ocsp.netsolssl.com/
104.18.38.233 472 B IP 104.18.38.233:0
Hash 3ff5a66351e9ebf045467c36a800b04a
3187c97084c46caa40b014257dc36849fc625ce9
77cba35b6952683829bbe36fb61b7f8834c7a6952909a3d191fff4b433a6ee49
POST / HTTP/1.1
Host: ocsp.netsolssl.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 19 Nov 2023 01:13:34 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Fri, 17 Nov 2023 05:19:40 GMT
Expires: Fri, 24 Nov 2023 05:19:39 GMT
Etag: "3187c97084c46caa40b014257dc36849fc625ce9"
Cache-Control: max-age=446164,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb2
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 828497632fffb4f3-OSL
selligenttier.naylorcampaigns.com/track?type=click&enid=ZWFzPTEmbXNpZD0mYXVpZD0mbWFpbGluZ2lkPTYyNDExMiZtZXNzYWdlaWQ9NjI0MTEyJmRhdGFiYXNlaWQ9NjI0MTEyJnNlcmlhbD0xNjgyODQwNyZlbWFpbGlkPVRpbUBFbGV2YXRlZGNnLmNvbSZ1c2VyaWQ9MjExMTg2JnRhcmdldGlkPSZtbj0mZmw9Jm12aWQ9JmV4dHJhPSYmJg==&&&9999&&&https://shumhoi.com/xml/rid/DvRIR/Y3ludGhpYS56YWdpZWJveWxvQG5tc3Mub3Jn
144.202.229.149 1.6 kB URL selligenttier.naylorcampaigns.com/track?type=click&enid=ZWFzPTEmbXNpZD0mYXVpZD0mbWFpbGluZ2lkPTYyNDExMiZtZXNzYWdlaWQ9NjI0MTEyJmRhdGFiYXNlaWQ9NjI0MTEyJnNlcmlhbD0xNjgyODQwNyZlbWFpbGlkPVRpbUBFbGV2YXRlZGNnLmNvbSZ1c2VyaWQ9MjExMTg2JnRhcmdldGlkPSZtbj0mZmw9Jm12aWQ9JmV4dHJhPSYmJg==&&&9999&&&https://shumhoi.com/xml/rid/DvRIR/Y3ludGhpYS56YWdpZWJveWxvQG5tc3Mub3Jn
IP 144.202.229.149:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (1630), with no line terminators
Hash d2770a4237753b9134f149c557ff85b9
1a79ce0006880d41b2e2e57a6e865ebe6e2d3568
d7bd351c9bc1425a52df3cad3f0a743eee0be08002a9e04d010355e3acf6bc12
GET /track?type=click&enid=ZWFzPTEmbXNpZD0mYXVpZD0mbWFpbGluZ2lkPTYyNDExMiZtZXNzYWdlaWQ9NjI0MTEyJmRhdGFiYXNlaWQ9NjI0MTEyJnNlcmlhbD0xNjgyODQwNyZlbWFpbGlkPVRpbUBFbGV2YXRlZGNnLmNvbSZ1c2VyaWQ9MjExMTg2JnRhcmdldGlkPSZtbj0mZmw9Jm12aWQ9JmV4dHJhPSYmJg==&&&9999&&&https://shumhoi.com/xml/rid/DvRIR/Y3ludGhpYS56YWdpZWJveWxvQG5tc3Mub3Jn HTTP/1.1
Host: selligenttier.naylorcampaigns.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 19 Nov 2023 01:13:34 GMT
Server:
Cache-Control: no-cache, must-revalidate, max-age=0, no-store
Expires: -1
Pragma: no-cache
Content-Length: 1630
Connection: close
Content-Type: text/html;charset=ascii
shumhoi.com/xml/rid/DvRIR/Y3ludGhpYS56YWdpZWJveWxvQG5tc3Mub3Jn
162.241.120.242200 OK 0 B URL User Request GET HTTP/1.1 shumhoi.com/xml/rid/DvRIR/Y3ludGhpYS56YWdpZWJveWxvQG5tc3Mub3Jn
IP 162.241.120.242:443
ASN #46606 UNIFIEDLAYER-AS-1
Certificate IssuerLet's Encrypt
Subjectcpcalendars.shumhoi.com
Fingerprint75:53:C1:9D:F4:45:D9:5B:F0:70:34:B1:62:CF:F4:05:18:37:80:7E
ValidityWed, 15 Nov 2023 22:37:33 GMT - Tue, 13 Feb 2024 22:37:32 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert urlquery phishing Phishing - Microsoft Outlook
GET /xml/rid/DvRIR/Y3ludGhpYS56YWdpZWJveWxvQG5tc3Mub3Jn HTTP/1.1
Host: shumhoi.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://selligenttier.naylorcampaigns.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 19 Nov 2023 01:13:33 GMT
Server: Apache
refresh: 0;url=https://lok365.live/&qrc=?email=cynthia.zagieboylo@nmss.org
Content-Length: 0
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8
challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/pat/8284976debb7568e/1700356415975/0cd8e7eee1a644651c8e513bffebcdc04403e83c231a81a9f657d87e91f14f14/YFeQHU5HN3DSWFr
104.17.2.184401 Unauthorized 1 B URL GET HTTP/3 challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/pat/8284976debb7568e/1700356415975/0cd8e7eee1a644651c8e513bffebcdc04403e83c231a81a9f657d87e91f14f14/YFeQHU5HN3DSWFr
IP 104.17.2.184:443
Requested by https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/q0wq2/0x4AAAAAAAAjq6WYeRDKmebM/light/normal
Certificate IssuerCloudflare, Inc.
Subjectchallenges.cloudflare.com
Fingerprint5F:E4:AA:8C:2E:24:D2:B1:69:9D:13:28:31:5C:65:FA:97:2A:E9:6E
ValidityFri, 18 Aug 2023 00:00:00 GMT - Sat, 17 Aug 2024 23:59:59 GMT
File type very short file (no magic)
Hash ff44570aca8241914870afbc310cdb85
58668e7669fd564d99db5d581fcdb6a5618440b5
6da43b944e494e885e69af021f93c6d9331c78aa228084711429160a5bbd15b5
GET /cdn-cgi/challenge-platform/h/g/pat/8284976debb7568e/1700356415975/0cd8e7eee1a644651c8e513bffebcdc04403e83c231a81a9f657d87e91f14f14/YFeQHU5HN3DSWFr HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/q0wq2/0x4AAAAAAAAjq6WYeRDKmebM/light/normal
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 401 Unauthorized
date: Sun, 19 Nov 2023 01:13:38 GMT
content-type: text/plain; charset=UTF-8
www-authenticate: PrivateToken challenge=AAIAGXBhdC1pc3N1ZXIuY2xvdWRmbGFyZS5jb20gDNjn7uGmRGUcjlE7_-vNwEQD6DwjGoGp9lfYfpHxTxQAGWNoYWxsZW5nZXMuY2xvdWRmbGFyZS5jb20=, token-key=MIIBUjA9BgkqhkiG9w0BAQowMKANMAsGCWCGSAFlAwQCAqEaMBgGCSqGSIb3DQEBCDALBglghkgBZQMEAgKiAwIBMAOCAQ8AMIIBCgKCAQEA2Vpu93cQGJ2LaZqutZBtBreQbl_on09bX3jUD1xgGHNU1bhZDG0Mis-M3E9MoLsj0SXQPrgtEEXCrSty2tCoCHs4hds4Th8FtYf6vr6jcGvhP-JPUCv7zhxe2WixKmBEuBMQPOEnZpPY5qGlclA0pn5z1YdkqVDVuPLDsqYDXAsntqJEXsVqxzOxbHOAWm7Unww5KwcId437A1PncomjAGLNf0sFUKCTQ0CULWIPIaOE__-uztyz5ahlObs2gAGcQwskwDCWAS3sN5mp3SCTpB4OPKwZ1DcVhhqHJrhvtP_8AgwwCgl9K4KqkgXop7P1oLjAeJ3eQhWNua7m5REZMwIDAQAB, max-age=20, PrivateToken challenge=AAIALHBwLWlzc3Vlci1wcm9kdWN0aW9uLnJlc2VhcmNoLmNsb3VkZmxhcmUuY29tIAzY5-7hpkRlHI5RO__rzcBEA-g8IxqBqfZX2H6R8U8UABljaGFsbGVuZ2VzLmNsb3VkZmxhcmUuY29t, token-key=MIIBUjA9BgkqhkiG9w0BAQowMKANMAsGCWCGSAFlAwQCAqEaMBgGCSqGSIb3DQEBCDALBglghkgBZQMEAgKiAwIBMAOCAQ8AMIIBCgKCAQEAyAcIyqXWj0XAym0z5V844rFA0WOzLVwj0uCwmVj6zC4qOH40oBiGHrMNMBnDyk95jvnBAuHeEs855e7nA4l4DPJ4jUWKZbua8BxGAzjn74A1BV81a52F1zvBPUm-VEJXPAPXQehXphSv51uR7HKtfcM5oaS33TGDSy-6xv0r84xjMuTBvwPgXGehxpi1MCGGE5yWkzKN5Zzllk7m6Nkiv6learV-Uz7tzaoPbdZkBk1bFXxm2q07jWavoBZ-JEuEJyjQ00PSTz2Zjpbct6AlR3eCS9sbmXtb5XxSs7JMsvoa8uojD7a5m2SEJIwaf8xKL6wtxkaPonUfvsLj4JoJZQIDAQAB, max-age=20
server: cloudflare
cf-ray: 82849780eb9a568e-OSL
alt-svc: h3=":443"; ma=86400
lok365.live/cdn-cgi/styles/challenges.css
188.114.96.1200 OK 6.6 kB URL GET HTTP/3 lok365.live/cdn-cgi/styles/challenges.css
IP 188.114.96.1:443
Requested by https://lok365.live/&qrc=?email=cynthia.zagieboylo@nmss.org
Certificate IssuerGoogle Trust Services LLC
Subjectlok365.live
Fingerprint8E:A5:CC:5C:1A:8C:50:2D:00:73:0A:8E:08:A1:B0:DE:59:7D:99:C7
ValidityWed, 18 Oct 2023 15:55:42 GMT - Tue, 16 Jan 2024 15:55:41 GMT
File type ASCII text, with very long lines (6608), with no line terminators
Hash f0fd80732479959c893cfd7380f594bd
04111102f46bc02c195561743b3f41b4d5a349ca
704e70fc0fd54cb83a1100d48093680b73e0d3c45a32dc326c38355185aaf37f
GET /cdn-cgi/styles/challenges.css HTTP/1.1
Host: lok365.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://lok365.live/&qrc=?email=cynthia.zagieboylo@nmss.org
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 19 Nov 2023 01:13:35 GMT
content-type: text/css
last-modified: Thu, 16 Nov 2023 21:55:48 GMT
etag: W/"65568fe4-19c8"
server: cloudflare
cf-ray: 8284976bec2c7131-OSL
x-frame-options: DENY
x-content-type-options: nosniff
vary: Accept-Encoding
expires: Sun, 19 Nov 2023 03:13:35 GMT
cache-control: max-age=7200, public
content-encoding: gzip
lok365.live/cdn-cgi/challenge-platform/h/g/orchestrate/chl_page/v1?ray=8284976b5e0f56c3
188.114.96.1200 OK 172 kB URL GET HTTP/3 lok365.live/cdn-cgi/challenge-platform/h/g/orchestrate/chl_page/v1?ray=8284976b5e0f56c3
IP 188.114.96.1:443
Requested by https://lok365.live/&qrc=?email=cynthia.zagieboylo@nmss.org
Certificate IssuerGoogle Trust Services LLC
Subjectlok365.live
Fingerprint8E:A5:CC:5C:1A:8C:50:2D:00:73:0A:8E:08:A1:B0:DE:59:7D:99:C7
ValidityWed, 18 Oct 2023 15:55:42 GMT - Tue, 16 Jan 2024 15:55:41 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Size 172 kB (172338 bytes)
Hash 253067a2e97bac4d44cc261577bee3ac
6cdb0722f64006fe22b61c3972955215513a37d2
1083c338956959e138286d8becfdc92aa09eb44b42d464ac4c3b5e48da77b50c
GET /cdn-cgi/challenge-platform/h/g/orchestrate/chl_page/v1?ray=8284976b5e0f56c3 HTTP/1.1
Host: lok365.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://lok365.live/&qrc=?email=cynthia.zagieboylo@nmss.org&__cf_chl_rt_tk=t.SFdjkuoEOg9u_ZFppT3oTit9LtvqI7o3PNvreNk1k-1700356415-0-gaNycGzNDNA
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 19 Nov 2023 01:13:35 GMT
content-type: application/javascript; charset=UTF-8
cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=31XS5hTQLdjrdsRvp1T8pQiHT1%2FrYsQrJn9goVyGhuJ9ddMpN3j6LQrRrDR05u4Gxqa3%2FNLWKvKWW%2FHaq7gyAm%2BCUScSQVKb8QYKgidjRQqVGmqrwGaHNuDeF6pCBQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8284976c1c4f7131-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
lok365.live/favicon.ico
188.114.96.1403 Forbidden 5.5 kB IP 188.114.96.1:443
Requested by https://lok365.live/&qrc=?email=cynthia.zagieboylo@nmss.org
Certificate IssuerGoogle Trust Services LLC
Subjectlok365.live
Fingerprint8E:A5:CC:5C:1A:8C:50:2D:00:73:0A:8E:08:A1:B0:DE:59:7D:99:C7
ValidityWed, 18 Oct 2023 15:55:42 GMT - Tue, 16 Jan 2024 15:55:41 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (5517), with no line terminators
Hash 0f745b38a2463049d5ad22231088c793
d76dfe6a50aece694444bdf9f6eeeb527155c536
e9db725014efeb7bce666b3c92171b286e6daa08505d995e218e2512da622438
GET /favicon.ico HTTP/1.1
Host: lok365.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://lok365.live/&qrc=?email=cynthia.zagieboylo@nmss.org
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 403 Forbidden
date: Sun, 19 Nov 2023 01:13:35 GMT
content-type: text/html; charset=UTF-8
cross-origin-embedder-policy: require-corp
cross-origin-opener-policy: same-origin
cross-origin-resource-policy: same-origin
origin-agent-cluster: ?1
permissions-policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()
referrer-policy: same-origin
x-frame-options: SAMEORIGIN
cf-mitigated: challenge
cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
expires: Thu, 01 Jan 1970 00:00:01 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=9EoMAFJd5TBmEt4%2BjG%2B8uPd%2B0BNosvgu4lxUPYBghh%2FHlWa1u1JtQGShdbHiqN482yS0ReoBPC6KquYhtKiaUOpuGznBC%2BvvFDh52BswNY1rUorsCfSnPfGSqRMb2w%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8284976c9ca67131-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/q0wq2/0x4AAAAAAAAjq6WYeRDKmebM/light/normal
104.17.2.184200 OK 73 kB URL GET HTTP/3 challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/q0wq2/0x4AAAAAAAAjq6WYeRDKmebM/light/normal
IP 104.17.2.184:443
Requested by https://lok365.live/&qrc=?email=cynthia.zagieboylo@nmss.org
Certificate IssuerCloudflare, Inc.
Subjectchallenges.cloudflare.com
Fingerprint5F:E4:AA:8C:2E:24:D2:B1:69:9D:13:28:31:5C:65:FA:97:2A:E9:6E
ValidityFri, 18 Aug 2023 00:00:00 GMT - Sat, 17 Aug 2024 23:59:59 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (40091)
Hash 62a2f5f5e275fc83e8ce70267347d143
cbdcb9fff63dd8531294528aef44794d5ef6c020
81596717d16dc74acefeed136fe75271c47de68bf5174d8520a3c56db5f50fef
GET /cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/q0wq2/0x4AAAAAAAAjq6WYeRDKmebM/light/normal HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 19 Nov 2023 01:13:35 GMT
content-type: text/html; charset=UTF-8
cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
content-security-policy: frame-src https://challenges.cloudflare.com/ blob:; base-uri 'self'
cross-origin-embedder-policy: require-corp
cross-origin-opener-policy: same-origin
cross-origin-resource-policy: cross-origin
document-policy: js-profiling
origin-agent-cluster: ?1
permissions-policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()
referrer-policy: same-origin
server: cloudflare
cf-ray: 8284976debb7568e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/cmg/1/9DKbiDfWH6ZjHxgSNTG3KHa3ucVmP6rj9MHN3bQn2%2BU%3D
104.17.2.184200 OK 61 B URL GET HTTP/3 challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/cmg/1/9DKbiDfWH6ZjHxgSNTG3KHa3ucVmP6rj9MHN3bQn2%2BU%3D
IP 104.17.2.184:443
Requested by https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/q0wq2/0x4AAAAAAAAjq6WYeRDKmebM/light/normal
Certificate IssuerCloudflare, Inc.
Subjectchallenges.cloudflare.com
Fingerprint5F:E4:AA:8C:2E:24:D2:B1:69:9D:13:28:31:5C:65:FA:97:2A:E9:6E
ValidityFri, 18 Aug 2023 00:00:00 GMT - Sat, 17 Aug 2024 23:59:59 GMT
File type PNG image data, 2 x 2, 8-bit/color RGB, non-interlaced\012- data
Hash 9246cca8fc3c00f50035f28e9f6b7f7d
3aa538440f70873b574f40cd793060f53ec17a5d
c07d7d29e3c20fa6ca4c5d20663688d52bad13e129ad82ce06b80eb187d9dc84
GET /cdn-cgi/challenge-platform/h/g/cmg/1/9DKbiDfWH6ZjHxgSNTG3KHa3ucVmP6rj9MHN3bQn2%2BU%3D HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/q0wq2/0x4AAAAAAAAjq6WYeRDKmebM/light/normal
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 19 Nov 2023 01:13:35 GMT
content-type: image/png
cache-control: max-age=2629800, public
server: cloudflare
cf-ray: 8284976e5be2568e-OSL
alt-svc: h3=":443"; ma=86400
challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/i/8284976debb7568e/1700356415973/SQioI0AW4GGRrr8
104.17.2.184200 OK 61 B URL GET HTTP/3 challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/i/8284976debb7568e/1700356415973/SQioI0AW4GGRrr8
IP 104.17.2.184:443
Requested by https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/q0wq2/0x4AAAAAAAAjq6WYeRDKmebM/light/normal
Certificate IssuerCloudflare, Inc.
Subjectchallenges.cloudflare.com
Fingerprint5F:E4:AA:8C:2E:24:D2:B1:69:9D:13:28:31:5C:65:FA:97:2A:E9:6E
ValidityFri, 18 Aug 2023 00:00:00 GMT - Sat, 17 Aug 2024 23:59:59 GMT
File type PNG image data, 50 x 37, 8-bit/color RGB, non-interlaced\012- data
Hash 698fc42dc226df5720d8dfaf2bfb580e
c54a409c81c16d9f5522df60d76e93f6dd5746cf
d34da37f2720fdd28c9904565b391ecda7026cd65779d54cfa52e07ec6f16362
GET /cdn-cgi/challenge-platform/h/g/i/8284976debb7568e/1700356415973/SQioI0AW4GGRrr8 HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/q0wq2/0x4AAAAAAAAjq6WYeRDKmebM/light/normal
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 19 Nov 2023 01:13:37 GMT
content-type: image/png
server: cloudflare
cf-ray: 82849777f845568e-OSL
alt-svc: h3=":443"; ma=86400
challenges.cloudflare.com/turnstile/v0/g/9914b343/api.js?onload=FAIg1&render=explicit
104.17.2.184200 OK 34 kB URL GET HTTP/2 challenges.cloudflare.com/turnstile/v0/g/9914b343/api.js?onload=FAIg1&render=explicit
IP 104.17.2.184:443
Requested by https://lok365.live/&qrc=?email=cynthia.zagieboylo@nmss.org
Certificate IssuerCloudflare, Inc.
Subjectchallenges.cloudflare.com
Fingerprint5F:E4:AA:8C:2E:24:D2:B1:69:9D:13:28:31:5C:65:FA:97:2A:E9:6E
ValidityFri, 18 Aug 2023 00:00:00 GMT - Sat, 17 Aug 2024 23:59:59 GMT
File type ASCII text, with very long lines (34253)
Hash 6142a5f5c66e2c1be52ee9506a565962
c3b39e8352efd1e0619b6dd62af8b2a917622868
51cd12da61a7401c73472b2ac77067adfa30e9fc0545b4b7c240e9154e011fc7
GET /turnstile/v0/g/9914b343/api.js?onload=FAIg1&render=explicit HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://lok365.live
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 19 Nov 2023 01:13:35 GMT
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
cache-control: max-age=31536000
vary: Accept-Encoding
server: cloudflare
cf-ray: 8284976ce97e56c4-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/flow/ov1/70311632:1700353621:b8NwWhwVGt8AqxQX3GNOiXp65IbIDerCk_4reJzc0BE/8284976debb7568e/db1270fd3164bb8
104.17.2.184200 OK 93 kB URL POST HTTP/3 challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/flow/ov1/70311632:1700353621:b8NwWhwVGt8AqxQX3GNOiXp65IbIDerCk_4reJzc0BE/8284976debb7568e/db1270fd3164bb8
IP 104.17.2.184:443
Requested by https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/q0wq2/0x4AAAAAAAAjq6WYeRDKmebM/light/normal
Certificate IssuerCloudflare, Inc.
Subjectchallenges.cloudflare.com
Fingerprint5F:E4:AA:8C:2E:24:D2:B1:69:9D:13:28:31:5C:65:FA:97:2A:E9:6E
ValidityFri, 18 Aug 2023 00:00:00 GMT - Sat, 17 Aug 2024 23:59:59 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Hash 6a24b4ad1e0b403ed0c978497bbb1728
7636b9f0147a2a80c04c1c15028c7f3cd60d5da5
59fb52dce805f2519d5f98fcbe0b1ebbffd850d2295da11e2d31876d3660913d
POST /cdn-cgi/challenge-platform/h/g/flow/ov1/70311632:1700353621:b8NwWhwVGt8AqxQX3GNOiXp65IbIDerCk_4reJzc0BE/8284976debb7568e/db1270fd3164bb8 HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/q0wq2/0x4AAAAAAAAjq6WYeRDKmebM/light/normal
Content-type: application/x-www-form-urlencoded
CF-Challenge: db1270fd3164bb8
Content-Length: 3162
Origin: https://challenges.cloudflare.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 19 Nov 2023 01:13:36 GMT
content-type: text/plain; charset=UTF-8
cf-chl-gen: oFvCh/8Eol7onafvWPm1DntHYvGAM0MoHpcLwXA++thNOmuL1QjNfmCxkv8jZjTk7Gb54+wPK7LGHxAdZlI9/IHRsNvtv5Tn3IshqTr7LpN+m+crUDCfjD8TStHbYmbwCfWuuEJYT3dKVHcYCVMaWQdajp/nxOTeYKRgSZ90XPnqcugpdw19kO2HIWQys9ISngvli2Jzym2KIPhL1ID69ag/0EzOspKb/aGYWh9xmcon+PRcUt2QJf0ciYXnFZYHh0CBTaGDPXbCuODo+AREkhpFP2DBRra3vX/l1aPaucMhNUqstR0LR4LDLVhyk8dbwf87Y+jxisKpW540Vs6uyw2eCW1v7AUYc3vN3Ne0TyOYcUP29Ueki5MPNyMwfZO6$ScPrGNiYlNYsujSerB/juw==
server: cloudflare
cf-ray: 8284976fbc80568e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/orchestrate/chl_api/v1?ray=8284976debb7568e
104.17.2.184200 OK 192 kB URL GET HTTP/3 challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/orchestrate/chl_api/v1?ray=8284976debb7568e
IP 104.17.2.184:443
Requested by https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/q0wq2/0x4AAAAAAAAjq6WYeRDKmebM/light/normal
Certificate IssuerCloudflare, Inc.
Subjectchallenges.cloudflare.com
Fingerprint5F:E4:AA:8C:2E:24:D2:B1:69:9D:13:28:31:5C:65:FA:97:2A:E9:6E
ValidityFri, 18 Aug 2023 00:00:00 GMT - Sat, 17 Aug 2024 23:59:59 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Size 192 kB (192535 bytes)
Hash 43c1b2a77efc71bbfe0c404c118a1463
cc23456839cbeb39c780410cb22998eaad53aa11
66bf65352b8bf1df2bba41a743aee18d76b9362004ac1663958cc8cf0912952d
GET /cdn-cgi/challenge-platform/h/g/orchestrate/chl_api/v1?ray=8284976debb7568e HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/q0wq2/0x4AAAAAAAAjq6WYeRDKmebM/light/normal
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 19 Nov 2023 01:13:35 GMT
content-type: application/javascript; charset=UTF-8
cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
server: cloudflare
cf-ray: 8284976e5be5568e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/flow/ov1/70311632:1700353621:b8NwWhwVGt8AqxQX3GNOiXp65IbIDerCk_4reJzc0BE/8284976debb7568e/db1270fd3164bb8
104.17.2.184200 OK 18 kB URL POST HTTP/3 challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/flow/ov1/70311632:1700353621:b8NwWhwVGt8AqxQX3GNOiXp65IbIDerCk_4reJzc0BE/8284976debb7568e/db1270fd3164bb8
IP 104.17.2.184:443
Requested by https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/q0wq2/0x4AAAAAAAAjq6WYeRDKmebM/light/normal
Certificate IssuerCloudflare, Inc.
Subjectchallenges.cloudflare.com
Fingerprint5F:E4:AA:8C:2E:24:D2:B1:69:9D:13:28:31:5C:65:FA:97:2A:E9:6E
ValidityFri, 18 Aug 2023 00:00:00 GMT - Sat, 17 Aug 2024 23:59:59 GMT
File type ASCII text, with very long lines (17788), with no line terminators
Hash 9547af543761e5139f3cf2ce509e984d
ff9fe7d83781716ef118cb96c9c169d242db033c
8dd283270d7b44373e8754299c9bacbaafc610fa4de6a108483abc993c5069ef
POST /cdn-cgi/challenge-platform/h/g/flow/ov1/70311632:1700353621:b8NwWhwVGt8AqxQX3GNOiXp65IbIDerCk_4reJzc0BE/8284976debb7568e/db1270fd3164bb8 HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/q0wq2/0x4AAAAAAAAjq6WYeRDKmebM/light/normal
Content-type: application/x-www-form-urlencoded
CF-Challenge: db1270fd3164bb8
Content-Length: 25997
Origin: https://challenges.cloudflare.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 19 Nov 2023 01:13:38 GMT
content-type: text/plain; charset=UTF-8
cf-chl-gen: invyKQLuyZt2jhRfSAerETZwg1dVPnFcjM1dneaKApmKmIDDJa8t6mQ/C0Vkj6Ti$F4HJSzjDKA36HmZ5D3WxFQ==
server: cloudflare
cf-ray: 828497820c3c568e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
lok365.live/&qrc=?email=cynthia.zagieboylo@nmss.org
188.114.96.1403 Forbidden 6.6 kB URL User Request GET HTTP/2 lok365.live/&qrc=?email=cynthia.zagieboylo@nmss.org
IP 188.114.96.1:443
Certificate IssuerGoogle Trust Services LLC
Subjectlok365.live
Fingerprint8E:A5:CC:5C:1A:8C:50:2D:00:73:0A:8E:08:A1:B0:DE:59:7D:99:C7
ValidityWed, 18 Oct 2023 15:55:42 GMT - Tue, 16 Jan 2024 15:55:41 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (6661), with no line terminators
Hash 2672a11e9c2003ab080c7a8c43405251
2389947086be2d9e61cfe455d037a64f6ef038b9
fd0bb99d39c128e04f865517d38e15fa432a1914adc99b2ede704f14b1daa11d
Analyzer Verdict Alert urlquery phishing Phishing - Microsoft Outlook
GET /&qrc=?email=cynthia.zagieboylo@nmss.org HTTP/1.1
Host: lok365.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 403 Forbidden
date: Sun, 19 Nov 2023 01:13:35 GMT
content-type: text/html; charset=UTF-8
cross-origin-embedder-policy: require-corp
cross-origin-opener-policy: same-origin
cross-origin-resource-policy: same-origin
origin-agent-cluster: ?1
permissions-policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()
referrer-policy: same-origin
x-frame-options: SAMEORIGIN
cf-mitigated: challenge
cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
expires: Thu, 01 Jan 1970 00:00:01 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=wKiWJ23rnm70Oi654B3dgTd5cbRfCIZcFjx8cZkIspmqBEu3kMY0ie6qQ6dO8P9%2Bzz6AgINjnuYJIkokKSlVR098pRhjX12uIWvY35QYMOmAjZtTWBrj8fJAjkiA4A%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8284976b5e0f56c3-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
lok365.live/favicon.ico
188.114.96.1403 Forbidden 5.5 kB IP 188.114.96.1:443
Requested by https://lok365.live/&qrc=?email=cynthia.zagieboylo@nmss.org
Certificate IssuerGoogle Trust Services LLC
Subjectlok365.live
Fingerprint8E:A5:CC:5C:1A:8C:50:2D:00:73:0A:8E:08:A1:B0:DE:59:7D:99:C7
ValidityWed, 18 Oct 2023 15:55:42 GMT - Tue, 16 Jan 2024 15:55:41 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (5517), with no line terminators
Hash 4aa863ab176cf03ae8601073c66aec60
537c33ee293be5951118141074f839423ee61158
037999279d8e7a3ecc11fa03ee471aa7c1e76ef8d4052921fba7a82ef08086e2
GET /favicon.ico HTTP/1.1
Host: lok365.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://lok365.live/&qrc=?email=cynthia.zagieboylo@nmss.org
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 403 Forbidden
date: Sun, 19 Nov 2023 01:13:35 GMT
content-type: text/html; charset=UTF-8
cross-origin-embedder-policy: require-corp
cross-origin-opener-policy: same-origin
cross-origin-resource-policy: same-origin
origin-agent-cluster: ?1
permissions-policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()
referrer-policy: same-origin
x-frame-options: SAMEORIGIN
cf-mitigated: challenge
cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
expires: Thu, 01 Jan 1970 00:00:01 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=aOWh4tCKvgzmgdTvP8ClxedZChFeOWZecGF79nsSeNzddR9xmfhGt1uqHg1KC%2BS7M7RvAGLpErlfokyMOkJEKn6%2Bp%2FZA6CMMfZX3x%2FYNsAJgOcZC%2BMOMJdUAsYgmSg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8284976c3c6a7131-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
lok365.live/cdn-cgi/challenge-platform/h/g/flow/ov1/1891836905:1700353762:6b9nzDwwgfuF7fE8JGmibutvUiP84jzcbWtipBPU66g/8284976b5e0f56c3/d0f4568be1a94c5
188.114.96.1200 OK 13 kB URL POST HTTP/3 lok365.live/cdn-cgi/challenge-platform/h/g/flow/ov1/1891836905:1700353762:6b9nzDwwgfuF7fE8JGmibutvUiP84jzcbWtipBPU66g/8284976b5e0f56c3/d0f4568be1a94c5
IP 188.114.96.1:443
Requested by https://lok365.live/&qrc=?email=cynthia.zagieboylo@nmss.org
Certificate IssuerGoogle Trust Services LLC
Subjectlok365.live
Fingerprint8E:A5:CC:5C:1A:8C:50:2D:00:73:0A:8E:08:A1:B0:DE:59:7D:99:C7
ValidityWed, 18 Oct 2023 15:55:42 GMT - Tue, 16 Jan 2024 15:55:41 GMT
File type ASCII text, with very long lines (12640), with no line terminators
Hash fa610997a5b03e81a7afa56de1968f66
05cdb1a1dfcc62ebb10b07fa5797a9ca9b25e027
26a73b4d31bc5bb86201d35f00f59171fe38ce33c8bfd63d1f74e30906c2969a
POST /cdn-cgi/challenge-platform/h/g/flow/ov1/1891836905:1700353762:6b9nzDwwgfuF7fE8JGmibutvUiP84jzcbWtipBPU66g/8284976b5e0f56c3/d0f4568be1a94c5 HTTP/1.1
Host: lok365.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://lok365.live/&qrc=?email=cynthia.zagieboylo@nmss.org
Content-type: application/x-www-form-urlencoded
CF-Challenge: d0f4568be1a94c5
Content-Length: 1876
Origin: https://lok365.live
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 19 Nov 2023 01:13:35 GMT
content-type: text/plain; charset=UTF-8
cf-chl-gen: mYbqRpwiKVpDho8QeJHRpfAiFDNBDgfTnGN14hxzM/llUheEnmGbsBAm7NN+voDw$MOGV+PP32onsNClLCkESeg==
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ehiZe0XLuPRZVxGmphEnEFfmMZnHCg54kU2y2p2xp3tRfX8q0rvy6k6dijpi1Zz2KVvaSclQ%2B5m4pvA2LlWHh1NFtHOU22JGVju9ikmQXxCQ98pE%2FO3kLG4Y6En4Uw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8284976d7d0a7131-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400