ocsp.r2m02.amazontrust.com/
143.204.48.16 471 B URL ocsp.r2m02.amazontrust.com/
IP 143.204.48.16:0
Hash 623f3305858c8414306dabbb45a90931
0e6d9965066eef6f38873e7fb81bd6ccd863820c
034ca23944f599ab3262bcfd72b89742d374e5ddcacda57e2d5245c619ae28a7
POST / HTTP/1.1
Host: ocsp.r2m02.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=7200
Date: Tue, 03 Oct 2023 14:00:46 GMT
Last-Modified: Tue, 03 Oct 2023 13:24:12 GMT
Server: ECAcc (ska/F6E3)
X-Cache: Miss from cloudfront
Via: 1.1 e49f22f18c16784c0f42291e768d1daa.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: VypVNLjeerpDyVwSRvueDDSLWBgm1iZRA1r8GaAMY-PPNxfRNFICdg==
Age: 2194
tracker.club-os.com/campaign/click?msgId=&test=true&target=https://coastalbodies.com.au/new/auth/qkgyug/amhhcnJpc0Bub3J0aGJyaWRnZW1hc3Mub3Jn
18.211.55.231 0 B URL tracker.club-os.com/campaign/click?msgId=&test=true&target=https://coastalbodies.com.au/new/auth/qkgyug/amhhcnJpc0Bub3J0aGJyaWRnZW1hc3Mub3Jn
IP 18.211.55.231:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /campaign/click?msgId=&test=true&target=https://coastalbodies.com.au/new/auth/qkgyug/amhhcnJpc0Bub3J0aGJyaWRnZW1hc3Mub3Jn HTTP/1.1
Host: tracker.club-os.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 303 See Other
date: Tue, 03 Oct 2023 14:00:46 GMT
content-length: 0
location: https://coastalbodies.com.au/new/auth/qkgyug/amhhcnJpc0Bub3J0aGJyaWRnZW1hc3Mub3Jn
server: Apache/2.4.57 () OpenSSL/1.0.2k-fips
X-Firefox-Spdy: h2
coastalbodies.com.au/new/auth/qkgyug/amhhcnJpc0Bub3J0aGJyaWRnZW1hc3Mub3Jn
203.98.95.166 0 B URL coastalbodies.com.au/new/auth/qkgyug/amhhcnJpc0Bub3J0aGJyaWRnZW1hc3Mub3Jn
IP 203.98.95.166:0
ASN #55803 Hostopia Australia Web Pty Ltd
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert urlquery phishing Phishing - Microsoft Outlook
GET /new/auth/qkgyug/amhhcnJpc0Bub3J0aGJyaWRnZW1hc3Mub3Jn HTTP/1.1
Host: coastalbodies.com.au
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-powered-by: PHP/7.4.33
refresh: 0;url=https://lajg05z8w9s48y1.glfbreak.ru/updonp4w44n#jharris@northbridgemass.org
content-type: text/html; charset=UTF-8
content-length: 0
date: Tue, 03 Oct 2023 14:00:47 GMT
server: LiteSpeed
vary: User-Agent
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2
code.jquery.com/jquery-3.6.0.min.js
151.101.194.137200 OK 31 kB URL GET HTTP/2 code.jquery.com/jquery-3.6.0.min.js
IP 151.101.194.137:443
Requested by https://lajg05z8w9s48y1.glfbreak.ru/updonp4w44n#jharris@northbridgemass.org
Certificate IssuerSectigo Limited
Subject*.jquery.com
FingerprintD2:19:0A:AD:CE:BB:9C:61:17:5D:29:4B:A2:54:E8:C6:91:B8:F9:8D
ValidityTue, 11 Jul 2023 00:00:00 GMT - Sun, 14 Jul 2024 23:59:59 GMT
File type ASCII text, with very long lines (65447)
Hash 8fb8fee4fcc3cc86ff6c724154c49c42
b82d238d4e31fdf618bae8ac11a6c812c03dd0d4
ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e
GET /jquery-3.6.0.min.js HTTP/1.1
Host: code.jquery.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lajg05z8w9s48y1.glfbreak.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Fri, 18 Oct 1991 12:00:00 GMT
etag: W/"28feccc0-15d9d"
cache-control: public, max-age=31536000, stale-while-revalidate=604800
access-control-allow-origin: *
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Tue, 03 Oct 2023 14:00:49 GMT
age: 1103549
x-served-by: cache-lga21931-LGA, cache-bma1676-BMA
x-cache: HIT, HIT
x-cache-hits: 30, 208393
x-timer: S1696341650.740695,VS0,VE0
vary: Accept-Encoding
content-length: 30875
X-Firefox-Spdy: h2
lajg05z8w9s48y1.glfbreak.ru/web1/assets/fonts/GDSherpa-bold.woff2
104.21.21.57200 OK 28 kB URL GET HTTP/3 lajg05z8w9s48y1.glfbreak.ru/web1/assets/fonts/GDSherpa-bold.woff2
IP 104.21.21.57:443
Requested by https://lajg05z8w9s48y1.glfbreak.ru/updonp4w44n#jharris@northbridgemass.org
Certificate IssuerGoogle Trust Services LLC
Subject*.glfbreak.ru
FingerprintFE:09:67:09:64:85:14:9F:26:37:8F:9A:B6:BA:D0:EC:CA:3B:8D:C8
ValidityThu, 07 Sep 2023 12:26:20 GMT - Wed, 06 Dec 2023 12:26:19 GMT
File type Web Open Font Format (Version 2), TrueType, length 28000, version 1.66\012- data
Hash a4bca6c95fed0d0c5cc46cf07710dcec
73b56e33b82b42921db8702a33efd0f2b2ec9794
5a51d246af54d903f67f07f2bd820ce77736f8d08c5f1602db07469d96dbf77f
GET /web1/assets/fonts/GDSherpa-bold.woff2 HTTP/1.1
Host: lajg05z8w9s48y1.glfbreak.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://lajg05z8w9s48y1.glfbreak.ru/updonp4w44n
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/3 200 OK
date: Tue, 03 Oct 2023 14:00:51 GMT
content-type: font/woff2
content-length: 28000
last-modified: Fri, 25 Aug 2023 04:00:16 GMT
etag: "6d60-603b761e42cdb"
access-control-allow-origin: *
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
cache-control: max-age=14400
age: 6976
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=6WYDiT5G9jFLbVnJO9CSq%2BxP8SRDMup35WET24MsraUCjEG5aKtZ60pISSZMlKHd%2B0bVY3XveFKTZYnZyGAnC8LsTn8ag4kQMmxbZL4OULwovUF3nMlfP9xO6uVblyVJOuoxprs%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
cf-cache-status: HIT
accept-ranges: bytes
server: cloudflare
cf-ray: 8105b6bcb8b6b4ed-OSL
lajg05z8w9s48y1.glfbreak.ru/web1/assets/fonts/GDSherpa-bold.woff
104.21.21.57200 OK 36 kB URL GET HTTP/3 lajg05z8w9s48y1.glfbreak.ru/web1/assets/fonts/GDSherpa-bold.woff
IP 104.21.21.57:443
Requested by https://lajg05z8w9s48y1.glfbreak.ru/updonp4w44n#jharris@northbridgemass.org
Certificate IssuerGoogle Trust Services LLC
Subject*.glfbreak.ru
FingerprintFE:09:67:09:64:85:14:9F:26:37:8F:9A:B6:BA:D0:EC:CA:3B:8D:C8
ValidityThu, 07 Sep 2023 12:26:20 GMT - Wed, 06 Dec 2023 12:26:19 GMT
File type Web Open Font Format, TrueType, length 35970, version 1.0\012- data
Hash 496b7bbde91c7dc7cf9bbabbb3921da8
2bd3c406a715ab52dad84c803c55bf4a6e66a924
ae40a04f95df12b0c364f26ab691dc0c391d394a28bcdb4aeacfaca325d0a798
GET /web1/assets/fonts/GDSherpa-bold.woff HTTP/1.1
Host: lajg05z8w9s48y1.glfbreak.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://lajg05z8w9s48y1.glfbreak.ru/updonp4w44n
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/3 200 OK
date: Tue, 03 Oct 2023 14:00:51 GMT
content-type: font/woff
content-length: 35970
last-modified: Fri, 25 Aug 2023 04:00:22 GMT
etag: "8c82-603b7623b006b"
access-control-allow-origin: *
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
cache-control: max-age=14400
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Aqud7ZSDgDZUj70LX6nqUjs6Mtucr2Lht2vF39aYA66oRvkeV5JxK1WL%2BdD5F1S61%2Bm3zwNpkcRod1%2FrkYlYctOupt6S25nUnN0v69h%2FUtysZRzApK%2B8pQHlRnHaHybBUZ01djA%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
cf-cache-status: HIT
age: 6976
accept-ranges: bytes
server: cloudflare
cf-ray: 8105b6bcb8b9b4ed-OSL
lajg05z8w9s48y1.glfbreak.ru/web1/assets/fonts/GDSherpa-regular.woff2
104.21.21.57200 OK 29 kB URL GET HTTP/3 lajg05z8w9s48y1.glfbreak.ru/web1/assets/fonts/GDSherpa-regular.woff2
IP 104.21.21.57:443
Requested by https://lajg05z8w9s48y1.glfbreak.ru/updonp4w44n#jharris@northbridgemass.org
Certificate IssuerGoogle Trust Services LLC
Subject*.glfbreak.ru
FingerprintFE:09:67:09:64:85:14:9F:26:37:8F:9A:B6:BA:D0:EC:CA:3B:8D:C8
ValidityThu, 07 Sep 2023 12:26:20 GMT - Wed, 06 Dec 2023 12:26:19 GMT
File type Web Open Font Format (Version 2), TrueType, length 28584, version 1.66\012- data
Hash 17081510f3a6f2f619ec8c6f244523c7
87f34b2a1532c50f2a424c345d03fe028db35635
2c7292014e2ef00374aeb63691d9f23159a010455784ee0b274ba7db2bcca956
GET /web1/assets/fonts/GDSherpa-regular.woff2 HTTP/1.1
Host: lajg05z8w9s48y1.glfbreak.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://lajg05z8w9s48y1.glfbreak.ru/updonp4w44n
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/3 200 OK
date: Tue, 03 Oct 2023 14:00:51 GMT
content-type: font/woff2
content-length: 28584
last-modified: Fri, 25 Aug 2023 04:00:25 GMT
etag: "6fa8-603b76269b664"
access-control-allow-origin: *
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
cache-control: max-age=14400
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=3Q8bKhrpG1HIMxY2EUCVH%2BAqedq2K5eSAKIRUO1t8P2eb1wLzKjNKTnf2z9gkhaowJmaPcDPGvBgHbrCm7YBs6oBnDV8uGzp7HnnHJNrpgZVuZVMiTEqSf9Q71W2d2O5dCC0KN8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
cf-cache-status: HIT
age: 6976
accept-ranges: bytes
server: cloudflare
cf-ray: 8105b6bcc8ccb4ed-OSL
lajg05z8w9s48y1.glfbreak.ru/web1/assets/fonts/GDSherpa-regular.woff
104.21.21.57200 OK 37 kB URL GET HTTP/3 lajg05z8w9s48y1.glfbreak.ru/web1/assets/fonts/GDSherpa-regular.woff
IP 104.21.21.57:443
Requested by https://lajg05z8w9s48y1.glfbreak.ru/updonp4w44n#jharris@northbridgemass.org
Certificate IssuerGoogle Trust Services LLC
Subject*.glfbreak.ru
FingerprintFE:09:67:09:64:85:14:9F:26:37:8F:9A:B6:BA:D0:EC:CA:3B:8D:C8
ValidityThu, 07 Sep 2023 12:26:20 GMT - Wed, 06 Dec 2023 12:26:19 GMT
File type Web Open Font Format, TrueType, length 36696, version 1.0\012- data
Hash a69e9ab8afdd7486ec0749c551051ff2
c34e6aa327b536fb48d1fe03577a47c7ee2231b8
fd78a1913db912221b8ead1e62fad47d1ff0a9fa6cd88d3b128a721ad91d2faf
GET /web1/assets/fonts/GDSherpa-regular.woff HTTP/1.1
Host: lajg05z8w9s48y1.glfbreak.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://lajg05z8w9s48y1.glfbreak.ru/updonp4w44n
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/3 200 OK
date: Tue, 03 Oct 2023 14:00:51 GMT
content-type: font/woff
content-length: 36696
last-modified: Fri, 25 Aug 2023 04:00:28 GMT
etag: "8f58-603b762947b93"
access-control-allow-origin: *
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
cache-control: max-age=14400
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Pp6xVfoJlsEqshLesgjORMBhGZ2a0mu6YbwMZfONbjmTpN3BLWOLRpEjSMNj25cd50LmpaVIvaKU8wr0147iU24BtL7VHCdL%2FnIJ%2FA7dEnNc6rnynclUq6gjnUeGgjTY%2BskwWOU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
cf-cache-status: HIT
age: 6975
accept-ranges: bytes
server: cloudflare
cf-ray: 8105b6bcc8d0b4ed-OSL
lajg05z8w9s48y1.glfbreak.ru/web1/assets/fonts/GDSherpa-vf.woff2
104.21.21.57200 OK 44 kB URL GET HTTP/3 lajg05z8w9s48y1.glfbreak.ru/web1/assets/fonts/GDSherpa-vf.woff2
IP 104.21.21.57:443
Requested by https://lajg05z8w9s48y1.glfbreak.ru/updonp4w44n#jharris@northbridgemass.org
Certificate IssuerGoogle Trust Services LLC
Subject*.glfbreak.ru
FingerprintFE:09:67:09:64:85:14:9F:26:37:8F:9A:B6:BA:D0:EC:CA:3B:8D:C8
ValidityThu, 07 Sep 2023 12:26:20 GMT - Wed, 06 Dec 2023 12:26:19 GMT
File type Web Open Font Format (Version 2), TrueType, length 43596, version 1.0\012- data
Hash 2a05e9e5572abc320b2b7ea38a70dcc1
d5fa2a856d5632c2469e42436159375117ef3c35
3efcb941aaddaf4aea08dab3fb97d3e904aa1b83264e64b4d5bda53bc7c798ec
GET /web1/assets/fonts/GDSherpa-vf.woff2 HTTP/1.1
Host: lajg05z8w9s48y1.glfbreak.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://lajg05z8w9s48y1.glfbreak.ru/updonp4w44n
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/3 200 OK
date: Tue, 03 Oct 2023 14:00:51 GMT
content-type: font/woff2
content-length: 43596
last-modified: Fri, 25 Aug 2023 04:00:36 GMT
etag: "aa4c-603b7631474f7"
access-control-allow-origin: *
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
cache-control: max-age=14400
age: 6976
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=GvKc0mAYuC4JWIqRAl2dfquxxD9nTAx0e7LfUKB3fYouFAoxrOEb4SBiGMyF%2BbugPBB9nPp2LN4J2yoYXsLtjBtgMqilyIrAFkSxYaZoaJeAWbOj7nIe9a00hSmlmKuc2BDLwM0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
cf-cache-status: HIT
accept-ranges: bytes
server: cloudflare
cf-ray: 8105b6bcc8d5b4ed-OSL
lajg05z8w9s48y1.glfbreak.ru/web1/assets/fonts/GDSherpa-vf2.woff2
104.21.21.57200 OK 93 kB URL GET HTTP/3 lajg05z8w9s48y1.glfbreak.ru/web1/assets/fonts/GDSherpa-vf2.woff2
IP 104.21.21.57:443
Requested by https://lajg05z8w9s48y1.glfbreak.ru/updonp4w44n#jharris@northbridgemass.org
Certificate IssuerGoogle Trust Services LLC
Subject*.glfbreak.ru
FingerprintFE:09:67:09:64:85:14:9F:26:37:8F:9A:B6:BA:D0:EC:CA:3B:8D:C8
ValidityThu, 07 Sep 2023 12:26:20 GMT - Wed, 06 Dec 2023 12:26:19 GMT
File type Web Open Font Format (Version 2), TrueType, length 93276, version 1.0\012- data
Hash bcd7983ea5aa57c55f6758b4977983cb
ef3a009e205229e07fb0ec8569e669b11c378ef1
6528a0bf9a836a53dfd8536e1786ba6831c9d1faa74967126fddf5b2081b858c
GET /web1/assets/fonts/GDSherpa-vf2.woff2 HTTP/1.1
Host: lajg05z8w9s48y1.glfbreak.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://lajg05z8w9s48y1.glfbreak.ru/updonp4w44n
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/3 200 OK
date: Tue, 03 Oct 2023 14:00:51 GMT
content-type: font/woff2
content-length: 93276
last-modified: Fri, 25 Aug 2023 04:00:32 GMT
etag: "16c5c-603b762dd727e"
access-control-allow-origin: *
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
cache-control: max-age=14400
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=BFH1pUblvA7qUJOWpXoXc9h0F5YfM0JUh5IHU5Oyy6P3qGalgztOhCaSEWCYuYJQNkyqUWnfmx3jk23Js5lDImZ1De0BwUHWvxR4ptm3LUdOi1FdiJXlwH6h8M%2FyeABLWCiraH0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
cf-cache-status: HIT
age: 6976
accept-ranges: bytes
server: cloudflare
cf-ray: 8105b6bcc8d7b4ed-OSL
lajg05z8w9s48y1.glfbreak.ru/web1/assets/css/pages-okta.css?cb=1696341652311
104.21.21.57200 OK 0 B URL GET HTTP/3 lajg05z8w9s48y1.glfbreak.ru/web1/assets/css/pages-okta.css?cb=1696341652311
IP 104.21.21.57:443
Requested by https://lajg05z8w9s48y1.glfbreak.ru/updonp4w44n#jharris@northbridgemass.org
Certificate IssuerGoogle Trust Services LLC
Subject*.glfbreak.ru
FingerprintFE:09:67:09:64:85:14:9F:26:37:8F:9A:B6:BA:D0:EC:CA:3B:8D:C8
ValidityThu, 07 Sep 2023 12:26:20 GMT - Wed, 06 Dec 2023 12:26:19 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /web1/assets/css/pages-okta.css?cb=1696341652311 HTTP/1.1
Host: lajg05z8w9s48y1.glfbreak.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lajg05z8w9s48y1.glfbreak.ru/updonp4w44n
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/3 200 OK
date: Tue, 03 Oct 2023 14:00:55 GMT
content-type: text/css
content-length: 0
last-modified: Thu, 24 Aug 2023 12:07:13 GMT
etag: "0-603aa11867866"
access-control-allow-origin: *
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
cache-control: max-age=14400
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=1Hv70u7fyXIw8Rn3YngVPw0cuDfGInYXkVqJh5d9gwjmSlkVrjCkgDXBqUjgDsxWziITTSgW6T%2Be%2B7P00ffdSvrDPNygTMhW96JD7%2FzH7%2FhBA1vtbm%2BJWyLfVM47jeW59JbR4FU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
cf-cache-status: MISS
accept-ranges: bytes
server: cloudflare
cf-ray: 8105b6bcb8b3b4ed-OSL
challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/6jz62/0x4AAAAAAAJ1zx-MJxCL7z8m/auto/normal
104.17.2.184200 OK 27 kB URL GET HTTP/3 challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/6jz62/0x4AAAAAAAJ1zx-MJxCL7z8m/auto/normal
IP 104.17.2.184:443
Requested by https://lajg05z8w9s48y1.glfbreak.ru/updonp4w44n#jharris@northbridgemass.org
Certificate IssuerCloudflare, Inc.
Subjectchallenges.cloudflare.com
Fingerprint5F:E4:AA:8C:2E:24:D2:B1:69:9D:13:28:31:5C:65:FA:97:2A:E9:6E
ValidityFri, 18 Aug 2023 00:00:00 GMT - Sat, 17 Aug 2024 23:59:59 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (14577)
Hash c213a397852433748121ec8d5249de62
93aee89713ae220463674ae48f9ce1ba460f4965
2c0174bce24286c088edfbbbc746622b1ed2e847ee1793f481bd5e3153394822
GET /cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/6jz62/0x4AAAAAAAJ1zx-MJxCL7z8m/auto/normal HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lajg05z8w9s48y1.glfbreak.ru/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/3 200 OK
date: Tue, 03 Oct 2023 14:00:57 GMT
content-type: text/html; charset=UTF-8
cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
content-security-policy: frame-src https://challenges.cloudflare.com/; base-uri 'self'
cross-origin-embedder-policy: require-corp
cross-origin-opener-policy: same-origin
cross-origin-resource-policy: cross-origin
document-policy: js-profiling
origin-agent-cluster: ?1
permissions-policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()
referrer-policy: same-origin
server: cloudflare
cf-ray: 8105b6de08ddb51b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/orchestrate/chl_api/v1?ray=8105b6de08ddb51b
104.17.2.184200 OK 170 kB URL GET HTTP/3 challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/orchestrate/chl_api/v1?ray=8105b6de08ddb51b
IP 104.17.2.184:443
Requested by https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/6jz62/0x4AAAAAAAJ1zx-MJxCL7z8m/auto/normal
Certificate IssuerCloudflare, Inc.
Subjectchallenges.cloudflare.com
Fingerprint5F:E4:AA:8C:2E:24:D2:B1:69:9D:13:28:31:5C:65:FA:97:2A:E9:6E
ValidityFri, 18 Aug 2023 00:00:00 GMT - Sat, 17 Aug 2024 23:59:59 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Size 170 kB (169836 bytes)
Hash 338297a6a0262d285c89aec277d9ae0a
47d00d7b711a125f987d3d49be81c003ba5966c6
04b2f6c4439b1123f3d999b0973339f90d281277179cbb32a704487cf088241e
GET /cdn-cgi/challenge-platform/h/g/orchestrate/chl_api/v1?ray=8105b6de08ddb51b HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/6jz62/0x4AAAAAAAJ1zx-MJxCL7z8m/auto/normal
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/3 200 OK
date: Tue, 03 Oct 2023 14:00:57 GMT
content-type: application/javascript; charset=UTF-8
cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
server: cloudflare
cf-ray: 8105b6dea97bb51b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/flow/ov1/1179259849:1696338596:e7FZsAQPjeM3rmlewEpVJ_cEc_FOkgVw4OK9FBMzI0k/8105b6de08ddb51b/897109576f0d2d7
104.17.2.184200 OK 3.4 kB URL POST HTTP/3 challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/flow/ov1/1179259849:1696338596:e7FZsAQPjeM3rmlewEpVJ_cEc_FOkgVw4OK9FBMzI0k/8105b6de08ddb51b/897109576f0d2d7
IP 104.17.2.184:443
Requested by https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/6jz62/0x4AAAAAAAJ1zx-MJxCL7z8m/auto/normal
Certificate IssuerCloudflare, Inc.
Subjectchallenges.cloudflare.com
Fingerprint5F:E4:AA:8C:2E:24:D2:B1:69:9D:13:28:31:5C:65:FA:97:2A:E9:6E
ValidityFri, 18 Aug 2023 00:00:00 GMT - Sat, 17 Aug 2024 23:59:59 GMT
File type ASCII text, with very long lines (3436), with no line terminators
Hash f3bf1c525dbb3705e42243992665ab31
e9450b8c14a1aa2632d5c08b3291af7ad9b7ddab
45488b7eadb094b582b81998a12b2228360f0e1ea74cf04744aa84ad648d4a85
POST /cdn-cgi/challenge-platform/h/g/flow/ov1/1179259849:1696338596:e7FZsAQPjeM3rmlewEpVJ_cEc_FOkgVw4OK9FBMzI0k/8105b6de08ddb51b/897109576f0d2d7 HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/6jz62/0x4AAAAAAAJ1zx-MJxCL7z8m/auto/normal
Content-type: application/x-www-form-urlencoded
CF-Challenge: 897109576f0d2d7
Content-Length: 25404
Origin: https://challenges.cloudflare.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
HTTP/3 200 OK
date: Tue, 03 Oct 2023 14:00:59 GMT
content-type: text/html; charset=UTF-8
cf-chl-out: Y9xeauOywJ2OPS5GymkyIIMnyCIVC6dlN6cKoR+JYjqmz/IQqjfuS6Lmy7xWVlnCP7PmPArIn8p7LVXzhf//6+EN668KvlJfnvqOdvRrEHtLlof7j9pvNiwnS58lTCvy$t4V10f49wd8qNvijG2qxoQ==
cf-chl-out-s: qlHSoKHUHeKfYrb7bsPaaT7C9BXKcinlK9AK5e+W4TXK1B1MJgMSYg0/XWfpm+dfnwlYgqQb2ZJu1TSNXPlcjXo2MyIDnhG6dCGboeEBZJEPiNHnBnHnyh4OVuRhq4pnG2ybeLypdiJpXBryeNad0UOXZHG4t7rg+QqTtTmt9srgahsHbKcaRMRTIAoSdcZxl2+qs02QMtQbtamnZPD4YDvXeCu9JBBTQJcy2f5YH7u76S1X+kTEieN6Pz8boT3vCUxJTmo1UWdqmvYpcMnPLmhsfBUnDOONZTJAQoTKf4R9VzQUy523zGMrV19KajAIdwAV8qV7Q2+tZxRTgD6udKuZsocuU3YvAkOH7GRHzsA=$a8xRAdVMMPVvhwpi73qoPg==
server: cloudflare
cf-ray: 8105b6ecbfbab51b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
challenges.cloudflare.com/turnstile/v0/api.js?render=explicit
104.17.2.184302 Found 34 kB URL GET HTTP/2 challenges.cloudflare.com/turnstile/v0/api.js?render=explicit
IP 104.17.2.184:443
Requested by https://lajg05z8w9s48y1.glfbreak.ru/updonp4w44n#jharris@northbridgemass.org
Certificate IssuerCloudflare, Inc.
Subjectchallenges.cloudflare.com
Fingerprint5F:E4:AA:8C:2E:24:D2:B1:69:9D:13:28:31:5C:65:FA:97:2A:E9:6E
ValidityFri, 18 Aug 2023 00:00:00 GMT - Sat, 17 Aug 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /turnstile/v0/api.js?render=explicit HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lajg05z8w9s48y1.glfbreak.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
date: Tue, 03 Oct 2023 14:00:49 GMT
access-control-allow-origin: *
vary: accept-encoding
location: /turnstile/v0/g/dffb14d6/api.js?render=explicit
cache-control: max-age=300, public
server: cloudflare
cf-ray: 8105b6aedb440b41-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
challenges.cloudflare.com/turnstile/v0/g/dffb14d6/api.js?render=explicit
104.17.2.184200 OK 34 kB URL GET HTTP/3 challenges.cloudflare.com/turnstile/v0/g/dffb14d6/api.js?render=explicit
IP 104.17.2.184:443
Requested by https://lajg05z8w9s48y1.glfbreak.ru/updonp4w44n#jharris@northbridgemass.org
Certificate IssuerCloudflare, Inc.
Subjectchallenges.cloudflare.com
Fingerprint5F:E4:AA:8C:2E:24:D2:B1:69:9D:13:28:31:5C:65:FA:97:2A:E9:6E
ValidityFri, 18 Aug 2023 00:00:00 GMT - Sat, 17 Aug 2024 23:59:59 GMT
File type ASCII text, with very long lines (33998)
Hash cc3e43876d80dbb4f1bff1e8b15a9c60
3b43cbd347df372f7c1daf463b1229e4a8849195
06d063d7e58bade3ae244489087afa82f9f7c59276cdd7dcfbb2a9b5b600c5da
GET /turnstile/v0/g/dffb14d6/api.js?render=explicit HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://lajg05z8w9s48y1.glfbreak.ru/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/3 200 OK
date: Tue, 03 Oct 2023 14:00:49 GMT
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
cache-control: max-age=31536000
vary: Accept-Encoding
server: cloudflare
cf-ray: 8105b6af399eb51b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
lajg05z8w9s48y1.glfbreak.ru/web1/assets/pages/ul8ez297rtg.css?cb=1696341652311
104.21.21.57200 OK 1.0 kB URL GET HTTP/3 lajg05z8w9s48y1.glfbreak.ru/web1/assets/pages/ul8ez297rtg.css?cb=1696341652311
IP 104.21.21.57:443
Requested by https://lajg05z8w9s48y1.glfbreak.ru/updonp4w44n#jharris@northbridgemass.org
Certificate IssuerGoogle Trust Services LLC
Subject*.glfbreak.ru
FingerprintFE:09:67:09:64:85:14:9F:26:37:8F:9A:B6:BA:D0:EC:CA:3B:8D:C8
ValidityThu, 07 Sep 2023 12:26:20 GMT - Wed, 06 Dec 2023 12:26:19 GMT
File type ASCII text, with very long lines (1090), with no line terminators
Hash 8724eafd89ef122222e5d0e054fe9bc7
7074bd4cd9c2a0c3836c5a1d4494371a2916ec53
48a4199b291b585d42bc7bc1d4803f165cb5b5f418e39dda93fa6a552ed711ff
GET /web1/assets/pages/ul8ez297rtg.css?cb=1696341652311 HTTP/1.1
Host: lajg05z8w9s48y1.glfbreak.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lajg05z8w9s48y1.glfbreak.ru/updonp4w44n
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/3 200 OK
date: Tue, 03 Oct 2023 14:00:56 GMT
content-type: text/css
last-modified: Tue, 03 Oct 2023 12:16:33 GMT
etag: W/"417-606cedc897b85"
access-control-allow-origin: *
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
cache-control: max-age=14400
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=qCi03oMBJtaswUZxXB%2Fp4s3yiODCH56DpcbNh3mn6i5hj7P6%2Buq%2F1H0gqUYNo1RMWKaJur%2F97QgF8%2Bk%2FOvHg8ym6rD1Y%2F2DFhSgLOlR5vMz3PchW7NzQKOdMyz%2FAqlwWCiC%2B394%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
cf-cache-status: MISS
server: cloudflare
cf-ray: 8105b6bc6873b4ed-OSL
content-encoding: br
lajg05z8w9s48y1.glfbreak.ru/web1/info
104.21.21.57200 OK 153 B URL POST HTTP/3 lajg05z8w9s48y1.glfbreak.ru/web1/info
IP 104.21.21.57:443
Requested by https://lajg05z8w9s48y1.glfbreak.ru/updonp4w44n#jharris@northbridgemass.org
Certificate IssuerGoogle Trust Services LLC
Subject*.glfbreak.ru
FingerprintFE:09:67:09:64:85:14:9F:26:37:8F:9A:B6:BA:D0:EC:CA:3B:8D:C8
ValidityThu, 07 Sep 2023 12:26:20 GMT - Wed, 06 Dec 2023 12:26:19 GMT
File type troff or preprocessor input, ASCII text, with no line terminators
Hash 192c6e632b1e03ea12151f0dee7cd7f2
0539cbafa3d0fc559441f3a8c3b0cf0c6a6cd9ab
0300e39137793f68789fed3ce44cdc73d97fac4803fd8be9748fb6ea9cd2c3ae
POST /web1/info HTTP/1.1
Host: lajg05z8w9s48y1.glfbreak.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 27
Origin: https://lajg05z8w9s48y1.glfbreak.ru
DNT: 1
Connection: keep-alive
Referer: https://lajg05z8w9s48y1.glfbreak.ru/updonp4w44n
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
HTTP/3 200 OK
date: Tue, 03 Oct 2023 14:00:57 GMT
content-type: application/json
x-powered-by: PHP/8.1.10
cache-control: no-cache, private
access-control-allow-origin: *
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=MnUMn2tzEgh2Q9j2LE5Rt1X3jC5ZgfoFB3YT45yZgwSoEd%2F9rK%2Fa4Xfd8HB22I8QxE7KIMIiIPGm%2BKTCxnjAbaqYQ3hnVf4nEJF3Rl2ApVWd%2FNYfaghaQlLt%2F5JLCasgCIOVQO4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
set-cookie: XSRF-TOKEN=eyJpdiI6ImV4MGtnMUw3b2NaL0s1aXlXOVM1THc9PSIsInZhbHVlIjoiTlZlM1pzczVmc0JiclRWaG40SmtQTWxHWnNobG1jM2haRHdSVjIwZ1dSajYra3lBbFNLZEtWVThvQ0pxWUllWjR5cWpQaVBXbGVtSHdyaExzZ2VlWXhUbXZXKzd1ekNiZXhlMWpGOW45RGpWK2FPVmNRM2RvVjI1NXJWS1RlQ1giLCJtYWMiOiIwZjRhOTZlM2ZhODg3YThlNWU0NDNlZmY4ZGM1N2RhNjY0YWU1NzkyNmNmZjU4Nzk3NTk4MDNiMzVkZjQyODQxIiwidGFnIjoiIn0%3D; expires=Tue, 03-Oct-2023 16:00:57 GMT; Max-Age=7200; path=/; samesite=lax
laravel_session=eyJpdiI6IndpZFBDMmhscUE3a3JoL1gwSmQ3a1E9PSIsInZhbHVlIjoiekhSMCsxUVJKbFVBdWFUdFpqaWFGZG1OcHUwZ2ZSNjRyUGZqcDhDbHZNYmN5NVdsT2M1WTVmUE0zV2l6cnVNQS8vVEowQzBrQ25DNEEwdVNPSlJPT2FPbFhFRWNPdGNLV2Y4dHVrNjNQWXB0WHczZktzUmkxaUJSckZib0hFUFQiLCJtYWMiOiJhYjg1OWFjMWYxNTdlNGIxNDc0YTAwODQ4MWRjNDNlNjI1YjZmM2VmOThjMWQ4NDFkYWY2MTU3MzQyYjkwMjhmIiwidGFnIjoiIn0%3D; expires=Tue, 03-Oct-2023 16:00:57 GMT; Max-Age=7200; path=/; httponly; samesite=lax
server: cloudflare
cf-ray: 8105b6d13d92b4ed-OSL
content-encoding: br
lajg05z8w9s48y1.glfbreak.ru/updonp4w44n
104.21.21.57200 OK 111 B URL User Request GET HTTP/2 lajg05z8w9s48y1.glfbreak.ru/updonp4w44n
IP 104.21.21.57:443
Certificate IssuerGoogle Trust Services LLC
Subject*.glfbreak.ru
FingerprintFE:09:67:09:64:85:14:9F:26:37:8F:9A:B6:BA:D0:EC:CA:3B:8D:C8
ValidityThu, 07 Sep 2023 12:26:20 GMT - Wed, 06 Dec 2023 12:26:19 GMT
File type HTML document text\012- HTML document, ASCII text, with no line terminators
Hash 101582db1e6308eb1f6053d4208191a7
43a6096dc780f98a5d3b9b7fb908e342e91b5133
da724a8ef3986a489698138b03a1e6bdc2e0b25196fcf558db46af0d8442d5c8
Analyzer Verdict Alert urlquery phishing Phishing - Microsoft Outlook
GET /updonp4w44n HTTP/1.1
Host: lajg05z8w9s48y1.glfbreak.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 03 Oct 2023 14:00:49 GMT
content-type: text/html; charset=UTF-8
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=OV4CHnlY4QP0xeBk3ltLS9KSDqIndba9CL3MnbrIpQtSQTzExGxsdQZzkO0qzMQKuO1W1nqj54fnAIvrKhWqWtLznXCPNPfOu1DGD5Ndnjpm2gn6o3qZBWutmcftwoT7nkdcUB61cawV5rXqAjQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8105b6a19b98b505-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
lajg05z8w9s48y1.glfbreak.ru/myscr185725.js
104.21.21.57200 OK 26 kB URL GET HTTP/3 lajg05z8w9s48y1.glfbreak.ru/myscr185725.js
IP 104.21.21.57:443
Requested by https://lajg05z8w9s48y1.glfbreak.ru/updonp4w44n#jharris@northbridgemass.org
Certificate IssuerGoogle Trust Services LLC
Subject*.glfbreak.ru
FingerprintFE:09:67:09:64:85:14:9F:26:37:8F:9A:B6:BA:D0:EC:CA:3B:8D:C8
ValidityThu, 07 Sep 2023 12:26:20 GMT - Wed, 06 Dec 2023 12:26:19 GMT
Hash 975c7c1a745d565c7671a1e9234fc029
b1a3d79ccc0729e0c259bb89449c22ad08e83dc9
7c4703d839cb0682cb1bb7f38b1390c5f65c2ec3950b685b39363d0f6ae5b0c6
GET /myscr185725.js HTTP/1.1
Host: lajg05z8w9s48y1.glfbreak.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lajg05z8w9s48y1.glfbreak.ru/updonp4w44n
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/3 200 OK
date: Tue, 03 Oct 2023 14:00:49 GMT
content-type: application/javascript
last-modified: Tue, 03 Oct 2023 12:02:01 GMT
cache-control: max-age=14400
cf-cache-status: HIT
age: 6975
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=F38yi2VRCZ8zFjvzgV4V9IXvVY4We0SwaBuKKenLGSUfr8bdPnq7%2B7ewmeiEYaJMlJ4Bc%2B4OZ%2B21KhD8a1%2FAeqYpnrsg24lH1Iid7UiLoBas5xVgqv1%2BeL2hUT1efErsg8Pkhr2ctMR6TnrNkI0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8105b6ae5fd8b4ed-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
lajg05z8w9s48y1.glfbreak.ru/web1/assets/css/pages-godaddy.css?cb=1696341652311
104.21.21.57200 OK 39 kB URL GET HTTP/3 lajg05z8w9s48y1.glfbreak.ru/web1/assets/css/pages-godaddy.css?cb=1696341652311
IP 104.21.21.57:443
Requested by https://lajg05z8w9s48y1.glfbreak.ru/updonp4w44n#jharris@northbridgemass.org
Certificate IssuerGoogle Trust Services LLC
Subject*.glfbreak.ru
FingerprintFE:09:67:09:64:85:14:9F:26:37:8F:9A:B6:BA:D0:EC:CA:3B:8D:C8
ValidityThu, 07 Sep 2023 12:26:20 GMT - Wed, 06 Dec 2023 12:26:19 GMT
File type ASCII text, with very long lines (1723), with CRLF line terminators
Hash d3fd47cb9314b9d1c6916e4179076329
babecdeb0a31fae079c8401d945563d91e3dc65a
b6b8147ef345a398d599d894f543d58ea9899af8fca1d050d8ecd6efa7fb211a
GET /web1/assets/css/pages-godaddy.css?cb=1696341652311 HTTP/1.1
Host: lajg05z8w9s48y1.glfbreak.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lajg05z8w9s48y1.glfbreak.ru/updonp4w44n
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/3 200 OK
date: Tue, 03 Oct 2023 14:00:55 GMT
content-type: text/css
last-modified: Fri, 25 Aug 2023 04:39:37 GMT
etag: W/"971b-603b7ee9e50a8"
access-control-allow-origin: *
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
cache-control: max-age=14400
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=b5cQtbY4OMXZgdTbMf89JGyvYVH3N9%2B2HXTKLlpq64G6hT6D7N%2F4ZklOqpCkXly7lUl5mBuEIhyQRPzbvaMdOZfkSr7ORMWQPNZR8XcOr594CHuacjBB0BoRzGhYX5vjVGhJG%2Bg%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
cf-cache-status: MISS
server: cloudflare
cf-ray: 8105b6bca8acb4ed-OSL
content-encoding: br
challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/cmg/1/9DKbiDfWH6ZjHxgSNTG3KHa3ucVmP6rj9MHN3bQn2+U=
104.17.2.184200 OK 61 B URL GET HTTP/3 challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/cmg/1/9DKbiDfWH6ZjHxgSNTG3KHa3ucVmP6rj9MHN3bQn2+U=
IP 104.17.2.184:443
Requested by https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/6jz62/0x4AAAAAAAJ1zx-MJxCL7z8m/auto/normal
Certificate IssuerCloudflare, Inc.
Subjectchallenges.cloudflare.com
Fingerprint5F:E4:AA:8C:2E:24:D2:B1:69:9D:13:28:31:5C:65:FA:97:2A:E9:6E
ValidityFri, 18 Aug 2023 00:00:00 GMT - Sat, 17 Aug 2024 23:59:59 GMT
File type PNG image data, 2 x 2, 8-bit/color RGB, non-interlaced\012- data
Hash 9246cca8fc3c00f50035f28e9f6b7f7d
3aa538440f70873b574f40cd793060f53ec17a5d
c07d7d29e3c20fa6ca4c5d20663688d52bad13e129ad82ce06b80eb187d9dc84
GET /cdn-cgi/challenge-platform/h/g/cmg/1/9DKbiDfWH6ZjHxgSNTG3KHa3ucVmP6rj9MHN3bQn2+U= HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/6jz62/0x4AAAAAAAJ1zx-MJxCL7z8m/auto/normal
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/3 200 OK
date: Tue, 03 Oct 2023 14:00:57 GMT
content-type: image/png
cache-control: max-age=2629800, public
server: cloudflare
cf-ray: 8105b6dea979b51b-OSL
alt-svc: h3=":443"; ma=86400
challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/flow/ov1/1179259849:1696338596:e7FZsAQPjeM3rmlewEpVJ_cEc_FOkgVw4OK9FBMzI0k/8105b6de08ddb51b/897109576f0d2d7
104.17.2.184200 OK 98 kB URL POST HTTP/3 challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/flow/ov1/1179259849:1696338596:e7FZsAQPjeM3rmlewEpVJ_cEc_FOkgVw4OK9FBMzI0k/8105b6de08ddb51b/897109576f0d2d7
IP 104.17.2.184:443
Requested by https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/6jz62/0x4AAAAAAAJ1zx-MJxCL7z8m/auto/normal
Certificate IssuerCloudflare, Inc.
Subjectchallenges.cloudflare.com
Fingerprint5F:E4:AA:8C:2E:24:D2:B1:69:9D:13:28:31:5C:65:FA:97:2A:E9:6E
ValidityFri, 18 Aug 2023 00:00:00 GMT - Sat, 17 Aug 2024 23:59:59 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Hash a083ac09a8b7ddf71c3cfd51856f0e95
63d7a01534281744ad1234c48a980f6393b2171e
c286d7b452dc0a178dec59074d9f6e5bf4e47a90fbbf44b1c78f952e2341e92a
POST /cdn-cgi/challenge-platform/h/g/flow/ov1/1179259849:1696338596:e7FZsAQPjeM3rmlewEpVJ_cEc_FOkgVw4OK9FBMzI0k/8105b6de08ddb51b/897109576f0d2d7 HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/6jz62/0x4AAAAAAAJ1zx-MJxCL7z8m/auto/normal
Content-type: application/x-www-form-urlencoded
CF-Challenge: 897109576f0d2d7
Content-Length: 2343
Origin: https://challenges.cloudflare.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
HTTP/3 200 OK
date: Tue, 03 Oct 2023 14:00:57 GMT
content-type: text/plain; charset=UTF-8
cf-chl-gen: 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$kIAFX4KXu3vryt54UcXWZA==
server: cloudflare
cf-ray: 8105b6e03b11b51b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/pat/8105b6de08ddb51b/1696341657651/3998508d09c18088fa888df4a1df0b78016aab5f5f497fb2ead561d50d6cc6d5/LFSpj-V1XJ1Bvak
104.17.2.184401 Unauthorized 1 B URL GET HTTP/3 challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/pat/8105b6de08ddb51b/1696341657651/3998508d09c18088fa888df4a1df0b78016aab5f5f497fb2ead561d50d6cc6d5/LFSpj-V1XJ1Bvak
IP 104.17.2.184:443
Requested by https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/6jz62/0x4AAAAAAAJ1zx-MJxCL7z8m/auto/normal
Certificate IssuerCloudflare, Inc.
Subjectchallenges.cloudflare.com
Fingerprint5F:E4:AA:8C:2E:24:D2:B1:69:9D:13:28:31:5C:65:FA:97:2A:E9:6E
ValidityFri, 18 Aug 2023 00:00:00 GMT - Sat, 17 Aug 2024 23:59:59 GMT
File type very short file (no magic)
Hash ff44570aca8241914870afbc310cdb85
58668e7669fd564d99db5d581fcdb6a5618440b5
6da43b944e494e885e69af021f93c6d9331c78aa228084711429160a5bbd15b5
GET /cdn-cgi/challenge-platform/h/g/pat/8105b6de08ddb51b/1696341657651/3998508d09c18088fa888df4a1df0b78016aab5f5f497fb2ead561d50d6cc6d5/LFSpj-V1XJ1Bvak HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/6jz62/0x4AAAAAAAJ1zx-MJxCL7z8m/auto/normal
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
HTTP/3 401 Unauthorized
date: Tue, 03 Oct 2023 14:00:58 GMT
content-type: text/plain; charset=UTF-8
www-authenticate: PrivateToken challenge=AAIAGXBhdC1pc3N1ZXIuY2xvdWRmbGFyZS5jb20gOZhQjQnBgIj6iI30od8LeAFqq19fSX-y6tVh1Q1sxtUAGWNoYWxsZW5nZXMuY2xvdWRmbGFyZS5jb20=, token-key=MIIBUjA9BgkqhkiG9w0BAQowMKANMAsGCWCGSAFlAwQCAqEaMBgGCSqGSIb3DQEBCDALBglghkgBZQMEAgKiAwIBMAOCAQ8AMIIBCgKCAQEAmwecnC9kG_Fj0JIwT3ZpvO_cMGClNgn70CbP_OAQtwOOEcI1r2Po8y80NqJxALuKmNWFbryz6_VdAlXOZboOVMLHCEbOy5q8d_6d0jdvr4gWOR2YS8ZTEnOkoT2a55wMVFQXjZEnncYNLIkkVvnJf6yMVipGTtubyCfc5cpfJd_D1ZgRw1IBDxoldOFSszBBZ4ZnflsRf89fe_8GxaiKG0TJLywsU6KjsU5o26MKfvTBAlpza3foWvE1uvJJ35QHhx3ypQQq1C4t0Px9W2E3TsW4ctYpIkmfm2ZZDRiMVSwZCR_gh44wnfOqUXvRHSKr1-YGAawfDrdFrPembkdRQQIDAQAB, max-age=20
server: cloudflare
cf-ray: 8105b6e5e8bab51b-OSL
alt-svc: h3=":443"; ma=86400
lajg05z8w9s48y1.glfbreak.ru/web1/assets/css/pages.min.css?cb=1696341652311
104.21.21.57200 OK 17 kB URL GET HTTP/3 lajg05z8w9s48y1.glfbreak.ru/web1/assets/css/pages.min.css?cb=1696341652311
IP 104.21.21.57:443
Requested by https://lajg05z8w9s48y1.glfbreak.ru/updonp4w44n#jharris@northbridgemass.org
Certificate IssuerGoogle Trust Services LLC
Subject*.glfbreak.ru
FingerprintFE:09:67:09:64:85:14:9F:26:37:8F:9A:B6:BA:D0:EC:CA:3B:8D:C8
ValidityThu, 07 Sep 2023 12:26:20 GMT - Wed, 06 Dec 2023 12:26:19 GMT
File type ASCII text, with very long lines (17002), with no line terminators
Hash 68dd1bcccde5656be56122a5370bbb98
18d1618561916e13668295570a157c32acd9e1f5
bd5a242e3cd9e703a92c7d2667e8f78a3ba2c97cbd04237665782034e4760ed3
GET /web1/assets/css/pages.min.css?cb=1696341652311 HTTP/1.1
Host: lajg05z8w9s48y1.glfbreak.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lajg05z8w9s48y1.glfbreak.ru/updonp4w44n
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/3 200 OK
date: Tue, 03 Oct 2023 14:00:54 GMT
content-type: text/css
last-modified: Thu, 21 Sep 2023 16:09:25 GMT
etag: W/"426a-605e0b73dd2ad"
access-control-allow-origin: *
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
cache-control: max-age=14400
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=4ZWvKQuY24PUhIYhhKhXoS9Nk3B0Sy5zHQUVENaYr5hm6xKNW2RPxAkgHHToSB2pGwq5LlZ6fkXpK5bmXU6Lb4VAeJMLd8UBtuHpldxxPERI67zIufS3N6CIggs2UQjVmsNyyzg%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
cf-cache-status: MISS
server: cloudflare
cf-ray: 8105b6bc888eb4ed-OSL
content-encoding: br
lajg05z8w9s48y1.glfbreak.ru/web1/assets/js/pages-head-web.min.js?cb=1696341652311
104.21.21.57200 OK 10 kB URL GET HTTP/3 lajg05z8w9s48y1.glfbreak.ru/web1/assets/js/pages-head-web.min.js?cb=1696341652311
IP 104.21.21.57:443
Requested by https://lajg05z8w9s48y1.glfbreak.ru/updonp4w44n#jharris@northbridgemass.org
Certificate IssuerGoogle Trust Services LLC
Subject*.glfbreak.ru
FingerprintFE:09:67:09:64:85:14:9F:26:37:8F:9A:B6:BA:D0:EC:CA:3B:8D:C8
ValidityThu, 07 Sep 2023 12:26:20 GMT - Wed, 06 Dec 2023 12:26:19 GMT
File type ASCII text, with very long lines (10179), with no line terminators
Hash 91ca724283fd63e0366176adac255a3c
1657c9af872393e385b399d72471dd7c8b476d03
8e7b8fe78eb8a61b0d77628fe1a02c9569fcd0ef4c44ee1b1d06069b8a2787e7
GET /web1/assets/js/pages-head-web.min.js?cb=1696341652311 HTTP/1.1
Host: lajg05z8w9s48y1.glfbreak.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lajg05z8w9s48y1.glfbreak.ru/updonp4w44n
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/3 200 OK
date: Tue, 03 Oct 2023 14:00:55 GMT
content-type: application/javascript
last-modified: Mon, 25 Sep 2023 19:33:09 GMT
etag: W/"27c3-6063407397648"
access-control-allow-origin: *
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
cache-control: max-age=14400
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Cq6y2bndorWZ9pbxRuqTobb9sfBz6A05U8XBLoPcwwKXvy0LWjsJjRmtt23o3xa%2FYhm5mRTFEKpPPZMtRZ8iQUp%2BoHXUegxQniuv5m1N6WF0sQlYX4ULQ2KbUTOUwg2ZdbQ6nDo%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
cf-cache-status: MISS
server: cloudflare
cf-ray: 8105b6bcb8b5b4ed-OSL
content-encoding: br
challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/i/8105b6de08ddb51b/1696341657648/bLxO5_0N-OcfxZR
104.17.2.184200 OK 61 B URL GET HTTP/3 challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/i/8105b6de08ddb51b/1696341657648/bLxO5_0N-OcfxZR
IP 104.17.2.184:443
Requested by https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/6jz62/0x4AAAAAAAJ1zx-MJxCL7z8m/auto/normal
Certificate IssuerCloudflare, Inc.
Subjectchallenges.cloudflare.com
Fingerprint5F:E4:AA:8C:2E:24:D2:B1:69:9D:13:28:31:5C:65:FA:97:2A:E9:6E
ValidityFri, 18 Aug 2023 00:00:00 GMT - Sat, 17 Aug 2024 23:59:59 GMT
File type PNG image data, 88 x 71, 8-bit/color RGB, non-interlaced\012- data
Hash ea0ddf99711d245417402367d2d426a6
59245252a2b4b7e57794081a0f988ddaa9ddb729
16135fcbf9708d2bd183cff746990040dd744e89314ea1eb4878534b4fb66bd0
GET /cdn-cgi/challenge-platform/h/g/i/8105b6de08ddb51b/1696341657648/bLxO5_0N-OcfxZR HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/6jz62/0x4AAAAAAAJ1zx-MJxCL7z8m/auto/normal
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/3 200 OK
date: Tue, 03 Oct 2023 14:00:58 GMT
content-type: image/png
server: cloudflare
cf-ray: 8105b6e52ff3b51b-OSL
alt-svc: h3=":443"; ma=86400
lajg05z8w9s48y1.glfbreak.ru/web1/assets/js/pages-head-top-web.min.js?cb=1696341650333
104.21.21.57200 OK 2.2 kB URL GET HTTP/3 lajg05z8w9s48y1.glfbreak.ru/web1/assets/js/pages-head-top-web.min.js?cb=1696341650333
IP 104.21.21.57:443
Requested by https://lajg05z8w9s48y1.glfbreak.ru/updonp4w44n#jharris@northbridgemass.org
Certificate IssuerGoogle Trust Services LLC
Subject*.glfbreak.ru
FingerprintFE:09:67:09:64:85:14:9F:26:37:8F:9A:B6:BA:D0:EC:CA:3B:8D:C8
ValidityThu, 07 Sep 2023 12:26:20 GMT - Wed, 06 Dec 2023 12:26:19 GMT
File type ASCII text, with very long lines (2377), with no line terminators
Hash 0f2e26038b2d0d2114e7abc2290e680d
ddd6bcce2bfcebdd49a781316cb74f49c00da143
4f0ba78178d3349808ddb2fb8d4d775bd3914ac66557c8aeba189e7b49d72517
GET /web1/assets/js/pages-head-top-web.min.js?cb=1696341650333 HTTP/1.1
Host: lajg05z8w9s48y1.glfbreak.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lajg05z8w9s48y1.glfbreak.ru/updonp4w44n
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/3 200 OK
date: Tue, 03 Oct 2023 14:00:51 GMT
content-type: application/javascript
last-modified: Sat, 23 Sep 2023 01:00:14 GMT
etag: W/"8a1-605fc3f69c290"
access-control-allow-origin: *
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
cache-control: max-age=14400
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=FjAPs4vIuB%2B2wTfi%2BffRZtyi1ytPR79UpsdurfAWt7irBGRVBwiaZnkdo10u1kIwWH%2Ba3ciwsCiu6dZN7OGNokGiblvP1ElKxy7PGYvoZcJONocNttLjeru%2FyLckc4%2FcIDWWhAs%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
cf-cache-status: MISS
server: cloudflare
cf-ray: 8105b6b0099db4ed-OSL
content-encoding: br
lajg05z8w9s48y1.glfbreak.ru/web1/validatecaptcha
0.0.0.0 0 B URL POST lajg05z8w9s48y1.glfbreak.ru/web1/validatecaptcha
IP 0.0.0.0:0
Requested by https://lajg05z8w9s48y1.glfbreak.ru/updonp4w44n#jharris@northbridgemass.org
Certificate IssuerGoogle Trust Services LLC
Subject*.glfbreak.ru
FingerprintFE:09:67:09:64:85:14:9F:26:37:8F:9A:B6:BA:D0:EC:CA:3B:8D:C8
ValidityThu, 07 Sep 2023 12:26:20 GMT - Wed, 06 Dec 2023 12:26:19 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /web1/validatecaptcha HTTP/1.1
Host: lajg05z8w9s48y1.glfbreak.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 567
Origin: https://lajg05z8w9s48y1.glfbreak.ru
DNT: 1
Connection: keep-alive
Referer: https://lajg05z8w9s48y1.glfbreak.ru/updonp4w44n
Cookie: XSRF-TOKEN=eyJpdiI6ImV4MGtnMUw3b2NaL0s1aXlXOVM1THc9PSIsInZhbHVlIjoiTlZlM1pzczVmc0JiclRWaG40SmtQTWxHWnNobG1jM2haRHdSVjIwZ1dSajYra3lBbFNLZEtWVThvQ0pxWUllWjR5cWpQaVBXbGVtSHdyaExzZ2VlWXhUbXZXKzd1ekNiZXhlMWpGOW45RGpWK2FPVmNRM2RvVjI1NXJWS1RlQ1giLCJtYWMiOiIwZjRhOTZlM2ZhODg3YThlNWU0NDNlZmY4ZGM1N2RhNjY0YWU1NzkyNmNmZjU4Nzk3NTk4MDNiMzVkZjQyODQxIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IndpZFBDMmhscUE3a3JoL1gwSmQ3a1E9PSIsInZhbHVlIjoiekhSMCsxUVJKbFVBdWFUdFpqaWFGZG1OcHUwZ2ZSNjRyUGZqcDhDbHZNYmN5NVdsT2M1WTVmUE0zV2l6cnVNQS8vVEowQzBrQ25DNEEwdVNPSlJPT2FPbFhFRWNPdGNLV2Y4dHVrNjNQWXB0WHczZktzUmkxaUJSckZib0hFUFQiLCJtYWMiOiJhYjg1OWFjMWYxNTdlNGIxNDc0YTAwODQ4MWRjNDNlNjI1YjZmM2VmOThjMWQ4NDFkYWY2MTU3MzQyYjkwMjhmIiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
lajg05z8w9s48y1.glfbreak.ru/web1/assets/cloudfavicon.ico
104.21.21.57200 OK 34 kB URL GET HTTP/3 lajg05z8w9s48y1.glfbreak.ru/web1/assets/cloudfavicon.ico
IP 104.21.21.57:443
Requested by https://lajg05z8w9s48y1.glfbreak.ru/updonp4w44n#jharris@northbridgemass.org
Certificate IssuerGoogle Trust Services LLC
Subject*.glfbreak.ru
FingerprintFE:09:67:09:64:85:14:9F:26:37:8F:9A:B6:BA:D0:EC:CA:3B:8D:C8
ValidityThu, 07 Sep 2023 12:26:20 GMT - Wed, 06 Dec 2023 12:26:19 GMT
File type MS Windows icon resource - 5 icons, 16x16, 32 bits/pixel, 24x24, 32 bits/pixel\012- data
Hash 88415acda09a4cbd9d87543c3ba78180
2dec4705e9ab399efdc6eef36e079aa31d1df8d9
20cccc47c1bac9d2ef36b6a1c58af58c5c169ad5ca084080f0392b86f949641c
GET /web1/assets/cloudfavicon.ico HTTP/1.1
Host: lajg05z8w9s48y1.glfbreak.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lajg05z8w9s48y1.glfbreak.ru/updonp4w44n
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/3 200 OK
date: Tue, 03 Oct 2023 14:00:50 GMT
content-type: image/x-icon
last-modified: Wed, 16 Aug 2023 15:22:46 GMT
etag: W/"86be-6030bde212b57"
access-control-allow-origin: *
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
cache-control: max-age=14400
age: 6975
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=se%2B8k5qHoeNrPyhih9NUa55PkN7eFqBIY3sjaTIMAWpMyuwzzJm0CqvZLruiBKinGz9V4iMZ0%2BMn6j%2FcxspkIvQwblv21LatX5ia4MJExO9hfbbaXWkhYvTCZgf1j5bpHYtDApg%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
cf-cache-status: HIT
server: cloudflare
cf-ray: 8105b6b12a98b4ed-OSL
content-encoding: br