code.jquery.com/jquery-1.4.4.min.js
151.101.130.137200 OK 27 kB URL GET HTTP/2 code.jquery.com/jquery-1.4.4.min.js
IP 151.101.130.137:443
Requested by https://champion-3nd.pages.dev/
Certificate IssuerSectigo Limited
Subject*.jquery.com
FingerprintD2:19:0A:AD:CE:BB:9C:61:17:5D:29:4B:A2:54:E8:C6:91:B8:F9:8D
ValidityTue, 11 Jul 2023 00:00:00 GMT - Sun, 14 Jul 2024 23:59:59 GMT
File type ASCII text, with very long lines (820)
Hash 73a9c334c5ca71d70d092b42064f6476
b75990598ee8d3895448ed9d08726af63109f842
517364f2d45162fb5037437b5b6cb953d00d9b2b3b79ba87d9fe57ea6ee6070c
GET /jquery-1.4.4.min.js HTTP/1.1
Host: code.jquery.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://champion-3nd.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Fri, 18 Oct 1991 12:00:00 GMT
etag: W/"28feccc0-13309"
cache-control: public, max-age=31536000, stale-while-revalidate=604800
access-control-allow-origin: *
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Thu, 07 Dec 2023 17:32:27 GMT
age: 3842963
x-served-by: cache-lga21980-LGA, cache-bma1652-BMA
x-cache: HIT, HIT
x-cache-hits: 8715, 1
x-timer: S1701970348.805759,VS0,VE2
vary: Accept-Encoding
content-length: 27078
X-Firefox-Spdy: h2
www.googletagmanager.com/gtag/js?id=G-FYZ18BVVNS
142.250.74.168 93 kB URL www.googletagmanager.com/gtag/js?id=G-FYZ18BVVNS
IP 142.250.74.168:0
File type ASCII text, with very long lines (5955)
Hash 0e7f49f189f15e5779f5c94d59869bfe
07492022b3ae988fcc5688d7e2d22a610c7ca929
c648c2481ee55329c739cc9ec2ae4b20b7958d07addc9e2beea98faec83284ea
GET /gtag/js?id=G-FYZ18BVVNS HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://champion-3nd.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Thu, 07 Dec 2023 17:32:27 GMT
expires: Thu, 07 Dec 2023 17:32:27 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 93080
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
champion-3nd.pages.dev/
172.66.47.94 7.5 kB IP 172.66.47.94:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (522)
Hash 2caaea391c100902f7374747f383be0b
bef7c37e124d4a6e05fa15c78cc6f1470a9dec0b
c52f3d092dd9282203627c22bc04a95e1fb105c56aecde1114468507cb8603cc
GET / HTTP/1.1
Host: champion-3nd.pages.dev
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 07 Dec 2023 17:32:27 GMT
content-type: text/html; charset=utf-8
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: W/"4f64e85c2dc16196fa26849997cd1cc6"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=QWVJEubuEsOn6jxdL1modgVWRwTiaF8OqEVLarkjex3SQclUG%2FET3bsx7iFCuMdTATofcUT08Xuhnyno%2BJUlKYMUalGitPl8NlCeOfN%2FfWQAxlPAzWb9HnWwhHni33HKGFgaTj0KpL3Q"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 831e820e8d8a56ba-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
champion-3nd.pages.dev/vsc.png
172.66.47.94200 OK 722 B URL GET HTTP/3 champion-3nd.pages.dev/vsc.png
IP 172.66.47.94:443
Requested by https://champion-3nd.pages.dev/
Certificate IssuerGoogle Trust Services LLC
Subjectchampion-3nd.pages.dev
Fingerprint0F:96:4A:5F:30:FE:E0:7B:A5:51:01:E1:2F:6A:05:4E:65:36:C1:9C
ValidityThu, 07 Dec 2023 09:05:50 GMT - Wed, 06 Mar 2024 09:05:49 GMT
File type PNG image data, 128 x 128, 1-bit colormap, non-interlaced\012- data
Hash 42d8f2cc1ae5759c2369f255f36ebc03
8e592162eec14e72d0a751d714a641dbece91f6b
31c6dbe9d867436244f38566adad57e3870f4c8489c6804280eb564bfac5c1bd
Analyzer Verdict Alert urlquery scam Scam - Fake AntiVirus / Security software
GET /vsc.png HTTP/1.1
Host: champion-3nd.pages.dev
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://champion-3nd.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 07 Dec 2023 17:32:27 GMT
content-type: image/png
content-length: 722
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "da27b6888c7cff8c20811d9d856d5f9d"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=tv6f%2BwSR2uC0QQRKHx5wMM25sNN%2FUtoEBWJvSdlH0GN9gwOf9QXMrlS6Qk0c%2FGG6VxUFbDQGL%2FW0RE8TgHWA4shnDZGnNgByusLmXSG8L9ARtspR%2Fg6rCWrhwMCzfBjYslyGvKdJIuFU"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 831e82119ed7568f-OSL
alt-svc: h3=":443"; ma=86400
champion-3nd.pages.dev/set.png
172.66.47.94 364 B URL champion-3nd.pages.dev/set.png
IP 172.66.47.94:0
File type PNG image data, 12 x 12, 8-bit/color RGB, non-interlaced\012- data
Hash e144c3378090087c8ce129a30cb6cb4e
59da5466551de941d0215e45c54aa2ceaf436be1
b13a03e0db893734298cbe203bf264407636ffe5dab0a141f83c492d0034dd6a
Analyzer Verdict Alert urlquery scam Scam - Fake AntiVirus / Security software
GET /set.png HTTP/1.1
Host: champion-3nd.pages.dev
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://champion-3nd.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 07 Dec 2023 17:32:28 GMT
content-type: image/png
content-length: 364
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "ee63d8b934f54cf7e606ebae2b4bfcf6"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Ky2aoaCipy9Oc87hjRXNU2mtjQZxXprJ8nMmaSg8tSAzfpIxhU4Gbbo%2B1WPFjqW1yHHVDHskG2BNEs%2FjTLfLnPJ0p6WfF4VVKPtb91%2FuC%2BbWSDNCntiaX4m3nxk%2FejMy2%2FwUhIkN2dE1"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 831e82119ed5568f-OSL
alt-svc: h3=":443"; ma=86400
champion-3nd.pages.dev/bel.png
172.66.47.94200 OK 276 B URL GET HTTP/3 champion-3nd.pages.dev/bel.png
IP 172.66.47.94:443
Requested by https://champion-3nd.pages.dev/
Certificate IssuerGoogle Trust Services LLC
Subjectchampion-3nd.pages.dev
Fingerprint0F:96:4A:5F:30:FE:E0:7B:A5:51:01:E1:2F:6A:05:4E:65:36:C1:9C
ValidityThu, 07 Dec 2023 09:05:50 GMT - Wed, 06 Mar 2024 09:05:49 GMT
File type PNG image data, 13 x 13, 8-bit colormap, non-interlaced\012- data
Hash 7616d96c388301e391653647e1f5f057
b1868c8f0f46309a8e26f584ac82000d54c06ecd
4c1606563842cce5f1788329d4417ae3618b33c6365c56a7122439b6ab45c977
Analyzer Verdict Alert urlquery scam Scam - Fake AntiVirus / Security software
GET /bel.png HTTP/1.1
Host: champion-3nd.pages.dev
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://champion-3nd.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 07 Dec 2023 17:32:28 GMT
content-type: image/png
content-length: 276
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "f4e0dc23fa0c9a87dc8527d52bd80a1e"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=gsTV1sSShbiR732Y17dIza897REfGi6lnAt0yDHtrC0VX19xlk0hSsQKzY9oczpQmcjfKW%2B4m5zhhnmtU2ObLX6kfVsFd16nKzGEYfz2UcOVW1fcW5uRa0P4ttIm%2BQSTtG1g04pb1B0k"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 831e82119edc568f-OSL
alt-svc: h3=":443"; ma=86400
champion-3nd.pages.dev/cs.png
172.66.47.94200 OK 2.7 kB URL GET HTTP/3 champion-3nd.pages.dev/cs.png
IP 172.66.47.94:443
Requested by https://champion-3nd.pages.dev/
Certificate IssuerGoogle Trust Services LLC
Subjectchampion-3nd.pages.dev
Fingerprint0F:96:4A:5F:30:FE:E0:7B:A5:51:01:E1:2F:6A:05:4E:65:36:C1:9C
ValidityThu, 07 Dec 2023 09:05:50 GMT - Wed, 06 Mar 2024 09:05:49 GMT
File type PNG image data, 520 x 520, 8-bit colormap, non-interlaced\012- data
Hash b01a30d354bfcf51edf33e0b0ea07402
c421359518d1ae258237bf501c563b7f059f8b9b
b67a7c07a045d7cb0f2e216a557aec0d99405e17c36d1a6b1ff3e2733aa35348
Analyzer Verdict Alert urlquery scam Scam - Fake AntiVirus / Security software
GET /cs.png HTTP/1.1
Host: champion-3nd.pages.dev
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://champion-3nd.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 07 Dec 2023 17:32:28 GMT
content-type: image/png
content-length: 2681
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "b1ddc8bc7bef23126af012bc26318301"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=kDZqKCh48tMySkJ6PkABrEG1hwBKKrWCPBk9aYKf%2Bbrqj7etQHe2sGSH1GY9sYC3psFtKZKltPRb1pqnGVhke6FBYoTy%2B1CckvEVSQXvGyFuRLnd1IvEePZ9Vv4AHXtLQDRLztlpXrxN"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 831e82119ee1568f-OSL
alt-svc: h3=":443"; ma=86400
champion-3nd.pages.dev/dm.png
172.66.47.94200 OK 332 B URL GET HTTP/3 champion-3nd.pages.dev/dm.png
IP 172.66.47.94:443
Requested by https://champion-3nd.pages.dev/
Certificate IssuerGoogle Trust Services LLC
Subjectchampion-3nd.pages.dev
Fingerprint0F:96:4A:5F:30:FE:E0:7B:A5:51:01:E1:2F:6A:05:4E:65:36:C1:9C
ValidityThu, 07 Dec 2023 09:05:50 GMT - Wed, 06 Mar 2024 09:05:49 GMT
File type PNG image data, 100 x 100, 1-bit colormap, non-interlaced\012- data
Hash 9d8a90a63d20f05d27e5d6abb35e0cd0
5873b4007e9d55b4d891a4c427b3735ed23dbfe8
7df9f467d23ee1887edb2123cca10a1a9c4624cdcf7199c64e78a8430031f9f5
Analyzer Verdict Alert urlquery scam Scam - Fake AntiVirus / Security software
GET /dm.png HTTP/1.1
Host: champion-3nd.pages.dev
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://champion-3nd.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 07 Dec 2023 17:32:28 GMT
content-type: image/png
content-length: 332
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "b5c69f4e5e8f959bb3eb0ad49250137b"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ywgQlWcxR%2BMqXETQrI%2B4pN55s4zT0uD49%2B%2FQZokWHTgA%2FbuAkjoY4Y6PE1OLRAaQfcmcKnuBOW6pk2%2BNgXFYv460KGLnuLM3LuQ0FSE5zyvC1ofCkEu0l1%2FuFWabYgmTnV8m6CqrqUP5"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 831e82119ee0568f-OSL
alt-svc: h3=":443"; ma=86400
champion-3nd.pages.dev/re.gif
172.66.47.94200 OK 15 kB URL GET HTTP/3 champion-3nd.pages.dev/re.gif
IP 172.66.47.94:443
Requested by https://champion-3nd.pages.dev/
Certificate IssuerGoogle Trust Services LLC
Subjectchampion-3nd.pages.dev
Fingerprint0F:96:4A:5F:30:FE:E0:7B:A5:51:01:E1:2F:6A:05:4E:65:36:C1:9C
ValidityThu, 07 Dec 2023 09:05:50 GMT - Wed, 06 Mar 2024 09:05:49 GMT
File type GIF image data, version 89a, 193 x 71\012- data
Hash 6fcb78e0cd7933a70eea2cf071f82118
70364bffd62fe33360abe70ecc7f7c0541b3b54c
4b436b0b6a47db85c88f83dc3fe3fd9a96c0a4018b28832165df929dffe0bc86
Analyzer Verdict Alert urlquery scam Scam - Fake AntiVirus / Security software
GET /re.gif HTTP/1.1
Host: champion-3nd.pages.dev
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://champion-3nd.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 07 Dec 2023 17:32:28 GMT
content-type: image/gif
content-length: 14751
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "100a9924b8b50ce024e2fa5b31934d7f"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=olPM8c6rvIVrQZk75eDIYxJlardBDlaVtwOgfolSdMnqLW8RRQ58lAS8JNRJszSLB6X1EJS5Hgfmcxjc6io%2Fe0OOfjiIrGHYPmsUPEG9%2BO0C301aKO%2FBQJzRh5zMVsG25yHm%2BUjXIcbe"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 831e82119ee2568f-OSL
alt-svc: h3=":443"; ma=86400
champion-3nd.pages.dev/mnc.png
172.66.47.94200 OK 187 B URL GET HTTP/3 champion-3nd.pages.dev/mnc.png
IP 172.66.47.94:443
Requested by https://champion-3nd.pages.dev/
Certificate IssuerGoogle Trust Services LLC
Subjectchampion-3nd.pages.dev
Fingerprint0F:96:4A:5F:30:FE:E0:7B:A5:51:01:E1:2F:6A:05:4E:65:36:C1:9C
ValidityThu, 07 Dec 2023 09:05:50 GMT - Wed, 06 Mar 2024 09:05:49 GMT
File type PNG image data, 140 x 30, 1-bit colormap, non-interlaced\012- data
Hash 271021cfa45940978184be0489841fd3
201030af9b1bc5d3c8d453efbfdf89b68d6c1be5
c5a324f181af16879b6c4c52b731b23392f2816def159b157c4de620cff1cd41
Analyzer Verdict Alert urlquery scam Scam - Fake AntiVirus / Security software
GET /mnc.png HTTP/1.1
Host: champion-3nd.pages.dev
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://champion-3nd.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 07 Dec 2023 17:32:28 GMT
content-type: image/png
content-length: 187
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "653967a2ac91034b61d1ad76540b8eb4"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=IQsc7lzqcw962n5UYm5nEBLTs871KwJCTjrytdjf7alrv1CX%2BLeWn7YKLTXXLILjOsUFxCXFcrDSZtkKL9c0ZRQOMAvQtpm%2Bq50dM0VuT4s7HGROA4%2BpT3e9Y%2Feci%2BDCM6vIPPbYXRth"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 831e82119ed1568f-OSL
alt-svc: h3=":443"; ma=86400
champion-3nd.pages.dev/msmm.png
172.66.47.94200 OK 168 B URL GET HTTP/3 champion-3nd.pages.dev/msmm.png
IP 172.66.47.94:443
Requested by https://champion-3nd.pages.dev/
Certificate IssuerGoogle Trust Services LLC
Subjectchampion-3nd.pages.dev
Fingerprint0F:96:4A:5F:30:FE:E0:7B:A5:51:01:E1:2F:6A:05:4E:65:36:C1:9C
ValidityThu, 07 Dec 2023 09:05:50 GMT - Wed, 06 Mar 2024 09:05:49 GMT
File type PNG image data, 31 x 30, 4-bit colormap, non-interlaced\012- data
Hash acb05ebcd5f488fc99169cff02b6dd04
dca893a7b514503e947a57aa072482a0e0cba912
1ab5ef4e7e196cb1ff39df44e1a0a39f6880b906ef6fd6da3cfdbb92ffd33115
Analyzer Verdict Alert urlquery scam Scam - Fake AntiVirus / Security software
GET /msmm.png HTTP/1.1
Host: champion-3nd.pages.dev
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://champion-3nd.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 07 Dec 2023 17:32:28 GMT
content-type: image/png
content-length: 168
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "8ca71578100459238fb030f8dd97e8bb"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=AHfJNtbgAiF78cviUemoW6se37AjFSR1Fq5k7y5GyimIPTltna9zalgjmBVPADY7EO4u4W2zT9mrHlKCuHhlkhBlqdd8KGH1hoEkO1tOynA6ZV8iSWBfmQwSR974fv94tCTQLPEzXgEi"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 831e82119ed3568f-OSL
alt-svc: h3=":443"; ma=86400
ocsp.usertrust.com/
172.64.149.23 282 B IP 172.64.149.23:0
Hash 8666cf051c1e35d45c02946c400e93e4
c4f2943322fd3f208f94d67eca415a90e08742ea
d76f2a6168f48e3d6fd2a68fa54c5f9952ceb6e6971a05c78ffc54df4fb122f1
POST / HTTP/1.1
Host: ocsp.usertrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 07 Dec 2023 17:32:28 GMT
Content-Type: application/ocsp-response
Content-Length: 282
Connection: keep-alive
Last-Modified: Tue, 05 Dec 2023 01:02:32 GMT
Expires: Tue, 12 Dec 2023 01:02:31 GMT
Etag: "c4f2943322fd3f208f94d67eca415a90e08742ea"
Cache-Control: max-age=441491,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb1
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: REVALIDATED
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 831e82160e850b31-OSL
ipwho.is/?lang=en
195.201.57.90200 OK 668 B IP 195.201.57.90:443
ASN #24940 Hetzner Online GmbH
Requested by https://champion-3nd.pages.dev/
Certificate IssuerGoGetSSL
Subjectipwho.is
FingerprintCF:72:15:7E:2B:59:F6:B9:88:69:73:70:91:60:90:87:80:67:B9:A4
ValidityWed, 05 Apr 2023 00:00:00 GMT - Fri, 05 Apr 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with very long lines (668), with no line terminators
Hash 340ad4faa0dd90576a3a9fee302ad5a2
5606859b00d893ce21cb64c6fd583983d1644e83
d5e5e1e20ba265b1b776f2f4e6ba4da2952f6396b0f64091ed6ed4dc852eaf7a
GET /?lang=en HTTP/1.1
Host: ipwho.is
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://champion-3nd.pages.dev/
Origin: https://champion-3nd.pages.dev
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 07 Dec 2023 17:32:28 GMT
Content-Type: application/json; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Server: ipwhois
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: *
X-Robots-Tag: noindex
champion-3nd.pages.dev/bg.png
172.66.47.94200 OK 549 kB URL GET HTTP/3 champion-3nd.pages.dev/bg.png
IP 172.66.47.94:443
Requested by https://champion-3nd.pages.dev/
Certificate IssuerGoogle Trust Services LLC
Subjectchampion-3nd.pages.dev
Fingerprint0F:96:4A:5F:30:FE:E0:7B:A5:51:01:E1:2F:6A:05:4E:65:36:C1:9C
ValidityThu, 07 Dec 2023 09:05:50 GMT - Wed, 06 Mar 2024 09:05:49 GMT
File type PNG image data, 1903 x 1020, 8-bit/color RGB, non-interlaced\012- data
Size 549 kB (549442 bytes)
Hash f3e18c4da95b83ab519a72f2876019f2
209f613fed2d2202e134e00081ad3c32ec5e6a25
466835ef2d6f0f0bfddafa405154702e36a5588f69684dd3b6642f9013eb778b
Analyzer Verdict Alert urlquery scam Scam - Fake AntiVirus / Security software
GET /bg.png HTTP/1.1
Host: champion-3nd.pages.dev
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://champion-3nd.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 07 Dec 2023 17:32:28 GMT
content-type: image/png
content-length: 549442
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "2bdaa17812aa3cb180724acfe18db756"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=YDFlh3IsQMA3JB1oKIiWbyQRs8ZEEzngGtPQNxTjpX%2FdChXMtWG8x9pSbETmSCxJXf4GYRn%2F8uYiQKDFsn8l7Ry5pU%2Bw9bV%2FDf5Vl2dAO2QySbIJcE%2FnZsebLaFkSjcSLammeHwvgT0U"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 831e82119ecf568f-OSL
alt-svc: h3=":443"; ma=86400
champion-3nd.pages.dev/ai2.mp3
172.66.47.94200 OK 24 kB URL GET HTTP/3 champion-3nd.pages.dev/ai2.mp3
IP 172.66.47.94:443
Requested by https://champion-3nd.pages.dev/
Certificate IssuerGoogle Trust Services LLC
Subjectchampion-3nd.pages.dev
Fingerprint0F:96:4A:5F:30:FE:E0:7B:A5:51:01:E1:2F:6A:05:4E:65:36:C1:9C
ValidityThu, 07 Dec 2023 09:05:50 GMT - Wed, 06 Mar 2024 09:05:49 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (522)
Hash 2caaea391c100902f7374747f383be0b
bef7c37e124d4a6e05fa15c78cc6f1470a9dec0b
c52f3d092dd9282203627c22bc04a95e1fb105c56aecde1114468507cb8603cc
GET /ai2.mp3 HTTP/1.1
Host: champion-3nd.pages.dev
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Referer: https://champion-3nd.pages.dev/
Range: bytes=0-
DNT: 1
Connection: keep-alive
Cookie: _ga_FYZ18BVVNS=GS1.1.1701970355.1.0.1701970355.0.0.0; _ga=GA1.1.344891369.1701970355
Sec-Fetch-Dest: audio
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Accept-Encoding: identity
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 07 Dec 2023 17:32:28 GMT
content-type: text/html; charset=utf-8
content-length: 23775
access-control-allow-origin: *
etag: "4f64e85c2dc16196fa26849997cd1cc6"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=I1iQD4m%2FP7ml8LFpiP2wznyOMadBj4fV2RL745uhxhiWimzWTyDyUBnr8hqM9DVsC2FivGk9Z1GriSGu%2FrmxN3ErkdVKZ1KHopkHEiaWcAAvnC67in%2BCbpxreBAl0jrT7oBJAdzyOxN1"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 831e821868b2568f-OSL
alt-svc: h3=":443"; ma=86400
champion-3nd.pages.dev/msmm.png
172.66.47.94200 OK 168 B URL GET HTTP/3 champion-3nd.pages.dev/msmm.png
IP 172.66.47.94:443
Requested by https://champion-3nd.pages.dev/
Certificate IssuerGoogle Trust Services LLC
Subjectchampion-3nd.pages.dev
Fingerprint0F:96:4A:5F:30:FE:E0:7B:A5:51:01:E1:2F:6A:05:4E:65:36:C1:9C
ValidityThu, 07 Dec 2023 09:05:50 GMT - Wed, 06 Mar 2024 09:05:49 GMT
File type PNG image data, 31 x 30, 4-bit colormap, non-interlaced\012- data
Hash acb05ebcd5f488fc99169cff02b6dd04
dca893a7b514503e947a57aa072482a0e0cba912
1ab5ef4e7e196cb1ff39df44e1a0a39f6880b906ef6fd6da3cfdbb92ffd33115
Analyzer Verdict Alert urlquery scam Scam - Fake AntiVirus / Security software
GET /msmm.png HTTP/1.1
Host: champion-3nd.pages.dev
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://champion-3nd.pages.dev/
DNT: 1
Connection: keep-alive
Cookie: _ga_FYZ18BVVNS=GS1.1.1701970355.1.0.1701970355.0.0.0; _ga=GA1.1.344891369.1701970355
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 07 Dec 2023 17:32:29 GMT
content-type: image/png
content-length: 168
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "8ca71578100459238fb030f8dd97e8bb"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=QFj0rVQ4dxON%2FGUPMd2pZoZUeTtsTyjbuUNhdS75PZQB5FgTMvnkxpeIU5YYGdmY9LZxhq9TclgESRczKjEmsBy4xaJXtSRNH7r%2BKNqFgYHPHSUYN0Hg%2F%2F3%2BfGgN264rktkBm1oEARfN"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 831e821959f7568f-OSL
alt-svc: h3=":443"; ma=86400
champion-3nd.pages.dev/aud0jp87.mp3
172.66.47.94200 OK 232 kB URL GET HTTP/3 champion-3nd.pages.dev/aud0jp87.mp3
IP 172.66.47.94:443
Requested by https://champion-3nd.pages.dev/
Certificate IssuerGoogle Trust Services LLC
Subjectchampion-3nd.pages.dev
Fingerprint0F:96:4A:5F:30:FE:E0:7B:A5:51:01:E1:2F:6A:05:4E:65:36:C1:9C
ValidityThu, 07 Dec 2023 09:05:50 GMT - Wed, 06 Mar 2024 09:05:49 GMT
File type Audio file with ID3 version 2.4.0, contains:\012- MPEG ADTS, layer III, v2, 48 kbps, 22.05 kHz, Monaural\012- data
Size 232 kB (231542 bytes)
Hash 111d7c5ab3c31515e383a9ed1d214a3c
fb2bc54e6ce1d206abf56d423f1d1cc2d4c9f6a6
e3a8cebfbfeeb5d546b3f958b83a0371024436eef276133832ce697be3f81284
Analyzer Verdict Alert urlquery scam Scam - Fake AntiVirus / Security software
GET /aud0jp87.mp3 HTTP/1.1
Host: champion-3nd.pages.dev
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Referer: https://champion-3nd.pages.dev/
Range: bytes=0-
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: audio
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Accept-Encoding: identity
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 07 Dec 2023 17:32:29 GMT
content-type: audio/mpeg
content-length: 231542
access-control-allow-origin: *
etag: "c5d61c28aad018839dfd94e1a1fa2fdb"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=wK9%2BSlgLBcO5yHZYWUXveqySXcvn71d1us%2Fh8gbpaJsQWFvLrxvt9H7p7hUEKFG6HbK0yTapnhsXKBUiQdkPDpaOKQi%2B3I2Zbg0tzjjglJU2EqWD4BCW8cJ6uW10A8omlBkwB7j%2FTf4x"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 831e82167da8568f-OSL
alt-svc: h3=":443"; ma=86400
champion-3nd.pages.dev/progress.js
172.66.47.94200 OK 0 B URL GET HTTP/3 champion-3nd.pages.dev/progress.js
IP 172.66.47.94:443
Requested by https://champion-3nd.pages.dev/
Certificate IssuerGoogle Trust Services LLC
Subjectchampion-3nd.pages.dev
Fingerprint0F:96:4A:5F:30:FE:E0:7B:A5:51:01:E1:2F:6A:05:4E:65:36:C1:9C
ValidityThu, 07 Dec 2023 09:05:50 GMT - Wed, 06 Mar 2024 09:05:49 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /progress.js HTTP/1.1
Host: champion-3nd.pages.dev
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://champion-3nd.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 07 Dec 2023 17:32:28 GMT
content-type: text/html; charset=utf-8
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: W/"4f64e85c2dc16196fa26849997cd1cc6"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Uyajoi8GHKWSTOUPB6CT%2FoP6nJbgFvUZFMbmWjiRSNp3dnimotAuF1i3rBn%2Frs4GtWLxKtOECS9w5v6PYuVRROk1k8i%2FpxSqHqTPyYtJxN5K%2F990LUscz6lAwfXVWwqZ7Cq9aPUY9ZF4"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 831e82166d67568f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
champion-3nd.pages.dev/w1.png
172.66.47.94200 OK 24 kB URL GET HTTP/3 champion-3nd.pages.dev/w1.png
IP 172.66.47.94:443
Requested by https://champion-3nd.pages.dev/
Certificate IssuerGoogle Trust Services LLC
Subjectchampion-3nd.pages.dev
Fingerprint0F:96:4A:5F:30:FE:E0:7B:A5:51:01:E1:2F:6A:05:4E:65:36:C1:9C
ValidityThu, 07 Dec 2023 09:05:50 GMT - Wed, 06 Mar 2024 09:05:49 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /w1.png HTTP/1.1
Host: champion-3nd.pages.dev
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://champion-3nd.pages.dev/
DNT: 1
Connection: keep-alive
Cookie: _ga_FYZ18BVVNS=GS1.1.1701970355.1.0.1701970355.0.0.0; _ga=GA1.1.344891369.1701970355
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 07 Dec 2023 17:32:38 GMT
content-type: text/html; charset=utf-8
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: W/"4f64e85c2dc16196fa26849997cd1cc6"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=uRs%2F5ZN%2BYBiQKdONvYdgWWVoWqq8%2Fto7DpxzCHqIs1OW4mvhC%2FCkfWdyxkWnuCK5eU0nEXUmdx6CcVRRjiAwjIl4cxOpdVpqQBMvVMoTUCkH6aXvA06cxo4lN6xC2Vif7mxv4B8btk5S"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 831e82577e8d568f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
champion-3nd.pages.dev/esc.js
172.66.47.94200 OK 0 B URL GET HTTP/3 champion-3nd.pages.dev/esc.js
IP 172.66.47.94:443
Requested by https://champion-3nd.pages.dev/
Certificate IssuerGoogle Trust Services LLC
Subjectchampion-3nd.pages.dev
Fingerprint0F:96:4A:5F:30:FE:E0:7B:A5:51:01:E1:2F:6A:05:4E:65:36:C1:9C
ValidityThu, 07 Dec 2023 09:05:50 GMT - Wed, 06 Mar 2024 09:05:49 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /esc.js HTTP/1.1
Host: champion-3nd.pages.dev
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://champion-3nd.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 07 Dec 2023 17:32:27 GMT
content-type: text/html; charset=utf-8
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: W/"4f64e85c2dc16196fa26849997cd1cc6"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=G8uMZIyrukaVPUsP%2FjdYwGAqe2OVsCL0cM0wJsJ7n7s6QEa48DYIOHbVow8mytj%2F2TR0mBMfF2nTFWbtYE4PLRYLZawpYoR2%2FAR7mLxf8VHRE8MELkJLjw8oAdx27rAWYmmWGsDhnR4L"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 831e8211af01568f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
champion-3nd.pages.dev/tapa.css
172.66.47.94200 OK 18 kB URL GET HTTP/3 champion-3nd.pages.dev/tapa.css
IP 172.66.47.94:443
Requested by https://champion-3nd.pages.dev/
Certificate IssuerGoogle Trust Services LLC
Subjectchampion-3nd.pages.dev
Fingerprint0F:96:4A:5F:30:FE:E0:7B:A5:51:01:E1:2F:6A:05:4E:65:36:C1:9C
ValidityThu, 07 Dec 2023 09:05:50 GMT - Wed, 06 Mar 2024 09:05:49 GMT
File type assembler source, ASCII text, with very long lines (346), with CRLF line terminators
Hash bd37e26414b57122d694a80232fa2941
de70017f54533335e92381b4125e2fa77eda6aac
526c72cc1dc7eb1dc8b233e12e7f7998e78b0c42cfb513eaa35790c7186be63a
GET /tapa.css HTTP/1.1
Host: champion-3nd.pages.dev
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://champion-3nd.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 07 Dec 2023 17:32:27 GMT
content-type: text/css; charset=utf-8
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: W/"ecc6fc75b5e3a42439074975f159896c"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=sSaGk9led9LONkijI%2BcC5b9PpE93di4dT5p29egCDoqT6lF3rorlrAp2n2rJk%2FKnF9vAabCLGMoU%2FlQjHlFZlC8AtO6O5hHizVG%2FYkHiIlEcfJJpzQf5KFU%2BllY8F6lc8w5h5%2Fv%2BnkYc"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 831e82119ecc568f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
champion-3nd.pages.dev/pcm.png
172.66.47.94200 OK 1.3 kB URL GET HTTP/3 champion-3nd.pages.dev/pcm.png
IP 172.66.47.94:443
Requested by https://champion-3nd.pages.dev/
Certificate IssuerGoogle Trust Services LLC
Subjectchampion-3nd.pages.dev
Fingerprint0F:96:4A:5F:30:FE:E0:7B:A5:51:01:E1:2F:6A:05:4E:65:36:C1:9C
ValidityThu, 07 Dec 2023 09:05:50 GMT - Wed, 06 Mar 2024 09:05:49 GMT
File type PNG image data, 166 x 92, 4-bit colormap, non-interlaced\012- data
Hash 05cdf1a2c2fc8f07bea0a8f4f9356637
b7bbd626d1d6c832509e820cae1d971b34f625e6
afe332157f4efe355f3181284e99f4331c4d19703ed1678b5316d2933f95e98e
Analyzer Verdict Alert urlquery scam Scam - Fake AntiVirus / Security software
GET /pcm.png HTTP/1.1
Host: champion-3nd.pages.dev
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://champion-3nd.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 07 Dec 2023 17:32:27 GMT
content-type: image/png
content-length: 1270
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "f526107ac63134fd87055a8d49a6e1d6"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Y5tykQLuNpcbDaSRdnjYhPC8OT%2FzmQgGraJcBGfxiaOijnsC7PxXFkhMUhinkT6ao2K9k7bxv%2Bz0jTis92aCjncvE87Bl33By69SBvhj%2FKlwPKnotnqf1e0476Q%2BsSEMB7bILQ8pIeFu"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 831e82119edd568f-OSL
alt-svc: h3=":443"; ma=86400
champion-3nd.pages.dev/fulls.js
172.66.47.94200 OK 0 B URL GET HTTP/3 champion-3nd.pages.dev/fulls.js
IP 172.66.47.94:443
Requested by https://champion-3nd.pages.dev/
Certificate IssuerGoogle Trust Services LLC
Subjectchampion-3nd.pages.dev
Fingerprint0F:96:4A:5F:30:FE:E0:7B:A5:51:01:E1:2F:6A:05:4E:65:36:C1:9C
ValidityThu, 07 Dec 2023 09:05:50 GMT - Wed, 06 Mar 2024 09:05:49 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /fulls.js HTTP/1.1
Host: champion-3nd.pages.dev
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://champion-3nd.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 07 Dec 2023 17:32:28 GMT
content-type: text/html; charset=utf-8
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: W/"4f64e85c2dc16196fa26849997cd1cc6"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=UyCk39cfifsX01aIbCQt4i5O%2BU2tzaNBApdfLj1tKzEA1ZZDcI6e0oR8k3Thi0YaFhsjnLj4iT8nB2owEsDaH%2FYn0F%2FSk3gysBrJ0fv1lOo7CxmlRR5cuNi22waJ39aBmXVgxj%2B9wSyg"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 831e82173eae568f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
champion-3nd.pages.dev/btn.js
172.66.47.94200 OK 0 B URL GET HTTP/3 champion-3nd.pages.dev/btn.js
IP 172.66.47.94:443
Requested by https://champion-3nd.pages.dev/
Certificate IssuerGoogle Trust Services LLC
Subjectchampion-3nd.pages.dev
Fingerprint0F:96:4A:5F:30:FE:E0:7B:A5:51:01:E1:2F:6A:05:4E:65:36:C1:9C
ValidityThu, 07 Dec 2023 09:05:50 GMT - Wed, 06 Mar 2024 09:05:49 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /btn.js HTTP/1.1
Host: champion-3nd.pages.dev
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://champion-3nd.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 07 Dec 2023 17:32:28 GMT
content-type: text/html; charset=utf-8
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: W/"4f64e85c2dc16196fa26849997cd1cc6"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=CVzsgULu8zZ8bt4OuF54IcsL3d19MdAdWUiT2dLdAsWST49KjFJLWxAdfaaipxYWOsxfzdibPw9aJ266E6prCezqnSaBqRcSIEhRzA2ENG05jc4TNuEDO23%2F86xSWLHMywUWsstxs0re"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 831e82177eff568f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
champion-3nd.pages.dev/main.js
172.66.47.94200 OK 0 B URL GET HTTP/3 champion-3nd.pages.dev/main.js
IP 172.66.47.94:443
Requested by https://champion-3nd.pages.dev/
Certificate IssuerGoogle Trust Services LLC
Subjectchampion-3nd.pages.dev
Fingerprint0F:96:4A:5F:30:FE:E0:7B:A5:51:01:E1:2F:6A:05:4E:65:36:C1:9C
ValidityThu, 07 Dec 2023 09:05:50 GMT - Wed, 06 Mar 2024 09:05:49 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /main.js HTTP/1.1
Host: champion-3nd.pages.dev
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://champion-3nd.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 07 Dec 2023 17:32:27 GMT
content-type: text/html; charset=utf-8
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: W/"4f64e85c2dc16196fa26849997cd1cc6"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=F%2BBcIpZvBupWJFLn4TGh3a3YF5vEcXrZpwNsoPp%2Fhg2X3zc7BAO1nGxgiwgd6aPL1Y67yoUzVfE6uQ4GxSMEv28FiSr%2FsGCXUJbfgSAxwzhpwlyclu%2FhBH75gDUcpMwSWcv5MQQDLOHj"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 831e8211aef8568f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
champion-3nd.pages.dev/fulls.js
172.66.47.94200 OK 0 B URL GET HTTP/3 champion-3nd.pages.dev/fulls.js
IP 172.66.47.94:443
Requested by https://champion-3nd.pages.dev/
Certificate IssuerGoogle Trust Services LLC
Subjectchampion-3nd.pages.dev
Fingerprint0F:96:4A:5F:30:FE:E0:7B:A5:51:01:E1:2F:6A:05:4E:65:36:C1:9C
ValidityThu, 07 Dec 2023 09:05:50 GMT - Wed, 06 Mar 2024 09:05:49 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /fulls.js HTTP/1.1
Host: champion-3nd.pages.dev
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://champion-3nd.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 07 Dec 2023 17:32:27 GMT
content-type: text/html; charset=utf-8
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: W/"4f64e85c2dc16196fa26849997cd1cc6"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=YMv6PbBqtC4mb9n1jHR0seTPKb8vg75%2BwC1dWWk5v%2FgCxAp1JEf7LgxrvIuTsu4vWm62mth1qn1qLyzSb8SCc%2FTrvhmMhsiihvlNuovKsojIBE%2FC9y%2FGDHJfwLbQFByvJICL3RqInowA"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 831e8211aefa568f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
champion-3nd.pages.dev/w1.png
172.66.47.94200 OK 24 kB URL GET HTTP/3 champion-3nd.pages.dev/w1.png
IP 172.66.47.94:443
Requested by https://champion-3nd.pages.dev/
Certificate IssuerGoogle Trust Services LLC
Subjectchampion-3nd.pages.dev
Fingerprint0F:96:4A:5F:30:FE:E0:7B:A5:51:01:E1:2F:6A:05:4E:65:36:C1:9C
ValidityThu, 07 Dec 2023 09:05:50 GMT - Wed, 06 Mar 2024 09:05:49 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /w1.png HTTP/1.1
Host: champion-3nd.pages.dev
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://champion-3nd.pages.dev/
DNT: 1
Connection: keep-alive
Cookie: _ga_FYZ18BVVNS=GS1.1.1701970355.1.0.1701970355.0.0.0; _ga=GA1.1.344891369.1701970355
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 07 Dec 2023 17:32:34 GMT
content-type: text/html; charset=utf-8
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: W/"4f64e85c2dc16196fa26849997cd1cc6"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=PrYSjvTZM%2BaOvuZ%2F%2FEvuMBHckt4L0%2FgjFEtZgtIdWiLVjrw3MPCqwOTxs7SAxPLO0pKV%2BpZebKawLkMw5H4nKCJZ7IhMRFIB9gVVA0HEN9nVuX6T32l4sYaJA22b60dudfxmoEA6yww3"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 831e823e69cc568f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
champion-3nd.pages.dev/jupiter.js
172.66.47.94200 OK 503 B URL GET HTTP/3 champion-3nd.pages.dev/jupiter.js
IP 172.66.47.94:443
Requested by https://champion-3nd.pages.dev/
Certificate IssuerGoogle Trust Services LLC
Subjectchampion-3nd.pages.dev
Fingerprint0F:96:4A:5F:30:FE:E0:7B:A5:51:01:E1:2F:6A:05:4E:65:36:C1:9C
ValidityThu, 07 Dec 2023 09:05:50 GMT - Wed, 06 Mar 2024 09:05:49 GMT
File type ASCII text, with very long lines (545), with no line terminators
Hash d64718a85daf432be5f8d3c9fe3a45bd
d1b2721f29e5a1a6e6344a53162f32c53eb98e1e
de0997f0917e44e1840ce9d82cc86fd7f6cae542f906c62d78ae71c6af0ee303
Analyzer Verdict Alert urlquery scam Scam - Fake AntiVirus / Security software
GET /jupiter.js HTTP/1.1
Host: champion-3nd.pages.dev
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://champion-3nd.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 07 Dec 2023 17:32:28 GMT
content-type: text/javascript; charset=utf-8
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: W/"57ba525bb338c70835d5893885a8a80a"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=y4TSY3D3WjT%2BHznKlJfGQJRVaIZyR7zOP1aaht4Pzgcx%2F8x2Vp5P3r8bsaarbR7clrj5lS7D5nhnkokaGfcUys3Vpn6LtVH8knbCwj%2BxJXq2prbXLLiTT80Z%2BQFb9nWfwdZqvzfWKzLF"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 831e8211aee8568f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
champion-3nd.pages.dev/bx1.png
172.66.47.94200 OK 24 kB URL GET HTTP/3 champion-3nd.pages.dev/bx1.png
IP 172.66.47.94:443
Requested by https://champion-3nd.pages.dev/
Certificate IssuerGoogle Trust Services LLC
Subjectchampion-3nd.pages.dev
Fingerprint0F:96:4A:5F:30:FE:E0:7B:A5:51:01:E1:2F:6A:05:4E:65:36:C1:9C
ValidityThu, 07 Dec 2023 09:05:50 GMT - Wed, 06 Mar 2024 09:05:49 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /bx1.png HTTP/1.1
Host: champion-3nd.pages.dev
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://champion-3nd.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 07 Dec 2023 17:32:27 GMT
content-type: text/html; charset=utf-8
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: W/"4f64e85c2dc16196fa26849997cd1cc6"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=QZhZRbJhEEYXcpncUrIHLssNypA8xzdMXvcfUrbKjXGigISg0j1r4%2F1MHjjy228O6eHP%2Brq56tNsyukuu33Yz%2BXCpv8BVHEdEWa7yGFiO3ju1ZBFC2pNDo3C%2FAu%2FbCpSiqQQhx%2BYi8pR"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 831e82119ed8568f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
champion-3nd.pages.dev/w3.png
172.66.47.94200 OK 24 kB URL GET HTTP/3 champion-3nd.pages.dev/w3.png
IP 172.66.47.94:443
Requested by https://champion-3nd.pages.dev/
Certificate IssuerGoogle Trust Services LLC
Subjectchampion-3nd.pages.dev
Fingerprint0F:96:4A:5F:30:FE:E0:7B:A5:51:01:E1:2F:6A:05:4E:65:36:C1:9C
ValidityThu, 07 Dec 2023 09:05:50 GMT - Wed, 06 Mar 2024 09:05:49 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /w3.png HTTP/1.1
Host: champion-3nd.pages.dev
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://champion-3nd.pages.dev/
DNT: 1
Connection: keep-alive
Cookie: _ga_FYZ18BVVNS=GS1.1.1701970355.1.0.1701970355.0.0.0; _ga=GA1.1.344891369.1701970355
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 07 Dec 2023 17:32:39 GMT
content-type: text/html; charset=utf-8
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: W/"4f64e85c2dc16196fa26849997cd1cc6"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=sC2tUsqeFyc6656IsYNUFSt9i2anCevZHhiXDYimsI8z%2BUgFxVW3ZIBXUDNRGWPPLG27ISlLJorfHuxLRjehcFvT1JqG2Cr9mdXcBCT1w%2B%2FBQuz%2FInWMNhakYn8nDzk0v3MOR90142WI"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 831e825dbec8568f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
champion-3nd.pages.dev/progress.js
172.66.47.94200 OK 0 B URL GET HTTP/3 champion-3nd.pages.dev/progress.js
IP 172.66.47.94:443
Requested by https://champion-3nd.pages.dev/
Certificate IssuerGoogle Trust Services LLC
Subjectchampion-3nd.pages.dev
Fingerprint0F:96:4A:5F:30:FE:E0:7B:A5:51:01:E1:2F:6A:05:4E:65:36:C1:9C
ValidityThu, 07 Dec 2023 09:05:50 GMT - Wed, 06 Mar 2024 09:05:49 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /progress.js HTTP/1.1
Host: champion-3nd.pages.dev
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://champion-3nd.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 07 Dec 2023 17:32:27 GMT
content-type: text/html; charset=utf-8
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: W/"4f64e85c2dc16196fa26849997cd1cc6"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=orqTGjCn8JreLQYEg%2FBIF0TXAjWFCqDxu8ARMNHfZXMyeLs8BIU8aYtjQG0L7Be7RyhI1i04xaXSs9rdCTmoO7S7Rx2eIjeivMu4tbhB%2F81NOkikrLu1teYtBGMMjh3iu2U4BvuJkswh"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 831e8211aeea568f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
champion-3nd.pages.dev/bx1.png
172.66.47.94200 OK 24 kB URL GET HTTP/3 champion-3nd.pages.dev/bx1.png
IP 172.66.47.94:443
Requested by https://champion-3nd.pages.dev/
Certificate IssuerGoogle Trust Services LLC
Subjectchampion-3nd.pages.dev
Fingerprint0F:96:4A:5F:30:FE:E0:7B:A5:51:01:E1:2F:6A:05:4E:65:36:C1:9C
ValidityThu, 07 Dec 2023 09:05:50 GMT - Wed, 06 Mar 2024 09:05:49 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /bx1.png HTTP/1.1
Host: champion-3nd.pages.dev
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://champion-3nd.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 07 Dec 2023 17:32:28 GMT
content-type: text/html; charset=utf-8
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: W/"4f64e85c2dc16196fa26849997cd1cc6"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=9M%2BMTLmPYQsFbP6gQvT3cCK6Aq6IEgvhLzkzuN0Cb8AxgGl5nvS9QaZMV%2FsChxM0cZPwKEmVf59oHSYTC2ZMUgbtqlmMKJWnVVLmRwY9Lr5%2Ba%2B2KKAC73jqzsoVqeFKLKmTbf%2FtDIj73"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 831e82159c1e568f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
champion-3nd.pages.dev/main.js
172.66.47.94200 OK 0 B URL GET HTTP/3 champion-3nd.pages.dev/main.js
IP 172.66.47.94:443
Requested by https://champion-3nd.pages.dev/
Certificate IssuerGoogle Trust Services LLC
Subjectchampion-3nd.pages.dev
Fingerprint0F:96:4A:5F:30:FE:E0:7B:A5:51:01:E1:2F:6A:05:4E:65:36:C1:9C
ValidityThu, 07 Dec 2023 09:05:50 GMT - Wed, 06 Mar 2024 09:05:49 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /main.js HTTP/1.1
Host: champion-3nd.pages.dev
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://champion-3nd.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 07 Dec 2023 17:32:28 GMT
content-type: text/html; charset=utf-8
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: W/"4f64e85c2dc16196fa26849997cd1cc6"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=lEXvd1xWcsQglp%2BuWt4c7PTJFVsFmm6wZwWeN6wsvdG366MS2q3dweBNlsiAuwCSqYliB%2BN%2FcSdpBjjzcDKXwHYp1nlLUtfcnJW1g0c67IOLXCy1XDedB8EzWwaPblTa0qF2%2F8gtkw3P"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 831e8216fe2d568f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
champion-3nd.pages.dev/w1.png
172.66.47.94200 OK 24 kB URL GET HTTP/3 champion-3nd.pages.dev/w1.png
IP 172.66.47.94:443
Requested by https://champion-3nd.pages.dev/
Certificate IssuerGoogle Trust Services LLC
Subjectchampion-3nd.pages.dev
Fingerprint0F:96:4A:5F:30:FE:E0:7B:A5:51:01:E1:2F:6A:05:4E:65:36:C1:9C
ValidityThu, 07 Dec 2023 09:05:50 GMT - Wed, 06 Mar 2024 09:05:49 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /w1.png HTTP/1.1
Host: champion-3nd.pages.dev
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://champion-3nd.pages.dev/
DNT: 1
Connection: keep-alive
Cookie: _ga_FYZ18BVVNS=GS1.1.1701970355.1.0.1701970355.0.0.0; _ga=GA1.1.344891369.1701970355
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 07 Dec 2023 17:32:30 GMT
content-type: text/html; charset=utf-8
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: W/"4f64e85c2dc16196fa26849997cd1cc6"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=nVz6eVA2uBawAyl7XnsLaeBWRdXRNj44JLvzXRx7uoR3Wzntw8uaQxpaEKf8oort5y7gvwxNOtIAQywFpt52QQkqDtqirAW4UM3MlPmCYIZ5hdTBy90CBc7NkwD2AjpFAu%2Fa1OIxzUz2"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 831e82255b3a568f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
champion-3nd.pages.dev/w1.png
172.66.47.94200 OK 24 kB URL GET HTTP/3 champion-3nd.pages.dev/w1.png
IP 172.66.47.94:443
Requested by https://champion-3nd.pages.dev/
Certificate IssuerGoogle Trust Services LLC
Subjectchampion-3nd.pages.dev
Fingerprint0F:96:4A:5F:30:FE:E0:7B:A5:51:01:E1:2F:6A:05:4E:65:36:C1:9C
ValidityThu, 07 Dec 2023 09:05:50 GMT - Wed, 06 Mar 2024 09:05:49 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /w1.png HTTP/1.1
Host: champion-3nd.pages.dev
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://champion-3nd.pages.dev/
DNT: 1
Connection: keep-alive
Cookie: _ga_FYZ18BVVNS=GS1.1.1701970355.1.0.1701970355.0.0.0; _ga=GA1.1.344891369.1701970355
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 07 Dec 2023 17:32:40 GMT
content-type: text/html; charset=utf-8
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: W/"4f64e85c2dc16196fa26849997cd1cc6"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=AC3Uh2gO0UrdAdDVsXWzW8byTupsKJUa6m%2BSZAok3XvF3yPZZiEg6BqrxePFx9SzgI6oUisdMBwieLg7KEBqbjZPnKqqEokT55396IUqiOmgqF9eDW5BBWoDme%2BcLIuYO3mtnSOOY7Gk"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 831e8263ffc9568f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
champion-3nd.pages.dev/btn.js
172.66.47.94200 OK 0 B URL GET HTTP/3 champion-3nd.pages.dev/btn.js
IP 172.66.47.94:443
Requested by https://champion-3nd.pages.dev/
Certificate IssuerGoogle Trust Services LLC
Subjectchampion-3nd.pages.dev
Fingerprint0F:96:4A:5F:30:FE:E0:7B:A5:51:01:E1:2F:6A:05:4E:65:36:C1:9C
ValidityThu, 07 Dec 2023 09:05:50 GMT - Wed, 06 Mar 2024 09:05:49 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /btn.js HTTP/1.1
Host: champion-3nd.pages.dev
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://champion-3nd.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 07 Dec 2023 17:32:27 GMT
content-type: text/html; charset=utf-8
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: W/"4f64e85c2dc16196fa26849997cd1cc6"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2Brp33JtM7pUZPsqmxfDMqhyYAXxoRuNfPV%2BeOMMND8I2H0d1wR%2FKUVXg1l7OAPJ6n%2F6Q1ITioLIzxVV4mvYxr%2FiC6GOHG7s9DL%2BEdR0DIn30cpcj8gZSrxjdksl%2Fwxn7npfV7PSjI%2FXw"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 831e8211aefd568f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
champion-3nd.pages.dev/w3.png
172.66.47.94200 OK 24 kB URL GET HTTP/3 champion-3nd.pages.dev/w3.png
IP 172.66.47.94:443
Requested by https://champion-3nd.pages.dev/
Certificate IssuerGoogle Trust Services LLC
Subjectchampion-3nd.pages.dev
Fingerprint0F:96:4A:5F:30:FE:E0:7B:A5:51:01:E1:2F:6A:05:4E:65:36:C1:9C
ValidityThu, 07 Dec 2023 09:05:50 GMT - Wed, 06 Mar 2024 09:05:49 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /w3.png HTTP/1.1
Host: champion-3nd.pages.dev
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://champion-3nd.pages.dev/
DNT: 1
Connection: keep-alive
Cookie: _ga_FYZ18BVVNS=GS1.1.1701970355.1.0.1701970355.0.0.0; _ga=GA1.1.344891369.1701970355
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 07 Dec 2023 17:32:36 GMT
content-type: text/html; charset=utf-8
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: W/"4f64e85c2dc16196fa26849997cd1cc6"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=VCVCb9P%2FNTyUjZ2Mnjx11cRwoYgzEla3AexyidXCddE9vnRSGFS2fMT%2FUvwT%2FUus5MtKki4zkxjPx6pQFkeEih20pRm4BdqlXCimLwJuohlUtTHDf2g%2F9KF4ijzvKPqNN80UH0ftLA6v"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 831e8244cb70568f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400