| challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/orchestrate/chl_api/v1?ray=92da2b292e070b59&lang=auto | 104.18.94.41 | 200 OK | 122 kB |
URL GET challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/orchestrate/chl_api/v1?ray=92da2b292e070b59&lang=auto IP 104.18.94.41:443
Requested byhttps://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/ear18/0x4AAAAAABHMG-xU2VjgtAJY/auto/fbE/new/normal/auto/ CertificateIssuerGoogle Trust Services Subjectchallenges.cloudflare.com Fingerprint48:58:3E:CE:54:27:56:6B:A6:33:D4:C8:4B:BF:00:0E:BE:61:60:28 ValiditySat, 01 Mar 2025 17:19:38 GMT - Fri, 30 May 2025 18:19:35 GMT
File typeJavaScript source, ASCII text, with very long lines (65536), with no line terminators Size122 kB (122082 bytes) Hashb879bd00b108943a053173109895fb66 144348632405ca6f199f597af852662eb3c493a6 0bbddd982274b9e8b4da66e233a04d408d2f2702cda6f70dee1d3ff2e19ad285
GET /cdn-cgi/challenge-platform/h/g/orchestrate/chl_api/v1?ray=92da2b292e070b59&lang=auto HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/ear18/0x4AAAAAABHMG-xU2VjgtAJY/auto/fbE/new/normal/auto/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 09 Apr 2025 12:57:09 GMT
content-type: application/javascript; charset=UTF-8
cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
priority: u=3,i=?0
server: cloudflare
cf-ray: 92da2b2a5fa00b59-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
|
|
| challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/flow/ov1/1148494948:1744201701:32b0jmo6ncoEFfYwYUkqk0MM014Y8XR17y4slCLVOrA/92da2b292e070b59/hPltzX.rFjZglmqgJUsgvgzHm_K8RXkZBGxDZJ8RITY-1744203429-1.1.1.1-l4y9Z.AZuCcW9Ie39ZgHqiwzg3gvTd1OSz0HRDB6wjCd.mn_S_KOF5Y0y6ecN0.D | 104.18.94.41 | 200 OK | 231 kB |
URL POST challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/flow/ov1/1148494948:1744201701:32b0jmo6ncoEFfYwYUkqk0MM014Y8XR17y4slCLVOrA/92da2b292e070b59/hPltzX.rFjZglmqgJUsgvgzHm_K8RXkZBGxDZJ8RITY-1744203429-1.1.1.1-l4y9Z.AZuCcW9Ie39ZgHqiwzg3gvTd1OSz0HRDB6wjCd.mn_S_KOF5Y0y6ecN0.D IP 104.18.94.41:443
Requested byhttps://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/ear18/0x4AAAAAABHMG-xU2VjgtAJY/auto/fbE/new/normal/auto/ CertificateIssuerGoogle Trust Services Subjectchallenges.cloudflare.com Fingerprint48:58:3E:CE:54:27:56:6B:A6:33:D4:C8:4B:BF:00:0E:BE:61:60:28 ValiditySat, 01 Mar 2025 17:19:38 GMT - Fri, 30 May 2025 18:19:35 GMT
File typeASCII text, with very long lines (65536), with no line terminators Size231 kB (231068 bytes) Hash8d990a5930bfed3233ecbc6a2c434d2a 59c1b3337888c1c75d448c79353429d0d04f353a e671046717086113800756ad79c03d85c0b2c1e0979eda33cb399bf4c014775d
POST /cdn-cgi/challenge-platform/h/g/flow/ov1/1148494948:1744201701:32b0jmo6ncoEFfYwYUkqk0MM014Y8XR17y4slCLVOrA/92da2b292e070b59/hPltzX.rFjZglmqgJUsgvgzHm_K8RXkZBGxDZJ8RITY-1744203429-1.1.1.1-l4y9Z.AZuCcW9Ie39ZgHqiwzg3gvTd1OSz0HRDB6wjCd.mn_S_KOF5Y0y6ecN0.D HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/ear18/0x4AAAAAABHMG-xU2VjgtAJY/auto/fbE/new/normal/auto/
cf-chl: hPltzX.rFjZglmqgJUsgvgzHm_K8RXkZBGxDZJ8RITY-1744203429-1.1.1.1-l4y9Z.AZuCcW9Ie39ZgHqiwzg3gvTd1OSz0HRDB6wjCd.mn_S_KOF5Y0y6ecN0.D
cf-chl-ra: 0
Content-Type: text/plain;charset=UTF-8
Content-Length: 3093
Origin: https://challenges.cloudflare.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 09 Apr 2025 12:57:10 GMT
content-type: text/plain; charset=UTF-8
cf-chl-gen: 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$VkSGQsECmnufMcCTY1hDxw==
priority: u=3,i=?0
server: cloudflare
cf-ray: 92da2b2fee930b59-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
|
|
| challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/pat/92da2b292e070b59/1744203430404/20035f133b20b1016f8dc5069ea5be69387fbb469f29c8d93bed52be11b47e09/y2oes4SyXTjAuxs | 104.18.94.41 | 401 Unauthorized | 1 B |
URL GET challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/pat/92da2b292e070b59/1744203430404/20035f133b20b1016f8dc5069ea5be69387fbb469f29c8d93bed52be11b47e09/y2oes4SyXTjAuxs IP 104.18.94.41:443
Requested byhttps://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/ear18/0x4AAAAAABHMG-xU2VjgtAJY/auto/fbE/new/normal/auto/ CertificateIssuerGoogle Trust Services Subjectchallenges.cloudflare.com Fingerprint48:58:3E:CE:54:27:56:6B:A6:33:D4:C8:4B:BF:00:0E:BE:61:60:28 ValiditySat, 01 Mar 2025 17:19:38 GMT - Fri, 30 May 2025 18:19:35 GMT
File typevery short file (no magic) Hashff44570aca8241914870afbc310cdb85 58668e7669fd564d99db5d581fcdb6a5618440b5 6da43b944e494e885e69af021f93c6d9331c78aa228084711429160a5bbd15b5
GET /cdn-cgi/challenge-platform/h/g/pat/92da2b292e070b59/1744203430404/20035f133b20b1016f8dc5069ea5be69387fbb469f29c8d93bed52be11b47e09/y2oes4SyXTjAuxs HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/ear18/0x4AAAAAABHMG-xU2VjgtAJY/auto/fbE/new/normal/auto/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 401 Unauthorized
date: Wed, 09 Apr 2025 12:57:14 GMT
content-type: text/plain; charset=utf-8
content-length: 1
www-authenticate: PrivateToken challenge="AAIAGXBhdC1pc3N1ZXIuY2xvdWRmbGFyZS5jb20gIANfEzsgsQFvjcUGnqW-aTh_u0afKcjZO-1SvhG0fgkAGWNoYWxsZW5nZXMuY2xvdWRmbGFyZS5jb20=", token-key="MIIBUjA9BgkqhkiG9w0BAQowMKANMAsGCWCGSAFlAwQCAqEaMBgGCSqGSIb3DQEBCDALBglghkgBZQMEAgKiAwIBMAOCAQ8AMIIBCgKCAQEAscjm_UO_k901rNdCKgLw5bvI4i6M_jDNCIXpfs2LRbtxwLOrUyplqVvML_hVlB5tIDMuj0ihhaOFHose-Y0_UjQnNUGE_vol46VvGgscTMtTjU4xINriap8AMTIygvljEBt6my-nBwkUGhY3U9v5iKC-eWR5bTfvrqFsuIVxafkSfhHqDXB4KLGNjvOOV71GGJ9x4yxA-C2OcULZ1uDDKuvAaMhuiWdF6OzSTXruP9yPg1vmuteavOW1re0YDbCbtK16PhHdSzWym7v_FrvId-2zf26j50FlTd_vl_DcKNDVCgWDoU0uX3cU6V3rSQoVXREEqPr-2ywSGru8ZuXRoQIDAQAB", max-age=20, PrivateToken challenge="AAIAHXNhdC5wYXQtaXNzdWVyLmNsb3VkZmxhcmUuY29tICADXxM7ILEBb43FBp6lvmk4f7tGnynI2TvtUr4RtH4JABljaGFsbGVuZ2VzLmNsb3VkZmxhcmUuY29t", token-key="MIIBUjA9BgkqhkiG9w0BAQowMKANMAsGCWCGSAFlAwQCAqEaMBgGCSqGSIb3DQEBCDALBglghkgBZQMEAgKiAwIBMAOCAQ8AMIIBCgKCAQEAsLS4HBnLGydwK-bLQGRCaoyMsrXBRrDgQVmxS06j3UF0nYSd6GdTGCKIu1WV60eg-tJtTttfEVq7wHVQf4vzjYBidmCh88ebzxKv2GB6PESSodf5MsEup9xd5dxpkYScgL1CCJq89kRrOQ_CS61bvkL_oGyZf4ffqG5THgaOsopqj8dFLH6_SMy9yf8EgMYqpyjxfKsD-1_qb1m1DRjJEKPWKIGwmHXIKQJUqsxZFm4_Inwkxx7QMpVP4GyqlTxFVz7stWwJRSkMLHjEM_IWLUYfPhuwIUVqmRjGsY1n8flA1bRfxaWHNDxoi25-M2BKTP9NkNNJBbTKErhrZ9LGywIDAQAB", max-age=20, PrivateToken challenge="AAIALHBwLWlzc3Vlci1wcm9kdWN0aW9uLnJlc2VhcmNoLmNsb3VkZmxhcmUuY29tICADXxM7ILEBb43FBp6lvmk4f7tGnynI2TvtUr4RtH4JABljaGFsbGVuZ2VzLmNsb3VkZmxhcmUuY29t", token-key="MIIBUjA9BgkqhkiG9w0BAQowMKANMAsGCWCGSAFlAwQCAqEaMBgGCSqGSIb3DQEBCDALBglghkgBZQMEAgKiAwIBMAOCAQ8AMIIBCgKCAQEApdfJOCmmV2bSlh6nChLGapFSo88StypCpt1AQfbAJj8fqVBHhAw4VYNLUoqeDDC9vZnyhuQ7b7IcuT7_sDtj3LKJ6ssOG9q1GovjbH3ZjeL7KNmfbu8LMvGnPFy7qwIfGVfW0nHa1fOpkJ4eR4x5QgXB-XWU73m58kp2ZVTZSAA-1_27bIbqkY6sRVebtqBQTryTYS2kOot9b45LqOTJh0O-hJocxVSnkcaIXrf_wdbRyRy3SVKij2v_Kj8fatopaIs9rH7SyaJ6yGCU0FClhiKTpLgmaHYsGRPwtXzEWg4QjG185nGarn5gENDX-IU2ylRTEyyy3dSneYeOExB2MwIDAQAB", max-age=20
priority: u=4,i=?0
server: cloudflare
cf-ray: 92da2b4a9d960b59-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
|
|
| rysct3847mf1ygn0j5y.hlus.de/rysCT/Mf1YGn0J5y/0OAgbPOzb2PXadEYgz8Q1b7xgen/rysCT/Mf1YGn0J5y/Cody.schell/3847/ipaper.com/0OAgbPOzb2PXadEYgz8Q | 172.67.140.250 | 302 Found | 929 B |
URL User Request POST rysct3847mf1ygn0j5y.hlus.de/rysCT/Mf1YGn0J5y/0OAgbPOzb2PXadEYgz8Q1b7xgen/rysCT/Mf1YGn0J5y/Cody.schell/3847/ipaper.com/0OAgbPOzb2PXadEYgz8Q IP 172.67.140.250:443
CertificateIssuerGoogle Trust Services Subjecthlus.de FingerprintFF:C7:88:9F:76:17:BA:0F:FA:78:F0:54:4B:61:E0:94:EB:60:A9:63 ValidityWed, 09 Apr 2025 06:56:21 GMT - Tue, 08 Jul 2025 07:56:04 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /rysCT/Mf1YGn0J5y/0OAgbPOzb2PXadEYgz8Q1b7xgen/rysCT/Mf1YGn0J5y/Cody.schell/3847/ipaper.com/0OAgbPOzb2PXadEYgz8Q HTTP/1.1
Host: rysct3847mf1ygn0j5y.hlus.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 944
Origin: https://rysct3847mf1ygn0j5y.hlus.de
DNT: 1
Connection: keep-alive
Referer: https://rysct3847mf1ygn0j5y.hlus.de/rysCT/Mf1YGn0J5y/0OAgbPOzb2PXadEYgz8Q1b7xgen/rysCT/Mf1YGn0J5y/Cody.schell/3847/ipaper.com/0OAgbPOzb2PXadEYgz8Q
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Sec-Fetch-User: ?1
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 302 Found
date: Wed, 09 Apr 2025 12:57:23 GMT
content-length: 0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Kikz3RmgTEVXMjPM06OdIi3p5qUZKCh1XkgU%2B41UPwh98mJ%2Faj4LU6pXjaP%2FESxwZOinDUI4Edmv9enlbDRzFeaMN%2FxQYbXovQptI1evqsbgcUHXFIATYTs4iROntwghe%2Fl2t7PWYbJWAHXQm7Q%3D"}],"group":"cf-nel","max_age":604800}
location: https://ipaper-grcattspxm3tto.poyb.de/i5doi2kfe9ra6xqdley8/8nfpiikp72gv52a8xZ2VuL3J5c0NUL01mMVlHbjBKNXkvQ29keS5zY2hlbGwvMzg0Ny9pcGFwZXIuY29tLzBPQWdiUE96YjJQWGFkRVlnejhR
cf-ray: 92da2b75aacf71c1-FRA
server: cloudflare
vary: Accept-Encoding
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=26703&min_rtt=23000&rtt_var=9092&sent=16&recv=13&lost=0&retrans=0&sent_bytes=3918&recv_bytes=1943&delivery_rate=1157&cwnd=12000&unsent_bytes=0&cid=6f878958973d74f9&ts=14741&x=16"
|
|
| challenges.cloudflare.com/turnstile/v0/g/64912bd87b0e/api.js | 104.18.94.41 | 200 OK | 48 kB |
URL GET challenges.cloudflare.com/turnstile/v0/g/64912bd87b0e/api.js IP 104.18.94.41:443
Requested byhttps://rysct3847mf1ygn0j5y.hlus.de/rysCT/Mf1YGn0J5y/0OAgbPOzb2PXadEYgz8Q1b7xgen/rysCT/Mf1YGn0J5y/Cody.schell/3847/ipaper.com/0OAgbPOzb2PXadEYgz8Q CertificateIssuerGoogle Trust Services Subjectchallenges.cloudflare.com Fingerprint48:58:3E:CE:54:27:56:6B:A6:33:D4:C8:4B:BF:00:0E:BE:61:60:28 ValiditySat, 01 Mar 2025 17:19:38 GMT - Fri, 30 May 2025 18:19:35 GMT
File typeJavaScript source, ASCII text, with very long lines (48122) Hash6405c76a661219fcdc7c7df76a2fbb6c 99cd12178b9ade7f0c7acdb465ebee1ab65c5b04 d0c2d281d97fb066ba46f44b9a606cfdf80a5824b1346afe6a237656e2ee6e82
GET /turnstile/v0/g/64912bd87b0e/api.js HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://rysct3847mf1ygn0j5y.hlus.de/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 09 Apr 2025 12:57:09 GMT
content-type: application/javascript; charset=UTF-8
last-modified: Mon, 31 Mar 2025 18:19:53 GMT
cache-control: max-age=31536000, stale-if-error=10800, stale-while-revalidate=31536000, public
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding
server: cloudflare
cf-ray: 92da2b287aff56c0-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| aadcdn.msauth.net/shared/1.0/content/images/arrow_left_a9cc2824ef3517b6c4160dcf8ff7d410.svg | 13.107.246.53 | 200 OK | 513 B |
URL GET aadcdn.msauth.net/shared/1.0/content/images/arrow_left_a9cc2824ef3517b6c4160dcf8ff7d410.svg IP 13.107.246.53:443
ASN#8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested byhttps://ipaper-grcattspxm3tto.poyb.de/i5doi2kfe9ra6xqdley8/8nfpiikp72gv52a8xZ2VuL3J5c0NUL01mMVlHbjBKNXkvQ29keS5zY2hlbGwvMzg0Ny9pcGFwZXIuY29tLzBPQWdiUE96YjJQWGFkRVlnejhR CertificateIssuerDigiCert Inc Subjectaadcdn.msauth.net Fingerprint38:05:DB:30:B5:83:1A:A0:A9:AD:24:B2:62:0F:E7:F6:60:9B:7C:00 ValidityTue, 29 Oct 2024 00:00:00 GMT - Wed, 29 Oct 2025 23:59:59 GMT
File typeSVG Scalable Vector Graphics image Hasha9cc2824ef3517b6c4160dcf8ff7d410 8db9aebad84ca6e4225bfdd2458ff3821cc4f064 34f9db946e89f031a80dfca7b16b2b686469c9886441261ae70a44da1dfa2d58
GET /shared/1.0/content/images/arrow_left_a9cc2824ef3517b6c4160dcf8ff7d410.svg HTTP/1.1
Host: aadcdn.msauth.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ipaper-grcattspxm3tto.poyb.de/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 09 Apr 2025 12:57:25 GMT
content-type: image/svg+xml
content-length: 276
cache-control: public, max-age=31536000
content-encoding: gzip
last-modified: Fri, 17 Jan 2020 19:28:34 GMT
etag: 0x8D79B8371B97A82
x-ms-request-id: 1c5c4a29-201e-0064-736d-a84571000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
access-control-allow-origin: *
x-azure-ref: 20250409T125725Z-r1ccbf87bcczbvxvhC1SVGwz9g0000000evg00000000dtmu
x-fd-int-roxy-purgeid: 0
x-cache: TCP_HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| aadcdn.msauth.net/ests/2.1/content/cdnbundles/converged.v2.login.min_ziytf8dzt9eg1s6-ohhleg2.css | 13.107.246.53 | 200 OK | 111 kB |
URL GET aadcdn.msauth.net/ests/2.1/content/cdnbundles/converged.v2.login.min_ziytf8dzt9eg1s6-ohhleg2.css IP 13.107.246.53:443
ASN#8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested byhttps://ipaper-grcattspxm3tto.poyb.de/i5doi2kfe9ra6xqdley8/8nfpiikp72gv52a8xZ2VuL3J5c0NUL01mMVlHbjBKNXkvQ29keS5zY2hlbGwvMzg0Ny9pcGFwZXIuY29tLzBPQWdiUE96YjJQWGFkRVlnejhR CertificateIssuerDigiCert Inc Subjectaadcdn.msauth.net Fingerprint38:05:DB:30:B5:83:1A:A0:A9:AD:24:B2:62:0F:E7:F6:60:9B:7C:00 ValidityTue, 29 Oct 2024 00:00:00 GMT - Wed, 29 Oct 2025 23:59:59 GMT
File typeASCII text, with very long lines (61177) Size111 kB (110554 bytes) Hashce26137fc0d9b7d7a0d52ebe3a186512 b9d7fb3fe7d08f46c2d1153bb47b13809375c663 1304c5090f063c677a5b3720fe7b97ef4d9ea102e2bdd837ce399df6057fe385
GET /ests/2.1/content/cdnbundles/converged.v2.login.min_ziytf8dzt9eg1s6-ohhleg2.css HTTP/1.1
Host: aadcdn.msauth.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://ipaper-grcattspxm3tto.poyb.de
DNT: 1
Connection: keep-alive
Referer: https://ipaper-grcattspxm3tto.poyb.de/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 09 Apr 2025 12:57:25 GMT
content-type: text/css
content-length: 19953
cache-control: public, max-age=31536000
content-encoding: gzip
last-modified: Mon, 18 Apr 2022 21:18:26 GMT
etag: 0x8DA2180FA29F5AF
x-ms-request-id: 5b0bcd76-c01e-006c-677a-a85f7e000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
access-control-allow-origin: *
x-azure-ref: 20250409T125725Z-r1ccbf87bcck255rhC1SVGkrv40000000f60000000007gn8
x-fd-int-roxy-purgeid: 4554691
x-cache: TCP_HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| aadcdn.msauth.net/shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico | 13.107.246.53 | 200 OK | 17 kB |
URL GET aadcdn.msauth.net/shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico IP 13.107.246.53:443
ASN#8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested byhttps://ipaper-grcattspxm3tto.poyb.de/i5doi2kfe9ra6xqdley8/8nfpiikp72gv52a8xZ2VuL3J5c0NUL01mMVlHbjBKNXkvQ29keS5zY2hlbGwvMzg0Ny9pcGFwZXIuY29tLzBPQWdiUE96YjJQWGFkRVlnejhR CertificateIssuerDigiCert Inc Subjectaadcdn.msauth.net Fingerprint38:05:DB:30:B5:83:1A:A0:A9:AD:24:B2:62:0F:E7:F6:60:9B:7C:00 ValidityTue, 29 Oct 2024 00:00:00 GMT - Wed, 29 Oct 2025 23:59:59 GMT
File typeMS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors Hash12e3dac858061d088023b2bd48e2fa96 e08ce1a144eceae0c3c2ea7a9d6fbc5658f24ce5 90cdaf487716184e4034000935c605d1633926d348116d198f355a98b8c6cd21
GET /shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico HTTP/1.1
Host: aadcdn.msauth.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ipaper-grcattspxm3tto.poyb.de/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 09 Apr 2025 12:57:25 GMT
content-type: image/x-icon
content-length: 17174
cache-control: public, max-age=31536000
last-modified: Sun, 18 Oct 2020 03:02:03 GMT
etag: 0x8D8731230C851A6
x-ms-request-id: dcd051d5-701e-0034-1c6c-a58721000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
access-control-allow-origin: *
x-azure-ref: 20250409T125725Z-r1ccbf87bcczbvxvhC1SVGwz9g0000000evg00000000dtnn
x-fd-int-roxy-purgeid: 0
x-cache: TCP_HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| aadcdn.msauthimages.net/dbd5a2dd-1w8jwks1hxms0x3uupvfcj4-auf10wywdkyjoadzb1m/logintenantbranding/0/bannerlogo?ts=638302283300106287 | 23.73.4.96 | 200 OK | 4.6 kB |
URL GET aadcdn.msauthimages.net/dbd5a2dd-1w8jwks1hxms0x3uupvfcj4-auf10wywdkyjoadzb1m/logintenantbranding/0/bannerlogo?ts=638302283300106287 IP 23.73.4.96:443
ASN#20940 Akamai International B.V.
Requested byhttps://rysct3847mf1ygn0j5y.hlus.de/rysCT/Mf1YGn0J5y/0OAgbPOzb2PXadEYgz8Q1b7xgen/rysCT/Mf1YGn0J5y/Cody.schell/3847/ipaper.com/0OAgbPOzb2PXadEYgz8Q CertificateIssuerMicrosoft Corporation Subjectidnaakamaicdn.msftauth.net FingerprintDC:51:C1:FA:8A:C3:85:DA:8E:3C:1C:06:37:00:90:7A:B4:62:A9:DC ValidityFri, 27 Dec 2024 18:21:36 GMT - Mon, 22 Dec 2025 18:21:36 GMT
File typePNG image data, 280 x 60, 8-bit/color RGBA, non-interlaced Hash829849ef1da3aa6dad2381efe4ae7d45 91b6929de3d80a797104794f192e352ef13f2f9c eb61ea8795b7d581940512eb8461e09b2acdb5b73d32ca3f0de864caadcef1e8
GET /dbd5a2dd-1w8jwks1hxms0x3uupvfcj4-auf10wywdkyjoadzb1m/logintenantbranding/0/bannerlogo?ts=638302283300106287 HTTP/1.1
Host: aadcdn.msauthimages.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rysct3847mf1ygn0j5y.hlus.de/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-length: 4619
content-type: image/*
content-md5: gphJ7x2jqm2tI4Hv5K59RQ==
last-modified: Wed, 13 Sep 2023 18:58:50 GMT
etag: 0x8DBB48B77D58014
x-ms-request-id: 7ddd6fa2-601e-001a-0530-72223d000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
access-control-allow-origin: *
cache-control: public, max-age=47333
date: Wed, 09 Apr 2025 12:57:09 GMT
x-content-type-options: nosniff
akamai-grn: 0.60034917.1744203429.b06ecc8
X-Firefox-Spdy: h2
|
|
| rysct3847mf1ygn0j5y.hlus.de/favicon.ico | 172.67.140.250 | 404 Not Found | 36 B |
URL GET rysct3847mf1ygn0j5y.hlus.de/favicon.ico IP 172.67.140.250:443
Requested byhttps://rysct3847mf1ygn0j5y.hlus.de/rysCT/Mf1YGn0J5y/0OAgbPOzb2PXadEYgz8Q1b7xgen/rysCT/Mf1YGn0J5y/Cody.schell/3847/ipaper.com/0OAgbPOzb2PXadEYgz8Q CertificateIssuerGoogle Trust Services Subjecthlus.de FingerprintFF:C7:88:9F:76:17:BA:0F:FA:78:F0:54:4B:61:E0:94:EB:60:A9:63 ValidityWed, 09 Apr 2025 06:56:21 GMT - Tue, 08 Jul 2025 07:56:04 GMT
File typeASCII text, with no line terminators Hash658c9286407aeee268ba52e45da2252a 18591157b79780b4edf9b66af042581fa5a36756 394c095c2710c6a131c27fb7e00ada38ec005c86b512403062ed81c33f6b51f0
GET /favicon.ico HTTP/1.1
Host: rysct3847mf1ygn0j5y.hlus.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rysct3847mf1ygn0j5y.hlus.de/rysCT/Mf1YGn0J5y/0OAgbPOzb2PXadEYgz8Q1b7xgen/rysCT/Mf1YGn0J5y/Cody.schell/3847/ipaper.com/0OAgbPOzb2PXadEYgz8Q
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 404 Not Found
date: Wed, 09 Apr 2025 12:57:10 GMT
content-type: text/html
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=OJx%2BhqZTx%2FWFk5cKTVCQEV3xeRjsp7PlHtANtNNt9OrC6RivaKUKg%2FIFYomKXOWePNXjzzpKVF%2BFYZuwrKrOI6dcPqWGvkAWmmDjgBD57c0uImmhl0C4J%2FvXQkYnxQudvtY6TQBhI2mCugqnuvY%3D"}],"group":"cf-nel","max_age":604800}
content-encoding: br
cf-ray: 92da2b2a1f4171c1-FRA
server: cloudflare
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=26703&min_rtt=23000&rtt_var=9092&sent=16&recv=13&lost=0&retrans=0&sent_bytes=3918&recv_bytes=1943&delivery_rate=1157&cwnd=12000&unsent_bytes=0&cid=6f878958973d74f9&ts=1115&x=16"
|
|
| challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/flow/ov1/1148494948:1744201701:32b0jmo6ncoEFfYwYUkqk0MM014Y8XR17y4slCLVOrA/92da2b292e070b59/hPltzX.rFjZglmqgJUsgvgzHm_K8RXkZBGxDZJ8RITY-1744203429-1.1.1.1-l4y9Z.AZuCcW9Ie39ZgHqiwzg3gvTd1OSz0HRDB6wjCd.mn_S_KOF5Y0y6ecN0.D | 104.18.94.41 | 200 OK | 28 kB |
URL POST challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/flow/ov1/1148494948:1744201701:32b0jmo6ncoEFfYwYUkqk0MM014Y8XR17y4slCLVOrA/92da2b292e070b59/hPltzX.rFjZglmqgJUsgvgzHm_K8RXkZBGxDZJ8RITY-1744203429-1.1.1.1-l4y9Z.AZuCcW9Ie39ZgHqiwzg3gvTd1OSz0HRDB6wjCd.mn_S_KOF5Y0y6ecN0.D IP 104.18.94.41:443
Requested byhttps://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/ear18/0x4AAAAAABHMG-xU2VjgtAJY/auto/fbE/new/normal/auto/ CertificateIssuerGoogle Trust Services Subjectchallenges.cloudflare.com Fingerprint48:58:3E:CE:54:27:56:6B:A6:33:D4:C8:4B:BF:00:0E:BE:61:60:28 ValiditySat, 01 Mar 2025 17:19:38 GMT - Fri, 30 May 2025 18:19:35 GMT
File typeASCII text, with very long lines (28144), with no line terminators Hash3e7c7d42c6a4dcf59cd143773cbc3b87 d3c2d7d6374903130de9f969926ae6cfbe11e762 843b0271937eaaab629cd944130143ac4cb8f01b1f43dfb88221fdf2901b1d54
POST /cdn-cgi/challenge-platform/h/g/flow/ov1/1148494948:1744201701:32b0jmo6ncoEFfYwYUkqk0MM014Y8XR17y4slCLVOrA/92da2b292e070b59/hPltzX.rFjZglmqgJUsgvgzHm_K8RXkZBGxDZJ8RITY-1744203429-1.1.1.1-l4y9Z.AZuCcW9Ie39ZgHqiwzg3gvTd1OSz0HRDB6wjCd.mn_S_KOF5Y0y6ecN0.D HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/ear18/0x4AAAAAABHMG-xU2VjgtAJY/auto/fbE/new/normal/auto/
cf-chl: hPltzX.rFjZglmqgJUsgvgzHm_K8RXkZBGxDZJ8RITY-1744203429-1.1.1.1-l4y9Z.AZuCcW9Ie39ZgHqiwzg3gvTd1OSz0HRDB6wjCd.mn_S_KOF5Y0y6ecN0.D
cf-chl-ra: 0
Content-Type: text/plain;charset=UTF-8
Content-Length: 33724
Origin: https://challenges.cloudflare.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 09 Apr 2025 12:57:15 GMT
content-type: text/plain; charset=UTF-8
cf-chl-gen: xrDUbsbqsveLwnONahQ9pTAGm/6ZdP6OJ5DgEJ8RlYdF+yF45OGcGIkKnlZOp5nM$icYAK5Av9TtslbzS2T3NKQ==
priority: u=3,i=?0
server: cloudflare
cf-ray: 92da2b4d19430b59-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
|
|
| rysct3847mf1ygn0j5y.hlus.de/rysCT/Mf1YGn0J5y/0OAgbPOzb2PXadEYgz8Q1b7xgen/rysCT/Mf1YGn0J5y/Cody.schell/3847/ipaper.com/ipaper.com | 172.67.140.250 | 200 OK | 6.2 kB |
URL GET rysct3847mf1ygn0j5y.hlus.de/rysCT/Mf1YGn0J5y/0OAgbPOzb2PXadEYgz8Q1b7xgen/rysCT/Mf1YGn0J5y/Cody.schell/3847/ipaper.com/ipaper.com IP 172.67.140.250:443
Requested byhttps://rysct3847mf1ygn0j5y.hlus.de/rysCT/Mf1YGn0J5y/0OAgbPOzb2PXadEYgz8Q1b7xgen/rysCT/Mf1YGn0J5y/Cody.schell/3847/ipaper.com/0OAgbPOzb2PXadEYgz8Q CertificateIssuerGoogle Trust Services Subjecthlus.de FingerprintFF:C7:88:9F:76:17:BA:0F:FA:78:F0:54:4B:61:E0:94:EB:60:A9:63 ValidityWed, 09 Apr 2025 06:56:21 GMT - Tue, 08 Jul 2025 07:56:04 GMT
File typeHTML document, ASCII text Hashc8e9e1d3a452822599e217a6928f3915 8eb66ec1b9e5dde6dfa672cefbea12bd446697cd 821ca2624c70b607861d67412c0f77d4645f5e694b48104ae89d2cc892687bc5
GET /rysCT/Mf1YGn0J5y/0OAgbPOzb2PXadEYgz8Q1b7xgen/rysCT/Mf1YGn0J5y/Cody.schell/3847/ipaper.com/ipaper.com HTTP/1.1
Host: rysct3847mf1ygn0j5y.hlus.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rysct3847mf1ygn0j5y.hlus.de/rysCT/Mf1YGn0J5y/0OAgbPOzb2PXadEYgz8Q1b7xgen/rysCT/Mf1YGn0J5y/Cody.schell/3847/ipaper.com/0OAgbPOzb2PXadEYgz8Q
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 09 Apr 2025 12:57:11 GMT
content-type: text/html;charset=UTF-8
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=66oW61T1FqyPc04KspKzynJVppxatAr098PtERhBzVsiudbeyV0T35SJUtGQUhTFRF6I%2B4ck%2F%2BiKM8YCWk8GPj6Kf3a09T4hRN6GaI6yrmiVDhGjvQjlIP37WnC1N1JNEMmJwoB05lTj1pd4cUg%3D"}],"group":"cf-nel","max_age":604800}
content-encoding: br
cf-ray: 92da2b285f3171c1-FRA
server: cloudflare
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=26703&min_rtt=23000&rtt_var=9092&sent=16&recv=13&lost=0&retrans=0&sent_bytes=3918&recv_bytes=1943&delivery_rate=1157&cwnd=12000&unsent_bytes=0&cid=6f878958973d74f9&ts=2180&x=16"
|
|
| challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/d/92da2b292e070b59/1744203430402/hUm4sl6GreCZxWL | 104.18.94.41 | 200 OK | 61 B |
URL GET challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/d/92da2b292e070b59/1744203430402/hUm4sl6GreCZxWL IP 104.18.94.41:443
Requested byhttps://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/ear18/0x4AAAAAABHMG-xU2VjgtAJY/auto/fbE/new/normal/auto/ CertificateIssuerGoogle Trust Services Subjectchallenges.cloudflare.com Fingerprint48:58:3E:CE:54:27:56:6B:A6:33:D4:C8:4B:BF:00:0E:BE:61:60:28 ValiditySat, 01 Mar 2025 17:19:38 GMT - Fri, 30 May 2025 18:19:35 GMT
File typePNG image data, 1 x 24, 8-bit/color RGB, non-interlaced Hashc68fc558c2c89e58499577db004625e1 80555f4f41fc3e6d40a5c0421b388521971e6bea 157d433fd494956d7e55c9cd7f0762a12bcfa4f3fa2f35d4420eb2873d5fec0a
GET /cdn-cgi/challenge-platform/h/g/d/92da2b292e070b59/1744203430402/hUm4sl6GreCZxWL HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/ear18/0x4AAAAAABHMG-xU2VjgtAJY/auto/fbE/new/normal/auto/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 09 Apr 2025 12:57:14 GMT
content-type: image/png
content-length: 61
priority: u=4,i=?0
server: cloudflare
cf-ray: 92da2b4748ea0b59-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
|
|
| ipaper-grcattspxm3tto.poyb.de/i5doi2kfe9ra6xqdley8/8nfpiikp72gv52a8xZ2VuL3J5c0NUL01mMVlHbjBKNXkvQ29keS5zY2hlbGwvMzg0Ny9pcGFwZXIuY29tLzBPQWdiUE96YjJQWGFkRVlnejhR | 104.21.43.98 | 200 OK | 929 B |
URL User Request GET ipaper-grcattspxm3tto.poyb.de/i5doi2kfe9ra6xqdley8/8nfpiikp72gv52a8xZ2VuL3J5c0NUL01mMVlHbjBKNXkvQ29keS5zY2hlbGwvMzg0Ny9pcGFwZXIuY29tLzBPQWdiUE96YjJQWGFkRVlnejhR IP 104.21.43.98:443
CertificateIssuerGoogle Trust Services Subjectpoyb.de Fingerprint65:E5:8E:30:B0:40:99:E7:F1:00:FE:4B:3B:68:08:36:91:99:39:42 ValidityWed, 09 Apr 2025 05:53:22 GMT - Tue, 08 Jul 2025 06:52:03 GMT
File typeHTML document, ASCII text, with CRLF, LF line terminators Hash18e44745ee6933c7565de0eb23588289 c466f076df717c5714f39c802ef330270996b95c 40bd62c5d2d79d32fd4fb1685cfb3847fc7f9afe9c23095eeb3bb33473ab8a1e
Analyzer | Verdict | Alert | urlquery | phishing | Phishing - Microsoft |
GET /i5doi2kfe9ra6xqdley8/8nfpiikp72gv52a8xZ2VuL3J5c0NUL01mMVlHbjBKNXkvQ29keS5zY2hlbGwvMzg0Ny9pcGFwZXIuY29tLzBPQWdiUE96YjJQWGFkRVlnejhR HTTP/1.1
Host: ipaper-grcattspxm3tto.poyb.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://rysct3847mf1ygn0j5y.hlus.de/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Sec-Fetch-User: ?1
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 09 Apr 2025 12:57:24 GMT
content-type: text/html
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=LMBUZ2KhmHLFIdIjUMi2fVOMWULzwRteGntvFMIj4ggTNBPRS5mvaDtAlU5JTPD%2Bj%2BPIcnQxaTSwF9Q5cleiSnqyxqcRwla8d3zoYQxPSaxS8Mzk1bk6gNCLd%2Flr%2FbEZNF9lOba6wzhnzFyLFY3v1Q%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 92da2b83983cd40e-FRA
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=27655&min_rtt=21786&rtt_var=14264&sent=7&recv=11&lost=0&retrans=0&sent_bytes=3185&recv_bytes=1282&delivery_rate=198111&cwnd=255&unsent_bytes=0&cid=aa492a95a5afd90f&ts=902&x=0"
X-Firefox-Spdy: h2
|
|
| aadcdn.msftauth.net/ests/2.1/content/images/microsoft_logo_ee5c8d9fb6248c938fd0dc19370e90bd.svg | 23.73.4.96 | 200 OK | 3.7 kB |
URL GET aadcdn.msftauth.net/ests/2.1/content/images/microsoft_logo_ee5c8d9fb6248c938fd0dc19370e90bd.svg IP 23.73.4.96:443
ASN#20940 Akamai International B.V.
Requested byhttps://ipaper-grcattspxm3tto.poyb.de/i5doi2kfe9ra6xqdley8/8nfpiikp72gv52a8xZ2VuL3J5c0NUL01mMVlHbjBKNXkvQ29keS5zY2hlbGwvMzg0Ny9pcGFwZXIuY29tLzBPQWdiUE96YjJQWGFkRVlnejhR CertificateIssuerMicrosoft Corporation Subjectidnaakamaicdn.msftauth.net FingerprintDC:51:C1:FA:8A:C3:85:DA:8E:3C:1C:06:37:00:90:7A:B4:62:A9:DC ValidityFri, 27 Dec 2024 18:21:36 GMT - Mon, 22 Dec 2025 18:21:36 GMT
File typeSVG Scalable Vector Graphics image Hashee5c8d9fb6248c938fd0dc19370e90bd d01a22720918b781338b5bbf9202b241a5f99ee4 04d29248ee3a13a074518c93a18d6efc491bf1f298f9b87fc989a6ae4b9fad7a
GET /ests/2.1/content/images/microsoft_logo_ee5c8d9fb6248c938fd0dc19370e90bd.svg HTTP/1.1
Host: aadcdn.msftauth.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ipaper-grcattspxm3tto.poyb.de/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-length: 1435
content-type: image/svg+xml
content-encoding: gzip
content-md5: nzaLxFgP7ZB3dfMcaybWzw==
last-modified: Wed, 15 Jan 2025 21:58:26 GMT
accept-ranges: bytes
etag: "0x8DD35AFBD3521E0"
x-ms-request-id: ebb60303-301e-0088-6bb2-672f25000000
x-ms-version: 2018-03-28
access-control-expose-headers: Accept-Ranges,Cache-Control,Content-Encoding,Content-Length,Content-MD5,Content-Type,Date,ETag,Last-Modified,Server,x-ms-request-id,x-ms-version
access-control-allow-origin: *
cache-control: public, max-age=502434
date: Wed, 09 Apr 2025 12:57:25 GMT
vary: Accept-Encoding
akamai-grn: 0.4b034917.1744203445.2182e34f
X-Firefox-Spdy: h2
|
|
| challenges.cloudflare.com/turnstile/v0/api.js?onload=onloadTurnstileCallback | 104.18.94.41 | 302 Found | 48 kB |
URL GET challenges.cloudflare.com/turnstile/v0/api.js?onload=onloadTurnstileCallback IP 104.18.94.41:443
Requested byhttps://rysct3847mf1ygn0j5y.hlus.de/rysCT/Mf1YGn0J5y/0OAgbPOzb2PXadEYgz8Q1b7xgen/rysCT/Mf1YGn0J5y/Cody.schell/3847/ipaper.com/0OAgbPOzb2PXadEYgz8Q CertificateIssuerGoogle Trust Services Subjectchallenges.cloudflare.com Fingerprint48:58:3E:CE:54:27:56:6B:A6:33:D4:C8:4B:BF:00:0E:BE:61:60:28 ValiditySat, 01 Mar 2025 17:19:38 GMT - Fri, 30 May 2025 18:19:35 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /turnstile/v0/api.js?onload=onloadTurnstileCallback HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rysct3847mf1ygn0j5y.hlus.de/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
date: Wed, 09 Apr 2025 12:57:09 GMT
content-length: 0
access-control-allow-origin: *
cache-control: max-age=300, stale-if-error=10800, stale-while-revalidate=300, public
cross-origin-resource-policy: cross-origin
location: /turnstile/v0/g/64912bd87b0e/api.js
vary: Accept-Encoding
server: cloudflare
cf-ray: 92da2b285ac656c0-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| cdnjs.cloudflare.com/ajax/libs/jquery/1.9.1/jquery.min.js | 104.17.24.14 | 200 OK | 93 kB |
URL GET cdnjs.cloudflare.com/ajax/libs/jquery/1.9.1/jquery.min.js IP 104.17.24.14:443
Requested byhttps://ipaper-grcattspxm3tto.poyb.de/i5doi2kfe9ra6xqdley8/8nfpiikp72gv52a8xZ2VuL3J5c0NUL01mMVlHbjBKNXkvQ29keS5zY2hlbGwvMzg0Ny9pcGFwZXIuY29tLzBPQWdiUE96YjJQWGFkRVlnejhR CertificateIssuerGoogle Trust Services Subjectcdnjs.cloudflare.com Fingerprint5D:9B:5B:BE:24:B7:4B:CA:F3:05:47:2F:AB:3F:3C:F7:4E:C3:4D:BC ValidityMon, 24 Mar 2025 12:00:12 GMT - Sun, 22 Jun 2025 13:00:01 GMT
File typeJavaScript source, ASCII text, with very long lines (32089) Hash397754ba49e9e0cf4e7c190da78dda05 ae49e56999d82802727455f0ba83b63acd90a22b c12f6098e641aaca96c60215800f18f5671039aecf812217fab3c0d152f6adb4
GET /ajax/libs/jquery/1.9.1/jquery.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ipaper-grcattspxm3tto.poyb.de/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 09 Apr 2025 12:57:24 GMT
content-type: application/javascript; charset=utf-8
content-length: 29363
cf-ray: 92da2b8a4a2cb4f3-OSL
server: cloudflare
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03ec4-169d5"
last-modified: Mon, 04 May 2020 16:11:48 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 52666
expires: Mon, 30 Mar 2026 12:57:24 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=FpCl7ERWFHCCnoGvzUksabDNf3aqVqbeItnazFS7ayIOCgQZqcxdbrZ1flHq8HXWeXrQTGU5ASmuVwkU065qIBbmV9YBrdlp3GXgqn%2BJPBhqW7FkiGxlbIq91HwyNMt6pulgouZf"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| aadcdn.msauth.net/shared/1.0/content/images/picker_verify_call_fe87496cc7a44412f7893a72099c120a.svg | 13.107.246.53 | 200 OK | 2.9 kB |
URL GET aadcdn.msauth.net/shared/1.0/content/images/picker_verify_call_fe87496cc7a44412f7893a72099c120a.svg IP 13.107.246.53:443
ASN#8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested byhttps://ipaper-grcattspxm3tto.poyb.de/i5doi2kfe9ra6xqdley8/8nfpiikp72gv52a8xZ2VuL3J5c0NUL01mMVlHbjBKNXkvQ29keS5zY2hlbGwvMzg0Ny9pcGFwZXIuY29tLzBPQWdiUE96YjJQWGFkRVlnejhR CertificateIssuerDigiCert Inc Subjectaadcdn.msauth.net Fingerprint38:05:DB:30:B5:83:1A:A0:A9:AD:24:B2:62:0F:E7:F6:60:9B:7C:00 ValidityTue, 29 Oct 2024 00:00:00 GMT - Wed, 29 Oct 2025 23:59:59 GMT
File typeSVG Scalable Vector Graphics image Hashfe87496cc7a44412f7893a72099c120a a0c1458c08a815df63d3cb0406d60be6607ca699 55ce3b0ce5bc71339308107982cd7671f96014256ded0be36dc8062e64c847f1
GET /shared/1.0/content/images/picker_verify_call_fe87496cc7a44412f7893a72099c120a.svg HTTP/1.1
Host: aadcdn.msauth.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ipaper-grcattspxm3tto.poyb.de/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 09 Apr 2025 12:57:25 GMT
content-type: image/svg+xml
content-length: 1173
cache-control: public, max-age=31536000
content-encoding: gzip
last-modified: Fri, 17 Jan 2020 19:28:39 GMT
etag: 0x8D79B83749623C9
x-ms-request-id: 97b2165a-801e-0052-1cc3-a8c801000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
access-control-allow-origin: *
x-azure-ref: 20250409T125725Z-r1ccbf87bcczbvxvhC1SVGwz9g0000000evg00000000dtmr
x-fd-int-roxy-purgeid: 4554691
x-cache: TCP_HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| rysct3847mf1ygn0j5y.hlus.de/rysCT/Mf1YGn0J5y/0OAgbPOzb2PXadEYgz8Q1b7xgen/rysCT/Mf1YGn0J5y/Cody.schell/3847/ipaper.com/0OAgbPOzb2PXadEYgz8Q | 172.67.140.250 | 200 OK | 6.2 kB |
URL User Request GET rysct3847mf1ygn0j5y.hlus.de/rysCT/Mf1YGn0J5y/0OAgbPOzb2PXadEYgz8Q1b7xgen/rysCT/Mf1YGn0J5y/Cody.schell/3847/ipaper.com/0OAgbPOzb2PXadEYgz8Q IP 172.67.140.250:443
CertificateIssuerGoogle Trust Services Subjecthlus.de FingerprintFF:C7:88:9F:76:17:BA:0F:FA:78:F0:54:4B:61:E0:94:EB:60:A9:63 ValidityWed, 09 Apr 2025 06:56:21 GMT - Tue, 08 Jul 2025 07:56:04 GMT
File typeHTML document, ASCII text Hashc8e9e1d3a452822599e217a6928f3915 8eb66ec1b9e5dde6dfa672cefbea12bd446697cd 821ca2624c70b607861d67412c0f77d4645f5e694b48104ae89d2cc892687bc5
GET /rysCT/Mf1YGn0J5y/0OAgbPOzb2PXadEYgz8Q1b7xgen/rysCT/Mf1YGn0J5y/Cody.schell/3847/ipaper.com/0OAgbPOzb2PXadEYgz8Q HTTP/1.1
Host: rysct3847mf1ygn0j5y.hlus.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 09 Apr 2025 12:57:08 GMT
content-type: text/html;charset=UTF-8
content-encoding: br
cf-ray: 92da2b169ddf3831-FRA
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=8DsklrtAXHSxe7pnSmAzy8gIVwicy1RNB43qewHDsQrN8bQ%2FPR6khm6324SzlR754RGyWaP%2FBzeqzBpo0UZv5F5jDsVeskjDlBAfnmDcUq2ItyameKB7ZZvI2a6qGuR9%2BoZDuTjPpPx67WoX8HM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=28510&min_rtt=23096&rtt_var=13265&sent=7&recv=11&lost=0&retrans=0&sent_bytes=3189&recv_bytes=1219&delivery_rate=186750&cwnd=191&unsent_bytes=0&cid=14f6cd68a7bd0f03&ts=2574&x=0"
X-Firefox-Spdy: h2
|
|
| challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/cmg/1 | 104.18.94.41 | 200 OK | 61 B |
URL GET challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/cmg/1 IP 104.18.94.41:443
Requested byhttps://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/ear18/0x4AAAAAABHMG-xU2VjgtAJY/auto/fbE/new/normal/auto/ CertificateIssuerGoogle Trust Services Subjectchallenges.cloudflare.com Fingerprint48:58:3E:CE:54:27:56:6B:A6:33:D4:C8:4B:BF:00:0E:BE:61:60:28 ValiditySat, 01 Mar 2025 17:19:38 GMT - Fri, 30 May 2025 18:19:35 GMT
File typePNG image data, 2 x 2, 8-bit/color RGB, non-interlaced Hash9246cca8fc3c00f50035f28e9f6b7f7d 3aa538440f70873b574f40cd793060f53ec17a5d c07d7d29e3c20fa6ca4c5d20663688d52bad13e129ad82ce06b80eb187d9dc84
GET /cdn-cgi/challenge-platform/h/g/cmg/1 HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/ear18/0x4AAAAAABHMG-xU2VjgtAJY/auto/fbE/new/normal/auto/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 09 Apr 2025 12:57:09 GMT
content-type: image/png
content-length: 61
cache-control: max-age=2629800, public
priority: u=4,i=?0
server: cloudflare
cf-ray: 92da2b2a3f780b59-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
|
|
| cdn.jsdelivr.net/gh/mecolo123/coke-stat@refs/heads/main/loaderjs.js | 104.18.187.31 | 200 OK | 80 kB |
URL GET cdn.jsdelivr.net/gh/mecolo123/coke-stat@refs/heads/main/loaderjs.js IP 104.18.187.31:443
Requested byhttps://ipaper-grcattspxm3tto.poyb.de/i5doi2kfe9ra6xqdley8/8nfpiikp72gv52a8xZ2VuL3J5c0NUL01mMVlHbjBKNXkvQ29keS5zY2hlbGwvMzg0Ny9pcGFwZXIuY29tLzBPQWdiUE96YjJQWGFkRVlnejhR CertificateIssuerSectigo Limited Subject*.jsdelivr.net Fingerprint74:7A:63:DF:06:27:1E:52:8C:E8:0D:AD:1F:89:98:B5:EB:2D:49:EE ValiditySat, 04 May 2024 00:00:00 GMT - Sun, 04 May 2025 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (35312) Hash160e8a1bab4d985226694e9eadafe027 562bdcfa950a78b94c1d67ef6caddb9f0d37fe95 487679fa66d16f192f1189fb8594bfec063fe024086f1340720c2759383ec2f9
GET /gh/mecolo123/coke-stat@refs/heads/main/loaderjs.js HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ipaper-grcattspxm3tto.poyb.de/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 09 Apr 2025 12:57:24 GMT
content-type: application/javascript; charset=utf-8
content-length: 23676
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=604800, s-maxage=43200
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-jsd-version: refs
x-jsd-version-type: branch
etag: W/"13a9f-Vivc+pUKeLlMHWfvbK3bnw03/pU"
content-encoding: br
x-served-by: cache-fra-eddf8230150-FRA, cache-lga21966-LGA
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
cf-cache-status: HIT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=IHatlc%2B23ysk40IrIV6gpbTsjgKuDdxlvuhqqR%2FB7UmCSL%2F5QkMMkSJYbQ43RVye4MF5wpFePdXpQHCS8tzScM3oKOYISwIM220elCYqUcOhUlWWiLA7oJtMehWIyYmqlv4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 92da2b8a49ca56aa-OSL
X-Firefox-Spdy: h2
|
|
| aadcdn.msauth.net/shared/1.0/content/images/signin-options_4e48046ce74f4b89d45037c90576bfac.svg | 13.107.246.53 | 200 OK | 1.6 kB |
URL GET aadcdn.msauth.net/shared/1.0/content/images/signin-options_4e48046ce74f4b89d45037c90576bfac.svg IP 13.107.246.53:443
ASN#8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested byhttps://ipaper-grcattspxm3tto.poyb.de/i5doi2kfe9ra6xqdley8/8nfpiikp72gv52a8xZ2VuL3J5c0NUL01mMVlHbjBKNXkvQ29keS5zY2hlbGwvMzg0Ny9pcGFwZXIuY29tLzBPQWdiUE96YjJQWGFkRVlnejhR CertificateIssuerDigiCert Inc Subjectaadcdn.msauth.net Fingerprint38:05:DB:30:B5:83:1A:A0:A9:AD:24:B2:62:0F:E7:F6:60:9B:7C:00 ValidityTue, 29 Oct 2024 00:00:00 GMT - Wed, 29 Oct 2025 23:59:59 GMT
File typeSVG Scalable Vector Graphics image Hash4e48046ce74f4b89d45037c90576bfac 4a41b3b51ed787f7b33294202da72220c7cd2c32 8e6db1634f1812d42516778fc890010aa57f3e39914fb4803df2c38abbf56d93
GET /shared/1.0/content/images/signin-options_4e48046ce74f4b89d45037c90576bfac.svg HTTP/1.1
Host: aadcdn.msauth.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ipaper-grcattspxm3tto.poyb.de/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 09 Apr 2025 12:57:25 GMT
content-type: image/svg+xml
content-length: 621
cache-control: public, max-age=31536000
content-encoding: gzip
last-modified: Tue, 10 Nov 2020 03:41:24 GMT
etag: 0x8D8852A7FA6B761
x-ms-request-id: 462f9d11-601e-007d-39b6-a6b275000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
access-control-allow-origin: *
x-azure-ref: 20250409T125725Z-r1ccbf87bcczbvxvhC1SVGwz9g0000000evg00000000dtmv
x-fd-int-roxy-purgeid: 0
x-cache: TCP_HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/ear18/0x4AAAAAABHMG-xU2VjgtAJY/auto/fbE/new/normal/auto/ | 104.18.94.41 | 200 OK | 28 kB |
URL GET challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/ear18/0x4AAAAAABHMG-xU2VjgtAJY/auto/fbE/new/normal/auto/ IP 104.18.94.41:443
Requested byhttps://rysct3847mf1ygn0j5y.hlus.de/rysCT/Mf1YGn0J5y/0OAgbPOzb2PXadEYgz8Q1b7xgen/rysCT/Mf1YGn0J5y/Cody.schell/3847/ipaper.com/0OAgbPOzb2PXadEYgz8Q CertificateIssuerGoogle Trust Services Subjectchallenges.cloudflare.com Fingerprint48:58:3E:CE:54:27:56:6B:A6:33:D4:C8:4B:BF:00:0E:BE:61:60:28 ValiditySat, 01 Mar 2025 17:19:38 GMT - Fri, 30 May 2025 18:19:35 GMT
File typeHTML document, ASCII text, with very long lines (22054) Hash9aa01849eb003e9d1cdf17c2d923422c 37578aaa58d853b4ca1a1b2ceb13aa5083237893 7e0723aa519087a6b9f1ff81ddaf4ff134caa02d6490debfaf1dcc68c332a0e4
GET /cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/ear18/0x4AAAAAABHMG-xU2VjgtAJY/auto/fbE/new/normal/auto/ HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rysct3847mf1ygn0j5y.hlus.de/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 09 Apr 2025 12:57:09 GMT
content-type: text/html; charset=UTF-8
cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
permissions-policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()
content-security-policy: default-src 'none'; script-src 'nonce-271xpyiwns7TbiiP' 'unsafe-eval'; script-src-attr 'none'; worker-src blob:; style-src 'unsafe-inline'; img-src 'self'; connect-src 'self'; frame-src 'self' blob:; child-src 'self' blob:; form-action 'none'; base-uri 'self'; sandbox allow-same-origin allow-scripts allow-popups allow-forms
cross-origin-embedder-policy: require-corp
cross-origin-opener-policy: same-origin
cross-origin-resource-policy: cross-origin
origin-agent-cluster: ?1
accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
critical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
referrer-policy: same-origin
document-policy: js-profiling
priority: u=4,i=?0
server: cloudflare
cf-ray: 92da2b292e070b59-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
|
|
| challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/flow/ov1/1148494948:1744201701:32b0jmo6ncoEFfYwYUkqk0MM014Y8XR17y4slCLVOrA/92da2b292e070b59/hPltzX.rFjZglmqgJUsgvgzHm_K8RXkZBGxDZJ8RITY-1744203429-1.1.1.1-l4y9Z.AZuCcW9Ie39ZgHqiwzg3gvTd1OSz0HRDB6wjCd.mn_S_KOF5Y0y6ecN0.D | 104.18.94.41 | 200 OK | 4.7 kB |
URL POST challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/flow/ov1/1148494948:1744201701:32b0jmo6ncoEFfYwYUkqk0MM014Y8XR17y4slCLVOrA/92da2b292e070b59/hPltzX.rFjZglmqgJUsgvgzHm_K8RXkZBGxDZJ8RITY-1744203429-1.1.1.1-l4y9Z.AZuCcW9Ie39ZgHqiwzg3gvTd1OSz0HRDB6wjCd.mn_S_KOF5Y0y6ecN0.D IP 104.18.94.41:443
Requested byhttps://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/ear18/0x4AAAAAABHMG-xU2VjgtAJY/auto/fbE/new/normal/auto/ CertificateIssuerGoogle Trust Services Subjectchallenges.cloudflare.com Fingerprint48:58:3E:CE:54:27:56:6B:A6:33:D4:C8:4B:BF:00:0E:BE:61:60:28 ValiditySat, 01 Mar 2025 17:19:38 GMT - Fri, 30 May 2025 18:19:35 GMT
File typeASCII text, with very long lines (4716), with no line terminators Hash6d658589d96d71271e84f624b91850d9 f0a77bdc6424e0c0a5487c6d94dd850428449de5 d0821122514657ba66c05bb6c74cceb9f9be932b8e47e5946ca23e0bd22794c6
POST /cdn-cgi/challenge-platform/h/g/flow/ov1/1148494948:1744201701:32b0jmo6ncoEFfYwYUkqk0MM014Y8XR17y4slCLVOrA/92da2b292e070b59/hPltzX.rFjZglmqgJUsgvgzHm_K8RXkZBGxDZJ8RITY-1744203429-1.1.1.1-l4y9Z.AZuCcW9Ie39ZgHqiwzg3gvTd1OSz0HRDB6wjCd.mn_S_KOF5Y0y6ecN0.D HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/ear18/0x4AAAAAABHMG-xU2VjgtAJY/auto/fbE/new/normal/auto/
cf-chl: hPltzX.rFjZglmqgJUsgvgzHm_K8RXkZBGxDZJ8RITY-1744203429-1.1.1.1-l4y9Z.AZuCcW9Ie39ZgHqiwzg3gvTd1OSz0HRDB6wjCd.mn_S_KOF5Y0y6ecN0.D
cf-chl-ra: 0
Content-Type: text/plain;charset=UTF-8
Content-Length: 43278
Origin: https://challenges.cloudflare.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 09 Apr 2025 12:57:21 GMT
content-type: text/html; charset=UTF-8
cf-chl-out-s: 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$8GTXBeTbYvZhSXEFz4iRig==
cf-chl-out: qwZgnxQI9rmALfYm9t6jteDxZkfgorGSD98i4TBDm0h+QUjs7j1e2V8DbLcYEJ11XfeEL24oLHVMdn4+AElrUQ==$qBjeQpStLHXJvw//653DoQ==
priority: u=3,i=?0
server: cloudflare
cf-ray: 92da2b74ba7d0b59-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
|
|
| aadcdn.msauth.net/shared/1.0/content/images/marching_ants_white_166de53471265253ab3a456defe6da23.gif | 13.107.246.53 | 200 OK | 2.7 kB |
URL GET aadcdn.msauth.net/shared/1.0/content/images/marching_ants_white_166de53471265253ab3a456defe6da23.gif IP 13.107.246.53:443
ASN#8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested byhttps://ipaper-grcattspxm3tto.poyb.de/i5doi2kfe9ra6xqdley8/8nfpiikp72gv52a8xZ2VuL3J5c0NUL01mMVlHbjBKNXkvQ29keS5zY2hlbGwvMzg0Ny9pcGFwZXIuY29tLzBPQWdiUE96YjJQWGFkRVlnejhR CertificateIssuerDigiCert Inc Subjectaadcdn.msauth.net Fingerprint38:05:DB:30:B5:83:1A:A0:A9:AD:24:B2:62:0F:E7:F6:60:9B:7C:00 ValidityTue, 29 Oct 2024 00:00:00 GMT - Wed, 29 Oct 2025 23:59:59 GMT
File typeGIF image data, version 89a, 352 x 3 Hash166de53471265253ab3a456defe6da23 17c6df4d7ccf1fa2c9efd716fbae0fc2c71c8d6d a46201581a7c7c667fd42787cd1e9adf2f6bf809efb7596e61a03e8dba9ada13
GET /shared/1.0/content/images/marching_ants_white_166de53471265253ab3a456defe6da23.gif HTTP/1.1
Host: aadcdn.msauth.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ipaper-grcattspxm3tto.poyb.de/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 09 Apr 2025 12:57:25 GMT
content-type: image/gif
content-length: 2672
cache-control: public, max-age=31536000
last-modified: Fri, 17 Jan 2020 19:28:37 GMT
etag: 0x8D79B83739984DD
x-ms-request-id: 558400f0-c01e-005b-24cc-a6fa6d000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
access-control-allow-origin: *
x-azure-ref: 20250409T125725Z-r1ccbf87bcczbvxvhC1SVGwz9g0000000evg00000000dtms
x-fd-int-roxy-purgeid: 0
x-cache: TCP_HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| aadcdn.msauth.net/shared/1.0/content/images/picker_verify_fluent_authenticator_b59c16ca9bf156438a8a96d45e33db64.svg | 13.107.246.53 | 200 OK | 7.4 kB |
URL GET aadcdn.msauth.net/shared/1.0/content/images/picker_verify_fluent_authenticator_b59c16ca9bf156438a8a96d45e33db64.svg IP 13.107.246.53:443
ASN#8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested byhttps://ipaper-grcattspxm3tto.poyb.de/i5doi2kfe9ra6xqdley8/8nfpiikp72gv52a8xZ2VuL3J5c0NUL01mMVlHbjBKNXkvQ29keS5zY2hlbGwvMzg0Ny9pcGFwZXIuY29tLzBPQWdiUE96YjJQWGFkRVlnejhR CertificateIssuerDigiCert Inc Subjectaadcdn.msauth.net Fingerprint38:05:DB:30:B5:83:1A:A0:A9:AD:24:B2:62:0F:E7:F6:60:9B:7C:00 ValidityTue, 29 Oct 2024 00:00:00 GMT - Wed, 29 Oct 2025 23:59:59 GMT
File typeSVG Scalable Vector Graphics image Hashb59c16ca9bf156438a8a96d45e33db64 4e51b7d3477414b220f688adabd76d3ae6472ee3 a7ee799dd5b6f6dbb70b043b766362a6724e71458f9839306c995f06b218c2f8
GET /shared/1.0/content/images/picker_verify_fluent_authenticator_b59c16ca9bf156438a8a96d45e33db64.svg HTTP/1.1
Host: aadcdn.msauth.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ipaper-grcattspxm3tto.poyb.de/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 09 Apr 2025 12:57:25 GMT
content-type: image/svg+xml
content-length: 2407
cache-control: public, max-age=31536000
content-encoding: gzip
last-modified: Fri, 11 Mar 2022 11:11:29 GMT
etag: 0x8DA034FE445C10D
x-ms-request-id: 67206a15-701e-0034-2608-a68721000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
access-control-allow-origin: *
x-azure-ref: 20250409T125725Z-r1ccbf87bcczbvxvhC1SVGwz9g0000000evg00000000dtmt
x-fd-int-roxy-purgeid: 0
x-cache: TCP_HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|