{"report_id":"7908d055-a045-4b6c-9096-639d7c7f2e83","version":0,"status":"done","tags":[],"date":"2026-07-31T19:02:33Z","url":{"schema":"https","addr":"gcg2.live/","fqdn":"gcg2.live","domain":"gcg2.live","tld":"live"},"ip":{"addr":"104.21.29.136","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"gcg2.live/challenge/?next=/","fqdn":"gcg2.live","domain":"gcg2.live","tld":"live"},"title":"GCG Finance — Security Check","dom":{"size":14452,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (334)","md5":"9849f6beeff91a70c4deb56ab65b02b5","sha1":"70901827a8338a076a24016dbd59ef150fd51d93","sha256":"1285de1f755b59b3407e09e2bab5f7b4dcfa003c6b138897608b8dbff41ab84e","sha512":"296d37cd451b8c479d47b79429684f717b9771820205b4a2ecfdf72586879d7dffb536498e269371a5e82aa8cd463a59eefa8fe25183db632e2b504b426ce08c","ssdeep":"192:oFFTkaQ97caHKG+804AEIWMS16po8DnOV+CR5f9I9ExetRwkMvWrzs1BF08XdY1z:xXWtRxQH2zI34","tlshash":"805296352ab600657023e1ad27eb570a3264f417f247ce257aec35548fce5a49863afc","dom_hash":"domhashe8d3ed4c8726b288819bd4a04c62e815","first_seen":"2026-07-31T18:37:00.598968Z","last_seen":"2026-07-31T19:02:33.452901Z","times_seen":3,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"gcg2.live/","fqdn":"gcg2.live","domain":"gcg2.live","tld":"live"},"ip":{"addr":"104.21.29.136","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-09-04T19:02:33Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"gcg2.live","ip":{"addr":"172.67.149.56","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-07-31T18:36:56.658805Z","last_seen":"2026-07-31T18:36:56.658805Z","alert_count":0,"request_count":8,"received_data":60291,"sent_data":3988,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":null,"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"gcg2.live/challenge/?next=/favicon.ico","fqdn":"gcg2.live","domain":"gcg2.live","tld":"live"},"ip":{"addr":"172.67.149.56","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gcg2.live/challenge/?next=/","date":"2026-07-31T19:02:06.536Z","timestamp":1785524526536,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gcg2.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Jul 2026 11:31:20 GMT","end":"Mon, 26 Oct 2026 12:29:49 GMT"},"fingerprint":{"sha1":"A0:54:67:DB:F1:B3:14:05:67:A5:AE:63:23:B8:78:FC:C3:01:CE:7B","sha256":"02:8D:EB:37:07:94:E4:8B:24:2E:FF:84:75:18:49:42:2A:11:08:D2:AC:3B:C5:E4:25:FE:63:9C:C3:23:E8:84"}}},"request":{"raw":"GET /challenge/?next=/favicon.ico HTTP/1.1\r\nHost: gcg2.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://gcg2.live/challenge/?next=/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 31 Jul 2026 19:02:06 GMT\r\ncontent-type: text/html\r\nlast-modified: Sat, 06 Jun 2026 00:12:07 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nreferrer-policy: no-referrer-when-downgrade\r\nvary: accept-encoding\r\ncf-cache-status: DYNAMIC\r\npriority: u=6,i=?0\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6n70ZLTcdrDsPfvP9lnB7mumHfaTTJMbd7ESrcm6VlKYZG7UAzoDKfB9qPbZnAnT8AkLglnpcPoZZVUIiozJdAWYWElLflVnKtDqWdBfF%2BxftanKFQdXLhKMpEU%3D\"}]}\r\ncf-ray: a23edb02deeec759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14398,"size_decoded":5769,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (334)","md5":"0c6ae6a4dc781ddb373cfb79cf4ab192","sha1":"bf5283d761a8f0765d1b01e63f3ad80a44eec240","sha256":"b3a6d28c80a016032540a35bb0154de4bdf82edfbe70fe988ed2a6aa6c291d64","sha512":"83f6bf84b6d3629eb39e1775150773f6533b18046240b205743ca8d8ef1d1a6643d72038fa17839f339bc4ba6f1e613865f41af46f060245f215cdc6174ad87a","ssdeep":"192:WF5TkaQ97caHKG+804AEIWMS16po8DnOV+CR5f9I9ExetCUMPSrzs1BF08XdY124:3XWt7YH2zI3Y","tlshash":"4f52a6352ab600657023e1ad27eb570a3264f417f247ce297aec35548fce5989863bfc","first_seen":"2026-07-31T18:37:00.603787Z","last_seen":"2026-07-31T19:02:33.453806Z","times_seen":3,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gcg2.live/challenge.php","fqdn":"gcg2.live","domain":"gcg2.live","tld":"live"},"ip":{"addr":"172.67.149.56","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://gcg2.live/challenge/?next=/","date":"2026-07-31T19:02:06.354Z","timestamp":1785524526354,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gcg2.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Jul 2026 11:31:20 GMT","end":"Mon, 26 Oct 2026 12:29:49 GMT"},"fingerprint":{"sha1":"A0:54:67:DB:F1:B3:14:05:67:A5:AE:63:23:B8:78:FC:C3:01:CE:7B","sha256":"02:8D:EB:37:07:94:E4:8B:24:2E:FF:84:75:18:49:42:2A:11:08:D2:AC:3B:C5:E4:25:FE:63:9C:C3:23:E8:84"}}},"request":{"raw":"GET /challenge.php HTTP/1.1\r\nHost: gcg2.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://gcg2.live/challenge/?next=/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 31 Jul 2026 19:02:06 GMT\r\ncontent-type: application/json\r\ncache-control: no-store, no-store, no-cache\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cyVa7UxYXxHbC5pB0iyg0LNh5UZNxK29tMoTc62yy9bLug9d3tK2jGpFugt9zZbfJu1PzUwrQhq1iedFdz22AOoO%2Fn%2BTNWPC51vj81DZWCzv3FXv6Oxl2W7l0NQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\npriority: u=4,i=?0\r\ncf-ray: a23edb01bebbc759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":106,"size_decoded":715,"mime_type":"application/json","magic":"JSON text data","md5":"09e3f2b95b9b3777ca1faeb70fc5d54d","sha1":"adb159add7b9d2d1b8ebaf3795ebee142063c3ba","sha256":"bc8105fc0f234c5965e1e6e002884ea9ef4ced3df5879f6f6b2ff8261c281796","sha512":"a5008f6f1fb01d3afd2c1b63264fdd8f81606a11aa8289aad5fb1558977c794d800aedae9a4ffd9f5a1afe8ff45c28ca32588871b564715f8f543554697bc5a6","ssdeep":"","tlshash":"64b0122d9df61bbaf1c74b216c5d0105683685b6cadbe0c4e19add7111d5913f214948","first_seen":"2026-07-31T19:02:33.454432Z","last_seen":"2026-07-31T19:02:33.454432Z","times_seen":1,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gcg2.live/","fqdn":"gcg2.live","domain":"gcg2.live","tld":"live"},"ip":{"addr":"172.67.149.56","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-31T19:02:06.005Z","timestamp":1785524526005,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gcg2.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Jul 2026 11:31:20 GMT","end":"Mon, 26 Oct 2026 12:29:49 GMT"},"fingerprint":{"sha1":"A0:54:67:DB:F1:B3:14:05:67:A5:AE:63:23:B8:78:FC:C3:01:CE:7B","sha256":"02:8D:EB:37:07:94:E4:8B:24:2E:FF:84:75:18:49:42:2A:11:08:D2:AC:3B:C5:E4:25:FE:63:9C:C3:23:E8:84"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: gcg2.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 \r\nserver: cloudflare\r\ndate: Fri, 31 Jul 2026 19:02:06 GMT\r\ncontent-type: text/html\r\npriority: u=0,i\r\nlocation: https://gcg2.live/challenge?next=/\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nreferrer-policy: no-referrer-when-downgrade\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XMKnZSzKxJDL2RGtdBlnw9Yfe7zbQrjOh4skidMXKsl0KFLeEeXikAHaGTUQq8m4z%2FsNaU1vGR5qEBcsb%2B0VvXvJr6TET9QOVHl4Mmqyffl9%2FF6amH2uEAECL%2Bk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a23edaffae72c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-10T06:49:09.763777Z","times_seen":17812964,"resource_available":true,"data":null}},"time_used":56,"timings":{"blocked":-1,"dns":3,"connect":14,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gcg2.live/challenge?next=/","fqdn":"gcg2.live","domain":"gcg2.live","tld":"live"},"ip":{"addr":"172.67.149.56","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-31T19:02:06.068Z","timestamp":1785524526068,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gcg2.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Jul 2026 11:31:20 GMT","end":"Mon, 26 Oct 2026 12:29:49 GMT"},"fingerprint":{"sha1":"A0:54:67:DB:F1:B3:14:05:67:A5:AE:63:23:B8:78:FC:C3:01:CE:7B","sha256":"02:8D:EB:37:07:94:E4:8B:24:2E:FF:84:75:18:49:42:2A:11:08:D2:AC:3B:C5:E4:25:FE:63:9C:C3:23:E8:84"}}},"request":{"raw":"GET /challenge?next=/ HTTP/1.1\r\nHost: gcg2.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 301 \r\nserver: cloudflare\r\ndate: Fri, 31 Jul 2026 19:02:06 GMT\r\ncontent-type: text/html\r\npriority: u=0,i\r\nlocation: https://gcg2.live/challenge/?next=/\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nreferrer-policy: no-referrer-when-downgrade\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iJMTyeMjshHmVFnJHsuVNCS6v77zWBsZAkLGLpTBdtJEC2H2eEtkHBGJY2B8PX%2F9S5hYcVSj%2Bynxw5%2FdWaCQ1LeUK%2BIpAW%2BV8B4crbtnFO4mz0kTjysPzc6LuzQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a23edaffee78c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-10T06:49:09.763777Z","times_seen":17812964,"resource_available":true,"data":null}},"time_used":34,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gcg2.live/challenge/?next=/","fqdn":"gcg2.live","domain":"gcg2.live","tld":"live"},"ip":{"addr":"172.67.149.56","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-31T19:02:06.106Z","timestamp":1785524526106,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gcg2.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Jul 2026 11:31:20 GMT","end":"Mon, 26 Oct 2026 12:29:49 GMT"},"fingerprint":{"sha1":"A0:54:67:DB:F1:B3:14:05:67:A5:AE:63:23:B8:78:FC:C3:01:CE:7B","sha256":"02:8D:EB:37:07:94:E4:8B:24:2E:FF:84:75:18:49:42:2A:11:08:D2:AC:3B:C5:E4:25:FE:63:9C:C3:23:E8:84"}}},"request":{"raw":"GET /challenge/?next=/ HTTP/1.1\r\nHost: gcg2.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 31 Jul 2026 19:02:06 GMT\r\ncontent-type: text/html\r\nlast-modified: Sat, 06 Jun 2026 00:12:07 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nreferrer-policy: no-referrer-when-downgrade\r\nvary: accept-encoding\r\ncf-cache-status: DYNAMIC\r\npriority: u=0,i\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IfyykSF1DmqwMn8joLnLn7rNiW1Wzuqzd%2FCAfpCEDJvb5HVaGU%2BHKFSNbPQFDxmnmf%2FYE6%2BhruAzrDuR2qyrorPftk%2FoVy2wYtJjYvDTNjIErUSU3A35FOPiYO0%3D\"}]}\r\ncf-ray: a23edb002e85c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14398,"size_decoded":5774,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (334)","md5":"0c6ae6a4dc781ddb373cfb79cf4ab192","sha1":"bf5283d761a8f0765d1b01e63f3ad80a44eec240","sha256":"b3a6d28c80a016032540a35bb0154de4bdf82edfbe70fe988ed2a6aa6c291d64","sha512":"83f6bf84b6d3629eb39e1775150773f6533b18046240b205743ca8d8ef1d1a6643d72038fa17839f339bc4ba6f1e613865f41af46f060245f215cdc6174ad87a","ssdeep":"192:WF5TkaQ97caHKG+804AEIWMS16po8DnOV+CR5f9I9ExetCUMPSrzs1BF08XdY124:3XWt7YH2zI3Y","tlshash":"4f52a6352ab600657023e1ad27eb570a3264f417f247ce297aec35548fce5989863bfc","first_seen":"2026-07-31T18:37:00.603787Z","last_seen":"2026-07-31T19:02:33.453806Z","times_seen":3,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gcg2.live/logo.png","fqdn":"gcg2.live","domain":"gcg2.live","tld":"live"},"ip":{"addr":"172.67.149.56","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gcg2.live/challenge/?next=/","date":"2026-07-31T19:02:06.352Z","timestamp":1785524526352,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gcg2.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Jul 2026 11:31:20 GMT","end":"Mon, 26 Oct 2026 12:29:49 GMT"},"fingerprint":{"sha1":"A0:54:67:DB:F1:B3:14:05:67:A5:AE:63:23:B8:78:FC:C3:01:CE:7B","sha256":"02:8D:EB:37:07:94:E4:8B:24:2E:FF:84:75:18:49:42:2A:11:08:D2:AC:3B:C5:E4:25:FE:63:9C:C3:23:E8:84"}}},"request":{"raw":"GET /logo.png HTTP/1.1\r\nHost: gcg2.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://gcg2.live/challenge/?next=/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 31 Jul 2026 19:02:06 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Sat, 06 Jun 2026 00:05:55 GMT\r\netag: \"6a236463-6426\"\r\nexpires: Fri, 31 Jul 2026 19:36:14 GMT\r\ncache-control: max-age=14400\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nreferrer-policy: no-referrer-when-downgrade\r\naccept-ranges: bytes\r\nage: 1551\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Moco7lkOyzlqk8rbwi4wQw8o6wIDGRw%2FMDvI3Li7dpBSDR0n2m0gaAgSbZ4L0LqykWDH2zN%2B%2Bxu1yixTKTKeNuu%2F253TRFx8O9QH8153131bxXPf1D4y0F47jbo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a23edb01bebac759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 25638\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25638,"size_decoded":26478,"mime_type":"image/png","magic":"PNG image data, 1024 x 388, 8-bit/color RGBA, non-interlaced","md5":"3d1b2f053f3cd9e3c5dfdda27d8999d0","sha1":"027d0037ffa35ac668b339169aa4bf21f9aec275","sha256":"07a1e9ee01d88655a57d7d4ecef56b3d18315229081e6fc0ed086c2666a8eb32","sha512":"38745cf5c7ab108bc72cc47840001475849f00854378d6396c5fe16190177b7d24cf359eecd39d987dc90db95575d2d1d9601ed7546285d54e3f403c872a3b0c","ssdeep":"384:wskL+ct+QsyChJKbzfEX3shCvGid4XsJYYT0TSO8iC/QA8mYr9AwXz/Trf2+T:4+ctGie37vGm4xC/rZYKwXzve+T","tlshash":"90b2bf33c4a2691be838433b6a07531928b02dcab5fc319592ebbc70477c2d5b6a4996","first_seen":"2026-07-31T18:37:00.60669Z","last_seen":"2026-07-31T19:02:33.456052Z","times_seen":3,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gcg2.live/favicon.ico","fqdn":"gcg2.live","domain":"gcg2.live","tld":"live"},"ip":{"addr":"172.67.149.56","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gcg2.live/challenge/?next=/","date":"2026-07-31T19:02:06.399Z","timestamp":1785524526399,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gcg2.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Jul 2026 11:31:20 GMT","end":"Mon, 26 Oct 2026 12:29:49 GMT"},"fingerprint":{"sha1":"A0:54:67:DB:F1:B3:14:05:67:A5:AE:63:23:B8:78:FC:C3:01:CE:7B","sha256":"02:8D:EB:37:07:94:E4:8B:24:2E:FF:84:75:18:49:42:2A:11:08:D2:AC:3B:C5:E4:25:FE:63:9C:C3:23:E8:84"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: gcg2.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://gcg2.live/challenge/?next=/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 \r\nserver: cloudflare\r\ndate: Fri, 31 Jul 2026 19:02:06 GMT\r\ncontent-type: text/html\r\npriority: u=6,i=?0\r\nlocation: https://gcg2.live/challenge?next=/favicon.ico\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nreferrer-policy: no-referrer-when-downgrade\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xNxzwu35sjUp1sopCPM7Al%2Bius4U%2BnGYuj0zO4QcI02xHccUZ%2FWMk%2FJJnfszK67w4%2FP43wsWhBWynzEaL4Do4vSlxmCcxTSAedvs0vJoY2qAzcAQhIxehkMqwOk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a23edb01fed1c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-10T06:49:09.763777Z","times_seen":17812964,"resource_available":true,"data":null}},"time_used":32,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gcg2.live/challenge?next=/favicon.ico","fqdn":"gcg2.live","domain":"gcg2.live","tld":"live"},"ip":{"addr":"172.67.149.56","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gcg2.live/challenge/?next=/","date":"2026-07-31T19:02:06.496Z","timestamp":1785524526496,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gcg2.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Jul 2026 11:31:20 GMT","end":"Mon, 26 Oct 2026 12:29:49 GMT"},"fingerprint":{"sha1":"A0:54:67:DB:F1:B3:14:05:67:A5:AE:63:23:B8:78:FC:C3:01:CE:7B","sha256":"02:8D:EB:37:07:94:E4:8B:24:2E:FF:84:75:18:49:42:2A:11:08:D2:AC:3B:C5:E4:25:FE:63:9C:C3:23:E8:84"}}},"request":{"raw":"GET /challenge?next=/favicon.ico HTTP/1.1\r\nHost: gcg2.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://gcg2.live/challenge/?next=/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 301 \r\nserver: cloudflare\r\ndate: Fri, 31 Jul 2026 19:02:06 GMT\r\ncontent-type: text/html\r\npriority: u=6,i=?0\r\nlocation: https://gcg2.live/challenge/?next=/favicon.ico\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nreferrer-policy: no-referrer-when-downgrade\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AVdq7Y%2BKbvtwnyo%2BLyrPAVtiVml34DpX3dcnNU4ZHfUOKmn4vz4T8wOCbBcLaVAqG8yDz82BDN5Rj1cLQtEP6vsEYG96vWRF2s5IBy0Q31T%2Ff2xOusOS5lB7lLk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a23edb029ee0c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-10T06:49:09.763777Z","times_seen":17812964,"resource_available":true,"data":null}},"time_used":35,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}