Report - mobile.exchange-midasbuy.com/,N/A,https:/openphish.com/feed.txt,8-Oct-24,High,Medium

Report Overview

Visitedpublic

2024-10-09 16:42:25

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Host Summary

Host	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
r10.o.lencr.org	unknown	2020-06-29	2024-06-06 21:45:11	2024-10-08 18:12:21	1.3 kB	3.5 kB	23.36.76.249
mobile.exchange-midasbuy.com	unknown	unknown	No data	No data	2.1 kB	15 kB	172.67.176.137
r11.o.lencr.org	unknown	2020-06-29	2024-06-07 07:43:57	2024-10-08 18:12:09	1.3 kB	3.5 kB	23.36.76.249

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

Scan Date	Severity	Indicator	Alert
2024-10-07	medium	mobile.exchange-midasbuy.com/	Tencent
2024-10-07	medium	mobile.exchange-midasbuy.com/	Tencent
2024-10-07	medium	mobile.exchange-midasbuy.com/	Tencent
2024-10-07	medium	mobile.exchange-midasbuy.com/	Tencent

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (0)

HTTP Transactions (12)

URL IP Response Size

r10.o.lencr.org/

23.36.76.249

504 B

URL HTTP

r10.o.lencr.org/

IP / ASN

23.36.76.249

#20940 Akamai International B.V.

Requested byN/A

Resource Info

File typedata

First Seen2024-10-09

Last Seen2024-10-11

Times Seen3425

Size504 B (504 bytes)

MD5c3fbe0b62fa278b1a007491908bb16f2

SHA12ae17f1c5ae52ff197923ec0189f34ad3f43e645

SHA256a4eca96abeac5f2760f850db06e2fa5bf29dc017d9d33eabf73943fa4bb94197

HTTP Headers

POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "A4ECA96ABEAC5F2760F850DB06E2FA5BF29DC017D9D33EABF73943FA4BB94197"
Last-Modified: Wed, 09 Oct 2024 04:48:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9296
Expires: Wed, 09 Oct 2024 19:16:56 GMT
Date: Wed, 09 Oct 2024 16:42:00 GMT
Connection: keep-alive

r10.o.lencr.org/

23.36.76.249

504 B

URL HTTP

r10.o.lencr.org/

IP / ASN

23.36.76.249

#20940 Akamai International B.V.

Requested byN/A

Resource Info

File typedata

First Seen2024-10-09

Last Seen2024-10-11

Times Seen1593

Size504 B (504 bytes)

MD5ca9529e5dcfdfe04a1af2baa41d988d6

SHA12f7b1a6c5d3e1c8c9f52c513ee250006de18b00b

SHA256fea81540ca4c6f34f779c3306d4414c07bab63cec6b11425d8e3c5fb74118be3

HTTP Headers

POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "FEA81540CA4C6F34F779C3306D4414C07BAB63CEC6B11425D8E3C5FB74118BE3"
Last-Modified: Wed, 09 Oct 2024 11:30:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=19968
Expires: Wed, 09 Oct 2024 22:14:48 GMT
Date: Wed, 09 Oct 2024 16:42:00 GMT
Connection: keep-alive

r10.o.lencr.org/

23.36.76.249

504 B

URL HTTP

r10.o.lencr.org/

IP / ASN

23.36.76.249

#20940 Akamai International B.V.

Requested byN/A

Resource Info

File typedata

First Seen2024-10-08

Last Seen2024-10-11

Times Seen11403

Size504 B (504 bytes)

MD546338129794811f186a0b7a4f44fa3ec

SHA1f2e9fd21618da6188e9b28d1abaf563cabf4d29d

SHA256c062cb8b7804448db2cfb7aec7389f996d3c14fe2699a038ab536c7e0a99ae88

HTTP Headers

POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "C062CB8B7804448DB2CFB7AEC7389F996D3C14FE2699A038AB536C7E0A99AE88"
Last-Modified: Tue, 08 Oct 2024 04:15:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9680
Expires: Wed, 09 Oct 2024 19:23:20 GMT
Date: Wed, 09 Oct 2024 16:42:00 GMT
Connection: keep-alive

r10.o.lencr.org/

23.36.76.249

504 B

URL HTTP

r10.o.lencr.org/

IP / ASN

23.36.76.249

#20940 Akamai International B.V.

Requested byN/A

Resource Info

File typedata

First Seen2024-10-08

Last Seen2024-10-11

Times Seen10006

Size504 B (504 bytes)

MD531fc782bf1efb76a7251d3e45007b986

SHA17cfef07644e0e4aad99bfa3dd10cf975f7c06f89

SHA256663061e811010828ed222146cbb81114a49ba635f6c6547f3601ae0c3de1409d

HTTP Headers

POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "663061E811010828ED222146CBB81114A49BA635F6C6547F3601AE0C3DE1409D"
Last-Modified: Tue, 08 Oct 2024 04:16:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8309
Expires: Wed, 09 Oct 2024 19:00:30 GMT
Date: Wed, 09 Oct 2024 16:42:01 GMT
Connection: keep-alive

GET mobile.exchange-midasbuy.com/,N/A,https:/openphish.com/feed.txt,8-Oct-24,High,Medium

172.67.176.137

301 Moved Permanently

167 B

URL User Request GET HTTP

mobile.exchange-midasbuy.com/,N/A,https:/openphish.com/feed.txt,8-Oct-24,High,Medium

IP / ASN

172.67.176.137

#13335 CLOUDFLARENET

Requested byN/A

Resource Info

File typeHTML document, ASCII text, with CRLF line terminators

First Seen2023-04-05

Last Seen2025-03-02

Times Seen190492

Size167 B (167 bytes)

MD50104c301c5e02bd6148b8703d19b3a73

SHA17436e0b4b1f8c222c38069890b75fa2baf9ca620

SHA256446a6087825fa73eadb045e5a2e9e2adf7df241b571228187728191d961dda1f

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Tencent

HTTP Headers

GET /,N/A,https:/openphish.com/feed.txt,8-Oct-24,High,Medium HTTP/1.1
Host: mobile.exchange-midasbuy.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 301 Moved Permanently
Date: Wed, 09 Oct 2024 16:42:01 GMT
Content-Type: text/html
Content-Length: 167
Connection: keep-alive
Cache-Control: max-age=3600
Expires: Wed, 09 Oct 2024 17:42:01 GMT
Location: https://mobile.exchange-midasbuy.com/,N/A,https:/openphish.com/feed.txt,8-Oct-24,High,Medium
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=eBDOaMVpSckxot62gd7%2FpANPKKYekD7%2BPGRjyVHI45P40xP7YrajGi25OfcNZUWqF7kKzLmKGn6UeypcEyY8FXgI0zI%2BjJ%2BxGz2ZZUdlfsw7VC2A6X%2BSjZVBBl42hkgZ%2FWF69en%2BvThgMjkJJ7DO"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Speculation-Rules: "/cdn-cgi/speculation"
Server: cloudflare
CF-RAY: 8cffd24eb8aa8fe6-FRA
alt-svc: h2=":443"; ma=60

GET mobile.exchange-midasbuy.com/,N/A,https:/openphish.com/feed.txt,8-Oct-24,High,Medium

104.21.31.130

301 Moved Permanently

728 B

URL User Request GET HTTP

mobile.exchange-midasbuy.com/,N/A,https:/openphish.com/feed.txt,8-Oct-24,High,Medium

IP / ASN

104.21.31.130

#13335 CLOUDFLARENET

Requested byN/A

Resource Info

File typeHTML document, ASCII text

First Seen2023-03-07

Last Seen2025-08-05

Times Seen96351

Size728 B (728 bytes)

MD5a34ac19f4afae63adc5d2f7bc970c07f

SHA1a82190fc530c265aa40a045c21770d967f4767b8

SHA256d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Tencent

HTTP Headers

GET /,N/A,https:/openphish.com/feed.txt,8-Oct-24,High,Medium HTTP/1.1
Host: mobile.exchange-midasbuy.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 404 Not Found
date: Wed, 09 Oct 2024 16:42:01 GMT
content-type: text/html; charset=iso-8859-1
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=JnTc3s2CRECTnWK9fj4ZsH3mxZeEOgYgsBubEIfUERpcMHsBdchCywLzdMxEu1IkDuFO5YgvuyFhszk4k5DXGiO4BuNP85tu3e9QbCiBySizv9MDa%2FtLw9nZDkBNYk0rdKvaBn4eEwukDlJBeSd2"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
speculation-rules: "/cdn-cgi/speculation"
server: cloudflare
cf-ray: 8cffd24bce1f2c2d-FRA
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

r11.o.lencr.org/

23.36.76.249

504 B

URL HTTP

r11.o.lencr.org/

IP / ASN

23.36.76.249

#20940 Akamai International B.V.

Requested byN/A

Resource Info

File typedata

First Seen2024-10-08

Last Seen2024-10-11

Times Seen8574

Size504 B (504 bytes)

MD5aa746f2452828a39148ef2ed129c14f6

SHA1aab2904047696ac367e2bfc0ffb1ba44c9c84256

SHA2565c76fd0fb994332de5317dc7d533ae3edb60d9f0ce253f839e609d83a3bf0fa7

HTTP Headers

POST / HTTP/1.1
Host: r11.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "5C76FD0FB994332DE5317DC7D533AE3EDB60D9F0CE253F839E609D83A3BF0FA7"
Last-Modified: Tue, 08 Oct 2024 04:17:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7125
Expires: Wed, 09 Oct 2024 18:40:48 GMT
Date: Wed, 09 Oct 2024 16:42:03 GMT
Connection: keep-alive

r11.o.lencr.org/

23.36.76.249

504 B

URL HTTP

r11.o.lencr.org/

IP / ASN

23.36.76.249

#20940 Akamai International B.V.

Requested byN/A

Resource Info

File typedata

First Seen2024-10-08

Last Seen2024-10-11

Times Seen8574

Size504 B (504 bytes)

MD5aa746f2452828a39148ef2ed129c14f6

SHA1aab2904047696ac367e2bfc0ffb1ba44c9c84256

SHA2565c76fd0fb994332de5317dc7d533ae3edb60d9f0ce253f839e609d83a3bf0fa7

HTTP Headers

POST / HTTP/1.1
Host: r11.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "5C76FD0FB994332DE5317DC7D533AE3EDB60D9F0CE253F839E609D83A3BF0FA7"
Last-Modified: Tue, 08 Oct 2024 04:17:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7125
Expires: Wed, 09 Oct 2024 18:40:48 GMT
Date: Wed, 09 Oct 2024 16:42:03 GMT
Connection: keep-alive

r11.o.lencr.org/

23.36.76.249

504 B

URL HTTP

r11.o.lencr.org/

IP / ASN

23.36.76.249

#20940 Akamai International B.V.

Requested byN/A

Resource Info

File typedata

First Seen2024-10-08

Last Seen2024-10-11

Times Seen8574

Size504 B (504 bytes)

MD5aa746f2452828a39148ef2ed129c14f6

SHA1aab2904047696ac367e2bfc0ffb1ba44c9c84256

SHA2565c76fd0fb994332de5317dc7d533ae3edb60d9f0ce253f839e609d83a3bf0fa7

HTTP Headers

POST / HTTP/1.1
Host: r11.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "5C76FD0FB994332DE5317DC7D533AE3EDB60D9F0CE253F839E609D83A3BF0FA7"
Last-Modified: Tue, 08 Oct 2024 04:17:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7125
Expires: Wed, 09 Oct 2024 18:40:48 GMT
Date: Wed, 09 Oct 2024 16:42:03 GMT
Connection: keep-alive

r11.o.lencr.org/

23.36.76.249

504 B

URL HTTP

r11.o.lencr.org/

IP / ASN

23.36.76.249

#20940 Akamai International B.V.

Requested byN/A

Resource Info

File typedata

First Seen2024-10-08

Last Seen2024-10-11

Times Seen8574

Size504 B (504 bytes)

MD5aa746f2452828a39148ef2ed129c14f6

SHA1aab2904047696ac367e2bfc0ffb1ba44c9c84256

SHA2565c76fd0fb994332de5317dc7d533ae3edb60d9f0ce253f839e609d83a3bf0fa7

HTTP Headers

POST / HTTP/1.1
Host: r11.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "5C76FD0FB994332DE5317DC7D533AE3EDB60D9F0CE253F839E609D83A3BF0FA7"
Last-Modified: Tue, 08 Oct 2024 04:17:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7125
Expires: Wed, 09 Oct 2024 18:40:48 GMT
Date: Wed, 09 Oct 2024 16:42:03 GMT
Connection: keep-alive

GET mobile.exchange-midasbuy.com/,N/A,https:/openphish.com/feed.txt,8-Oct-24,High,Medium

104.21.31.130

301 Moved Permanently

11 kB

URL User Request GET HTTP

mobile.exchange-midasbuy.com/,N/A,https:/openphish.com/feed.txt,8-Oct-24,High,Medium

IP / ASN

104.21.31.130

#13335 CLOUDFLARENET

Requested byN/A

Resource Info

File typeHTML document, ASCII text

First Seen2023-03-07

Last Seen2025-08-05

Times Seen96351

Size11 kB (10825 bytes)

MD5a34ac19f4afae63adc5d2f7bc970c07f

SHA1a82190fc530c265aa40a045c21770d967f4767b8

SHA256d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Tencent

HTTP Headers

GET /,N/A,https:/openphish.com/feed.txt,8-Oct-24,High,Medium HTTP/1.1
Host: mobile.exchange-midasbuy.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 404 Not Found
date: Wed, 09 Oct 2024 16:42:01 GMT
content-type: text/html; charset=iso-8859-1
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=u9x9m1P7PcpuO6X7%2B9LHhMedmfyIdd5fwdHEIgq53YEvhaHGsG6LOCP3SQ7faT1NCujc4NqNEVEOalL3eUB6Trq5bFaMVeQO%2BFuiIsHWta4PCT6KOXFTwxRyynPlZJk9wECxCEGfxi80jXKG6eQv"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
speculation-rules: "/cdn-cgi/speculation"
server: cloudflare
cf-ray: 8cffd24f2b6b9106-FRA
content-encoding: br
alt-svc: h3=":443"; ma=86400

GET mobile.exchange-midasbuy.com/favicon.ico

104.21.31.130

404 Not Found

315 B

URL GET HTTPS

mobile.exchange-midasbuy.com/favicon.ico

IP / ASN

104.21.31.130

#13335 CLOUDFLARENET

Requested byhttps://mobile.exchange-midasbuy.com/,N/A,https:/openphish.com/feed.txt,8-Oct-24,High,Medium

Resource Info

File typeHTML document, ASCII text, with very long lines (326), with no line terminators

First Seen2023-04-05

Last Seen2025-04-06

Times Seen32951

Size315 B (315 bytes)

MD597ef40509b73c101d6815511c3adf98d

SHA1a4242322497ea630ea72e26ba297a95a2bbe5ccd

SHA256322c1f60d9d454c801f7cff3173ef16b61cf9963a64e09a4d9e21d36218b56be

Certificate Info

IssuerGoogle Trust Services

Subjectexchange-midasbuy.com

Fingerprint97:32:93:50:90:24:9F:7B:74:8C:0C:11:9D:5C:77:62:8E:02:D6:98

ValidityThu, 26 Sep 2024 04:16:30 GMT - Wed, 25 Dec 2024 04:16:29 GMT

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Tencent

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: mobile.exchange-midasbuy.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mobile.exchange-midasbuy.com/,N/A,https:/openphish.com/feed.txt,8-Oct-24,High,Medium
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 404 Not Found
date: Wed, 09 Oct 2024 16:42:02 GMT
content-type: text/html; charset=iso-8859-1
cache-control: max-age=14400
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=du30B%2B6RXyYr5%2FGQBz%2BRWNPm1HtCxPrpAp5En%2FRPsjVB7N0jgu1hloazpJQseKYwhqe5DAfwopUkkvEg4h3OLM%2BiVdfFPYQy8Kx%2B3s2QE5zjcaCoRL75XEyKwxXqLjOlMOyZYH7XOlcQc6rLeEmY"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
speculation-rules: "/cdn-cgi/speculation"
server: cloudflare
cf-ray: 8cffd2512d449106-FRA
content-encoding: br
alt-svc: h3=":443"; ma=86400