| r10.o.lencr.org/ |  23.36.76.226 | | 504 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hash66fbf7f95cb55f388373a20d4b1a736e afc34259758a563362367848629ff7639982e1fb 41c00088afc20571f6a0c6998324d9517346256ac33696dc706192ec606fe7a7
POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "41C00088AFC20571F6A0C6998324D9517346256AC33696DC706192EC606FE7A7"
Last-Modified: Mon, 02 Sep 2024 12:20:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9200
Expires: Tue, 03 Sep 2024 09:58:11 GMT
Date: Tue, 03 Sep 2024 07:24:51 GMT
Connection: keep-alive
|
|
| r10.o.lencr.org/ | 23.36.76.226 | | 504 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hash9af7a8cd532ef5aaf31ca93238520c04 f072b79c778c47733bbd3377e03f716ecdfc14ea 36e32e96e96ff13975dfb765119ad431a8a3bedc9cdd8f16bbe7460664ee177c
POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "36E32E96E96FF13975DFB765119AD431A8A3BEDC9CDD8F16BBE7460664EE177C"
Last-Modified: Sat, 31 Aug 2024 21:19:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4779
Expires: Tue, 03 Sep 2024 08:44:30 GMT
Date: Tue, 03 Sep 2024 07:24:51 GMT
Connection: keep-alive
|
|
| r10.o.lencr.org/ | 23.36.76.226 | | 504 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hash1f0091b166a0138433eabf08a4530e4a 769d1eeaefb4987198c821ea98e06ea8ba0de215 2eff28e3e6829bf2cfcbc417fd76313d5b5e8ba8a3f0f0de6a5b5cdc2888e7e5
POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "2EFF28E3E6829BF2CFCBC417FD76313D5B5E8BA8A3F0F0DE6A5B5CDC2888E7E5"
Last-Modified: Mon, 02 Sep 2024 14:34:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11549
Expires: Tue, 03 Sep 2024 10:37:21 GMT
Date: Tue, 03 Sep 2024 07:24:52 GMT
Connection: keep-alive
|
|
| r10.o.lencr.org/ | 23.36.76.226 | | 504 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hashddc456a9c96d929e15c05fe0f98b8768 3eb86e0b169ada76e98ed62750b77a24e8b49eb4 f9496ce271a170952f322ae70a9da041e2a1e49a45fd2056f62a88358acadd09
POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "F9496CE271A170952F322AE70A9DA041E2A1E49A45FD2056F62A88358ACADD09"
Last-Modified: Mon, 02 Sep 2024 14:38:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10307
Expires: Tue, 03 Sep 2024 10:16:39 GMT
Date: Tue, 03 Sep 2024 07:24:52 GMT
Connection: keep-alive
|
|
| challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/cmg/1/GLhOioXg0bs57t4qPrORXFsL1%2BWig2mIKbgpVPMu7ZQ%3D |  104.18.95.41 | 200 OK | 61 B |
URL GET HTTP/3challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/cmg/1/GLhOioXg0bs57t4qPrORXFsL1%2BWig2mIKbgpVPMu7ZQ%3D IP104.18.95.41:443
Requested byhttps://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/s4j58/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/normal/auto/ CertificateIssuerLet's Encrypt Subjectchallenges.cloudflare.com Fingerprint60:6F:95:61:4B:01:7C:54:90:97:F0:8F:DD:FC:3F:FE:75:73:79:EC ValidityWed, 17 Jul 2024 23:15:32 GMT - Tue, 15 Oct 2024 23:15:31 GMT
File typePNG image data, 2 x 2, 8-bit/color RGB, non-interlaced Hash9246cca8fc3c00f50035f28e9f6b7f7d 3aa538440f70873b574f40cd793060f53ec17a5d c07d7d29e3c20fa6ca4c5d20663688d52bad13e129ad82ce06b80eb187d9dc84
GET /cdn-cgi/challenge-platform/h/g/cmg/1/GLhOioXg0bs57t4qPrORXFsL1%2BWig2mIKbgpVPMu7ZQ%3D HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/s4j58/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/normal/auto/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 03 Sep 2024 07:24:53 GMT
content-type: image/png
content-length: 61
cache-control: max-age=2629800, public
server: cloudflare
cf-ray: 8bd400b3db2b5696-OSL
alt-svc: h3=":443"; ma=86400
|
|
| r11.o.lencr.org/ | 23.36.76.226 | | 504 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hashc96a4972e341191f93e963880196f8e1 8318aa6dcbdababe8728023ec9ef3aaac10917a9 dd8f73d55d492ad4e3fc3915c05ecfc6883f124c050dded51f4e43292e6b8c2a
POST / HTTP/1.1
Host: r11.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "DD8F73D55D492AD4E3FC3915C05ECFC6883F124C050DDED51F4E43292E6B8C2A"
Last-Modified: Mon, 02 Sep 2024 14:38:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10785
Expires: Tue, 03 Sep 2024 10:24:39 GMT
Date: Tue, 03 Sep 2024 07:24:54 GMT
Connection: keep-alive
|
|
| r11.o.lencr.org/ | 23.36.76.226 | | 504 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hashc96a4972e341191f93e963880196f8e1 8318aa6dcbdababe8728023ec9ef3aaac10917a9 dd8f73d55d492ad4e3fc3915c05ecfc6883f124c050dded51f4e43292e6b8c2a
POST / HTTP/1.1
Host: r11.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "DD8F73D55D492AD4E3FC3915C05ECFC6883F124C050DDED51F4E43292E6B8C2A"
Last-Modified: Mon, 02 Sep 2024 14:38:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10785
Expires: Tue, 03 Sep 2024 10:24:39 GMT
Date: Tue, 03 Sep 2024 07:24:54 GMT
Connection: keep-alive
|
|
| r11.o.lencr.org/ | 23.36.76.226 | | 504 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hashc96a4972e341191f93e963880196f8e1 8318aa6dcbdababe8728023ec9ef3aaac10917a9 dd8f73d55d492ad4e3fc3915c05ecfc6883f124c050dded51f4e43292e6b8c2a
POST / HTTP/1.1
Host: r11.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "DD8F73D55D492AD4E3FC3915C05ECFC6883F124C050DDED51F4E43292E6B8C2A"
Last-Modified: Mon, 02 Sep 2024 14:38:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10785
Expires: Tue, 03 Sep 2024 10:24:39 GMT
Date: Tue, 03 Sep 2024 07:24:54 GMT
Connection: keep-alive
|
|
| r11.o.lencr.org/ | 23.36.76.226 | | 504 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hashc96a4972e341191f93e963880196f8e1 8318aa6dcbdababe8728023ec9ef3aaac10917a9 dd8f73d55d492ad4e3fc3915c05ecfc6883f124c050dded51f4e43292e6b8c2a
POST / HTTP/1.1
Host: r11.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "DD8F73D55D492AD4E3FC3915C05ECFC6883F124C050DDED51F4E43292E6B8C2A"
Last-Modified: Mon, 02 Sep 2024 14:38:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10785
Expires: Tue, 03 Sep 2024 10:24:39 GMT
Date: Tue, 03 Sep 2024 07:24:54 GMT
Connection: keep-alive
|
|
| challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/i/8bd400b32a5d5696/1725348294041/qCkdogx6O0kIrLV | 104.18.95.41 | 200 OK | 61 B |
URL GET HTTP/3challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/i/8bd400b32a5d5696/1725348294041/qCkdogx6O0kIrLV IP104.18.95.41:443
Requested byhttps://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/s4j58/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/normal/auto/ CertificateIssuerLet's Encrypt Subjectchallenges.cloudflare.com Fingerprint60:6F:95:61:4B:01:7C:54:90:97:F0:8F:DD:FC:3F:FE:75:73:79:EC ValidityWed, 17 Jul 2024 23:15:32 GMT - Tue, 15 Oct 2024 23:15:31 GMT
File typePNG image data, 40 x 43, 8-bit/color RGB, non-interlaced Hash9ea0031e1c9355900c6377c96b016f0d ecf07e6ae9dba397282193c0c686da037a9e4000 ab4edcced423e8897be756ea976dab47a7a7586a441b6df4b2faf928299dc145
GET /cdn-cgi/challenge-platform/h/g/i/8bd400b32a5d5696/1725348294041/qCkdogx6O0kIrLV HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/s4j58/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/normal/auto/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 03 Sep 2024 07:24:56 GMT
content-type: image/png
content-length: 61
server: cloudflare
cf-ray: 8bd400c44b9c5696-OSL
alt-svc: h3=":443"; ma=86400
|
|
| challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/pat/8bd400b32a5d5696/1725348294043/c4c4791354042bb55ef939b6f0fbd81e53bf6c4832ed89b7fe2cdf5ebd7e3e36/zhEOkIPuNvuN0k7 | 104.18.95.41 | 401 Unauthorized | 1 B |
URL GET HTTP/3challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/pat/8bd400b32a5d5696/1725348294043/c4c4791354042bb55ef939b6f0fbd81e53bf6c4832ed89b7fe2cdf5ebd7e3e36/zhEOkIPuNvuN0k7 IP104.18.95.41:443
Requested byhttps://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/s4j58/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/normal/auto/ CertificateIssuerLet's Encrypt Subjectchallenges.cloudflare.com Fingerprint60:6F:95:61:4B:01:7C:54:90:97:F0:8F:DD:FC:3F:FE:75:73:79:EC ValidityWed, 17 Jul 2024 23:15:32 GMT - Tue, 15 Oct 2024 23:15:31 GMT
File typevery short file (no magic) Hashff44570aca8241914870afbc310cdb85 58668e7669fd564d99db5d581fcdb6a5618440b5 6da43b944e494e885e69af021f93c6d9331c78aa228084711429160a5bbd15b5
GET /cdn-cgi/challenge-platform/h/g/pat/8bd400b32a5d5696/1725348294043/c4c4791354042bb55ef939b6f0fbd81e53bf6c4832ed89b7fe2cdf5ebd7e3e36/zhEOkIPuNvuN0k7 HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/s4j58/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/normal/auto/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 401 Unauthorized
date: Tue, 03 Sep 2024 07:24:56 GMT
content-type: text/plain; charset=UTF-8
content-length: 1
www-authenticate: PrivateToken challenge="AAIAGXBhdC1pc3N1ZXIuY2xvdWRmbGFyZS5jb20gxMR5E1QEK7Ve-Tm28PvYHlO_bEgy7Ym3_izfXr1-PjYAGWNoYWxsZW5nZXMuY2xvdWRmbGFyZS5jb20=", token-key="MIIBUjA9BgkqhkiG9w0BAQowMKANMAsGCWCGSAFlAwQCAqEaMBgGCSqGSIb3DQEBCDALBglghkgBZQMEAgKiAwIBMAOCAQ8AMIIBCgKCAQEAwq4lQVQRz1pPGW2zriDpu_qevEzlPHgkAihcSA59zJcJb2A8xotGwENAoW573yMpgn4HDqmJlMqAUFiTjjmOjleZUflHiy8x5UxWmKFbNHD6_X7j4ACGL6VNygYSBx97sLG9U-UzgtfOKthxykQ2gjFdTiN605EZIa27U-l_x_RtcqLvOFELv3chScCgQq7spn--uOQ_up7ECVkZHNHIMn4GKiNNcY_TActQB5M-OlAIlL02vFx5bZ92hieqS2VEjQtawWHNV3mhHA30oVcs6wlwm6MI515aptLqjOLSgm4KmSRTrTz4dyUPqe3IxftsvsvqCGZ-N2XGSvK2wBoH4wIDAQAB", max-age=20, PrivateToken challenge="AAIAHXNhdC5wYXQtaXNzdWVyLmNsb3VkZmxhcmUuY29tIMTEeRNUBCu1Xvk5tvD72B5Tv2xIMu2Jt_4s3169fj42ABljaGFsbGVuZ2VzLmNsb3VkZmxhcmUuY29t", token-key="MIIBUjA9BgkqhkiG9w0BAQowMKANMAsGCWCGSAFlAwQCAqEaMBgGCSqGSIb3DQEBCDALBglghkgBZQMEAgKiAwIBMAOCAQ8AMIIBCgKCAQEAsLS4HBnLGydwK-bLQGRCaoyMsrXBRrDgQVmxS06j3UF0nYSd6GdTGCKIu1WV60eg-tJtTttfEVq7wHVQf4vzjYBidmCh88ebzxKv2GB6PESSodf5MsEup9xd5dxpkYScgL1CCJq89kRrOQ_CS61bvkL_oGyZf4ffqG5THgaOsopqj8dFLH6_SMy9yf8EgMYqpyjxfKsD-1_qb1m1DRjJEKPWKIGwmHXIKQJUqsxZFm4_Inwkxx7QMpVP4GyqlTxFVz7stWwJRSkMLHjEM_IWLUYfPhuwIUVqmRjGsY1n8flA1bRfxaWHNDxoi25-M2BKTP9NkNNJBbTKErhrZ9LGywIDAQAB", max-age=20, PrivateToken challenge="AAIALHBwLWlzc3Vlci1wcm9kdWN0aW9uLnJlc2VhcmNoLmNsb3VkZmxhcmUuY29tIMTEeRNUBCu1Xvk5tvD72B5Tv2xIMu2Jt_4s3169fj42ABljaGFsbGVuZ2VzLmNsb3VkZmxhcmUuY29t", token-key="MIIBUjA9BgkqhkiG9w0BAQowMKANMAsGCWCGSAFlAwQCAqEaMBgGCSqGSIb3DQEBCDALBglghkgBZQMEAgKiAwIBMAOCAQ8AMIIBCgKCAQEAuJroJOc-tyeoeQjFgfJ8GZidY1pYZ3E6vnRPKA0M4VuvYINC4ZmqLOQzac3aJzNuRrxrQ8vCXrvu97kqdHJSuD7c4F3hVN6pS2ay8sAL7u7jJt6lacsQHuSPC9EIde0igAXxPC2mDw7WVmKBnW1L8eX49fv385hVn2lkvVbn6g2RCo-8cr_vCaywLT1Y4m5m_6XjP6Oekt71A2a9NKotkb81Y8DjanuZ8fdTQWt6O8NqyhDobyHRcF9-9o8acjcIRT5cfkSGzFdMpznnIFdDtr33BOQv2usHcnClM6om78iaqVMykh3JylHkrYXv9gOBIy3r8i0wOr_0t9XKtgxipQIDAQAB", max-age=20
server: cloudflare
cf-ray: 8bd400c4cc035696-OSL
alt-svc: h3=":443"; ma=86400
|
|
| challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/flow/ov1/1225078385:1725344850:aOD98VUMdr4Q1tCncmpONSzNGTS5vfZIfoceG9b2vQY/8bd400b32a5d5696/f6182ec4fde465c | 104.18.95.41 | 200 OK | 141 kB |
URL POST HTTP/3challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/flow/ov1/1225078385:1725344850:aOD98VUMdr4Q1tCncmpONSzNGTS5vfZIfoceG9b2vQY/8bd400b32a5d5696/f6182ec4fde465c IP104.18.95.41:443
Requested byhttps://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/s4j58/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/normal/auto/ CertificateIssuerLet's Encrypt Subjectchallenges.cloudflare.com Fingerprint60:6F:95:61:4B:01:7C:54:90:97:F0:8F:DD:FC:3F:FE:75:73:79:EC ValidityWed, 17 Jul 2024 23:15:32 GMT - Tue, 15 Oct 2024 23:15:31 GMT
File typeASCII text, with very long lines (65536), with no line terminators Size141 kB (141200 bytes) Hash23bf28c4cba2a30f71abfe1bb479195d 6229dee575ff7bd1d8cceaeb22f5d7845d3de4ac 45525bf93a5ea37d6422a82b3d0f104ef4633f92611ebdf0adabd6a2a4d67786
POST /cdn-cgi/challenge-platform/h/g/flow/ov1/1225078385:1725344850:aOD98VUMdr4Q1tCncmpONSzNGTS5vfZIfoceG9b2vQY/8bd400b32a5d5696/f6182ec4fde465c HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/s4j58/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/normal/auto/
Content-type: application/x-www-form-urlencoded
CF-Challenge: f6182ec4fde465c
Content-Length: 3596
Origin: https://challenges.cloudflare.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 03 Sep 2024 07:24:54 GMT
content-type: text/plain; charset=UTF-8
cf-chl-gen: ellwjNxxFK1mfj0Qd9SHHZ9jsxVX4Fr8RBH26pPeRgQIabaVyW95M287nA+CMlsUPeO34MNqvzujmS8djakIrmQRVgGe9fi4/utuGiUm+dMNXeSIx/+AjnV16cgKAttoHk1u2pJm3ler38h12qwj+pC3GZ2UvOsMDkThGcfSlV1dNHRJXUSi9H5VbE0kPVigHJ485s0nHINUMRYBtx7Qo7ybwyLIkCJGDg0uJh5joomht4usRuODhxExaiMFXT48sbU8p6Bw8fdVAIjSQbLZDrTxxVaQ52XtHuQFGCyHIBvAUoC9chXhtj4iK/KC2ReI0xtLh5CQB/I+BLcSvTdvtWHEFpoV8Hk0ioU6oiZ5Hhe/W0ekLTy9weDf8HvP2dJ3E5gXEQs9v/z5qq/NU0dluICtXKSwrB2eoa6E/liNrUjedgZ2MV7IP2E/aBRD25i/69Jp2KhkLuh9RA9edNCZkJxLUj7a6VbgCz/XgHkxDL0dDM3vPng=$Vtwu+BqLkk2PNTuC
server: cloudflare
cf-ray: 8bd400b5ad375696-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/flow/ov1/1225078385:1725344850:aOD98VUMdr4Q1tCncmpONSzNGTS5vfZIfoceG9b2vQY/8bd400b32a5d5696/f6182ec4fde465c | 104.18.95.41 | 200 OK | 26 kB |
URL POST HTTP/3challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/flow/ov1/1225078385:1725344850:aOD98VUMdr4Q1tCncmpONSzNGTS5vfZIfoceG9b2vQY/8bd400b32a5d5696/f6182ec4fde465c IP104.18.95.41:443
Requested byhttps://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/s4j58/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/normal/auto/ CertificateIssuerLet's Encrypt Subjectchallenges.cloudflare.com Fingerprint60:6F:95:61:4B:01:7C:54:90:97:F0:8F:DD:FC:3F:FE:75:73:79:EC ValidityWed, 17 Jul 2024 23:15:32 GMT - Tue, 15 Oct 2024 23:15:31 GMT
File typeASCII text, with very long lines (26296), with no line terminators Hashf6bfea1d338bfea3f2203992de395fc0 9981a02c234143cee6c12bdfd6f7fcd98f348390 7c35a01ae7d1844ab3ef561c1699fa5da94414e6d664bc47fa891ed9d94c9377
POST /cdn-cgi/challenge-platform/h/g/flow/ov1/1225078385:1725344850:aOD98VUMdr4Q1tCncmpONSzNGTS5vfZIfoceG9b2vQY/8bd400b32a5d5696/f6182ec4fde465c HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/s4j58/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/normal/auto/
Content-type: application/x-www-form-urlencoded
CF-Challenge: f6182ec4fde465c
Content-Length: 28757
Origin: https://challenges.cloudflare.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 03 Sep 2024 07:24:56 GMT
content-type: text/plain; charset=UTF-8
cf-chl-gen: JupmNaInsD0CQ5iC1pmYxd3mdE4TmR/lPx04NehBBbw784+OhMGpRdfS6Pgd8mmw9XHggNCTtgLLWfyp$elV4gmb3+COOAalN
server: cloudflare
cf-ray: 8bd400c62d6a5696-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| comlmntrdsrenow.life/cdn-cgi/challenge-platform/h/g/orchestrate/chl_page/v1?ray=8bd400af9932b4f4 |  188.114.97.1 | 200 OK | 86 kB |
URL GET HTTP/3comlmntrdsrenow.life/cdn-cgi/challenge-platform/h/g/orchestrate/chl_page/v1?ray=8bd400af9932b4f4 IP188.114.97.1:443
Requested byhttps://comlmntrdsrenow.life/?s=157&t1=1041&t2=&t4=krn116 CertificateIssuerGoogle Trust Services Subjectcomlmntrdsrenow.life Fingerprint31:44:9C:C6:40:25:94:EE:D0:FD:51:4E:F9:91:0B:15:D7:64:7D:F4 ValidityMon, 22 Jul 2024 22:49:06 GMT - Sun, 20 Oct 2024 22:49:05 GMT
File typeJavaScript source, ASCII text, with very long lines (65536), with no line terminators Hash39a84d5981d7a73ddec39d438b580462 d4bf66d5ff6e2c3841d6f38ec4586b7f6178dab8 b704d1899272e883ff077a7aa4981d35e52a09c0f46ed89f151b4707799f78b8
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /cdn-cgi/challenge-platform/h/g/orchestrate/chl_page/v1?ray=8bd400af9932b4f4 HTTP/1.1
Host: comlmntrdsrenow.life
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://comlmntrdsrenow.life/?s=157&t1=1041&t2=&t4=krn116&__cf_chl_rt_tk=41n9uv2_PfqFguulgr7lKTkeAjD.jtyeOs0DB0.6b9Y-1725348293-0.0.1.1-5332
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 03 Sep 2024 07:24:53 GMT
content-type: application/javascript; charset=UTF-8
cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=3WXtXdmBaaOfZ66HE9eTNvxjJOXUWKAT%2FDfmwWpy16TADSV9tqVRTJZ9FtjSglzw8yRIHgpFYCpYL83QwIkOZotgnoD3KpkQd71%2FfNb7URv10LDSIEc0KRfH7wItXSM4ARxebTJirA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8bd400b0bb8bb4ee-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| comlmntrdsrenow.life/favicon.ico | 188.114.97.1 | 403 Forbidden | 17 kB |
URL GET HTTP/3comlmntrdsrenow.life/favicon.ico IP188.114.97.1:443
Requested byhttps://comlmntrdsrenow.life/?s=157&t1=1041&t2=&t4=krn116 CertificateIssuerGoogle Trust Services Subjectcomlmntrdsrenow.life Fingerprint31:44:9C:C6:40:25:94:EE:D0:FD:51:4E:F9:91:0B:15:D7:64:7D:F4 ValidityMon, 22 Jul 2024 22:49:06 GMT - Sun, 20 Oct 2024 22:49:05 GMT
File typeHTML document, ASCII text, with very long lines (16815), with no line terminators Hasha993f5a97c716dd6dae1a31672b437d8 9152286dfcdda620fb5851fdb0747c295aa1c207 68c1aac65947ee7839a9878e5ee1105b2460f92ad114e519b48d5fa5481f667b
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /favicon.ico HTTP/1.1
Host: comlmntrdsrenow.life
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://comlmntrdsrenow.life/?s=157&t1=1041&t2=&t4=krn116
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 403 Forbidden
date: Tue, 03 Sep 2024 07:24:53 GMT
content-type: text/html; charset=UTF-8
accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
critical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
cross-origin-embedder-policy: require-corp
cross-origin-opener-policy: same-origin
cross-origin-resource-policy: same-origin
origin-agent-cluster: ?1
permissions-policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()
referrer-policy: same-origin
x-content-options: nosniff
x-frame-options: SAMEORIGIN
cf-mitigated: challenge
cf-chl-out: ImPypiRf3LonzpugKS1w7LS86knshndzAAAuEXdvgEmZMsShtkz7PAFxd7hV8ZiIiUV/VsnLBgqMRf1gG28ZkXUlAbB+xyxGLSSWtPSt93pz/HEIPWJkFKIEEquu+JGECRxVhx2PU/EwdYoPJx1xFg==$mvqsdUtumpLxYV6KAvE3UA==
cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
expires: Thu, 01 Jan 1970 00:00:01 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=4cUdYnk6n%2FcP%2ByDPvk0WkMOSYi002LNLCgoziMeJllv0l0Ygno0xwJcVs0NN8kT8OfQ2I2Zn9OPAkDgcXgM2K%2B3h7%2FW8OnQF135jdBrNkxvmEsGr4Hu48pW2gKMWQmo6aIjc06ewDQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8bd400b15c56b4ee-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| challenges.cloudflare.com/turnstile/v0/g/e7cf9275f425/api.js?onload=jIea4&render=explicit | 104.18.95.41 | 200 OK | 46 kB |
URL GET HTTP/2challenges.cloudflare.com/turnstile/v0/g/e7cf9275f425/api.js?onload=jIea4&render=explicit IP104.18.95.41:443
Requested byhttps://comlmntrdsrenow.life/?s=157&t1=1041&t2=&t4=krn116 CertificateIssuerLet's Encrypt Subjectchallenges.cloudflare.com Fingerprint60:6F:95:61:4B:01:7C:54:90:97:F0:8F:DD:FC:3F:FE:75:73:79:EC ValidityWed, 17 Jul 2024 23:15:32 GMT - Tue, 15 Oct 2024 23:15:31 GMT
File typeJavaScript source, ASCII text, with very long lines (45809) Hashf8e18e23484e55c313a4a8f8615359ca cfe4d85935005c68ff04b58e236bced0b0a41d7b 3f0166bde3365c67aeeb6adfb6de569399ba9941a39ee0ee6c4dc086494daf99
GET /turnstile/v0/g/e7cf9275f425/api.js?onload=jIea4&render=explicit HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://comlmntrdsrenow.life
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 03 Sep 2024 07:24:53 GMT
content-type: application/javascript; charset=UTF-8
last-modified: Thu, 29 Aug 2024 21:08:07 GMT
cache-control: max-age=31536000, stale-if-error=10800, stale-while-revalidate=31536000, public
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding
server: cloudflare
cf-ray: 8bd400b17ede0b45-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| comlmntrdsrenow.life/?s=157&t1=1041&t2=&t4=krn116 | 188.114.97.1 | 403 Forbidden | 18 kB |
URL User Request GET HTTP/2comlmntrdsrenow.life/?s=157&t1=1041&t2=&t4=krn116 IP188.114.97.1:443
CertificateIssuerGoogle Trust Services Subjectcomlmntrdsrenow.life Fingerprint31:44:9C:C6:40:25:94:EE:D0:FD:51:4E:F9:91:0B:15:D7:64:7D:F4 ValidityMon, 22 Jul 2024 22:49:06 GMT - Sun, 20 Oct 2024 22:49:05 GMT
File typeHTML document, ASCII text, with very long lines (17931), with no line terminators Hash79d65de8e167a6117ee195f3b7caf1b3 9c8e139420bed4bff86d867740e773140ccac0d6 f336fd262490876277c4bb41187692f576de9da6d9c8bff59102122a64a0b7e5
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /?s=157&t1=1041&t2=&t4=krn116 HTTP/1.1
Host: comlmntrdsrenow.life
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://trananxan.edu.pl/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 403 Forbidden
date: Tue, 03 Sep 2024 07:24:53 GMT
content-type: text/html; charset=UTF-8
accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
critical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
cross-origin-embedder-policy: require-corp
cross-origin-opener-policy: same-origin
cross-origin-resource-policy: same-origin
origin-agent-cluster: ?1
permissions-policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()
referrer-policy: same-origin
x-content-options: nosniff
x-frame-options: SAMEORIGIN
cf-mitigated: challenge
cf-chl-out: 7TH6KnDjjzUcQsRYnrkTm96eaSIstqn5uOBoTDZdsqPUxL3KLUETQAdXZYBoBKk2U1zTLi+mfL6bLmKnbfoUX9zNGaE2hNQ6Hh+ouf/Htfyjlz7SGJ5lH+1nc3IOs+i7J35LvL46KNVZN1tdAa73iA==$KOo0wfQ+RwWGaL7LtoNSiA==
cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
expires: Thu, 01 Jan 1970 00:00:01 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=kJENX7ezRsmgdcZGTQ7XsQsmZyrlLCPjpozQO%2FCAYUlNS%2Bn8gTDJL3E6Kthl68oHtLSgpiuaXQ7y0G0BgrSfgNQ05acTxStDP1B9Sj6Psvct%2F8tc1yPn%2BKu3PBAqgzdQYi7wwUGLew%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8bd400af9932b4f4-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| comlmntrdsrenow.life/favicon.ico | 188.114.97.1 | 403 Forbidden | 17 kB |
URL GET HTTP/3comlmntrdsrenow.life/favicon.ico IP188.114.97.1:443
Requested byhttps://comlmntrdsrenow.life/?s=157&t1=1041&t2=&t4=krn116 CertificateIssuerGoogle Trust Services Subjectcomlmntrdsrenow.life Fingerprint31:44:9C:C6:40:25:94:EE:D0:FD:51:4E:F9:91:0B:15:D7:64:7D:F4 ValidityMon, 22 Jul 2024 22:49:06 GMT - Sun, 20 Oct 2024 22:49:05 GMT
File typeHTML document, ASCII text, with very long lines (16900), with no line terminators Hash2ff8ae15d81ca2b313c7717c197434d0 c7d32f5f8e0a30526974d3dbf82f32a2cebb40f0 6b68ae455eddbc85fbeb9ea2c8f3f3c5f61da90f792f995968d38b835715c665
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /favicon.ico HTTP/1.1
Host: comlmntrdsrenow.life
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://comlmntrdsrenow.life/?s=157&t1=1041&t2=&t4=krn116&__cf_chl_rt_tk=41n9uv2_PfqFguulgr7lKTkeAjD.jtyeOs0DB0.6b9Y-1725348293-0.0.1.1-5332
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 403 Forbidden
date: Tue, 03 Sep 2024 07:24:53 GMT
content-type: text/html; charset=UTF-8
accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
critical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
cross-origin-embedder-policy: require-corp
cross-origin-opener-policy: same-origin
cross-origin-resource-policy: same-origin
origin-agent-cluster: ?1
permissions-policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()
referrer-policy: same-origin
x-content-options: nosniff
x-frame-options: SAMEORIGIN
cf-mitigated: challenge
cf-chl-out: /T8B04Zv+hQRCCeJRgJz4js44J+d1Ub+cPErNE3B7rDduFxMwd7UysioAljnp7cD7WLUvPtQvXBlRdGrf+ZHINPEWd+4Fp/tDYbhB49Jeuasu7MgZsy/bGWqZVwS9T2CdG6mi8BVxq3sDM7NEAZDkg==$KiAnjzGkdzpjmUh2A+nXqw==
cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
expires: Thu, 01 Jan 1970 00:00:01 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=24epH8viqE333zTH%2BKm22CwP%2FA31OtZeyyvsFY%2BsjHUKaiCmqmPojUI49QTiYoR9Cd6U0IXIMCPinYQ5LZZOlwwiJ0nakIyDNr34eKzki0ET90010PzTqXYzz0oul%2BpqMNv2u%2FMcVg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8bd400b0fbe3b4ee-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| comlmntrdsrenow.life/cdn-cgi/challenge-platform/h/g/flow/ov1/424198388:1725344669:T1Kl_Oh1-a3dkVPP3Tdd6_w17xbbIqiAkRyfOnPeOQs/8bd400af9932b4f4/19b09e39bf9ce76 | 188.114.97.1 | 200 OK | 17 kB |
URL POST HTTP/3comlmntrdsrenow.life/cdn-cgi/challenge-platform/h/g/flow/ov1/424198388:1725344669:T1Kl_Oh1-a3dkVPP3Tdd6_w17xbbIqiAkRyfOnPeOQs/8bd400af9932b4f4/19b09e39bf9ce76 IP188.114.97.1:443
Requested byhttps://comlmntrdsrenow.life/?s=157&t1=1041&t2=&t4=krn116 CertificateIssuerGoogle Trust Services Subjectcomlmntrdsrenow.life Fingerprint31:44:9C:C6:40:25:94:EE:D0:FD:51:4E:F9:91:0B:15:D7:64:7D:F4 ValidityMon, 22 Jul 2024 22:49:06 GMT - Sun, 20 Oct 2024 22:49:05 GMT
File typeASCII text, with very long lines (16920), with no line terminators Hashd979a00fb647a1c5b42609515d1299ed 59b9fb5cd46fec0f5d845bdd588e685a9ddd88c3 b789ed708b36705d0a1afa9bd1d883fcb4812981b686708fa8b5d8c8b4af1571
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
POST /cdn-cgi/challenge-platform/h/g/flow/ov1/424198388:1725344669:T1Kl_Oh1-a3dkVPP3Tdd6_w17xbbIqiAkRyfOnPeOQs/8bd400af9932b4f4/19b09e39bf9ce76 HTTP/1.1
Host: comlmntrdsrenow.life
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://comlmntrdsrenow.life/?s=157&t1=1041&t2=&t4=krn116
Content-type: application/x-www-form-urlencoded
CF-Challenge: 19b09e39bf9ce76
Content-Length: 1920
Origin: https://comlmntrdsrenow.life
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 03 Sep 2024 07:24:53 GMT
content-type: text/plain; charset=UTF-8
cf-chl-gen: HjadbHucKJuov2wHHA9p4v+HSowPcEWpIeJVWdicz7jMMiY4KuD8CDMXykbbyFYzNtIiwUD3nA==$N6Fd9d3tXtEUi6TE
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=DzP0y74NQeDFNANxdAqcY6QAAUZk9tmYIOd1DbimhLhPxQJ%2FmS2%2BeEBjMwXSzCczp0wBnbhJuihXJkQuK2FQFvMt21yhi4x5NPsdVuU3K6nnhZa4tCp3gJzSn2WfZn5PDo4fqCDq%2FA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8bd400b20d30b4ee-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/orchestrate/chl_api/v1?ray=8bd400b32a5d5696&lang=auto | 104.18.95.41 | 200 OK | 129 kB |
URL GET HTTP/3challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/orchestrate/chl_api/v1?ray=8bd400b32a5d5696&lang=auto IP104.18.95.41:443
Requested byhttps://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/s4j58/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/normal/auto/ CertificateIssuerLet's Encrypt Subjectchallenges.cloudflare.com Fingerprint60:6F:95:61:4B:01:7C:54:90:97:F0:8F:DD:FC:3F:FE:75:73:79:EC ValidityWed, 17 Jul 2024 23:15:32 GMT - Tue, 15 Oct 2024 23:15:31 GMT
File typeJavaScript source, ASCII text, with very long lines (65536), with no line terminators Size129 kB (128878 bytes) Hash5b72f0808ec93b8261dbc3c89a0ef26b 4fea280501e4d3d0ec30ef2f60d0008fb08518ac 95a0878d698baa7156edaeae0d5be6ef6d060c7cafb91294c6cad39f6b2488f2
GET /cdn-cgi/challenge-platform/h/g/orchestrate/chl_api/v1?ray=8bd400b32a5d5696&lang=auto HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/s4j58/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/normal/auto/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 03 Sep 2024 07:24:53 GMT
content-type: application/javascript; charset=UTF-8
cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
server: cloudflare
cf-ray: 8bd400b3db2d5696-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| trananxan.edu.pl/en/bhtop/nopeherbai |  172.67.179.190 | 200 OK | 128 B |
URL User Request GET HTTP/2trananxan.edu.pl/en/bhtop/nopeherbai IP172.67.179.190:443
CertificateIssuerGoogle Trust Services Subjecttrananxan.edu.pl Fingerprint6A:67:E4:0A:EC:E9:0B:1B:AF:69:2B:75:B0:D7:CC:CC:53:B9:93:C7 ValidityThu, 29 Aug 2024 12:06:07 GMT - Wed, 27 Nov 2024 12:06:06 GMT
File typeHTML document, ASCII text, with no line terminators Hash889f9dd82a2caf30a1adb40182910dcc f309fffedba8c15ac9bc11e41cd51e3c73e7866e 9154acee22a218087e55db22a74e1490315f96903084dbb9ff80378552f05a13
GET /en/bhtop/nopeherbai HTTP/1.1
Host: trananxan.edu.pl
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 03 Sep 2024 07:24:52 GMT
content-type: text/html; charset=UTF-8
set-cookie: d33c8da3af146836a2887c78199469ce=0; expires=Tue, 03-Sep-2024 08:24:52 GMT; Max-Age=3600; path=/
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=3SIz4kz7z9d%2BIRxqYrjJvAhohZR77QL7DMhf3aUdP8MbgVKOLMx2tYL0CEGs0lFg0NO8uGaGqf7C47bJfC%2BL1ut%2Fut3uFwxXftKL5H0hyQ7FqKjLDfoplXwBFpmBRMyzNUdD"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8bd400aadf100b51-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/s4j58/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/normal/auto/ | 104.18.95.41 | 200 OK | 74 kB |
URL GET HTTP/3challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/s4j58/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/normal/auto/ IP104.18.95.41:443
Requested byhttps://comlmntrdsrenow.life/?s=157&t1=1041&t2=&t4=krn116 CertificateIssuerLet's Encrypt Subjectchallenges.cloudflare.com Fingerprint60:6F:95:61:4B:01:7C:54:90:97:F0:8F:DD:FC:3F:FE:75:73:79:EC ValidityWed, 17 Jul 2024 23:15:32 GMT - Tue, 15 Oct 2024 23:15:31 GMT
File typeHTML document, ASCII text, with very long lines (37808) Hash85d40cab7b1cd893c3b16bfc7bdf1bd1 19b47344165780d56a831e9b4296d131f4148529 4d6968b098be84e72575ea3407a8cb391bc987919171f89ef1746498c0399024
GET /cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/s4j58/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/normal/auto/ HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 03 Sep 2024 07:24:53 GMT
content-type: text/html; charset=UTF-8
referrer-policy: same-origin
content-security-policy: frame-src https://challenges.cloudflare.com/; base-uri 'self'
document-policy: js-profiling
critical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
origin-agent-cluster: ?1
cross-origin-resource-policy: cross-origin
cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
permissions-policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()
cross-origin-opener-policy: same-origin
cross-origin-embedder-policy: require-corp
server: cloudflare
cf-ray: 8bd400b32a5d5696-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|