{"report_id":"bba38753-7422-4fb9-a119-f3716650a90b","version":6,"status":"done","tags":[],"date":"2025-10-14T09:36:34Z","url":{"schema":"https","addr":"ab.chatgpt.com/v1/rgstr?k=client-nb0qtYlZuy2tCMN5s5ncnuIBCJncjRViT0IzFm7GqST\u0026st=javascript-client\u0026sv=3.17.0\u0026t=1760432772322\u0026sid=b9ceb644-1037-42f4-9ae5-f9ae1cbcc266\u0026ec=31\u0026gz=1","fqdn":"ab.chatgpt.com","domain":"chatgpt.com","tld":"com"},"ip":{"addr":"104.18.32.47","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"ab.chatgpt.com/v1/rgstr?k=client-nb0qtYlZuy2tCMN5s5ncnuIBCJncjRViT0IzFm7GqST\u0026st=javascript-client\u0026sv=3.17.0\u0026t=1760432772322\u0026sid=b9ceb644-1037-42f4-9ae5-f9ae1cbcc266\u0026ec=31\u0026gz=1","fqdn":"ab.chatgpt.com","domain":"chatgpt.com","tld":"com"},"title":"ab.chatgpt.com/v1/rgstr?k=client-nb0qtYlZuy2tCMN5s5ncnuIBCJncjRViT0IzFm7GqST\u0026st=javascript-client\u0026sv=3.17.0\u0026t=1760432772322\u0026sid=b9ceb644-1037-42f4-9ae5-f9ae1cbcc266\u0026ec=31\u0026gz=1"},"submit":{"url":{"schema":"https","addr":"ab.chatgpt.com/v1/rgstr?k=client-nb0qtYlZuy2tCMN5s5ncnuIBCJncjRViT0IzFm7GqST\u0026st=javascript-client\u0026sv=3.17.0\u0026t=1760432772322\u0026sid=b9ceb644-1037-42f4-9ae5-f9ae1cbcc266\u0026ec=31\u0026gz=1","fqdn":"ab.chatgpt.com","domain":"chatgpt.com","tld":"com"},"ip":{"addr":"104.18.32.47","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-11-18T09:36:34Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"ab.chatgpt.com","ip":{"addr":"172.64.155.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2022-11-30","domain_rank":6168,"first_seen":"2024-02-16T00:33:29Z","last_seen":"2025-10-07T15:50:11.939123Z","alert_count":0,"request_count":2,"received_data":1927,"sent_data":1451,"comment":"","tags":null,"fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Statsig","description":"Statsig is a modern product experimentation platform that helps product teams continuously measure impact of every single feature they launch.","website":"https://statsig.com/","common_platform_enumeration":"","icon":"Statsig.svg","categories":["Analytics","Feature management"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":null,"urlquery":null},"javascript":{"script":null,"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"ab.chatgpt.com/v1/rgstr?k=client-nb0qtYlZuy2tCMN5s5ncnuIBCJncjRViT0IzFm7GqST\u0026st=javascript-client\u0026sv=3.17.0\u0026t=1760432772322\u0026sid=b9ceb644-1037-42f4-9ae5-f9ae1cbcc266\u0026ec=31\u0026gz=1","fqdn":"ab.chatgpt.com","domain":"chatgpt.com","tld":"com"},"ip":{"addr":"172.64.155.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-10-14T09:36:12.995Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chatgpt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 01:43:18 GMT","end":"Fri, 26 Dec 2025 02:43:16 GMT"},"fingerprint":{"sha1":"FD:87:A4:92:87:A1:73:21:20:DF:03:5A:82:EE:AE:7C:36:68:64:64","sha256":"E9:69:E7:8D:D8:AA:2F:46:DF:1D:2A:26:42:3C:03:7B:5A:01:A2:93:DF:6B:CF:F9:34:AF:0E:2A:EC:77:CA:F5"}}},"request":{"raw":"GET /v1/rgstr?k=client-nb0qtYlZuy2tCMN5s5ncnuIBCJncjRViT0IzFm7GqST\u0026st=javascript-client\u0026sv=3.17.0\u0026t=1760432772322\u0026sid=b9ceb644-1037-42f4-9ae5-f9ae1cbcc266\u0026ec=31\u0026gz=1 HTTP/1.1\r\nHost: ab.chatgpt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 403 Forbidden\r\ndate: Tue, 14 Oct 2025 09:36:13 GMT\r\ncontent-type: text/plain\r\ncontent-length: 19\r\nx-content-type-options: nosniff\r\nvia: 1.1 google\r\ncf-cache-status: DYNAMIC\r\nset-cookie: GCLB=\"d3d5cc9a93f4fe4a\"; Max-Age=1; Path=/; HttpOnly\n__cf_bm=1wQir9sRlDTXGj.vz0to1qKFIULXVWZT3ShPliHolZo-1760434573-1.0.1.1-xtUnqClZ6MqoxlXJExFsSdIjS.LImC4yDhCg_ck03TdBqrAzm_pkLt1ADfvXotAoA0_8bHGmrrV_DcH_mM7jIpyk.4XX_CedSJ4nGXjq76A; path=/; expires=Tue, 14-Oct-25 10:06:13 GMT; domain=.chatgpt.com; HttpOnly; Secure; SameSite=None\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=YRIln1puq4qV4fTAEmrEDDekBQDMkceRwQWv2d2kw149OOqOGy%2Ftl2YMgh%2FxmGTEFwDYgybSUiCigM8khTq6hSZOsC0uj%2BLE%2Fv7Q9keoj1wVoU9pK54E5nQ6aBJg3zVO\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncross-origin-opener-policy: same-origin-allow-popups\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: cloudflare\r\ncf-ray: 98e617517eba0883-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":19,"size_decoded":0,"mime_type":"text/plain","magic":"ASCII text, with no line terminators","md5":"980021208d52c1907a8256f57f077691","sha1":"cc2ef6376333cdfb4e18210689b4ffae4fd60c39","sha256":"b5865d15f4439d43678f8f1165ca58106c42c0f1aff9419dfc642fa4dcdac269","sha512":"abc045334b3a69a098e0d5ac0f391f389350432e8090c379829c3e7722fb991cc19e1f419cf3a150fc8a9351d359c0c6944ae2d782ffe7c24a4b4027a6111028","ssdeep":"","tlshash":"2070000a2a288800020300022820022328000080020802c008002000022c0888000000","first_seen":"2023-04-19T00:26:32Z","last_seen":"2026-04-29T22:56:19.316549Z","times_seen":316,"resource_available":true,"data":null}},"time_used":115,"timings":{"blocked":38,"dns":21,"connect":1,"send":0,"wait":38,"receive":0,"ssl":14},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ab.chatgpt.com/favicon.ico","fqdn":"ab.chatgpt.com","domain":"chatgpt.com","tld":"com"},"ip":{"addr":"172.64.155.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ab.chatgpt.com/v1/rgstr?k=client-nb0qtYlZuy2tCMN5s5ncnuIBCJncjRViT0IzFm7GqST\u0026st=javascript-client\u0026sv=3.17.0\u0026t=1760432772322\u0026sid=b9ceb644-1037-42f4-9ae5-f9ae1cbcc266\u0026ec=31\u0026gz=1","date":"2025-10-14T09:36:13.233Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chatgpt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 01:43:18 GMT","end":"Fri, 26 Dec 2025 02:43:16 GMT"},"fingerprint":{"sha1":"FD:87:A4:92:87:A1:73:21:20:DF:03:5A:82:EE:AE:7C:36:68:64:64","sha256":"E9:69:E7:8D:D8:AA:2F:46:DF:1D:2A:26:42:3C:03:7B:5A:01:A2:93:DF:6B:CF:F9:34:AF:0E:2A:EC:77:CA:F5"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: ab.chatgpt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ab.chatgpt.com/v1/rgstr?k=client-nb0qtYlZuy2tCMN5s5ncnuIBCJncjRViT0IzFm7GqST\u0026st=javascript-client\u0026sv=3.17.0\u0026t=1760432772322\u0026sid=b9ceb644-1037-42f4-9ae5-f9ae1cbcc266\u0026ec=31\u0026gz=1\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: GCLB=\"d3d5cc9a93f4fe4a\"; __cf_bm=1wQir9sRlDTXGj.vz0to1qKFIULXVWZT3ShPliHolZo-1760434573-1.0.1.1-xtUnqClZ6MqoxlXJExFsSdIjS.LImC4yDhCg_ck03TdBqrAzm_pkLt1ADfvXotAoA0_8bHGmrrV_DcH_mM7jIpyk.4XX_CedSJ4nGXjq76A\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 403 Forbidden\r\ndate: Tue, 14 Oct 2025 09:36:13 GMT\r\ncontent-type: text/plain\r\ncontent-length: 19\r\nx-statsig-region: gke-europe-north1\r\nx-content-type-options: nosniff\r\nvia: 1.1 google\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=rLWNNJW%2F2G6BmB%2BrB1RMn6GgDZ8vaRbDXUvLliiNlVW1mXxV1WRET4cLB2ZlspW6ocDwvrW9Bpy6mICdC7yXCd%2Fm0ZknK%2Bdyyu4xsRk97olhvw11so1rtO0kHk9udTRf\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncross-origin-opener-policy: same-origin-allow-popups\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: cloudflare\r\ncf-ray: 98e61752a9830883-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Statsig","description":"Statsig is a modern product experimentation platform that helps product teams continuously measure impact of every single feature they launch.","website":"https://statsig.com/","common_platform_enumeration":"","icon":"Statsig.svg","categories":["Analytics","Feature management"]}],"data":{"size":19,"size_decoded":0,"mime_type":"text/plain","magic":"ASCII text, with no line terminators","md5":"980021208d52c1907a8256f57f077691","sha1":"cc2ef6376333cdfb4e18210689b4ffae4fd60c39","sha256":"b5865d15f4439d43678f8f1165ca58106c42c0f1aff9419dfc642fa4dcdac269","sha512":"abc045334b3a69a098e0d5ac0f391f389350432e8090c379829c3e7722fb991cc19e1f419cf3a150fc8a9351d359c0c6944ae2d782ffe7c24a4b4027a6111028","ssdeep":"","tlshash":"2070000a2a288800020300022820022328000080020802c008002000022c0888000000","first_seen":"2023-04-19T00:26:32Z","last_seen":"2026-04-29T22:56:19.316549Z","times_seen":316,"resource_available":true,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}