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
|
|
| educdtmonline.com/pg/?utm_source=theresas-newsletter-9e90b6.beehiiv.com&utm_medium=newsletter&utm_campaign=calfrist-time | 81.25.127.181 | | 416 B |
URL educdtmonline.com/pg/?utm_source=theresas-newsletter-9e90b6.beehiiv.com&utm_medium=newsletter&utm_campaign=calfrist-time IP81.25.127.181:0 ASN#41541 sw hosting & communications technologies SL
File typeHTML document, ASCII text, with CRLF line terminators Hash00b241b3b2f3545f72d71c6c83bf73f6 a79fa765a543884e4fdfb20d490177538cf0a145 ba87dc1935eb2a3e4ffe67f59f5d3b438464e14b434d6f5eff49dfeb20abe745
GET /pg/?utm_source=theresas-newsletter-9e90b6.beehiiv.com&utm_medium=newsletter&utm_campaign=calfrist-time HTTP/1.1
Host: educdtmonline.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 24 Apr 2024 19:31:32 GMT
Server: Apache
Last-Modified: Wed, 24 Apr 2024 16:21:54 GMT
Accept-Ranges: bytes
Content-Length: 416
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: text/html
|
|
| challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/cmg/1/GLhOioXg0bs57t4qPrORXFsL1%2BWig2mIKbgpVPMu7ZQ%3D | 104.17.3.184 | 200 OK | 61 B |
URL GET HTTP/3challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/cmg/1/GLhOioXg0bs57t4qPrORXFsL1%2BWig2mIKbgpVPMu7ZQ%3D IP104.17.3.184:443
Requested byhttps://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/atlv1/0x4AAAAAAADnPIDROrmt1Wwj/light/normal CertificateIssuerCloudflare, Inc. Subjectchallenges.cloudflare.com Fingerprint5F:E4:AA:8C:2E:24:D2:B1:69:9D:13:28:31:5C:65:FA:97:2A:E9:6E ValidityFri, 18 Aug 2023 00:00:00 GMT - Sat, 17 Aug 2024 23:59:59 GMT
File typePNG image data, 2 x 2, 8-bit/color RGB, non-interlaced Hash9246cca8fc3c00f50035f28e9f6b7f7d 3aa538440f70873b574f40cd793060f53ec17a5d c07d7d29e3c20fa6ca4c5d20663688d52bad13e129ad82ce06b80eb187d9dc84
GET /cdn-cgi/challenge-platform/h/b/cmg/1/GLhOioXg0bs57t4qPrORXFsL1%2BWig2mIKbgpVPMu7ZQ%3D HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/pru3t/0x4AAAAAAADnPIDROrmt1Wwj/light/normal
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 24 Apr 2024 19:31:35 GMT
content-type: image/png
content-length: 61
cache-control: max-age=2629800, public
server: cloudflare
cf-ray: 879883b0deaa7130-OSL
alt-svc: h3=":443"; ma=86400
|
|
| challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/i/879883b06e167130/1713987095486/xX4ghpNMNRx6Crw | 104.17.3.184 | | 61 B |
URL challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/i/879883b06e167130/1713987095486/xX4ghpNMNRx6Crw IP104.17.3.184:0
CertificateIssuerCloudflare, Inc. Subjectchallenges.cloudflare.com Fingerprint5F:E4:AA:8C:2E:24:D2:B1:69:9D:13:28:31:5C:65:FA:97:2A:E9:6E ValidityFri, 18 Aug 2023 00:00:00 GMT - Sat, 17 Aug 2024 23:59:59 GMT
File typePNG image data, 43 x 42, 8-bit/color RGB, non-interlaced Hashfcb93760912cd5c549322c4813965811 3bf8f9b7ac78c690357a621bd26b385fa8b68967 e95041f21c036da764444faf8a470cc13b2b74fa8ff18e15f0e7455c70a295fb
GET /cdn-cgi/challenge-platform/h/b/i/879883b06e167130/1713987095486/xX4ghpNMNRx6Crw HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/pru3t/0x4AAAAAAADnPIDROrmt1Wwj/light/normal
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 24 Apr 2024 19:31:36 GMT
content-type: image/png
content-length: 61
server: cloudflare
cf-ray: 879883b98aa57130-OSL
alt-svc: h3=":443"; ma=86400
|
|
| challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/pat/879883b06e167130/1713987095487/7c8c48ab2eeb4afc0b40646526746346f3303a86e153af1a3ad3caf2771c5941/fgkABsa3kWulrSp | 104.17.3.184 | | 1 B |
URL challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/pat/879883b06e167130/1713987095487/7c8c48ab2eeb4afc0b40646526746346f3303a86e153af1a3ad3caf2771c5941/fgkABsa3kWulrSp IP104.17.3.184:0
CertificateIssuerCloudflare, Inc. Subjectchallenges.cloudflare.com Fingerprint5F:E4:AA:8C:2E:24:D2:B1:69:9D:13:28:31:5C:65:FA:97:2A:E9:6E ValidityFri, 18 Aug 2023 00:00:00 GMT - Sat, 17 Aug 2024 23:59:59 GMT
File typevery short file (no magic) Hashff44570aca8241914870afbc310cdb85 58668e7669fd564d99db5d581fcdb6a5618440b5 6da43b944e494e885e69af021f93c6d9331c78aa228084711429160a5bbd15b5
GET /cdn-cgi/challenge-platform/h/b/pat/879883b06e167130/1713987095487/7c8c48ab2eeb4afc0b40646526746346f3303a86e153af1a3ad3caf2771c5941/fgkABsa3kWulrSp HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/pru3t/0x4AAAAAAADnPIDROrmt1Wwj/light/normal
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 401 Unauthorized
date: Wed, 24 Apr 2024 19:31:36 GMT
content-type: text/plain; charset=UTF-8
content-length: 1
www-authenticate: PrivateToken challenge="AAIAGXBhdC1pc3N1ZXIuY2xvdWRmbGFyZS5jb20gfIxIqy7rSvwLQGRlJnRjRvMwOobhU68aOtPK8nccWUEAGWNoYWxsZW5nZXMuY2xvdWRmbGFyZS5jb20=", token-key="MIIBUjA9BgkqhkiG9w0BAQowMKANMAsGCWCGSAFlAwQCAqEaMBgGCSqGSIb3DQEBCDALBglghkgBZQMEAgKiAwIBMAOCAQ8AMIIBCgKCAQEApc5PUXcXSrXwpeNe3kT6EaAJPDsPBMfFZc7M608yW3JV6YSHiGBLoFiLtNHD3Yj8UsOtWbQeFa2uvS_dYz5MBsoSW4-RbOY-WCB2aGEB-eoRbXl4lJRl0UNGi00lNBgNTil_mTTSNV3ssSkmSY8kwM-5GqBNfJ2kmJPKo02MWiXn1pwc4YXbeATUrYDRvvXUXYZrgaarjDyvHFhnYpD3mqr5qOj_TS_1SCUZ0HIp8ywDX06Xc59cKjzFHEUzD3gWutoK4apMxNt9bWWxcH3D_UL1a1llCxh-knMwTxgvRXS-XHap_ymO2zCuAPNgo1SDCTl4lTQZbVX7VvpDZwMaiQIDAQAB", max-age=20, PrivateToken challenge="AAIALHBwLWlzc3Vlci1wcm9kdWN0aW9uLnJlc2VhcmNoLmNsb3VkZmxhcmUuY29tIHyMSKsu60r8C0BkZSZ0Y0bzMDqG4VOvGjrTyvJ3HFlBABljaGFsbGVuZ2VzLmNsb3VkZmxhcmUuY29t", token-key="MIIBUjA9BgkqhkiG9w0BAQowMKANMAsGCWCGSAFlAwQCAqEaMBgGCSqGSIb3DQEBCDALBglghkgBZQMEAgKiAwIBMAOCAQ8AMIIBCgKCAQEA1FEYykHcK8H9rb_u0aFz3CmWgYloQw4YhedoEOAjJ0vy2Axa4f9UG9Dzs4uXS34_h8l6MDo2nRCvLI9lvebilMnTjCn-6D77bewqYxJKUFZW1z2jBIdu03TrETczfEg7kxgKtJE9NXGDjYJcF_iMgzgNA0PEAVM89tUYXXlFy4cUAGlqU2mPpIEOxm5ARsXC-zlLK60fkJ4cOsZRkZa6EExdhmgdwQ0fEJuSOHrBO_-zJn4hUP8q9g4yqkxW2UrfJgD07F4HaHGBEiei06sGDvH2NEPvswEl5dTGxutNrxlU7W24iYhNa2nhjlc53nNb0mKtszv-czVE9UhXyJ7-RQIDAQAB", max-age=20
server: cloudflare
cf-ray: 879883ba1b607130-OSL
alt-svc: h3=":443"; ma=86400
|
|
| challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/cmg/1/GLhOioXg0bs57t4qPrORXFsL1%2BWig2mIKbgpVPMu7ZQ%3D | 104.17.3.184 | 200 OK | 61 B |
URL GET HTTP/3challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/cmg/1/GLhOioXg0bs57t4qPrORXFsL1%2BWig2mIKbgpVPMu7ZQ%3D IP104.17.3.184:443
Requested byhttps://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/atlv1/0x4AAAAAAADnPIDROrmt1Wwj/light/normal CertificateIssuerCloudflare, Inc. Subjectchallenges.cloudflare.com Fingerprint5F:E4:AA:8C:2E:24:D2:B1:69:9D:13:28:31:5C:65:FA:97:2A:E9:6E ValidityFri, 18 Aug 2023 00:00:00 GMT - Sat, 17 Aug 2024 23:59:59 GMT
File typePNG image data, 2 x 2, 8-bit/color RGB, non-interlaced Hash9246cca8fc3c00f50035f28e9f6b7f7d 3aa538440f70873b574f40cd793060f53ec17a5d c07d7d29e3c20fa6ca4c5d20663688d52bad13e129ad82ce06b80eb187d9dc84
GET /cdn-cgi/challenge-platform/h/b/cmg/1/GLhOioXg0bs57t4qPrORXFsL1%2BWig2mIKbgpVPMu7ZQ%3D HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/4ma5n/0x4AAAAAAADnPIDROrmt1Wwj/light/normal
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 24 Apr 2024 19:31:45 GMT
content-type: image/png
content-length: 61
cache-control: max-age=2629800, public
server: cloudflare
cf-ray: 879883f02fef7130-OSL
alt-svc: h3=":443"; ma=86400
|
|
| dr-0c-xeqstsmarter.ru/cdn-cgi/challenge-platform/h/b/orchestrate/chl_page/v1?ray=879883ed1c6b0b41 | 104.21.49.93 | | 168 kB |
URL dr-0c-xeqstsmarter.ru/cdn-cgi/challenge-platform/h/b/orchestrate/chl_page/v1?ray=879883ed1c6b0b41 IP104.21.49.93:0
File typeJavaScript source, ASCII text, with very long lines (65536), with no line terminators Size168 kB (168392 bytes) Hashb5119de781542e7561668d22742e6af7 8b2bbbc9ec6acf6641fcc6eb1f1a493dd8457c06 af4ea695d177ac89062279c1a1f2c8dabc9ca1ca0abc6e92f187e6b4cf2f3e36
GET /cdn-cgi/challenge-platform/h/b/orchestrate/chl_page/v1?ray=879883ed1c6b0b41 HTTP/1.1
Host: dr-0c-xeqstsmarter.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://dr-0c-xeqstsmarter.ru/Mjowens@bkford.com?__cf_chl_rt_tk=8zfxKQN9XCG6GIyAWw6rGoKAmhhIgzNvvrAbPeRac1A-1713987104-0.0.1.1-1621
DNT: 1
Connection: keep-alive
Cookie: cf_chl_rc_m=1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 24 Apr 2024 19:31:44 GMT
content-type: application/javascript; charset=UTF-8
cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
vary: accept-encoding
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ILudE8U7oZs1YOpwwY6u%2FgDoaxb1OhA7b1jrXAwNhkUvNiVcW8kPYytGUovpvx57pVgC1C3VFNUeSWxugEBHCq7K6%2Ft2NENqWgNpQ8jOIZYVJK%2FSZTVhavsPnY9Df1JOSqMK1JinIxg%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 879883ed5c8e0b41-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| dr-0c-xeqstsmarter.ru/cdn-cgi/challenge-platform/h/b/flow/ov1/147193257:1713983241:J5fnfCzhrqRt1qSgKw6HVRW9XFQYpEzka214y9OpeNc/879883ad9ca056b5/88c5cd76f89a157 | 104.21.49.93 | | 38 kB |
URL dr-0c-xeqstsmarter.ru/cdn-cgi/challenge-platform/h/b/flow/ov1/147193257:1713983241:J5fnfCzhrqRt1qSgKw6HVRW9XFQYpEzka214y9OpeNc/879883ad9ca056b5/88c5cd76f89a157 IP104.21.49.93:0
File typeASCII text, with very long lines (2332), with no line terminators Hashf9ea351fe9c882befe3abdc0129a6185 10e0cf43688922323e80d56bf8d7a9bfcef99c04 44a6579449f532c8de9596a3af0f31894e27c52e7f20474daa72ee690e5c83c6
POST /cdn-cgi/challenge-platform/h/b/flow/ov1/147193257:1713983241:J5fnfCzhrqRt1qSgKw6HVRW9XFQYpEzka214y9OpeNc/879883ad9ca056b5/88c5cd76f89a157 HTTP/1.1
Host: dr-0c-xeqstsmarter.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://dr-0c-xeqstsmarter.ru/Mjowens@bkford.com
Content-type: application/x-www-form-urlencoded
CF-Challenge: 88c5cd76f89a157
Content-Length: 2580
Origin: https://dr-0c-xeqstsmarter.ru
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 24 Apr 2024 19:31:42 GMT
content-type: text/html; charset=UTF-8
cf-chl-out: a3QB96482/TAUby+z64Creeh30MX8wcz0skwT8X/Z4YSu8xuaR6SvLgrSfIExLteI124irqeCZqlOVqgF4cT9uMEpINYjT2o6372n2JvvVk=$4JX0aMDmSxBjD5CRI0urJg==
cf-chl-out-s: eD/pQ739yOkSLmlzHTvwwpmtqHo7tF46rQnaTvlVkn4MO2b5khvM5En2RcAZ/Dww9jWhPnXn8X5H4BHwMiBqVVoWjBxxczXCzHh09+Z5aQg=$gpgyw6SHs2C1rHrLSS/RLw==
vary: accept-encoding
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=crY7L9a3N%2Buu7kTu9MTmFdFsmkp01KBa6zGs8OqP043dRRiFk%2Ber2sTVmFvpRZ5oDKLb3VEnMvB6DA%2Bc3qMV4LsOqR6UOnuNOF2vNA8mgN0bqPC7MyfsNNw%2FIeIRvKcvrd8q1OSBEaQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 879883e05f190b41-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/pat/879883efaf327130/1713987105606/896d3046a3643ec8ffab42bf1e5529823942626fb5a0ec43c4cc08393c15069b/H_-TcYQA25EqErd | 104.17.3.184 | | 1 B |
URL challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/pat/879883efaf327130/1713987105606/896d3046a3643ec8ffab42bf1e5529823942626fb5a0ec43c4cc08393c15069b/H_-TcYQA25EqErd IP104.17.3.184:0
CertificateIssuerCloudflare, Inc. Subjectchallenges.cloudflare.com Fingerprint5F:E4:AA:8C:2E:24:D2:B1:69:9D:13:28:31:5C:65:FA:97:2A:E9:6E ValidityFri, 18 Aug 2023 00:00:00 GMT - Sat, 17 Aug 2024 23:59:59 GMT
File typevery short file (no magic) Hashff44570aca8241914870afbc310cdb85 58668e7669fd564d99db5d581fcdb6a5618440b5 6da43b944e494e885e69af021f93c6d9331c78aa228084711429160a5bbd15b5
GET /cdn-cgi/challenge-platform/h/b/pat/879883efaf327130/1713987105606/896d3046a3643ec8ffab42bf1e5529823942626fb5a0ec43c4cc08393c15069b/H_-TcYQA25EqErd HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/4ma5n/0x4AAAAAAADnPIDROrmt1Wwj/light/normal
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 401 Unauthorized
date: Wed, 24 Apr 2024 19:31:46 GMT
content-type: text/plain; charset=UTF-8
content-length: 1
www-authenticate: PrivateToken challenge="AAIAGXBhdC1pc3N1ZXIuY2xvdWRmbGFyZS5jb20giW0wRqNkPsj_q0K_HlUpgjlCYm-1oOxDxMwIOTwVBpsAGWNoYWxsZW5nZXMuY2xvdWRmbGFyZS5jb20=", token-key="MIIBUjA9BgkqhkiG9w0BAQowMKANMAsGCWCGSAFlAwQCAqEaMBgGCSqGSIb3DQEBCDALBglghkgBZQMEAgKiAwIBMAOCAQ8AMIIBCgKCAQEApc5PUXcXSrXwpeNe3kT6EaAJPDsPBMfFZc7M608yW3JV6YSHiGBLoFiLtNHD3Yj8UsOtWbQeFa2uvS_dYz5MBsoSW4-RbOY-WCB2aGEB-eoRbXl4lJRl0UNGi00lNBgNTil_mTTSNV3ssSkmSY8kwM-5GqBNfJ2kmJPKo02MWiXn1pwc4YXbeATUrYDRvvXUXYZrgaarjDyvHFhnYpD3mqr5qOj_TS_1SCUZ0HIp8ywDX06Xc59cKjzFHEUzD3gWutoK4apMxNt9bWWxcH3D_UL1a1llCxh-knMwTxgvRXS-XHap_ymO2zCuAPNgo1SDCTl4lTQZbVX7VvpDZwMaiQIDAQAB", max-age=20, PrivateToken challenge="AAIALHBwLWlzc3Vlci1wcm9kdWN0aW9uLnJlc2VhcmNoLmNsb3VkZmxhcmUuY29tIIltMEajZD7I_6tCvx5VKYI5QmJvtaDsQ8TMCDk8FQabABljaGFsbGVuZ2VzLmNsb3VkZmxhcmUuY29t", token-key="MIIBUjA9BgkqhkiG9w0BAQowMKANMAsGCWCGSAFlAwQCAqEaMBgGCSqGSIb3DQEBCDALBglghkgBZQMEAgKiAwIBMAOCAQ8AMIIBCgKCAQEA1FEYykHcK8H9rb_u0aFz3CmWgYloQw4YhedoEOAjJ0vy2Axa4f9UG9Dzs4uXS34_h8l6MDo2nRCvLI9lvebilMnTjCn-6D77bewqYxJKUFZW1z2jBIdu03TrETczfEg7kxgKtJE9NXGDjYJcF_iMgzgNA0PEAVM89tUYXXlFy4cUAGlqU2mPpIEOxm5ARsXC-zlLK60fkJ4cOsZRkZa6EExdhmgdwQ0fEJuSOHrBO_-zJn4hUP8q9g4yqkxW2UrfJgD07F4HaHGBEiei06sGDvH2NEPvswEl5dTGxutNrxlU7W24iYhNa2nhjlc53nNb0mKtszv-czVE9UhXyJ7-RQIDAQAB", max-age=20
server: cloudflare
cf-ray: 879883f81abd7130-OSL
alt-svc: h3=":443"; ma=86400
|
|
| dr-0c-xeqstsmarter.ru/Mjowens@bkford.com | 104.21.49.93 | 403 Forbidden | 6.9 kB |
URL User Request GET HTTP/3dr-0c-xeqstsmarter.ru/Mjowens@bkford.com IP104.21.49.93:443
CertificateIssuerLet's Encrypt Subjectdr-0c-xeqstsmarter.ru Fingerprint41:1E:6D:E3:03:CC:8B:02:F8:F6:8D:E7:DC:6E:25:42:5F:7E:73:AE ValidityFri, 19 Apr 2024 12:30:18 GMT - Thu, 18 Jul 2024 12:30:17 GMT
File typeHTML document, ASCII text, with very long lines (15916), with no line terminators Hash954dd47398dca248c58237720656b3c2 e0b5341e8a6ecdbee65f917914fe5a9a574419c4 e76f9d635a161b65d95bd15c83fd2139f4f0a7d3b120aa9a1d051539f32c73cc
GET /Mjowens@bkford.com HTTP/1.1
Host: dr-0c-xeqstsmarter.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://educdtmonline.com/
DNT: 1
Connection: keep-alive
Cookie: cf_chl_rc_m=2
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 403 Forbidden
date: Wed, 24 Apr 2024 19:31:54 GMT
content-type: text/html; charset=UTF-8
accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
cross-origin-embedder-policy: require-corp
cross-origin-opener-policy: same-origin
cross-origin-resource-policy: same-origin
origin-agent-cluster: ?1
permissions-policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()
referrer-policy: same-origin
x-frame-options: SAMEORIGIN
cf-mitigated: challenge
cf-chl-out: eoAnB4YTmhbYRV0kaZMGP1nwcLKCyDsVtGgw0bZbyCjpcLQorzWNtimhp6mnTpGo2CSXg4ftDXImyDqBOsdSx1efHutm3SOf7b9b/l7aLfGibhHFjThzGEICvCl1d+hZGK5BfXsE00HvNyuldGQf9g==$wY2EWw1fuwgqsqDThbR3+w==
cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
expires: Thu, 01 Jan 1970 00:00:01 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=uUyzUVUubUQYMEj6nmF3WtWddqAndS4xtVE9Q%2B%2F4N1faPpOpdMuvJmOsSWqKLPEhjq3k%2B%2Bt4qfVhO67OxIS0c4nwGYXvxtmnYz1VucZIZG8zovadE3UB%2Bm3GfP9uWSHogqfWy0I%2FoRw%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8798842a5b100b41-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/i/8798842d28107130/1713987115455/B6aIgCjhtcbUMTP | 104.17.3.184 | | 61 B |
URL challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/i/8798842d28107130/1713987115455/B6aIgCjhtcbUMTP IP104.17.3.184:0
CertificateIssuerCloudflare, Inc. Subjectchallenges.cloudflare.com Fingerprint5F:E4:AA:8C:2E:24:D2:B1:69:9D:13:28:31:5C:65:FA:97:2A:E9:6E ValidityFri, 18 Aug 2023 00:00:00 GMT - Sat, 17 Aug 2024 23:59:59 GMT
File typePNG image data, 84 x 67, 8-bit/color RGB, non-interlaced Hash0920ef0ee746a2420bea269a60fa156f d4cb56e58fd862b85d808ddcc90e6862bb11c16f 03698306d69c10cf00742a22cd8c2249d48ba0572e06e69dee062c09d8129795
GET /cdn-cgi/challenge-platform/h/b/i/8798842d28107130/1713987115455/B6aIgCjhtcbUMTP HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/atlv1/0x4AAAAAAADnPIDROrmt1Wwj/light/normal
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 24 Apr 2024 19:31:56 GMT
content-type: image/png
content-length: 61
server: cloudflare
cf-ray: 87988436ae927130-OSL
alt-svc: h3=":443"; ma=86400
|
|
| challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/pat/8798842d28107130/1713987115458/d768adf0f83b0283a7d5282fc8829b311d50216b9763c0049a429e78588b3ee2/FtwJv8VP6Zt_PMi | 104.17.3.184 | | 1 B |
URL challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/pat/8798842d28107130/1713987115458/d768adf0f83b0283a7d5282fc8829b311d50216b9763c0049a429e78588b3ee2/FtwJv8VP6Zt_PMi IP104.17.3.184:0
CertificateIssuerCloudflare, Inc. Subjectchallenges.cloudflare.com Fingerprint5F:E4:AA:8C:2E:24:D2:B1:69:9D:13:28:31:5C:65:FA:97:2A:E9:6E ValidityFri, 18 Aug 2023 00:00:00 GMT - Sat, 17 Aug 2024 23:59:59 GMT
File typevery short file (no magic) Hashff44570aca8241914870afbc310cdb85 58668e7669fd564d99db5d581fcdb6a5618440b5 6da43b944e494e885e69af021f93c6d9331c78aa228084711429160a5bbd15b5
GET /cdn-cgi/challenge-platform/h/b/pat/8798842d28107130/1713987115458/d768adf0f83b0283a7d5282fc8829b311d50216b9763c0049a429e78588b3ee2/FtwJv8VP6Zt_PMi HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/atlv1/0x4AAAAAAADnPIDROrmt1Wwj/light/normal
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 401 Unauthorized
date: Wed, 24 Apr 2024 19:31:56 GMT
content-type: text/plain; charset=UTF-8
content-length: 1
www-authenticate: PrivateToken challenge="AAIAGXBhdC1pc3N1ZXIuY2xvdWRmbGFyZS5jb20g12it8Pg7AoOn1SgvyIKbMR1QIWuXY8AEmkKeeFiLPuIAGWNoYWxsZW5nZXMuY2xvdWRmbGFyZS5jb20=", token-key="MIIBUjA9BgkqhkiG9w0BAQowMKANMAsGCWCGSAFlAwQCAqEaMBgGCSqGSIb3DQEBCDALBglghkgBZQMEAgKiAwIBMAOCAQ8AMIIBCgKCAQEApc5PUXcXSrXwpeNe3kT6EaAJPDsPBMfFZc7M608yW3JV6YSHiGBLoFiLtNHD3Yj8UsOtWbQeFa2uvS_dYz5MBsoSW4-RbOY-WCB2aGEB-eoRbXl4lJRl0UNGi00lNBgNTil_mTTSNV3ssSkmSY8kwM-5GqBNfJ2kmJPKo02MWiXn1pwc4YXbeATUrYDRvvXUXYZrgaarjDyvHFhnYpD3mqr5qOj_TS_1SCUZ0HIp8ywDX06Xc59cKjzFHEUzD3gWutoK4apMxNt9bWWxcH3D_UL1a1llCxh-knMwTxgvRXS-XHap_ymO2zCuAPNgo1SDCTl4lTQZbVX7VvpDZwMaiQIDAQAB", max-age=20, PrivateToken challenge="AAIALHBwLWlzc3Vlci1wcm9kdWN0aW9uLnJlc2VhcmNoLmNsb3VkZmxhcmUuY29tINdorfD4OwKDp9UoL8iCmzEdUCFrl2PABJpCnnhYiz7iABljaGFsbGVuZ2VzLmNsb3VkZmxhcmUuY29t", token-key="MIIBUjA9BgkqhkiG9w0BAQowMKANMAsGCWCGSAFlAwQCAqEaMBgGCSqGSIb3DQEBCDALBglghkgBZQMEAgKiAwIBMAOCAQ8AMIIBCgKCAQEA1FEYykHcK8H9rb_u0aFz3CmWgYloQw4YhedoEOAjJ0vy2Axa4f9UG9Dzs4uXS34_h8l6MDo2nRCvLI9lvebilMnTjCn-6D77bewqYxJKUFZW1z2jBIdu03TrETczfEg7kxgKtJE9NXGDjYJcF_iMgzgNA0PEAVM89tUYXXlFy4cUAGlqU2mPpIEOxm5ARsXC-zlLK60fkJ4cOsZRkZa6EExdhmgdwQ0fEJuSOHrBO_-zJn4hUP8q9g4yqkxW2UrfJgD07F4HaHGBEiei06sGDvH2NEPvswEl5dTGxutNrxlU7W24iYhNa2nhjlc53nNb0mKtszv-czVE9UhXyJ7-RQIDAQAB", max-age=20
server: cloudflare
cf-ray: 87988436ded17130-OSL
alt-svc: h3=":443"; ma=86400
|
|
| challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=8798842d28107130 | 104.17.3.184 | 200 OK | 431 kB |
URL GET HTTP/3challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=8798842d28107130 IP104.17.3.184:443
Requested byhttps://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/atlv1/0x4AAAAAAADnPIDROrmt1Wwj/light/normal CertificateIssuerCloudflare, Inc. Subjectchallenges.cloudflare.com Fingerprint5F:E4:AA:8C:2E:24:D2:B1:69:9D:13:28:31:5C:65:FA:97:2A:E9:6E ValidityFri, 18 Aug 2023 00:00:00 GMT - Sat, 17 Aug 2024 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (65536), with no line terminators Size431 kB (431004 bytes) Hash6a55cd57d9875ba2e05a7d9a434a0165 d37e839aa1bcb44679eacbc70eaebc2f4817f39b b31b46aa9506d9d867708ab43437da7160fce3292cb570a6a88997ad81b1aad0
GET /cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=8798842d28107130 HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/atlv1/0x4AAAAAAADnPIDROrmt1Wwj/light/normal
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 24 Apr 2024 19:31:55 GMT
content-type: application/javascript; charset=UTF-8
cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
vary: accept-encoding
server: cloudflare
cf-ray: 8798842db8d97130-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| dr-0c-xeqstsmarter.ru/favicon.ico | 104.21.49.93 | 403 Forbidden | 16 kB |
URL GET HTTP/3dr-0c-xeqstsmarter.ru/favicon.ico IP104.21.49.93:443
Requested byhttps://dr-0c-xeqstsmarter.ru/Mjowens@bkford.com CertificateIssuerLet's Encrypt Subjectdr-0c-xeqstsmarter.ru Fingerprint41:1E:6D:E3:03:CC:8B:02:F8:F6:8D:E7:DC:6E:25:42:5F:7E:73:AE ValidityFri, 19 Apr 2024 12:30:18 GMT - Thu, 18 Jul 2024 12:30:17 GMT
File typeHTML document, ASCII text, with very long lines (15822), with no line terminators Hash657095436865457d2def52d696dabdfd a0dd3d1ae05adf379aa31a3eb52a309cedb71d48 85a346c87232ef546b6d786c13bc2d306e4da9aaa72d697fd73d95687b4c3551
GET /favicon.ico HTTP/1.1
Host: dr-0c-xeqstsmarter.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://dr-0c-xeqstsmarter.ru/Mjowens@bkford.com
DNT: 1
Connection: keep-alive
Cookie: cf_chl_rc_m=2
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 403 Forbidden
date: Wed, 24 Apr 2024 19:31:54 GMT
content-type: text/html; charset=UTF-8
accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
cross-origin-embedder-policy: require-corp
cross-origin-opener-policy: same-origin
cross-origin-resource-policy: same-origin
origin-agent-cluster: ?1
permissions-policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()
referrer-policy: same-origin
x-frame-options: SAMEORIGIN
cf-mitigated: challenge
cf-chl-out: Q2PUhjz5eGOwp9/ve8hTMOiFMUwMlLz1DxGe1LwqFcZu50wVFzRLH7iMGdeWfYiZqYK65rvy5C14zrjshXFwCTFpJQwsapBwznkQNNJhuijmDn9qAzfBBfoMtJiM1SndLJRkgux3zRK6tvYEYL36tg==$ET2Pstf+EC0KJWIPdZPUpQ==
cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
expires: Thu, 01 Jan 1970 00:00:01 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=RM7FaPPHPlSq0BH%2BSX4QCe%2FM24oznqy7fVlfosjOcUZnKdUjtClkauHmOSy0Eyn%2FFTxORM0kf1O3Kk0wsPkVXWS5hrnT3H8YDeu%2FpiWJSImOCpaRO6cG9Qx2IZPEg4Akjo4DLN26o5c%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8798842b8c2c0b41-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/atlv1/0x4AAAAAAADnPIDROrmt1Wwj/light/normal | 104.17.3.184 | 200 OK | 80 kB |
URL GET HTTP/3challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/atlv1/0x4AAAAAAADnPIDROrmt1Wwj/light/normal IP104.17.3.184:443
Requested byhttps://dr-0c-xeqstsmarter.ru/Mjowens@bkford.com CertificateIssuerCloudflare, Inc. Subjectchallenges.cloudflare.com Fingerprint5F:E4:AA:8C:2E:24:D2:B1:69:9D:13:28:31:5C:65:FA:97:2A:E9:6E ValidityFri, 18 Aug 2023 00:00:00 GMT - Sat, 17 Aug 2024 23:59:59 GMT
File typeHTML document, ASCII text, with very long lines (41702) Hash9ace4545f25d3fc28d793c8a31671916 519ffc105450ef5949aafa8008acee92079e912f 1101f68495286b93e9ba2a5d7e823b09d04ea733f06b452ef8df8079f9e15a06
GET /cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/atlv1/0x4AAAAAAADnPIDROrmt1Wwj/light/normal HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 24 Apr 2024 19:31:55 GMT
content-type: text/html; charset=UTF-8
permissions-policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()
origin-agent-cluster: ?1
referrer-policy: same-origin
content-security-policy: frame-src https://challenges.cloudflare.com/ blob:; base-uri 'self'
cross-origin-opener-policy: same-origin
cross-origin-embedder-policy: require-corp
cross-origin-resource-policy: cross-origin
accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
critical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
document-policy: js-profiling
cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
vary: accept-encoding
server: cloudflare
cf-ray: 8798842d28107130-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| dr-0c-xeqstsmarter.ru/favicon.ico | 104.21.49.93 | 403 Forbidden | 16 kB |
URL GET HTTP/3dr-0c-xeqstsmarter.ru/favicon.ico IP104.21.49.93:443
Requested byhttps://dr-0c-xeqstsmarter.ru/Mjowens@bkford.com CertificateIssuerLet's Encrypt Subjectdr-0c-xeqstsmarter.ru Fingerprint41:1E:6D:E3:03:CC:8B:02:F8:F6:8D:E7:DC:6E:25:42:5F:7E:73:AE ValidityFri, 19 Apr 2024 12:30:18 GMT - Thu, 18 Jul 2024 12:30:17 GMT
File typeHTML document, ASCII text, with very long lines (15907), with no line terminators Hash72e98be94083264df78346f5a85078ea d04c2204f92206f680ec51d390c42d3a56106113 300b566261163634e8814b382e45276274836fac8667961044437d886368575b
GET /favicon.ico HTTP/1.1
Host: dr-0c-xeqstsmarter.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://dr-0c-xeqstsmarter.ru/Mjowens@bkford.com?__cf_chl_rt_tk=NcofSc40gOcpCkhfvZNXYTuhdPySPAFZ9lronENVrnY-1713987114-0.0.1.1-1621
DNT: 1
Connection: keep-alive
Cookie: cf_chl_rc_m=2
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 403 Forbidden
date: Wed, 24 Apr 2024 19:31:54 GMT
content-type: text/html; charset=UTF-8
accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
cross-origin-embedder-policy: require-corp
cross-origin-opener-policy: same-origin
cross-origin-resource-policy: same-origin
origin-agent-cluster: ?1
permissions-policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()
referrer-policy: same-origin
x-frame-options: SAMEORIGIN
cf-mitigated: challenge
cf-chl-out: 9DZ74UMnuu9N16zKCh9+/zCUOJU4c8bzLD/EVNu0LWPTe9dw/B/UIurbJO7hsiLo7U2qdamtEoSA3LN2xLHR5IKrJGst6wfTnMKhdnNkfn/QY6Zko1MC6GSkO/j3iVoPdhoW/1TP+MhDePx48lkd4A==$t6WirT/Gikya7NInwaZJzg==
cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
expires: Thu, 01 Jan 1970 00:00:01 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=e2v5igRLaGpQp8WLPnREt6TM7300L03V7fEmWX05Mco%2Bm7Ucc1N9chImoN%2FL2nb%2BXh3IY6ZxAPhTWEWgoJSYZb%2F7PDxpNOsLc%2BgMr5emUubzzNyR9PWeq01hQd3PaKqnSY1o%2FxmKpRA%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8798842b3be90b41-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| dr-0c-xeqstsmarter.ru/cdn-cgi/challenge-platform/h/b/flow/ov1/992234561:1713983119:jxXfC5ffxd8JoNXMQS1FK7bZal0BtC-zTKYjFIjjPlg/8798842a5b100b41/3548536119d1bac | 104.21.49.93 | 200 OK | 16 kB |
URL POST HTTP/3dr-0c-xeqstsmarter.ru/cdn-cgi/challenge-platform/h/b/flow/ov1/992234561:1713983119:jxXfC5ffxd8JoNXMQS1FK7bZal0BtC-zTKYjFIjjPlg/8798842a5b100b41/3548536119d1bac IP104.21.49.93:443
Requested byhttps://dr-0c-xeqstsmarter.ru/Mjowens@bkford.com CertificateIssuerLet's Encrypt Subjectdr-0c-xeqstsmarter.ru Fingerprint41:1E:6D:E3:03:CC:8B:02:F8:F6:8D:E7:DC:6E:25:42:5F:7E:73:AE ValidityFri, 19 Apr 2024 12:30:18 GMT - Thu, 18 Jul 2024 12:30:17 GMT
File typeASCII text, with very long lines (15976), with no line terminators Hashbec59fbd4b5641ccacfb5e791adf3186 41811f090a5e91b3c190537f7019b824294be2c5 4e9ab224ae7fe71e0ac61fe55691912bb33d57d2fa75c1d503eaced25f795501
POST /cdn-cgi/challenge-platform/h/b/flow/ov1/992234561:1713983119:jxXfC5ffxd8JoNXMQS1FK7bZal0BtC-zTKYjFIjjPlg/8798842a5b100b41/3548536119d1bac HTTP/1.1
Host: dr-0c-xeqstsmarter.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://dr-0c-xeqstsmarter.ru/Mjowens@bkford.com
Content-type: application/x-www-form-urlencoded
CF-Challenge: 3548536119d1bac
Content-Length: 1918
Origin: https://dr-0c-xeqstsmarter.ru
DNT: 1
Connection: keep-alive
Cookie: cf_chl_rc_m=2
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 24 Apr 2024 19:31:54 GMT
content-type: text/plain; charset=UTF-8
cf-chl-gen: f4FXVCKS8xCFQwvcxP1DG0aPAPE3y35TmT4QbXBI46cvBgV4elNULvq8phlWWZ5F$ebzn1mxmzT6KvnThdJfv/Q==
vary: accept-encoding
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=G9qW5gFgLjZhSpEbswoz7MrOdR%2BLq%2FEDoSJ%2BFj0HV4WWjnrRPdtwEP0tCwKoupDV5GLc5ldDuiKkotjSjKSykOMWJmc30W%2BN1NTps7JMLcaV789UDjQXGlPLk%2BFNKJEjR6hAPMTDBxs%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8798842c6cfc0b41-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/flow/ov1/1750473915:1713983198:e6oG6vS3BrcNbuh0sChLlZVuzeyabx9F0vJjnAOSdcM/8798842d28107130/51eaabf368fb5fc | 104.17.3.184 | 200 OK | 95 kB |
URL POST HTTP/3challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/flow/ov1/1750473915:1713983198:e6oG6vS3BrcNbuh0sChLlZVuzeyabx9F0vJjnAOSdcM/8798842d28107130/51eaabf368fb5fc IP104.17.3.184:443
Requested byhttps://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/atlv1/0x4AAAAAAADnPIDROrmt1Wwj/light/normal CertificateIssuerCloudflare, Inc. Subjectchallenges.cloudflare.com Fingerprint5F:E4:AA:8C:2E:24:D2:B1:69:9D:13:28:31:5C:65:FA:97:2A:E9:6E ValidityFri, 18 Aug 2023 00:00:00 GMT - Sat, 17 Aug 2024 23:59:59 GMT
File typeASCII text, with very long lines (65536), with no line terminators Hash3b6e36d7b1c48a572309c95cf83afa5d e266081d2181cddfa913889e8b4f6ec32136806d 1b8d97f1d0469977c587d592508c0ed1c8faeb18b6bf8385ec1568eb2081f51b
POST /cdn-cgi/challenge-platform/h/b/flow/ov1/1750473915:1713983198:e6oG6vS3BrcNbuh0sChLlZVuzeyabx9F0vJjnAOSdcM/8798842d28107130/51eaabf368fb5fc HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/atlv1/0x4AAAAAAADnPIDROrmt1Wwj/light/normal
Content-type: application/x-www-form-urlencoded
CF-Challenge: 51eaabf368fb5fc
Content-Length: 3420
Origin: https://challenges.cloudflare.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 24 Apr 2024 19:31:55 GMT
content-type: text/plain; charset=UTF-8
cf-chl-gen: 0ZWS8Es1toMZAmgd1JtojPxU7H6o/wTF5bNHHiZff3xjZctywN+EpVJsSpvBfwWB89UdKJC3cPFhxyodrNGAtATYHbIGDFsszkuJ+Q6zb5YZbw8tLJp7eUyqIV3/H6agazjBJi8XEJx4t2jRDVaXulRQTJ6LLI/ZGmcVoQEAG4J0aLvXYrev1Qt6A8UDAVXLBVg4UlfhePEs0O/EWommNqd5TGjg/vzUBzp7ktWoxecbMoQ11COmxl652cazG3TGmf4uIoghRu34qHH3MRmrApVCZ+3KKMO/rp6qGK7x96rD5CS9G9IV9/tXTJRUX+gV7vbRN4udXyX3pYKYWE2pU8pysK/8hpMYao5tF8CowblLamz+GFlyNTsiOpz64XUFqKKdZAyDr8lsQJE9NShqTR241Ei+SkHDzHhYLhXdauo=$d9u1pYrenCXSfXmvzvFpgA==
vary: accept-encoding
server: cloudflare
cf-ray: 8798842f7b3c7130-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| dr-0c-xeqstsmarter.ru/cdn-cgi/challenge-platform/h/b/orchestrate/chl_page/v1?ray=8798842a5b100b41 | 104.21.49.93 | 200 OK | 397 kB |
URL GET HTTP/3dr-0c-xeqstsmarter.ru/cdn-cgi/challenge-platform/h/b/orchestrate/chl_page/v1?ray=8798842a5b100b41 IP104.21.49.93:443
Requested byhttps://dr-0c-xeqstsmarter.ru/Mjowens@bkford.com CertificateIssuerLet's Encrypt Subjectdr-0c-xeqstsmarter.ru Fingerprint41:1E:6D:E3:03:CC:8B:02:F8:F6:8D:E7:DC:6E:25:42:5F:7E:73:AE ValidityFri, 19 Apr 2024 12:30:18 GMT - Thu, 18 Jul 2024 12:30:17 GMT
File typeJavaScript source, ASCII text, with very long lines (65536), with no line terminators Size397 kB (396802 bytes) Hash41e153be4b71cad321be5da13445d848 5d0fc029aa7745ba0df98f7fd67e052606d5d0a8 1d0265e34dc1a58bbf956ade0540a3459de495c150ab1de2665b029b5734f7cf
GET /cdn-cgi/challenge-platform/h/b/orchestrate/chl_page/v1?ray=8798842a5b100b41 HTTP/1.1
Host: dr-0c-xeqstsmarter.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://dr-0c-xeqstsmarter.ru/Mjowens@bkford.com?__cf_chl_rt_tk=NcofSc40gOcpCkhfvZNXYTuhdPySPAFZ9lronENVrnY-1713987114-0.0.1.1-1621
DNT: 1
Connection: keep-alive
Cookie: cf_chl_rc_m=2
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 24 Apr 2024 19:31:54 GMT
content-type: application/javascript; charset=UTF-8
cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
vary: accept-encoding
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=r%2BzQWL4%2F7g4ON4IyZFkMIVrnBIeVHXteDXnLFssfpVML%2Fe1mwYxBJDJzzGZZXY899MV%2FDlnspwPNFeLh%2F02Yp6CKdWWk1XFct7vf9Esko5PNpEDWfJV4yn0J7BsLTwZ9jOj%2FGE0ilYQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8798842acb760b41-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| challenges.cloudflare.com/turnstile/v0/b/471dc2adc340/api.js?onload=ZbqNq8&render=explicit | 104.17.3.184 | 200 OK | 42 kB |
URL GET HTTP/3challenges.cloudflare.com/turnstile/v0/b/471dc2adc340/api.js?onload=ZbqNq8&render=explicit IP104.17.3.184:443
Requested byhttps://dr-0c-xeqstsmarter.ru/Mjowens@bkford.com CertificateIssuerCloudflare, Inc. Subjectchallenges.cloudflare.com Fingerprint5F:E4:AA:8C:2E:24:D2:B1:69:9D:13:28:31:5C:65:FA:97:2A:E9:6E ValidityFri, 18 Aug 2023 00:00:00 GMT - Sat, 17 Aug 2024 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (42414) Hashf94a2211ce789a95a7c67e8c660d63e8 f1fc19b6bcb96d0a905bf3192aaff0885ff9f36f 926dc3302f99ec05e4206e965ddeb7250f5910a8c38e82c7beafb724bbaaf37b
GET /turnstile/v0/b/471dc2adc340/api.js?onload=ZbqNq8&render=explicit HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://dr-0c-xeqstsmarter.ru
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 24 Apr 2024 19:31:54 GMT
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
cache-control: max-age=31536000
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding
server: cloudflare
cf-ray: 8798842b9ddf7130-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|