| clickproxy.retailrocket.net/?url=https://alysiasofios.com/toro/66282//cmFuZHkucmVpc3NAYWFjLWNvbnRyYWN0aW5nLmNvbQ== |  193.17.93.93 | | 0 B |
URL clickproxy.retailrocket.net/?url=https://alysiasofios.com/toro/66282//cmFuZHkucmVpc3NAYWFjLWNvbnRyYWN0aW5nLmNvbQ== IP193.17.93.93:0 ASN#210756 EdgeCenter LLC
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /?url=https://alysiasofios.com/toro/66282//cmFuZHkucmVpc3NAYWFjLWNvbnRyYWN0aW5nLmNvbQ== HTTP/1.1
Host: clickproxy.retailrocket.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
server: nginx
date: Fri, 26 Apr 2024 15:08:56 GMT
content-type: application/json
content-length: 0
location: https://alysiasofios.com/toro/66282//cmFuZHkucmVpc3NAYWFjLWNvbnRyYWN0aW5nLmNvbQ==?rr_mailid_proxy=test_tracking_id
x-amzn-requestid: 135c9d19-ae41-425f-a298-d89866efa76f
x-amz-apigw-id: W1t9WH-GjoEETPg=
cache-control: no-cache, no-store, must-revalidate
x-amzn-trace-id: Root=1-662bc388-0bde96f347fbdbf37ed638db;Parent=0f5438c12be21b47;Sampled=0;lineage=a0613a6b:0
pragma: no-cache
x-node: blm-up-gc142
X-Firefox-Spdy: h2
|
|
| alysiasofios.com/toro/66282//cmFuZHkucmVpc3NAYWFjLWNvbnRyYWN0aW5nLmNvbQ==?rr_mailid_proxy=test_tracking_id |  69.49.228.234 | | 0 B |
URL alysiasofios.com/toro/66282//cmFuZHkucmVpc3NAYWFjLWNvbnRyYWN0aW5nLmNvbQ==?rr_mailid_proxy=test_tracking_id IP69.49.228.234:0 ASN#19871 NETWORK-SOLUTIONS-HOSTING
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /toro/66282//cmFuZHkucmVpc3NAYWFjLWNvbnRyYWN0aW5nLmNvbQ==?rr_mailid_proxy=test_tracking_id HTTP/1.1
Host: alysiasofios.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 26 Apr 2024 15:08:55 GMT
Server: Apache
refresh: 0;url=https://pestukelgroup.com/?lldpodyx&email=randy.reiss@aac-contracting.com
Content-Length: 0
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8
|
|
| pestukelgroup.com/?lldpodyx&email=randy.reiss@aac-contracting.com |  5.230.73.121 | 302 Found | 0 B |
URL User Request GET HTTP/1.1pestukelgroup.com/?lldpodyx&email=randy.reiss@aac-contracting.com IP5.230.73.121:443
CertificateIssuerLet's Encrypt Subjectpestukelgroup.com Fingerprint3F:9F:5F:2F:E6:B6:89:C2:7A:EC:39:D8:3C:D8:74:E1:36:8E:B4:65 ValidityThu, 25 Apr 2024 22:31:04 GMT - Wed, 24 Jul 2024 22:31:03 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Microsoft Outlook |
GET /?lldpodyx&email=randy.reiss@aac-contracting.com HTTP/1.1
Host: pestukelgroup.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
Set-Cookie: qPdM=JyxjKSrEhdZe; path=/; samesite=none; secure; httponly
qPdM.sig=t_v4LUhnt-204H9KqpHJvdCtc9o; path=/; samesite=none; secure; httponly
location: /?lldpodyx=f8e1f2b905c28e0a6436ba0b8adf5d3d1a3f15115840f13162a41c182c55bd5251117494e527a0fadda74b4f568cee20f247d63d5ff043729d61e149ca9e61d6&email=randy.reiss%40aac-contracting.com
Date: Fri, 26 Apr 2024 15:08:57 GMT
Connection: keep-alive
Keep-Alive: timeout=5
Transfer-Encoding: chunked
|
|
| pestukelgroup.com/?lldpodyx=f8e1f2b905c28e0a6436ba0b8adf5d3d1a3f15115840f13162a41c182c55bd5251117494e527a0fadda74b4f568cee20f247d63d5ff043729d61e149ca9e61d6&email=randy.reiss%40aac-contracting.com | 5.230.73.121 | 200 OK | 3.3 kB |
URL User Request GET HTTP/1.1pestukelgroup.com/?lldpodyx=f8e1f2b905c28e0a6436ba0b8adf5d3d1a3f15115840f13162a41c182c55bd5251117494e527a0fadda74b4f568cee20f247d63d5ff043729d61e149ca9e61d6&email=randy.reiss%40aac-contracting.com IP5.230.73.121:443
CertificateIssuerLet's Encrypt Subjectpestukelgroup.com Fingerprint3F:9F:5F:2F:E6:B6:89:C2:7A:EC:39:D8:3C:D8:74:E1:36:8E:B4:65 ValidityThu, 25 Apr 2024 22:31:04 GMT - Wed, 24 Jul 2024 22:31:03 GMT
File typeHTML document, ASCII text, with very long lines (1928) Hash27d8525855a7fbb686e84efa2a8067dd a486c4490f018b21e68beab86f9ce50cee2322f6 62606a560a5d48cc0a9aea77146bc850612c0509f882f6349bbeae8b31111f79
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Microsoft Outlook |
GET /?lldpodyx=f8e1f2b905c28e0a6436ba0b8adf5d3d1a3f15115840f13162a41c182c55bd5251117494e527a0fadda74b4f568cee20f247d63d5ff043729d61e149ca9e61d6&email=randy.reiss%40aac-contracting.com HTTP/1.1
Host: pestukelgroup.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: qPdM=JyxjKSrEhdZe; qPdM.sig=t_v4LUhnt-204H9KqpHJvdCtc9o
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: text/html;charset=UTF-8
Date: Fri, 26 Apr 2024 15:08:57 GMT
Connection: keep-alive
Keep-Alive: timeout=5
Transfer-Encoding: chunked
|
|
| challenges.cloudflare.com/turnstile/v0/api.js?onload=onloadTurnstileCallback |  104.17.3.184 | 302 Found | 0 B |
URL GET HTTP/2challenges.cloudflare.com/turnstile/v0/api.js?onload=onloadTurnstileCallback IP104.17.3.184:443
Requested byhttps://pestukelgroup.com/?lldpodyx=f8e1f2b905c28e0a6436ba0b8adf5d3d1a3f15115840f13162a41c182c55bd5251117494e527a0fadda74b4f568cee20f247d63d5ff043729d61e149ca9e61d6&email=randy.reiss%40aac-contracting.com CertificateIssuerCloudflare, Inc. Subjectchallenges.cloudflare.com Fingerprint5F:E4:AA:8C:2E:24:D2:B1:69:9D:13:28:31:5C:65:FA:97:2A:E9:6E ValidityFri, 18 Aug 2023 00:00:00 GMT - Sat, 17 Aug 2024 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /turnstile/v0/api.js?onload=onloadTurnstileCallback HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pestukelgroup.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
date: Fri, 26 Apr 2024 15:08:57 GMT
content-length: 0
cache-control: max-age=300, public
access-control-allow-origin: *
location: /turnstile/v0/b/471dc2adc340/api.js?onload=onloadTurnstileCallback
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a77dba8c14b512-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| challenges.cloudflare.com/turnstile/v0/b/471dc2adc340/api.js?onload=onloadTurnstileCallback | 104.17.3.184 | 200 OK | 14 kB |
URL GET HTTP/2challenges.cloudflare.com/turnstile/v0/b/471dc2adc340/api.js?onload=onloadTurnstileCallback IP104.17.3.184:443
Requested byhttps://pestukelgroup.com/?lldpodyx=f8e1f2b905c28e0a6436ba0b8adf5d3d1a3f15115840f13162a41c182c55bd5251117494e527a0fadda74b4f568cee20f247d63d5ff043729d61e149ca9e61d6&email=randy.reiss%40aac-contracting.com CertificateIssuerCloudflare, Inc. Subjectchallenges.cloudflare.com Fingerprint5F:E4:AA:8C:2E:24:D2:B1:69:9D:13:28:31:5C:65:FA:97:2A:E9:6E ValidityFri, 18 Aug 2023 00:00:00 GMT - Sat, 17 Aug 2024 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (42414) Hashf94a2211ce789a95a7c67e8c660d63e8 f1fc19b6bcb96d0a905bf3192aaff0885ff9f36f 926dc3302f99ec05e4206e965ddeb7250f5910a8c38e82c7beafb724bbaaf37b
GET /turnstile/v0/b/471dc2adc340/api.js?onload=onloadTurnstileCallback HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pestukelgroup.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 26 Apr 2024 15:08:57 GMT
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
cache-control: max-age=31536000
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a77dbaac30b512-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/cmg/1/GLhOioXg0bs57t4qPrORXFsL1%2BWig2mIKbgpVPMu7ZQ%3D | 104.17.3.184 | 200 OK | 61 B |
URL GET HTTP/3challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/cmg/1/GLhOioXg0bs57t4qPrORXFsL1%2BWig2mIKbgpVPMu7ZQ%3D IP104.17.3.184:443
Requested byhttps://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv1/Sp_xOU08DjqDdFe/081i9/0x4AAAAAAAYS8L_fnh-WQMTr/auto/normal CertificateIssuerCloudflare, Inc. Subjectchallenges.cloudflare.com Fingerprint5F:E4:AA:8C:2E:24:D2:B1:69:9D:13:28:31:5C:65:FA:97:2A:E9:6E ValidityFri, 18 Aug 2023 00:00:00 GMT - Sat, 17 Aug 2024 23:59:59 GMT
File typePNG image data, 2 x 2, 8-bit/color RGB, non-interlaced Hash9246cca8fc3c00f50035f28e9f6b7f7d 3aa538440f70873b574f40cd793060f53ec17a5d c07d7d29e3c20fa6ca4c5d20663688d52bad13e129ad82ce06b80eb187d9dc84
GET /cdn-cgi/challenge-platform/h/b/cmg/1/GLhOioXg0bs57t4qPrORXFsL1%2BWig2mIKbgpVPMu7ZQ%3D HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/081i9/0x4AAAAAAAYS8L_fnh-WQMTr/auto/normal
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 26 Apr 2024 15:08:57 GMT
content-type: image/png
content-length: 61
cache-control: max-age=2629800, public
server: cloudflare
cf-ray: 87a77dbc19ffb51e-OSL
alt-svc: h3=":443"; ma=86400
|
|
| challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/i/87a77dbb6932b51e/1714144137930/e6-bZCgR0y7_FKa | 104.17.3.184 | | 61 B |
URL challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/i/87a77dbb6932b51e/1714144137930/e6-bZCgR0y7_FKa IP104.17.3.184:0
CertificateIssuerCloudflare, Inc. Subjectchallenges.cloudflare.com Fingerprint5F:E4:AA:8C:2E:24:D2:B1:69:9D:13:28:31:5C:65:FA:97:2A:E9:6E ValidityFri, 18 Aug 2023 00:00:00 GMT - Sat, 17 Aug 2024 23:59:59 GMT
File typePNG image data, 71 x 42, 8-bit/color RGB, non-interlaced Hash812d8f4dda5c17137437f388958593d7 c9a132a0a7e866cd65408cb45c987d4109f5d8c8 731cfa2dbcd1ee6ab230b4131c9a9edd9def3e5fc0717555211da44f49c95c8b
GET /cdn-cgi/challenge-platform/h/b/i/87a77dbb6932b51e/1714144137930/e6-bZCgR0y7_FKa HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/081i9/0x4AAAAAAAYS8L_fnh-WQMTr/auto/normal
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 26 Apr 2024 15:08:58 GMT
content-type: image/png
content-length: 61
server: cloudflare
cf-ray: 87a77dc1bf85b51e-OSL
alt-svc: h3=":443"; ma=86400
|
|
| challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/pat/87a77dbb6932b51e/1714144137936/4971aa96939bcac80f71a22bcb91fe9ff607229e36c9ff3c277f9a07ef3482a9/YESE06Ek68qHaSY | 104.17.3.184 | | 1 B |
URL challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/pat/87a77dbb6932b51e/1714144137936/4971aa96939bcac80f71a22bcb91fe9ff607229e36c9ff3c277f9a07ef3482a9/YESE06Ek68qHaSY IP104.17.3.184:0
CertificateIssuerCloudflare, Inc. Subjectchallenges.cloudflare.com Fingerprint5F:E4:AA:8C:2E:24:D2:B1:69:9D:13:28:31:5C:65:FA:97:2A:E9:6E ValidityFri, 18 Aug 2023 00:00:00 GMT - Sat, 17 Aug 2024 23:59:59 GMT
File typevery short file (no magic) Hashff44570aca8241914870afbc310cdb85 58668e7669fd564d99db5d581fcdb6a5618440b5 6da43b944e494e885e69af021f93c6d9331c78aa228084711429160a5bbd15b5
GET /cdn-cgi/challenge-platform/h/b/pat/87a77dbb6932b51e/1714144137936/4971aa96939bcac80f71a22bcb91fe9ff607229e36c9ff3c277f9a07ef3482a9/YESE06Ek68qHaSY HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/081i9/0x4AAAAAAAYS8L_fnh-WQMTr/auto/normal
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 401 Unauthorized
date: Fri, 26 Apr 2024 15:08:59 GMT
content-type: text/plain; charset=UTF-8
content-length: 1
www-authenticate: PrivateToken challenge="AAIAGXBhdC1pc3N1ZXIuY2xvdWRmbGFyZS5jb20gSXGqlpObysgPcaIry5H-n_YHIp42yf88J3-aB-80gqkAGWNoYWxsZW5nZXMuY2xvdWRmbGFyZS5jb20=", token-key="MIIBUjA9BgkqhkiG9w0BAQowMKANMAsGCWCGSAFlAwQCAqEaMBgGCSqGSIb3DQEBCDALBglghkgBZQMEAgKiAwIBMAOCAQ8AMIIBCgKCAQEApc5PUXcXSrXwpeNe3kT6EaAJPDsPBMfFZc7M608yW3JV6YSHiGBLoFiLtNHD3Yj8UsOtWbQeFa2uvS_dYz5MBsoSW4-RbOY-WCB2aGEB-eoRbXl4lJRl0UNGi00lNBgNTil_mTTSNV3ssSkmSY8kwM-5GqBNfJ2kmJPKo02MWiXn1pwc4YXbeATUrYDRvvXUXYZrgaarjDyvHFhnYpD3mqr5qOj_TS_1SCUZ0HIp8ywDX06Xc59cKjzFHEUzD3gWutoK4apMxNt9bWWxcH3D_UL1a1llCxh-knMwTxgvRXS-XHap_ymO2zCuAPNgo1SDCTl4lTQZbVX7VvpDZwMaiQIDAQAB", max-age=20, PrivateToken challenge="AAIALHBwLWlzc3Vlci1wcm9kdWN0aW9uLnJlc2VhcmNoLmNsb3VkZmxhcmUuY29tIElxqpaTm8rID3GiK8uR_p_2ByKeNsn_PCd_mgfvNIKpABljaGFsbGVuZ2VzLmNsb3VkZmxhcmUuY29t", token-key="MIIBUjA9BgkqhkiG9w0BAQowMKANMAsGCWCGSAFlAwQCAqEaMBgGCSqGSIb3DQEBCDALBglghkgBZQMEAgKiAwIBMAOCAQ8AMIIBCgKCAQEA1FEYykHcK8H9rb_u0aFz3CmWgYloQw4YhedoEOAjJ0vy2Axa4f9UG9Dzs4uXS34_h8l6MDo2nRCvLI9lvebilMnTjCn-6D77bewqYxJKUFZW1z2jBIdu03TrETczfEg7kxgKtJE9NXGDjYJcF_iMgzgNA0PEAVM89tUYXXlFy4cUAGlqU2mPpIEOxm5ARsXC-zlLK60fkJ4cOsZRkZa6EExdhmgdwQ0fEJuSOHrBO_-zJn4hUP8q9g4yqkxW2UrfJgD07F4HaHGBEiei06sGDvH2NEPvswEl5dTGxutNrxlU7W24iYhNa2nhjlc53nNb0mKtszv-czVE9UhXyJ7-RQIDAQAB", max-age=20
server: cloudflare
cf-ray: 87a77dc75e11b51e-OSL
alt-svc: h3=":443"; ma=86400
|
|
| challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/flow/ov1/1562415536:1714141620:gYN6YeOsQ_H0c9z1XLu5Z0hgV6fT_QMq1HQ4cq6I0LE/87a77dbb6932b51e/62b5db548307b61 | 104.17.3.184 | | 3.9 kB |
URL challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/flow/ov1/1562415536:1714141620:gYN6YeOsQ_H0c9z1XLu5Z0hgV6fT_QMq1HQ4cq6I0LE/87a77dbb6932b51e/62b5db548307b61 IP104.17.3.184:0
CertificateIssuerCloudflare, Inc. Subjectchallenges.cloudflare.com Fingerprint5F:E4:AA:8C:2E:24:D2:B1:69:9D:13:28:31:5C:65:FA:97:2A:E9:6E ValidityFri, 18 Aug 2023 00:00:00 GMT - Sat, 17 Aug 2024 23:59:59 GMT
File typeASCII text, with very long lines (968), with no line terminators Hash08891232ded58c162505258a5462cbfd 1808df8c068f28b18cda25b793dc4cda7b805834 ed1d8cc0480e741ca9cd9682edfa50b0123398a16a69647211f317ac165bd2e8
POST /cdn-cgi/challenge-platform/h/b/flow/ov1/1562415536:1714141620:gYN6YeOsQ_H0c9z1XLu5Z0hgV6fT_QMq1HQ4cq6I0LE/87a77dbb6932b51e/62b5db548307b61 HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/081i9/0x4AAAAAAAYS8L_fnh-WQMTr/auto/normal
Content-type: application/x-www-form-urlencoded
CF-Challenge: 62b5db548307b61
Content-Length: 38527
Origin: https://challenges.cloudflare.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 26 Apr 2024 15:09:02 GMT
content-type: text/html; charset=UTF-8
cf-chl-out-s: B1hkcDAH6d7AKdKEOrPiw+JuLm/SAHFPD/9fjKAPyt9++d/ooQlXipoCMcFsQGi5XO0lkAToQbcKtxIXFxwFI1oaZiw/s2Iq5X1SRSiDaoSNEKna8jZmoDZ8Wp6yKVJceP7jQKPdSAP8FgeNAUo4Xw==$/UK0xjw8x1dToGqUI4y0rg==
cf-chl-out: onedxnxlSxqgNId9Yd9kILE3YA6zIw+MuHHxn/O3s7wgnX33bqmnexNW7Dj/qlV7Uj1ux2wTIQ8DyjKamSQNWSqO+0Skq5ONr/3OevmGgns=$RTrnKY+IkCi87jnFVujHSg==
vary: accept-encoding
server: cloudflare
cf-ray: 87a77dda5b99b51e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv1/Sp_xOU08DjqDdFe/081i9/0x4AAAAAAAYS8L_fnh-WQMTr/auto/normal | 104.17.3.184 | 200 OK | 26 kB |
URL GET HTTP/3challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv1/Sp_xOU08DjqDdFe/081i9/0x4AAAAAAAYS8L_fnh-WQMTr/auto/normal IP104.17.3.184:443
Requested byhttps://pestukelgroup.com/?lldpodyx=f8e1f2b905c28e0a6436ba0b8adf5d3d1a3f15115840f13162a41c182c55bd5251117494e527a0fadda74b4f568cee20f247d63d5ff043729d61e149ca9e61d6&email=randy.reiss%40aac-contracting.com CertificateIssuerCloudflare, Inc. Subjectchallenges.cloudflare.com Fingerprint5F:E4:AA:8C:2E:24:D2:B1:69:9D:13:28:31:5C:65:FA:97:2A:E9:6E ValidityFri, 18 Aug 2023 00:00:00 GMT - Sat, 17 Aug 2024 23:59:59 GMT
File typeHTML document, ASCII text, with very long lines (41702) Hash16bccd42b64220d3941ee752b10ea818 a0bbd3511b4ed8edb74f397f2f5ac83b989daf3d df5cfb127af7eacf61df5fd92a64aefa0b15bf5b2ae8065459536a96688540df
GET /cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv1/Sp_xOU08DjqDdFe/081i9/0x4AAAAAAAYS8L_fnh-WQMTr/auto/normal HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pestukelgroup.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 26 Apr 2024 15:09:12 GMT
content-type: text/html; charset=UTF-8
document-policy: js-profiling
origin-agent-cluster: ?1
cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
referrer-policy: same-origin
content-security-policy: frame-src https://challenges.cloudflare.com/ blob:; base-uri 'self'
cross-origin-embedder-policy: require-corp
permissions-policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()
accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
critical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
cross-origin-opener-policy: same-origin
cross-origin-resource-policy: cross-origin
vary: accept-encoding
server: cloudflare
cf-ray: 87a77e193a05b51e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/pat/87a77e193a05b51e/1714144152859/28ca235c3e660aaf530849e017a944ce2ede141a7d2de850ebe918de6b46624a/cKmm1zxn7hzly4G | 104.17.3.184 | 401 Unauthorized | 1 B |
URL GET HTTP/3challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/pat/87a77e193a05b51e/1714144152859/28ca235c3e660aaf530849e017a944ce2ede141a7d2de850ebe918de6b46624a/cKmm1zxn7hzly4G IP104.17.3.184:443
Requested byhttps://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv1/Sp_xOU08DjqDdFe/081i9/0x4AAAAAAAYS8L_fnh-WQMTr/auto/normal CertificateIssuerCloudflare, Inc. Subjectchallenges.cloudflare.com Fingerprint5F:E4:AA:8C:2E:24:D2:B1:69:9D:13:28:31:5C:65:FA:97:2A:E9:6E ValidityFri, 18 Aug 2023 00:00:00 GMT - Sat, 17 Aug 2024 23:59:59 GMT
File typevery short file (no magic) Hashff44570aca8241914870afbc310cdb85 58668e7669fd564d99db5d581fcdb6a5618440b5 6da43b944e494e885e69af021f93c6d9331c78aa228084711429160a5bbd15b5
GET /cdn-cgi/challenge-platform/h/b/pat/87a77e193a05b51e/1714144152859/28ca235c3e660aaf530849e017a944ce2ede141a7d2de850ebe918de6b46624a/cKmm1zxn7hzly4G HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv1/Sp_xOU08DjqDdFe/081i9/0x4AAAAAAAYS8L_fnh-WQMTr/auto/normal
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 401 Unauthorized
date: Fri, 26 Apr 2024 15:09:13 GMT
content-type: text/plain; charset=UTF-8
content-length: 1
www-authenticate: PrivateToken challenge="AAIAGXBhdC1pc3N1ZXIuY2xvdWRmbGFyZS5jb20gKMojXD5mCq9TCEngF6lEzi7eFBp9LehQ6-kY3mtGYkoAGWNoYWxsZW5nZXMuY2xvdWRmbGFyZS5jb20=", token-key="MIIBUjA9BgkqhkiG9w0BAQowMKANMAsGCWCGSAFlAwQCAqEaMBgGCSqGSIb3DQEBCDALBglghkgBZQMEAgKiAwIBMAOCAQ8AMIIBCgKCAQEApc5PUXcXSrXwpeNe3kT6EaAJPDsPBMfFZc7M608yW3JV6YSHiGBLoFiLtNHD3Yj8UsOtWbQeFa2uvS_dYz5MBsoSW4-RbOY-WCB2aGEB-eoRbXl4lJRl0UNGi00lNBgNTil_mTTSNV3ssSkmSY8kwM-5GqBNfJ2kmJPKo02MWiXn1pwc4YXbeATUrYDRvvXUXYZrgaarjDyvHFhnYpD3mqr5qOj_TS_1SCUZ0HIp8ywDX06Xc59cKjzFHEUzD3gWutoK4apMxNt9bWWxcH3D_UL1a1llCxh-knMwTxgvRXS-XHap_ymO2zCuAPNgo1SDCTl4lTQZbVX7VvpDZwMaiQIDAQAB", max-age=20, PrivateToken challenge="AAIALHBwLWlzc3Vlci1wcm9kdWN0aW9uLnJlc2VhcmNoLmNsb3VkZmxhcmUuY29tICjKI1w-ZgqvUwhJ4BepRM4u3hQafS3oUOvpGN5rRmJKABljaGFsbGVuZ2VzLmNsb3VkZmxhcmUuY29t", token-key="MIIBUjA9BgkqhkiG9w0BAQowMKANMAsGCWCGSAFlAwQCAqEaMBgGCSqGSIb3DQEBCDALBglghkgBZQMEAgKiAwIBMAOCAQ8AMIIBCgKCAQEA1FEYykHcK8H9rb_u0aFz3CmWgYloQw4YhedoEOAjJ0vy2Axa4f9UG9Dzs4uXS34_h8l6MDo2nRCvLI9lvebilMnTjCn-6D77bewqYxJKUFZW1z2jBIdu03TrETczfEg7kxgKtJE9NXGDjYJcF_iMgzgNA0PEAVM89tUYXXlFy4cUAGlqU2mPpIEOxm5ARsXC-zlLK60fkJ4cOsZRkZa6EExdhmgdwQ0fEJuSOHrBO_-zJn4hUP8q9g4yqkxW2UrfJgD07F4HaHGBEiei06sGDvH2NEPvswEl5dTGxutNrxlU7W24iYhNa2nhjlc53nNb0mKtszv-czVE9UhXyJ7-RQIDAQAB", max-age=20
server: cloudflare
cf-ray: 87a77e1d9f2eb51e-OSL
alt-svc: h3=":443"; ma=86400
|
|
| challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/081i9/0x4AAAAAAAYS8L_fnh-WQMTr/auto/normal | 104.17.3.184 | 200 OK | 195 kB |
URL GET HTTP/3challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/081i9/0x4AAAAAAAYS8L_fnh-WQMTr/auto/normal IP104.17.3.184:443
Requested byhttps://pestukelgroup.com/?lldpodyx=f8e1f2b905c28e0a6436ba0b8adf5d3d1a3f15115840f13162a41c182c55bd5251117494e527a0fadda74b4f568cee20f247d63d5ff043729d61e149ca9e61d6&email=randy.reiss%40aac-contracting.com CertificateIssuerCloudflare, Inc. Subjectchallenges.cloudflare.com Fingerprint5F:E4:AA:8C:2E:24:D2:B1:69:9D:13:28:31:5C:65:FA:97:2A:E9:6E ValidityFri, 18 Aug 2023 00:00:00 GMT - Sat, 17 Aug 2024 23:59:59 GMT
File typeHTML document, ASCII text, with very long lines (41702) Size195 kB (194952 bytes) Hashaab16301b7b4b5adb17746b43cd178fe 38398f85b6740647151b8dac68a0c43606cbfb2f 9d926d65910f3653a939cfe040a15df5a23c5c0c61779c4083bc2e81a03ce5f2
GET /cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/081i9/0x4AAAAAAAYS8L_fnh-WQMTr/auto/normal HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pestukelgroup.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 26 Apr 2024 15:08:57 GMT
content-type: text/html; charset=UTF-8
content-security-policy: frame-src https://challenges.cloudflare.com/ blob:; base-uri 'self'
referrer-policy: same-origin
cross-origin-embedder-policy: require-corp
accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
cross-origin-resource-policy: cross-origin
origin-agent-cluster: ?1
document-policy: js-profiling
permissions-policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()
critical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
cross-origin-opener-policy: same-origin
vary: accept-encoding
server: cloudflare
cf-ray: 87a77dbb6932b51e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=87a77e193a05b51e | 104.17.3.184 | 200 OK | 431 kB |
URL GET HTTP/3challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=87a77e193a05b51e IP104.17.3.184:443
Requested byhttps://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv1/Sp_xOU08DjqDdFe/081i9/0x4AAAAAAAYS8L_fnh-WQMTr/auto/normal CertificateIssuerCloudflare, Inc. Subjectchallenges.cloudflare.com Fingerprint5F:E4:AA:8C:2E:24:D2:B1:69:9D:13:28:31:5C:65:FA:97:2A:E9:6E ValidityFri, 18 Aug 2023 00:00:00 GMT - Sat, 17 Aug 2024 23:59:59 GMT
File typeASCII text, with very long lines (65536), with no line terminators Size431 kB (431439 bytes) Hash3a809e5c8a3658a2bc57644d9684de71 bc8f23ac1c2c72a8eb04c14dd66a9dc200162b7e b3c73ced969db06e0cf66daeb6946b34b57c204fd84631bc87b40f53b2476077
GET /cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=87a77e193a05b51e HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv1/Sp_xOU08DjqDdFe/081i9/0x4AAAAAAAYS8L_fnh-WQMTr/auto/normal
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 26 Apr 2024 15:09:12 GMT
content-type: application/javascript; charset=UTF-8
cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
vary: accept-encoding
server: cloudflare
cf-ray: 87a77e197a82b51e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/i/87a77e193a05b51e/1714144152865/FAUuctesGWVmq-p | 104.17.3.184 | 200 OK | 61 B |
URL GET HTTP/3challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/i/87a77e193a05b51e/1714144152865/FAUuctesGWVmq-p IP104.17.3.184:443
Requested byhttps://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv1/Sp_xOU08DjqDdFe/081i9/0x4AAAAAAAYS8L_fnh-WQMTr/auto/normal CertificateIssuerCloudflare, Inc. Subjectchallenges.cloudflare.com Fingerprint5F:E4:AA:8C:2E:24:D2:B1:69:9D:13:28:31:5C:65:FA:97:2A:E9:6E ValidityFri, 18 Aug 2023 00:00:00 GMT - Sat, 17 Aug 2024 23:59:59 GMT
File typePNG image data, 24 x 3, 8-bit/color RGB, non-interlaced Hash5f19ce6e927bb3c41b7174a5e2ed4428 199732061d4fcd305501f49663f258e70add545a d3aaf8c3d639e27d796a34c39378340baac92f119114ede3aa7b52a399c94731
GET /cdn-cgi/challenge-platform/h/b/i/87a77e193a05b51e/1714144152865/FAUuctesGWVmq-p HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv1/Sp_xOU08DjqDdFe/081i9/0x4AAAAAAAYS8L_fnh-WQMTr/auto/normal
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 26 Apr 2024 15:09:13 GMT
content-type: image/png
content-length: 61
server: cloudflare
cf-ray: 87a77e21cc04b51e-OSL
alt-svc: h3=":443"; ma=86400
|
|
| challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/flow/ov1/1227319651:1714141759:YZL-hXWsXKa-6F59szgIwIYS8AaZeG3zNLk5Jh_BYbw/87a77e193a05b51e/4346a5659280c3a | 104.17.3.184 | 200 OK | 968 B |
URL POST HTTP/3challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/flow/ov1/1227319651:1714141759:YZL-hXWsXKa-6F59szgIwIYS8AaZeG3zNLk5Jh_BYbw/87a77e193a05b51e/4346a5659280c3a IP104.17.3.184:443
Requested byhttps://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv1/Sp_xOU08DjqDdFe/081i9/0x4AAAAAAAYS8L_fnh-WQMTr/auto/normal CertificateIssuerCloudflare, Inc. Subjectchallenges.cloudflare.com Fingerprint5F:E4:AA:8C:2E:24:D2:B1:69:9D:13:28:31:5C:65:FA:97:2A:E9:6E ValidityFri, 18 Aug 2023 00:00:00 GMT - Sat, 17 Aug 2024 23:59:59 GMT
File typeASCII text, with very long lines (968), with no line terminators Hashd33aaf78ca40da334903014da56c8e83 2e3f0119bfc36d1d1b74338aa60d90d98e90fa6a 4876fe817a449668107bc637e2f1cdf8adeeb4e7bab6dd9bfff0e6a082481b73
POST /cdn-cgi/challenge-platform/h/b/flow/ov1/1227319651:1714141759:YZL-hXWsXKa-6F59szgIwIYS8AaZeG3zNLk5Jh_BYbw/87a77e193a05b51e/4346a5659280c3a HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv1/Sp_xOU08DjqDdFe/081i9/0x4AAAAAAAYS8L_fnh-WQMTr/auto/normal
Content-type: application/x-www-form-urlencoded
CF-Challenge: 4346a5659280c3a
Content-Length: 38383
Origin: https://challenges.cloudflare.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 26 Apr 2024 15:09:16 GMT
content-type: text/html; charset=UTF-8
cf-chl-out-s: s5c/Oy/G8jCD6YBHwpuIiVbBQjk51MdxrsAa50B0+1Izjs0DftpGcEChvJKGWNeTSXumudZx/GQ8XbU8DdCf0xiS2S5QJWT/abcJuNy9Z4z64vYh6WONPn9liSzGsgIJrXac0elCRBhrIgW5jm8dFA==$zEsjX7thABMmyxYzG/HADg==
cf-chl-out: 2A2dfyD4JwLieMJxqin+V76rBurQtzbnhwn5OxGuCqG85sb0On7kz/aPkPP+gHLJTS8Wv3DCeqxIGBPbAEprtDqTdTYuvrgKcCh0MyYmc0M=$YUCoaGKBSjpNcG1Rf1LT7g==
vary: accept-encoding
server: cloudflare
cf-ray: 87a77e332f2db51e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/flow/ov1/1227319651:1714141759:YZL-hXWsXKa-6F59szgIwIYS8AaZeG3zNLk5Jh_BYbw/87a77e193a05b51e/4346a5659280c3a | 104.17.3.184 | 200 OK | 23 kB |
URL POST HTTP/3challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/flow/ov1/1227319651:1714141759:YZL-hXWsXKa-6F59szgIwIYS8AaZeG3zNLk5Jh_BYbw/87a77e193a05b51e/4346a5659280c3a IP104.17.3.184:443
Requested byhttps://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv1/Sp_xOU08DjqDdFe/081i9/0x4AAAAAAAYS8L_fnh-WQMTr/auto/normal CertificateIssuerCloudflare, Inc. Subjectchallenges.cloudflare.com Fingerprint5F:E4:AA:8C:2E:24:D2:B1:69:9D:13:28:31:5C:65:FA:97:2A:E9:6E ValidityFri, 18 Aug 2023 00:00:00 GMT - Sat, 17 Aug 2024 23:59:59 GMT
File typeASCII text, with very long lines (22588), with no line terminators Hashf39c113f0cd350061040b1e0013fdf14 b1c5a4137c88ec0282e5057d0501d8f639f75f78 8cf683d2857951388c664c6b9cdd67f8ac6b3ba47394afbe772f318a8da6c292
POST /cdn-cgi/challenge-platform/h/b/flow/ov1/1227319651:1714141759:YZL-hXWsXKa-6F59szgIwIYS8AaZeG3zNLk5Jh_BYbw/87a77e193a05b51e/4346a5659280c3a HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv1/Sp_xOU08DjqDdFe/081i9/0x4AAAAAAAYS8L_fnh-WQMTr/auto/normal
Content-type: application/x-www-form-urlencoded
CF-Challenge: 4346a5659280c3a
Content-Length: 25792
Origin: https://challenges.cloudflare.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 26 Apr 2024 15:09:14 GMT
content-type: text/plain; charset=UTF-8
cf-chl-gen: 9HmLWoaI4MH5DVLwVxLsjrfymuFRxgt15qXJRoyi7GuYGzGVjwiqC3OhAjDofxTO$8OU94TI42y5BxHTJ9g/xpA==
vary: accept-encoding
server: cloudflare
cf-ray: 87a77e22bcfeb51e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| pestukelgroup.com/favicon.ico | 5.230.73.121 | 500 Internal Server Error | 22 B |
URL GET HTTP/1.1pestukelgroup.com/favicon.ico IP5.230.73.121:443
Requested byhttps://pestukelgroup.com/?lldpodyx=f8e1f2b905c28e0a6436ba0b8adf5d3d1a3f15115840f13162a41c182c55bd5251117494e527a0fadda74b4f568cee20f247d63d5ff043729d61e149ca9e61d6&email=randy.reiss%40aac-contracting.com CertificateIssuerLet's Encrypt Subjectpestukelgroup.com Fingerprint3F:9F:5F:2F:E6:B6:89:C2:7A:EC:39:D8:3C:D8:74:E1:36:8E:B4:65 ValidityThu, 25 Apr 2024 22:31:04 GMT - Wed, 24 Jul 2024 22:31:03 GMT
File typeASCII text, with no line terminators Hash6aab5444a217195068e4b25509bc0c50 7b22eaf7eaa9b7e1f664a0632d3894d406fe7933 fc5525d427bfa27792d3a87411be241c047d07f07c18e2fc36bf00b1c2e33d07
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Microsoft Outlook |
GET /favicon.ico HTTP/1.1
Host: pestukelgroup.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pestukelgroup.com/?lldpodyx=f8e1f2b905c28e0a6436ba0b8adf5d3d1a3f15115840f13162a41c182c55bd5251117494e527a0fadda74b4f568cee20f247d63d5ff043729d61e149ca9e61d6&email=randy.reiss%40aac-contracting.com
Cookie: qPdM=JyxjKSrEhdZe; qPdM.sig=t_v4LUhnt-204H9KqpHJvdCtc9o
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 500 Internal Server Error
Date: Fri, 26 Apr 2024 15:08:57 GMT
Connection: keep-alive
Keep-Alive: timeout=5
Transfer-Encoding: chunked
|
|
| challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/flow/ov1/1227319651:1714141759:YZL-hXWsXKa-6F59szgIwIYS8AaZeG3zNLk5Jh_BYbw/87a77e193a05b51e/4346a5659280c3a | 104.17.3.184 | 200 OK | 91 kB |
URL POST HTTP/3challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/flow/ov1/1227319651:1714141759:YZL-hXWsXKa-6F59szgIwIYS8AaZeG3zNLk5Jh_BYbw/87a77e193a05b51e/4346a5659280c3a IP104.17.3.184:443
Requested byhttps://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv1/Sp_xOU08DjqDdFe/081i9/0x4AAAAAAAYS8L_fnh-WQMTr/auto/normal CertificateIssuerCloudflare, Inc. Subjectchallenges.cloudflare.com Fingerprint5F:E4:AA:8C:2E:24:D2:B1:69:9D:13:28:31:5C:65:FA:97:2A:E9:6E ValidityFri, 18 Aug 2023 00:00:00 GMT - Sat, 17 Aug 2024 23:59:59 GMT
File typeASCII text, with very long lines (65536), with no line terminators Hash1784b59317f6f156166653287c8d4354 471dcde815e4a49c3848809c12144efecd0733f1 aba7cb00f88acfd23a97f72ed3b042f8f6aef66324d977bfffab8c8173165cd1
POST /cdn-cgi/challenge-platform/h/b/flow/ov1/1227319651:1714141759:YZL-hXWsXKa-6F59szgIwIYS8AaZeG3zNLk5Jh_BYbw/87a77e193a05b51e/4346a5659280c3a HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv1/Sp_xOU08DjqDdFe/081i9/0x4AAAAAAAYS8L_fnh-WQMTr/auto/normal
Content-type: application/x-www-form-urlencoded
CF-Challenge: 4346a5659280c3a
Content-Length: 2742
Origin: https://challenges.cloudflare.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 26 Apr 2024 15:09:12 GMT
content-type: text/plain; charset=UTF-8
cf-chl-gen: T2iLpB1ZADhdz/dt4gsHwxqIAlCxVAkzvTCj+aV1IIEx3iuv1eGbCguvf03DKHCeRDG1XQCARrSyONhm3S3GKiJ1S2tHqLYMtpUeWYrpslZA9kmAUoEk1e7abj8iVhA6JOCAly0PaHXWZpn5qQsJKX+6AtSC6yFzwUPj6kTNKDYHQ+1bilHEmj9JvLvGieLX0NMoSjwIPgokH+unxOQxq1Y3lZSv7ABPyDY+hOF/VSFMZjwL70yJYGf827uOiakzYxRZbwBEmU01+2XTnPR+E8swKEOLk2nghusLad77B6EidDnayHLLCPsP4Uqm4smN7gvFJU06jqo2arYRXYxdLnFgAkGqW03C4w8ZbiMXMKEEX4khb8biu+KgkuMhenmT$U/njNje7HfexvtUZb8ms9A==
vary: accept-encoding
server: cloudflare
cf-ray: 87a77e1b4c78b51e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|