r10.o.lencr.org/
23.36.77.32 504 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash c3d1bfb12515d2f23214f980f7a18b8c
24cc3d9048888cc7e1f4ff42b8fdc1c16c9feb46
35a446cea345dbdb2c297726a3d6cc5f1088f4f9a3f65904c3b9655056efda06
POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "35A446CEA345DBDB2C297726A3D6CC5F1088F4F9A3F65904C3B9655056EFDA06"
Last-Modified: Thu, 29 Aug 2024 09:19:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=16977
Expires: Fri, 30 Aug 2024 02:07:48 GMT
Date: Thu, 29 Aug 2024 21:24:51 GMT
Connection: keep-alive
r10.o.lencr.org/
23.36.77.32 504 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash d1b950f0bd232ad70f30bec1a18d94b3
c5cb139e5fc383bbfa53e29adb3f67f1133d97f7
dddf51c8f55bfa6412a026a2c39ba779b5c701370dbd7f2fc1aac0e08e706c72
POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "DDDF51C8F55BFA6412A026A2C39BA779B5C701370DBD7F2FC1AAC0E08E706C72"
Last-Modified: Wed, 28 Aug 2024 14:37:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2656
Expires: Thu, 29 Aug 2024 22:09:07 GMT
Date: Thu, 29 Aug 2024 21:24:51 GMT
Connection: keep-alive
r10.o.lencr.org/
23.36.77.32 504 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash fdbea8492a4c466e40797f5c241f80c0
5b54da6a3949155c0e32e21a9c438e255ad71720
965090df69898508429e57657077a1625c55dd348039f37cbb2451d9460886a0
POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "965090DF69898508429E57657077A1625C55DD348039F37CBB2451D9460886A0"
Last-Modified: Wed, 28 Aug 2024 14:38:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2797
Expires: Thu, 29 Aug 2024 22:11:28 GMT
Date: Thu, 29 Aug 2024 21:24:51 GMT
Connection: keep-alive
emp.eduyield.com/el?aid=2qvsdda0e6c-1865-11ef-80aa-0217a07992df&rid=33766156&pid=771868&cid=497&dest=google.com.////amp/s/avantefechaduras.com.br/qayo/sdamm/amVycnkuZnJpc2NoQHdhc2F0Y2hjb250YWluZXIuY29t&%E3%80%82
54.165.150.163 0 B URL emp.eduyield.com/el?aid=2qvsdda0e6c-1865-11ef-80aa-0217a07992df&rid=33766156&pid=771868&cid=497&dest=google.com.////amp/s/avantefechaduras.com.br/qayo/sdamm/amVycnkuZnJpc2NoQHdhc2F0Y2hjb250YWluZXIuY29t&%E3%80%82
IP 54.165.150.163:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /el?aid=2qvsdda0e6c-1865-11ef-80aa-0217a07992df&rid=33766156&pid=771868&cid=497&dest=google.com.////amp/s/avantefechaduras.com.br/qayo/sdamm/amVycnkuZnJpc2NoQHdhc2F0Y2hjb250YWluZXIuY29t&%E3%80%82 HTTP/1.1
Host: emp.eduyield.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 303 See Other
date: Thu, 29 Aug 2024 21:24:52 GMT
content-type: text/html; charset=UTF-8
content-length: 0
location: http://google.com.////amp/s/avantefechaduras.com.br/qayo/sdamm/amVycnkuZnJpc2NoQHdhc2F0Y2hjb250YWluZXIuY29t
server: nginx/1.27.1
X-Firefox-Spdy: h2
google.com.////amp/s/avantefechaduras.com.br/qayo/sdamm/amVycnkuZnJpc2NoQHdhc2F0Y2hjb250YWluZXIuY29t
216.58.207.206 300 B URL google.com.////amp/s/avantefechaduras.com.br/qayo/sdamm/amVycnkuZnJpc2NoQHdhc2F0Y2hjb250YWluZXIuY29t
IP 216.58.207.206:0
File type HTML document, ASCII text, with CRLF, LF line terminators
Hash 8ae8d608d53f10b189afe87f962c8559
2589643e72f87b7e777214280503c47f5027a088
28d9b16db99ead514099b1046a38eca1f146032d679c4748fa182c677d9bf27e
GET ////amp/s/avantefechaduras.com.br/qayo/sdamm/amVycnkuZnJpc2NoQHdhc2F0Y2hjb250YWluZXIuY29t HTTP/1.1
Host: google.com.
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 301 Moved Permanently
Cache-Control: private
Content-Type: text/html; charset=UTF-8
Referrer-Policy: no-referrer
Location: http://google.com/amp/s/avantefechaduras.com.br/qayo/sdamm/amVycnkuZnJpc2NoQHdhc2F0Y2hjb250YWluZXIuY29t
Content-Length: 300
Date: Thu, 29 Aug 2024 21:24:52 GMT
google.com/amp/s/avantefechaduras.com.br/qayo/sdamm/amVycnkuZnJpc2NoQHdhc2F0Y2hjb250YWluZXIuY29t
216.58.207.206 304 B URL google.com/amp/s/avantefechaduras.com.br/qayo/sdamm/amVycnkuZnJpc2NoQHdhc2F0Y2hjb250YWluZXIuY29t
IP 216.58.207.206:0
File type HTML document, ASCII text, with CRLF, LF line terminators
Hash cfe16b038067f1ef466f77056ad6d6bd
0d6acec25a4ee3a0a43e89b65e16bd754b369552
9b8f4f9438cb24a8526e94bf63850767f068cafe7b09eaf87df870897392d85a
GET /amp/s/avantefechaduras.com.br/qayo/sdamm/amVycnkuZnJpc2NoQHdhc2F0Y2hjb250YWluZXIuY29t HTTP/1.1
Host: google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Cookie: SOCS=CAESHAgBEhJnd3NfMjAyMjA5MjktMF9SQzEaAnJvIAEaBgiAkvOZBg
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 301 Moved Permanently
Location: http://www.google.com/amp/s/avantefechaduras.com.br/qayo/sdamm/amVycnkuZnJpc2NoQHdhc2F0Y2hjb250YWluZXIuY29t
Content-Type: text/html; charset=UTF-8
Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-BWkgrLs2PymJm3F9l5gB5w' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/fff
Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws"
Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/fff"}]}
Date: Thu, 29 Aug 2024 21:24:52 GMT
Expires: Sat, 28 Sep 2024 21:24:52 GMT
Cache-Control: public, max-age=2592000
Server: gws
Content-Length: 304
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google.com/amp/s/avantefechaduras.com.br/qayo/sdamm/amVycnkuZnJpc2NoQHdhc2F0Y2hjb250YWluZXIuY29t
142.250.74.132 305 B URL www.google.com/amp/s/avantefechaduras.com.br/qayo/sdamm/amVycnkuZnJpc2NoQHdhc2F0Y2hjb250YWluZXIuY29t
IP 142.250.74.132:0
File type HTML document, ASCII text, with CRLF, LF line terminators
Hash a6f06da7dd84e71f907c9910566d4205
0081c39ab67107e0a95c6f8c1fb62d8a5a40a8df
187c3350b2964781444990c4bb8a6944afb78f6f79f315f78256998dc26d2612
GET /amp/s/avantefechaduras.com.br/qayo/sdamm/amVycnkuZnJpc2NoQHdhc2F0Y2hjb250YWluZXIuY29t HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Cookie: SOCS=CAESHAgBEhJnd3NfMjAyMjA5MjktMF9SQzEaAnJvIAEaBgiAkvOZBg
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 301 Moved Permanently
Location: https://www.google.com/amp/s/avantefechaduras.com.br/qayo/sdamm/amVycnkuZnJpc2NoQHdhc2F0Y2hjb250YWluZXIuY29t
Content-Type: text/html; charset=UTF-8
Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-LCuexFtKRkbbyZFROGGyPA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/fff
Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws"
Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/fff"}]}
Date: Thu, 29 Aug 2024 21:24:52 GMT
Expires: Sat, 28 Sep 2024 21:24:52 GMT
Cache-Control: public, max-age=2592000
Server: gws
Content-Length: 305
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google.com/amp/s/avantefechaduras.com.br/qayo/sdamm/amVycnkuZnJpc2NoQHdhc2F0Y2hjb250YWluZXIuY29t
142.250.74.132 284 B URL www.google.com/amp/s/avantefechaduras.com.br/qayo/sdamm/amVycnkuZnJpc2NoQHdhc2F0Y2hjb250YWluZXIuY29t
IP 142.250.74.132:0
File type HTML document, ASCII text, with CRLF, LF line terminators
Hash f9ffe340590e9c8f534270e394ca3207
3eb1da644f922dce3b7e8534e7d7e3c119828965
68f6372af0c655025a26153f3eed461944dbeb978c22f6f526cccd8cd9b0d5d7
GET /amp/s/avantefechaduras.com.br/qayo/sdamm/amVycnkuZnJpc2NoQHdhc2F0Y2hjb250YWluZXIuY29t HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: SOCS=CAESHAgBEhJnd3NfMjAyMjA5MjktMF9SQzEaAnJvIAEaBgiAkvOZBg
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
location: https://avantefechaduras.com.br/qayo/sdamm/amVycnkuZnJpc2NoQHdhc2F0Y2hjb250YWluZXIuY29t
cache-control: private
x-robots-tag: noindex
content-type: text/html; charset=UTF-8
content-security-policy: object-src 'none';base-uri 'self';script-src 'nonce-uk_sij8lwVsO_gOpQEk-kA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/fff
cross-origin-opener-policy: same-origin-allow-popups; report-to="gws"
report-to: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/fff"}]}
p3p: CP="This is not a P3P policy! See g.co/p3phelp for more info."
date: Thu, 29 Aug 2024 21:24:52 GMT
server: gws
content-length: 284
x-xss-protection: 0
x-frame-options: SAMEORIGIN
set-cookie: __Secure-ENID=21.SE=vXSA1QVuU9kqL3nEl10TLWbNZtvc7Hx0eaErkRONlZy04cyCLDAM-ynPKTLUM6LjffY8w5I8sqfKJ2kg42NnhiNcZNjeLHbVyWVVat3c1DxjmTlJFPtCh46ox_fiNDtQ1ZWVSE1aKTKtyvkLfFZ69FZraeM2BlTgNPWcQet30Xq4PfXEUtzc58CKBTbSIitQK4ZMeEzMlw1y66CQ6WoCQNk8jFNjxw; expires=Mon, 29-Sep-2025 13:43:10 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=lax
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
avantefechaduras.com.br/qayo/sdamm/amVycnkuZnJpc2NoQHdhc2F0Y2hjb250YWluZXIuY29t
191.252.144.224 0 B URL avantefechaduras.com.br/qayo/sdamm/amVycnkuZnJpc2NoQHdhc2F0Y2hjb250YWluZXIuY29t
IP 191.252.144.224:0
ASN #27715 Locaweb Servicos de Internet SA
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /qayo/sdamm/amVycnkuZnJpc2NoQHdhc2F0Y2hjb250YWluZXIuY29t HTTP/1.1
Host: avantefechaduras.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 29 Aug 2024 21:24:53 GMT
Server: Apache
refresh: 0;url=https://vvK.rchisweh.com/rPWG6/#Mjerry.frisch@wasatchcontainer.com
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
r11.o.lencr.org/
23.36.76.226 504 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash bb5e9405671b53b4e83ea35107d596c2
0137160e22736d3b47d6d0a8e4c0c6745547e822
2acdad34338bf8b93c35557e9d821022e6a9c770a6dea0b4f08e83281be315e0
POST / HTTP/1.1
Host: r11.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "2ACDAD34338BF8B93C35557E9D821022E6A9C770A6DEA0B4F08E83281BE315E0"
Last-Modified: Wed, 28 Aug 2024 14:38:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3354
Expires: Thu, 29 Aug 2024 22:20:47 GMT
Date: Thu, 29 Aug 2024 21:24:53 GMT
Connection: keep-alive
r11.o.lencr.org/
23.36.76.226 504 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash bb5e9405671b53b4e83ea35107d596c2
0137160e22736d3b47d6d0a8e4c0c6745547e822
2acdad34338bf8b93c35557e9d821022e6a9c770a6dea0b4f08e83281be315e0
POST / HTTP/1.1
Host: r11.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "2ACDAD34338BF8B93C35557E9D821022E6A9C770A6DEA0B4F08E83281BE315E0"
Last-Modified: Wed, 28 Aug 2024 14:38:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3354
Expires: Thu, 29 Aug 2024 22:20:47 GMT
Date: Thu, 29 Aug 2024 21:24:53 GMT
Connection: keep-alive
r11.o.lencr.org/
23.36.76.226 504 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash bb5e9405671b53b4e83ea35107d596c2
0137160e22736d3b47d6d0a8e4c0c6745547e822
2acdad34338bf8b93c35557e9d821022e6a9c770a6dea0b4f08e83281be315e0
POST / HTTP/1.1
Host: r11.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "2ACDAD34338BF8B93C35557E9D821022E6A9C770A6DEA0B4F08E83281BE315E0"
Last-Modified: Wed, 28 Aug 2024 14:38:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3354
Expires: Thu, 29 Aug 2024 22:20:47 GMT
Date: Thu, 29 Aug 2024 21:24:53 GMT
Connection: keep-alive
r11.o.lencr.org/
23.36.76.226 504 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash bb5e9405671b53b4e83ea35107d596c2
0137160e22736d3b47d6d0a8e4c0c6745547e822
2acdad34338bf8b93c35557e9d821022e6a9c770a6dea0b4f08e83281be315e0
POST / HTTP/1.1
Host: r11.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "2ACDAD34338BF8B93C35557E9D821022E6A9C770A6DEA0B4F08E83281BE315E0"
Last-Modified: Wed, 28 Aug 2024 14:38:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3354
Expires: Thu, 29 Aug 2024 22:20:47 GMT
Date: Thu, 29 Aug 2024 21:24:53 GMT
Connection: keep-alive
r11.o.lencr.org/
23.36.76.226 504 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash bb5e9405671b53b4e83ea35107d596c2
0137160e22736d3b47d6d0a8e4c0c6745547e822
2acdad34338bf8b93c35557e9d821022e6a9c770a6dea0b4f08e83281be315e0
POST / HTTP/1.1
Host: r11.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "2ACDAD34338BF8B93C35557E9D821022E6A9C770A6DEA0B4F08E83281BE315E0"
Last-Modified: Wed, 28 Aug 2024 14:38:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3354
Expires: Thu, 29 Aug 2024 22:20:47 GMT
Date: Thu, 29 Aug 2024 21:24:53 GMT
Connection: keep-alive
GET vvk.rchisweh.com/favicon.ico
172.67.138.98404 Not Found 3 B URL GET HTTP/3 vvk.rchisweh.com/favicon.ico
IP 172.67.138.98:443
Requested by https://vvk.rchisweh.com/rPWG6/#Mjerry.frisch@wasatchcontainer.com
Certificate IssuerGoogle Trust Services
Subjectrchisweh.com
FingerprintB6:79:E4:F3:CC:1E:97:E5:D5:40:5B:8D:97:25:28:F7:B1:3C:73:57
ValidityTue, 30 Jul 2024 18:58:33 GMT - Mon, 28 Oct 2024 18:58:32 GMT
Hash 344cb90c9cea24e3fd7d53c37a700afd
4460d93d41e542dbffba74b05bcfaf5bf88327d0
fa8b3050c745eb53dd2bea7ba537764269e8aca03015419f4a4327544640773a
GET /favicon.ico HTTP/1.1
Host: vvk.rchisweh.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://vvk.rchisweh.com/rPWG6/
Cookie: XSRF-TOKEN=eyJpdiI6IkdHMkt3ZWZRODlnUFlNT2ZVaDMwd1E9PSIsInZhbHVlIjoiOUhSZkJUQTBBNTlVN3VUcmp1cjFmdjhFRVB3UlVmMWZFVTNOQ2N3VE04WGRNQUNySENKSzNZU2xnbTV5dkdab05LbXlMcW9ZT2MycGQ1RVVoMlFOT2lVbmZXS25HTFp2OGU2N0ZJRWExVGRjK0hpcHphNmROWXlwNG93aEdaOFEiLCJtYWMiOiJjYTZmYmRkNzcyZTNiYTE2Y2VjZTQzY2NjMGIxMzc5ODRiYmRkNTUyMmE3YWZlYmJhNDE5ZjE5YWMwNTg5YzkyIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImdFU0J5bGJEdFh1R1d3VmdOMGRadUE9PSIsInZhbHVlIjoiVFFzQ2tVdzhCd2dCbkR5ckxDN3hVdmIxV3F4OEZpZkkxakQ4cWlMbTlWUXl3MThPdXl2NFFaWVJscTFPQ3pLRWJXSWRHREs3bFU3SDNQaHRoaWRUeEVRVEdiRHVRTDdVQ29SUFRuMU1peTBUZGRPSFRqZWZRcEdtMU5tR2Z2dFEiLCJtYWMiOiJiM2JjYzhhMDlmOGI2NWIxN2M2NDg5NjcyYzM0YTI4Y2U3NzgyMDU0MzNlZDIwMjU3ODliNmY1N2JmMWIxM2JmIiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 404 Not Found
date: Thu, 29 Aug 2024 21:24:54 GMT
content-type: text/html; charset=UTF-8
cache-control: max-age=14400
age: 6168
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ln2Z6nyTbJzICmYjvWc7s%2B4cjFYlak9BAjRN5DyxZKSlDjC6434wK1V%2BgjN2KfyWQDUHBgy6RsGUns1Oy1V9qNbazSiSlA5k8UxUbqgDjlC4z%2BlhSMdgd2VfIQa0qg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
cf-cache-status: HIT
server: cloudflare
cf-ray: 8baf9c505dfdb503-OSL
content-encoding: br
GET cdnjs.cloudflare.com/ajax/libs/crypto-js/4.1.1/crypto-js.min.js
104.17.24.14200 OK 14 kB URL GET HTTP/2 cdnjs.cloudflare.com/ajax/libs/crypto-js/4.1.1/crypto-js.min.js
IP 104.17.24.14:443
Requested by https://vvk.rchisweh.com/rPWG6/#Mjerry.frisch@wasatchcontainer.com
Certificate IssuerGoogle Trust Services
Subjectcdnjs.cloudflare.com
Fingerprint00:EC:C6:E9:D9:C1:6D:05:88:6E:33:AF:3B:E7:7B:86:81:20:66:CA
ValidityWed, 31 Jul 2024 04:16:10 GMT - Tue, 29 Oct 2024 04:16:09 GMT
File type JavaScript source, ASCII text, with very long lines (48316), with no line terminators
Hash 2ca03ad87885ab983541092b87adb299
1a17f60bf776a8c468a185c1e8e985c41a50dc27
8e3b0117f4df4be452c0b6af5b8f0a0acf9d4ade23d08d55d7e312af22077762
GET /ajax/libs/crypto-js/4.1.1/crypto-js.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://vvk.rchisweh.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 29 Aug 2024 21:24:54 GMT
content-type: application/javascript; charset=utf-8
content-length: 13972
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "61182885-3694"
last-modified: Sat, 14 Aug 2021 20:33:09 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 174821
expires: Tue, 19 Aug 2025 21:24:54 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=vIrLUNtLd1VKL%2Bx%2FWwzQpUstJXSGKdKnSyKVI%2BBEjWgbREIWzAwXjBkggV7cq%2F%2BDRQbmbIQaGWfafIOT8SrGwDybaD8KA460vX6Ov1nxhZQhSNZtrBWQKiO5aJalpIz8qBVAtEA0"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 8baf9c52cd40569b-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET code.jquery.com/jquery-3.6.0.min.js
151.101.2.137200 OK 31 kB URL GET HTTP/2 code.jquery.com/jquery-3.6.0.min.js
IP 151.101.2.137:443
Requested by https://vvk.rchisweh.com/rPWG6/#Mjerry.frisch@wasatchcontainer.com
Certificate IssuerSectigo Limited
Subject*.jquery.com
FingerprintCD:B5:6E:05:85:0C:5A:AE:47:12:80:2A:5B:C6:E5:8F:11:72:E2:B5
ValidityTue, 25 Jun 2024 00:00:00 GMT - Wed, 25 Jun 2025 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (65447)
Hash 8fb8fee4fcc3cc86ff6c724154c49c42
b82d238d4e31fdf618bae8ac11a6c812c03dd0d4
ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e
GET /jquery-3.6.0.min.js HTTP/1.1
Host: code.jquery.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://vvk.rchisweh.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Fri, 18 Oct 1991 12:00:00 GMT
etag: W/"28feccc0-15d9d"
cache-control: public, max-age=31536000, stale-while-revalidate=604800
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Thu, 29 Aug 2024 21:24:54 GMT
age: 1158800
x-served-by: cache-lga21931-LGA, cache-hel1410033-HEL
x-cache: HIT, HIT
x-cache-hits: 71, 193860
x-timer: S1724966695.915052,VS0,VE0
vary: Accept-Encoding
content-length: 30875
X-Firefox-Spdy: h2
GET challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/p8xiw/0x4AAAAAAAb-QAAMxFqUmwGJ/auto/fbE/normal/auto/
104.18.95.41200 OK 18 kB URL GET HTTP/3 challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/p8xiw/0x4AAAAAAAb-QAAMxFqUmwGJ/auto/fbE/normal/auto/
IP 104.18.95.41:443
Requested by https://vvk.rchisweh.com/rPWG6/#Mjerry.frisch@wasatchcontainer.com
Certificate IssuerLet's Encrypt
Subjectchallenges.cloudflare.com
Fingerprint60:6F:95:61:4B:01:7C:54:90:97:F0:8F:DD:FC:3F:FE:75:73:79:EC
ValidityWed, 17 Jul 2024 23:15:32 GMT - Tue, 15 Oct 2024 23:15:31 GMT
File type HTML document, ASCII text, with very long lines (37837)
Hash b132fd3864a0ef1ce89f54bca61f372c
a4d273464a9024075842afaf6f5800fbc8bd7e6c
07709ed27e868fa33945d7db6e7088a370f32e4f25e8f80320cd35602da7df87
GET /cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/p8xiw/0x4AAAAAAAb-QAAMxFqUmwGJ/auto/fbE/normal/auto/ HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://vvk.rchisweh.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 29 Aug 2024 21:24:55 GMT
content-type: text/html; charset=UTF-8
permissions-policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()
cross-origin-embedder-policy: require-corp
origin-agent-cluster: ?1
referrer-policy: same-origin
document-policy: js-profiling
accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
content-security-policy: frame-src https://challenges.cloudflare.com/; base-uri 'self'
cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
cross-origin-resource-policy: cross-origin
critical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
cross-origin-opener-policy: same-origin
server: cloudflare
cf-ray: 8baf9c542cba56b1-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
POST challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/flow/ov1/1956911475:1724963559:NLMMH7t-75urtTjNeiYLtgji4quVo_bx4LFVKeK26t4/8baf9c542cba56b1/8243777634cf3ac
104.18.95.41200 OK 105 kB URL POST HTTP/3 challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/flow/ov1/1956911475:1724963559:NLMMH7t-75urtTjNeiYLtgji4quVo_bx4LFVKeK26t4/8baf9c542cba56b1/8243777634cf3ac
IP 104.18.95.41:443
Requested by https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/p8xiw/0x4AAAAAAAb-QAAMxFqUmwGJ/auto/fbE/normal/auto/
Certificate IssuerLet's Encrypt
Subjectchallenges.cloudflare.com
Fingerprint60:6F:95:61:4B:01:7C:54:90:97:F0:8F:DD:FC:3F:FE:75:73:79:EC
ValidityWed, 17 Jul 2024 23:15:32 GMT - Tue, 15 Oct 2024 23:15:31 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Size 105 kB (105167 bytes)
Hash 58d46cbd58a6e0c356d0b4cba302d692
0ffc62951b709763b49a7ba0a8581c6623a5e9f8
f880641e4b7e812f03e8e2b6566dc1bbad7d1d55b8b016e0644d9cf66d108581
POST /cdn-cgi/challenge-platform/h/b/flow/ov1/1956911475:1724963559:NLMMH7t-75urtTjNeiYLtgji4quVo_bx4LFVKeK26t4/8baf9c542cba56b1/8243777634cf3ac HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/p8xiw/0x4AAAAAAAb-QAAMxFqUmwGJ/auto/fbE/normal/auto/
Content-type: application/x-www-form-urlencoded
CF-Challenge: 8243777634cf3ac
Content-Length: 2520
Origin: https://challenges.cloudflare.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 29 Aug 2024 21:24:56 GMT
content-type: text/plain; charset=UTF-8
cf-chl-gen: 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$QMT2OrmZR7d3yl6k
server: cloudflare
cf-ray: 8baf9c5a9fd156b1-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
GET challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/pat/8baf9c542cba56b1/1724966696115/808691c225a11cd2f2a0962d5545d83273bb900628c7d2c88708c37710d5fe93/tF_BpNm5CX6kAxy
104.18.95.41401 Unauthorized 1 B URL GET HTTP/3 challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/pat/8baf9c542cba56b1/1724966696115/808691c225a11cd2f2a0962d5545d83273bb900628c7d2c88708c37710d5fe93/tF_BpNm5CX6kAxy
IP 104.18.95.41:443
Requested by https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/p8xiw/0x4AAAAAAAb-QAAMxFqUmwGJ/auto/fbE/normal/auto/
Certificate IssuerLet's Encrypt
Subjectchallenges.cloudflare.com
Fingerprint60:6F:95:61:4B:01:7C:54:90:97:F0:8F:DD:FC:3F:FE:75:73:79:EC
ValidityWed, 17 Jul 2024 23:15:32 GMT - Tue, 15 Oct 2024 23:15:31 GMT
File type very short file (no magic)
Hash ff44570aca8241914870afbc310cdb85
58668e7669fd564d99db5d581fcdb6a5618440b5
6da43b944e494e885e69af021f93c6d9331c78aa228084711429160a5bbd15b5
GET /cdn-cgi/challenge-platform/h/b/pat/8baf9c542cba56b1/1724966696115/808691c225a11cd2f2a0962d5545d83273bb900628c7d2c88708c37710d5fe93/tF_BpNm5CX6kAxy HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/p8xiw/0x4AAAAAAAb-QAAMxFqUmwGJ/auto/fbE/normal/auto/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 401 Unauthorized
date: Thu, 29 Aug 2024 21:24:57 GMT
content-type: text/plain; charset=UTF-8
content-length: 1
www-authenticate: PrivateToken challenge="AAIAGXBhdC1pc3N1ZXIuY2xvdWRmbGFyZS5jb20ggIaRwiWhHNLyoJYtVUXYMnO7kAYox9LIhwjDdxDV_pMAGWNoYWxsZW5nZXMuY2xvdWRmbGFyZS5jb20=", token-key="MIIBUjA9BgkqhkiG9w0BAQowMKANMAsGCWCGSAFlAwQCAqEaMBgGCSqGSIb3DQEBCDALBglghkgBZQMEAgKiAwIBMAOCAQ8AMIIBCgKCAQEAwq4lQVQRz1pPGW2zriDpu_qevEzlPHgkAihcSA59zJcJb2A8xotGwENAoW573yMpgn4HDqmJlMqAUFiTjjmOjleZUflHiy8x5UxWmKFbNHD6_X7j4ACGL6VNygYSBx97sLG9U-UzgtfOKthxykQ2gjFdTiN605EZIa27U-l_x_RtcqLvOFELv3chScCgQq7spn--uOQ_up7ECVkZHNHIMn4GKiNNcY_TActQB5M-OlAIlL02vFx5bZ92hieqS2VEjQtawWHNV3mhHA30oVcs6wlwm6MI515aptLqjOLSgm4KmSRTrTz4dyUPqe3IxftsvsvqCGZ-N2XGSvK2wBoH4wIDAQAB", max-age=20, PrivateToken challenge="AAIAHXNhdC5wYXQtaXNzdWVyLmNsb3VkZmxhcmUuY29tIICGkcIloRzS8qCWLVVF2DJzu5AGKMfSyIcIw3cQ1f6TABljaGFsbGVuZ2VzLmNsb3VkZmxhcmUuY29t", token-key="MIIBUjA9BgkqhkiG9w0BAQowMKANMAsGCWCGSAFlAwQCAqEaMBgGCSqGSIb3DQEBCDALBglghkgBZQMEAgKiAwIBMAOCAQ8AMIIBCgKCAQEAu2FlB5ktDoeROxA-CL3BCDo3MeeTuCmxb24sUOtLSedclIaHLU1EAC4D5nGqr-aczjp9M9qFQYJBi6e07hOPSMkAX__GsSGSwArapiA8zNHer8YXwzMZmO0fvD-C6G93rpdMQCFAFQNOl0LwZWgntZa3JqfFO7HQWCO6qmOSju2VD4xvdLtNsn248ypVfQG_EyYKqi0MdbWu-eGJvAAYS-LrZKn2uSrKCltLs8hk2TTJ5btxvC7zFmcn0c7zCEZMham2aMVPUo5rI08ZQhGBYzKjc1VS7PIbmPz0nsaal3-Saa-3afBQyM-8Bwq1FuIGA9MG2lS1ZZ5iDL8LZB9SmwIDAQAB", max-age=20, PrivateToken challenge="AAIALHBwLWlzc3Vlci1wcm9kdWN0aW9uLnJlc2VhcmNoLmNsb3VkZmxhcmUuY29tIICGkcIloRzS8qCWLVVF2DJzu5AGKMfSyIcIw3cQ1f6TABljaGFsbGVuZ2VzLmNsb3VkZmxhcmUuY29t", token-key="MIIBUjA9BgkqhkiG9w0BAQowMKANMAsGCWCGSAFlAwQCAqEaMBgGCSqGSIb3DQEBCDALBglghkgBZQMEAgKiAwIBMAOCAQ8AMIIBCgKCAQEAj3aKE3IQZKxrwhP2RNsMWYqLXI8QXFhRupd9uNWzU8gu_JF_dI6YsaHdYHHn80foDV62bwNGz5IYcRfev1qam5Z0OC_DbCZjjJ8mWSQDNsnDtdZqHM82YF6j8Vl6UW7_03LWsPENx7ugdyqyJKLR0DI0bbP23ly1VI-JJf6jCBmbrLIsLDEWqrEE7aNIVakpmpp9B17hOUH-kgEed2jw-KTqhyvwnQJTkFUJ8rNyJ9J1ryyoqeKce9Ybl7LLaanLNZJf3yHtbguBuZJuljPOArUjuZ8psUEcVhm1hsseZ2BzlgECW7X80svcm9_sMZxFM6R0-gU1wXyrd9kMUUnXhwIDAQAB", max-age=20
server: cloudflare
cf-ray: 8baf9c624e3e56b1-OSL
alt-svc: h3=":443"; ma=86400
GET challenges.cloudflare.com/turnstile/v0/api.js?render=explicit
104.18.95.41302 Found 45 kB URL GET HTTP/2 challenges.cloudflare.com/turnstile/v0/api.js?render=explicit
IP 104.18.95.41:443
Requested by https://vvk.rchisweh.com/rPWG6/#Mjerry.frisch@wasatchcontainer.com
Certificate IssuerLet's Encrypt
Subjectchallenges.cloudflare.com
Fingerprint60:6F:95:61:4B:01:7C:54:90:97:F0:8F:DD:FC:3F:FE:75:73:79:EC
ValidityWed, 17 Jul 2024 23:15:32 GMT - Tue, 15 Oct 2024 23:15:31 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /turnstile/v0/api.js?render=explicit HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://vvk.rchisweh.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
date: Thu, 29 Aug 2024 21:24:54 GMT
content-length: 0
access-control-allow-origin: *
cache-control: max-age=300, stale-if-error=10800, stale-while-revalidate=300, public
cross-origin-resource-policy: cross-origin
location: /turnstile/v0/b/6790c32b9fc9/api.js
vary: Accept-Encoding
server: cloudflare
cf-ray: 8baf9c52cc67712a-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET vvk.rchisweh.com/rPWG6/
172.67.138.98200 OK 6.2 kB URL User Request GET HTTP/2 IP 172.67.138.98:443
Certificate IssuerGoogle Trust Services
Subjectrchisweh.com
FingerprintB6:79:E4:F3:CC:1E:97:E5:D5:40:5B:8D:97:25:28:F7:B1:3C:73:57
ValidityTue, 30 Jul 2024 18:58:33 GMT - Mon, 28 Oct 2024 18:58:32 GMT
File type HTML document, ASCII text, with very long lines (6251), with no line terminators
Hash 354d3b1512c33608cd8162e9a21912c3
9d08a8180229d9a5526a7ab7a6e9c48c3ea5b880
782ce1ffaf85fc18ca80cf5d04c4d0678b25ae23c80286f568d31dbf12050fce
GET /rPWG6/ HTTP/1.1
Host: vvk.rchisweh.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 29 Aug 2024 21:24:54 GMT
content-type: text/html; charset=UTF-8
cache-control: no-cache, private
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=lOSqy59k6DYupfyNUKKdgj0aO7k7JfnDd0oo9qzlSQKF33S9qMK0OmsRWQPGi%2BlgXdBwvPSbVqnaXZiuokUU1AnY9TJ6xJQ5vUnnFNVdtIyqYiN1yMFxc5w9Ejs%2Fhg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
set-cookie: XSRF-TOKEN=eyJpdiI6IkdHMkt3ZWZRODlnUFlNT2ZVaDMwd1E9PSIsInZhbHVlIjoiOUhSZkJUQTBBNTlVN3VUcmp1cjFmdjhFRVB3UlVmMWZFVTNOQ2N3VE04WGRNQUNySENKSzNZU2xnbTV5dkdab05LbXlMcW9ZT2MycGQ1RVVoMlFOT2lVbmZXS25HTFp2OGU2N0ZJRWExVGRjK0hpcHphNmROWXlwNG93aEdaOFEiLCJtYWMiOiJjYTZmYmRkNzcyZTNiYTE2Y2VjZTQzY2NjMGIxMzc5ODRiYmRkNTUyMmE3YWZlYmJhNDE5ZjE5YWMwNTg5YzkyIiwidGFnIjoiIn0%3D; expires=Thu, 29-Aug-2024 23:24:54 GMT; Max-Age=7200; path=/; secure; samesite=none
laravel_session=eyJpdiI6ImdFU0J5bGJEdFh1R1d3VmdOMGRadUE9PSIsInZhbHVlIjoiVFFzQ2tVdzhCd2dCbkR5ckxDN3hVdmIxV3F4OEZpZkkxakQ4cWlMbTlWUXl3MThPdXl2NFFaWVJscTFPQ3pLRWJXSWRHREs3bFU3SDNQaHRoaWRUeEVRVEdiRHVRTDdVQ29SUFRuMU1peTBUZGRPSFRqZWZRcEdtMU5tR2Z2dFEiLCJtYWMiOiJiM2JjYzhhMDlmOGI2NWIxN2M2NDg5NjcyYzM0YTI4Y2U3NzgyMDU0MzNlZDIwMjU3ODliNmY1N2JmMWIxM2JmIiwidGFnIjoiIn0%3D; expires=Thu, 29-Aug-2024 23:24:54 GMT; Max-Age=7200; path=/; secure; httponly; samesite=none
server: cloudflare
cf-ray: 8baf9c4b4d4f0b51-OSL
content-encoding: br
X-Firefox-Spdy: h2
GET challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/cmg/1/GLhOioXg0bs57t4qPrORXFsL1%2BWig2mIKbgpVPMu7ZQ%3D
104.18.95.41200 OK 61 B URL GET HTTP/3 challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/cmg/1/GLhOioXg0bs57t4qPrORXFsL1%2BWig2mIKbgpVPMu7ZQ%3D
IP 104.18.95.41:443
Requested by https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/p8xiw/0x4AAAAAAAb-QAAMxFqUmwGJ/auto/fbE/normal/auto/
Certificate IssuerLet's Encrypt
Subjectchallenges.cloudflare.com
Fingerprint60:6F:95:61:4B:01:7C:54:90:97:F0:8F:DD:FC:3F:FE:75:73:79:EC
ValidityWed, 17 Jul 2024 23:15:32 GMT - Tue, 15 Oct 2024 23:15:31 GMT
File type PNG image data, 2 x 2, 8-bit/color RGB, non-interlaced
Hash 9246cca8fc3c00f50035f28e9f6b7f7d
3aa538440f70873b574f40cd793060f53ec17a5d
c07d7d29e3c20fa6ca4c5d20663688d52bad13e129ad82ce06b80eb187d9dc84
GET /cdn-cgi/challenge-platform/h/b/cmg/1/GLhOioXg0bs57t4qPrORXFsL1%2BWig2mIKbgpVPMu7ZQ%3D HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/p8xiw/0x4AAAAAAAb-QAAMxFqUmwGJ/auto/fbE/normal/auto/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 29 Aug 2024 21:24:55 GMT
content-type: image/png
content-length: 61
cache-control: max-age=2629800, public
server: cloudflare
cf-ray: 8baf9c549d6756b1-OSL
alt-svc: h3=":443"; ma=86400
GET challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=8baf9c542cba56b1&lang=auto
104.18.95.41200 OK 122 kB URL GET HTTP/3 challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=8baf9c542cba56b1&lang=auto
IP 104.18.95.41:443
Requested by https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/p8xiw/0x4AAAAAAAb-QAAMxFqUmwGJ/auto/fbE/normal/auto/
Certificate IssuerLet's Encrypt
Subjectchallenges.cloudflare.com
Fingerprint60:6F:95:61:4B:01:7C:54:90:97:F0:8F:DD:FC:3F:FE:75:73:79:EC
ValidityWed, 17 Jul 2024 23:15:32 GMT - Tue, 15 Oct 2024 23:15:31 GMT
File type JavaScript source, ASCII text, with very long lines (65536), with no line terminators
Size 122 kB (121775 bytes)
Hash 1f21539e35529a26caa8ce74cb9a5d12
a258e876415521ab256f33dfcba945ed40fa822f
7656502bb72b15ee5e24442c52449393a3b235daced72ea20befeef05c6744e1
GET /cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=8baf9c542cba56b1&lang=auto HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/p8xiw/0x4AAAAAAAb-QAAMxFqUmwGJ/auto/fbE/normal/auto/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 29 Aug 2024 21:24:55 GMT
content-type: application/javascript; charset=UTF-8
cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
server: cloudflare
cf-ray: 8baf9c549d7256b1-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
GET 6b77.dultzman.ru/gvTnMHHHvIFlgJRUAUFMJMaQVOXMSOYAZLOSHKTNSNVFQXPXISPDPSRN
104.21.27.189200 OK 1 B URL GET HTTP/2 6b77.dultzman.ru/gvTnMHHHvIFlgJRUAUFMJMaQVOXMSOYAZLOSHKTNSNVFQXPXISPDPSRN
IP 104.21.27.189:443
Requested by https://vvk.rchisweh.com/rPWG6/#Mjerry.frisch@wasatchcontainer.com
Certificate IssuerGoogle Trust Services
Subjectdultzman.ru
Fingerprint07:7C:AA:6F:A8:13:35:94:DF:C3:98:07:BE:77:EF:B3:C4:13:0C:D1
ValidityThu, 29 Aug 2024 02:38:18 GMT - Wed, 27 Nov 2024 02:38:17 GMT
File type very short file (no magic)
Hash cfcd208495d565ef66e7dff9f98764da
b6589fc6ab0dc82cf12099d1c2d40ab994e8410c
5feceb66ffc86f38d952786c6d696c79c2dbc239dd4e91b46729d73a27fb57e9
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /gvTnMHHHvIFlgJRUAUFMJMaQVOXMSOYAZLOSHKTNSNVFQXPXISPDPSRN HTTP/1.1
Host: 6b77.dultzman.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://vvk.rchisweh.com/
Origin: https://vvk.rchisweh.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 29 Aug 2024 21:24:54 GMT
content-type: text/html; charset=UTF-8
access-control-allow-origin: *
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=eSF68yZP01V%2FuP%2FzoSMXCLhI38i8AVSb58PiBkkKHIkUZ7jE11Oz%2Bmif6aDTmP%2FyxTw7Pk8RSCvXhPix6YvWEEFlGhOkLzCVNrwL7Ikb2nalNjotXtUOBBPc1tk8Q550fFcz"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8baf9c4fe85e569b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET challenges.cloudflare.com/turnstile/v0/b/6790c32b9fc9/api.js
104.18.95.41200 OK 45 kB URL GET HTTP/3 challenges.cloudflare.com/turnstile/v0/b/6790c32b9fc9/api.js
IP 104.18.95.41:443
Requested by https://vvk.rchisweh.com/rPWG6/#Mjerry.frisch@wasatchcontainer.com
Certificate IssuerLet's Encrypt
Subjectchallenges.cloudflare.com
Fingerprint60:6F:95:61:4B:01:7C:54:90:97:F0:8F:DD:FC:3F:FE:75:73:79:EC
ValidityWed, 17 Jul 2024 23:15:32 GMT - Tue, 15 Oct 2024 23:15:31 GMT
File type JavaScript source, ASCII text, with very long lines (45034)
Hash c4d5335b2b69c6998ee34f5f7b3e246f
af0ae01eccee153877976d5c7d6500aa9c380b60
7eda47b0c02c44bdaa43a5b14857f1257ddbd620b0397c32aa3ae8baf769ab55
GET /turnstile/v0/b/6790c32b9fc9/api.js HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://vvk.rchisweh.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 29 Aug 2024 21:24:54 GMT
content-type: application/javascript; charset=UTF-8
last-modified: Thu, 15 Aug 2024 16:28:23 GMT
cache-control: max-age=31536000, stale-if-error=10800, stale-while-revalidate=31536000, public
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding
server: cloudflare
cf-ray: 8baf9c532b5056b1-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
GET challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/i/8baf9c542cba56b1/1724966696113/WOdj77n6ddvyC_W
104.18.95.41200 OK 61 B URL GET HTTP/3 challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/i/8baf9c542cba56b1/1724966696113/WOdj77n6ddvyC_W
IP 104.18.95.41:443
Requested by https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/p8xiw/0x4AAAAAAAb-QAAMxFqUmwGJ/auto/fbE/normal/auto/
Certificate IssuerLet's Encrypt
Subjectchallenges.cloudflare.com
Fingerprint60:6F:95:61:4B:01:7C:54:90:97:F0:8F:DD:FC:3F:FE:75:73:79:EC
ValidityWed, 17 Jul 2024 23:15:32 GMT - Tue, 15 Oct 2024 23:15:31 GMT
File type PNG image data, 84 x 99, 8-bit/color RGB, non-interlaced
Hash 23de555d449bf67a344f9d9ce31e8a7b
cc449bcc93242468772070ea3f6b3961b07e5b9c
7bed2e2bab71c5eddb161fa59203c8979fa9edd57bccbbc5bd2a7002ab790761
GET /cdn-cgi/challenge-platform/h/b/i/8baf9c542cba56b1/1724966696113/WOdj77n6ddvyC_W HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/p8xiw/0x4AAAAAAAb-QAAMxFqUmwGJ/auto/fbE/normal/auto/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 29 Aug 2024 21:24:56 GMT
content-type: image/png
content-length: 61
server: cloudflare
cf-ray: 8baf9c5e5e8956b1-OSL
alt-svc: h3=":443"; ma=86400