| challenges.cloudflare.com/turnstile/v0/api.js?render=explicit |  104.17.2.184 | | 0 B |
URL challenges.cloudflare.com/turnstile/v0/api.js?render=explicit IP104.17.2.184:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /turnstile/v0/api.js?render=explicit HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://inland.buykingsteel.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
date: Wed, 24 Apr 2024 13:07:21 GMT
content-length: 0
access-control-allow-origin: *
cache-control: max-age=300, public
cross-origin-resource-policy: cross-origin
location: /turnstile/v0/b/471dc2adc340/api.js?render=explicit
vary: Accept-Encoding
server: cloudflare
cf-ray: 879650d8fa9656ae-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| code.jquery.com/jquery-3.6.0.min.js |  151.101.2.137 | | 31 kB |
URL code.jquery.com/jquery-3.6.0.min.js IP151.101.2.137:0
File typeJavaScript source, ASCII text, with very long lines (65447) Hash8fb8fee4fcc3cc86ff6c724154c49c42 b82d238d4e31fdf618bae8ac11a6c812c03dd0d4 ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e
GET /jquery-3.6.0.min.js HTTP/1.1
Host: code.jquery.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://inland.buykingsteel.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Fri, 18 Oct 1991 12:00:00 GMT
etag: W/"28feccc0-15d9d"
cache-control: public, max-age=31536000, stale-while-revalidate=604800
access-control-allow-origin: *
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Wed, 24 Apr 2024 13:07:21 GMT
age: 6421661
x-served-by: cache-lga21931-LGA, cache-hel1410022-HEL
x-cache: HIT, HIT
x-cache-hits: 22, 38479
x-timer: S1713964041.190667,VS0,VE0
vary: Accept-Encoding
content-length: 30875
X-Firefox-Spdy: h2
|
|
| challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/cmg/1/GLhOioXg0bs57t4qPrORXFsL1%2BWig2mIKbgpVPMu7ZQ%3D | 104.17.2.184 | 200 OK | 61 B |
URL GET HTTP/3challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/cmg/1/GLhOioXg0bs57t4qPrORXFsL1%2BWig2mIKbgpVPMu7ZQ%3D IP104.17.2.184:443
Requested byhttps://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/o77fk/0x4AAAAAAAYBHmdcnLIqjPV7/auto/normal CertificateIssuerCloudflare, Inc. Subjectchallenges.cloudflare.com Fingerprint5F:E4:AA:8C:2E:24:D2:B1:69:9D:13:28:31:5C:65:FA:97:2A:E9:6E ValidityFri, 18 Aug 2023 00:00:00 GMT - Sat, 17 Aug 2024 23:59:59 GMT
File typePNG image data, 2 x 2, 8-bit/color RGB, non-interlaced Hash9246cca8fc3c00f50035f28e9f6b7f7d 3aa538440f70873b574f40cd793060f53ec17a5d c07d7d29e3c20fa6ca4c5d20663688d52bad13e129ad82ce06b80eb187d9dc84
GET /cdn-cgi/challenge-platform/h/b/cmg/1/GLhOioXg0bs57t4qPrORXFsL1%2BWig2mIKbgpVPMu7ZQ%3D HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/o77fk/0x4AAAAAAAYBHmdcnLIqjPV7/auto/normal
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 24 Apr 2024 13:07:21 GMT
content-type: image/png
content-length: 61
cache-control: max-age=2629800, public
server: cloudflare
cf-ray: 879650da990bb4ff-OSL
alt-svc: h3=":443"; ma=86400
|
|
| challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/flow/ov1/120014394:1713960618:iEs1UkH5QNs8QSfEF00aoGH3HBFpP5frbUTy505KINI/879650da2857b4ff/78e5aec94ef26a8 | 104.17.2.184 | 200 OK | 112 kB |
URL POST HTTP/3challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/flow/ov1/120014394:1713960618:iEs1UkH5QNs8QSfEF00aoGH3HBFpP5frbUTy505KINI/879650da2857b4ff/78e5aec94ef26a8 IP104.17.2.184:443
Requested byhttps://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/o77fk/0x4AAAAAAAYBHmdcnLIqjPV7/auto/normal CertificateIssuerCloudflare, Inc. Subjectchallenges.cloudflare.com Fingerprint5F:E4:AA:8C:2E:24:D2:B1:69:9D:13:28:31:5C:65:FA:97:2A:E9:6E ValidityFri, 18 Aug 2023 00:00:00 GMT - Sat, 17 Aug 2024 23:59:59 GMT
File typeASCII text, with very long lines (65536), with no line terminators Size112 kB (111777 bytes) Hash586c8dad62fea06410e49931e0770155 4d80ad68729e3641383a6fd6b7806477efe79f3c 2da460f3f5df0112021ffaa5bea8fe3bb6dfeeffa708bda6d5be29236883526b
POST /cdn-cgi/challenge-platform/h/b/flow/ov1/120014394:1713960618:iEs1UkH5QNs8QSfEF00aoGH3HBFpP5frbUTy505KINI/879650da2857b4ff/78e5aec94ef26a8 HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/o77fk/0x4AAAAAAAYBHmdcnLIqjPV7/auto/normal
Content-type: application/x-www-form-urlencoded
CF-Challenge: 78e5aec94ef26a8
Content-Length: 2465
Origin: https://challenges.cloudflare.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 24 Apr 2024 13:07:21 GMT
content-type: text/plain; charset=UTF-8
cf-chl-gen: nV9cyMdc58cNQxZrfM2bGCcqFN4QKeaqTuwkZKi5mRDVPjSGHJMajyIecKga2EzPhUn+zjFojr4DXnIWQ58iCunkh5Lu/TwLBFvdrbNsAX2f6UCiNrMaShv1vN6lSdYd9Xukt2nv0rOUBa5t+3XHcDdfVyH3J17Ac2NvP/OKisRJHepocH872G2i5Ut/OJnvcHfX+hkn6YQZUQeL33OiGa8fNX9a/A+NdXOlP35qGwWhpKFCZq9k1UMpNMIgT0LmXgCURULLsynQ/M2cxC/qur1jf1PhaVhHvFgGZzVEY36PHrXmYM1ELVjyIfzDXCfHyc60ho61/ENdHokA9arS4UfJJ8/QvvPyUFigNFjA+SYFdbpVEydNwBzU/qCmE80WS9b+kAd2568JtpauGoL7dM1XGEXRIz9MuyhUUp0LCf98vJnI/6tf8MCKFRvy2G6L$3iYd0IoRyCcZ1qHae+JwSQ==
vary: accept-encoding
server: cloudflare
cf-ray: 879650dc4aecb4ff-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/i/879650da2857b4ff/1713964041656/lR9brmvjWrbLQ69 | 104.17.2.184 | 200 OK | 61 B |
URL GET HTTP/3challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/i/879650da2857b4ff/1713964041656/lR9brmvjWrbLQ69 IP104.17.2.184:443
Requested byhttps://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/o77fk/0x4AAAAAAAYBHmdcnLIqjPV7/auto/normal CertificateIssuerCloudflare, Inc. Subjectchallenges.cloudflare.com Fingerprint5F:E4:AA:8C:2E:24:D2:B1:69:9D:13:28:31:5C:65:FA:97:2A:E9:6E ValidityFri, 18 Aug 2023 00:00:00 GMT - Sat, 17 Aug 2024 23:59:59 GMT
File typePNG image data, 2 x 57, 8-bit/color RGB, non-interlaced Hash8a2d83be13614c2600d203b309b1fdf0 6b1e0a4f769db6d1a18d466e0cf33f3614125fab 1d0f8211bb69bb731c71130b2ad7f9da3b9efd725d31fbec50182592d02b654b
GET /cdn-cgi/challenge-platform/h/b/i/879650da2857b4ff/1713964041656/lR9brmvjWrbLQ69 HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/o77fk/0x4AAAAAAAYBHmdcnLIqjPV7/auto/normal
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 24 Apr 2024 13:07:22 GMT
content-type: image/png
content-length: 61
server: cloudflare
cf-ray: 879650e24b90b4ff-OSL
alt-svc: h3=":443"; ma=86400
|
|
| challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/pat/879650da2857b4ff/1713964041663/8a7769ac65ac33aadfd7c1b065673d9220414d36841d1fa412c1396925a51b36/3ZlLuYNqAFWL-1g | 104.17.2.184 | 401 Unauthorized | 1 B |
URL GET HTTP/3challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/pat/879650da2857b4ff/1713964041663/8a7769ac65ac33aadfd7c1b065673d9220414d36841d1fa412c1396925a51b36/3ZlLuYNqAFWL-1g IP104.17.2.184:443
Requested byhttps://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/o77fk/0x4AAAAAAAYBHmdcnLIqjPV7/auto/normal CertificateIssuerCloudflare, Inc. Subjectchallenges.cloudflare.com Fingerprint5F:E4:AA:8C:2E:24:D2:B1:69:9D:13:28:31:5C:65:FA:97:2A:E9:6E ValidityFri, 18 Aug 2023 00:00:00 GMT - Sat, 17 Aug 2024 23:59:59 GMT
File typevery short file (no magic) Hashff44570aca8241914870afbc310cdb85 58668e7669fd564d99db5d581fcdb6a5618440b5 6da43b944e494e885e69af021f93c6d9331c78aa228084711429160a5bbd15b5
GET /cdn-cgi/challenge-platform/h/b/pat/879650da2857b4ff/1713964041663/8a7769ac65ac33aadfd7c1b065673d9220414d36841d1fa412c1396925a51b36/3ZlLuYNqAFWL-1g HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/o77fk/0x4AAAAAAAYBHmdcnLIqjPV7/auto/normal
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 401 Unauthorized
date: Wed, 24 Apr 2024 13:07:23 GMT
content-type: text/plain; charset=UTF-8
content-length: 1
www-authenticate: PrivateToken challenge="AAIAGXBhdC1pc3N1ZXIuY2xvdWRmbGFyZS5jb20gindprGWsM6rf18GwZWc9kiBBTTaEHR-kEsE5aSWlGzYAGWNoYWxsZW5nZXMuY2xvdWRmbGFyZS5jb20=", token-key="MIIBUjA9BgkqhkiG9w0BAQowMKANMAsGCWCGSAFlAwQCAqEaMBgGCSqGSIb3DQEBCDALBglghkgBZQMEAgKiAwIBMAOCAQ8AMIIBCgKCAQEApc5PUXcXSrXwpeNe3kT6EaAJPDsPBMfFZc7M608yW3JV6YSHiGBLoFiLtNHD3Yj8UsOtWbQeFa2uvS_dYz5MBsoSW4-RbOY-WCB2aGEB-eoRbXl4lJRl0UNGi00lNBgNTil_mTTSNV3ssSkmSY8kwM-5GqBNfJ2kmJPKo02MWiXn1pwc4YXbeATUrYDRvvXUXYZrgaarjDyvHFhnYpD3mqr5qOj_TS_1SCUZ0HIp8ywDX06Xc59cKjzFHEUzD3gWutoK4apMxNt9bWWxcH3D_UL1a1llCxh-knMwTxgvRXS-XHap_ymO2zCuAPNgo1SDCTl4lTQZbVX7VvpDZwMaiQIDAQAB", max-age=20, PrivateToken challenge="AAIALHBwLWlzc3Vlci1wcm9kdWN0aW9uLnJlc2VhcmNoLmNsb3VkZmxhcmUuY29tIIp3aaxlrDOq39fBsGVnPZIgQU02hB0fpBLBOWklpRs2ABljaGFsbGVuZ2VzLmNsb3VkZmxhcmUuY29t", token-key="MIIBUjA9BgkqhkiG9w0BAQowMKANMAsGCWCGSAFlAwQCAqEaMBgGCSqGSIb3DQEBCDALBglghkgBZQMEAgKiAwIBMAOCAQ8AMIIBCgKCAQEA1FEYykHcK8H9rb_u0aFz3CmWgYloQw4YhedoEOAjJ0vy2Axa4f9UG9Dzs4uXS34_h8l6MDo2nRCvLI9lvebilMnTjCn-6D77bewqYxJKUFZW1z2jBIdu03TrETczfEg7kxgKtJE9NXGDjYJcF_iMgzgNA0PEAVM89tUYXXlFy4cUAGlqU2mPpIEOxm5ARsXC-zlLK60fkJ4cOsZRkZa6EExdhmgdwQ0fEJuSOHrBO_-zJn4hUP8q9g4yqkxW2UrfJgD07F4HaHGBEiei06sGDvH2NEPvswEl5dTGxutNrxlU7W24iYhNa2nhjlc53nNb0mKtszv-czVE9UhXyJ7-RQIDAQAB", max-age=20
server: cloudflare
cf-ray: 879650e55fb3b4ff-OSL
alt-svc: h3=":443"; ma=86400
|
|
| inland.buykingsteel.com/cdn-cgi/challenge-platform/h/b/rc/879650da2857b4ff | 172.67.138.8 | | 21 B |
URL inland.buykingsteel.com/cdn-cgi/challenge-platform/h/b/rc/879650da2857b4ff IP172.67.138.8:0
Hash018598ff9794435b440d1bbf293cc10f 9129b0ca1a4febdf97636946a1fe7be8abf11890 898a24300baa285e173627eb7801c18db52748bb2119f56a71dcce0a5f8c8063
POST /cdn-cgi/challenge-platform/h/b/rc/879650da2857b4ff HTTP/1.1
Host: inland.buykingsteel.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://inland.buykingsteel.com/
Content-Type: application/json
Content-Length: 596
Origin: https://inland.buykingsteel.com
DNT: 1
Connection: keep-alive
Cookie: PHPSESSID=6aed4fb1c55fe0f5fe5d414f59a0c8eb
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 24 Apr 2024 13:07:23 GMT
content-type: application/json
content-length: 21
cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
set-cookie: cf_clearance=ii7rmpr0zcs_6T05IKTkIWTSr6me7gj2RxDRD4JfMTM-1713964043-1.0.1.1-tRhRPbi2xQsd8i2riTekkxe2lWGTMHnriOJ9EJ1DlCVGpMEaALmh9i1Z565rD8eX6bvWbUQshIeGIZb16MrZKQ; path=/; expires=Thu, 24-Apr-25 13:07:23 GMT; domain=.buykingsteel.com; HttpOnly; Secure; SameSite=None
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2BpxrqK5IkglIAr8p7t9iQATUN6rAVwGCEAZQCHN%2BLU4A5YJX9%2FP%2B%2FBp1EOQvFEyLA7EMY56Q4SyCVxfT2BseOVI8Ji%2B1IGh4xV3OoGqr5BrtScRwFp9mkCjF%2BxmiaViLX8IRcaq0S5m2Yw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 879650e67db00b55-OSL
alt-svc: h3=":443"; ma=86400
|
|
| inland.buykingsteel.com/beebb091955c06fa68b3eb8afc0bae516629040c5931aLOGbeebb091955c06fa68b3eb8afc0bae516629040c5931b | 172.67.138.8 | 200 OK | 5.8 kB |
URL User Request GET HTTP/3inland.buykingsteel.com/beebb091955c06fa68b3eb8afc0bae516629040c5931aLOGbeebb091955c06fa68b3eb8afc0bae516629040c5931b IP172.67.138.8:443
CertificateIssuerGoogle Trust Services LLC Subjectbuykingsteel.com FingerprintC9:E4:6C:0C:80:1A:E1:24:8D:55:81:1A:0D:67:11:12:34:4F:48:62 ValidityTue, 23 Apr 2024 08:50:27 GMT - Mon, 22 Jul 2024 08:50:26 GMT
File typeHTML document, ASCII text, with very long lines (4020) Hash8ed8db7a8e271b3b5f63c77d3c67d3a2 3c241a8512bfd34c9abb6b1f34415e9128762cad 67ae8bf730b7426e43c6a7013a4f0202ca638912bc9d35b220eb59cc7362767f
GET /beebb091955c06fa68b3eb8afc0bae516629040c5931aLOGbeebb091955c06fa68b3eb8afc0bae516629040c5931b HTTP/1.1
Host: inland.buykingsteel.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: PHPSESSID=6aed4fb1c55fe0f5fe5d414f59a0c8eb; cf_clearance=ii7rmpr0zcs_6T05IKTkIWTSr6me7gj2RxDRD4JfMTM-1713964043-1.0.1.1-tRhRPbi2xQsd8i2riTekkxe2lWGTMHnriOJ9EJ1DlCVGpMEaALmh9i1Z565rD8eX6bvWbUQshIeGIZb16MrZKQ
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 24 Apr 2024 13:07:24 GMT
content-type: text/html; charset=UTF-8
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=RTzYReo0N9iBEez1kvTeEipJQg9i01Ouf5qLuknnRy7Yaovj7JVJ9BDrhtFxOG7RRmb%2B6RujnTKmnzZWz2magS7t%2F%2FzYRRtZI4cf6nCziM7YOAZhN%2BKzr1Xn4MY0i6ek9sj%2FZNVfZEh99g%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 879650ed6c3f0b55-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| inland.buykingsteel.com/js/c1e3cb95d279401d41fb9500630ad6d56629040c63aab | 172.67.138.8 | 200 OK | 8.5 kB |
URL GET HTTP/3inland.buykingsteel.com/js/c1e3cb95d279401d41fb9500630ad6d56629040c63aab IP172.67.138.8:443
Requested byhttps://inland.buykingsteel.com/beebb091955c06fa68b3eb8afc0bae516629040c5931aLOGbeebb091955c06fa68b3eb8afc0bae516629040c5931b CertificateIssuerGoogle Trust Services LLC Subjectbuykingsteel.com FingerprintC9:E4:6C:0C:80:1A:E1:24:8D:55:81:1A:0D:67:11:12:34:4F:48:62 ValidityTue, 23 Apr 2024 08:50:27 GMT - Mon, 22 Jul 2024 08:50:26 GMT
File typeJavaScript source, ASCII text, with very long lines (7043), with no line terminators Hashb6c202188699b897bb727a68edd24665 ff3b891e06c983dca277c1d7d874c8eb8084eb96 184a034cb9202937bf012aff8c81e0747b7ca8f8f9e6115556fdb09d5baec419
GET /js/c1e3cb95d279401d41fb9500630ad6d56629040c63aab HTTP/1.1
Host: inland.buykingsteel.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://inland.buykingsteel.com/beebb091955c06fa68b3eb8afc0bae516629040c5931aLOGbeebb091955c06fa68b3eb8afc0bae516629040c5931b
Cookie: PHPSESSID=6aed4fb1c55fe0f5fe5d414f59a0c8eb; cf_clearance=ii7rmpr0zcs_6T05IKTkIWTSr6me7gj2RxDRD4JfMTM-1713964043-1.0.1.1-tRhRPbi2xQsd8i2riTekkxe2lWGTMHnriOJ9EJ1DlCVGpMEaALmh9i1Z565rD8eX6bvWbUQshIeGIZb16MrZKQ
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 24 Apr 2024 13:07:24 GMT
content-type: text/javascript
last-modified: Tue, 23 Apr 2024 14:15:06 GMT
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=LzbUIiUYSmC8l8tXE9OiqKEgCDobr41uUJj4L3QDszcpP9lt7p9pPQUOHxjdCTy%2BJOQNe5lvJGbV0OrlqIIFeSenqUpHXb3YrlKyHeBFGfExtECkL8pzZr9h%2FjjTm05mvIfj8GrJBlPGsA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 879650eddca10b55-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| | 172.67.138.8 | 302 Found | 4.5 kB |
URL User Request GET HTTP/3IP172.67.138.8:443
CertificateIssuerGoogle Trust Services LLC Subjectbuykingsteel.com FingerprintC9:E4:6C:0C:80:1A:E1:24:8D:55:81:1A:0D:67:11:12:34:4F:48:62 ValidityTue, 23 Apr 2024 08:50:27 GMT - Mon, 22 Jul 2024 08:50:26 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: inland.buykingsteel.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: PHPSESSID=6aed4fb1c55fe0f5fe5d414f59a0c8eb; cf_clearance=ii7rmpr0zcs_6T05IKTkIWTSr6me7gj2RxDRD4JfMTM-1713964043-1.0.1.1-tRhRPbi2xQsd8i2riTekkxe2lWGTMHnriOJ9EJ1DlCVGpMEaALmh9i1Z565rD8eX6bvWbUQshIeGIZb16MrZKQ
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 302 Found
date: Wed, 24 Apr 2024 13:07:24 GMT
content-type: text/html; charset=UTF-8
location: ./beebb091955c06fa68b3eb8afc0bae516629040c5931aLOGbeebb091955c06fa68b3eb8afc0bae516629040c5931b
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=781DHGbKasjEVP%2Bon%2F2dZkYg9ZEUmNK0KwQU%2FyRLaqThScmkVtcI8ZHasijB6h%2BawX5WZeFGPP1jQZROvAA6nfDznEIl2Wa9ibH5noo0IbD19XduJt674GV7gVW3CNYQpULqv85sP%2F74oA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 879650e9383c0b55-OSL
alt-svc: h3=":443"; ma=86400
|
|
| inland.buykingsteel.com/jq/c1e3cb95d279401d41fb9500630ad6d56629040c63aa5 | 172.67.138.8 | 200 OK | 86 kB |
URL GET HTTP/3inland.buykingsteel.com/jq/c1e3cb95d279401d41fb9500630ad6d56629040c63aa5 IP172.67.138.8:443
Requested byhttps://inland.buykingsteel.com/beebb091955c06fa68b3eb8afc0bae516629040c5931aLOGbeebb091955c06fa68b3eb8afc0bae516629040c5931b CertificateIssuerGoogle Trust Services LLC Subjectbuykingsteel.com FingerprintC9:E4:6C:0C:80:1A:E1:24:8D:55:81:1A:0D:67:11:12:34:4F:48:62 ValidityTue, 23 Apr 2024 08:50:27 GMT - Mon, 22 Jul 2024 08:50:26 GMT
File typeJavaScript source, ASCII text, with very long lines (32065) Hash2f6b11a7e914718e0290410e85366fe9 69bb69e25ca7d5ef0935317584e6153f3fd9a88c 05b85d96f41fff14d8f608dad03ab71e2c1017c2da0914d7c59291bad7a54f8e
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Microsoft |
GET /jq/c1e3cb95d279401d41fb9500630ad6d56629040c63aa5 HTTP/1.1
Host: inland.buykingsteel.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://inland.buykingsteel.com/beebb091955c06fa68b3eb8afc0bae516629040c5931aLOGbeebb091955c06fa68b3eb8afc0bae516629040c5931b
Cookie: PHPSESSID=6aed4fb1c55fe0f5fe5d414f59a0c8eb; cf_clearance=ii7rmpr0zcs_6T05IKTkIWTSr6me7gj2RxDRD4JfMTM-1713964043-1.0.1.1-tRhRPbi2xQsd8i2riTekkxe2lWGTMHnriOJ9EJ1DlCVGpMEaALmh9i1Z565rD8eX6bvWbUQshIeGIZb16MrZKQ
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 24 Apr 2024 13:07:24 GMT
content-type: text/javascript
last-modified: Tue, 23 Apr 2024 14:15:06 GMT
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=KktJr4slo5EsGOA3ATKdBFf%2BIfswBkKfZsrwmOV1H2JDQtdGu01vlyAiJCg%2FoToBrULK%2Fbw2NGiOcxbQaiwqPVV3u1v%2FrxcHxpG6GXfxmzy%2FxcLz2se%2BftUJEgfF6A4tl63mguaIgeyDOg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 879650edcc9d0b55-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=879650da2857b4ff | 104.17.2.184 | 200 OK | 429 kB |
URL GET HTTP/3challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=879650da2857b4ff IP104.17.2.184:443
Requested byhttps://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/o77fk/0x4AAAAAAAYBHmdcnLIqjPV7/auto/normal CertificateIssuerCloudflare, Inc. Subjectchallenges.cloudflare.com Fingerprint5F:E4:AA:8C:2E:24:D2:B1:69:9D:13:28:31:5C:65:FA:97:2A:E9:6E ValidityFri, 18 Aug 2023 00:00:00 GMT - Sat, 17 Aug 2024 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (65536), with no line terminators Size429 kB (429102 bytes) Hash3d62d5c871c6a831e710a0caed057acb 350eb32697e729d594c7de780e5e4ec5a8c0f949 d9b89cad9c3f54a12f3aa61533051c304264014605e6e378e4d59eab6a9c3ce2
GET /cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=879650da2857b4ff HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/o77fk/0x4AAAAAAAYBHmdcnLIqjPV7/auto/normal
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 24 Apr 2024 13:07:21 GMT
content-type: application/javascript; charset=UTF-8
cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
vary: accept-encoding
server: cloudflare
cf-ray: 879650da9911b4ff-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| inland.buykingsteel.com/boot/c1e3cb95d279401d41fb9500630ad6d56629040c63aaa | 172.67.138.8 | 200 OK | 51 kB |
URL GET HTTP/3inland.buykingsteel.com/boot/c1e3cb95d279401d41fb9500630ad6d56629040c63aaa IP172.67.138.8:443
Requested byhttps://inland.buykingsteel.com/beebb091955c06fa68b3eb8afc0bae516629040c5931aLOGbeebb091955c06fa68b3eb8afc0bae516629040c5931b CertificateIssuerGoogle Trust Services LLC Subjectbuykingsteel.com FingerprintC9:E4:6C:0C:80:1A:E1:24:8D:55:81:1A:0D:67:11:12:34:4F:48:62 ValidityTue, 23 Apr 2024 08:50:27 GMT - Mon, 22 Jul 2024 08:50:26 GMT
File typeJavaScript source, ASCII text, with very long lines (50758) Hash67176c242e1bdc20603c878dee836df3 27a71b00383d61ef3c489326b3564d698fc1227c 56c12a125b021d21a69e61d7190cefa168d6c28ce715265cea1b3b0112d169c4
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Microsoft |
GET /boot/c1e3cb95d279401d41fb9500630ad6d56629040c63aaa HTTP/1.1
Host: inland.buykingsteel.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://inland.buykingsteel.com/beebb091955c06fa68b3eb8afc0bae516629040c5931aLOGbeebb091955c06fa68b3eb8afc0bae516629040c5931b
Cookie: PHPSESSID=6aed4fb1c55fe0f5fe5d414f59a0c8eb; cf_clearance=ii7rmpr0zcs_6T05IKTkIWTSr6me7gj2RxDRD4JfMTM-1713964043-1.0.1.1-tRhRPbi2xQsd8i2riTekkxe2lWGTMHnriOJ9EJ1DlCVGpMEaALmh9i1Z565rD8eX6bvWbUQshIeGIZb16MrZKQ
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 24 Apr 2024 13:07:24 GMT
content-type: text/javascript
last-modified: Tue, 23 Apr 2024 14:15:06 GMT
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=zsKDl7Nh1jaGp%2Bip9i%2FNjrc4oSLAcdhE4XViKMiTyfrPyXSWehN1QFRzbVwNAav4qRhxQ6%2B57kYAAUVNEsIPUKEb4pooPYuOgS5IDoA6IdO82sHO9%2Bz%2FfD0FaitaIxtfMxHAeyfjQ1bpRQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 879650edcc9f0b55-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| inland.buykingsteel.com/favicon.ico | 172.67.138.8 | 404 Not Found | 315 B |
URL GET HTTP/3inland.buykingsteel.com/favicon.ico IP172.67.138.8:443
Requested byhttps://inland.buykingsteel.com/beebb091955c06fa68b3eb8afc0bae516629040c5931aLOGbeebb091955c06fa68b3eb8afc0bae516629040c5931b CertificateIssuerGoogle Trust Services LLC Subjectbuykingsteel.com FingerprintC9:E4:6C:0C:80:1A:E1:24:8D:55:81:1A:0D:67:11:12:34:4F:48:62 ValidityTue, 23 Apr 2024 08:50:27 GMT - Mon, 22 Jul 2024 08:50:26 GMT
File typeHTML document, ASCII text, with very long lines (326), with no line terminators Hash97ef40509b73c101d6815511c3adf98d a4242322497ea630ea72e26ba297a95a2bbe5ccd 322c1f60d9d454c801f7cff3173ef16b61cf9963a64e09a4d9e21d36218b56be
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Microsoft |
GET /favicon.ico HTTP/1.1
Host: inland.buykingsteel.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://inland.buykingsteel.com/beebb091955c06fa68b3eb8afc0bae516629040c5931aLOGbeebb091955c06fa68b3eb8afc0bae516629040c5931b
Cookie: PHPSESSID=6aed4fb1c55fe0f5fe5d414f59a0c8eb; cf_clearance=ii7rmpr0zcs_6T05IKTkIWTSr6me7gj2RxDRD4JfMTM-1713964043-1.0.1.1-tRhRPbi2xQsd8i2riTekkxe2lWGTMHnriOJ9EJ1DlCVGpMEaALmh9i1Z565rD8eX6bvWbUQshIeGIZb16MrZKQ
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 404 Not Found
date: Wed, 24 Apr 2024 13:07:25 GMT
content-type: text/html; charset=iso-8859-1
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=M2fV%2FG1n%2BGl1AZuIem4%2FOGzmBsbSf2w3JpuntbLc14xhXxM7olHzY3TQlmr3DEhz96y%2F2HTd1YiFSQSm%2BQmkVqcvlyDymjAywy07W8YuxeCQ50DCFYIH997xnBXklePrNZHiBJa2zn6M5g%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 879650f299ac0b55-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
0.0.0.0