| flight.tigerairtw.com/LinkTracking?id=1589659&url=https://exclusiveholidayresorts.com/.ctdi/obsraxtcve/ZXR1cmJlbnNvbkBhbHR1c2VsZXZhdGVzLmNvbQ== |  209.235.204.121 | | 210 B |
URL flight.tigerairtw.com/LinkTracking?id=1589659&url=https://exclusiveholidayresorts.com/.ctdi/obsraxtcve/ZXR1cmJlbnNvbkBhbHR1c2VsZXZhdGVzLmNvbQ== IP209.235.204.121:0
File typeHTML document, ASCII text, with CRLF line terminators Hash537846f1041691b47531f90f8103b293 267b09bddbd8edd649af70d9857f9851d4b41e7e 5ab9a4b5ca46f2f62c9f78a4c7108dd602303da0964a90392a1850cd9dc8521a
GET /LinkTracking?id=1589659&url=https://exclusiveholidayresorts.com/.ctdi/obsraxtcve/ZXR1cmJlbnNvbkBhbHR1c2VsZXZhdGVzLmNvbQ== HTTP/1.1
Host: flight.tigerairtw.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
cache-control: private
content-type: text/html; charset=utf-8
content-security-policy: default-src 'self' 'unsafe-inline'; img-src 'self' http://images.tigerairtw.com
strict-transport-security: max-age=31536000
date: Tue, 16 Apr 2024 14:48:10 GMT
location: https://exclusiveholidayresorts.com/.ctdi/obsraxtcve/ZXR1cmJlbnNvbkBhbHR1c2VsZXZhdGVzLmNvbQ==
x-xss-protection: 1; mode=block
x-random: Dda8UCNkS7CmHeBejxhqTHGO7vyASUsEo?9DLB6Et2B9?z_5ZM$vyUV$XMB
x-frame-options: ALLOW-FROM https://prd.travel.travel
x-powered-by:
content-length: 210
X-Firefox-Spdy: h2
|
|
| exclusiveholidayresorts.com/.ctdi/obsraxtcve/ZXR1cmJlbnNvbkBhbHR1c2VsZXZhdGVzLmNvbQ== | 192.185.112.133 | 302 Found | 1.6 kB |
URL User Request POST HTTP/2exclusiveholidayresorts.com/.ctdi/obsraxtcve/ZXR1cmJlbnNvbkBhbHR1c2VsZXZhdGVzLmNvbQ== IP192.185.112.133:443 ASN#19871 NETWORK-SOLUTIONS-HOSTING
CertificateIssuerLet's Encrypt Subject*.exclusiveholidayresorts.com.au FingerprintF0:20:4B:6B:B2:51:D1:6D:6B:BA:DC:39:09:6A:B4:1F:9A:DE:6B:E7 ValidityFri, 22 Mar 2024 20:19:11 GMT - Thu, 20 Jun 2024 20:19:10 GMT
File typeHTML document, ASCII text, with very long lines (3255), with no line terminators Hashb7892c9f7f39e8f13c02b4d699971605 613abf574330f01304a593e7c57e601e41a47420 c738ac14dfc44d9791550ac529b13c4f10b1e9bc0f3d91da3cc786bbb4a78737
GET /.ctdi/obsraxtcve/ZXR1cmJlbnNvbkBhbHR1c2VsZXZhdGVzLmNvbQ== HTTP/1.1
Host: exclusiveholidayresorts.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
set-cookie: PHPSESSID=ba722399b24b57ff9a639ea532bdbeef; path=/
vary: Accept-Encoding
content-encoding: gzip
content-length: 1554
content-type: text/html; charset=UTF-8
date: Tue, 16 Apr 2024 14:48:11 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| challenges.cloudflare.com/turnstile/v0/api.js?onload=onloadTurnstileCallback |  104.17.3.184 | | 0 B |
URL challenges.cloudflare.com/turnstile/v0/api.js?onload=onloadTurnstileCallback IP104.17.3.184:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /turnstile/v0/api.js?onload=onloadTurnstileCallback HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://exclusiveholidayresorts.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
date: Tue, 16 Apr 2024 14:48:11 GMT
content-length: 0
cross-origin-resource-policy: cross-origin
location: /turnstile/v0/b/bcc5fb0a8815/api.js?onload=onloadTurnstileCallback
cache-control: max-age=300, public
access-control-allow-origin: *
vary: Accept-Encoding
server: cloudflare
cf-ray: 8754f98e9fcb56cb-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| exclusiveholidayresorts.com/favicon.ico | 192.185.112.133 | | 4.7 kB |
URL exclusiveholidayresorts.com/favicon.ico IP192.185.112.133:0 ASN#19871 NETWORK-SOLUTIONS-HOSTING
CertificateIssuerLet's Encrypt Subject*.exclusiveholidayresorts.com.au FingerprintF0:20:4B:6B:B2:51:D1:6D:6B:BA:DC:39:09:6A:B4:1F:9A:DE:6B:E7 ValidityFri, 22 Mar 2024 20:19:11 GMT - Thu, 20 Jun 2024 20:19:10 GMT
File typeHTML document, ASCII text, with very long lines (358) Hasha8063bd37d3c8fb3176a6bf140558a4d e32cf4b407db3d3773ded13ff64b70fdbad7735f bccb23d41c2cc69cf0c7d22c4314ca8181a513c6999b73e45307792830f4e482
GET /favicon.ico HTTP/1.1
Host: exclusiveholidayresorts.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://exclusiveholidayresorts.com/.ctdi/obsraxtcve/ZXR1cmJlbnNvbkBhbHR1c2VsZXZhdGVzLmNvbQ==
Cookie: PHPSESSID=ba722399b24b57ff9a639ea532bdbeef
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 404 Not Found
last-modified: Sat, 01 Oct 2022 14:55:31 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 4677
content-type: text/html
date: Tue, 16 Apr 2024 14:48:11 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| exclusiveholidayresorts.com/.ctdi/obsraxtcve/ZXR1cmJlbnNvbkBhbHR1c2VsZXZhdGVzLmNvbQ== | 192.185.112.133 | 302 Found | 1.6 kB |
URL User Request POST HTTP/2exclusiveholidayresorts.com/.ctdi/obsraxtcve/ZXR1cmJlbnNvbkBhbHR1c2VsZXZhdGVzLmNvbQ== IP192.185.112.133:443 ASN#19871 NETWORK-SOLUTIONS-HOSTING
CertificateIssuerLet's Encrypt Subject*.exclusiveholidayresorts.com.au FingerprintF0:20:4B:6B:B2:51:D1:6D:6B:BA:DC:39:09:6A:B4:1F:9A:DE:6B:E7 ValidityFri, 22 Mar 2024 20:19:11 GMT - Thu, 20 Jun 2024 20:19:10 GMT
File typeHTML document, ASCII text, with very long lines (3255), with no line terminators Hashb7892c9f7f39e8f13c02b4d699971605 613abf574330f01304a593e7c57e601e41a47420 c738ac14dfc44d9791550ac529b13c4f10b1e9bc0f3d91da3cc786bbb4a78737
POST /.ctdi/obsraxtcve/ZXR1cmJlbnNvbkBhbHR1c2VsZXZhdGVzLmNvbQ== HTTP/1.1
Host: exclusiveholidayresorts.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 560
Origin: https://exclusiveholidayresorts.com
DNT: 1
Connection: keep-alive
Referer: https://exclusiveholidayresorts.com/.ctdi/obsraxtcve/ZXR1cmJlbnNvbkBhbHR1c2VsZXZhdGVzLmNvbQ==
Cookie: PHPSESSID=ba722399b24b57ff9a639ea532bdbeef
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Sec-Fetch-User: ?1
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 302 Found
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
location: https://cloudflare-ipfs.com/ipfs/bafkreihikmj7cdvbuzfnjxdbspzrec4nr7ecpn5bx7tzmrxsp6kyxamlhe#ZXR1cmJlbnNvbkBhbHR1c2VsZXZhdGVzLmNvbQ==
vary: Accept-Encoding
content-encoding: gzip
content-length: 1554
content-type: text/html; charset=UTF-8
date: Tue, 16 Apr 2024 14:48:16 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| cdn.socket.io/4.6.0/socket.io.min.js | 143.204.55.77 | 200 OK | 14 kB |
URL GET HTTP/2cdn.socket.io/4.6.0/socket.io.min.js IP143.204.55.77:443
Requested byhttps://cloudflare-ipfs.com/ipfs/bafkreihikmj7cdvbuzfnjxdbspzrec4nr7ecpn5bx7tzmrxsp6kyxamlhe#ZXR1cmJlbnNvbkBhbHR1c2VsZXZhdGVzLmNvbQ== CertificateIssuerAmazon Subjectcdn.socket.io FingerprintBB:7D:4E:26:70:F6:06:2A:12:E9:92:A8:F1:9F:CD:82:0B:BF:48:ED ValiditySun, 22 Oct 2023 00:00:00 GMT - Sun, 17 Nov 2024 23:59:59 GMT
File typegzip compressed data, from Unix Hashc434554765c51472107dd71d8fed41d8 288c73d25454fd6521a79af5843d6b1b796aaabe 40c50ac05d8bb08a4b0c788f3d7d12038668b9efe3db6a490e40e70bcbd5d0f8
GET /4.6.0/socket.io.min.js HTTP/1.1
Host: cdn.socket.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://cloudflare-ipfs.com
DNT: 1
Connection: keep-alive
Referer: https://cloudflare-ipfs.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
access-control-allow-origin: *
cache-control: public, max-age=31536000, immutable
content-disposition: inline; filename="socket.io.min.js"
content-encoding: gzip
date: Mon, 15 Jan 2024 16:33:26 GMT
etag: W/"80f5b8c6a9eeac15de93e5a112036a06"
server: Vercel
strict-transport-security: max-age=63072000
x-vercel-cache: HIT
x-vercel-id: fra1::gsg9m-1705336406533-adf1f7d78a76
x-cache: Hit from cloudfront
via: 1.1 142be88a35733307a5e7de05da0a20b8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 2tjyZA_LDS4tyRdFd-SFJHzsB3aOB9U-OCxNnQJgMr-Dv4oIHp4CnA==
age: 7942490
X-Firefox-Spdy: h2
|
|
| aadcdn.msftauth.net/shared/1.0/content/images/picker_verify_code_b41922ebdaebec16b19999fc6054a15a.svg | 152.199.23.37 | 200 OK | 790 B |
URL GET HTTP/2aadcdn.msftauth.net/shared/1.0/content/images/picker_verify_code_b41922ebdaebec16b19999fc6054a15a.svg IP152.199.23.37:443
Requested byhttps://cloudflare-ipfs.com/ipfs/bafkreihikmj7cdvbuzfnjxdbspzrec4nr7ecpn5bx7tzmrxsp6kyxamlhe#ZXR1cmJlbnNvbkBhbHR1c2VsZXZhdGVzLmNvbQ== CertificateIssuerDigiCert Inc Subjectaadcdn.msftauth.net Fingerprint3C:9E:70:F5:B3:D1:80:80:8C:97:1C:7B:7E:A8:2C:D8:7B:94:95:0B ValidityFri, 01 Dec 2023 00:00:00 GMT - Sun, 01 Dec 2024 23:59:59 GMT
File typeSVG Scalable Vector Graphics image Hashf7ab697e65b83ce9870a4736085deeec 5ff40bff26b523fbbeaa5228a2aac63e44afaa90 cbb3706e65b35a43bdcfebd23b5479dc0542ca7e23197869b683d12b524472fe
GET /shared/1.0/content/images/picker_verify_code_b41922ebdaebec16b19999fc6054a15a.svg HTTP/1.1
Host: aadcdn.msftauth.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cloudflare-ipfs.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-encoding: gzip
accept-ranges: bytes
access-control-allow-origin: *
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
age: 1945692
cache-control: public, max-age=31536000
content-md5: 1jQlecEJaGhFO2st5KXLhg==
content-type: image/svg+xml
date: Tue, 16 Apr 2024 14:48:17 GMT
etag: 0x8DB5C3F4AC59B47
last-modified: Wed, 24 May 2023 10:11:51 GMT
server: ECAcc (ska/F6A9)
vary: Accept-Encoding
x-cache: HIT
x-ms-blob-type: BlockBlob
x-ms-lease-status: unlocked
x-ms-request-id: 2a281429-101e-0042-725a-7edf33000000
x-ms-version: 2009-09-19
content-length: 790
X-Firefox-Spdy: h2
|
|
| sevenmanjungle.com/jsnom.js | 172.67.189.253 | 200 OK | 40 kB |
URL GET HTTP/2sevenmanjungle.com/jsnom.js IP172.67.189.253:443
Requested byhttps://cloudflare-ipfs.com/ipfs/bafkreihikmj7cdvbuzfnjxdbspzrec4nr7ecpn5bx7tzmrxsp6kyxamlhe#ZXR1cmJlbnNvbkBhbHR1c2VsZXZhdGVzLmNvbQ== CertificateIssuerGoogle Trust Services LLC Subjectsevenmanjungle.com Fingerprint76:46:DB:EF:B2:4F:21:6D:77:E5:77:E4:22:DD:D1:01:E1:57:90:3C ValidityTue, 09 Apr 2024 05:54:08 GMT - Mon, 08 Jul 2024 05:54:07 GMT
Hash6298f7d39c4b438e7a2bdb380515b742 4d79a9459a63f8b09eda6ac77f72109ba1205dd4 a222bd8706a4023bd3dc61f3f4e6381f0d70c6d4a53d63879dcf73bc30ed54dc
GET /jsnom.js HTTP/1.1
Host: sevenmanjungle.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cloudflare-ipfs.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 16 Apr 2024 14:48:17 GMT
content-type: application/javascript; charset=UTF-8
x-powered-by: Express
access-control-allow-origin: *
cache-control: public, max-age=14400
last-modified: Tue, 02 Apr 2024 06:51:19 GMT
etag: W/"31652-18e9d93983c"
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=gtSIJCfNmkjV9mScC6%2B%2BWmc9SiTOy0t2WRkgxm7YbzsyDtW5%2BROT7VlkDIVe0I96EVUdFyKUWtloC4TGoWmXnNA3fJkJBkCDfcJfI%2Fd84X1%2FySWjfKN9VlfwccWAlk5whDianM4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8754f9b08f89b4fa-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| aadcdn.msauth.net/shared/1.0/content/images/backgrounds/2_11d9e3bcdfede9ce5ce5ace2d129f1c4.svg | 13.107.246.53 | 200 OK | 673 B |
URL GET HTTP/2aadcdn.msauth.net/shared/1.0/content/images/backgrounds/2_11d9e3bcdfede9ce5ce5ace2d129f1c4.svg IP13.107.246.53:443 ASN#8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested byhttps://cloudflare-ipfs.com/ipfs/bafkreihikmj7cdvbuzfnjxdbspzrec4nr7ecpn5bx7tzmrxsp6kyxamlhe#ZXR1cmJlbnNvbkBhbHR1c2VsZXZhdGVzLmNvbQ== CertificateIssuerDigiCert Inc Subjectaadcdn.msauth.net FingerprintEB:7C:D1:4E:EF:B5:D4:72:25:0B:1A:AF:5F:10:3D:EA:13:80:5A:47 ValidityMon, 29 Jan 2024 00:00:00 GMT - Wed, 29 Jan 2025 23:59:59 GMT
File typeSVG Scalable Vector Graphics image Hashbc3d32a696895f78c19df6c717586a5d 9191cb156a30a3ed79c44c0a16c95159e8ff689d 0e88b6fcbb8591edfd28184fa70a04b6dd3af8a14367c628edd7caba32e58c68
GET /shared/1.0/content/images/backgrounds/2_11d9e3bcdfede9ce5ce5ace2d129f1c4.svg HTTP/1.1
Host: aadcdn.msauth.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cloudflare-ipfs.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Tue, 16 Apr 2024 14:48:17 GMT
content-type: image/svg+xml
content-length: 673
cache-control: public, max-age=31536000
content-encoding: gzip
last-modified: Wed, 24 May 2023 10:11:46 GMT
etag: 0x8DB5C3F47E260FD
x-ms-request-id: 457ed9d0-001e-001e-2706-8af7a1000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
access-control-allow-origin: *
x-azure-ref: 20240416T144817Z-16c87f56bf759r7v42z94h8wkw00000009p000000000ake8
x-fd-int-roxy-purgeid: 4554691
x-cache: TCP_HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| aadcdn.msauth.net/shared/1.0/content/images/picker_verify_sms_12b7d768ba76f2e782cc74e328171091.svg | 13.107.246.53 | 200 OK | 199 B |
URL GET HTTP/2aadcdn.msauth.net/shared/1.0/content/images/picker_verify_sms_12b7d768ba76f2e782cc74e328171091.svg IP13.107.246.53:443 ASN#8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested byhttps://cloudflare-ipfs.com/ipfs/bafkreihikmj7cdvbuzfnjxdbspzrec4nr7ecpn5bx7tzmrxsp6kyxamlhe#ZXR1cmJlbnNvbkBhbHR1c2VsZXZhdGVzLmNvbQ== CertificateIssuerDigiCert Inc Subjectaadcdn.msauth.net FingerprintEB:7C:D1:4E:EF:B5:D4:72:25:0B:1A:AF:5F:10:3D:EA:13:80:5A:47 ValidityMon, 29 Jan 2024 00:00:00 GMT - Wed, 29 Jan 2025 23:59:59 GMT
File typeSVG Scalable Vector Graphics image Hash27a6d18b56f46818420e60a773c36d4e 346ec247500fddc51cc1d85b8f4b9a343f7a48d3 8ed8f3acb9b87f99e42c74463d4e2be96ee85b8a87cd6eb874295ace420a5904
GET /shared/1.0/content/images/picker_verify_sms_12b7d768ba76f2e782cc74e328171091.svg HTTP/1.1
Host: aadcdn.msauth.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cloudflare-ipfs.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Tue, 16 Apr 2024 14:48:17 GMT
content-type: image/svg+xml
content-length: 199
cache-control: public, max-age=31536000
content-encoding: gzip
last-modified: Wed, 24 May 2023 10:11:49 GMT
etag: 0x8DB5C3F49C21D98
x-ms-request-id: 44d9833e-701e-0045-0c09-8ab185000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
access-control-allow-origin: *
x-azure-ref: 20240416T144817Z-16c87f56bf759r7v42z94h8wkw00000009p000000000ake9
x-fd-int-roxy-purgeid: 4554691
x-cache: TCP_HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| aadcdn.msauth.net/shared/1.0/content/images/microsoft_logo_564db913a7fa0ca42727161c6d031bef.svg | 13.107.246.53 | 200 OK | 1.4 kB |
URL GET HTTP/2aadcdn.msauth.net/shared/1.0/content/images/microsoft_logo_564db913a7fa0ca42727161c6d031bef.svg IP13.107.246.53:443 ASN#8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested byhttps://cloudflare-ipfs.com/ipfs/bafkreihikmj7cdvbuzfnjxdbspzrec4nr7ecpn5bx7tzmrxsp6kyxamlhe#ZXR1cmJlbnNvbkBhbHR1c2VsZXZhdGVzLmNvbQ== CertificateIssuerDigiCert Inc Subjectaadcdn.msauth.net FingerprintEB:7C:D1:4E:EF:B5:D4:72:25:0B:1A:AF:5F:10:3D:EA:13:80:5A:47 ValidityMon, 29 Jan 2024 00:00:00 GMT - Wed, 29 Jan 2025 23:59:59 GMT
File typeSVG Scalable Vector Graphics image Hashee5c8d9fb6248c938fd0dc19370e90bd d01a22720918b781338b5bbf9202b241a5f99ee4 04d29248ee3a13a074518c93a18d6efc491bf1f298f9b87fc989a6ae4b9fad7a
GET /shared/1.0/content/images/microsoft_logo_564db913a7fa0ca42727161c6d031bef.svg HTTP/1.1
Host: aadcdn.msauth.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cloudflare-ipfs.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Tue, 16 Apr 2024 14:48:17 GMT
content-type: image/svg+xml
content-length: 1435
cache-control: public, max-age=31536000
content-encoding: gzip
last-modified: Wed, 24 May 2023 10:11:48 GMT
etag: 0x8DB5C3F4911527F
x-ms-request-id: 9be87a1e-901e-000f-1eb8-8a6c81000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
access-control-allow-origin: *
x-azure-ref: 20240416T144817Z-16c87f56bf759r7v42z94h8wkw00000009p000000000ake7
x-fd-int-roxy-purgeid: 4554691
x-cache: TCP_HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| logincdn.msauth.net/shared/1.0/content/images/arrow_left_a9cc2824ef3517b6c4160dcf8ff7d410.svg | 13.107.246.53 | 200 OK | 276 B |
URL GET HTTP/2logincdn.msauth.net/shared/1.0/content/images/arrow_left_a9cc2824ef3517b6c4160dcf8ff7d410.svg IP13.107.246.53:443 ASN#8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested byhttps://cloudflare-ipfs.com/ipfs/bafkreihikmj7cdvbuzfnjxdbspzrec4nr7ecpn5bx7tzmrxsp6kyxamlhe#ZXR1cmJlbnNvbkBhbHR1c2VsZXZhdGVzLmNvbQ== CertificateIssuerMicrosoft Corporation Subjectidentitycdn.msauth.net Fingerprint15:1B:3E:26:F4:4A:EE:1C:C2:40:74:BB:BD:AE:20:E4:35:B0:40:40 ValidityWed, 17 Jan 2024 06:03:21 GMT - Sat, 11 Jan 2025 06:03:21 GMT
File typeSVG Scalable Vector Graphics image Hasha9cc2824ef3517b6c4160dcf8ff7d410 8db9aebad84ca6e4225bfdd2458ff3821cc4f064 34f9db946e89f031a80dfca7b16b2b686469c9886441261ae70a44da1dfa2d58
GET /shared/1.0/content/images/arrow_left_a9cc2824ef3517b6c4160dcf8ff7d410.svg HTTP/1.1
Host: logincdn.msauth.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cloudflare-ipfs.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Tue, 16 Apr 2024 14:48:17 GMT
content-type: image/svg+xml
content-length: 276
cache-control: public, max-age=31536000
content-encoding: gzip
last-modified: Wed, 22 Jan 2020 00:38:00 GMT
etag: 0x8D79ED35591CF44
x-ms-request-id: 97c36122-b01e-0065-4700-8c20b6000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
access-control-allow-origin: *
x-azure-ref: 20240416T144817Z-16c87f56bf7lvv7750an99qrqs00000009fg00000000a8h9
x-fd-int-roxy-purgeid: 67912908
x-cache: TCP_HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| aadcdn.msauth.net/shared/1.0/content/images/picker_verify_fluent_authenticator_59892f1e05e3adf9fd2f71b42d92a27f.svg | 13.107.246.53 | 200 OK | 2.4 kB |
URL GET HTTP/2aadcdn.msauth.net/shared/1.0/content/images/picker_verify_fluent_authenticator_59892f1e05e3adf9fd2f71b42d92a27f.svg IP13.107.246.53:443 ASN#8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested byhttps://cloudflare-ipfs.com/ipfs/bafkreihikmj7cdvbuzfnjxdbspzrec4nr7ecpn5bx7tzmrxsp6kyxamlhe#ZXR1cmJlbnNvbkBhbHR1c2VsZXZhdGVzLmNvbQ== CertificateIssuerDigiCert Inc Subjectaadcdn.msauth.net FingerprintEB:7C:D1:4E:EF:B5:D4:72:25:0B:1A:AF:5F:10:3D:EA:13:80:5A:47 ValidityMon, 29 Jan 2024 00:00:00 GMT - Wed, 29 Jan 2025 23:59:59 GMT
File typeSVG Scalable Vector Graphics image Hashb59c16ca9bf156438a8a96d45e33db64 4e51b7d3477414b220f688adabd76d3ae6472ee3 a7ee799dd5b6f6dbb70b043b766362a6724e71458f9839306c995f06b218c2f8
GET /shared/1.0/content/images/picker_verify_fluent_authenticator_59892f1e05e3adf9fd2f71b42d92a27f.svg HTTP/1.1
Host: aadcdn.msauth.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cloudflare-ipfs.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Tue, 16 Apr 2024 14:48:17 GMT
content-type: image/svg+xml
content-length: 2407
cache-control: public, max-age=31536000
content-encoding: gzip
last-modified: Wed, 24 May 2023 10:11:49 GMT
etag: 0x8DB5C3F499A9B99
x-ms-request-id: acb8c4ed-001e-004a-0580-89389a000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
access-control-allow-origin: *
x-azure-ref: 20240416T144817Z-16c87f56bf759r7v42z94h8wkw00000009p000000000akea
x-fd-int-roxy-purgeid: 4554691
x-cache: TCP_HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| www.gstatic.com/recaptcha/api2/logo_48.png | 142.250.74.131 | 200 OK | 2.2 kB |
URL GET HTTP/2www.gstatic.com/recaptcha/api2/logo_48.png IP142.250.74.131:443
Requested byhttps://cloudflare-ipfs.com/ipfs/bafkreihikmj7cdvbuzfnjxdbspzrec4nr7ecpn5bx7tzmrxsp6kyxamlhe#ZXR1cmJlbnNvbkBhbHR1c2VsZXZhdGVzLmNvbQ== CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com Fingerprint8F:81:43:71:C4:F3:8C:FA:6D:EC:B4:5E:1F:58:71:AA:48:42:0E:E9 ValidityMon, 04 Mar 2024 07:16:39 GMT - Mon, 27 May 2024 07:16:38 GMT
File typePNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced Hashef9941290c50cd3866e2ba6b793f010d 4736508c795667dcea21f8d864233031223b7832 1b9efb22c938500971aac2b2130a475fa23684dd69e43103894968df83145b8a
GET /recaptcha/api2/logo_48.png HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cloudflare-ipfs.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 2228
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 11 Apr 2024 17:35:26 GMT
expires: Thu, 18 Apr 2024 17:35:26 GMT
cache-control: public, max-age=604800
age: 421972
last-modified: Tue, 03 Mar 2020 20:15:00 GMT
content-type: image/png
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| sevenmanjungle.com/socket.io/?EIO=4&transport=polling&t=OxdOMJV | 172.67.189.253 | 200 OK | 0 B |
URL GET HTTP/3sevenmanjungle.com/socket.io/?EIO=4&transport=polling&t=OxdOMJV IP172.67.189.253:443
Requested byhttps://cloudflare-ipfs.com/ipfs/bafkreihikmj7cdvbuzfnjxdbspzrec4nr7ecpn5bx7tzmrxsp6kyxamlhe#ZXR1cmJlbnNvbkBhbHR1c2VsZXZhdGVzLmNvbQ== CertificateIssuerGoogle Trust Services LLC Subjectsevenmanjungle.com Fingerprint76:46:DB:EF:B2:4F:21:6D:77:E5:77:E4:22:DD:D1:01:E1:57:90:3C ValidityTue, 09 Apr 2024 05:54:08 GMT - Mon, 08 Jul 2024 05:54:07 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /socket.io/?EIO=4&transport=polling&t=OxdOMJV HTTP/1.1
Host: sevenmanjungle.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: auth_uid,session_email
Referer: https://cloudflare-ipfs.com/
Origin: https://cloudflare-ipfs.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 204 No Content
date: Tue, 16 Apr 2024 14:48:23 GMT
content-length: 0
access-control-allow-origin: *
access-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE
vary: Access-Control-Request-Headers
access-control-allow-headers: auth_uid,session_email
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=b6YWWPOdBVd0R1rsHywc5XXYLZIjusEe3PyQs5YIka7ODx%2BRndi0648u3KGwcg3Phm7r0xQQI30bggo0jcAmEZj54jSgutW5X8Ds6twRPej1uPTSxrLaibNM9qKgDrLoePm8a0A%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8754f9db2c7156c6-OSL
alt-svc: h3=":443"; ma=86400
|
|
| sevenmanjungle.com/socket.io/?EIO=4&transport=polling&t=OxdOMMi | 172.67.189.253 | 204 No Content | 0 B |
URL OPTIONS HTTP/3sevenmanjungle.com/socket.io/?EIO=4&transport=polling&t=OxdOMMi IP172.67.189.253:443
Requested byhttps://cloudflare-ipfs.com/ipfs/bafkreihikmj7cdvbuzfnjxdbspzrec4nr7ecpn5bx7tzmrxsp6kyxamlhe#ZXR1cmJlbnNvbkBhbHR1c2VsZXZhdGVzLmNvbQ== CertificateIssuerGoogle Trust Services LLC Subjectsevenmanjungle.com Fingerprint76:46:DB:EF:B2:4F:21:6D:77:E5:77:E4:22:DD:D1:01:E1:57:90:3C ValidityTue, 09 Apr 2024 05:54:08 GMT - Mon, 08 Jul 2024 05:54:07 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /socket.io/?EIO=4&transport=polling&t=OxdOMMi HTTP/1.1
Host: sevenmanjungle.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: auth_uid,session_email
Referer: https://cloudflare-ipfs.com/
Origin: https://cloudflare-ipfs.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 204 No Content
date: Tue, 16 Apr 2024 14:48:24 GMT
content-length: 0
access-control-allow-origin: *
access-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE
vary: Access-Control-Request-Headers
access-control-allow-headers: auth_uid,session_email
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=h1EihPvIkf8XhSpfKKV62v1d3xQ%2BthxHOOD7IHRk12P5RzX5WBQJMZoCHUNxEVq3avdR1uPVt9cOuHvjHzkcosVN%2F2SatJ2smo2pZDOa%2BRFzVHye%2BMzVB6rSnYTHRqh8zqPDDWo%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8754f9dc5ea256c6-OSL
alt-svc: h3=":443"; ma=86400
|
|
| sevenmanjungle.com/socket.io/?EIO=4&transport=polling&t=OxdOMTL&sid=ZIbzjpCWlsu7_WAiAAP3 | 172.67.189.253 | 200 OK | 0 B |
URL POST HTTP/3sevenmanjungle.com/socket.io/?EIO=4&transport=polling&t=OxdOMTL&sid=ZIbzjpCWlsu7_WAiAAP3 IP172.67.189.253:443
Requested byhttps://cloudflare-ipfs.com/ipfs/bafkreihikmj7cdvbuzfnjxdbspzrec4nr7ecpn5bx7tzmrxsp6kyxamlhe#ZXR1cmJlbnNvbkBhbHR1c2VsZXZhdGVzLmNvbQ== CertificateIssuerGoogle Trust Services LLC Subjectsevenmanjungle.com Fingerprint76:46:DB:EF:B2:4F:21:6D:77:E5:77:E4:22:DD:D1:01:E1:57:90:3C ValidityTue, 09 Apr 2024 05:54:08 GMT - Mon, 08 Jul 2024 05:54:07 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /socket.io/?EIO=4&transport=polling&t=OxdOMTL&sid=ZIbzjpCWlsu7_WAiAAP3 HTTP/1.1
Host: sevenmanjungle.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: auth_uid,session_email
Referer: https://cloudflare-ipfs.com/
Origin: https://cloudflare-ipfs.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 204 No Content
date: Tue, 16 Apr 2024 14:48:24 GMT
content-length: 0
access-control-allow-origin: *
access-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE
vary: Access-Control-Request-Headers
access-control-allow-headers: auth_uid,session_email
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=l3iaAJLqyz7Lioogq%2Bv6%2F3amb%2BuSICT7k%2BogWbSyFyg9pjR0jKkI0HLpeuIiKJ2F5jAqZS0aGRalnMwKEowFp4tDVatiVST3v8hajJmkfpRsV%2FLnkaBR4gs26d5Ww8h6AQ0%2BHYE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8754f9df0b1f56c6-OSL
alt-svc: h3=":443"; ma=86400
|
|
| sevenmanjungle.com/socket.io/?EIO=4&transport=polling&t=OxdOMTO&sid=ZIbzjpCWlsu7_WAiAAP3 | 172.67.189.253 | 200 OK | 0 B |
URL GET HTTP/3sevenmanjungle.com/socket.io/?EIO=4&transport=polling&t=OxdOMTO&sid=ZIbzjpCWlsu7_WAiAAP3 IP172.67.189.253:443
Requested byhttps://cloudflare-ipfs.com/ipfs/bafkreihikmj7cdvbuzfnjxdbspzrec4nr7ecpn5bx7tzmrxsp6kyxamlhe#ZXR1cmJlbnNvbkBhbHR1c2VsZXZhdGVzLmNvbQ== CertificateIssuerGoogle Trust Services LLC Subjectsevenmanjungle.com Fingerprint76:46:DB:EF:B2:4F:21:6D:77:E5:77:E4:22:DD:D1:01:E1:57:90:3C ValidityTue, 09 Apr 2024 05:54:08 GMT - Mon, 08 Jul 2024 05:54:07 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /socket.io/?EIO=4&transport=polling&t=OxdOMTO&sid=ZIbzjpCWlsu7_WAiAAP3 HTTP/1.1
Host: sevenmanjungle.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: auth_uid,session_email
Referer: https://cloudflare-ipfs.com/
Origin: https://cloudflare-ipfs.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 204 No Content
date: Tue, 16 Apr 2024 14:48:24 GMT
content-length: 0
access-control-allow-origin: *
access-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE
vary: Access-Control-Request-Headers
access-control-allow-headers: auth_uid,session_email
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=lRhwuUmdw9GhQYzo1ostXjuXQhNU7zTj0EHxv%2Fklh7lePjVfnC3KofbjMu0S2mtMScqyMGNQsYZYZ%2FwB9VfASaldMpeA7ZrivVDybc5SUsXewmJmif6x8tBik1vEtrGTt6ES0ms%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8754f9df0b2356c6-OSL
alt-svc: h3=":443"; ma=86400
|
|
| sevenmanjungle.com/socket.io/?EIO=4&transport=polling&t=OxdOMWV&sid=LYmrdp4tmZFhf30yAAP4 | 172.67.189.253 | 200 OK | 0 B |
URL POST HTTP/3sevenmanjungle.com/socket.io/?EIO=4&transport=polling&t=OxdOMWV&sid=LYmrdp4tmZFhf30yAAP4 IP172.67.189.253:443
Requested byhttps://cloudflare-ipfs.com/ipfs/bafkreihikmj7cdvbuzfnjxdbspzrec4nr7ecpn5bx7tzmrxsp6kyxamlhe#ZXR1cmJlbnNvbkBhbHR1c2VsZXZhdGVzLmNvbQ== CertificateIssuerGoogle Trust Services LLC Subjectsevenmanjungle.com Fingerprint76:46:DB:EF:B2:4F:21:6D:77:E5:77:E4:22:DD:D1:01:E1:57:90:3C ValidityTue, 09 Apr 2024 05:54:08 GMT - Mon, 08 Jul 2024 05:54:07 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /socket.io/?EIO=4&transport=polling&t=OxdOMWV&sid=LYmrdp4tmZFhf30yAAP4 HTTP/1.1
Host: sevenmanjungle.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: auth_uid,session_email
Referer: https://cloudflare-ipfs.com/
Origin: https://cloudflare-ipfs.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 204 No Content
date: Tue, 16 Apr 2024 14:48:24 GMT
content-length: 0
access-control-allow-origin: *
access-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE
vary: Access-Control-Request-Headers
access-control-allow-headers: auth_uid,session_email
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=kvrE2nd23xsFTghdzwibWmt9oh3DLbC84nBKybtvL4G2E%2B15XP%2FMsJfDPXxfIv7ime4xaoJWIPwGBCKFcv0m4yJNh5g1gXs%2B0YD6M8soE%2B0THryP1Q8am59DrsbYu8k%2F77i38dI%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8754f9e04d1256c6-OSL
alt-svc: h3=":443"; ma=86400
|
|
| sevenmanjungle.com/socket.io/?EIO=4&transport=websocket&sid=ZIbzjpCWlsu7_WAiAAP3 | 172.67.189.253 | | 0 B |
URL sevenmanjungle.com/socket.io/?EIO=4&transport=websocket&sid=ZIbzjpCWlsu7_WAiAAP3 IP172.67.189.253:0
CertificateIssuerGoogle Trust Services LLC Subjectsevenmanjungle.com Fingerprint76:46:DB:EF:B2:4F:21:6D:77:E5:77:E4:22:DD:D1:01:E1:57:90:3C ValidityTue, 09 Apr 2024 05:54:08 GMT - Mon, 08 Jul 2024 05:54:07 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /socket.io/?EIO=4&transport=websocket&sid=ZIbzjpCWlsu7_WAiAAP3 HTTP/1.1
Host: sevenmanjungle.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: https://cloudflare-ipfs.com
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: 1OmaSuu0gyxDZs8AtBvLFA==
DNT: 1
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Date: Tue, 16 Apr 2024 14:48:24 GMT
Connection: upgrade
Upgrade: websocket
Sec-WebSocket-Accept: FeDh+SU3vINAulallr7XWs2NLd4=
Access-Control-Allow-Origin: *
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=RCUUiILVViw66PmMy7gD5qI0M68vMvGyCpBsc7J3lAUtZp0dGnlzzBNrJv55Xq7ZcIt9LdKvCttThsJnHkcDTqzO5XEdfcnchOSP5LRRp6b4Jt9v0FtM5Sj7NxQlwPf7DaLu1Is%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 8754f9df4aea56b7-OSL
alt-svc: h3=":443"; ma=86400
|
|
| sevenmanjungle.com/socket.io/?EIO=4&transport=polling&t=OxdOMWa&sid=LYmrdp4tmZFhf30yAAP4 | 172.67.189.253 | 200 OK | 0 B |
URL GET HTTP/3sevenmanjungle.com/socket.io/?EIO=4&transport=polling&t=OxdOMWa&sid=LYmrdp4tmZFhf30yAAP4 IP172.67.189.253:443
Requested byhttps://cloudflare-ipfs.com/ipfs/bafkreihikmj7cdvbuzfnjxdbspzrec4nr7ecpn5bx7tzmrxsp6kyxamlhe#ZXR1cmJlbnNvbkBhbHR1c2VsZXZhdGVzLmNvbQ== CertificateIssuerGoogle Trust Services LLC Subjectsevenmanjungle.com Fingerprint76:46:DB:EF:B2:4F:21:6D:77:E5:77:E4:22:DD:D1:01:E1:57:90:3C ValidityTue, 09 Apr 2024 05:54:08 GMT - Mon, 08 Jul 2024 05:54:07 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /socket.io/?EIO=4&transport=polling&t=OxdOMWa&sid=LYmrdp4tmZFhf30yAAP4 HTTP/1.1
Host: sevenmanjungle.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: auth_uid,session_email
Referer: https://cloudflare-ipfs.com/
Origin: https://cloudflare-ipfs.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 204 No Content
date: Tue, 16 Apr 2024 14:48:24 GMT
content-length: 0
access-control-allow-origin: *
access-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE
vary: Access-Control-Request-Headers
access-control-allow-headers: auth_uid,session_email
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=iGvdW04LsS3kHQrsqcDDNSc192KaFhQDLCGtbH3sl5FgmEqrJQxz6AKaYEnj%2BQHEm6vMoYvA7wyoCptRCX%2FFJOgJzTZihjojX%2B7AE2x3kSNL103DEVgQ7jDTAE3OjcOENTBj8h8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8754f9e04d1a56c6-OSL
alt-svc: h3=":443"; ma=86400
|
|
| challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/flow/ov1/1625003579:1713278058:A3e_CgtqSWPsGslqfYMVEObNxHMKXxB0gjY0bDlf-h4/8754f98f68917130/51497160eaa177f | 104.17.3.184 | | 17 kB |
URL challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/flow/ov1/1625003579:1713278058:A3e_CgtqSWPsGslqfYMVEObNxHMKXxB0gjY0bDlf-h4/8754f98f68917130/51497160eaa177f IP104.17.3.184:0
File typeASCII text, with very long lines (22560), with no line terminators Hash05d11e0132d86aed89f5b6498b287e6c a014e12cc70c5e0176264966dec908c0bd55be74 4321dfb9b838aea0a1ef125c40f7f322d97582d7a598fa041252126c5d88f82c
POST /cdn-cgi/challenge-platform/h/b/flow/ov1/1625003579:1713278058:A3e_CgtqSWPsGslqfYMVEObNxHMKXxB0gjY0bDlf-h4/8754f98f68917130/51497160eaa177f HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/i67f1/0x4AAAAAAAXS7ej_C0NMJvaq/auto/normal
Content-type: application/x-www-form-urlencoded
CF-Challenge: 51497160eaa177f
Content-Length: 25782
Origin: https://challenges.cloudflare.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 16 Apr 2024 14:48:13 GMT
content-type: text/plain; charset=UTF-8
cf-chl-gen: YZOyx8u/jcq63Xsv00UO6Re12KhVXq+dTk3yWoZi3utfLv+2vfibhhf69RkbVGmy$KgCynlDUdBDEsbqjqyc3cg==
server: cloudflare
cf-ray: 8754f99adb3e7130-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| sevenmanjungle.com/socket.io/?EIO=4&transport=websocket&sid=LYmrdp4tmZFhf30yAAP4 | 104.21.81.146 | | 0 B |
URL sevenmanjungle.com/socket.io/?EIO=4&transport=websocket&sid=LYmrdp4tmZFhf30yAAP4 IP104.21.81.146:0
CertificateIssuerGoogle Trust Services LLC Subjectsevenmanjungle.com Fingerprint76:46:DB:EF:B2:4F:21:6D:77:E5:77:E4:22:DD:D1:01:E1:57:90:3C ValidityTue, 09 Apr 2024 05:54:08 GMT - Mon, 08 Jul 2024 05:54:07 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /socket.io/?EIO=4&transport=websocket&sid=LYmrdp4tmZFhf30yAAP4 HTTP/1.1
Host: sevenmanjungle.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: https://cloudflare-ipfs.com
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: V3BV3KkpytUobEBWHoxQtQ==
DNT: 1
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Date: Tue, 16 Apr 2024 14:48:24 GMT
Connection: upgrade
Upgrade: websocket
Sec-WebSocket-Accept: CV3yvisJ42JYOZ11GWS/7zFNOns=
Access-Control-Allow-Origin: *
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=bMvfPwIkRDnT0aJPjh0niDUFYBuRwyeQ7DLgNyip3gKKp7FbG9%2FFbNtQ7yNGdcmmouEnsBvSbW2Z%2BVhvdtLRPZu1J%2FLpAO02Vpu2zUmJBfF97%2B9ZDn%2BMflC9z5Az7zPM%2B1cIP7A%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 8754f9e1b86e1c06-OSL
alt-svc: h3=":443"; ma=86400
|
|
| sevenmanjungle.com/socket.io/?EIO=4&transport=polling&t=OxdOMWa&sid=LYmrdp4tmZFhf30yAAP4 | 172.67.189.253 | 200 OK | 1 B |
URL GET HTTP/3sevenmanjungle.com/socket.io/?EIO=4&transport=polling&t=OxdOMWa&sid=LYmrdp4tmZFhf30yAAP4 IP172.67.189.253:443
Requested byhttps://cloudflare-ipfs.com/ipfs/bafkreihikmj7cdvbuzfnjxdbspzrec4nr7ecpn5bx7tzmrxsp6kyxamlhe#ZXR1cmJlbnNvbkBhbHR1c2VsZXZhdGVzLmNvbQ== CertificateIssuerGoogle Trust Services LLC Subjectsevenmanjungle.com Fingerprint76:46:DB:EF:B2:4F:21:6D:77:E5:77:E4:22:DD:D1:01:E1:57:90:3C ValidityTue, 09 Apr 2024 05:54:08 GMT - Mon, 08 Jul 2024 05:54:07 GMT
File typevery short file (no magic) Hash1679091c5a880faf6fb5e6087eb1b2dc c1dfd96eea8cc2b62785275bca38ac261256e278 e7f6c011776e8db7cd330b54174fd76f7d0216b612387a5ffcfb81e6f0919683
GET /socket.io/?EIO=4&transport=polling&t=OxdOMWa&sid=LYmrdp4tmZFhf30yAAP4 HTTP/1.1
Host: sevenmanjungle.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Auth_UID: USER15032024UNIQUE0905031547202420240315050947
Session_Email: eturbenson@altuselevates.com
Origin: https://cloudflare-ipfs.com
DNT: 1
Connection: keep-alive
Referer: https://cloudflare-ipfs.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 16 Apr 2024 14:48:25 GMT
content-type: text/plain; charset=UTF-8
content-length: 1
access-control-allow-origin: *
cache-control: no-store
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=FZVkoPO1wZxwqnzVipWmP85Srlh29wIW9brm2G0GWDJvNlqv%2B2F%2FUspZsim%2B2oWDOqneyhQFe2jzCtTt5inUBXZFwYoNxGWxQJdp1CVIjon3NkwATWHntHUTe0DA5ZROOZLhcbA%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8754f9e2a88356c6-OSL
alt-svc: h3=":443"; ma=86400
|
|
| cloudflare-ipfs.com/ipfs/bafkreihikmj7cdvbuzfnjxdbspzrec4nr7ecpn5bx7tzmrxsp6kyxamlhe | 104.17.96.13 | 200 OK | 2.9 kB |
URL User Request GET HTTP/2cloudflare-ipfs.com/ipfs/bafkreihikmj7cdvbuzfnjxdbspzrec4nr7ecpn5bx7tzmrxsp6kyxamlhe IP104.17.96.13:443
CertificateIssuerLet's Encrypt Subjectcloudflare-ipfs.com Fingerprint18:E5:C9:71:96:8A:A9:48:E2:79:2A:29:91:D2:4E:46:90:B7:5D:9F ValiditySun, 25 Feb 2024 02:55:05 GMT - Sat, 25 May 2024 02:55:04 GMT
File typeHTML document, ASCII text, with very long lines (2950), with no line terminators Hash6aeaed8bb5114408e21bbb95f8158128 07e22e3de516c035b11ec4506e686e274ceddbcb ab0ada7867a28845ffb46ade0767258c10ac9b2ca67c20a13be2fd655a42eb09
| Analyzer | Verdict | Alert |
|---|
| PhishTank | phishing | Other |
GET /ipfs/bafkreihikmj7cdvbuzfnjxdbspzrec4nr7ecpn5bx7tzmrxsp6kyxamlhe HTTP/1.1
Host: cloudflare-ipfs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://exclusiveholidayresorts.com/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Sec-Fetch-User: ?1
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 16 Apr 2024 14:48:16 GMT
content-type: text/html
cf-ray: 8754f9af2e8f56aa-OSL
cf-cache-status: HIT
access-control-allow-origin: *
age: 15139
cache-control: public, max-age=29030400, immutable
etag: W/"bafkreihikmj7cdvbuzfnjxdbspzrec4nr7ecpn5bx7tzmrxsp6kyxamlhe"
vary: Accept-Encoding
access-control-allow-headers: Content-Type, Range, User-Agent, X-Requested-With
access-control-allow-methods: GET
access-control-expose-headers: Content-Length, Content-Range, X-Chunked-Output, X-Ipfs-Path, X-Ipfs-Roots, X-Stream-Output
x-cf-ipfs-cache-status: hit
x-ipfs-path: /ipfs/bafkreihikmj7cdvbuzfnjxdbspzrec4nr7ecpn5bx7tzmrxsp6kyxamlhe
x-ipfs-roots: bafkreihikmj7cdvbuzfnjxdbspzrec4nr7ecpn5bx7tzmrxsp6kyxamlhe
set-cookie: __cf_bm=0iwv8fxU0QI8fDnRWxktkYIc4hmo0Kchw37tkhavCcc-1713278896-1.0.1.1-_4xvXA34bSKrWw_BZw7QTEny7W0_FfbbvJ_vtn3aUFORTC7AlsjqwCPptuO87NLmBjpUp_U7Hkhj0WHVafwsZA; path=/; expires=Tue, 16-Apr-24 15:18:16 GMT; domain=.cloudflare-ipfs.com; HttpOnly; Secure; SameSite=None
server: cloudflare
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| sevenmanjungle.com/socket.io/?EIO=4&transport=websocket&sid=ZIbzjpCWlsu7_WAiAAP3 | 172.67.189.253 | 101 Switching Protocols | 0 B |
URL GET HTTP/1.1sevenmanjungle.com/socket.io/?EIO=4&transport=websocket&sid=ZIbzjpCWlsu7_WAiAAP3 IP172.67.189.253:443
Requested byhttps://cloudflare-ipfs.com/ipfs/bafkreihikmj7cdvbuzfnjxdbspzrec4nr7ecpn5bx7tzmrxsp6kyxamlhe#ZXR1cmJlbnNvbkBhbHR1c2VsZXZhdGVzLmNvbQ== CertificateIssuerGoogle Trust Services LLC Subjectsevenmanjungle.com Fingerprint76:46:DB:EF:B2:4F:21:6D:77:E5:77:E4:22:DD:D1:01:E1:57:90:3C ValidityTue, 09 Apr 2024 05:54:08 GMT - Mon, 08 Jul 2024 05:54:07 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /socket.io/?EIO=4&transport=websocket&sid=ZIbzjpCWlsu7_WAiAAP3 HTTP/1.1
Host: sevenmanjungle.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: https://cloudflare-ipfs.com
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: 1OmaSuu0gyxDZs8AtBvLFA==
DNT: 1
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Date: Tue, 16 Apr 2024 14:48:24 GMT
Connection: upgrade
Upgrade: websocket
Sec-WebSocket-Accept: FeDh+SU3vINAulallr7XWs2NLd4=
Access-Control-Allow-Origin: *
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=RCUUiILVViw66PmMy7gD5qI0M68vMvGyCpBsc7J3lAUtZp0dGnlzzBNrJv55Xq7ZcIt9LdKvCttThsJnHkcDTqzO5XEdfcnchOSP5LRRp6b4Jt9v0FtM5Sj7NxQlwPf7DaLu1Is%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 8754f9df4aea56b7-OSL
alt-svc: h3=":443"; ma=86400
|
|
| sevenmanjungle.com/socket.io/?EIO=4&transport=websocket&sid=LYmrdp4tmZFhf30yAAP4 | 104.21.81.146 | 101 Switching Protocols | 0 B |
URL GET HTTP/1.1sevenmanjungle.com/socket.io/?EIO=4&transport=websocket&sid=LYmrdp4tmZFhf30yAAP4 IP104.21.81.146:443
Requested byhttps://cloudflare-ipfs.com/ipfs/bafkreihikmj7cdvbuzfnjxdbspzrec4nr7ecpn5bx7tzmrxsp6kyxamlhe#ZXR1cmJlbnNvbkBhbHR1c2VsZXZhdGVzLmNvbQ== CertificateIssuerGoogle Trust Services LLC Subjectsevenmanjungle.com Fingerprint76:46:DB:EF:B2:4F:21:6D:77:E5:77:E4:22:DD:D1:01:E1:57:90:3C ValidityTue, 09 Apr 2024 05:54:08 GMT - Mon, 08 Jul 2024 05:54:07 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /socket.io/?EIO=4&transport=websocket&sid=LYmrdp4tmZFhf30yAAP4 HTTP/1.1
Host: sevenmanjungle.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: https://cloudflare-ipfs.com
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: V3BV3KkpytUobEBWHoxQtQ==
DNT: 1
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Date: Tue, 16 Apr 2024 14:48:24 GMT
Connection: upgrade
Upgrade: websocket
Sec-WebSocket-Accept: CV3yvisJ42JYOZ11GWS/7zFNOns=
Access-Control-Allow-Origin: *
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=bMvfPwIkRDnT0aJPjh0niDUFYBuRwyeQ7DLgNyip3gKKp7FbG9%2FFbNtQ7yNGdcmmouEnsBvSbW2Z%2BVhvdtLRPZu1J%2FLpAO02Vpu2zUmJBfF97%2B9ZDn%2BMflC9z5Az7zPM%2B1cIP7A%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 8754f9e1b86e1c06-OSL
alt-svc: h3=":443"; ma=86400
|
|
| cloudflare-ipfs.com/favicon.ico | 104.17.96.13 | 404 Not Found | 14 B |
URL GET HTTP/3cloudflare-ipfs.com/favicon.ico IP104.17.96.13:443
Requested byhttps://cloudflare-ipfs.com/ipfs/bafkreihikmj7cdvbuzfnjxdbspzrec4nr7ecpn5bx7tzmrxsp6kyxamlhe#ZXR1cmJlbnNvbkBhbHR1c2VsZXZhdGVzLmNvbQ== CertificateIssuerLet's Encrypt Subjectcloudflare-ipfs.com Fingerprint18:E5:C9:71:96:8A:A9:48:E2:79:2A:29:91:D2:4E:46:90:B7:5D:9F ValiditySun, 25 Feb 2024 02:55:05 GMT - Sat, 25 May 2024 02:55:04 GMT
File typeASCII text, with no line terminators Hashd0fbda9855d118740f1105334305c126 bc3023b36063a7681db24681472b54fa11f0d4ec a469ab4ca4e55bf547566e9ebfa1b809c933207e9d558156bc0c4252b17533fe
| Analyzer | Verdict | Alert |
|---|
| PhishTank | phishing | Other |
GET /favicon.ico HTTP/1.1
Host: cloudflare-ipfs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cloudflare-ipfs.com/ipfs/bafkreihikmj7cdvbuzfnjxdbspzrec4nr7ecpn5bx7tzmrxsp6kyxamlhe
Cookie: __cf_bm=0iwv8fxU0QI8fDnRWxktkYIc4hmo0Kchw37tkhavCcc-1713278896-1.0.1.1-_4xvXA34bSKrWw_BZw7QTEny7W0_FfbbvJ_vtn3aUFORTC7AlsjqwCPptuO87NLmBjpUp_U7Hkhj0WHVafwsZA
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 404 Not Found
date: Tue, 16 Apr 2024 14:48:16 GMT
content-type: text/plain;charset=UTF-8
content-length: 14
vary: Accept-Encoding
server: cloudflare
cf-ray: 8754f9b18dfd569d-OSL
alt-svc: h3=":443"; ma=86400
|
|
| www.w3schools.com/w3css/4/w3.css | 192.229.133.221 | 200 OK | 23 kB |
URL GET HTTP/2www.w3schools.com/w3css/4/w3.css IP192.229.133.221:443
Requested byhttps://cloudflare-ipfs.com/ipfs/bafkreihikmj7cdvbuzfnjxdbspzrec4nr7ecpn5bx7tzmrxsp6kyxamlhe#ZXR1cmJlbnNvbkBhbHR1c2VsZXZhdGVzLmNvbQ== CertificateIssuerDigiCert Inc Subject*.w3schools.com Fingerprint20:AF:FF:E1:FC:DB:58:C8:05:B7:D2:97:1F:8F:A1:C6:AD:ED:59:3A ValidityWed, 03 Apr 2024 00:00:00 GMT - Sun, 04 May 2025 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /w3css/4/w3.css HTTP/1.1
Host: www.w3schools.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cloudflare-ipfs.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-encoding: gzip
accept-ranges: bytes
age: 1842
cache-control: public,max-age=14400,public
content-security-policy: frame-ancestors 'self' https://mycourses.w3schools.com;
content-type: text/css
date: Tue, 16 Apr 2024 14:48:17 GMT
etag: "0e43193f98fda1:0+gzip"
last-modified: Tue, 16 Apr 2024 12:28:24 GMT
server: ECS (ska/F716)
vary: Accept-Encoding
x-cache: HIT
x-content-security-policy: frame-ancestors 'self' https://mycourses.w3schools.com;
x-powered-by: ASP.NET
content-length: 5256
X-Firefox-Spdy: h2
|
|
0.0.0.0