centrafx.uk/sap/GB11ZDTA09565350751743/bWFyYy5mb3dsZXJAY2xlYXJlc3VsdC5jb20=
66.29.132.53200 OK 0 B URL User Request GET HTTP/2 centrafx.uk/sap/GB11ZDTA09565350751743/bWFyYy5mb3dsZXJAY2xlYXJlc3VsdC5jb20=
IP 66.29.132.53:443
Certificate IssuerSectigo Limited
Subjectcentrafx.uk
Fingerprint4E:D7:C5:F6:7A:DB:C5:50:F7:B2:35:87:15:E1:0E:69:39:D7:BA:F0
ValiditySat, 12 Aug 2023 00:00:00 GMT - Fri, 03 May 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert urlquery phishing Phishing - Microsoft Outlook
GET /sap/GB11ZDTA09565350751743/bWFyYy5mb3dsZXJAY2xlYXJlc3VsdC5jb20= HTTP/1.1
Host: centrafx.uk
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
x-powered-by: PHP/7.2.34
refresh: 0;url=https://theteamsnow.com/Mmarc.fowler@clearesult.com
content-type: text/html; charset=UTF-8
content-length: 0
date: Mon, 13 Nov 2023 17:00:51 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/i/825892cace941bfa/1699894852699/u-NqSrjWjSvPL29
104.17.3.184200 OK 61 B URL GET HTTP/3 challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/i/825892cace941bfa/1699894852699/u-NqSrjWjSvPL29
IP 104.17.3.184:443
Requested by https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/drhrl/0x4AAAAAAADnPIDROrmt1Wwj/light/normal
Certificate IssuerCloudflare, Inc.
Subjectchallenges.cloudflare.com
Fingerprint5F:E4:AA:8C:2E:24:D2:B1:69:9D:13:28:31:5C:65:FA:97:2A:E9:6E
ValidityFri, 18 Aug 2023 00:00:00 GMT - Sat, 17 Aug 2024 23:59:59 GMT
File type PNG image data, 75 x 2, 8-bit/color RGB, non-interlaced\012- data
Hash 8e3705b384b7eb4a79581c3aa1efea11
06fed7035ce8cf147fc1a7312403ad24044f19b5
94026fbdc3534ddf85a426df6431816644243ad2549534b67573f26fbc0d5efe
GET /cdn-cgi/challenge-platform/h/g/i/825892cace941bfa/1699894852699/u-NqSrjWjSvPL29 HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/drhrl/0x4AAAAAAADnPIDROrmt1Wwj/light/normal
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 13 Nov 2023 17:00:54 GMT
content-type: image/png
server: cloudflare
cf-ray: 825892d61db41bfa-OSL
alt-svc: h3=":443"; ma=86400
challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/pat/825892cace941bfa/1699894852704/1e5ff23d3dccb10b3dace656b731af56e537691f7ee391a68ff6b598957a1791/zK333KIMB3lqCj_
104.17.3.184401 Unauthorized 1 B URL GET HTTP/3 challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/pat/825892cace941bfa/1699894852704/1e5ff23d3dccb10b3dace656b731af56e537691f7ee391a68ff6b598957a1791/zK333KIMB3lqCj_
IP 104.17.3.184:443
Requested by https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/drhrl/0x4AAAAAAADnPIDROrmt1Wwj/light/normal
Certificate IssuerCloudflare, Inc.
Subjectchallenges.cloudflare.com
Fingerprint5F:E4:AA:8C:2E:24:D2:B1:69:9D:13:28:31:5C:65:FA:97:2A:E9:6E
ValidityFri, 18 Aug 2023 00:00:00 GMT - Sat, 17 Aug 2024 23:59:59 GMT
File type very short file (no magic)
Hash ff44570aca8241914870afbc310cdb85
58668e7669fd564d99db5d581fcdb6a5618440b5
6da43b944e494e885e69af021f93c6d9331c78aa228084711429160a5bbd15b5
GET /cdn-cgi/challenge-platform/h/g/pat/825892cace941bfa/1699894852704/1e5ff23d3dccb10b3dace656b731af56e537691f7ee391a68ff6b598957a1791/zK333KIMB3lqCj_ HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/drhrl/0x4AAAAAAADnPIDROrmt1Wwj/light/normal
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 401 Unauthorized
date: Mon, 13 Nov 2023 17:00:54 GMT
content-type: text/plain; charset=UTF-8
www-authenticate: PrivateToken challenge=AAIAGXBhdC1pc3N1ZXIuY2xvdWRmbGFyZS5jb20gHl_yPT3MsQs9rOZWtzGvVuU3aR9-45Gmj_a1mJV6F5EAGWNoYWxsZW5nZXMuY2xvdWRmbGFyZS5jb20=, token-key=MIIBUjA9BgkqhkiG9w0BAQowMKANMAsGCWCGSAFlAwQCAqEaMBgGCSqGSIb3DQEBCDALBglghkgBZQMEAgKiAwIBMAOCAQ8AMIIBCgKCAQEAw3-G2azMDQz14MtEw9Yc4MTiu1DUnWsnsI8X04PL5SI1i6hYY_VhUXes642jWVNaNc9DvTk3VKiAwkv_2admYcGRqYwL4lLF-lyE4ia0s35wIzqyKBhy6kksXyNNhZHqdbX2dhXVviFzQcnIOAIm1lKN-L8jeweQ74ibV2j-YnBH88c3EBOtxW8uP5ZSK97pwBY5J9cWrKMTZgPoYVcXoPZOM2rhbpF39cQyzcSbR8xFe2wEDELzsImry1fNMcDXohGoiOBeBIXjCDNWREvYxvSMPvZV4um_Po47y8007qf2T2nTYvEh0R03Lr5tR0V6wrS214LvJ_ZiPmyzjTFdDQIDAQAB, max-age=20, PrivateToken challenge=AAIALHBwLWlzc3Vlci1wcm9kdWN0aW9uLnJlc2VhcmNoLmNsb3VkZmxhcmUuY29tIB5f8j09zLELPazmVrcxr1blN2kffuORpo_2tZiVeheRABljaGFsbGVuZ2VzLmNsb3VkZmxhcmUuY29t, token-key=MIIBUjA9BgkqhkiG9w0BAQowMKANMAsGCWCGSAFlAwQCAqEaMBgGCSqGSIb3DQEBCDALBglghkgBZQMEAgKiAwIBMAOCAQ8AMIIBCgKCAQEAyAcIyqXWj0XAym0z5V844rFA0WOzLVwj0uCwmVj6zC4qOH40oBiGHrMNMBnDyk95jvnBAuHeEs855e7nA4l4DPJ4jUWKZbua8BxGAzjn74A1BV81a52F1zvBPUm-VEJXPAPXQehXphSv51uR7HKtfcM5oaS33TGDSy-6xv0r84xjMuTBvwPgXGehxpi1MCGGE5yWkzKN5Zzllk7m6Nkiv6learV-Uz7tzaoPbdZkBk1bFXxm2q07jWavoBZ-JEuEJyjQ00PSTz2Zjpbct6AlR3eCS9sbmXtb5XxSs7JMsvoa8uojD7a5m2SEJIwaf8xKL6wtxkaPonUfvsLj4JoJZQIDAQAB, max-age=20
server: cloudflare
cf-ray: 825892d88fb11bfa-OSL
alt-svc: h3=":443"; ma=86400
theteamsnow.com/Mmarc.fowler@clearesult.com
188.114.96.1403 Forbidden 6.8 kB URL User Request GET HTTP/2 theteamsnow.com/Mmarc.fowler@clearesult.com
IP 188.114.96.1:443
Certificate IssuerGoogle Trust Services LLC
Subjecttheteamsnow.com
FingerprintE6:AD:BD:E4:9C:FC:BE:A6:C6:1E:CA:78:B1:4A:24:61:58:EF:20:E5
ValidityFri, 13 Oct 2023 15:32:28 GMT - Thu, 11 Jan 2024 15:32:27 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (6848), with no line terminators
Hash b23314397d40ad71be49b86cdc2dfbf1
ce4989dac5e19f3b0e00f738d50537b942b8ff11
9053014384feae7f90f5fb269c4dfa38de4fba7d06a3bb27dcfa1038d5aa047f
Analyzer Verdict Alert urlquery phishing Phishing - Microsoft Outlook
GET /Mmarc.fowler@clearesult.com HTTP/1.1
Host: theteamsnow.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 403 Forbidden
date: Mon, 13 Nov 2023 17:00:51 GMT
content-type: text/html; charset=UTF-8
cross-origin-embedder-policy: require-corp
cross-origin-opener-policy: same-origin
cross-origin-resource-policy: same-origin
origin-agent-cluster: ?1
permissions-policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()
referrer-policy: same-origin
x-frame-options: SAMEORIGIN
cf-mitigated: challenge
cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
expires: Thu, 01 Jan 1970 00:00:01 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=JMB8m%2BqlLsiefDrdFMLUvxoU8XQyXQI%2FHlY1M5Z13tJYOpSoWlo6eu8Qe0lrrJAkvRRnwB6a2OhKeJJQzY%2F1Nk3R7doTqKur3eoX%2F70oXF7cZptFin7uc%2FIQFvm4H%2BMqHAw%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 825892c799bc5687-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
theteamsnow.com/cdn-cgi/styles/challenges.css
188.114.96.1200 OK 6.6 kB URL GET HTTP/3 theteamsnow.com/cdn-cgi/styles/challenges.css
IP 188.114.96.1:443
Requested by https://theteamsnow.com/Mmarc.fowler@clearesult.com
Certificate IssuerGoogle Trust Services LLC
Subjecttheteamsnow.com
FingerprintE6:AD:BD:E4:9C:FC:BE:A6:C6:1E:CA:78:B1:4A:24:61:58:EF:20:E5
ValidityFri, 13 Oct 2023 15:32:28 GMT - Thu, 11 Jan 2024 15:32:27 GMT
File type ASCII text, with very long lines (6608), with no line terminators
Hash f0fd80732479959c893cfd7380f594bd
04111102f46bc02c195561743b3f41b4d5a349ca
704e70fc0fd54cb83a1100d48093680b73e0d3c45a32dc326c38355185aaf37f
GET /cdn-cgi/styles/challenges.css HTTP/1.1
Host: theteamsnow.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://theteamsnow.com/Mmarc.fowler@clearesult.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 13 Nov 2023 17:00:51 GMT
content-type: text/css
last-modified: Wed, 08 Nov 2023 16:16:02 GMT
etag: W/"654bb442-19c8"
server: cloudflare
cf-ray: 825892c89f2d712d-OSL
x-frame-options: DENY
x-content-type-options: nosniff
vary: Accept-Encoding
expires: Mon, 13 Nov 2023 19:00:51 GMT
cache-control: max-age=7200, public
content-encoding: gzip
theteamsnow.com/favicon.ico
188.114.96.1403 Forbidden 5.7 kB URL GET HTTP/3 theteamsnow.com/favicon.ico
IP 188.114.96.1:443
Requested by https://theteamsnow.com/Mmarc.fowler@clearesult.com
Certificate IssuerGoogle Trust Services LLC
Subjecttheteamsnow.com
FingerprintE6:AD:BD:E4:9C:FC:BE:A6:C6:1E:CA:78:B1:4A:24:61:58:EF:20:E5
ValidityFri, 13 Oct 2023 15:32:28 GMT - Thu, 11 Jan 2024 15:32:27 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (5734), with no line terminators
Hash 3d619ff332d4910222f28b2476935845
5385dd28cc4df54698e96a73f1f133896cb368f9
e493567fad7723cf82855e8f55c39db7bf0edb746ad78c906817e1cdf9cd0be1
GET /favicon.ico HTTP/1.1
Host: theteamsnow.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://theteamsnow.com/Mmarc.fowler@clearesult.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 403 Forbidden
date: Mon, 13 Nov 2023 17:00:52 GMT
content-type: text/html; charset=UTF-8
cross-origin-embedder-policy: require-corp
cross-origin-opener-policy: same-origin
cross-origin-resource-policy: same-origin
origin-agent-cluster: ?1
permissions-policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()
referrer-policy: same-origin
x-frame-options: SAMEORIGIN
cf-mitigated: challenge
cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
expires: Thu, 01 Jan 1970 00:00:01 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=2whXdA7y7v6dNZdihMpYv7k5oqyGHfjy1L%2FSmKqsnTQMqSH7CUvvGYA4paNEtGZ3uTtSWQEEzmLB5blh7ll7HOKMEj3ryW3S7zOgkz2NnaYaLioaLziohG12Ffm5yjz59Qw%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 825892c90f90712d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
challenges.cloudflare.com/turnstile/v0/g/9914b343/api.js?onload=FAIg1&render=explicit
104.17.3.184200 OK 34 kB URL GET HTTP/2 challenges.cloudflare.com/turnstile/v0/g/9914b343/api.js?onload=FAIg1&render=explicit
IP 104.17.3.184:443
Requested by https://theteamsnow.com/Mmarc.fowler@clearesult.com
Certificate IssuerCloudflare, Inc.
Subjectchallenges.cloudflare.com
Fingerprint5F:E4:AA:8C:2E:24:D2:B1:69:9D:13:28:31:5C:65:FA:97:2A:E9:6E
ValidityFri, 18 Aug 2023 00:00:00 GMT - Sat, 17 Aug 2024 23:59:59 GMT
File type ASCII text, with very long lines (34253)
Hash 6142a5f5c66e2c1be52ee9506a565962
c3b39e8352efd1e0619b6dd62af8b2a917622868
51cd12da61a7401c73472b2ac77067adfa30e9fc0545b4b7c240e9154e011fc7
GET /turnstile/v0/g/9914b343/api.js?onload=FAIg1&render=explicit HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://theteamsnow.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 13 Nov 2023 17:00:52 GMT
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
cache-control: max-age=31536000
vary: Accept-Encoding
server: cloudflare
cf-ray: 825892c989ff56bd-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
theteamsnow.com/cdn-cgi/challenge-platform/h/g/flow/ov1/1973427066:1699892758:EFgr8Ml3gT7yJRx7bWpJwu_fJgCZ6HENVzXB6AKjsOo/825892c799bc5687/07bf201155a0709
188.114.96.1200 OK 13 kB URL POST HTTP/3 theteamsnow.com/cdn-cgi/challenge-platform/h/g/flow/ov1/1973427066:1699892758:EFgr8Ml3gT7yJRx7bWpJwu_fJgCZ6HENVzXB6AKjsOo/825892c799bc5687/07bf201155a0709
IP 188.114.96.1:443
Requested by https://theteamsnow.com/Mmarc.fowler@clearesult.com
Certificate IssuerGoogle Trust Services LLC
Subjecttheteamsnow.com
FingerprintE6:AD:BD:E4:9C:FC:BE:A6:C6:1E:CA:78:B1:4A:24:61:58:EF:20:E5
ValidityFri, 13 Oct 2023 15:32:28 GMT - Thu, 11 Jan 2024 15:32:27 GMT
File type ASCII text, with very long lines (12664), with no line terminators
Hash c60b65d2b26e133c68ba053bfece4727
2d28082f8a38ad81c594536d2cf479f5f17356e6
8102b9391106dedd2baee4f24129eccf17dd500f7a31dedab2c00663287e0e54
POST /cdn-cgi/challenge-platform/h/g/flow/ov1/1973427066:1699892758:EFgr8Ml3gT7yJRx7bWpJwu_fJgCZ6HENVzXB6AKjsOo/825892c799bc5687/07bf201155a0709 HTTP/1.1
Host: theteamsnow.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://theteamsnow.com/Mmarc.fowler@clearesult.com
Content-type: application/x-www-form-urlencoded
CF-Challenge: 07bf201155a0709
Content-Length: 1846
Origin: https://theteamsnow.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 13 Nov 2023 17:00:52 GMT
content-type: text/plain; charset=UTF-8
cf-chl-gen: Q/hZoEBOuelfxBcqPg0iGn+e8cwY9ZUiLID9OKM7tg5NdBOGb96GwFYN6E8KeVn6$p5cyOIpLWqCOGGXg0O6fiQ==
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=K5Ouf%2FElc9ptpElzg40kIMgKYhMCxLCVMhlrRVCXufOiuMHb8jMyWqZwn%2FU8qgRVbxyFSM7a5Jx1FiFKxDRxqzQ5cdLh77KLXYco%2BfWswQ8DKV%2BCmtJVkAdAcrB%2FB%2F2N198%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 825892ca288a712d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/drhrl/0x4AAAAAAADnPIDROrmt1Wwj/light/normal
104.17.3.184200 OK 73 kB URL GET HTTP/3 challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/drhrl/0x4AAAAAAADnPIDROrmt1Wwj/light/normal
IP 104.17.3.184:443
Requested by https://theteamsnow.com/Mmarc.fowler@clearesult.com
Certificate IssuerCloudflare, Inc.
Subjectchallenges.cloudflare.com
Fingerprint5F:E4:AA:8C:2E:24:D2:B1:69:9D:13:28:31:5C:65:FA:97:2A:E9:6E
ValidityFri, 18 Aug 2023 00:00:00 GMT - Sat, 17 Aug 2024 23:59:59 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (40091)
Hash 47f374fa7415179e5d6539835707dc22
2d05e6ca5e7e1ac699a2d6c506b9e94b648fa352
33810f04d4088e88ce81a8715d8e947ee61284c61904c131a7a8b1ec53cbb579
GET /cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/drhrl/0x4AAAAAAADnPIDROrmt1Wwj/light/normal HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 13 Nov 2023 17:00:52 GMT
content-type: text/html; charset=UTF-8
cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
content-security-policy: frame-src https://challenges.cloudflare.com/ blob:; base-uri 'self'
cross-origin-embedder-policy: require-corp
cross-origin-opener-policy: same-origin
cross-origin-resource-policy: cross-origin
document-policy: js-profiling
origin-agent-cluster: ?1
permissions-policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()
referrer-policy: same-origin
server: cloudflare
cf-ray: 825892cace941bfa-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/orchestrate/chl_api/v1?ray=825892cace941bfa
104.17.3.184200 OK 180 kB URL GET HTTP/3 challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/orchestrate/chl_api/v1?ray=825892cace941bfa
IP 104.17.3.184:443
Requested by https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/drhrl/0x4AAAAAAADnPIDROrmt1Wwj/light/normal
Certificate IssuerCloudflare, Inc.
Subjectchallenges.cloudflare.com
Fingerprint5F:E4:AA:8C:2E:24:D2:B1:69:9D:13:28:31:5C:65:FA:97:2A:E9:6E
ValidityFri, 18 Aug 2023 00:00:00 GMT - Sat, 17 Aug 2024 23:59:59 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Size 180 kB (179627 bytes)
Hash 17f5d185c75cb8177f11289a399a9b36
cc4e94ad20595459b35660bae8f90f66ff53c2fa
dedcacf97c616683247b4974cd492d8fec31a8b2a8c4e39765b097bd8ba45621
GET /cdn-cgi/challenge-platform/h/g/orchestrate/chl_api/v1?ray=825892cace941bfa HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/drhrl/0x4AAAAAAADnPIDROrmt1Wwj/light/normal
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 13 Nov 2023 17:00:52 GMT
content-type: application/javascript; charset=UTF-8
cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
server: cloudflare
cf-ray: 825892cb5f041bfa-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
theteamsnow.com/favicon.ico
188.114.96.1403 Forbidden 5.7 kB URL GET HTTP/3 theteamsnow.com/favicon.ico
IP 188.114.96.1:443
Requested by https://theteamsnow.com/Mmarc.fowler@clearesult.com
Certificate IssuerGoogle Trust Services LLC
Subjecttheteamsnow.com
FingerprintE6:AD:BD:E4:9C:FC:BE:A6:C6:1E:CA:78:B1:4A:24:61:58:EF:20:E5
ValidityFri, 13 Oct 2023 15:32:28 GMT - Thu, 11 Jan 2024 15:32:27 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (5734), with no line terminators
Hash e1735a1c8784a093d22227175f220daf
e8212616f2150ac6a0ab974ce31e1d029c045c55
13eec4e31c87742a3441a8554539e84e49dbf4ae71b00f72ad7da7ef96033621
GET /favicon.ico HTTP/1.1
Host: theteamsnow.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://theteamsnow.com/Mmarc.fowler@clearesult.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 403 Forbidden
date: Mon, 13 Nov 2023 17:00:52 GMT
content-type: text/html; charset=UTF-8
cross-origin-embedder-policy: require-corp
cross-origin-opener-policy: same-origin
cross-origin-resource-policy: same-origin
origin-agent-cluster: ?1
permissions-policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()
referrer-policy: same-origin
x-frame-options: SAMEORIGIN
cf-mitigated: challenge
cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
expires: Thu, 01 Jan 1970 00:00:01 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=wQYF3lLlId9OCD0Q2paqHiIfTD4e%2F6JyJm9A%2BZ%2F8NeAoILq4FMuD0sPGoquax5ePvnJmR0uokltXTDh9LqKXqkHOssY24OYuCxw6lZixTRwDDYuOTZiji5bEP%2BK5woXlOUk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 825892c97fe2712d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/cmg/1/9DKbiDfWH6ZjHxgSNTG3KHa3ucVmP6rj9MHN3bQn2%2BU%3D
104.17.3.184200 OK 61 B URL GET HTTP/3 challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/cmg/1/9DKbiDfWH6ZjHxgSNTG3KHa3ucVmP6rj9MHN3bQn2%2BU%3D
IP 104.17.3.184:443
Requested by https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/drhrl/0x4AAAAAAADnPIDROrmt1Wwj/light/normal
Certificate IssuerCloudflare, Inc.
Subjectchallenges.cloudflare.com
Fingerprint5F:E4:AA:8C:2E:24:D2:B1:69:9D:13:28:31:5C:65:FA:97:2A:E9:6E
ValidityFri, 18 Aug 2023 00:00:00 GMT - Sat, 17 Aug 2024 23:59:59 GMT
File type PNG image data, 2 x 2, 8-bit/color RGB, non-interlaced\012- data
Hash 9246cca8fc3c00f50035f28e9f6b7f7d
3aa538440f70873b574f40cd793060f53ec17a5d
c07d7d29e3c20fa6ca4c5d20663688d52bad13e129ad82ce06b80eb187d9dc84
GET /cdn-cgi/challenge-platform/h/g/cmg/1/9DKbiDfWH6ZjHxgSNTG3KHa3ucVmP6rj9MHN3bQn2%2BU%3D HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/drhrl/0x4AAAAAAADnPIDROrmt1Wwj/light/normal
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 13 Nov 2023 17:00:52 GMT
content-type: image/png
cache-control: max-age=2629800, public
server: cloudflare
cf-ray: 825892cb5f031bfa-OSL
alt-svc: h3=":443"; ma=86400
challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/flow/ov1/561981697:1699892643:Oa48RJetaqwQD1pRwNupWk_HdL5pAz5E6pT6oOn4h8Y/825892cace941bfa/b940cf66467d38b
104.17.3.184200 OK 83 kB URL POST HTTP/3 challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/flow/ov1/561981697:1699892643:Oa48RJetaqwQD1pRwNupWk_HdL5pAz5E6pT6oOn4h8Y/825892cace941bfa/b940cf66467d38b
IP 104.17.3.184:443
Requested by https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/drhrl/0x4AAAAAAADnPIDROrmt1Wwj/light/normal
Certificate IssuerCloudflare, Inc.
Subjectchallenges.cloudflare.com
Fingerprint5F:E4:AA:8C:2E:24:D2:B1:69:9D:13:28:31:5C:65:FA:97:2A:E9:6E
ValidityFri, 18 Aug 2023 00:00:00 GMT - Sat, 17 Aug 2024 23:59:59 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Hash 47aeb15b697501f4102c467004445fde
ebd31e79c39380bee2add17da2bdb0099be0e152
295e49674c0e311836cb9d27a4ab751e011dc6f933d3ae39138dd7a75a8477cd
POST /cdn-cgi/challenge-platform/h/g/flow/ov1/561981697:1699892643:Oa48RJetaqwQD1pRwNupWk_HdL5pAz5E6pT6oOn4h8Y/825892cace941bfa/b940cf66467d38b HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/drhrl/0x4AAAAAAADnPIDROrmt1Wwj/light/normal
Content-type: application/x-www-form-urlencoded
CF-Challenge: b940cf66467d38b
Content-Length: 3142
Origin: https://challenges.cloudflare.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 13 Nov 2023 17:00:52 GMT
content-type: text/plain; charset=UTF-8
cf-chl-gen: Bo3eCn3ZMWOp6d1rRm/gnRd7Q7yQNMYY/CRTpkR0UyjXyeDBu9n8ZHpfs8eQ/MS9knljMr7sLP5vgKDtsYIid+vZMgq5+pK03oM2L4T/v7+q8P9KECtJF96FlahEOKmJnGLKt6CUGihsvWGMce3SDHNWePe5dMzYO5t5biypr6MbNa9oH/3z+8LggCLccIZWwvIuGcFfIlteIyNfvxteAxpE20l7IFSg7ADaRwqFEXi6Gtf8hIFfLNT+fot0egWQQxtg43dLDfYKLjrjeJZzUrDsG5jSNzOwJarTOO37UuBn7/GOA/nlZYLCXm44QqprxNDD/SNqLxlZ+NwfgqzkLE3+fT4zFjC3MJHxZakzL4I=$OKRxWoUdldKi5ksaZMO/Pw==
server: cloudflare
cf-ray: 825892cd480d1bfa-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/flow/ov1/561981697:1699892643:Oa48RJetaqwQD1pRwNupWk_HdL5pAz5E6pT6oOn4h8Y/825892cace941bfa/b940cf66467d38b
104.17.3.184200 OK 18 kB URL POST HTTP/3 challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/flow/ov1/561981697:1699892643:Oa48RJetaqwQD1pRwNupWk_HdL5pAz5E6pT6oOn4h8Y/825892cace941bfa/b940cf66467d38b
IP 104.17.3.184:443
Requested by https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/drhrl/0x4AAAAAAADnPIDROrmt1Wwj/light/normal
Certificate IssuerCloudflare, Inc.
Subjectchallenges.cloudflare.com
Fingerprint5F:E4:AA:8C:2E:24:D2:B1:69:9D:13:28:31:5C:65:FA:97:2A:E9:6E
ValidityFri, 18 Aug 2023 00:00:00 GMT - Sat, 17 Aug 2024 23:59:59 GMT
File type ASCII text, with very long lines (17836), with no line terminators
Hash a2b5b20b14fc42d3eaed19f82e5c0de4
a12e2f3887ad189692fb5768bba3986d0a04abf7
e4197c697e4a925858fb42d688589a77d34de56db0e2b7ef6973bb0977bf0fc8
POST /cdn-cgi/challenge-platform/h/g/flow/ov1/561981697:1699892643:Oa48RJetaqwQD1pRwNupWk_HdL5pAz5E6pT6oOn4h8Y/825892cace941bfa/b940cf66467d38b HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/drhrl/0x4AAAAAAADnPIDROrmt1Wwj/light/normal
Content-type: application/x-www-form-urlencoded
CF-Challenge: b940cf66467d38b
Content-Length: 25545
Origin: https://challenges.cloudflare.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 13 Nov 2023 17:00:54 GMT
content-type: text/plain; charset=UTF-8
cf-chl-gen: Q3wRHPZtyFzQo+U+/y+VD+lr6lYc9UEgE5mxkRqzsiIqAMCDjKdJX5IhPNtIybR8$eFBM9vIUuICk03K1mb/zHQ==
server: cloudflare
cf-ray: 825892d988691bfa-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
theteamsnow.com/cdn-cgi/challenge-platform/h/g/orchestrate/chl_page/v1?ray=825892c799bc5687
188.114.96.1200 OK 171 kB URL GET HTTP/3 theteamsnow.com/cdn-cgi/challenge-platform/h/g/orchestrate/chl_page/v1?ray=825892c799bc5687
IP 188.114.96.1:443
Requested by https://theteamsnow.com/Mmarc.fowler@clearesult.com
Certificate IssuerGoogle Trust Services LLC
Subjecttheteamsnow.com
FingerprintE6:AD:BD:E4:9C:FC:BE:A6:C6:1E:CA:78:B1:4A:24:61:58:EF:20:E5
ValidityFri, 13 Oct 2023 15:32:28 GMT - Thu, 11 Jan 2024 15:32:27 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Size 171 kB (170999 bytes)
Hash b2f47a575d3ad8113868e27222db7214
12e1a15257ecdc8740eb789e0f57ad0f2f3d470c
1032c62ed8285fc2381e690329fc30be474c9bce3ee6af6c5709575e394619c8
GET /cdn-cgi/challenge-platform/h/g/orchestrate/chl_page/v1?ray=825892c799bc5687 HTTP/1.1
Host: theteamsnow.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://theteamsnow.com/Mmarc.fowler@clearesult.com?__cf_chl_rt_tk=CWVx6LYUVM3wjtG7NqHvJE0cZH9AWmjB3AKexS0h6ko-1699894851-0-gaNycGzNDbs
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 13 Nov 2023 17:00:51 GMT
content-type: application/javascript; charset=UTF-8
cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=xiGzCPGyvrbiRrJzDRdHl6ggplXbXd%2FuujR%2FJulGAd9it0vWjGW5WrBv8Gg1VT4yaKSbo4kO4JlGH1TB1ig19zQ5jiWOab4hpOAVeq%2BObRBvUCx2f4gj4kN4vrC9uQs82Xk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 825892c8df71712d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400