| tadexbaba.online/cdn-cgi/challenge-platform/h/g/flow/ov1/1264011782:1746454397:_K7r_oSVX7inRgRzQEByCC0P3-M7_YlmADGLg-zGXjw/93b100cbbff3fea2/A7mXRKtP14IEIsFxug5GEJf4Ar4hqlCX4jFJxJNIU8g-1746456132-1.2.1.1-IYjDOcJzOmB6Z0lIt2Un24L2z.eboq28UjM_vYy0F0QBcw7yymQRhhzT0YkL.p3R | 188.114.97.1 | 200 OK | 17 kB |
URL POST tadexbaba.online/cdn-cgi/challenge-platform/h/g/flow/ov1/1264011782:1746454397:_K7r_oSVX7inRgRzQEByCC0P3-M7_YlmADGLg-zGXjw/93b100cbbff3fea2/A7mXRKtP14IEIsFxug5GEJf4Ar4hqlCX4jFJxJNIU8g-1746456132-1.2.1.1-IYjDOcJzOmB6Z0lIt2Un24L2z.eboq28UjM_vYy0F0QBcw7yymQRhhzT0YkL.p3R IP 188.114.97.1:443
Requested byhttps://tadexbaba.online/ CertificateIssuerGoogle Trust Services Subjecttadexbaba.online Fingerprint1D:55:D2:62:8F:21:DB:FF:40:6B:0B:0A:DB:82:07:F4:90:79:24:36 ValidityFri, 02 May 2025 19:26:39 GMT - Thu, 31 Jul 2025 20:24:10 GMT
File typeASCII text, with very long lines (17036), with no line terminators Hasheed9d72ef8bb35c56f274382934e24cf 4e683035c56fa50ff75c6cecd564c1a6c71ffd10 c72f29b7bbc4a36839efe0a582690dd033cb1dbaf887871f8ea652eeefc979f4
POST /cdn-cgi/challenge-platform/h/g/flow/ov1/1264011782:1746454397:_K7r_oSVX7inRgRzQEByCC0P3-M7_YlmADGLg-zGXjw/93b100cbbff3fea2/A7mXRKtP14IEIsFxug5GEJf4Ar4hqlCX4jFJxJNIU8g-1746456132-1.2.1.1-IYjDOcJzOmB6Z0lIt2Un24L2z.eboq28UjM_vYy0F0QBcw7yymQRhhzT0YkL.p3R HTTP/1.1
Host: tadexbaba.online
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://tadexbaba.online/
cf-chl: A7mXRKtP14IEIsFxug5GEJf4Ar4hqlCX4jFJxJNIU8g-1746456132-1.2.1.1-IYjDOcJzOmB6Z0lIt2Un24L2z.eboq28UjM_vYy0F0QBcw7yymQRhhzT0YkL.p3R
cf-chl-ra: 0
Content-Type: text/plain;charset=UTF-8
Content-Length: 1865
Origin: https://tadexbaba.online
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 05 May 2025 14:42:12 GMT
content-type: text/plain; charset=UTF-8
cf-ray: 93b100ce3de7fea2-AMS
server: cloudflare
content-encoding: br
cf-chl-gen: 7kk2Gp9Ccpz0eRHMLLIgMX7+9Qil4MPGXmTQ2PajSDA=$SUYd4UXrWtdauT3XINRebg==
priority: u=3,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=w%2FXW%2BIq%2FSIpQQjaSKtff9jORvaclARK8kTRJ9rqdrJnrcX9E%2BQ58nj4ApfaxFzKh28YSJh%2BTf3fvZ93GbyoHvn7Ij1jK4J9NV2%2BfqXO1R9jpufdHZTWBCmgmWRBU%2BdayaCN7"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=23117&min_rtt=19844&rtt_var=5425&sent=65&recv=21&lost=0&retrans=0&sent_bytes=55654&recv_bytes=5338&delivery_rate=135720&cwnd=48000&unsent_bytes=0&cid=67c9608199de5073&ts=536&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| tadexbaba.online/ | 188.114.97.1 | 403 Forbidden | 6.7 kB |
IP 188.114.97.1:443
Requested byhttps://tadexbaba.online/ CertificateIssuerGoogle Trust Services Subjecttadexbaba.online Fingerprint1D:55:D2:62:8F:21:DB:FF:40:6B:0B:0A:DB:82:07:F4:90:79:24:36 ValidityFri, 02 May 2025 19:26:39 GMT - Thu, 31 Jul 2025 20:24:10 GMT
File typeHTML document, ASCII text, with very long lines (6710), with no line terminators Hashf2c377327c12835299621cc525f152ad c960dbb4502dfa31140b2c7c59e784cad652deb3 5168f4b897269bae36f33af39abb5cff83ecb8af0c22dd3031933654518c89be
GET / HTTP/1.1
Host: tadexbaba.online
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://tadexbaba.online/?__cf_chl_rt_tk=sSSdVIp8490AVrH5Ci6a6xNoJD4eleRAzphWv2YSAmk-1746456132-1.0.1.1-E6fU9tgKqA_am3a9GUr1rVEgdgU44oPDXcfwaJhKpIE
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 403 Forbidden
date: Mon, 05 May 2025 14:42:12 GMT
content-type: text/html; charset=UTF-8
content-encoding: br
cf-ray: 93b100ce9ea1fea2-AMS
accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
cf-mitigated: challenge
critical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
cross-origin-embedder-policy: require-corp
cross-origin-opener-policy: same-origin
cross-origin-resource-policy: same-origin
origin-agent-cluster: ?1
permissions-policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()
referrer-policy: same-origin
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
expires: Thu, 01 Jan 1970 00:00:01 GMT
priority: u=6,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=WNZT2YTklFQYkMXWeU37a254Xtajl7GxtcAmy%2B71anzkolIShI1WnMDG3Q5SZSquRTpTLxUTFXqE%2B4LOJCWntB850wcvRyC2DBWVnCDTpM4NVVbipKJVsLuTMDCA23JPnbn9"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: chlray;desc="93b100ce9ea1fea2", cfL4;desc="?proto=QUIC&rtt=22711&min_rtt=19844&rtt_var=4879&sent=78&recv=23&lost=0&retrans=0&sent_bytes=69520&recv_bytes=5747&delivery_rate=683655&cwnd=48000&unsent_bytes=0&cid=67c9608199de5073&ts=583&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/j1dmm/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal/auto/ | 104.18.94.41 | 200 OK | 28 kB |
URL GET challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/j1dmm/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal/auto/ IP 104.18.94.41:443
Requested byhttps://tadexbaba.online/ CertificateIssuerGoogle Trust Services Subjectchallenges.cloudflare.com Fingerprint66:48:DF:B4:8B:9D:6A:8C:3A:B7:0F:CF:92:C7:AF:56:B9:3D:A2:1C ValidityTue, 29 Apr 2025 17:49:00 GMT - Mon, 28 Jul 2025 18:48:58 GMT
File typeHTML document, ASCII text, with very long lines (22244) Hash3d0a08750189751bf1ca1c0ab6ad8e0f ffca7af63e00cc292c94285aae9df3ebfc0fbdd9 bbd10fa919605994424c321a8ae88fa8c135351afe40311a69c20cd000cfde17
GET /cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/j1dmm/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal/auto/ HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 05 May 2025 14:42:13 GMT
content-type: text/html; charset=UTF-8
cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
permissions-policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()
content-security-policy: default-src 'none'; script-src 'nonce-xIh5lcsBdA7xVR2C' 'unsafe-eval'; script-src-attr 'none'; worker-src blob:; style-src 'unsafe-inline'; img-src 'self'; connect-src 'self'; frame-src 'self' blob:; child-src 'self' blob:; form-action 'none'; base-uri 'self'; sandbox allow-same-origin allow-scripts allow-popups allow-forms
cross-origin-embedder-policy: require-corp
cross-origin-opener-policy: same-origin
cross-origin-resource-policy: cross-origin
origin-agent-cluster: ?1
accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
critical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
referrer-policy: same-origin
document-policy: js-profiling
priority: u=4,i=?0
server: cloudflare
cf-ray: 93b100cf3bf57127-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
|
|
| challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/flow/ov1/1773407322:1746454360:pbGOa9wu6S-bvcJoGhA9QffM0XLlWdTKOxTHREHbPLg/93b100cf3bf57127/lTmzt3ifK.aImrzpR1D5otbwgUH9WqLsOEm21ZvLepE-1746456133-1.2.1.1-lJraXk3P8tk30YDwZlELM33C.SELe6U5BHF7hdrAHS1D4oUw9F3JmJOmkEG.odHJ | 104.18.94.41 | 200 OK | 230 kB |
URL POST challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/flow/ov1/1773407322:1746454360:pbGOa9wu6S-bvcJoGhA9QffM0XLlWdTKOxTHREHbPLg/93b100cf3bf57127/lTmzt3ifK.aImrzpR1D5otbwgUH9WqLsOEm21ZvLepE-1746456133-1.2.1.1-lJraXk3P8tk30YDwZlELM33C.SELe6U5BHF7hdrAHS1D4oUw9F3JmJOmkEG.odHJ IP 104.18.94.41:443
Requested byhttps://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/j1dmm/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal/auto/ CertificateIssuerGoogle Trust Services Subjectchallenges.cloudflare.com Fingerprint66:48:DF:B4:8B:9D:6A:8C:3A:B7:0F:CF:92:C7:AF:56:B9:3D:A2:1C ValidityTue, 29 Apr 2025 17:49:00 GMT - Mon, 28 Jul 2025 18:48:58 GMT
File typeASCII text, with very long lines (65536), with no line terminators Size230 kB (229548 bytes) Hash6d9fa2694d08e50baccde308ba46e152 49c4cfa94686dd2976f71f8fda16de2c8a704ad6 dfa147883be9fdddd445468af04e4b29968cb2be6127c8b06bcf6e6cf8954158
POST /cdn-cgi/challenge-platform/h/g/flow/ov1/1773407322:1746454360:pbGOa9wu6S-bvcJoGhA9QffM0XLlWdTKOxTHREHbPLg/93b100cf3bf57127/lTmzt3ifK.aImrzpR1D5otbwgUH9WqLsOEm21ZvLepE-1746456133-1.2.1.1-lJraXk3P8tk30YDwZlELM33C.SELe6U5BHF7hdrAHS1D4oUw9F3JmJOmkEG.odHJ HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/j1dmm/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal/auto/
cf-chl: lTmzt3ifK.aImrzpR1D5otbwgUH9WqLsOEm21ZvLepE-1746456133-1.2.1.1-lJraXk3P8tk30YDwZlELM33C.SELe6U5BHF7hdrAHS1D4oUw9F3JmJOmkEG.odHJ
cf-chl-ra: 0
Content-Type: text/plain;charset=UTF-8
Content-Length: 4038
Origin: https://challenges.cloudflare.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 05 May 2025 14:42:13 GMT
content-type: text/plain; charset=UTF-8
cf-chl-gen: m+3yjSwUgk3EPugJQZQclznalZDtZ64qVmYupBRZ6FgRInNv3BCUwrNqZED79PBius6KPJ8XR/4Pegbk/OeV0knZDr1ivu4tEtUZUnFC6lnYSVxe0sG0AVOCTRjCGA74d3zczy1uzpIUNpG25gWpDHmeSaAGBcHdO0VZr83siz9+FcJ5TjKAVwpaesCyDcHngV1um9+HhXnvj73WJmDRCko+wznLj4Q8lZqQgh9W8+QcnvVotRodTucdhJuDFJrCgHAZdE3Lldg5zztjCAkGn14gWqI2t7UksZcjYsNHmSLebyVS0uwLkTt+8lV/PgNuad1lfkCHj/zdAELuyKOrq6Oxe96F0l4IcaFSGJoKYJGv9QsSRDcC/bC9CE7hry9ra1uQbDqfoGwgJAI8cmcg+Tpc4n84OQhXFNyqdG6QcuMsYzzfmOIVCiKrgbI1JjgmfTdVHiRm/CzSbqLVRRbHlfP7AT/7NoMJtASrnMSoNaNXc+7sCPDoCpDvutv6k2U5ebmGmNQuJQan9hmCOwPGMCaB1GCKyFq3M0/JlPR54N2fQ2FBaoaqXbidqEqFtnaSliYkbx9enrP2K+JI/5eLe/mnRXI4ZTT/xtPVRqXmpvNHtVQGBaWDTBOmMOol9kbnqUW05wmKrOuPsXC/6LEokyMFazD4IBUtOhVyXCAzrJiLPrYM4Nk17f27SW31lX0c8WWk83n7EFxEcbZCtF34/+4xdNmrky9Kmb7eVnQ3usWpkQqV1oGhXyUiyGAwm6H0EfwGAlqA7pioRzdKoneuxuVxGRAtpuWbf7zNEWZS9fA7frJHeQ/DmgSfax3mRU7n$W5A51OV1kvRsK30NypX+nQ==
priority: u=3,i=?0
server: cloudflare
cf-ray: 93b100d1afa67127-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
|
|
| | 188.114.97.1 | 200 OK | 2.3 kB |
IP 188.114.97.1:443
CertificateIssuerGoogle Trust Services Subjecttadexbaba.online Fingerprint1D:55:D2:62:8F:21:DB:FF:40:6B:0B:0A:DB:82:07:F4:90:79:24:36 ValidityFri, 02 May 2025 19:26:39 GMT - Thu, 31 Jul 2025 20:24:10 GMT
File typeHTML document, Unicode text, UTF-8 text, with CRLF line terminators Hash21b2f34a43b36e15e018f6b400c8926d e1b2f8dc786254d385dbb79ed645d8af330d534a 968a453c5434c7af6b5bb10cdd3513f543d15bf4d96c9c1ad52e223349cbb98c
POST / HTTP/1.1
Host: tadexbaba.online
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://tadexbaba.online/?__cf_chl_tk=sSSdVIp8490AVrH5Ci6a6xNoJD4eleRAzphWv2YSAmk-1746456132-1.0.1.1-E6fU9tgKqA_am3a9GUr1rVEgdgU44oPDXcfwaJhKpIE
Content-Type: application/x-www-form-urlencoded
Content-Length: 3971
Origin: https://tadexbaba.online
DNT: 1
Connection: keep-alive
Cookie: cf_clearance=w0k.RT7aEcC.UzHQhaYEt3T6wrkovpdTNZDdpspGZXw-1746456140-1.2.1.1-Inb_iEIeJ3mW4YaYGrQsaMhen8EFivWSxOB5sRGokTAa5DmhAieepC86Y5dlrI6eAdO5jfa1kDzB3kPJam.ZbjWoE0AEMN0MIjq3rBzc8ma8HsfOr.3w6PiKQ7kV_Lgnj31uIFHaXBUePOCVGi0Tpyd59tz1U0h.n4tb6eqBlmuER0B4H15MSXAaGScDuCjEEVNVT6pp5HsuSXgq_iF5gYWPX4hMtmcRZ.RTtqVTcHyy.O8ypCzecEwXRNtG.ZMouHMaKr43A29BSc3Eu1OiU26Hqhcbb7D2p20VVaJGB1FZPtWaVlulELzNtQW6q4Pv7we1KQuDSDHocgUspKtr3TfxU8NIJKyJIHE3ZgP57_Ggo5v.Qz.e3afqRiYU1nyr
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Sec-Fetch-User: ?1
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 05 May 2025 14:42:21 GMT
content-type: text/html; charset=UTF-8
cf-ray: 93b10101adcefea2-AMS
server: cloudflare
content-encoding: br
x-powered-by: PHP/8.2.12
cf-cache-status: DYNAMIC
priority: u=1,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=WcH80vafnBj131Xj5v6t6519FlhXsDzzV%2FaVVL%2BmR8p61xm6MPA3LMiWiF6V0AeHwnGTsysTuuy%2BOFfIr5B%2BIpmyRTac8fb4wQFqMjtYNjqOS4IV%2FcEAOy33f12zALXIr3T7"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=22044&min_rtt=19844&rtt_var=3081&sent=93&recv=34&lost=0&retrans=0&sent_bytes=80430&recv_bytes=15661&delivery_rate=57518&cwnd=48000&unsent_bytes=0&cid=67c9608199de5073&ts=8854&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| tadexbaba.online/favicon.ico | 188.114.97.1 | 302 Found | 2.3 kB |
URL GET tadexbaba.online/favicon.ico IP 188.114.97.1:443
Requested byhttps://tadexbaba.online/ CertificateIssuerGoogle Trust Services Subjecttadexbaba.online Fingerprint1D:55:D2:62:8F:21:DB:FF:40:6B:0B:0A:DB:82:07:F4:90:79:24:36 ValidityFri, 02 May 2025 19:26:39 GMT - Thu, 31 Jul 2025 20:24:10 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /favicon.ico HTTP/1.1
Host: tadexbaba.online
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://tadexbaba.online/
Cookie: cf_clearance=w0k.RT7aEcC.UzHQhaYEt3T6wrkovpdTNZDdpspGZXw-1746456140-1.2.1.1-Inb_iEIeJ3mW4YaYGrQsaMhen8EFivWSxOB5sRGokTAa5DmhAieepC86Y5dlrI6eAdO5jfa1kDzB3kPJam.ZbjWoE0AEMN0MIjq3rBzc8ma8HsfOr.3w6PiKQ7kV_Lgnj31uIFHaXBUePOCVGi0Tpyd59tz1U0h.n4tb6eqBlmuER0B4H15MSXAaGScDuCjEEVNVT6pp5HsuSXgq_iF5gYWPX4hMtmcRZ.RTtqVTcHyy.O8ypCzecEwXRNtG.ZMouHMaKr43A29BSc3Eu1OiU26Hqhcbb7D2p20VVaJGB1FZPtWaVlulELzNtQW6q4Pv7we1KQuDSDHocgUspKtr3TfxU8NIJKyJIHE3ZgP57_Ggo5v.Qz.e3afqRiYU1nyr
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 302 Found
date: Mon, 05 May 2025 14:42:21 GMT
content-type: text/html; charset=iso-8859-1
location: https://tadexbaba.online
server: cloudflare
vary: Accept-Encoding
cf-ray: 93b10102d812fea2-AMS
cf-cache-status: BYPASS
priority: u=6,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=A%2Bed%2FAdDyZ3JZyFpwhQuOEgZmYWsKMlKGtGD4ESXSiqEX3RPAqu84nBvPtYPD8WeqbFDOOZEfpdnjR8f364HtnMSbJGsRGJVspq%2FauxqsyYOlgbXyV0aWMVc29ilUqibLZU5"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=21776&min_rtt=19844&rtt_var=2846&sent=96&recv=36&lost=0&retrans=0&sent_bytes=82070&recv_bytes=16353&delivery_rate=13010&cwnd=48000&unsent_bytes=0&cid=67c9608199de5073&ts=9041&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| | 188.114.97.1 | 403 Forbidden | 7.2 kB |
IP 188.114.97.1:443
CertificateIssuerGoogle Trust Services Subjecttadexbaba.online Fingerprint1D:55:D2:62:8F:21:DB:FF:40:6B:0B:0A:DB:82:07:F4:90:79:24:36 ValidityFri, 02 May 2025 19:26:39 GMT - Thu, 31 Jul 2025 20:24:10 GMT
File typeHTML document, ASCII text, with very long lines (7179), with no line terminators Hash3a642cf73def68872af9888cc35d55a0 7da80ce10c0e53e5437e1c940b1f4858b7d70a88 fc0a8a9f4ba5d4573f442333353c744a30e7337e5fdaf9da06da3ad452b8761f
GET / HTTP/1.1
Host: tadexbaba.online
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 403 Forbidden
date: Mon, 05 May 2025 14:42:12 GMT
content-type: text/html; charset=UTF-8
content-encoding: br
cf-ray: 93b100ca9d9d5688-OSL
accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
cf-mitigated: challenge
critical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
cross-origin-embedder-policy: require-corp
cross-origin-opener-policy: same-origin
cross-origin-resource-policy: same-origin
origin-agent-cluster: ?1
permissions-policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()
referrer-policy: same-origin
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
expires: Thu, 01 Jan 1970 00:00:01 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=yDoJmApum21HYsjtNPcr7k8PFcPMTgnnHjezzT0tlRPgs8zzsc0B%2FQ5QejUcCm8eomNwZsGQvBaYBRzA9gr1rp1YLXQGChWtMXO3MzQ4g7U3k5YURkIVObwvwJ8LUdt%2BObCe"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: chlray;desc="93b100ca9d9d5688", cfL4;desc="?proto=TCP&rtt=500&min_rtt=465&rtt_var=118&sent=7&recv=10&lost=0&retrans=0&sent_bytes=3211&recv_bytes=1126&delivery_rate=7715808&cwnd=253&unsent_bytes=0&cid=84e2ce1d941b5652&ts=58&x=0"
X-Firefox-Spdy: h2
|
|
| | 188.114.97.1 | 403 Forbidden | 7.0 kB |
IP 188.114.97.1:443
CertificateIssuerGoogle Trust Services Subjecttadexbaba.online Fingerprint1D:55:D2:62:8F:21:DB:FF:40:6B:0B:0A:DB:82:07:F4:90:79:24:36 ValidityFri, 02 May 2025 19:26:39 GMT - Thu, 31 Jul 2025 20:24:10 GMT
File typeHTML document, ASCII text, with very long lines (7009), with no line terminators Hash44f4f8db722d5d03062524d3071e3a7b 82f8a3c52b57f209e7f2bf4c4f356ac601b06bd3 80881d7e4d29299b094de3754336796456b26a5c42892fce0d09f89284f52bc9
GET / HTTP/1.1
Host: tadexbaba.online
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 403 Forbidden
date: Mon, 05 May 2025 14:42:12 GMT
content-type: text/html; charset=UTF-8
content-encoding: br
cf-ray: 93b100cbbff3fea2-AMS
accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
cf-mitigated: challenge
critical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
cross-origin-embedder-policy: require-corp
cross-origin-opener-policy: same-origin
cross-origin-resource-policy: same-origin
origin-agent-cluster: ?1
permissions-policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()
referrer-policy: same-origin
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
expires: Thu, 01 Jan 1970 00:00:01 GMT
priority: u=1,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=9o1r2lJNLJjES4Tf9GIMgzVc8nrjUhfI3leknijHIcd1rFtwMJzK00jGC2FFoK2pGqNqH91j%2BAy%2BMaP33ljJaAe%2F4nDJO1HrhNGWx%2Fg%2BYp%2Ba1FWBSP4HjmJf4YD2320Sf%2F7s"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: chlray;desc="93b100cbbff3fea2", cfL4;desc="?proto=QUIC&rtt=24626&min_rtt=23311&rtt_var=11372&sent=12&recv=7&lost=0&retrans=0&sent_bytes=4105&recv_bytes=1174&delivery_rate=17539&cwnd=12000&unsent_bytes=0&cid=67c9608199de5073&ts=133&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| tadexbaba.online/favicon.ico | 188.114.97.1 | 302 Found | 6.6 kB |
URL GET tadexbaba.online/favicon.ico IP 188.114.97.1:443
Requested byhttps://tadexbaba.online/ CertificateIssuerGoogle Trust Services Subjecttadexbaba.online Fingerprint1D:55:D2:62:8F:21:DB:FF:40:6B:0B:0A:DB:82:07:F4:90:79:24:36 ValidityFri, 02 May 2025 19:26:39 GMT - Thu, 31 Jul 2025 20:24:10 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /favicon.ico HTTP/1.1
Host: tadexbaba.online
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://tadexbaba.online/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 302 Found
date: Mon, 05 May 2025 14:42:12 GMT
content-type: text/html; charset=iso-8859-1
location: https://tadexbaba.online
server: cloudflare
vary: Accept-Encoding
cf-ray: 93b100cd1b83fea2-AMS
cf-cache-status: BYPASS
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ddrvsDd%2BCElktaPymKwLSMC%2B2ChSiJw031uDRXIfEVFNi8A3dgy9xSoU8oHm9VdJbWuQJthzEQbc%2Bb4etJT7GrhEYHg2u%2BTFxixrHJEBm1Gfsl9w3Eq3a3f7AofK6cOGwK1R"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=25223&min_rtt=20203&rtt_var=8280&sent=55&recv=14&lost=0&retrans=0&sent_bytes=48693&recv_bytes=2388&delivery_rate=64196&cwnd=48000&unsent_bytes=0&cid=67c9608199de5073&ts=447&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| challenges.cloudflare.com/turnstile/v0/g/8b139538fc64/api.js?onload=wSuaP7&render=explicit | 104.18.94.41 | 200 OK | 48 kB |
URL GET challenges.cloudflare.com/turnstile/v0/g/8b139538fc64/api.js?onload=wSuaP7&render=explicit IP 104.18.94.41:443
Requested byhttps://tadexbaba.online/ CertificateIssuerGoogle Trust Services Subjectchallenges.cloudflare.com Fingerprint66:48:DF:B4:8B:9D:6A:8C:3A:B7:0F:CF:92:C7:AF:56:B9:3D:A2:1C ValidityTue, 29 Apr 2025 17:49:00 GMT - Mon, 28 Jul 2025 18:48:58 GMT
File typeJavaScript source, ASCII text, with very long lines (48199) Hash7bb66ce862c629cd76df7671d044b13f ca0a307ec586f58c21a7cd77eccfd55e6baa399a 82418aa36c0ec847883a008577ceea42fc081eae44571bb2b6cece4494d0e070
GET /turnstile/v0/g/8b139538fc64/api.js?onload=wSuaP7&render=explicit HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://tadexbaba.online
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 05 May 2025 14:42:12 GMT
content-type: application/javascript; charset=UTF-8
last-modified: Thu, 01 May 2025 14:46:40 GMT
cache-control: max-age=31536000, stale-if-error=10800, stale-while-revalidate=31536000, public
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding
server: cloudflare
cf-ray: 93b100cd6eea0b65-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| | 188.114.97.1 | 301 Moved Permanently | 7.0 kB |
IP 188.114.97.1:80
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: tadexbaba.online
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 301 Moved Permanently
Date: Mon, 05 May 2025 14:42:12 GMT
Content-Type: text/html
Content-Length: 167
Connection: keep-alive
Cache-Control: max-age=3600
Expires: Mon, 05 May 2025 15:42:12 GMT
Location: https://tadexbaba.online/
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=WiM%2BImm6LNkEijgVYNKumnIJmandIYXlixN7JtRfLSg%2FpaWOxdr%2FB7C3HKLfj9V%2Bgwt%2B%2BGjyHWKMcZeuyVPGmCLX9B5Fxh0U0UM5zfR2EHEu0S5ZwXvDCP01xSVcoxMNUC%2Bd"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 93b100cb6d8a56ab-OSL
alt-svc: h2=":443"; ma=60
server-timing: cfL4;desc="?proto=TCP&rtt=434&min_rtt=434&rtt_var=217&sent=1&recv=3&lost=0&retrans=0&sent_bytes=0&recv_bytes=401&delivery_rate=0&cwnd=249&unsent_bytes=0&cid=0000000000000000&ts=0&x=0"
|
|
| tadexbaba.online/favicon.ico | 188.114.97.1 | 302 Found | 6.7 kB |
URL GET tadexbaba.online/favicon.ico IP 188.114.97.1:443
Requested byhttps://tadexbaba.online/ CertificateIssuerGoogle Trust Services Subjecttadexbaba.online Fingerprint1D:55:D2:62:8F:21:DB:FF:40:6B:0B:0A:DB:82:07:F4:90:79:24:36 ValidityFri, 02 May 2025 19:26:39 GMT - Thu, 31 Jul 2025 20:24:10 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /favicon.ico HTTP/1.1
Host: tadexbaba.online
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://tadexbaba.online/?__cf_chl_rt_tk=sSSdVIp8490AVrH5Ci6a6xNoJD4eleRAzphWv2YSAmk-1746456132-1.0.1.1-E6fU9tgKqA_am3a9GUr1rVEgdgU44oPDXcfwaJhKpIE
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 302 Found
date: Mon, 05 May 2025 14:42:12 GMT
content-type: text/html; charset=iso-8859-1
location: https://tadexbaba.online
server: cloudflare
vary: Accept-Encoding
cf-ray: 93b100ccead3fea2-AMS
cf-cache-status: BYPASS
priority: u=6,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=PdBTq0HifPTDevopz85HK9L8l35%2BT3LeU2zkxZvwtHZkgInfcwiV6cKLmNyVbmP8JX%2FzOP%2BSu2U%2BvUpxTNJavdhpPaGr3WKCBfJ3XlbvnI9QT5yzZpPweVvGrgCzKYZwWQqq"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=25223&min_rtt=20203&rtt_var=8280&sent=54&recv=14&lost=0&retrans=0&sent_bytes=47689&recv_bytes=2388&delivery_rate=64196&cwnd=48000&unsent_bytes=0&cid=67c9608199de5073&ts=416&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/pat/93b100cf3bf57127/1746456133409/98888d6c2a3a097620a2a568bfca280f77b564ae599c157052e2360fa0e336c0/jDf0Na3X4uJ23ji | 104.18.94.41 | 401 Unauthorized | 1 B |
URL GET challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/pat/93b100cf3bf57127/1746456133409/98888d6c2a3a097620a2a568bfca280f77b564ae599c157052e2360fa0e336c0/jDf0Na3X4uJ23ji IP 104.18.94.41:443
Requested byhttps://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/j1dmm/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal/auto/ CertificateIssuerGoogle Trust Services Subjectchallenges.cloudflare.com Fingerprint66:48:DF:B4:8B:9D:6A:8C:3A:B7:0F:CF:92:C7:AF:56:B9:3D:A2:1C ValidityTue, 29 Apr 2025 17:49:00 GMT - Mon, 28 Jul 2025 18:48:58 GMT
File typevery short file (no magic) Hashff44570aca8241914870afbc310cdb85 58668e7669fd564d99db5d581fcdb6a5618440b5 6da43b944e494e885e69af021f93c6d9331c78aa228084711429160a5bbd15b5
GET /cdn-cgi/challenge-platform/h/g/pat/93b100cf3bf57127/1746456133409/98888d6c2a3a097620a2a568bfca280f77b564ae599c157052e2360fa0e336c0/jDf0Na3X4uJ23ji HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/j1dmm/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal/auto/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 401 Unauthorized
date: Mon, 05 May 2025 14:42:14 GMT
content-type: text/plain; charset=utf-8
content-length: 1
www-authenticate: PrivateToken challenge="AAIAGXBhdC1pc3N1ZXIuY2xvdWRmbGFyZS5jb20gmIiNbCo6CXYgoqVov8ooD3e1ZK5ZnBVwUuI2D6DjNsAAGWNoYWxsZW5nZXMuY2xvdWRmbGFyZS5jb20=", token-key="MIIBUjA9BgkqhkiG9w0BAQowMKANMAsGCWCGSAFlAwQCAqEaMBgGCSqGSIb3DQEBCDALBglghkgBZQMEAgKiAwIBMAOCAQ8AMIIBCgKCAQEAscjm_UO_k901rNdCKgLw5bvI4i6M_jDNCIXpfs2LRbtxwLOrUyplqVvML_hVlB5tIDMuj0ihhaOFHose-Y0_UjQnNUGE_vol46VvGgscTMtTjU4xINriap8AMTIygvljEBt6my-nBwkUGhY3U9v5iKC-eWR5bTfvrqFsuIVxafkSfhHqDXB4KLGNjvOOV71GGJ9x4yxA-C2OcULZ1uDDKuvAaMhuiWdF6OzSTXruP9yPg1vmuteavOW1re0YDbCbtK16PhHdSzWym7v_FrvId-2zf26j50FlTd_vl_DcKNDVCgWDoU0uX3cU6V3rSQoVXREEqPr-2ywSGru8ZuXRoQIDAQAB", max-age=20, PrivateToken challenge="AAIAHXNhdC5wYXQtaXNzdWVyLmNsb3VkZmxhcmUuY29tIJiIjWwqOgl2IKKlaL_KKA93tWSuWZwVcFLiNg-g4zbAABljaGFsbGVuZ2VzLmNsb3VkZmxhcmUuY29t", token-key="MIIBUjA9BgkqhkiG9w0BAQowMKANMAsGCWCGSAFlAwQCAqEaMBgGCSqGSIb3DQEBCDALBglghkgBZQMEAgKiAwIBMAOCAQ8AMIIBCgKCAQEAsLS4HBnLGydwK-bLQGRCaoyMsrXBRrDgQVmxS06j3UF0nYSd6GdTGCKIu1WV60eg-tJtTttfEVq7wHVQf4vzjYBidmCh88ebzxKv2GB6PESSodf5MsEup9xd5dxpkYScgL1CCJq89kRrOQ_CS61bvkL_oGyZf4ffqG5THgaOsopqj8dFLH6_SMy9yf8EgMYqpyjxfKsD-1_qb1m1DRjJEKPWKIGwmHXIKQJUqsxZFm4_Inwkxx7QMpVP4GyqlTxFVz7stWwJRSkMLHjEM_IWLUYfPhuwIUVqmRjGsY1n8flA1bRfxaWHNDxoi25-M2BKTP9NkNNJBbTKErhrZ9LGywIDAQAB", max-age=20, PrivateToken challenge="AAIALHBwLWlzc3Vlci1wcm9kdWN0aW9uLnJlc2VhcmNoLmNsb3VkZmxhcmUuY29tIJiIjWwqOgl2IKKlaL_KKA93tWSuWZwVcFLiNg-g4zbAABljaGFsbGVuZ2VzLmNsb3VkZmxhcmUuY29t", token-key="MIIBUjA9BgkqhkiG9w0BAQowMKANMAsGCWCGSAFlAwQCAqEaMBgGCSqGSIb3DQEBCDALBglghkgBZQMEAgKiAwIBMAOCAQ8AMIIBCgKCAQEA1r6z50Qwapjvi7gKQBPiehOkJb40cvj8RgN_zo7Ag1Zt0ItIZ08z6yBoyxcQd_a3O1eJagQvs0q2WZqQcXhBy3zBsvQBUQF8QxmVXDj3rgtzSqQSahQmiLHDl8Bcv0QZEdy4zOIIyDuI5UyRXhX7XZGrCVD8CZ90xBA5BKM69472-2BHpBla9Lbeh9YUrkZ5O98MUI_u6VEapusnXAf_lwrQA8tyF-9S11SxHG6uu9ywb9GCpVeaxdoonr9TgwPU5JgXSFuW_Ow1I_O2alIJcGt4Lb8SBKG-hKMrnxnwzFPje27Rczkpqu7PtgYXJvH_uDRKG-nqq_rghxAOH_kchwIDAQAB", max-age=20
priority: u=4,i=?0
server: cloudflare
cf-ray: 93b100d67f5c7127-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
|
|
| tadexbaba.online/cdn-cgi/challenge-platform/h/g/flow/ov1/1264011782:1746454397:_K7r_oSVX7inRgRzQEByCC0P3-M7_YlmADGLg-zGXjw/93b100cbbff3fea2/A7mXRKtP14IEIsFxug5GEJf4Ar4hqlCX4jFJxJNIU8g-1746456132-1.2.1.1-IYjDOcJzOmB6Z0lIt2Un24L2z.eboq28UjM_vYy0F0QBcw7yymQRhhzT0YkL.p3R | 188.114.97.1 | 200 OK | 4.2 kB |
URL POST tadexbaba.online/cdn-cgi/challenge-platform/h/g/flow/ov1/1264011782:1746454397:_K7r_oSVX7inRgRzQEByCC0P3-M7_YlmADGLg-zGXjw/93b100cbbff3fea2/A7mXRKtP14IEIsFxug5GEJf4Ar4hqlCX4jFJxJNIU8g-1746456132-1.2.1.1-IYjDOcJzOmB6Z0lIt2Un24L2z.eboq28UjM_vYy0F0QBcw7yymQRhhzT0YkL.p3R IP 188.114.97.1:443
Requested byhttps://tadexbaba.online/ CertificateIssuerGoogle Trust Services Subjecttadexbaba.online Fingerprint1D:55:D2:62:8F:21:DB:FF:40:6B:0B:0A:DB:82:07:F4:90:79:24:36 ValidityFri, 02 May 2025 19:26:39 GMT - Thu, 31 Jul 2025 20:24:10 GMT
File typeASCII text, with very long lines (4168), with no line terminators Hashe3129cfee6bbc71c3106c5a0c8244f64 e3129240883847a5bdb636630ce68ee81b3a7c60 2a0f8f19c4a17602c072bf7c13492378825312fc7bbf24f2a5e02a3507973f4c
POST /cdn-cgi/challenge-platform/h/g/flow/ov1/1264011782:1746454397:_K7r_oSVX7inRgRzQEByCC0P3-M7_YlmADGLg-zGXjw/93b100cbbff3fea2/A7mXRKtP14IEIsFxug5GEJf4Ar4hqlCX4jFJxJNIU8g-1746456132-1.2.1.1-IYjDOcJzOmB6Z0lIt2Un24L2z.eboq28UjM_vYy0F0QBcw7yymQRhhzT0YkL.p3R HTTP/1.1
Host: tadexbaba.online
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://tadexbaba.online/
cf-chl: A7mXRKtP14IEIsFxug5GEJf4Ar4hqlCX4jFJxJNIU8g-1746456132-1.2.1.1-IYjDOcJzOmB6Z0lIt2Un24L2z.eboq28UjM_vYy0F0QBcw7yymQRhhzT0YkL.p3R
cf-chl-ra: 0
Content-Type: text/plain;charset=UTF-8
Content-Length: 4134
Origin: https://tadexbaba.online
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 05 May 2025 14:42:20 GMT
content-type: text/html; charset=UTF-8
server: cloudflare
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
cf-ray: 93b10100bb89fea2-AMS
cf-chl-out: 1UKfb/NweAvRgfycHdgY/XfBwU8e8B0OyycSpIoZJiJZGHSttiUFyidVDfx5mxbJM2WdHPWx9S2ea9r14HjGgQ==$UKuW2y79rDgbdIhXELqmTg==
cf-chl-out-s: OUhwJwLyGWmsMOITHFmdpUFiBPX6y0jjhIp4MW1iinv3JEoU3aVn3U3PRLbmIOOLLf1b2DKKRzthuS3Y7tNIXtXKKN6SZNdNmhj8AeqdeXVKY7t5KvfDZcnVSpG56ixAQTB9TQ2gejhZj3b8pM+tGllryZ5W62mGGdkTfWziMBmnOcL8+U3vNztDHuFZfFzZroMcSj2gLgsc4pSrXxihWvNCk2hOzk9yy7bKtjDDsgGiXy00FECwS9I6z6V1+j2eJe2D+/x6I6UaWt82dxQOA9+qkWs0rEu45aofrn+dD0JVqLYJIZiVpGtKWNrFgUDtMMokq+ziv6gKORQY5O+SbWrZypFyQHWG/jxBx+qycxtdyaJch7AJBPtTkC4V9BvWMVwz6SqsZEqeAR3OnPK9LjsnudXBe+sJZ8WIyuVfNiudXLzOK/AE2WtpV88I56nC$+mGT2aqYVJB4lB30OIzC1g==
content-encoding: br
priority: u=3,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=4%2BdP7L0DiOZizTFnUb8E6jL6qw%2FtkqAqW1F8K79nPjHQZO2EsI1WGMf6X3gO%2FMqbGmQRbdipOjJ%2FiDyZT9fD5JoWULBTCVDvSh851d2TlqvZhS%2BAvjV6ivqit3h3pvAJq2a2"}],"group":"cf-nel","max_age":604800}
set-cookie: cf_clearance=w0k.RT7aEcC.UzHQhaYEt3T6wrkovpdTNZDdpspGZXw-1746456140-1.2.1.1-Inb_iEIeJ3mW4YaYGrQsaMhen8EFivWSxOB5sRGokTAa5DmhAieepC86Y5dlrI6eAdO5jfa1kDzB3kPJam.ZbjWoE0AEMN0MIjq3rBzc8ma8HsfOr.3w6PiKQ7kV_Lgnj31uIFHaXBUePOCVGi0Tpyd59tz1U0h.n4tb6eqBlmuER0B4H15MSXAaGScDuCjEEVNVT6pp5HsuSXgq_iF5gYWPX4hMtmcRZ.RTtqVTcHyy.O8ypCzecEwXRNtG.ZMouHMaKr43A29BSc3Eu1OiU26Hqhcbb7D2p20VVaJGB1FZPtWaVlulELzNtQW6q4Pv7we1KQuDSDHocgUspKtr3TfxU8NIJKyJIHE3ZgP57_Ggo5v.Qz.e3afqRiYU1nyr; HttpOnly; SameSite=None; Partitioned; Secure; Path=/; Domain=tadexbaba.online; Expires=Tue, 05 May 2026 14:42:20 GMT
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=22325&min_rtt=19844&rtt_var=3360&sent=86&recv=29&lost=0&retrans=0&sent_bytes=75521&recv_bytes=10696&delivery_rate=233183&cwnd=48000&unsent_bytes=0&cid=67c9608199de5073&ts=8664&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| tadexbaba.online/ | 188.114.97.1 | 200 OK | 2.3 kB |
IP 188.114.97.1:443
Requested byhttps://tadexbaba.online/ CertificateIssuerGoogle Trust Services Subjecttadexbaba.online Fingerprint1D:55:D2:62:8F:21:DB:FF:40:6B:0B:0A:DB:82:07:F4:90:79:24:36 ValidityFri, 02 May 2025 19:26:39 GMT - Thu, 31 Jul 2025 20:24:10 GMT
File typeHTML document, Unicode text, UTF-8 text, with CRLF line terminators Hash21b2f34a43b36e15e018f6b400c8926d e1b2f8dc786254d385dbb79ed645d8af330d534a 968a453c5434c7af6b5bb10cdd3513f543d15bf4d96c9c1ad52e223349cbb98c
GET / HTTP/1.1
Host: tadexbaba.online
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://tadexbaba.online/
DNT: 1
Connection: keep-alive
Cookie: cf_clearance=w0k.RT7aEcC.UzHQhaYEt3T6wrkovpdTNZDdpspGZXw-1746456140-1.2.1.1-Inb_iEIeJ3mW4YaYGrQsaMhen8EFivWSxOB5sRGokTAa5DmhAieepC86Y5dlrI6eAdO5jfa1kDzB3kPJam.ZbjWoE0AEMN0MIjq3rBzc8ma8HsfOr.3w6PiKQ7kV_Lgnj31uIFHaXBUePOCVGi0Tpyd59tz1U0h.n4tb6eqBlmuER0B4H15MSXAaGScDuCjEEVNVT6pp5HsuSXgq_iF5gYWPX4hMtmcRZ.RTtqVTcHyy.O8ypCzecEwXRNtG.ZMouHMaKr43A29BSc3Eu1OiU26Hqhcbb7D2p20VVaJGB1FZPtWaVlulELzNtQW6q4Pv7we1KQuDSDHocgUspKtr3TfxU8NIJKyJIHE3ZgP57_Ggo5v.Qz.e3afqRiYU1nyr
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 05 May 2025 14:42:21 GMT
content-type: text/html; charset=UTF-8
cf-ray: 93b10103a9b1fea2-AMS
server: cloudflare
content-encoding: br
x-powered-by: PHP/8.2.12
cf-cache-status: DYNAMIC
priority: u=6,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=i0N3ivFykNyCVAmcksT%2BzHARcoi7seG6DjsICZw4Q8PIvQ9%2BqcdeyoB6u5gA3IRa8Sqh1vJwL27nCS1qbLharAvcPrVr80QkifNWi7JG3e9Uzg%2F9vaqUIsetL2az0oUmUEV5"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=21557&min_rtt=19844&rtt_var=2574&sent=99&recv=38&lost=0&retrans=0&sent_bytes=83126&recv_bytes=17035&delivery_rate=8759&cwnd=48000&unsent_bytes=0&cid=67c9608199de5073&ts=9123&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/flow/ov1/1773407322:1746454360:pbGOa9wu6S-bvcJoGhA9QffM0XLlWdTKOxTHREHbPLg/93b100cf3bf57127/lTmzt3ifK.aImrzpR1D5otbwgUH9WqLsOEm21ZvLepE-1746456133-1.2.1.1-lJraXk3P8tk30YDwZlELM33C.SELe6U5BHF7hdrAHS1D4oUw9F3JmJOmkEG.odHJ | 104.18.94.41 | 200 OK | 28 kB |
URL POST challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/flow/ov1/1773407322:1746454360:pbGOa9wu6S-bvcJoGhA9QffM0XLlWdTKOxTHREHbPLg/93b100cf3bf57127/lTmzt3ifK.aImrzpR1D5otbwgUH9WqLsOEm21ZvLepE-1746456133-1.2.1.1-lJraXk3P8tk30YDwZlELM33C.SELe6U5BHF7hdrAHS1D4oUw9F3JmJOmkEG.odHJ IP 104.18.94.41:443
Requested byhttps://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/j1dmm/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal/auto/ CertificateIssuerGoogle Trust Services Subjectchallenges.cloudflare.com Fingerprint66:48:DF:B4:8B:9D:6A:8C:3A:B7:0F:CF:92:C7:AF:56:B9:3D:A2:1C ValidityTue, 29 Apr 2025 17:49:00 GMT - Mon, 28 Jul 2025 18:48:58 GMT
File typeASCII text, with very long lines (28188), with no line terminators Hash676be154aa1d8050b98f00160e6a0e0c 25d15942a74e63161e44a98882588f4745903c67 f2dd4bdcf04bc5365e1a34a31c763b70dd77ffac17d9ea51d3aab184e1d1b8a4
POST /cdn-cgi/challenge-platform/h/g/flow/ov1/1773407322:1746454360:pbGOa9wu6S-bvcJoGhA9QffM0XLlWdTKOxTHREHbPLg/93b100cf3bf57127/lTmzt3ifK.aImrzpR1D5otbwgUH9WqLsOEm21ZvLepE-1746456133-1.2.1.1-lJraXk3P8tk30YDwZlELM33C.SELe6U5BHF7hdrAHS1D4oUw9F3JmJOmkEG.odHJ HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/j1dmm/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal/auto/
cf-chl: lTmzt3ifK.aImrzpR1D5otbwgUH9WqLsOEm21ZvLepE-1746456133-1.2.1.1-lJraXk3P8tk30YDwZlELM33C.SELe6U5BHF7hdrAHS1D4oUw9F3JmJOmkEG.odHJ
cf-chl-ra: 0
Content-Type: text/plain;charset=UTF-8
Content-Length: 34030
Origin: https://challenges.cloudflare.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 05 May 2025 14:42:16 GMT
content-type: text/plain; charset=UTF-8
cf-chl-gen: Avq8dAl4DPhSV+jMKt7qJWsDNdnCAABfTyDahlHDRlWjsFnif0wkK3VFrrjpM3H7$SntZxRC1i5m6tFwJ3cVIMg==
priority: u=3,i=?0
server: cloudflare
cf-ray: 93b100e329f37127-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
|
|
| tadexbaba.online/cdn-cgi/challenge-platform/h/g/orchestrate/chl_page/v1?ray=93b100cbbff3fea2 | 188.114.97.1 | 200 OK | 94 kB |
URL GET tadexbaba.online/cdn-cgi/challenge-platform/h/g/orchestrate/chl_page/v1?ray=93b100cbbff3fea2 IP 188.114.97.1:443
Requested byhttps://tadexbaba.online/ CertificateIssuerGoogle Trust Services Subjecttadexbaba.online Fingerprint1D:55:D2:62:8F:21:DB:FF:40:6B:0B:0A:DB:82:07:F4:90:79:24:36 ValidityFri, 02 May 2025 19:26:39 GMT - Thu, 31 Jul 2025 20:24:10 GMT
File typeJavaScript source, ASCII text, with very long lines (65536), with no line terminators Hashf4eeb7473c0292ecfb2409e4b2bd8646 c07f24899bd4a045b07ea63dee343e29519c6300 7c17b069b9fc983a320f3311aba62f95d424ae4d5f8931c5409adea89fbe5e4f
GET /cdn-cgi/challenge-platform/h/g/orchestrate/chl_page/v1?ray=93b100cbbff3fea2 HTTP/1.1
Host: tadexbaba.online
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://tadexbaba.online/?__cf_chl_rt_tk=sSSdVIp8490AVrH5Ci6a6xNoJD4eleRAzphWv2YSAmk-1746456132-1.0.1.1-E6fU9tgKqA_am3a9GUr1rVEgdgU44oPDXcfwaJhKpIE
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 05 May 2025 14:42:12 GMT
content-type: application/javascript; charset=UTF-8
cf-ray: 93b100cc79b3fea2-AMS
server: cloudflare
content-encoding: br
cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
priority: u=3,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=A7ug9NTwPAAd3qpfO5elVqu7UPK3%2BWnevEZQyKzgljoGilNlqSW2gFQh05L22xvh%2BVOFGMDSpA4bclSugoYItE6NMaY8boEa2SXmb%2FuKGs8dalnpcjZ%2Fjkf7FyZXg%2FQQ%2BJq7"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=25735&min_rtt=23311&rtt_var=10745&sent=19&recv=9&lost=0&retrans=0&sent_bytes=10338&recv_bytes=1604&delivery_rate=65018&cwnd=12000&unsent_bytes=0&cid=67c9608199de5073&ts=251&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| tadexbaba.online/ | 188.114.97.1 | 403 Forbidden | 6.6 kB |
IP 188.114.97.1:443
Requested byhttps://tadexbaba.online/ CertificateIssuerGoogle Trust Services Subjecttadexbaba.online Fingerprint1D:55:D2:62:8F:21:DB:FF:40:6B:0B:0A:DB:82:07:F4:90:79:24:36 ValidityFri, 02 May 2025 19:26:39 GMT - Thu, 31 Jul 2025 20:24:10 GMT
File typeHTML document, ASCII text, with very long lines (6582), with no line terminators Hash4d04767550b8fe52e129a5b49f6596c0 faf8ad029aeee16cb32a824e1985fdc65d945ba9 8b035f7f104daecf0284f52c7acf0cb80ce1d2b0e60182b0c73afebf9c84ed44
GET / HTTP/1.1
Host: tadexbaba.online
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://tadexbaba.online/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 403 Forbidden
date: Mon, 05 May 2025 14:42:12 GMT
content-type: text/html; charset=UTF-8
content-encoding: br
cf-ray: 93b100cded57fea2-AMS
accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
cf-mitigated: challenge
critical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
cross-origin-embedder-policy: require-corp
cross-origin-opener-policy: same-origin
cross-origin-resource-policy: same-origin
origin-agent-cluster: ?1
permissions-policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()
referrer-policy: same-origin
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
expires: Thu, 01 Jan 1970 00:00:01 GMT
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=2ZU%2BuElYEi%2F8kE%2BitlJRAlrhFM1%2FbEypPouxuz5rVX6m%2BgVD4%2BQG7Zgm%2FlrMSA8Ss3ODClCWqCa1Spd9ORCwbnDZ86UQm5ewFxE4zCUhkuquTOStWluT4tRIfvXypluTrRBR"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: chlray;desc="93b100cded57fea2", cfL4;desc="?proto=QUIC&rtt=24082&min_rtt=20078&rtt_var=6655&sent=58&recv=17&lost=0&retrans=0&sent_bytes=49748&recv_bytes=2746&delivery_rate=14568&cwnd=48000&unsent_bytes=0&cid=67c9608199de5073&ts=500&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/cmg/1 | 104.18.94.41 | 200 OK | 61 B |
URL GET challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/cmg/1 IP 104.18.94.41:443
Requested byhttps://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/j1dmm/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal/auto/ CertificateIssuerGoogle Trust Services Subjectchallenges.cloudflare.com Fingerprint66:48:DF:B4:8B:9D:6A:8C:3A:B7:0F:CF:92:C7:AF:56:B9:3D:A2:1C ValidityTue, 29 Apr 2025 17:49:00 GMT - Mon, 28 Jul 2025 18:48:58 GMT
File typePNG image data, 2 x 2, 8-bit/color RGB, non-interlaced Hash9246cca8fc3c00f50035f28e9f6b7f7d 3aa538440f70873b574f40cd793060f53ec17a5d c07d7d29e3c20fa6ca4c5d20663688d52bad13e129ad82ce06b80eb187d9dc84
GET /cdn-cgi/challenge-platform/h/g/cmg/1 HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/j1dmm/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal/auto/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 05 May 2025 14:42:13 GMT
content-type: image/png
content-length: 61
cache-control: max-age=2629800, public
priority: u=4,i=?0
server: cloudflare
cf-ray: 93b100cfbccb7127-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
|
|
| challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/orchestrate/chl_api/v1?ray=93b100cf3bf57127&lang=auto | 104.18.94.41 | 200 OK | 118 kB |
URL GET challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/orchestrate/chl_api/v1?ray=93b100cf3bf57127&lang=auto IP 104.18.94.41:443
Requested byhttps://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/j1dmm/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal/auto/ CertificateIssuerGoogle Trust Services Subjectchallenges.cloudflare.com Fingerprint66:48:DF:B4:8B:9D:6A:8C:3A:B7:0F:CF:92:C7:AF:56:B9:3D:A2:1C ValidityTue, 29 Apr 2025 17:49:00 GMT - Mon, 28 Jul 2025 18:48:58 GMT
File typeJavaScript source, ASCII text, with very long lines (65536), with no line terminators Size118 kB (117764 bytes) Hash8cb556e0875029865c8b90f3fbb36c79 98e933c90b5c55e5c64316029d400b95ef8d9399 29aa524fd298dab50d0fd830f5013c55d57a572c505ea3e473029b78adfeacd3
GET /cdn-cgi/challenge-platform/h/g/orchestrate/chl_api/v1?ray=93b100cf3bf57127&lang=auto HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/j1dmm/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal/auto/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 05 May 2025 14:42:13 GMT
content-type: application/javascript; charset=UTF-8
cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
priority: u=3,i=?0
server: cloudflare
cf-ray: 93b100cfccf27127-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
|
|
| challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/d/93b100cf3bf57127/1746456133417/F0YqxIgQwhA293i | 104.18.94.41 | 200 OK | 61 B |
URL GET challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/d/93b100cf3bf57127/1746456133417/F0YqxIgQwhA293i IP 104.18.94.41:443
Requested byhttps://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/j1dmm/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal/auto/ CertificateIssuerGoogle Trust Services Subjectchallenges.cloudflare.com Fingerprint66:48:DF:B4:8B:9D:6A:8C:3A:B7:0F:CF:92:C7:AF:56:B9:3D:A2:1C ValidityTue, 29 Apr 2025 17:49:00 GMT - Mon, 28 Jul 2025 18:48:58 GMT
File typePNG image data, 60 x 55, 8-bit/color RGB, non-interlaced Hashbae4b600471aa57bb7aa16bac4fd95b0 25e21cb998be5cff73bbfa32220f0062512c9cba de4617972592094e9ac7c4d914d33408d3eac804d27a945c93a74b6a08e8c6a9
GET /cdn-cgi/challenge-platform/h/g/d/93b100cf3bf57127/1746456133417/F0YqxIgQwhA293i HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/j1dmm/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal/auto/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 05 May 2025 14:42:15 GMT
content-type: image/png
content-length: 61
priority: u=4,i=?0
server: cloudflare
cf-ray: 93b100e13eed7127-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
|
|