| t1.a.editions-legislatives.fr/r/?id=hfe20c57a,3602a3f1,7f94ba88&p1=xftprojects.com/dfgfb/2a803cdf6d57653902dba0f326ac718fba5d3582/QHNsdXJwbWFpbC5uZXRkY29yY29yYW5AOTA4ZGV2aWNlcy5jb20= |  52.50.224.229 | 302 Found | 17 B |
URL t1.a.editions-legislatives.fr/r/?id=hfe20c57a,3602a3f1,7f94ba88&p1=xftprojects.com/dfgfb/2a803cdf6d57653902dba0f326ac718fba5d3582/QHNsdXJwbWFpbC5uZXRkY29yY29yYW5AOTA4ZGV2aWNlcy5jb20= IP52.50.224.229:0
File typeASCII text, with no line terminators Hashedf537e37d4549950774190c58f93b76 4e2078632eccec8993f151be9338bbcb88ce6f58 afff9c63cfeacd26e5d4000edf576f1386d6729dca783eb45004f484a73a3514
GET /r/?id=hfe20c57a,3602a3f1,7f94ba88&p1=xftprojects.com/dfgfb/2a803cdf6d57653902dba0f326ac718fba5d3582/QHNsdXJwbWFpbC5uZXRkY29yY29yYW5AOTA4ZGV2aWNlcy5jb20= HTTP/1.1
Host: t1.a.editions-legislatives.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
date: Fri, 15 Nov 2024 11:28:38 GMT
content-type: text/plain; charset=utf-8
content-length: 17
location: https://xftprojects.com/dfgfb/2a803cdf6d57653902dba0f326ac718fba5d3582/QHNsdXJwbWFpbC5uZXRkY29yY29yYW5AOTA4ZGV2aWNlcy5jb20=
server: Apache
x-robots-tag: noindex
p3p: CP="CAO DSP COR CURa DEVa TAIa OUR BUS IND UNI COM NAV"
set-cookie: AMCV_EDB0539A5733225A7F000101%40AdobeOrg=MCMID%7C88979825657307463670783591150790377471; Domain=editions-legislatives.fr; Path=/; Expires=Wed, 10-Dec-2025 11:28:38 GMT
nlid=fe20c57a|3602a3f1; Domain=editions-legislatives.fr; Path=/
nllastdelid=3602a3f1; Domain=editions-legislatives.fr; Path=/; Expires=Wed, 10-Dec-2025 11:28:38 GMT
X-Firefox-Spdy: h2
|
|
| xftprojects.com/dfgfb/2a803cdf6d57653902dba0f326ac718fba5d3582/QHNsdXJwbWFpbC5uZXRkY29yY29yYW5AOTA4ZGV2aWNlcy5jb20= |  162.241.114.35 | 200 OK | 0 B |
URL xftprojects.com/dfgfb/2a803cdf6d57653902dba0f326ac718fba5d3582/QHNsdXJwbWFpbC5uZXRkY29yY29yYW5AOTA4ZGV2aWNlcy5jb20= IP162.241.114.35:0 ASN#19871 NETWORK-SOLUTIONS-HOSTING
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /dfgfb/2a803cdf6d57653902dba0f326ac718fba5d3582/QHNsdXJwbWFpbC5uZXRkY29yY29yYW5AOTA4ZGV2aWNlcy5jb20= HTTP/1.1
Host: xftprojects.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 15 Nov 2024 11:28:38 GMT
Server: Apache
refresh: 0;url=https://coffrman.com/?tgdhlizu&qrc=@slurpmail.netdcorcoran@908devices.com
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
|
|
| coffrman.com/?tgdhlizu&qrc=@slurpmail.netdcorcoran@908devices.com |  82.153.68.97 | 302 Found | 0 B |
URL User Request GET HTTP/1.1coffrman.com/?tgdhlizu&qrc=@slurpmail.netdcorcoran@908devices.com IP82.153.68.97:443
CertificateIssuerLet's Encrypt Subjectcoffrman.com Fingerprint3D:31:9B:0E:FE:B0:D4:72:6C:AB:AF:7C:FE:91:8D:EF:EB:14:69:61 ValidityFri, 01 Nov 2024 08:18:55 GMT - Thu, 30 Jan 2025 08:18:54 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Microsoft Outlook |
GET /?tgdhlizu&qrc=@slurpmail.netdcorcoran@908devices.com HTTP/1.1
Host: coffrman.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
Set-Cookie: qPdM=TFUiw8BqNebh; path=/; samesite=none; secure; httponly
qPdM.sig=-zeRAM2iOv6UskNIOoFwxnRKb30; path=/; samesite=none; secure; httponly
location: /?tgdhlizu=7e9abdb88ba060fa984bb0efce41379a73ecaf40a6350b1824db59bfb072229fbd46386435eace3de17dba4deeef77d611a2eb715f05591ace7b4d5a39084f2c&qrc=%40slurpmail.netdcorcoran%40908devices.com
Date: Fri, 15 Nov 2024 11:28:39 GMT
Connection: keep-alive
Keep-Alive: timeout=5
Transfer-Encoding: chunked
|
|
| coffrman.com/?tgdhlizu=7e9abdb88ba060fa984bb0efce41379a73ecaf40a6350b1824db59bfb072229fbd46386435eace3de17dba4deeef77d611a2eb715f05591ace7b4d5a39084f2c&qrc=%40slurpmail.netdcorcoran%40908devices.com | 82.153.68.97 | 200 OK | 3.3 kB |
URL User Request GET HTTP/1.1coffrman.com/?tgdhlizu=7e9abdb88ba060fa984bb0efce41379a73ecaf40a6350b1824db59bfb072229fbd46386435eace3de17dba4deeef77d611a2eb715f05591ace7b4d5a39084f2c&qrc=%40slurpmail.netdcorcoran%40908devices.com IP82.153.68.97:443
CertificateIssuerLet's Encrypt Subjectcoffrman.com Fingerprint3D:31:9B:0E:FE:B0:D4:72:6C:AB:AF:7C:FE:91:8D:EF:EB:14:69:61 ValidityFri, 01 Nov 2024 08:18:55 GMT - Thu, 30 Jan 2025 08:18:54 GMT
File typeHTML document, ASCII text, with very long lines (1928) Hash0053c7fcbb14363be6f78572dd0c1750 4f943772ae36f8e0346bf9556ca0f1de847968b8 b1ec112111ce76a45250b55eceeb1996660aea273217c49c9b6c1fea7d01893b
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Microsoft Outlook |
GET /?tgdhlizu=7e9abdb88ba060fa984bb0efce41379a73ecaf40a6350b1824db59bfb072229fbd46386435eace3de17dba4deeef77d611a2eb715f05591ace7b4d5a39084f2c&qrc=%40slurpmail.netdcorcoran%40908devices.com HTTP/1.1
Host: coffrman.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: qPdM=TFUiw8BqNebh; qPdM.sig=-zeRAM2iOv6UskNIOoFwxnRKb30
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: text/html;charset=UTF-8
Date: Fri, 15 Nov 2024 11:28:39 GMT
Connection: keep-alive
Keep-Alive: timeout=5
Transfer-Encoding: chunked
|
|
| challenges.cloudflare.com/turnstile/v0/api.js?onload=onloadTurnstileCallback |  104.18.94.41 | 302 Found | 0 B |
URL GET HTTP/2challenges.cloudflare.com/turnstile/v0/api.js?onload=onloadTurnstileCallback IP104.18.94.41:443
Requested byhttps://coffrman.com/?tgdhlizu=7e9abdb88ba060fa984bb0efce41379a73ecaf40a6350b1824db59bfb072229fbd46386435eace3de17dba4deeef77d611a2eb715f05591ace7b4d5a39084f2c&qrc=%40slurpmail.netdcorcoran%40908devices.com CertificateIssuerGoogle Trust Services Subjectchallenges.cloudflare.com FingerprintC1:16:CA:AE:53:D5:B8:63:59:BB:EB:73:AB:F0:98:7E:EE:7F:E3:EB ValiditySun, 03 Nov 2024 16:27:50 GMT - Sat, 01 Feb 2025 17:27:46 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /turnstile/v0/api.js?onload=onloadTurnstileCallback HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://coffrman.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
date: Fri, 15 Nov 2024 11:28:39 GMT
content-length: 0
access-control-allow-origin: *
cache-control: max-age=300, stale-if-error=10800, stale-while-revalidate=300, public
cross-origin-resource-policy: cross-origin
location: /turnstile/v0/b/22755d9a86c9/api.js
vary: Accept-Encoding
server: cloudflare
cf-ray: 8e2ee6285e5fb52d-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| coffrman.com/favicon.ico | 82.153.68.97 | 500 Internal Server Error | 22 B |
IP82.153.68.97:443
Requested byhttps://coffrman.com/?tgdhlizu=7e9abdb88ba060fa984bb0efce41379a73ecaf40a6350b1824db59bfb072229fbd46386435eace3de17dba4deeef77d611a2eb715f05591ace7b4d5a39084f2c&qrc=%40slurpmail.netdcorcoran%40908devices.com CertificateIssuerLet's Encrypt Subjectcoffrman.com Fingerprint3D:31:9B:0E:FE:B0:D4:72:6C:AB:AF:7C:FE:91:8D:EF:EB:14:69:61 ValidityFri, 01 Nov 2024 08:18:55 GMT - Thu, 30 Jan 2025 08:18:54 GMT
File typeASCII text, with no line terminators Hash6aab5444a217195068e4b25509bc0c50 7b22eaf7eaa9b7e1f664a0632d3894d406fe7933 fc5525d427bfa27792d3a87411be241c047d07f07c18e2fc36bf00b1c2e33d07
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Microsoft Outlook |
GET /favicon.ico HTTP/1.1
Host: coffrman.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://coffrman.com/?tgdhlizu=7e9abdb88ba060fa984bb0efce41379a73ecaf40a6350b1824db59bfb072229fbd46386435eace3de17dba4deeef77d611a2eb715f05591ace7b4d5a39084f2c&qrc=%40slurpmail.netdcorcoran%40908devices.com
Cookie: qPdM=TFUiw8BqNebh; qPdM.sig=-zeRAM2iOv6UskNIOoFwxnRKb30
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 500 Internal Server Error
Date: Fri, 15 Nov 2024 11:28:39 GMT
Connection: keep-alive
Keep-Alive: timeout=5
Transfer-Encoding: chunked
|
|
| challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/cmg/1 | 104.18.94.41 | 200 OK | 61 B |
URL GET HTTP/3challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/cmg/1 IP104.18.94.41:443
Requested byhttps://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/qe8z2/0x4AAAAAAAyqY9aGCvMOiI9O/auto/fbE/normal/auto/ CertificateIssuerGoogle Trust Services Subjectchallenges.cloudflare.com FingerprintC1:16:CA:AE:53:D5:B8:63:59:BB:EB:73:AB:F0:98:7E:EE:7F:E3:EB ValiditySun, 03 Nov 2024 16:27:50 GMT - Sat, 01 Feb 2025 17:27:46 GMT
File typePNG image data, 2 x 2, 8-bit/color RGB, non-interlaced Hash9246cca8fc3c00f50035f28e9f6b7f7d 3aa538440f70873b574f40cd793060f53ec17a5d c07d7d29e3c20fa6ca4c5d20663688d52bad13e129ad82ce06b80eb187d9dc84
GET /cdn-cgi/challenge-platform/h/b/cmg/1 HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/qe8z2/0x4AAAAAAAyqY9aGCvMOiI9O/auto/fbE/normal/auto/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 15 Nov 2024 11:28:40 GMT
content-type: image/png
content-length: 61
cache-control: max-age=2629800, public
priority: u=4,i=?0
server: cloudflare
cf-ray: 8e2ee62a2d3e56ba-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
|
|
| challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/qe8z2/0x4AAAAAAAyqY9aGCvMOiI9O/auto/fbE/normal/auto/ | 104.18.94.41 | 200 OK | 6.4 kB |
URL GET HTTP/3challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/qe8z2/0x4AAAAAAAyqY9aGCvMOiI9O/auto/fbE/normal/auto/ IP104.18.94.41:443
Requested byhttps://coffrman.com/?tgdhlizu=7e9abdb88ba060fa984bb0efce41379a73ecaf40a6350b1824db59bfb072229fbd46386435eace3de17dba4deeef77d611a2eb715f05591ace7b4d5a39084f2c&qrc=%40slurpmail.netdcorcoran%40908devices.com CertificateIssuerGoogle Trust Services Subjectchallenges.cloudflare.com FingerprintC1:16:CA:AE:53:D5:B8:63:59:BB:EB:73:AB:F0:98:7E:EE:7F:E3:EB ValiditySun, 03 Nov 2024 16:27:50 GMT - Sat, 01 Feb 2025 17:27:46 GMT
File typeHTML document, ASCII text, with very long lines (22061) Hasha9bfd48051c5eab84182ce0e2e30b9f8 b762cd7f5229e1e1b230711d1cc58af2dc039241 809ac0d1ccb4859095f7aa67609e2a17e58db63c66c97793fee1fb769e46a761
GET /cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/qe8z2/0x4AAAAAAAyqY9aGCvMOiI9O/auto/fbE/normal/auto/ HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://coffrman.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 15 Nov 2024 11:28:39 GMT
content-type: text/html; charset=UTF-8
cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
permissions-policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()
content-security-policy: frame-src https://challenges.cloudflare.com/; base-uri 'self'
cross-origin-embedder-policy: require-corp
cross-origin-opener-policy: same-origin
cross-origin-resource-policy: cross-origin
origin-agent-cluster: ?1
accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
critical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
referrer-policy: same-origin
document-policy: js-profiling
priority: u=4,i=?0
server: cloudflare
cf-ray: 8e2ee6290b3a56ba-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
|
|
| challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/pat/8e2ee6290b3a56ba/1731670120363/3f01cbef2e5ddfb03c3245b281d7311db1cc63cd209bbc7070e0d6a5c22b670d/gkDZyNDRcx5SsDy | 104.18.94.41 | 401 Unauthorized | 1 B |
URL GET HTTP/3challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/pat/8e2ee6290b3a56ba/1731670120363/3f01cbef2e5ddfb03c3245b281d7311db1cc63cd209bbc7070e0d6a5c22b670d/gkDZyNDRcx5SsDy IP104.18.94.41:443
Requested byhttps://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/qe8z2/0x4AAAAAAAyqY9aGCvMOiI9O/auto/fbE/normal/auto/ CertificateIssuerGoogle Trust Services Subjectchallenges.cloudflare.com FingerprintC1:16:CA:AE:53:D5:B8:63:59:BB:EB:73:AB:F0:98:7E:EE:7F:E3:EB ValiditySun, 03 Nov 2024 16:27:50 GMT - Sat, 01 Feb 2025 17:27:46 GMT
File typevery short file (no magic) Hashff44570aca8241914870afbc310cdb85 58668e7669fd564d99db5d581fcdb6a5618440b5 6da43b944e494e885e69af021f93c6d9331c78aa228084711429160a5bbd15b5
GET /cdn-cgi/challenge-platform/h/b/pat/8e2ee6290b3a56ba/1731670120363/3f01cbef2e5ddfb03c3245b281d7311db1cc63cd209bbc7070e0d6a5c22b670d/gkDZyNDRcx5SsDy HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/qe8z2/0x4AAAAAAAyqY9aGCvMOiI9O/auto/fbE/normal/auto/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 401 Unauthorized
date: Fri, 15 Nov 2024 11:28:42 GMT
content-type: text/plain; charset=UTF-8
content-length: 1
www-authenticate: PrivateToken challenge="AAIAGXBhdC1pc3N1ZXIuY2xvdWRmbGFyZS5jb20gPwHL7y5d37A8MkWygdcxHbHMY80gm7xwcODWpcIrZw0AGWNoYWxsZW5nZXMuY2xvdWRmbGFyZS5jb20=", token-key="MIIBUjA9BgkqhkiG9w0BAQowMKANMAsGCWCGSAFlAwQCAqEaMBgGCSqGSIb3DQEBCDALBglghkgBZQMEAgKiAwIBMAOCAQ8AMIIBCgKCAQEAscjm_UO_k901rNdCKgLw5bvI4i6M_jDNCIXpfs2LRbtxwLOrUyplqVvML_hVlB5tIDMuj0ihhaOFHose-Y0_UjQnNUGE_vol46VvGgscTMtTjU4xINriap8AMTIygvljEBt6my-nBwkUGhY3U9v5iKC-eWR5bTfvrqFsuIVxafkSfhHqDXB4KLGNjvOOV71GGJ9x4yxA-C2OcULZ1uDDKuvAaMhuiWdF6OzSTXruP9yPg1vmuteavOW1re0YDbCbtK16PhHdSzWym7v_FrvId-2zf26j50FlTd_vl_DcKNDVCgWDoU0uX3cU6V3rSQoVXREEqPr-2ywSGru8ZuXRoQIDAQAB", max-age=20, PrivateToken challenge="AAIAHXNhdC5wYXQtaXNzdWVyLmNsb3VkZmxhcmUuY29tID8By-8uXd-wPDJFsoHXMR2xzGPNIJu8cHDg1qXCK2cNABljaGFsbGVuZ2VzLmNsb3VkZmxhcmUuY29t", token-key="MIIBUjA9BgkqhkiG9w0BAQowMKANMAsGCWCGSAFlAwQCAqEaMBgGCSqGSIb3DQEBCDALBglghkgBZQMEAgKiAwIBMAOCAQ8AMIIBCgKCAQEAsLS4HBnLGydwK-bLQGRCaoyMsrXBRrDgQVmxS06j3UF0nYSd6GdTGCKIu1WV60eg-tJtTttfEVq7wHVQf4vzjYBidmCh88ebzxKv2GB6PESSodf5MsEup9xd5dxpkYScgL1CCJq89kRrOQ_CS61bvkL_oGyZf4ffqG5THgaOsopqj8dFLH6_SMy9yf8EgMYqpyjxfKsD-1_qb1m1DRjJEKPWKIGwmHXIKQJUqsxZFm4_Inwkxx7QMpVP4GyqlTxFVz7stWwJRSkMLHjEM_IWLUYfPhuwIUVqmRjGsY1n8flA1bRfxaWHNDxoi25-M2BKTP9NkNNJBbTKErhrZ9LGywIDAQAB", max-age=20, PrivateToken challenge="AAIALHBwLWlzc3Vlci1wcm9kdWN0aW9uLnJlc2VhcmNoLmNsb3VkZmxhcmUuY29tID8By-8uXd-wPDJFsoHXMR2xzGPNIJu8cHDg1qXCK2cNABljaGFsbGVuZ2VzLmNsb3VkZmxhcmUuY29t", token-key="MIIBUjA9BgkqhkiG9w0BAQowMKANMAsGCWCGSAFlAwQCAqEaMBgGCSqGSIb3DQEBCDALBglghkgBZQMEAgKiAwIBMAOCAQ8AMIIBCgKCAQEA2ofNYujuBSGe3VokTOshcBYsN3IYqVG1vzSM-oCNQXOis6OMxshBYgGBi7QofI09eX3MiEJXFbY9F5l3e8-_QYq1SaXGxnEUzFLxdxsrqg_HDC1t7FnimSy0L1ex7MmHaWHHFKZvblAZW4u3w1pnvpb9w-jFqacUEW3fpSMZS_Yd7X8ZtgHadv02nmX_vYOfXYz1-xrGqFTGxaoYv67qpr8Z_qEW3JxhCu5bAG07lhyKUQwCjYBaHaw9ts0dop6n4rTO43MDNBGwSB1W3JKJgCrpVXUb1nOd5pPabD8TOMECeRricTImLIJXlsMxbWvR9FO1r0FuE_1vIFSjDDXnaQIDAQAB", max-age=20
priority: u=4,i=?0
server: cloudflare
cf-ray: 8e2ee639ff2f56ba-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
|
|
| challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=8e2ee6290b3a56ba&lang=auto | 104.18.94.41 | 200 OK | 166 kB |
URL GET HTTP/3challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=8e2ee6290b3a56ba&lang=auto IP104.18.94.41:443
Requested byhttps://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/qe8z2/0x4AAAAAAAyqY9aGCvMOiI9O/auto/fbE/normal/auto/ CertificateIssuerGoogle Trust Services Subjectchallenges.cloudflare.com FingerprintC1:16:CA:AE:53:D5:B8:63:59:BB:EB:73:AB:F0:98:7E:EE:7F:E3:EB ValiditySun, 03 Nov 2024 16:27:50 GMT - Sat, 01 Feb 2025 17:27:46 GMT
File typeJavaScript source, ASCII text, with very long lines (65536), with no line terminators Size166 kB (166259 bytes) Hash4be4c26e89854d557673627b57d0b2d3 b7aff00540f7ca6919170c8021d8f5d1ec4bbd4d fdc1a91fbc35f211d45f34f15baccd88f0adc6dd6f0353de43e6c1524d18a8db
GET /cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=8e2ee6290b3a56ba&lang=auto HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/qe8z2/0x4AAAAAAAyqY9aGCvMOiI9O/auto/fbE/normal/auto/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 15 Nov 2024 11:28:40 GMT
content-type: application/javascript; charset=UTF-8
cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
priority: u=2,i=?0
server: cloudflare
cf-ray: 8e2ee62a2d4156ba-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
|
|
| challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/i/8e2ee6290b3a56ba/1731670120344/9YXImaR1oFrrZxs | 104.18.94.41 | 200 OK | 61 B |
URL GET HTTP/3challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/i/8e2ee6290b3a56ba/1731670120344/9YXImaR1oFrrZxs IP104.18.94.41:443
Requested byhttps://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/qe8z2/0x4AAAAAAAyqY9aGCvMOiI9O/auto/fbE/normal/auto/ CertificateIssuerGoogle Trust Services Subjectchallenges.cloudflare.com FingerprintC1:16:CA:AE:53:D5:B8:63:59:BB:EB:73:AB:F0:98:7E:EE:7F:E3:EB ValiditySun, 03 Nov 2024 16:27:50 GMT - Sat, 01 Feb 2025 17:27:46 GMT
File typePNG image data, 76 x 27, 8-bit/color RGB, non-interlaced Hashca1ffb772dfdfdfac2692fafb775ae8a 3893d73555b8f42fbc72c2c1cd912ae5108be2c8 09ec64c1fac9e05a6fe948385bd41999f0acd82acefcd86456fb111976def3d0
GET /cdn-cgi/challenge-platform/h/b/i/8e2ee6290b3a56ba/1731670120344/9YXImaR1oFrrZxs HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/qe8z2/0x4AAAAAAAyqY9aGCvMOiI9O/auto/fbE/normal/auto/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 15 Nov 2024 11:28:41 GMT
content-type: image/png
content-length: 61
priority: u=4,i=?0
server: cloudflare
cf-ray: 8e2ee6348deb56ba-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
|
|
| challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/flow/ov1/443493320:1731666940:AmnIPPMywI8DUOtLJnBS9r4xp_QGQyKNKZ73BzHOGlA/8e2ee6290b3a56ba/rlxveFGP34huuV6TrPwoENEdTgeBt.OV9Ek1z70zhuQ-1731670119-1.1.1.1-pIWjlDoYUzzjG_OU_bU73GXcnb9Vxunrd6.c8dJVX71TyRVdZuzE1SyNVt1ZDAJx | 104.18.94.41 | 200 OK | 26 kB |
URL POST HTTP/3challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/flow/ov1/443493320:1731666940:AmnIPPMywI8DUOtLJnBS9r4xp_QGQyKNKZ73BzHOGlA/8e2ee6290b3a56ba/rlxveFGP34huuV6TrPwoENEdTgeBt.OV9Ek1z70zhuQ-1731670119-1.1.1.1-pIWjlDoYUzzjG_OU_bU73GXcnb9Vxunrd6.c8dJVX71TyRVdZuzE1SyNVt1ZDAJx IP104.18.94.41:443
Requested byhttps://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/qe8z2/0x4AAAAAAAyqY9aGCvMOiI9O/auto/fbE/normal/auto/ CertificateIssuerGoogle Trust Services Subjectchallenges.cloudflare.com FingerprintC1:16:CA:AE:53:D5:B8:63:59:BB:EB:73:AB:F0:98:7E:EE:7F:E3:EB ValiditySun, 03 Nov 2024 16:27:50 GMT - Sat, 01 Feb 2025 17:27:46 GMT
File typeASCII text, with very long lines (26328), with no line terminators Hashd2ea8d5f5dea02c0e12ede66edf535f0 74e7f88e072693291a6aa526bb1dea92bdd313fa 084eb78e195c9a0dc673afccffa6553745187dcf41d96c2ba349771f833057de
POST /cdn-cgi/challenge-platform/h/b/flow/ov1/443493320:1731666940:AmnIPPMywI8DUOtLJnBS9r4xp_QGQyKNKZ73BzHOGlA/8e2ee6290b3a56ba/rlxveFGP34huuV6TrPwoENEdTgeBt.OV9Ek1z70zhuQ-1731670119-1.1.1.1-pIWjlDoYUzzjG_OU_bU73GXcnb9Vxunrd6.c8dJVX71TyRVdZuzE1SyNVt1ZDAJx HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/qe8z2/0x4AAAAAAAyqY9aGCvMOiI9O/auto/fbE/normal/auto/
Content-type: application/x-www-form-urlencoded
CF-Challenge: rlxveFGP34huuV6TrPwoENEdTgeBt.OV9Ek1z70zhuQ-1731670119-1.1.1.1-pIWjlDoYUzzjG_OU_bU73GXcnb9Vxunrd6.c8dJVX71TyRVdZuzE1SyNVt1ZDAJx
Content-Length: 29000
Origin: https://challenges.cloudflare.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 15 Nov 2024 11:28:42 GMT
content-type: text/plain; charset=UTF-8
cf-chl-gen: jqfBgwy63zAaB5ssg+UAE3S2LzTh9E1offYVhUJT85aK6VRPZRbE0S/wa4kX7l87jZoUg1RqiaMLJ3ez$xc5AHwjW4sc26WtJ
priority: u=3,i=?0
server: cloudflare
cf-ray: 8e2ee63ac87f56ba-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
|
|
| challenges.cloudflare.com/turnstile/v0/b/22755d9a86c9/api.js | 104.18.94.41 | 200 OK | 48 kB |
URL GET HTTP/2challenges.cloudflare.com/turnstile/v0/b/22755d9a86c9/api.js IP104.18.94.41:443
Requested byhttps://coffrman.com/?tgdhlizu=7e9abdb88ba060fa984bb0efce41379a73ecaf40a6350b1824db59bfb072229fbd46386435eace3de17dba4deeef77d611a2eb715f05591ace7b4d5a39084f2c&qrc=%40slurpmail.netdcorcoran%40908devices.com CertificateIssuerGoogle Trust Services Subjectchallenges.cloudflare.com FingerprintC1:16:CA:AE:53:D5:B8:63:59:BB:EB:73:AB:F0:98:7E:EE:7F:E3:EB ValiditySun, 03 Nov 2024 16:27:50 GMT - Sat, 01 Feb 2025 17:27:46 GMT
File typeJavaScript source, ASCII text, with very long lines (47671) Hashb804bcd42117b1bbe45326212af85105 7b4175aaf0b7e45e03390f50cb8ed93185017014 b7595c3d2e94df7416308fa2ccf5ae8832137c76d2e9a8b02e6ed2cb2d92e2f7
GET /turnstile/v0/b/22755d9a86c9/api.js HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://coffrman.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 15 Nov 2024 11:28:39 GMT
content-type: application/javascript; charset=UTF-8
last-modified: Mon, 28 Oct 2024 19:08:47 GMT
cache-control: max-age=31536000, stale-if-error=10800, stale-while-revalidate=31536000, public
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding
server: cloudflare
cf-ray: 8e2ee6288ed9b52d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/flow/ov1/443493320:1731666940:AmnIPPMywI8DUOtLJnBS9r4xp_QGQyKNKZ73BzHOGlA/8e2ee6290b3a56ba/rlxveFGP34huuV6TrPwoENEdTgeBt.OV9Ek1z70zhuQ-1731670119-1.1.1.1-pIWjlDoYUzzjG_OU_bU73GXcnb9Vxunrd6.c8dJVX71TyRVdZuzE1SyNVt1ZDAJx | 104.18.94.41 | 200 OK | 147 kB |
URL POST HTTP/3challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/flow/ov1/443493320:1731666940:AmnIPPMywI8DUOtLJnBS9r4xp_QGQyKNKZ73BzHOGlA/8e2ee6290b3a56ba/rlxveFGP34huuV6TrPwoENEdTgeBt.OV9Ek1z70zhuQ-1731670119-1.1.1.1-pIWjlDoYUzzjG_OU_bU73GXcnb9Vxunrd6.c8dJVX71TyRVdZuzE1SyNVt1ZDAJx IP104.18.94.41:443
Requested byhttps://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/qe8z2/0x4AAAAAAAyqY9aGCvMOiI9O/auto/fbE/normal/auto/ CertificateIssuerGoogle Trust Services Subjectchallenges.cloudflare.com FingerprintC1:16:CA:AE:53:D5:B8:63:59:BB:EB:73:AB:F0:98:7E:EE:7F:E3:EB ValiditySun, 03 Nov 2024 16:27:50 GMT - Sat, 01 Feb 2025 17:27:46 GMT
File typeASCII text, with very long lines (65536), with no line terminators Size147 kB (147200 bytes) Hashd71b36df5681e0ba1a0c802301e649c8 dc51f58a1e603a48e7a8dc3333c6acc856bc6988 776b2bdb5a966a252ef53bbeb899771d56281592b8d0080f250cfd30b6229ce8
POST /cdn-cgi/challenge-platform/h/b/flow/ov1/443493320:1731666940:AmnIPPMywI8DUOtLJnBS9r4xp_QGQyKNKZ73BzHOGlA/8e2ee6290b3a56ba/rlxveFGP34huuV6TrPwoENEdTgeBt.OV9Ek1z70zhuQ-1731670119-1.1.1.1-pIWjlDoYUzzjG_OU_bU73GXcnb9Vxunrd6.c8dJVX71TyRVdZuzE1SyNVt1ZDAJx HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/qe8z2/0x4AAAAAAAyqY9aGCvMOiI9O/auto/fbE/normal/auto/
Content-type: application/x-www-form-urlencoded
CF-Challenge: rlxveFGP34huuV6TrPwoENEdTgeBt.OV9Ek1z70zhuQ-1731670119-1.1.1.1-pIWjlDoYUzzjG_OU_bU73GXcnb9Vxunrd6.c8dJVX71TyRVdZuzE1SyNVt1ZDAJx
Content-Length: 2885
Origin: https://challenges.cloudflare.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 15 Nov 2024 11:28:40 GMT
content-type: text/plain; charset=UTF-8
cf-chl-gen: PgWVMbohhFkDzAnN6Y9HbjAEM7C+2XPIRK3s7EZlL43HsHX5O3U6MdSMqFqM+OOmuRmYLUIUTHuwJ3P6XRmu2tLaVKrOW37f6ocgWtJEAC1LpIQvmsNmL+A+LHs4mQ46CeFfv+YHlq6GiMv2MmUaSF7aybAILig4AqenRIC1uSb1L/56f8bgdf0qbHIRPqR7tdh1YW26/PW3+rKvVpptHc0HW0qIwtX43TqyO9keqV7nOUG4LQOn0wASvLyDxfLx0aGNmD+NJnK3Y/KdXQ5mM0r1/nk1VgYJG8lBAzDmIAcuWd5EYgvMAleI8GL5fiyNuN4tyeXnPPiyAp8Wijx6HKIRnjhupO0s8lDxFi9KEY29P5S7bcx3Xx7KwucddULalQcZ9ddL/JKZ0Aak71r2jGU22wvP+oiPNsSePQFRvrpaCtfPNMVXHE+5oq3wmW0TMIN6sScQigrPvQT+mCoG4A8ggOCrJCNIKv1J$MscwN2DFmv3vBGi9
priority: u=3,i=?0
server: cloudflare
cf-ray: 8e2ee62be82556ba-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
|
|