| secure.adnxs.com/seg?redir=//teacheratn%E3%80%82com/rab/vXGuw/RW1lcmdlbmN5RFZNLk1PVkhAdmNhLmNvbQ== |  37.252.171.53 | 307 Temporary Redirect | 0 B |
URL User Request GET HTTP/2secure.adnxs.com/seg?redir=//teacheratn%E3%80%82com/rab/vXGuw/RW1lcmdlbmN5RFZNLk1PVkhAdmNhLmNvbQ== IP37.252.171.53:443
CertificateIssuerDigiCert Inc Subject*.adnxs.com Fingerprint30:E1:57:C8:5A:77:64:AE:54:99:08:F7:2B:B8:C7:F4:28:85:56:08 ValidityMon, 13 Feb 2023 00:00:00 GMT - Fri, 15 Mar 2024 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /seg?redir=//teacheratn%E3%80%82com/rab/vXGuw/RW1lcmdlbmN5RFZNLk1PVkhAdmNhLmNvbQ== HTTP/1.1
Host: secure.adnxs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 307 Temporary Redirect
server: nginx/1.23.4
date: Fri, 26 Jan 2024 20:47:18 GMT
content-type: text/html; charset=utf-8
content-length: 0
cache-control: no-store, no-cache, private
pragma: no-cache
expires: Sat, 15 Nov 2008 16:00:00 GMT
p3p: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
x-xss-protection: 0
access-control-allow-credentials: true
access-control-allow-origin: *
accept-ch: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness
location: https://secure.adnxs.com/bounce?%2Fseg%3Fredir%3D%2F%2Fteacheratn%25E3%2580%2582com%2Frab%2FvXGuw%2FRW1lcmdlbmN5RFZNLk1PVkhAdmNhLmNvbQ%3D%3D
an-x-request-uuid: 1424ee8f-187b-4d44-80ea-efa49de1841b
set-cookie: uuid2=9047508490079600578; SameSite=None; Path=/; Max-Age=7776000; Expires=Thu, 25-Apr-2024 20:47:18 GMT; Domain=.adnxs.com; Secure; HttpOnly
x-proxy-origin: 91.90.42.154; 91.90.42.154; 1003.bm-nginx-loadbalancer.mgmt.fra1.adnexus.net; adnxs.com
X-Firefox-Spdy: h2
|
|
| secure.adnxs.com/bounce?%2Fseg%3Fredir%3D%2F%2Fteacheratn%25E3%2580%2582com%2Frab%2FvXGuw%2FRW1lcmdlbmN5RFZNLk1PVkhAdmNhLmNvbQ%3D%3D | 37.252.171.53 | 302 Found | 0 B |
URL User Request GET HTTP/2secure.adnxs.com/bounce?%2Fseg%3Fredir%3D%2F%2Fteacheratn%25E3%2580%2582com%2Frab%2FvXGuw%2FRW1lcmdlbmN5RFZNLk1PVkhAdmNhLmNvbQ%3D%3D IP37.252.171.53:443
CertificateIssuerDigiCert Inc Subject*.adnxs.com Fingerprint30:E1:57:C8:5A:77:64:AE:54:99:08:F7:2B:B8:C7:F4:28:85:56:08 ValidityMon, 13 Feb 2023 00:00:00 GMT - Fri, 15 Mar 2024 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /bounce?%2Fseg%3Fredir%3D%2F%2Fteacheratn%25E3%2580%2582com%2Frab%2FvXGuw%2FRW1lcmdlbmN5RFZNLk1PVkhAdmNhLmNvbQ%3D%3D HTTP/1.1
Host: secure.adnxs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: uuid2=9047508490079600578
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 302 Found
server: nginx/1.23.4
date: Fri, 26 Jan 2024 20:47:18 GMT
content-type: text/html; charset=utf-8
content-length: 0
cache-control: no-store, no-cache, private
pragma: no-cache
expires: Sat, 15 Nov 2008 16:00:00 GMT
p3p: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
x-xss-protection: 0
access-control-allow-credentials: true
access-control-allow-origin: *
accept-ch: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness
location: //teacheratn。com/rab/vXGuw/RW1lcmdlbmN5RFZNLk1PVkhAdmNhLmNvbQ==
an-x-request-uuid: 5b40d2d3-b98d-4444-9ea0-819c3191d494
set-cookie: anj=dTM7k!M4/8CxrEQF']wIg2GVMofz8P!]tbP6j2F-XstGt!@De^$o?9l; SameSite=None; Path=/; Max-Age=7776000; Expires=Thu, 25-Apr-2024 20:47:18 GMT; Domain=.adnxs.com; Secure; HttpOnly
uuid2=9047508490079600578; SameSite=None; Path=/; Max-Age=7776000; Expires=Thu, 25-Apr-2024 20:47:18 GMT; Domain=.adnxs.com; Secure; HttpOnly
x-proxy-origin: 91.90.42.154; 91.90.42.154; 1003.bm-nginx-loadbalancer.mgmt.fra1.adnexus.net; adnxs.com
X-Firefox-Spdy: h2
|
|
| teacheratn.com/rab/vXGuw/RW1lcmdlbmN5RFZNLk1PVkhAdmNhLmNvbQ== |  160.153.133.116 | 200 OK | 1 B |
URL User Request GET HTTP/2teacheratn.com/rab/vXGuw/RW1lcmdlbmN5RFZNLk1PVkhAdmNhLmNvbQ== IP160.153.133.116:443 ASN#21501 Host Europe GmbH
CertificateIssuerSectigo Limited Subjectteacheratn.com Fingerprint56:89:0D:EF:F2:5F:17:5F:2E:D6:7E:E4:39:8F:CF:54:FB:79:EF:50 ValidityThu, 28 Sep 2023 00:00:00 GMT - Sun, 29 Sep 2024 23:59:59 GMT
File typevery short file (no magic) Hasheccbc87e4b5ce2fe28308fd9f2a7baf3 77de68daecd823babbb58edb1c8e14d7106e83bb 4e07408562bedb8b60ce05c1decfe3ad16b72230967de01f640b7e4729b49fce
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Microsoft Outlook |
GET /rab/vXGuw/RW1lcmdlbmN5RFZNLk1PVkhAdmNhLmNvbQ== HTTP/1.1
Host: teacheratn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
x-powered-by: PHP/7.4.33
refresh: 0;url=https://capitalsexteriors.com/TEmergencyDVM.MOVH@vca.com
vary: Accept-Encoding
content-encoding: br
content-length: 1
content-type: text/html; charset=UTF-8
date: Fri, 26 Jan 2024 20:47:20 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/flow/ov1/1994129440:1706299603:SstKWnBtm9tEcgu--et_VJSyX5NwgdT6DxJ2SIHbI-Y/84bb9c4c2f32b4ed/7d7a744fb4ca56a |  104.17.2.184 | 200 OK | 70 kB |
URL POST HTTP/3challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/flow/ov1/1994129440:1706299603:SstKWnBtm9tEcgu--et_VJSyX5NwgdT6DxJ2SIHbI-Y/84bb9c4c2f32b4ed/7d7a744fb4ca56a IP104.17.2.184:443
Requested byhttps://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/wzuo2/0x4AAAAAAADnPIDROrmt1Wwj/light/normal CertificateIssuerCloudflare, Inc. Subjectchallenges.cloudflare.com Fingerprint5F:E4:AA:8C:2E:24:D2:B1:69:9D:13:28:31:5C:65:FA:97:2A:E9:6E ValidityFri, 18 Aug 2023 00:00:00 GMT - Sat, 17 Aug 2024 23:59:59 GMT
File typeASCII text, with very long lines (65536), with no line terminators Hash577a2ea4a3dbd61b2ed2e0a84e430733 e815b85e96bf0befcdb80910132806b0a8ab95d4 ae8143dde5fceda7b2c9bf1a9414445b4ded8bbae8b46c590e0ee4fd51df8e8a
POST /cdn-cgi/challenge-platform/h/g/flow/ov1/1994129440:1706299603:SstKWnBtm9tEcgu--et_VJSyX5NwgdT6DxJ2SIHbI-Y/84bb9c4c2f32b4ed/7d7a744fb4ca56a HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/wzuo2/0x4AAAAAAADnPIDROrmt1Wwj/light/normal
Content-type: application/x-www-form-urlencoded
CF-Challenge: 7d7a744fb4ca56a
Content-Length: 3174
Origin: https://challenges.cloudflare.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 26 Jan 2024 20:47:21 GMT
content-type: text/plain; charset=UTF-8
cf-chl-gen: uKM2b8EXZ/ZeSGdI0HrP+OmjMV1VUONfoPXRod2qO1J0upIU90TPdVWjMNt8wclYf87/MPzSVYtDOv32nBClDRnz1llRVr2HKUqp5/YpBoZciBJgwO8wje7YSm+VSjydaVuAOfOjw25n+wJ0MnucFUrXxgpdmgdN0sZ9iUjh55zgv2G1dIByicocfz6uAy8+WC+WCa76sRjhdJsTQCjWSM7hpstKUt8ljDLmPXxDJ52TEHCEFawjhn9RVHAuAoyRwymRs+bS3MKNUT18Nq6t5trfvUFMlHaHW4RdRCld+ZuOQEqHv39vhQDxQixxLl8c1OK7VlfL5wk2N6EkrUn7R5pl8NG+IrQttI+sbyzkPRw=$tPVFdG3iD93n4RrkjvTtng==
server: cloudflare
cf-ray: 84bb9c4e6bc3b4ed-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| capitalsexteriors.com/cdn-cgi/challenge-platform/h/g/orchestrate/chl_page/v1?ray=84bb9c49b8e556b5 |  172.67.198.7 | 200 OK | 82 kB |
URL GET HTTP/3capitalsexteriors.com/cdn-cgi/challenge-platform/h/g/orchestrate/chl_page/v1?ray=84bb9c49b8e556b5 IP172.67.198.7:443
Requested byhttps://capitalsexteriors.com/TEmergencyDVM.MOVH@vca.com CertificateIssuerLet's Encrypt Subjectcapitalsexteriors.com FingerprintCC:B8:89:B6:81:F5:30:01:96:2F:5D:E5:5B:3C:B5:E1:97:BF:FD:7F ValidityMon, 08 Jan 2024 03:28:03 GMT - Sun, 07 Apr 2024 03:28:02 GMT
File typeJavaScript source, ASCII text, with very long lines (65536), with no line terminators Hash11f6389ceb992dd68583c5a09fc70b62 95a3bd8f5eb219f7ab17563b9aaa58710219c385 ef83677eb5da54cb7d0f95389589db6a5e6900f9d493d6116de9a8c3445cb217
GET /cdn-cgi/challenge-platform/h/g/orchestrate/chl_page/v1?ray=84bb9c49b8e556b5 HTTP/1.1
Host: capitalsexteriors.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://capitalsexteriors.com/TEmergencyDVM.MOVH@vca.com?__cf_chl_rt_tk=LirtxBl9Z5s5gVQsf6Irk7LNmvVx95RkBgr6u74p3A8-1706302040-0-gaNycGzNDJA
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 26 Jan 2024 20:47:20 GMT
content-type: application/javascript; charset=UTF-8
cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=lHIGI8KYmjXyn%2F3MwMNuvFa%2FGqJvALIbhc%2BVUVLOKK2%2F7Ahcpi1%2F5TylMvWjL3whPPgmNaiKicNLlRGwah9Y%2Fot3isKRCqBJGJvv71TyukyvJmeFkHeG%2BbR5NPqgBa9jSSWdEPhihC8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 84bb9c4a7bf956bd-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/wzuo2/0x4AAAAAAADnPIDROrmt1Wwj/light/normal | 104.17.2.184 | 200 OK | 75 kB |
URL GET HTTP/3challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/wzuo2/0x4AAAAAAADnPIDROrmt1Wwj/light/normal IP104.17.2.184:443
Requested byhttps://capitalsexteriors.com/TEmergencyDVM.MOVH@vca.com CertificateIssuerCloudflare, Inc. Subjectchallenges.cloudflare.com Fingerprint5F:E4:AA:8C:2E:24:D2:B1:69:9D:13:28:31:5C:65:FA:97:2A:E9:6E ValidityFri, 18 Aug 2023 00:00:00 GMT - Sat, 17 Aug 2024 23:59:59 GMT
File typeHTML document, ASCII text, with very long lines (40811) Hashb30fcf5d63a74cfa19b0c0e731d708eb 122e5798642c991d3bf3ae48d0c7a233bf7a0748 85069affb61d50b093740c87fdac52ec2b595ef0bfcbe4da8ad29d44126780dd
GET /cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/wzuo2/0x4AAAAAAADnPIDROrmt1Wwj/light/normal HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 26 Jan 2024 20:47:21 GMT
content-type: text/html; charset=UTF-8
accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
content-security-policy: frame-src https://challenges.cloudflare.com/ blob:; base-uri 'self'
cross-origin-embedder-policy: require-corp
cross-origin-opener-policy: same-origin
cross-origin-resource-policy: cross-origin
document-policy: js-profiling
origin-agent-cluster: ?1
permissions-policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()
referrer-policy: same-origin
server: cloudflare
cf-ray: 84bb9c4c2f32b4ed-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/orchestrate/chl_api/v1?ray=84bb9c4c2f32b4ed | 104.17.2.184 | 200 OK | 176 kB |
URL GET HTTP/3challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/orchestrate/chl_api/v1?ray=84bb9c4c2f32b4ed IP104.17.2.184:443
Requested byhttps://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/wzuo2/0x4AAAAAAADnPIDROrmt1Wwj/light/normal CertificateIssuerCloudflare, Inc. Subjectchallenges.cloudflare.com Fingerprint5F:E4:AA:8C:2E:24:D2:B1:69:9D:13:28:31:5C:65:FA:97:2A:E9:6E ValidityFri, 18 Aug 2023 00:00:00 GMT - Sat, 17 Aug 2024 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (65536), with no line terminators Size176 kB (175503 bytes) Hash4443afb10ac1cae0a9ed9c2388764657 1bc8b27b9a7e172c6b340191ae2636be79b66c9d 9af3cbcc9cb185be7506f1a635bfb1879a926c2ae26fc3d1a70dea078cea7371
GET /cdn-cgi/challenge-platform/h/g/orchestrate/chl_api/v1?ray=84bb9c4c2f32b4ed HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/wzuo2/0x4AAAAAAADnPIDROrmt1Wwj/light/normal
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 26 Jan 2024 20:47:21 GMT
content-type: application/javascript; charset=UTF-8
cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
server: cloudflare
cf-ray: 84bb9c4cd875b4ed-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/pat/84bb9c4c2f32b4ed/1706302041370/c0f1a744bb7138dbdfaeea971326c94185543c3a0bd22e47d886981ae9eb4dca/ZPcf2EbjizxSJNP | 104.17.2.184 | 401 Unauthorized | 1 B |
URL GET HTTP/3challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/pat/84bb9c4c2f32b4ed/1706302041370/c0f1a744bb7138dbdfaeea971326c94185543c3a0bd22e47d886981ae9eb4dca/ZPcf2EbjizxSJNP IP104.17.2.184:443
Requested byhttps://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/wzuo2/0x4AAAAAAADnPIDROrmt1Wwj/light/normal CertificateIssuerCloudflare, Inc. Subjectchallenges.cloudflare.com Fingerprint5F:E4:AA:8C:2E:24:D2:B1:69:9D:13:28:31:5C:65:FA:97:2A:E9:6E ValidityFri, 18 Aug 2023 00:00:00 GMT - Sat, 17 Aug 2024 23:59:59 GMT
File typevery short file (no magic) Hashff44570aca8241914870afbc310cdb85 58668e7669fd564d99db5d581fcdb6a5618440b5 6da43b944e494e885e69af021f93c6d9331c78aa228084711429160a5bbd15b5
GET /cdn-cgi/challenge-platform/h/g/pat/84bb9c4c2f32b4ed/1706302041370/c0f1a744bb7138dbdfaeea971326c94185543c3a0bd22e47d886981ae9eb4dca/ZPcf2EbjizxSJNP HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/wzuo2/0x4AAAAAAADnPIDROrmt1Wwj/light/normal
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 401 Unauthorized
date: Fri, 26 Jan 2024 20:47:22 GMT
content-type: text/plain; charset=UTF-8
www-authenticate: PrivateToken challenge=AAIAGXBhdC1pc3N1ZXIuY2xvdWRmbGFyZS5jb20gwPGnRLtxONvfruqXEybJQYVUPDoL0i5H2IaYGunrTcoAGWNoYWxsZW5nZXMuY2xvdWRmbGFyZS5jb20=, token-key=MIIBUjA9BgkqhkiG9w0BAQowMKANMAsGCWCGSAFlAwQCAqEaMBgGCSqGSIb3DQEBCDALBglghkgBZQMEAgKiAwIBMAOCAQ8AMIIBCgKCAQEAri695vAyuHNtz2ItdxPGPC_0gnyGU7CIj6Qub5qktpl5OD04pv7fX57blUoUXd7x32e_aXzBQFdDeWQWE2cWOFVJmkn7MjSWiyGkCmCPF-WkrqZa6b_xBfw8B_RKHlHXIc2zVxlyq7VCibH6aj5APXWRExezQ6PO2XHOCOhTDxEwzYgzSdi0VVHm-UlUN1SCRorqk6zP9Sw8J-b9gccRlyhNHTpO5s-YVSbMhNfQg0MzQ3tpiHbUAVMEJBg37cRTl8lDttnyYIqJLjddfNQZAxBXeAgU3Wa9pB_T6YK_gCqNlV1pZs2jzl0H2R-bU63XlM0QodHbi5MqmlVNy_2g4wIDAQAB, max-age=20, PrivateToken challenge=AAIALHBwLWlzc3Vlci1wcm9kdWN0aW9uLnJlc2VhcmNoLmNsb3VkZmxhcmUuY29tIMDxp0S7cTjb367qlxMmyUGFVDw6C9IuR9iGmBrp603KABljaGFsbGVuZ2VzLmNsb3VkZmxhcmUuY29t, token-key=MIIBUjA9BgkqhkiG9w0BAQowMKANMAsGCWCGSAFlAwQCAqEaMBgGCSqGSIb3DQEBCDALBglghkgBZQMEAgKiAwIBMAOCAQ8AMIIBCgKCAQEAyAcIyqXWj0XAym0z5V844rFA0WOzLVwj0uCwmVj6zC4qOH40oBiGHrMNMBnDyk95jvnBAuHeEs855e7nA4l4DPJ4jUWKZbua8BxGAzjn74A1BV81a52F1zvBPUm-VEJXPAPXQehXphSv51uR7HKtfcM5oaS33TGDSy-6xv0r84xjMuTBvwPgXGehxpi1MCGGE5yWkzKN5Zzllk7m6Nkiv6learV-Uz7tzaoPbdZkBk1bFXxm2q07jWavoBZ-JEuEJyjQ00PSTz2Zjpbct6AlR3eCS9sbmXtb5XxSs7JMsvoa8uojD7a5m2SEJIwaf8xKL6wtxkaPonUfvsLj4JoJZQIDAQAB, max-age=20
server: cloudflare
cf-ray: 84bb9c534c6db4ed-OSL
alt-svc: h3=":443"; ma=86400
|
|
| capitalsexteriors.com/cdn-cgi/challenge-platform/h/g/flow/ov1/1444281404:1706299609:3Tf5mPH2_uS5HOIuQXEIjHNBSKwOkEiZ_8SBr89fkOc/84bb9c49b8e556b5/38639790e8ed88a | 172.67.198.7 | 200 OK | 13 kB |
URL POST HTTP/3capitalsexteriors.com/cdn-cgi/challenge-platform/h/g/flow/ov1/1444281404:1706299609:3Tf5mPH2_uS5HOIuQXEIjHNBSKwOkEiZ_8SBr89fkOc/84bb9c49b8e556b5/38639790e8ed88a IP172.67.198.7:443
Requested byhttps://capitalsexteriors.com/TEmergencyDVM.MOVH@vca.com CertificateIssuerLet's Encrypt Subjectcapitalsexteriors.com FingerprintCC:B8:89:B6:81:F5:30:01:96:2F:5D:E5:5B:3C:B5:E1:97:BF:FD:7F ValidityMon, 08 Jan 2024 03:28:03 GMT - Sun, 07 Apr 2024 03:28:02 GMT
File typeASCII text, with very long lines (13264), with no line terminators Hash81d900c049aec20202c48005c8c904e3 b6e3cf14eaa24df083b8ba0e2c90014f32456969 ac09ab8f809f79394fee8407fe54de20e24f2b2b3a7614f2dc0d456b47f21b54
POST /cdn-cgi/challenge-platform/h/g/flow/ov1/1444281404:1706299609:3Tf5mPH2_uS5HOIuQXEIjHNBSKwOkEiZ_8SBr89fkOc/84bb9c49b8e556b5/38639790e8ed88a HTTP/1.1
Host: capitalsexteriors.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://capitalsexteriors.com/TEmergencyDVM.MOVH@vca.com
Content-type: application/x-www-form-urlencoded
CF-Challenge: 38639790e8ed88a
Content-Length: 1849
Origin: https://capitalsexteriors.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 26 Jan 2024 20:47:20 GMT
content-type: text/plain; charset=UTF-8
cf-chl-gen: YN2mtm+mH4tw/HeU5lF5+YXXzM9HrLlFPgQ7XzF5r477tqz8UOw64tPOaamDu+46$J494t2jR8AdMc/uDzCAjcw==
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=AUmnluaYQ5DnBtRR0MINmBmQEYeEwB4PDimd%2B%2BCcZ5Ur2Tl%2B2PseaCMJm5TYNI37E29G0X1CLln3APe5ThXXjFUG%2FQaKuTwDCBxMZ5EYVSWLlYMPoRTC0vuESDD48sruFeX4mmY8g%2F8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 84bb9c4bae8456bd-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| capitalsexteriors.com/favicon.ico | 172.67.198.7 | 403 Forbidden | 12 kB |
URL GET HTTP/3capitalsexteriors.com/favicon.ico IP172.67.198.7:443
Requested byhttps://capitalsexteriors.com/TEmergencyDVM.MOVH@vca.com CertificateIssuerLet's Encrypt Subjectcapitalsexteriors.com FingerprintCC:B8:89:B6:81:F5:30:01:96:2F:5D:E5:5B:3C:B5:E1:97:BF:FD:7F ValidityMon, 08 Jan 2024 03:28:03 GMT - Sun, 07 Apr 2024 03:28:02 GMT
File typeHTML document, ASCII text, with very long lines (12067), with no line terminators Hash32af7577ae13af3f80f5bcaeb467dcbb 6987671a8964998993ac8bbc19ce8f0c8dc38438 cc1020f4193954110a4d806f2ae0fa3d227b15b4a17373299283954d07f4b576
GET /favicon.ico HTTP/1.1
Host: capitalsexteriors.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://capitalsexteriors.com/TEmergencyDVM.MOVH@vca.com?__cf_chl_rt_tk=LirtxBl9Z5s5gVQsf6Irk7LNmvVx95RkBgr6u74p3A8-1706302040-0-gaNycGzNDJA
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 403 Forbidden
date: Fri, 26 Jan 2024 20:47:20 GMT
content-type: text/html; charset=UTF-8
accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
cross-origin-embedder-policy: require-corp
cross-origin-opener-policy: same-origin
cross-origin-resource-policy: same-origin
origin-agent-cluster: ?1
permissions-policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()
referrer-policy: same-origin
x-frame-options: SAMEORIGIN
cf-mitigated: challenge
cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
expires: Thu, 01 Jan 1970 00:00:01 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=mHXdOw15vXztdSABVLnEXgaRsWpkTzrMi2k79bq%2F8wENynaGOZcpuoGj4%2F7Vxq%2Bd%2FAEPFelYxEf45hu%2FrhUGCIL3evIhdpm%2FTf%2BgvBBsc0fusXC%2BeZ%2B3vnFbgxegPj08p2LVbdwLjfg%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 84bb9c4a9c4156bd-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/cmg/1/GLhOioXg0bs57t4qPrORXFsL1%2BWig2mIKbgpVPMu7ZQ%3D | 104.17.2.184 | 200 OK | 61 B |
URL GET HTTP/3challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/cmg/1/GLhOioXg0bs57t4qPrORXFsL1%2BWig2mIKbgpVPMu7ZQ%3D IP104.17.2.184:443
Requested byhttps://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/wzuo2/0x4AAAAAAADnPIDROrmt1Wwj/light/normal CertificateIssuerCloudflare, Inc. Subjectchallenges.cloudflare.com Fingerprint5F:E4:AA:8C:2E:24:D2:B1:69:9D:13:28:31:5C:65:FA:97:2A:E9:6E ValidityFri, 18 Aug 2023 00:00:00 GMT - Sat, 17 Aug 2024 23:59:59 GMT
File typePNG image data, 2 x 2, 8-bit/color RGB, non-interlaced Hash9246cca8fc3c00f50035f28e9f6b7f7d 3aa538440f70873b574f40cd793060f53ec17a5d c07d7d29e3c20fa6ca4c5d20663688d52bad13e129ad82ce06b80eb187d9dc84
GET /cdn-cgi/challenge-platform/h/g/cmg/1/GLhOioXg0bs57t4qPrORXFsL1%2BWig2mIKbgpVPMu7ZQ%3D HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/wzuo2/0x4AAAAAAADnPIDROrmt1Wwj/light/normal
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 26 Jan 2024 20:47:21 GMT
content-type: image/png
cache-control: max-age=2629800, public
server: cloudflare
cf-ray: 84bb9c4cd873b4ed-OSL
alt-svc: h3=":443"; ma=86400
|
|
| challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/i/84bb9c4c2f32b4ed/1706302041371/6lA6MaOhg9ZztxP | 104.17.2.184 | 200 OK | 61 B |
URL GET HTTP/3challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/i/84bb9c4c2f32b4ed/1706302041371/6lA6MaOhg9ZztxP IP104.17.2.184:443
Requested byhttps://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/wzuo2/0x4AAAAAAADnPIDROrmt1Wwj/light/normal CertificateIssuerCloudflare, Inc. Subjectchallenges.cloudflare.com Fingerprint5F:E4:AA:8C:2E:24:D2:B1:69:9D:13:28:31:5C:65:FA:97:2A:E9:6E ValidityFri, 18 Aug 2023 00:00:00 GMT - Sat, 17 Aug 2024 23:59:59 GMT
File typePNG image data, 22 x 5, 8-bit/color RGB, non-interlaced Hashc9c3511d219b9b0d0ac6514624004db2 400b8eefeb1175ac011c6dcd075f857d2fe35fca 7b65dcbd6796e0cbe9d75ee94042fe8d0733d0e7ab7c61d760fed3756c89501b
GET /cdn-cgi/challenge-platform/h/g/i/84bb9c4c2f32b4ed/1706302041371/6lA6MaOhg9ZztxP HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/wzuo2/0x4AAAAAAADnPIDROrmt1Wwj/light/normal
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 26 Jan 2024 20:47:22 GMT
content-type: image/png
server: cloudflare
cf-ray: 84bb9c53acf2b4ed-OSL
alt-svc: h3=":443"; ma=86400
|
|
| capitalsexteriors.com/TEmergencyDVM.MOVH@vca.com | 172.67.198.7 | 403 Forbidden | 13 kB |
URL User Request GET HTTP/2capitalsexteriors.com/TEmergencyDVM.MOVH@vca.com IP172.67.198.7:443
CertificateIssuerLet's Encrypt Subjectcapitalsexteriors.com FingerprintCC:B8:89:B6:81:F5:30:01:96:2F:5D:E5:5B:3C:B5:E1:97:BF:FD:7F ValidityMon, 08 Jan 2024 03:28:03 GMT - Sun, 07 Apr 2024 03:28:02 GMT
File typeHTML document, ASCII text, with very long lines (12644), with no line terminators Hash13cc656c1a5ef6578fe0f165c962ac1d c7a9ee5515fa2ee3c5c16b0ecef41b3a8902bf75 ab40592508c5a88e08943a3d46c94484980a987d7d08eb722278aa35a975866f
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Microsoft Outlook |
GET /TEmergencyDVM.MOVH@vca.com HTTP/1.1
Host: capitalsexteriors.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 403 Forbidden
date: Fri, 26 Jan 2024 20:47:20 GMT
content-type: text/html; charset=UTF-8
accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
cross-origin-embedder-policy: require-corp
cross-origin-opener-policy: same-origin
cross-origin-resource-policy: same-origin
origin-agent-cluster: ?1
permissions-policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()
referrer-policy: same-origin
x-frame-options: SAMEORIGIN
cf-mitigated: challenge
cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
expires: Thu, 01 Jan 1970 00:00:01 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=9VOXO7g23Z1IqbbzbPp7tjK5CLnLw8qDflebUV7sMOMtykyJfVvX7MlKfoUTkvH2ilMbtYWVQfqEZrHd2Xx5Vk65lzP4b63X3DGWuIaOAkB%2BFJmYy%2BqsObgY4%2BnH%2BNxZudFFa%2FEBgto%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 84bb9c49b8e556b5-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| capitalsexteriors.com/favicon.ico | 172.67.198.7 | 403 Forbidden | 12 kB |
URL GET HTTP/3capitalsexteriors.com/favicon.ico IP172.67.198.7:443
Requested byhttps://capitalsexteriors.com/TEmergencyDVM.MOVH@vca.com CertificateIssuerLet's Encrypt Subjectcapitalsexteriors.com FingerprintCC:B8:89:B6:81:F5:30:01:96:2F:5D:E5:5B:3C:B5:E1:97:BF:FD:7F ValidityMon, 08 Jan 2024 03:28:03 GMT - Sun, 07 Apr 2024 03:28:02 GMT
File typeHTML document, ASCII text, with very long lines (11982), with no line terminators Hash0fd20ec22398ac831dcea08d2b73029e 82b1c9c2059ed91556c3a42f78e900f27b21fef1 331d979d773c8f3a027405ddfc63f74e85ab645bad0be533fcafe056a273ae86
GET /favicon.ico HTTP/1.1
Host: capitalsexteriors.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://capitalsexteriors.com/TEmergencyDVM.MOVH@vca.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 403 Forbidden
date: Fri, 26 Jan 2024 20:47:20 GMT
content-type: text/html; charset=UTF-8
accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
cross-origin-embedder-policy: require-corp
cross-origin-opener-policy: same-origin
cross-origin-resource-policy: same-origin
origin-agent-cluster: ?1
permissions-policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()
referrer-policy: same-origin
x-frame-options: SAMEORIGIN
cf-mitigated: challenge
cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
expires: Thu, 01 Jan 1970 00:00:01 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=D%2FaozvU1wCnI1iB%2BD2nOF27U%2BKSJ%2BfEYxNDhTZIKFzkeigGbEFu%2Bq4FJn3jgza6pOHLiHA9fNQKn278B%2FTS4BK29h1Ak9Cd%2FyqvttuZv7JBbe8FdnUItH9XNmHK64Frd9yFcdg13m3M%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 84bb9c4add1756bd-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| challenges.cloudflare.com/turnstile/v0/g/ea25f566/api.js?onload=xZNcr9&render=explicit | 104.17.2.184 | 200 OK | 38 kB |
URL GET HTTP/2challenges.cloudflare.com/turnstile/v0/g/ea25f566/api.js?onload=xZNcr9&render=explicit IP104.17.2.184:443
Requested byhttps://capitalsexteriors.com/TEmergencyDVM.MOVH@vca.com CertificateIssuerCloudflare, Inc. Subjectchallenges.cloudflare.com Fingerprint5F:E4:AA:8C:2E:24:D2:B1:69:9D:13:28:31:5C:65:FA:97:2A:E9:6E ValidityFri, 18 Aug 2023 00:00:00 GMT - Sat, 17 Aug 2024 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (38244) Hash382de2d5802b5bd3d87cf2fb3071121d d0299a88eb32dbc533d61b024ff6e35956113e29 18cbe0edc0b01c71a6c3ffe704550a8bb1cfe7e02839b7dbdc9c44288bf8b59c
GET /turnstile/v0/g/ea25f566/api.js?onload=xZNcr9&render=explicit HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://capitalsexteriors.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 26 Jan 2024 20:47:20 GMT
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
cache-control: max-age=31536000
vary: Accept-Encoding
server: cloudflare
cf-ray: 84bb9c4b0efe569d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|