188.114.97.1403 Forbidden 3.1 kB URL User Request GET HTTP/1.1 IP 188.114.97.1:80
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (4653), with no line terminators
Hash 30bbb846e594c3a668f47656fed49555
9354a1b2173c87e5aef8f106e51ac62321a76c35
95a80b05ae7e2ecae6d76c04a000fad27aa2456a1b2ee3e1df8cab65af1841f5
NIDS Severity Alert suricata low ET INFO HTTP Request to a *.pw domain
GET / HTTP/1.1
Host: conterso.pw
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 403 Forbidden
Date: Tue, 05 Dec 2023 13:28:10 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
Cross-Origin-Embedder-Policy: require-corp
Cross-Origin-Opener-Policy: same-origin
Cross-Origin-Resource-Policy: same-origin
Origin-Agent-Cluster: ?1
Permissions-Policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()
Referrer-Policy: same-origin
X-Frame-Options: SAMEORIGIN
cf-mitigated: challenge
Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=zBPNHYiAHVuQMBORJrOYuoSfc3yiJylP0HirieTjs2V%2BzQxuOGxZVEsMkcvUhEP%2FxayOnpLRTKW8pvk9a2Ez1OtYs40jIcaTzuIYCGX7FZHL0hGVPKH4D8xUP9j9fg%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 830ca1794d5556b7-OSL
Content-Encoding: gzip
conterso.pw/cdn-cgi/styles/challenges.css
188.114.97.1200 OK 2.6 kB URL GET HTTP/1.1 conterso.pw/cdn-cgi/styles/challenges.css
IP 188.114.97.1:80
File type ASCII text, with very long lines (6600), with no line terminators
Hash 2c78b7f8fa496092bf41d5edd51611e7
8b0b1b276e8194b0a5497db478ec2ea9b4f83c42
2b0bd09c1cc7119d27e45353a59bf6c2721563e1689853ff704057a7439508d2
NIDS Severity Alert suricata low ET INFO HTTP Request to a *.pw domain
GET /cdn-cgi/styles/challenges.css HTTP/1.1
Host: conterso.pw
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://conterso.pw/
DNT: 1
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 05 Dec 2023 13:28:10 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Tue, 28 Nov 2023 16:06:21 GMT
ETag: W/"65660ffd-19c8"
Server: cloudflare
CF-RAY: 830ca17accc2712d-OSL
X-Frame-Options: DENY
X-Content-Type-Options: nosniff
Vary: Accept-Encoding
Expires: Tue, 05 Dec 2023 15:28:10 GMT
Cache-Control: max-age=7200, public
Content-Encoding: gzip
conterso.pw/cdn-cgi/challenge-platform/h/b/orchestrate/chl_page/v1?ray=830ca1794d5556b7
188.114.97.1200 OK 55 kB URL GET HTTP/1.1 conterso.pw/cdn-cgi/challenge-platform/h/b/orchestrate/chl_page/v1?ray=830ca1794d5556b7
IP 188.114.97.1:80
File type ASCII text, with very long lines (65536), with no line terminators
Hash eb9e0782aca1967d6f9f11e24c99a971
a1492916c7ded757b5f6227f2c8d89b467f2c3d4
4a76e56d9f2333c16c547901529039494664c7986465104927cf867c46632d6c
NIDS Severity Alert suricata low ET INFO HTTP Request to a *.pw domain
GET /cdn-cgi/challenge-platform/h/b/orchestrate/chl_page/v1?ray=830ca1794d5556b7 HTTP/1.1
Host: conterso.pw
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://conterso.pw/?__cf_chl_rt_tk=Beb3BkKvpvHPNTF8UbyangKBwrAkMY08qsbuJ3dYdMg-1701782890-0-gaNycGzNBdA
DNT: 1
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 05 Dec 2023 13:28:10 GMT
Content-Type: application/javascript; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Si9ljdGVOVrp3cNrsDRPvA2Ozz0xigfdSlTYYEN0xh3bbpVShj3ML81LuiT8jHtm3jx8ba9yzFojl%2B0%2BrQicDW58bxJKx1rtBXbThP7kyJH2tjk1EVHaxjdqns29UA%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 830ca17afcfd712d-OSL
Content-Encoding: gzip
conterso.pw/favicon.ico
188.114.97.1403 Forbidden 3.1 kB IP 188.114.97.1:80
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (4698), with no line terminators
Hash 6ca5725174f6e25302cda31b04d9ec06
81698cd9507c38f628cc52299623eb1a00a74cba
4efc8389371e1428e0e664edbb8ed338aea42dce433d9ae4ff64c1e4e4c0155a
NIDS Severity Alert suricata low ET INFO HTTP Request to a *.pw domain
suricata low ET INFO HTTP Request to a *.pw domain
GET /favicon.ico HTTP/1.1
Host: conterso.pw
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://conterso.pw/
DNT: 1
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 403 Forbidden
Date: Tue, 05 Dec 2023 13:28:10 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
Cross-Origin-Embedder-Policy: require-corp
Cross-Origin-Opener-Policy: same-origin
Cross-Origin-Resource-Policy: same-origin
Origin-Agent-Cluster: ?1
Permissions-Policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()
Referrer-Policy: same-origin
X-Frame-Options: SAMEORIGIN
cf-mitigated: challenge
Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=P%2FODwu8fu5mVvYghozk2axq4iWqbb7q4Bxt2c%2BanqZG3GYuhusjb5w%2FHSLpjG9j5rtEZwIKiLbZoVAVuyBVd7Ob7%2FBpIKOgKPOGOKQ35EunuuqAjWett3RoCx3KCUA%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 830ca17b6dce712d-OSL
Content-Encoding: gzip
conterso.pw/favicon.ico
188.114.97.1403 Forbidden 3.1 kB IP 188.114.97.1:80
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (4698), with no line terminators
Hash 4623ffbea5a62ddd116c4f2950b4ff66
b402664c2bdcff7abf4e56ad5d1b4e2a608ca016
f3a46c25e1047d48b75605b5cf86efd45c4870547ff15927b9fcf7e4b8763cab
NIDS Severity Alert suricata low ET INFO HTTP Request to a *.pw domain
suricata low ET INFO HTTP Request to a *.pw domain
GET /favicon.ico HTTP/1.1
Host: conterso.pw
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://conterso.pw/
DNT: 1
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 403 Forbidden
Date: Tue, 05 Dec 2023 13:28:10 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
Cross-Origin-Embedder-Policy: require-corp
Cross-Origin-Opener-Policy: same-origin
Cross-Origin-Resource-Policy: same-origin
Origin-Agent-Cluster: ?1
Permissions-Policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()
Referrer-Policy: same-origin
X-Frame-Options: SAMEORIGIN
cf-mitigated: challenge
Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Vd2AyfsoRvpzOvYHA24JiquNcm0Nda%2FsUwC1Uk18COKlc7wpFtDdhBDjhZVfLA6qBJp6PCLg7Sf5Rn8X25EUcRES76cG82XOHtr01DnXNLVxwqrVxivLHwO46ZTntA%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 830ca17ba89556bd-OSL
Content-Encoding: gzip
challenges.cloudflare.com/turnstile/v0/b/56d3063b/api.js?onload=CUdK8&render=explicit
104.17.3.184200 OK 21 kB URL GET HTTP/2 challenges.cloudflare.com/turnstile/v0/b/56d3063b/api.js?onload=CUdK8&render=explicit
IP 104.17.3.184:443
Certificate IssuerCloudflare, Inc.
Subjectchallenges.cloudflare.com
Fingerprint5F:E4:AA:8C:2E:24:D2:B1:69:9D:13:28:31:5C:65:FA:97:2A:E9:6E
ValidityFri, 18 Aug 2023 00:00:00 GMT - Sat, 17 Aug 2024 23:59:59 GMT
File type ASCII text, with very long lines (33875)
Hash 8c90f391245a994ae95e644a587c8626
7bfc99336571d0ccfe38f9e1d18cb26b4adfc316
acbe221d9bb71e85d0a3b52a7a9d44ee4669ab664186b32d0c737a2be62681e7
GET /turnstile/v0/b/56d3063b/api.js?onload=CUdK8&render=explicit HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://conterso.pw
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 05 Dec 2023 13:28:10 GMT
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
cache-control: max-age=31536000
vary: Accept-Encoding
server: cloudflare
cf-ray: 830ca17bbce656c1-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/flow/ov1/154449052:1701781917:FdUIeKCCXRzFKXvphkuKlHmPfklaYoDsm0FPLHJgf0s/830ca17cdb6456c7/ae8550051f8399c
104.17.3.184200 OK 119 kB URL POST HTTP/3 challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/flow/ov1/154449052:1701781917:FdUIeKCCXRzFKXvphkuKlHmPfklaYoDsm0FPLHJgf0s/830ca17cdb6456c7/ae8550051f8399c
IP 104.17.3.184:443
Requested by https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/xjdeh/0x4AAAAAAAAjq6WYeRDKmebM/light/normal
Certificate IssuerCloudflare, Inc.
Subjectchallenges.cloudflare.com
Fingerprint5F:E4:AA:8C:2E:24:D2:B1:69:9D:13:28:31:5C:65:FA:97:2A:E9:6E
ValidityFri, 18 Aug 2023 00:00:00 GMT - Sat, 17 Aug 2024 23:59:59 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Size 119 kB (119272 bytes)
Hash 0f74e1c9c6849d5e811e6d4e1137c7b7
aa1e1a72a54fc02526a00359bc24054c4831a1f0
3c139f288780bd79ec6bedc131b58d8ee6fa6963a64c604303c4edcf0f2ae684
POST /cdn-cgi/challenge-platform/h/b/flow/ov1/154449052:1701781917:FdUIeKCCXRzFKXvphkuKlHmPfklaYoDsm0FPLHJgf0s/830ca17cdb6456c7/ae8550051f8399c HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/xjdeh/0x4AAAAAAAAjq6WYeRDKmebM/light/normal
Content-type: application/x-www-form-urlencoded
CF-Challenge: ae8550051f8399c
Content-Length: 3124
Origin: https://challenges.cloudflare.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 05 Dec 2023 13:28:11 GMT
content-type: text/plain; charset=UTF-8
cf-chl-gen: NelPKRuRdzNQRjqjH3HGuHWWwReAuVR24BY3bn3hjv65rqfBCgelu4Zf+NWYpzmyF+84/8YjnBVYkut574Htas3Iqsy+uKHXu1bJdEmW0zusd/GXKa5tcE584vPx4XG/Zj9v4R3S9Qib6h/A3LgmRGIkOFTKjiN4TRFinGhk59UA/zKJlxC0dfY8tN6Kk4qUSp33WnIHHllejgOHQkufRkgOlkQ7FsbI9SnK0trhoCrJpWqD3oqc1S/pmjhmPpMV564QtfXVoI+pdkbn6eiF61EOlJjO+ibb9nb6dgGQULkmnUYXvkf/2kuTRPuBHRPuKCqVdrifPD7cO1zVINoO8YX0K+//SW6CFWr1FveaKfMKxkkrNEIMQzCxbFyFFkWL2t2JuZRRVMZtEsh9ylSWh1mnfa6UIoYm8Qp0XvZ/Mn5adoXlYl0ZfC5eEclDeBb6KnEyMzSf4dBSr06t8an9Yg==$bQMnmILJL1KajgQiu+GVIg==
server: cloudflare
cf-ray: 830ca17eee1256c7-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/flow/ov1/154449052:1701781917:FdUIeKCCXRzFKXvphkuKlHmPfklaYoDsm0FPLHJgf0s/830ca17cdb6456c7/ae8550051f8399c
104.17.3.184200 OK 18 kB URL POST HTTP/3 challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/flow/ov1/154449052:1701781917:FdUIeKCCXRzFKXvphkuKlHmPfklaYoDsm0FPLHJgf0s/830ca17cdb6456c7/ae8550051f8399c
IP 104.17.3.184:443
Requested by https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/xjdeh/0x4AAAAAAAAjq6WYeRDKmebM/light/normal
Certificate IssuerCloudflare, Inc.
Subjectchallenges.cloudflare.com
Fingerprint5F:E4:AA:8C:2E:24:D2:B1:69:9D:13:28:31:5C:65:FA:97:2A:E9:6E
ValidityFri, 18 Aug 2023 00:00:00 GMT - Sat, 17 Aug 2024 23:59:59 GMT
File type ASCII text, with very long lines (17840), with no line terminators
Hash d6e3d4c455445b81d1b09e8233a4e81d
3154206f6999b36050c923b9094e5963c61a765e
50a6d185ab746d7ca1065e66f25c6bbc27d562bb94848da99ecfeaaefb12bc9e
POST /cdn-cgi/challenge-platform/h/b/flow/ov1/154449052:1701781917:FdUIeKCCXRzFKXvphkuKlHmPfklaYoDsm0FPLHJgf0s/830ca17cdb6456c7/ae8550051f8399c HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/xjdeh/0x4AAAAAAAAjq6WYeRDKmebM/light/normal
Content-type: application/x-www-form-urlencoded
CF-Challenge: ae8550051f8399c
Content-Length: 25833
Origin: https://challenges.cloudflare.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 05 Dec 2023 13:28:15 GMT
content-type: text/plain; charset=UTF-8
cf-chl-gen: j41bZwyoNvcpXHwx+oVyEZlMrMmJwVV777sjYyBjMtk33s1zy1WPG9DkXSXcjTXY$7C8IX99Y/mB8e+euxLGvXA==
server: cloudflare
cf-ray: 830ca195aa2256c7-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/xjdeh/0x4AAAAAAAAjq6WYeRDKmebM/light/normal
104.17.3.184200 OK 73 kB URL GET HTTP/3 challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/xjdeh/0x4AAAAAAAAjq6WYeRDKmebM/light/normal
IP 104.17.3.184:443
Certificate IssuerCloudflare, Inc.
Subjectchallenges.cloudflare.com
Fingerprint5F:E4:AA:8C:2E:24:D2:B1:69:9D:13:28:31:5C:65:FA:97:2A:E9:6E
ValidityFri, 18 Aug 2023 00:00:00 GMT - Sat, 17 Aug 2024 23:59:59 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (40091)
Hash bcf9c57b1de1804607d877cebafe6125
6edb3f57814d043af0129443322511b8c9857091
6ea7ae6fac1ecca9eb56a48d6dae7b27573c457400e043fa7235a68a3e79b346
GET /cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/xjdeh/0x4AAAAAAAAjq6WYeRDKmebM/light/normal HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 05 Dec 2023 13:28:11 GMT
content-type: text/html; charset=UTF-8
cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
content-security-policy: frame-src https://challenges.cloudflare.com/ blob:; base-uri 'self'
cross-origin-embedder-policy: require-corp
cross-origin-opener-policy: same-origin
cross-origin-resource-policy: cross-origin
document-policy: js-profiling
origin-agent-cluster: ?1
permissions-policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()
referrer-policy: same-origin
server: cloudflare
cf-ray: 830ca17cdb6456c7-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/cmg/1/ew4g0I%2FZYomJh1e75pupA0WLfHDXy%2FQKEyLTEDfnNN8%3D
104.17.3.184200 OK 61 B URL GET HTTP/3 challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/cmg/1/ew4g0I%2FZYomJh1e75pupA0WLfHDXy%2FQKEyLTEDfnNN8%3D
IP 104.17.3.184:443
Requested by https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/xjdeh/0x4AAAAAAAAjq6WYeRDKmebM/light/normal
Certificate IssuerCloudflare, Inc.
Subjectchallenges.cloudflare.com
Fingerprint5F:E4:AA:8C:2E:24:D2:B1:69:9D:13:28:31:5C:65:FA:97:2A:E9:6E
ValidityFri, 18 Aug 2023 00:00:00 GMT - Sat, 17 Aug 2024 23:59:59 GMT
File type PNG image data, 2 x 2, 8-bit/color RGB, non-interlaced\012- data
Hash 9246cca8fc3c00f50035f28e9f6b7f7d
3aa538440f70873b574f40cd793060f53ec17a5d
c07d7d29e3c20fa6ca4c5d20663688d52bad13e129ad82ce06b80eb187d9dc84
GET /cdn-cgi/challenge-platform/h/b/cmg/1/ew4g0I%2FZYomJh1e75pupA0WLfHDXy%2FQKEyLTEDfnNN8%3D HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/xjdeh/0x4AAAAAAAAjq6WYeRDKmebM/light/normal
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 05 Dec 2023 13:28:11 GMT
content-type: image/png
cache-control: max-age=2629800, public
server: cloudflare
cf-ray: 830ca17d6c0956c7-OSL
alt-svc: h3=":443"; ma=86400
challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/i/830ca17cdb6456c7/1701782891362/-4IjhJg9EF6u8WJ
104.17.3.184200 OK 61 B URL GET HTTP/3 challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/i/830ca17cdb6456c7/1701782891362/-4IjhJg9EF6u8WJ
IP 104.17.3.184:443
Requested by https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/xjdeh/0x4AAAAAAAAjq6WYeRDKmebM/light/normal
Certificate IssuerCloudflare, Inc.
Subjectchallenges.cloudflare.com
Fingerprint5F:E4:AA:8C:2E:24:D2:B1:69:9D:13:28:31:5C:65:FA:97:2A:E9:6E
ValidityFri, 18 Aug 2023 00:00:00 GMT - Sat, 17 Aug 2024 23:59:59 GMT
File type PNG image data, 84 x 91, 8-bit/color RGB, non-interlaced\012- data
Hash f2bcf0954520aa98162ce7b3b8e65ea4
fe88ddd169de7024c31b54d3a3f040622eaa62f4
f76a92755bb0fa435aa2727089c87c39dbb4ec96c6fae82203d3a39778da471d
GET /cdn-cgi/challenge-platform/h/b/i/830ca17cdb6456c7/1701782891362/-4IjhJg9EF6u8WJ HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/xjdeh/0x4AAAAAAAAjq6WYeRDKmebM/light/normal
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 05 Dec 2023 13:28:12 GMT
content-type: image/png
server: cloudflare
cf-ray: 830ca1857ef656c7-OSL
alt-svc: h3=":443"; ma=86400
conterso.pw/cdn-cgi/challenge-platform/h/b/flow/ov1/1056774123:1701781672:U-vjv4dPVKzFka44Dr9ntLoikyAyWoiqB4oCJdzq_qY/830ca1794d5556b7/df9f552ef3151d2
188.114.97.1200 OK 13 kB URL POST HTTP/1.1 conterso.pw/cdn-cgi/challenge-platform/h/b/flow/ov1/1056774123:1701781672:U-vjv4dPVKzFka44Dr9ntLoikyAyWoiqB4oCJdzq_qY/830ca1794d5556b7/df9f552ef3151d2
IP 188.114.97.1:80
File type ASCII text, with very long lines (12712), with no line terminators
Hash b28773cbae558a9aafc48456d9d7ddc0
b05ce4d834122811ed21181c244c9be6c7b683bf
a64d6cad994768cd35e34cdc20f315a55965006c251f057ab62a4280a020cc11
POST /cdn-cgi/challenge-platform/h/b/flow/ov1/1056774123:1701781672:U-vjv4dPVKzFka44Dr9ntLoikyAyWoiqB4oCJdzq_qY/830ca1794d5556b7/df9f552ef3151d2 HTTP/1.1
Host: conterso.pw
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://conterso.pw/
Content-type: application/x-www-form-urlencoded
CF-Challenge: df9f552ef3151d2
Content-Length: 1792
Origin: http://conterso.pw
DNT: 1
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 05 Dec 2023 13:28:10 GMT
Content-Type: text/plain; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
cf-chl-gen: xp+5HA5urPs4q867ESiptKoqa9Y3KICAjiYSGm5xQ50TTs6+U3D09KRhQKpVLSUU$W2LE9MzJB3Ng16WdGsvwpg==
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=2e2bgI6MucW7zgW8XbHzKhdWWa3h6%2B%2BwFO0uaza%2Fxf0%2BRKPE9bb0sxZNPZt9uFLc4gZw1EkzpOJj4ARoaXNQX9Ul12NXZssq4%2FNJAM4bevzs0C0pmHCrmH%2FFIjql7Q%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 830ca17c6ec80b41-OSL
Content-Encoding: gzip
challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=830ca17cdb6456c7
104.17.3.184200 OK 182 kB URL GET HTTP/3 challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=830ca17cdb6456c7
IP 104.17.3.184:443
Requested by https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/xjdeh/0x4AAAAAAAAjq6WYeRDKmebM/light/normal
Certificate IssuerCloudflare, Inc.
Subjectchallenges.cloudflare.com
Fingerprint5F:E4:AA:8C:2E:24:D2:B1:69:9D:13:28:31:5C:65:FA:97:2A:E9:6E
ValidityFri, 18 Aug 2023 00:00:00 GMT - Sat, 17 Aug 2024 23:59:59 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Size 182 kB (182410 bytes)
Hash e8e9ccae37e9716d06e2b9f89c67a5d5
606e4f10118bb32de2e5337564e5cc6eb6b96073
882daed6fc2bd5654a758f37e39e24bc7079e70cdf088e5df78360f10428c8df
GET /cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=830ca17cdb6456c7 HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/xjdeh/0x4AAAAAAAAjq6WYeRDKmebM/light/normal
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 05 Dec 2023 13:28:11 GMT
content-type: application/javascript; charset=UTF-8
cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
server: cloudflare
cf-ray: 830ca17d6c0b56c7-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400