| | 104.21.112.1 | 403 Forbidden | 2.1 kB |
URL User Request GET HTTP/1.1IP 104.21.112.1:80
File typeHTML document, ASCII text, with very long lines (945) Hashc78ecf980e2c29bc3d078f18cd3ba1d8 9556bdd2ced8804b67e0d0b8d2a19715f3b4adec 65687b9d85027a71597bd8f1911233bc8296297aff1f2bb304b417b2f07c6a84
GET / HTTP/1.1
Host: moose.sa.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 403 Forbidden
Date: Sun, 29 Dec 2024 03:10:44 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
X-Frame-Options: SAMEORIGIN
Referrer-Policy: same-origin
Cache-Control: max-age=15
Expires: Sun, 29 Dec 2024 03:10:59 GMT
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=y1NEAj4C2eZhKrkOt9GGt7S9bF%2FsPc8vRkFHKJzKooKc6NGLOknKDoG%2FqWdYGSZHaUxrArDElN4dlc79sn357efkYzWyvlYMIvfHE1p7WcAri6kg1O%2BehysBgMjEGcc%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 8f969947b84f56c7-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
server-timing: cfL4;desc="?proto=TCP&rtt=408&min_rtt=408&rtt_var=204&sent=1&recv=3&lost=0&retrans=0&sent_bytes=0&recv_bytes=385&delivery_rate=0&cwnd=249&unsent_bytes=0&cid=0000000000000000&ts=0&x=0"
|
|
| moose.sa.com/cdn-cgi/styles/cf.errors.css | 104.21.112.1 | 200 OK | 4.5 kB |
URL GET HTTP/1.1moose.sa.com/cdn-cgi/styles/cf.errors.css IP 104.21.112.1:80
File typeASCII text, with very long lines (24050) Hash5e8c69a459a691b5d1b9be442332c87d f24dd1ad7c9080575d92a9a9a2c42620725ef836 84e3c77025ace5af143972b4a40fc834dcdfd4e449d4b36a57e62326f16b3091
GET /cdn-cgi/styles/cf.errors.css HTTP/1.1
Host: moose.sa.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://moose.sa.com/
DNT: 1
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 29 Dec 2024 03:10:44 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Mon, 16 Dec 2024 06:11:56 GMT
ETag: W/"675fc4ac-5df3"
Server: cloudflare
CF-RAY: 8f969949897856c7-OSL
X-Frame-Options: DENY
X-Content-Type-Options: nosniff
Vary: Accept-Encoding
Expires: Sun, 29 Dec 2024 05:10:44 GMT
Cache-Control: max-age=7200, public
Content-Encoding: gzip
|
|
| moose.sa.com/cdn-cgi/images/browser-bar.png?1376755637 | 104.21.112.1 | 200 OK | 715 B |
URL GET HTTP/1.1moose.sa.com/cdn-cgi/images/browser-bar.png?1376755637 IP 104.21.112.1:80
File typePNG image data, 960 x 53, 8-bit colormap, non-interlaced Hash226dcb8f6144bdaafdfbd8f2f354be64 3785cc5b3bf52f8e398177b0ff1020b24aa86b8c 8c873472f4925d5d47521db4d52532d2983e9cb1bde8b43143a6cc6db56c35db
Analyzer | Verdict | Alert | urlquery | suspicious | Suspicious - Sinkholed / Blocked |
GET /cdn-cgi/images/browser-bar.png?1376755637 HTTP/1.1
Host: moose.sa.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://moose.sa.com/cdn-cgi/styles/cf.errors.css
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 29 Dec 2024 03:10:44 GMT
Content-Type: image/png
Content-Length: 715
Connection: keep-alive
Last-Modified: Mon, 16 Dec 2024 06:11:56 GMT
ETag: "675fc4ac-2cb"
Server: cloudflare
CF-RAY: 8f96994a09b056c7-OSL
X-Frame-Options: DENY
X-Content-Type-Options: nosniff
Vary: Accept-Encoding
Expires: Sun, 29 Dec 2024 05:10:44 GMT
Cache-Control: max-age=7200, public
Accept-Ranges: bytes
|
|
| moose.sa.com/cdn-cgi/images/cf-no-screenshot-error.png | 104.21.96.1 | 200 OK | 3.2 kB |
URL GET HTTP/1.1moose.sa.com/cdn-cgi/images/cf-no-screenshot-error.png IP 104.21.96.1:80
File typePNG image data, 178 x 175, 8-bit colormap, non-interlaced Hash0d768cbc261841d3affc933b9ac3130e aff136a4c761e1df1ada7e5d9a6ed0ebea74a4b7 1c53772285052e52bb7c12ad46a85a55747ed7bf66963fe1993fcef91ff5b0d0
Analyzer | Verdict | Alert | urlquery | suspicious | Suspicious - Sinkholed / Blocked |
GET /cdn-cgi/images/cf-no-screenshot-error.png HTTP/1.1
Host: moose.sa.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://moose.sa.com/cdn-cgi/styles/cf.errors.css
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 29 Dec 2024 03:10:44 GMT
Content-Type: image/png
Content-Length: 3213
Connection: keep-alive
Last-Modified: Fri, 06 Dec 2024 15:30:33 GMT
ETag: "67531899-c8d"
Server: cloudflare
CF-RAY: 8f96994a1b87b4f3-OSL
X-Frame-Options: DENY
X-Content-Type-Options: nosniff
Vary: Accept-Encoding
Expires: Sun, 29 Dec 2024 05:10:44 GMT
Cache-Control: max-age=7200, public
Accept-Ranges: bytes
|
|
| moose.sa.com/cdn-cgi/challenge-platform/scripts/jsd/main.js | 104.21.112.1 | 302 Moved Temporarily | 143 B |
URL GET HTTP/1.1moose.sa.com/cdn-cgi/challenge-platform/scripts/jsd/main.js IP 104.21.112.1:80
File typeHTML document, ASCII text, with CRLF line terminators Hashcb7b8f439b04c00f4a2d78160ddfee8d 9aa44b5d68f6359f10de0dcd24ea3e12548d9bd4 12755429beb15d5eb57eafa45b8dba326343dd099bf0552038694c3856e8860e
GET /cdn-cgi/challenge-platform/scripts/jsd/main.js HTTP/1.1
Host: moose.sa.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Moved Temporarily
Date: Sun, 29 Dec 2024 03:10:44 GMT
Content-Type: text/html
Content-Length: 143
Connection: keep-alive
Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Location: https://moose.sa.com/cdn-cgi/challenge-platform/scripts/jsd/main.js
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=asOe4a8PHwVzdVznh8PX676UX%2BJlC%2Bb9R5xB0FiMRodD1FCRxDiUzZ6Z8QZpQfmkS2Eerj9JqW3H4LaAHQgkb6lTb4ySWCxfO2HXRWc%2BCwADgRIMB5XrYJKfCk%2B0exA%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 8f96994a79db56c7-OSL
alt-svc: h2=":443"; ma=60
server-timing: cfL4;desc="?proto=TCP&rtt=538&min_rtt=408&rtt_var=101&sent=11&recv=16&lost=0&retrans=0&sent_bytes=9161&recv_bytes=1446&delivery_rate=10773809&cwnd=257&unsent_bytes=0&cid=0000000000000000&ts=0&x=0"
|
|
| moose.sa.com/favicon.ico | 104.21.96.1 | 403 Forbidden | 1.7 kB |
IP 104.21.96.1:80
File typeHTML document, ASCII text, with very long lines (394) Hashae5521291e8c58db10015db945fa5a3f 5d32879e5eaef98900881fb1f97e330f55d58174 967c0f8f48b1213d13d1fc02c99db8c9589ac15e0c416b62978741263b907990
GET /favicon.ico HTTP/1.1
Host: moose.sa.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://moose.sa.com/
DNT: 1
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 403 Forbidden
Date: Sun, 29 Dec 2024 03:10:44 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
X-Frame-Options: SAMEORIGIN
Referrer-Policy: same-origin
Cache-Control: max-age=15
Expires: Sun, 29 Dec 2024 03:10:59 GMT
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=VjK2nU%2BnkgcNO9RDFn%2B2D%2BhrfGT7xfHxQYpmUgXe0GU9Mp4rL5gJ7O%2FtegD1dzfsaQR2kX%2BDU00YdJ7OwlE%2Bgi5UafzFtP%2FzjpztkNfK9Mp0dygy9OJ0WXlsL%2BIXYEo%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 8f96994a7b9fb4f3-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
server-timing: cfL4;desc="?proto=TCP&rtt=456&min_rtt=437&rtt_var=122&sent=4&recv=7&lost=0&retrans=0&sent_bytes=3651&recv_bytes=732&delivery_rate=8601980&cwnd=252&unsent_bytes=0&cid=0000000000000000&ts=0&x=0"
|
|
| moose.sa.com/cdn-cgi/challenge-platform/scripts/jsd/main.js | 104.21.112.1 | 302 Found | 0 B |
URL GET HTTP/1.1moose.sa.com/cdn-cgi/challenge-platform/scripts/jsd/main.js IP 104.21.112.1:80
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /cdn-cgi/challenge-platform/scripts/jsd/main.js HTTP/1.1
Host: moose.sa.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
date: Sun, 29 Dec 2024 03:10:44 GMT
content-length: 0
location: /cdn-cgi/challenge-platform/h/b/scripts/jsd/787bc399e22f/main.js?
cache-control: max-age=300, stale-if-error=10800, stale-while-revalidate=10800, public
access-control-allow-origin: *
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=5Go6E1ocs0OL1ivxy3ZkuqDUWlUH4%2FgltpNpH9YM7wZ9ZmMHR%2FPdDWRcsqs785uE58yJGTMmc%2FRQpSd595G38Hm1Il3hY3YWvM8%2BZz7Rm%2B7AbUofGeO%2BT3ZXCH2V6zQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8f96994ac9be7127-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=651&min_rtt=541&rtt_var=149&sent=7&recv=10&lost=0&retrans=0&sent_bytes=3277&recv_bytes=1186&delivery_rate=6662576&cwnd=253&unsent_bytes=0&cid=756c68e3fb2ae744&ts=24&x=0"
X-Firefox-Spdy: h2
|
|
| moose.sa.com/cdn-cgi/challenge-platform/h/b/jsd/r/8f969947b84f56c7 | 104.21.96.1 | 302 Moved Temporarily | 143 B |
URL OPTIONS HTTP/3moose.sa.com/cdn-cgi/challenge-platform/h/b/jsd/r/8f969947b84f56c7 IP 104.21.96.1:443
CertificateIssuerGoogle Trust Services Subjectmoose.sa.com Fingerprint55:B1:41:B0:F2:C1:90:98:E9:CD:DC:E7:5F:C3:05:65:39:B4:09:8D ValiditySat, 28 Dec 2024 10:35:31 GMT - Fri, 28 Mar 2025 11:33:44 GMT
File typeHTML document, ASCII text, with CRLF line terminators Hashcb7b8f439b04c00f4a2d78160ddfee8d 9aa44b5d68f6359f10de0dcd24ea3e12548d9bd4 12755429beb15d5eb57eafa45b8dba326343dd099bf0552038694c3856e8860e
POST /cdn-cgi/challenge-platform/h/b/jsd/r/8f969947b84f56c7 HTTP/1.1
Host: moose.sa.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/json
Content-Length: 11549
Origin: http://moose.sa.com
DNT: 1
Connection: keep-alive
Referer: http://moose.sa.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Moved Temporarily
Date: Sun, 29 Dec 2024 03:10:45 GMT
Content-Type: text/html
Content-Length: 143
Connection: keep-alive
Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Location: https://moose.sa.com/cdn-cgi/challenge-platform/h/b/jsd/r/8f969947b84f56c7
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=qEPk%2BVUzme6TLqZSq67vcRUtJeaNcn7Ykf9qllWMyez8BIFZa5hDbhHh6rYm7%2BcTxYxWTWq9vP3Qdv%2FzWDOADxMhSy5O6OfNxEGCfJdd7fTeVyThi%2F3F9dyURhEBxZA%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 8f96994c0c49b4f3-OSL
alt-svc: h2=":443"; ma=60
server-timing: cfL4;desc="?proto=TCP&rtt=503&min_rtt=437&rtt_var=120&sent=10&recv=19&lost=0&retrans=0&sent_bytes=6344&recv_bytes=12723&delivery_rate=8601980&cwnd=255&unsent_bytes=0&cid=0000000000000000&ts=0&x=0"
|
|
| moose.sa.com/cdn-cgi/challenge-platform/h/b/jsd/r/8f969947b84f56c7 | 104.21.112.1 | 405 Method Not Allowed | 0 B |
URL OPTIONS HTTP/3moose.sa.com/cdn-cgi/challenge-platform/h/b/jsd/r/8f969947b84f56c7 IP 104.21.112.1:443
CertificateIssuerGoogle Trust Services Subjectmoose.sa.com Fingerprint55:B1:41:B0:F2:C1:90:98:E9:CD:DC:E7:5F:C3:05:65:39:B4:09:8D ValiditySat, 28 Dec 2024 10:35:31 GMT - Fri, 28 Mar 2025 11:33:44 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /cdn-cgi/challenge-platform/h/b/jsd/r/8f969947b84f56c7 HTTP/1.1
Host: moose.sa.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Referer: http://moose.sa.com/
Origin: http://moose.sa.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 405 Method Not Allowed
date: Sun, 29 Dec 2024 03:10:45 GMT
content-length: 0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=EIh%2BjTfK%2BGe82p4oCkRxjYlFXvb7%2Bt7Qew4d7ntk4gRKlbcd8FnGwGUEdAE0tnJg7T43dzbCBIfxUKQEYwABorTLgrcq5QUkvoElp6anwz7g1hj6SG6kpgYRevBN8C0%3D"}],"group":"cf-nel","max_age":604800}
allow: POST
cf-ray: 8f96994c6adf0b65-OSL
server: cloudflare
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
|
|
| moose.sa.com/cdn-cgi/challenge-platform/h/b/scripts/jsd/787bc399e22f/main.js? | 104.21.112.1 | 200 OK | 8.8 kB |
URL GET HTTP/2moose.sa.com/cdn-cgi/challenge-platform/h/b/scripts/jsd/787bc399e22f/main.js? IP 104.21.112.1:443
CertificateIssuerGoogle Trust Services Subjectmoose.sa.com Fingerprint55:B1:41:B0:F2:C1:90:98:E9:CD:DC:E7:5F:C3:05:65:39:B4:09:8D ValiditySat, 28 Dec 2024 10:35:31 GMT - Fri, 28 Mar 2025 11:33:44 GMT
File typeJavaScript source, ASCII text, with very long lines (8751), with no line terminators Hash251e652eb57b637a326981988d44fb52 c5da0e62f37ea0a4070a6b31910e580530ce4acd c2bb21a77f6dbe99ec3b250dc1fd54a83abcca4d3df4b30759ad11360f526bf9
GET /cdn-cgi/challenge-platform/h/b/scripts/jsd/787bc399e22f/main.js? HTTP/1.1
Host: moose.sa.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 29 Dec 2024 03:10:44 GMT
content-type: application/javascript; charset=UTF-8
cache-control: max-age=14400, stale-if-error=10800, stale-while-revalidate=10800, public
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=qjmDhJKK6JZb73kQ90Sv44qih3cBoePFQMZU6vv5KmJI%2FWeb5E0w%2FM%2BVQGC%2FewZ4oSnm1BOvEtI5Kj4uAJAipgaSNfmzbfazuXq9UpQe3EqqZVkvuY%2BZgFl%2FRTSvwjk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8f96994ad9ca7127-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=1356&min_rtt=541&rtt_var=1522&sent=8&recv=12&lost=0&retrans=0&sent_bytes=3950&recv_bytes=1298&delivery_rate=6662576&cwnd=255&unsent_bytes=0&cid=756c68e3fb2ae744&ts=38&x=0"
X-Firefox-Spdy: h2
|
|