| minhaclaro.dtmmkt.com.br/effectivemail/redirecionaclique.aspx?idabordagem=5252932746&idlink=126090168=%0A66&endereco=//ammmei.org/resources/dn7uqho3wzdwki/jp8IUvh7kU/anl1cmtvdmljaEBtaWxsZXJ0aG9tc29uLmNvbQ== | 177.47.17.238 | | 206 B |
URL minhaclaro.dtmmkt.com.br/effectivemail/redirecionaclique.aspx?idabordagem=5252932746&idlink=126090168=%0A66&endereco=//ammmei.org/resources/dn7uqho3wzdwki/jp8IUvh7kU/anl1cmtvdmljaEBtaWxsZXJ0aG9tc29uLmNvbQ== IP177.47.17.238:0 ASN#15830 Equinix (EMEA) Acquisition Enterprises B.V.
File typeHTML document, ASCII text, with CRLF line terminators Hashd61f2f1377834e4b95888f0641a53210 36052e419a966ebeb20000424ed5efe5cac6b7c4 ca99efc40eac610ad5d5463968835b390e4af8f5fafd787bcff2774301fa2362
GET /effectivemail/redirecionaclique.aspx?idabordagem=5252932746&idlink=126090168=%0A66&endereco=//ammmei.org/resources/dn7uqho3wzdwki/jp8IUvh7kU/anl1cmtvdmljaEBtaWxsZXJ0aG9tc29uLmNvbQ== HTTP/1.1
Host: minhaclaro.dtmmkt.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
Date: Wed, 17 Apr 2024 19:39:53 GMT
Server: Apache
Strict-Transport-Security: max-age=63072000; includeSubDomains
Cache-Control: private
Content-Type: text/html; charset=utf-8
Location: //ammmei.org/resources/dn7uqho3wzdwki/jp8IUvh7kU/anl1cmtvdmljaEBtaWxsZXJ0aG9tc29uLmNvbQ==
Content-Length: 206
Via: 1.1 minhaclaro.dtmmkt.com.br
Keep-Alive: timeout=5, max=256
Connection: Keep-Alive
|
|
| ammmei.org/resources/dn7uqho3wzdwki/jp8IUvh7kU/anl1cmtvdmljaEBtaWxsZXJ0aG9tc29uLmNvbQ== | 132.148.128.8 | | 0 B |
URL ammmei.org/resources/dn7uqho3wzdwki/jp8IUvh7kU/anl1cmtvdmljaEBtaWxsZXJ0aG9tc29uLmNvbQ== IP132.148.128.8:0 ASN#398101 GO-DADDY-COM-LLC
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer | Verdict | Alert | urlquery | phishing | Phishing - Microsoft Outlook |
GET /resources/dn7uqho3wzdwki/jp8IUvh7kU/anl1cmtvdmljaEBtaWxsZXJ0aG9tc29uLmNvbQ== HTTP/1.1
Host: ammmei.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 17 Apr 2024 19:39:54 GMT
Server: Apache
refresh: 0;url=https://yourprivatetaly.com/Mjyurkovich@millerthomson.com
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
|
|
| yourprivatetaly.com/Mjyurkovich@millerthomson.com | 104.21.6.50 | 403 Forbidden | 19 kB |
URL User Request GET HTTP/3yourprivatetaly.com/Mjyurkovich@millerthomson.com IP104.21.6.50:443
CertificateIssuerGoogle Trust Services LLC Subjectyourprivatetaly.com FingerprintF4:59:6C:53:A7:16:D5:70:20:8C:2C:E1:C5:F8:81:0D:9D:DD:F1:7A ValidityMon, 19 Feb 2024 21:27:59 GMT - Sun, 19 May 2024 21:27:58 GMT
File typeHTML document, ASCII text, with very long lines (16449), with no line terminators Hashe556642911570132cad044623cb6793f a2f5ffefdab62154d1688e7e3a9ab1c0e1d0504e 03dfbe6f948266461c082edcb341c74e66aef62b07e2402f401d4a730aeb964c
Analyzer | Verdict | Alert | urlquery | phishing | Phishing - Microsoft Outlook |
GET /Mjyurkovich@millerthomson.com HTTP/1.1
Host: yourprivatetaly.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 403 Forbidden
date: Wed, 17 Apr 2024 19:39:55 GMT
content-type: text/html; charset=UTF-8
accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
cross-origin-embedder-policy: require-corp
cross-origin-opener-policy: same-origin
cross-origin-resource-policy: same-origin
origin-agent-cluster: ?1
permissions-policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()
referrer-policy: same-origin
x-frame-options: SAMEORIGIN
cf-mitigated: challenge
cf-chl-out: 6u5LSZF/akJk9G9XGxqc4n+10xpwMQJw/EdIucUsk6lYy5Ja6a1MdkKW1/47eH63IOHAHnOhsdfPIP5gDuo6naFW4bKDxXIA/6RUdBl03eoMBsbqCiEf6+x6PF5ha+vQlVzaoo4y5Sbd7HhqvOIy2Q==$0F8+XBrAuLoSddwd7gA9Wg==
cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
expires: Thu, 01 Jan 1970 00:00:01 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=4G4LWlWb8FxcNZUOR4XY3itVkgRRxt0LM6g2q%2BLh8kN46wHGHOPoRqnP51DK6VmU1Prbx2W5NOlIElX5fTOxo71TXCGQlZ%2FuiqmHCg2wvfU3%2FOwx9SckYicbuEHg2TXQjBylNSah"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 875ee2466ff87131-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/flow/ov1/1242065449:1713381147:8t4xvc7t5hhz7vmS_Cv50LKahS2tJJ2ovp_PkXC0pGE/875ee2491897569a/904777ad4a3708e | 104.17.3.184 | | 7.1 kB |
URL challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/flow/ov1/1242065449:1713381147:8t4xvc7t5hhz7vmS_Cv50LKahS2tJJ2ovp_PkXC0pGE/875ee2491897569a/904777ad4a3708e IP104.17.3.184:0
File typeASCII text, with very long lines (960), with no line terminators Hashe56af7f8cb2975557290a3119f154df2 a0311213eae447da07a637568bcbf35ec805b1ec e3e7ef08a544696d1708f27eada6cea22e208e47baa83daee37f0444cc846081
POST /cdn-cgi/challenge-platform/h/g/flow/ov1/1242065449:1713381147:8t4xvc7t5hhz7vmS_Cv50LKahS2tJJ2ovp_PkXC0pGE/875ee2491897569a/904777ad4a3708e HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/3gzf6/0x4AAAAAAADnPIDROrmt1Wwj/light/normal
Content-type: application/x-www-form-urlencoded
CF-Challenge: 904777ad4a3708e
Content-Length: 38372
Origin: https://challenges.cloudflare.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 17 Apr 2024 19:40:00 GMT
content-type: text/html; charset=UTF-8
cf-chl-out: liV/aS1X+hOqqjbqAdnzBWJnAFkhHmWsffwSCQwEz7gmXd7aOyAZp+iM1njPz10OkO3S/tcs4wCue2d+2lWagHy1S4mpDZZ6THgsbtCkt5A=$5wuHssdtjn0ec67XWCzLEQ==
cf-chl-out-s: CB0HMonDCe1zRX19x2+OYDvdQ0NKBcGVX2hAExjhPHuJqOK/p+ZwYQ/2qx1SD4DGrEtagiLWwaEo7FhBnqCJsvDi5nEGTyUD2xXqaZa/hG+kcA2YCRzV43xhpCxu+IO+IZ1nxffdQbOUyf9ObtTLNw==$F6MLELEXw0PcGRRrfe3JJQ==
server: cloudflare
cf-ray: 875ee2658d2c569a-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/flow/ov1/951475595:1713381072:6hd1_R56UoXaeXLmhnPaprFHKwPFyXoso1wCEtRa2I8/875ee2758940569a/153121b0939c109 | 104.17.3.184 | | 80 kB |
URL challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/flow/ov1/951475595:1713381072:6hd1_R56UoXaeXLmhnPaprFHKwPFyXoso1wCEtRa2I8/875ee2758940569a/153121b0939c109 IP104.17.3.184:0
File typeASCII text, with very long lines (65536), with no line terminators Hashf2a2e5f6c9e37f48182fbd15b655c6ce 7e54f8385045abf48c431d89904a0db2cfcf5f07 7f57e6c54af077cc869d5ad2d3d6227c2cc4a83a126391b7b51556b0df882459
POST /cdn-cgi/challenge-platform/h/g/flow/ov1/951475595:1713381072:6hd1_R56UoXaeXLmhnPaprFHKwPFyXoso1wCEtRa2I8/875ee2758940569a/153121b0939c109 HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/3qz8c/0x4AAAAAAADnPIDROrmt1Wwj/light/normal
Content-type: application/x-www-form-urlencoded
CF-Challenge: 153121b0939c109
Content-Length: 3397
Origin: https://challenges.cloudflare.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 17 Apr 2024 19:40:03 GMT
content-type: text/plain; charset=UTF-8
cf-chl-gen: ovuGNYTs98MCCy/NOxXy7aGlcENElU0CEEl3JEPiwiOsBOe/BPWniugVkJrg4f1dZlAUQBKWEN5AKZJzsmZ6ndTFHhQpJOXt/4Y49xG14nbaPFqoqRpBrW/ctxCI4YhZuC8sceU/JZBv6sLFeQzID93kIqYPvEf1cX6J8cg6rYXhd56QPGHm/9X1sbOAPApvtFENRgtEKaX5KZxzEekMY7GkKQZhSQh32aygNE7cKOvRHjyqx8LMsZCoPCHW9l6bY77FZHi/C/GjRUqFGb32t8W29olmjx0PHYC0t8TyxUYbTq9A7az5YVHgc3we116vKeT4UphFvpDZZ/Vjr3K5qcsSH8+LMcwS2IHAKzq+rB/EPwrlGivS36fCSxo//2Bk$yFUBDcEI5c192iGafhP/nQ==
server: cloudflare
cf-ray: 875ee277ace8569a-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/i/875ee2758940569a/1713382803173/sR4Afnr8TFSZLOx | 104.17.3.184 | | 7.9 kB |
URL challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/i/875ee2758940569a/1713382803173/sR4Afnr8TFSZLOx IP104.17.3.184:0
File typePNG image data, 85 x 16, 8-bit/color RGB, non-interlaced Hash0cce632f563bd94ac45ae3f71cc6d1cf 458c0d2a840f16e201e2d9a48f38accfad6b81b0 3ec806537e0b49ad4304f378787550680317363037656798e477c9af423e4925
GET /cdn-cgi/challenge-platform/h/g/i/875ee2758940569a/1713382803173/sR4Afnr8TFSZLOx HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/3qz8c/0x4AAAAAAADnPIDROrmt1Wwj/light/normal
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 17 Apr 2024 19:40:04 GMT
content-type: image/png
server: cloudflare
cf-ray: 875ee27f7a5d569a-OSL
alt-svc: h3=":443"; ma=86400
|
|
| yourprivatetaly.com/cdn-cgi/challenge-platform/h/g/flow/ov1/379644602:1713381129:fob3maZQaHxf-rPT2LJ6SLv3dD-MtdtV9sbXpiJm9Tg/875ee2aaad3a56c6/9588b0d464d481e | 104.21.6.50 | 200 OK | 16 kB |
URL POST HTTP/3yourprivatetaly.com/cdn-cgi/challenge-platform/h/g/flow/ov1/379644602:1713381129:fob3maZQaHxf-rPT2LJ6SLv3dD-MtdtV9sbXpiJm9Tg/875ee2aaad3a56c6/9588b0d464d481e IP104.21.6.50:443
Requested byhttps://yourprivatetaly.com/Mjyurkovich@millerthomson.com CertificateIssuerGoogle Trust Services LLC Subjectyourprivatetaly.com FingerprintF4:59:6C:53:A7:16:D5:70:20:8C:2C:E1:C5:F8:81:0D:9D:DD:F1:7A ValidityMon, 19 Feb 2024 21:27:59 GMT - Sun, 19 May 2024 21:27:58 GMT
File typeASCII text, with very long lines (16088), with no line terminators Hash3f09e72a098b3772f4e01526336ffb12 574db31420a21e150aa4cef1c521c2c1c5ac1a6c 7b4bb8da5561110fd61e53908f7bf73e093fc44751c5f031238842146340cee2
POST /cdn-cgi/challenge-platform/h/g/flow/ov1/379644602:1713381129:fob3maZQaHxf-rPT2LJ6SLv3dD-MtdtV9sbXpiJm9Tg/875ee2aaad3a56c6/9588b0d464d481e HTTP/1.1
Host: yourprivatetaly.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://yourprivatetaly.com/Mjyurkovich@millerthomson.com
Content-type: application/x-www-form-urlencoded
CF-Challenge: 9588b0d464d481e
Content-Length: 1909
Origin: https://yourprivatetaly.com
DNT: 1
Connection: keep-alive
Cookie: cf_chl_rc_m=2
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 17 Apr 2024 19:40:11 GMT
content-type: text/plain; charset=UTF-8
cf-chl-gen: O+hJibG/AymTVOxW5oTjxNhPd6t2PModGzX94kDil9R88mhxzG50e7Wd5A44UInQ$DN3JnV6cCLNbBE808G6hiA==
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=8%2Fywgv40cfnF815Fixo1sWdpr4MGQhR1kTugBvtTXn6LkhZcuVHxzcCLUm%2BpWCAwrugAyaFCZOiaLZVWFReUwoK9RVUutHTBmlohySufTRq7XAqzt4NojYGlEIZjxAUkiFCmbsNO"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 875ee2ac587256c6-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/i/875ee2ad4a05569a/1713382812083/hoQrtVAxLiZU-ml | 104.17.3.184 | 200 OK | 61 B |
URL GET HTTP/3challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/i/875ee2ad4a05569a/1713382812083/hoQrtVAxLiZU-ml IP104.17.3.184:443
Requested byhttps://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/nbnb1/0x4AAAAAAADnPIDROrmt1Wwj/light/normal CertificateIssuerCloudflare, Inc. Subjectchallenges.cloudflare.com Fingerprint5F:E4:AA:8C:2E:24:D2:B1:69:9D:13:28:31:5C:65:FA:97:2A:E9:6E ValidityFri, 18 Aug 2023 00:00:00 GMT - Sat, 17 Aug 2024 23:59:59 GMT
File typePNG image data, 74 x 5, 8-bit/color RGB, non-interlaced Hash49f1d9248e3a9a519f8bb1afa441f668 067c50f991f5397e0002f874ec3278039a8729ad 2dff0286350c25d4c931824d90e2e57073b8799b76d302a40c80dfde1c1778b4
GET /cdn-cgi/challenge-platform/h/g/i/875ee2ad4a05569a/1713382812083/hoQrtVAxLiZU-ml HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/nbnb1/0x4AAAAAAADnPIDROrmt1Wwj/light/normal
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 17 Apr 2024 19:40:13 GMT
content-type: image/png
server: cloudflare
cf-ray: 875ee2b5a803569a-OSL
alt-svc: h3=":443"; ma=86400
|
|
| yourprivatetaly.com/cdn-cgi/challenge-platform/h/g/orchestrate/chl_page/v1?ray=875ee2aaad3a56c6 | 104.21.6.50 | 200 OK | 392 kB |
URL GET HTTP/3yourprivatetaly.com/cdn-cgi/challenge-platform/h/g/orchestrate/chl_page/v1?ray=875ee2aaad3a56c6 IP104.21.6.50:443
Requested byhttps://yourprivatetaly.com/Mjyurkovich@millerthomson.com CertificateIssuerGoogle Trust Services LLC Subjectyourprivatetaly.com FingerprintF4:59:6C:53:A7:16:D5:70:20:8C:2C:E1:C5:F8:81:0D:9D:DD:F1:7A ValidityMon, 19 Feb 2024 21:27:59 GMT - Sun, 19 May 2024 21:27:58 GMT
File typeJavaScript source, ASCII text, with very long lines (65536), with no line terminators Size392 kB (392319 bytes) Hash3f3178adc15ac1e513766ca66f444577 f7c0565d6f001a636ab6b193321bcfae4028689c 236b1797a65284530677814a607e7ccc820b4dbfcea8a72fe67f61587216e453
GET /cdn-cgi/challenge-platform/h/g/orchestrate/chl_page/v1?ray=875ee2aaad3a56c6 HTTP/1.1
Host: yourprivatetaly.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://yourprivatetaly.com/Mjyurkovich@millerthomson.com?__cf_chl_rt_tk=_lbn_gZxF9v3FRDpcj6JxH6_LNB.GF590d8d7hqK_DA-1713382811-0.0.1.1-1642
DNT: 1
Connection: keep-alive
Cookie: cf_chl_rc_m=2
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 17 Apr 2024 19:40:11 GMT
content-type: application/javascript; charset=UTF-8
cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=89aN9SFYGj67FaCJNZxyCfOnvZSToUfnGYjCWa9jCedC0LwCc6ln8Q0j%2FR1H4GGA5V5ufoNv789FDOJvlX4FtrYPphD3bqN3a1ZZNH4RAUFCoRahYMIKpD%2FSokh%2F%2B7KFkQyOUZW%2F"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 875ee2aafde756c6-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/cmg/1/GLhOioXg0bs57t4qPrORXFsL1%2BWig2mIKbgpVPMu7ZQ%3D | 104.17.3.184 | 200 OK | 61 B |
URL GET HTTP/3challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/cmg/1/GLhOioXg0bs57t4qPrORXFsL1%2BWig2mIKbgpVPMu7ZQ%3D IP104.17.3.184:443
Requested byhttps://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/nbnb1/0x4AAAAAAADnPIDROrmt1Wwj/light/normal CertificateIssuerCloudflare, Inc. Subjectchallenges.cloudflare.com Fingerprint5F:E4:AA:8C:2E:24:D2:B1:69:9D:13:28:31:5C:65:FA:97:2A:E9:6E ValidityFri, 18 Aug 2023 00:00:00 GMT - Sat, 17 Aug 2024 23:59:59 GMT
File typePNG image data, 2 x 2, 8-bit/color RGB, non-interlaced Hash9246cca8fc3c00f50035f28e9f6b7f7d 3aa538440f70873b574f40cd793060f53ec17a5d c07d7d29e3c20fa6ca4c5d20663688d52bad13e129ad82ce06b80eb187d9dc84
GET /cdn-cgi/challenge-platform/h/g/cmg/1/GLhOioXg0bs57t4qPrORXFsL1%2BWig2mIKbgpVPMu7ZQ%3D HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/nbnb1/0x4AAAAAAADnPIDROrmt1Wwj/light/normal
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 17 Apr 2024 19:40:11 GMT
content-type: image/png
cache-control: max-age=2629800, public
server: cloudflare
cf-ray: 875ee2adbad1569a-OSL
alt-svc: h3=":443"; ma=86400
|
|
| challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/flow/ov1/1011320276:1713381166:tfKVbX6JMPYirT7BIf_jl5QU8nP1GjTDpaHbWe1FW8s/875ee2ad4a05569a/2f55f5388df4f3a | 104.17.3.184 | 200 OK | 22 kB |
URL POST HTTP/3challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/flow/ov1/1011320276:1713381166:tfKVbX6JMPYirT7BIf_jl5QU8nP1GjTDpaHbWe1FW8s/875ee2ad4a05569a/2f55f5388df4f3a IP104.17.3.184:443
Requested byhttps://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/nbnb1/0x4AAAAAAADnPIDROrmt1Wwj/light/normal CertificateIssuerCloudflare, Inc. Subjectchallenges.cloudflare.com Fingerprint5F:E4:AA:8C:2E:24:D2:B1:69:9D:13:28:31:5C:65:FA:97:2A:E9:6E ValidityFri, 18 Aug 2023 00:00:00 GMT - Sat, 17 Aug 2024 23:59:59 GMT
File typeASCII text, with very long lines (22540), with no line terminators Hashb8e2d665492f573c89444da751eb1c0c e6f659ff44833163f9ad0c04f395d6631b1a9710 822b3281ddb3c34b3dfc00bdc76bb0bd847befd693f9347434e6f4ab8a0e3ce3
POST /cdn-cgi/challenge-platform/h/g/flow/ov1/1011320276:1713381166:tfKVbX6JMPYirT7BIf_jl5QU8nP1GjTDpaHbWe1FW8s/875ee2ad4a05569a/2f55f5388df4f3a HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/nbnb1/0x4AAAAAAADnPIDROrmt1Wwj/light/normal
Content-type: application/x-www-form-urlencoded
CF-Challenge: 2f55f5388df4f3a
Content-Length: 26041
Origin: https://challenges.cloudflare.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 17 Apr 2024 19:40:13 GMT
content-type: text/plain; charset=UTF-8
cf-chl-gen: di6ffGdW/QA4AuUuNg73ZTjKWnWCrn6lofAGPVwTyb/WZx8fuaBeW7iCjYtp+RLY$TfWixJSlE3+jjP1WhbXMbw==
server: cloudflare
cf-ray: 875ee2b77b0d569a-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| yourprivatetaly.com/favicon.ico | 104.21.6.50 | 403 Forbidden | 16 kB |
URL GET HTTP/3yourprivatetaly.com/favicon.ico IP104.21.6.50:443
Requested byhttps://yourprivatetaly.com/Mjyurkovich@millerthomson.com CertificateIssuerGoogle Trust Services LLC Subjectyourprivatetaly.com FingerprintF4:59:6C:53:A7:16:D5:70:20:8C:2C:E1:C5:F8:81:0D:9D:DD:F1:7A ValidityMon, 19 Feb 2024 21:27:59 GMT - Sun, 19 May 2024 21:27:58 GMT
File typeHTML document, ASCII text, with very long lines (15816), with no line terminators Hash2ec6f26c45177b797f511d0a7e5ebba1 02493bfd251c17f584ec31fcfb7c783becc83035 ad6dcb15685a41f1dd58e0bd9e69eb771f633988a0ed0a436a1ec22a8d37a104
GET /favicon.ico HTTP/1.1
Host: yourprivatetaly.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://yourprivatetaly.com/Mjyurkovich@millerthomson.com
DNT: 1
Connection: keep-alive
Cookie: cf_chl_rc_m=2
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 403 Forbidden
date: Wed, 17 Apr 2024 19:40:11 GMT
content-type: text/html; charset=UTF-8
accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
cross-origin-embedder-policy: require-corp
cross-origin-opener-policy: same-origin
cross-origin-resource-policy: same-origin
origin-agent-cluster: ?1
permissions-policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()
referrer-policy: same-origin
x-frame-options: SAMEORIGIN
cf-mitigated: challenge
cf-chl-out: FvgH950IxX5Qsrwszliq7I1qKjRngQZhp59XLkPHdyNWmla5eZkK4g11Sy3Kit1NvPg+CKD7a2QCjDBOsrhMf7TyiEzB8pWOFdhE92RAmn9oRGzkWPSanmiGsbHnA0PSWHz+oATjfSUxYODHYZuVwg==$Da+XfkSQKNjhGOJOJeMdNQ==
cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
expires: Thu, 01 Jan 1970 00:00:01 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=cGoqFJL%2BPDiECWt7092aiI1J7q0nahyia%2F91%2FJhJmdUeM4RE1qpQawKsWTunWqLpz%2B9EWtbtLTCuQCOAOpW7RdBhNH%2ByvNU23JtTJ%2BfcrW8a8mhbFa3S5GgJ3n3HNo2WbcbCDtoy"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 875ee2ab8edb56c6-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| yourprivatetaly.com/favicon.ico | 104.21.6.50 | 403 Forbidden | 16 kB |
URL GET HTTP/3yourprivatetaly.com/favicon.ico IP104.21.6.50:443
Requested byhttps://yourprivatetaly.com/Mjyurkovich@millerthomson.com CertificateIssuerGoogle Trust Services LLC Subjectyourprivatetaly.com FingerprintF4:59:6C:53:A7:16:D5:70:20:8C:2C:E1:C5:F8:81:0D:9D:DD:F1:7A ValidityMon, 19 Feb 2024 21:27:59 GMT - Sun, 19 May 2024 21:27:58 GMT
File typeHTML document, ASCII text, with very long lines (15901), with no line terminators Hashd2fed963747281c010ab5791cec0c56d 29dbfb3add746950e1a7d84c8351c3ff9adffb2e a2b614eb76c544e78e01bb422fc1f4b97a3615232e79b42a53c1081f0b55ba15
GET /favicon.ico HTTP/1.1
Host: yourprivatetaly.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://yourprivatetaly.com/Mjyurkovich@millerthomson.com?__cf_chl_rt_tk=_lbn_gZxF9v3FRDpcj6JxH6_LNB.GF590d8d7hqK_DA-1713382811-0.0.1.1-1642
DNT: 1
Connection: keep-alive
Cookie: cf_chl_rc_m=2
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 403 Forbidden
date: Wed, 17 Apr 2024 19:40:11 GMT
content-type: text/html; charset=UTF-8
accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
cross-origin-embedder-policy: require-corp
cross-origin-opener-policy: same-origin
cross-origin-resource-policy: same-origin
origin-agent-cluster: ?1
permissions-policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()
referrer-policy: same-origin
x-frame-options: SAMEORIGIN
cf-mitigated: challenge
cf-chl-out: rW0ti2GtN9Xg881KKu9SLvqr7QDhZd5PAuNu1jxjkkzfwjz//L5Lc9gn8Dyi+lcBWPUQLkcaugDiPmSuahCBdFxu82kfukIXZ/CTUEyIEXB5D/mwDbOok929J9LteCeRctIqhbTmz04TsKJ8xE064w==$K+QXU5HnuA1uwh7jWaHPnw==
cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
expires: Thu, 01 Jan 1970 00:00:01 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=phQIofOoAD0MmJrEUc95OIDTdzFwOamsi7PcozGoqT%2FqQBc6eHuSWdVQvC%2B4EwqDhs3CS7kyibQtDe25znSsxrdWQkyZmVxslHDpmKzUZk2qoOEiPjz3xhsmafVnIM9UBSYn2r7D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 875ee2ab2e4056c6-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| challenges.cloudflare.com/turnstile/v0/g/54ea73d52131/api.js?onload=lmgW1&render=explicit | 104.17.3.184 | 200 OK | 42 kB |
URL GET HTTP/3challenges.cloudflare.com/turnstile/v0/g/54ea73d52131/api.js?onload=lmgW1&render=explicit IP104.17.3.184:443
Requested byhttps://yourprivatetaly.com/Mjyurkovich@millerthomson.com CertificateIssuerCloudflare, Inc. Subjectchallenges.cloudflare.com Fingerprint5F:E4:AA:8C:2E:24:D2:B1:69:9D:13:28:31:5C:65:FA:97:2A:E9:6E ValidityFri, 18 Aug 2023 00:00:00 GMT - Sat, 17 Aug 2024 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (42414) Hash374fec8b5e50cd6ab980f3fef21a5aa0 7f474607991a19b6f1b78cc32e0f75b501b60774 8af2da74872f03e058ab79a584176d2086afc01bbd42dd2ed14259179341be6a
GET /turnstile/v0/g/54ea73d52131/api.js?onload=lmgW1&render=explicit HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://yourprivatetaly.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 17 Apr 2024 19:40:11 GMT
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
cache-control: max-age=31536000
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding
server: cloudflare
cf-ray: 875ee2ab8f18569a-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/orchestrate/chl_api/v1?ray=875ee2ad4a05569a | 104.17.3.184 | 200 OK | 432 kB |
URL GET HTTP/3challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/orchestrate/chl_api/v1?ray=875ee2ad4a05569a IP104.17.3.184:443
Requested byhttps://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/nbnb1/0x4AAAAAAADnPIDROrmt1Wwj/light/normal CertificateIssuerCloudflare, Inc. Subjectchallenges.cloudflare.com Fingerprint5F:E4:AA:8C:2E:24:D2:B1:69:9D:13:28:31:5C:65:FA:97:2A:E9:6E ValidityFri, 18 Aug 2023 00:00:00 GMT - Sat, 17 Aug 2024 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (65536), with no line terminators Size432 kB (431734 bytes) Hash67ce9ffde2a31666629dd6fde4e28d54 7fea15a8e96c097c38b1fc8ca64132fd64f11bdd 4ea1ae56f4e30484fb504c6260933f24e6b166ded77df11ff7c71e331a1e8758
GET /cdn-cgi/challenge-platform/h/g/orchestrate/chl_api/v1?ray=875ee2ad4a05569a HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/nbnb1/0x4AAAAAAADnPIDROrmt1Wwj/light/normal
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 17 Apr 2024 19:40:11 GMT
content-type: application/javascript; charset=UTF-8
cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
server: cloudflare
cf-ray: 875ee2adbada569a-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/nbnb1/0x4AAAAAAADnPIDROrmt1Wwj/light/normal | 104.17.3.184 | 200 OK | 80 kB |
URL GET HTTP/3challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/nbnb1/0x4AAAAAAADnPIDROrmt1Wwj/light/normal IP104.17.3.184:443
Requested byhttps://yourprivatetaly.com/Mjyurkovich@millerthomson.com CertificateIssuerCloudflare, Inc. Subjectchallenges.cloudflare.com Fingerprint5F:E4:AA:8C:2E:24:D2:B1:69:9D:13:28:31:5C:65:FA:97:2A:E9:6E ValidityFri, 18 Aug 2023 00:00:00 GMT - Sat, 17 Aug 2024 23:59:59 GMT
File typeHTML document, ASCII text, with very long lines (41702) Hash6488f49bb1fdcc75f9668ac5a8561781 0efc74aa86c37b4faa7447923f83b0385b20443b d5e694a2b1f7f7f264c33b6899f13935c076ddf969235ce67bad4a076b936c3c
GET /cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/nbnb1/0x4AAAAAAADnPIDROrmt1Wwj/light/normal HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 17 Apr 2024 19:40:11 GMT
content-type: text/html; charset=UTF-8
accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
content-security-policy: frame-src https://challenges.cloudflare.com/ blob:; base-uri 'self'
critical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
cross-origin-embedder-policy: require-corp
cross-origin-opener-policy: same-origin
cross-origin-resource-policy: cross-origin
document-policy: js-profiling
origin-agent-cluster: ?1
permissions-policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()
referrer-policy: same-origin
server: cloudflare
cf-ray: 875ee2ad4a05569a-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/pat/875ee2ad4a05569a/1713382812084/88c5c511e910ede91b497d5ce7972cc5548b9a1b42aa516de1065a7ee11a5b05/VdUd2fbVCclQSuU | 104.17.3.184 | 401 Unauthorized | 1 B |
URL GET HTTP/3challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/pat/875ee2ad4a05569a/1713382812084/88c5c511e910ede91b497d5ce7972cc5548b9a1b42aa516de1065a7ee11a5b05/VdUd2fbVCclQSuU IP104.17.3.184:443
Requested byhttps://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/nbnb1/0x4AAAAAAADnPIDROrmt1Wwj/light/normal CertificateIssuerCloudflare, Inc. Subjectchallenges.cloudflare.com Fingerprint5F:E4:AA:8C:2E:24:D2:B1:69:9D:13:28:31:5C:65:FA:97:2A:E9:6E ValidityFri, 18 Aug 2023 00:00:00 GMT - Sat, 17 Aug 2024 23:59:59 GMT
File typevery short file (no magic) Hashff44570aca8241914870afbc310cdb85 58668e7669fd564d99db5d581fcdb6a5618440b5 6da43b944e494e885e69af021f93c6d9331c78aa228084711429160a5bbd15b5
GET /cdn-cgi/challenge-platform/h/g/pat/875ee2ad4a05569a/1713382812084/88c5c511e910ede91b497d5ce7972cc5548b9a1b42aa516de1065a7ee11a5b05/VdUd2fbVCclQSuU HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/nbnb1/0x4AAAAAAADnPIDROrmt1Wwj/light/normal
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 401 Unauthorized
date: Wed, 17 Apr 2024 19:40:13 GMT
content-type: text/plain; charset=UTF-8
www-authenticate: PrivateToken challenge="AAIAGXBhdC1pc3N1ZXIuY2xvdWRmbGFyZS5jb20giMXFEekQ7ekbSX1c55csxVSLmhtCqlFt4QZafuEaWwUAGWNoYWxsZW5nZXMuY2xvdWRmbGFyZS5jb20=", token-key="MIIBUjA9BgkqhkiG9w0BAQowMKANMAsGCWCGSAFlAwQCAqEaMBgGCSqGSIb3DQEBCDALBglghkgBZQMEAgKiAwIBMAOCAQ8AMIIBCgKCAQEArny_u1wyrVg8e-Kmwxyfb2WoiwwZ2VR7QAnot_CrcySq56Rui-jZM9090K9_dW6HmpAKhOjYXLCJ7g4U74G4z6SRM_YRj-GLp3EaBxay798DZIeAtv_N7Z9CHI_0VTYiqNXVm2z1bF5VtFasnv3JDaWb4yIjBd8vMfNUM4Y4nXXIeMIyXdVK2hlzVO8VxBkXca7UzhCq51WDKlSYPWUy9ieZTdwNf5Q49DwdF9woTnuKPY26TxVlEHMcf8JJiXLUR2bbdG-Qv1fqbwQloSjintj5uXWLsZd84bMpNedRNJBV22T0PgKNeip6oalvdYbaiHiyDATsKlA6-8KJ-CUQTQIDAQAB", max-age=20, PrivateToken challenge="AAIALHBwLWlzc3Vlci1wcm9kdWN0aW9uLnJlc2VhcmNoLmNsb3VkZmxhcmUuY29tIIjFxRHpEO3pG0l9XOeXLMVUi5obQqpRbeEGWn7hGlsFABljaGFsbGVuZ2VzLmNsb3VkZmxhcmUuY29t", token-key="MIIBUjA9BgkqhkiG9w0BAQowMKANMAsGCWCGSAFlAwQCAqEaMBgGCSqGSIb3DQEBCDALBglghkgBZQMEAgKiAwIBMAOCAQ8AMIIBCgKCAQEA1FEYykHcK8H9rb_u0aFz3CmWgYloQw4YhedoEOAjJ0vy2Axa4f9UG9Dzs4uXS34_h8l6MDo2nRCvLI9lvebilMnTjCn-6D77bewqYxJKUFZW1z2jBIdu03TrETczfEg7kxgKtJE9NXGDjYJcF_iMgzgNA0PEAVM89tUYXXlFy4cUAGlqU2mPpIEOxm5ARsXC-zlLK60fkJ4cOsZRkZa6EExdhmgdwQ0fEJuSOHrBO_-zJn4hUP8q9g4yqkxW2UrfJgD07F4HaHGBEiei06sGDvH2NEPvswEl5dTGxutNrxlU7W24iYhNa2nhjlc53nNb0mKtszv-czVE9UhXyJ7-RQIDAQAB", max-age=20
server: cloudflare
cf-ray: 875ee2b5c848569a-OSL
alt-svc: h3=":443"; ma=86400
|
|
| challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/flow/ov1/1011320276:1713381166:tfKVbX6JMPYirT7BIf_jl5QU8nP1GjTDpaHbWe1FW8s/875ee2ad4a05569a/2f55f5388df4f3a | 104.17.3.184 | 200 OK | 91 kB |
URL POST HTTP/3challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/flow/ov1/1011320276:1713381166:tfKVbX6JMPYirT7BIf_jl5QU8nP1GjTDpaHbWe1FW8s/875ee2ad4a05569a/2f55f5388df4f3a IP104.17.3.184:443
Requested byhttps://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/nbnb1/0x4AAAAAAADnPIDROrmt1Wwj/light/normal CertificateIssuerCloudflare, Inc. Subjectchallenges.cloudflare.com Fingerprint5F:E4:AA:8C:2E:24:D2:B1:69:9D:13:28:31:5C:65:FA:97:2A:E9:6E ValidityFri, 18 Aug 2023 00:00:00 GMT - Sat, 17 Aug 2024 23:59:59 GMT
File typeASCII text, with very long lines (65536), with no line terminators Hash9bead0cc8e1142c1912ffcc3a4d8f8e0 d4d0a6a237c39856c8adb1b5723c7e36190492ef ff3e058ec0995f0623e7320c2a3b1096b5f9971605566f78947e494ff88eda99
POST /cdn-cgi/challenge-platform/h/g/flow/ov1/1011320276:1713381166:tfKVbX6JMPYirT7BIf_jl5QU8nP1GjTDpaHbWe1FW8s/875ee2ad4a05569a/2f55f5388df4f3a HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/nbnb1/0x4AAAAAAADnPIDROrmt1Wwj/light/normal
Content-type: application/x-www-form-urlencoded
CF-Challenge: 2f55f5388df4f3a
Content-Length: 3422
Origin: https://challenges.cloudflare.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 17 Apr 2024 19:40:12 GMT
content-type: text/plain; charset=UTF-8
cf-chl-gen: PjwPOyRqycM/4+n/B3n7jryb909OpZZUPOHZPPoUDvxxqyg+LfzxnmPGD8h8waVMm8UAvIq308Lyn52ijd2Q0ahNVWW2ixPidhuqYeXemmMu1OXBfzB2gIYX4FdKc+yI36YjJ68+t1K8s+As6BThmukYMjoDuwLzOcHeSRts3478ViDdj8Hd0+BBHUTQbxBV65xr8TPN52PRyi7MAb1GEDJlqCGD9Uo2p/B4y/4kp8etqqk70ClKnSsr/iEtS8OV4D1FxEojC5/62WWJeo5yZHvhBT6mj8F0qqkw8/1jwFdb4brovHHWXbx17JoN8IKhoKaEvbMN7gZHBuy+JZqZxaEDb1qjW+Nn1L5l/W6OoPZ/9aSZKbBCXvfXu1v8lzqU$fMYH7DAOnH2Nu4uk/bh4Vg==
server: cloudflare
cf-ray: 875ee2af6db7569a-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|