| | 188.114.96.1 | 403 Forbidden | 4.0 kB |
URL User Request POST HTTP/1.1IP 188.114.96.1:80
File typeHTML document, ASCII text, with very long lines (6208), with no line terminators Hashc732314a66b45549d177a2d2363bfd1f d3c426a11a8e009da8738be2fbce200ed836bc78 e634a484269ec585fc8980dfee4b7f370758e63c510408fb3b09d7313c8479ab
GET / HTTP/1.1
Host: gf56.k78-we.blog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 403 Forbidden
Date: Wed, 26 Feb 2025 21:13:48 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
cf-mitigated: challenge
critical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
cross-origin-embedder-policy: require-corp
cross-origin-opener-policy: same-origin
cross-origin-resource-policy: same-origin
origin-agent-cluster: ?1
permissions-policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()
referrer-policy: same-origin
x-content-options: nosniff
x-frame-options: SAMEORIGIN
cf-chl-out: D8R0hicFhhNVkpVsuEeiXDEnLF2KtTx90r2YRx9V5tKiDma5tgFv8ib/45PqaZluY8KCUsHfM/4XvUpE5PaqKXvNOYb08YdXx9/b+xwgChd0MIvo0s4Y8+X1YHnUHUnTL6MslWMG8lso6T70dKMT6w==$jfX8Jk3bZ1FNJBZPrVxaIA==
Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=itNkqUGm%2BGZC5%2BXwihixSFQRS5YeNa2ZdjCN49c7lp3IN85T%2FhtccsVEiU8pAes1QzIBxNopWLJemWDdZwMC2iIMB5AWkbpqL2KjYo1zV98VccGbnGDQGb0qiti%2FlyNzVfBG"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 9182f0eb2e5b56a5-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
server-timing: chlray;desc="9182f0eb2e5b56a5", cfL4;desc="?proto=TCP&rtt=464&min_rtt=464&rtt_var=232&sent=1&recv=3&lost=0&retrans=0&sent_bytes=0&recv_bytes=401&delivery_rate=0&cwnd=249&unsent_bytes=0&cid=0000000000000000&ts=0&x=0"
|
|
| gf56.k78-we.blog/cdn-cgi/challenge-platform/h/b/orchestrate/chl_page/v1?ray=9182f0eb2e5b56a5 | 188.114.96.1 | 200 OK | 37 kB |
URL gf56.k78-we.blog/cdn-cgi/challenge-platform/h/b/orchestrate/chl_page/v1?ray=9182f0eb2e5b56a5 IP 188.114.96.1:0
File typeJavaScript source, ASCII text, with very long lines (65536), with no line terminators Hashb73c0fb6f3a1f74a04e57f1fa63c0928 d53a444fac39915ff332483f80d163e0d8a0b21d a4a222100eb5e32908d501c6eceacf6dda8cb0eb69057741cee0d66437965554
GET /cdn-cgi/challenge-platform/h/b/orchestrate/chl_page/v1?ray=9182f0eb2e5b56a5 HTTP/1.1
Host: gf56.k78-we.blog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://gf56.k78-we.blog/?__cf_chl_rt_tk=1z1_a4fjPkZUNDGlsILICLMFrTeYBgAFYoDUMYrsTXw-1740604428-1.0.1.1-eKvvzkkgFNYM.6kksiGA7LWp_8uff2eawcD7N96.AyA
DNT: 1
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 26 Feb 2025 21:13:48 GMT
Content-Type: application/javascript; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2B8RrYF%2BVjMdyyDixtm1DHjMV1rX1os06QxOeWRIDw4bxE7atBi7Z4n%2BbsOqROYn5L6r7e7DOEzMInK3WUFngY1Qt6uaqjd036aELxx2%2FFlpblRgzdrxv26aa1n%2FG2KcKsUBe"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 9182f0edad4d5690-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
server-timing: cfL4;desc="?proto=TCP&rtt=556&min_rtt=556&rtt_var=278&sent=1&recv=3&lost=0&retrans=0&sent_bytes=0&recv_bytes=521&delivery_rate=0&cwnd=249&unsent_bytes=0&cid=0000000000000000&ts=0&x=0"
|
|
| gf56.k78-we.blog/favicon.ico | 188.114.96.1 | 403 Forbidden | 4.1 kB |
URL GET HTTP/1.1gf56.k78-we.blog/favicon.ico IP 188.114.96.1:80
File typeHTML document, ASCII text, with very long lines (6370), with no line terminators Hasha0a2197244f6281cb98f0fb842643958 7084b439546a8c22824b3e21b01c4e5366bbd3f7 c6203f7fed0761dcbeab3a268abd2744a2bbdc4730f583673d486fc650023cc0
GET /favicon.ico HTTP/1.1
Host: gf56.k78-we.blog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://gf56.k78-we.blog/?__cf_chl_rt_tk=1z1_a4fjPkZUNDGlsILICLMFrTeYBgAFYoDUMYrsTXw-1740604428-1.0.1.1-eKvvzkkgFNYM.6kksiGA7LWp_8uff2eawcD7N96.AyA
DNT: 1
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 403 Forbidden
Date: Wed, 26 Feb 2025 21:13:48 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
cf-mitigated: challenge
critical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
cross-origin-embedder-policy: require-corp
cross-origin-opener-policy: same-origin
cross-origin-resource-policy: same-origin
origin-agent-cluster: ?1
permissions-policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()
referrer-policy: same-origin
x-content-options: nosniff
x-frame-options: SAMEORIGIN
cf-chl-out: UU6UUL49PwPifAZ+GPeB2gLDiIoZHg1+7igA7qKSBPMcRLovO9+oPfDA52iPVNBxPhbA/88sBu/+UXh62gfMKalW7xQ9ZVHbw+26CR4nUN2NnW+Eh/dnTDdAvO+yCZ3OUUSVn6Mkl1iE/ou/gYJY7w==$QYQDEoWpCNSv36G/QbEQgA==
Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=GupAny4BN9RbiVjpoKD5Q33%2FTzJjKgyvIlVwTv0rKw5tsnF%2FddfoWsnhuF%2FeUl4NsLC7igEISj9n0IWpSoSrFVzEwln6Um2R1cmoTfzt%2Fl9s9cp%2B2au8HyrlJzf4fB5duiIM"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 9182f0edfdda5690-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
server-timing: chlray;desc="9182f0edfdda5690", cfL4;desc="?proto=TCP&rtt=887&min_rtt=556&rtt_var=356&sent=29&recv=22&lost=0&retrans=0&sent_bytes=37531&recv_bytes=1000&delivery_rate=16778679&cwnd=257&unsent_bytes=0&cid=0000000000000000&ts=0&x=0"
|
|
| gf56.k78-we.blog/favicon.ico | 188.114.96.1 | 403 Forbidden | 4.0 kB |
URL GET HTTP/1.1gf56.k78-we.blog/favicon.ico IP 188.114.96.1:80
File typeHTML document, ASCII text, with very long lines (6242), with no line terminators Hash2d04067add40136b75fb6702433f1abe d62f4084d749f019209e2eb291ae9e6c83c8ccd4 46e49b0ae1438c93e84303ba19a1c35cec972f7efbc0a15f3fef2cb0e4b0e0dc
GET /favicon.ico HTTP/1.1
Host: gf56.k78-we.blog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://gf56.k78-we.blog/
DNT: 1
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 403 Forbidden
Date: Wed, 26 Feb 2025 21:13:48 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
cf-mitigated: challenge
critical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
cross-origin-embedder-policy: require-corp
cross-origin-opener-policy: same-origin
cross-origin-resource-policy: same-origin
origin-agent-cluster: ?1
permissions-policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()
referrer-policy: same-origin
x-content-options: nosniff
x-frame-options: SAMEORIGIN
cf-chl-out: lJZnw8n7j87vsYTQDk0q/KyGSsS/QDVAWtZm9tphIzK484cyJE29P3SBSAuUj/qSZFqr5fZz8RPMT+KQoYKtaeqjfcJZi897ncjdlRlVpai1MaM6Ole72t5coWzkWu0fOp62I0n1aMMEPl+BTg1Vnw==$b8AYFBBEXwh0TgeXHXnBGQ==
Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=6uJ0R5bCWM7lWhTR8Oll86ZhAZ%2FDhkA4TpBLeg5DObixmvKJ%2B20RCHBLEQ%2BSDML6mSMT4TWB%2FlsL8peqQdfXgEzuIly2eRmNYN%2BgZSvsv5cvtQgsrU6IskRzHyyPYZ%2BsP1mJ"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 9182f0ee7ecd712f-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
server-timing: chlray;desc="9182f0ee7ecd712f", cfL4;desc="?proto=TCP&rtt=473&min_rtt=473&rtt_var=236&sent=1&recv=3&lost=0&retrans=0&sent_bytes=0&recv_bytes=357&delivery_rate=0&cwnd=241&unsent_bytes=0&cid=0000000000000000&ts=0&x=0"
|
|
| gf56.k78-we.blog/cdn-cgi/challenge-platform/h/b/flow/ov1/2047436465:1740600835:O8ULil0Z6js2tuVzBGSC6pEQ1foGXI1XJugqKq2-y8U/9182f0eb2e5b56a5/HwDxz0agXvbSdrsFqE2Va3zK8bVZDIcpQO6AAIqLlOE-1740604428-1.2.1.1-9OGYDP4FH5PTxcS1EH8qo6dILWWFUK32vkRlTXLnOgD_5mUPNvhtQbnOabJXXw_M | 188.114.96.1 | 200 OK | 12 kB |
URL gf56.k78-we.blog/cdn-cgi/challenge-platform/h/b/flow/ov1/2047436465:1740600835:O8ULil0Z6js2tuVzBGSC6pEQ1foGXI1XJugqKq2-y8U/9182f0eb2e5b56a5/HwDxz0agXvbSdrsFqE2Va3zK8bVZDIcpQO6AAIqLlOE-1740604428-1.2.1.1-9OGYDP4FH5PTxcS1EH8qo6dILWWFUK32vkRlTXLnOgD_5mUPNvhtQbnOabJXXw_M IP 188.114.96.1:0
File typeASCII text, with very long lines (16364), with no line terminators Hashfb74ee921d5367d5b9908066fb82148b 018e8773b37253e20950753ddee3bedc7ac88962 94cfb28c31b4cfb0eed9e935f1f9c778de17563c21ba2b6a79cb857199853043
POST /cdn-cgi/challenge-platform/h/b/flow/ov1/2047436465:1740600835:O8ULil0Z6js2tuVzBGSC6pEQ1foGXI1XJugqKq2-y8U/9182f0eb2e5b56a5/HwDxz0agXvbSdrsFqE2Va3zK8bVZDIcpQO6AAIqLlOE-1740604428-1.2.1.1-9OGYDP4FH5PTxcS1EH8qo6dILWWFUK32vkRlTXLnOgD_5mUPNvhtQbnOabJXXw_M HTTP/1.1
Host: gf56.k78-we.blog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://gf56.k78-we.blog/
cf-chl: HwDxz0agXvbSdrsFqE2Va3zK8bVZDIcpQO6AAIqLlOE-1740604428-1.2.1.1-9OGYDP4FH5PTxcS1EH8qo6dILWWFUK32vkRlTXLnOgD_5mUPNvhtQbnOabJXXw_M
cf-chl-ra: 0
Content-Type: text/plain;charset=UTF-8
Content-Length: 3011
Origin: http://gf56.k78-we.blog
DNT: 1
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 26 Feb 2025 21:13:48 GMT
Content-Type: text/plain; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
cf-chl-gen: w9SXt10FcSbQjRXDr2y6ktGUahnXd8NPbCpX8eMQ+HY=$mNnlwT4WuCXUK4LpgdTGyw==
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=aB2zA2geAg7i3DBGHuUbcDCmeBbidGGdKddDPA9X40owZYd6XXFZOCNPFhYi1BZt%2FqHCuKp7zapUmQTKXFelA9kCeb9feCzCgiCv55QSA8NcZFOZOTfRTZJ7oEp4SrVXQcxV"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 9182f0efec6156b4-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
server-timing: cfL4;desc="?proto=TCP&rtt=464&min_rtt=464&rtt_var=232&sent=2&recv=5&lost=0&retrans=0&sent_bytes=0&recv_bytes=3832&delivery_rate=0&cwnd=249&unsent_bytes=0&cid=0000000000000000&ts=0&x=0"
|
|
| challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/cmg/1 | 104.18.95.41 | 200 OK | 61 B |
URL challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/cmg/1 IP 104.18.95.41:0
File typePNG image data, 2 x 2, 8-bit/color RGB, non-interlaced Hash9246cca8fc3c00f50035f28e9f6b7f7d 3aa538440f70873b574f40cd793060f53ec17a5d c07d7d29e3c20fa6ca4c5d20663688d52bad13e129ad82ce06b80eb187d9dc84
GET /cdn-cgi/challenge-platform/h/b/cmg/1 HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/x7p1e/0x4AAAAAAADnOjc0PNeA8qVm/light/fbE/new/normal/auto/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 26 Feb 2025 21:13:49 GMT
content-type: image/png
content-length: 61
cache-control: max-age=2629800, public
priority: u=4,i=?0
server: cloudflare
cf-ray: 9182f0f3083a56cc-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
|
|
| challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/d/9182f0f16df756cc/1740604429653/PMyDjI47BSY_MWc | 104.18.95.41 | 200 OK | 61 B |
URL challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/d/9182f0f16df756cc/1740604429653/PMyDjI47BSY_MWc IP 104.18.95.41:0
File typePNG image data, 94 x 33, 8-bit/color RGB, non-interlaced Hash6374865d01b34d3323fa2903d8f97584 1141174578d2593621eb9cd027cb38aafa9e6689 f5469cee25455711f0c219704a9c03bf27984b61a9b148a8f263860dd274a80b
GET /cdn-cgi/challenge-platform/h/b/d/9182f0f16df756cc/1740604429653/PMyDjI47BSY_MWc HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/x7p1e/0x4AAAAAAADnOjc0PNeA8qVm/light/fbE/new/normal/auto/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 26 Feb 2025 21:13:52 GMT
content-type: image/png
content-length: 61
priority: u=4,i=?0
server: cloudflare
cf-ray: 9182f1048b1056cc-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
|
|
| gf56.k78-we.blog/cdn-cgi/challenge-platform/h/b/flow/ov1/2047436465:1740600835:O8ULil0Z6js2tuVzBGSC6pEQ1foGXI1XJugqKq2-y8U/9182f0eb2e5b56a5/HwDxz0agXvbSdrsFqE2Va3zK8bVZDIcpQO6AAIqLlOE-1740604428-1.2.1.1-9OGYDP4FH5PTxcS1EH8qo6dILWWFUK32vkRlTXLnOgD_5mUPNvhtQbnOabJXXw_M | 188.114.96.1 | 200 OK | 6.9 kB |
URL gf56.k78-we.blog/cdn-cgi/challenge-platform/h/b/flow/ov1/2047436465:1740600835:O8ULil0Z6js2tuVzBGSC6pEQ1foGXI1XJugqKq2-y8U/9182f0eb2e5b56a5/HwDxz0agXvbSdrsFqE2Va3zK8bVZDIcpQO6AAIqLlOE-1740604428-1.2.1.1-9OGYDP4FH5PTxcS1EH8qo6dILWWFUK32vkRlTXLnOgD_5mUPNvhtQbnOabJXXw_M IP 188.114.96.1:0
Hashc99351f0dcb843915d91d47cda6f54ed 5cc324c5e9317a5b4b6e3051c0c4a924e1fbe4d1 1d3765d5c810780bd99b9012a1f597978fcff2ac48d732a6a9905fcc6c834830
POST /cdn-cgi/challenge-platform/h/b/flow/ov1/2047436465:1740600835:O8ULil0Z6js2tuVzBGSC6pEQ1foGXI1XJugqKq2-y8U/9182f0eb2e5b56a5/HwDxz0agXvbSdrsFqE2Va3zK8bVZDIcpQO6AAIqLlOE-1740604428-1.2.1.1-9OGYDP4FH5PTxcS1EH8qo6dILWWFUK32vkRlTXLnOgD_5mUPNvhtQbnOabJXXw_M HTTP/1.1
Host: gf56.k78-we.blog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://gf56.k78-we.blog/
cf-chl: HwDxz0agXvbSdrsFqE2Va3zK8bVZDIcpQO6AAIqLlOE-1740604428-1.2.1.1-9OGYDP4FH5PTxcS1EH8qo6dILWWFUK32vkRlTXLnOgD_5mUPNvhtQbnOabJXXw_M
cf-chl-ra: 0
Content-Type: text/plain;charset=UTF-8
Content-Length: 5225
Origin: http://gf56.k78-we.blog
DNT: 1
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 26 Feb 2025 21:13:55 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
cf-chl-out: UaDw71kdv36Pgg7s64EO/7rotbORm5Fnl2cYUEHrJCz6FTZLj8nKLPf9+OLwS2Z4atMad0bnWCwVTZyYIJklcg==$4GTbOBcKS0UWMtv5l+5+yQ==
set-cookie: cf_chl_rc_ni=;Expires=Tue, 25 Feb 2025 21:13:55 GMT;SameSite=Strict
cf-chl-out-s: e9jiMHgxZXirHSvLGxF86NALXCyv8WMq1Z9H5JI8v1E8bldHHMXR6uzQRPQ89dwQnuX6V/e3uiBjnJbqk6DVMtHUcn86K9FTyYk22F1VPjmAo/3o01QhA/l/IPh1naegEvLYWEoWHECYnmSA4srkfBbB1Mfqf9iORrMzGzcqFYxSNseb6ekowduVBMgxFO4ZRDRwuAc+SfD0sa2a2cV8rXt5kDqcip/h3VGXdpzUo82Y3UsIFszYLZ9SgBHXWZV0io0dHXi0e5LuG7TcplMBE0S4cs7+TDXaw5ZLL+JdzJ9JhPxwXaIYuZrR4pVj/1Z6Ba3AvjQ+XKYoVSvcQ7J/3+WFFc2tai6ntta7Gqyypn0=$9tTmgdoa/tLrqYGhZ19tuw==
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=dkiHTW97F96BPkJiseDQ5SJWzHyCw7QjHYx8wyFDYKa1sTKdSDmBUAOX%2Fae0%2B8vhv6MfyGxZMKnJLcoObc42lwxlP5P9PupG4itFMTBMXl2wrody4tRDn4Nuriv5RUnvMOyw"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 9182f1197efa56b4-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
server-timing: cfL4;desc="?proto=TCP&rtt=642&min_rtt=464&rtt_var=110&sent=15&recv=21&lost=0&retrans=0&sent_bytes=13216&recv_bytes=9878&delivery_rate=21379865&cwnd=257&unsent_bytes=0&cid=0000000000000000&ts=0&x=0"
|
|
| | 188.114.96.1 | 200 OK | 638 B |
URL User Request POST HTTP/1.1IP 188.114.96.1:80
File typeJavaScript source, ASCII text, with very long lines (952) Hash8ee51c32ed27331837d889ab72b0c369 91e39c5776bc9a4d4250de51e869bd3fb8ef9a77 75e2adda923a51031e616ca61f685f2ebc623c9e4954a5cf441f843a269c6d77
POST / HTTP/1.1
Host: gf56.k78-we.blog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://gf56.k78-we.blog/?__cf_chl_tk=1z1_a4fjPkZUNDGlsILICLMFrTeYBgAFYoDUMYrsTXw-1740604428-1.0.1.1-eKvvzkkgFNYM.6kksiGA7LWp_8uff2eawcD7N96.AyA
Content-Type: application/x-www-form-urlencoded
Content-Length: 3138
Origin: http://gf56.k78-we.blog
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 26 Feb 2025 21:13:56 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: cf_clearance=JjlaCOi17Xo40D1Rx5lM9dHMze52q2Lmy43Onrl1_dw-1740604435-1.2.1.1-baHwTluYWMjmsLGFaP02K4PTK3kqU4VM3VYFnQu6WPrwRwzoREyw9S.aa_GH_GwpKK44VV0o575S3c7GcDU0Q82NSwjrOe46ejh3Te7k6LISqSZ27HrMPc_s0xfr9tNQhKjQHg5ht7wn6ww2W16n2i5m9ds0EBZVUMAYVow5d8y5t_wTVDWqydPLAjflVUfYuOZxQCeBKcbR5zzvxswJhNHnIv6y.sVkQ678RMFjnFszOM0u0FHg0BDHxPnKdI9wSZLuworTETh1T9fkHbomUyoWAh08IpXOYaBD.NjzfatJmO8Tz7dpnvwNBNXrDQ4C.29jqU8XpfF3r2qyZ5h2rg; Path=/; Expires=Thu, 26-Feb-26 21:13:55 GMT; Domain=.k78-we.blog; Priority=High; HttpOnly
X-Powered-By: PHP/5.6.30
cf-cache-status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=SskEC0h%2BWqW8Q5li6RqGDEVNn3KL%2BkgPo1%2F05AEBLTQRaVHHler4RcN9xUA1yAoG4VCwqZpn8FNoKLeRHg6DH%2BltisY4kmEvJzp1F2jZ3oxXWx1O73NeSP%2FClQ%2F0nAotJ4L%2B"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 9182f11b79de56b4-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
server-timing: cfL4;desc="?proto=TCP&rtt=727&min_rtt=464&rtt_var=126&sent=21&recv=29&lost=0&retrans=0&sent_bytes=17816&recv_bytes=13676&delivery_rate=21379865&cwnd=257&unsent_bytes=0&cid=0000000000000000&ts=0&x=0"
|
|
| gf56.k78-we.blog/cdn-cgi/challenge-platform/scripts/jsd/main.js | 188.114.96.1 | 302 Found | 0 B |
URL GET HTTP/1.1gf56.k78-we.blog/cdn-cgi/challenge-platform/scripts/jsd/main.js IP 188.114.96.1:80
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /cdn-cgi/challenge-platform/scripts/jsd/main.js HTTP/1.1
Host: gf56.k78-we.blog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Cookie: cf_clearance=JjlaCOi17Xo40D1Rx5lM9dHMze52q2Lmy43Onrl1_dw-1740604435-1.2.1.1-baHwTluYWMjmsLGFaP02K4PTK3kqU4VM3VYFnQu6WPrwRwzoREyw9S.aa_GH_GwpKK44VV0o575S3c7GcDU0Q82NSwjrOe46ejh3Te7k6LISqSZ27HrMPc_s0xfr9tNQhKjQHg5ht7wn6ww2W16n2i5m9ds0EBZVUMAYVow5d8y5t_wTVDWqydPLAjflVUfYuOZxQCeBKcbR5zzvxswJhNHnIv6y.sVkQ678RMFjnFszOM0u0FHg0BDHxPnKdI9wSZLuworTETh1T9fkHbomUyoWAh08IpXOYaBD.NjzfatJmO8Tz7dpnvwNBNXrDQ4C.29jqU8XpfF3r2qyZ5h2rg
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
Date: Wed, 26 Feb 2025 21:13:56 GMT
Content-Length: 0
Connection: keep-alive
location: /cdn-cgi/challenge-platform/h/b/scripts/jsd/b0e4a89976ce/main.js?
cache-control: max-age=300, stale-if-error=10800, stale-while-revalidate=10800, public
access-control-allow-origin: *
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=nUx9QrqXQW2AYKLQBJU1b0IPFq2OCDITuUpBgqg8zTUy%2BtT%2BwA4MCkN7W%2FJxLARnDHoS1G5samvBute0CHf7sfEf92GrPnP43Bz1aBgY6D0z1QKajP1fiL9G%2BfZtZyPKx4Xv"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 9182f11fdec656c6-OSL
alt-svc: h2=":443"; ma=60
server-timing: cfL4;desc="?proto=TCP&rtt=566&min_rtt=566&rtt_var=283&sent=1&recv=3&lost=0&retrans=0&sent_bytes=0&recv_bytes=763&delivery_rate=0&cwnd=249&unsent_bytes=0&cid=0000000000000000&ts=0&x=0"
|
|
| gf56.k78-we.blog/cdn-cgi/challenge-platform/h/b/scripts/jsd/b0e4a89976ce/main.js? | 188.114.96.1 | 200 OK | 3.9 kB |
URL GET HTTP/1.1gf56.k78-we.blog/cdn-cgi/challenge-platform/h/b/scripts/jsd/b0e4a89976ce/main.js? IP 188.114.96.1:80
File typeJavaScript source, ASCII text, with very long lines (8483), with no line terminators Hash81e79a26bfd60ea621807b7d7569499d 3c77009475a38a4d1386e4567033ef49b9e7314b c7f46a2596b7008406b6b0b35289cb20900acacc9174e4c5801e777263274595
GET /cdn-cgi/challenge-platform/h/b/scripts/jsd/b0e4a89976ce/main.js? HTTP/1.1
Host: gf56.k78-we.blog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Cookie: cf_clearance=JjlaCOi17Xo40D1Rx5lM9dHMze52q2Lmy43Onrl1_dw-1740604435-1.2.1.1-baHwTluYWMjmsLGFaP02K4PTK3kqU4VM3VYFnQu6WPrwRwzoREyw9S.aa_GH_GwpKK44VV0o575S3c7GcDU0Q82NSwjrOe46ejh3Te7k6LISqSZ27HrMPc_s0xfr9tNQhKjQHg5ht7wn6ww2W16n2i5m9ds0EBZVUMAYVow5d8y5t_wTVDWqydPLAjflVUfYuOZxQCeBKcbR5zzvxswJhNHnIv6y.sVkQ678RMFjnFszOM0u0FHg0BDHxPnKdI9wSZLuworTETh1T9fkHbomUyoWAh08IpXOYaBD.NjzfatJmO8Tz7dpnvwNBNXrDQ4C.29jqU8XpfF3r2qyZ5h2rg
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 26 Feb 2025 21:13:56 GMT
Content-Type: application/javascript; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
cache-control: max-age=14400, stale-if-error=10800, stale-while-revalidate=10800, public
x-content-type-options: nosniff
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Nfps8omvFjeQR7rTAtVhWQQptm1vr84mAzjnZaYqFz3ioIDqumBq6exe3nTAl4vmm1LDGYc4hdJnESFmdY1IEqp%2BkcNJY5ejwAekMmiAk2KBOOcB8nYXVK6bxKu2Bowcl8HH"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 9182f11fff1256c6-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
server-timing: cfL4;desc="?proto=TCP&rtt=558&min_rtt=502&rtt_var=228&sent=2&recv=5&lost=0&retrans=0&sent_bytes=924&recv_bytes=1544&delivery_rate=2884462&cwnd=250&unsent_bytes=0&cid=0000000000000000&ts=0&x=0"
|
|
| gf56.k78-we.blog/cdn-cgi/challenge-platform/h/b/jsd/r/0.6178417887016308:1740600731:S-3ToSW50cYBWlKaOsMEDzbcO3Edxyv9M25DiqQCGA0/9182f11b79de56b4 | 188.114.96.1 | 200 OK | 0 B |
URL POST HTTP/1.1gf56.k78-we.blog/cdn-cgi/challenge-platform/h/b/jsd/r/0.6178417887016308:1740600731:S-3ToSW50cYBWlKaOsMEDzbcO3Edxyv9M25DiqQCGA0/9182f11b79de56b4 IP 188.114.96.1:80
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /cdn-cgi/challenge-platform/h/b/jsd/r/0.6178417887016308:1740600731:S-3ToSW50cYBWlKaOsMEDzbcO3Edxyv9M25DiqQCGA0/9182f11b79de56b4 HTTP/1.1
Host: gf56.k78-we.blog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: text/plain;charset=UTF-8
Content-Length: 11511
Origin: http://gf56.k78-we.blog
DNT: 1
Connection: keep-alive
Referer: http://gf56.k78-we.blog/
Cookie: cf_clearance=JjlaCOi17Xo40D1Rx5lM9dHMze52q2Lmy43Onrl1_dw-1740604435-1.2.1.1-baHwTluYWMjmsLGFaP02K4PTK3kqU4VM3VYFnQu6WPrwRwzoREyw9S.aa_GH_GwpKK44VV0o575S3c7GcDU0Q82NSwjrOe46ejh3Te7k6LISqSZ27HrMPc_s0xfr9tNQhKjQHg5ht7wn6ww2W16n2i5m9ds0EBZVUMAYVow5d8y5t_wTVDWqydPLAjflVUfYuOZxQCeBKcbR5zzvxswJhNHnIv6y.sVkQ678RMFjnFszOM0u0FHg0BDHxPnKdI9wSZLuworTETh1T9fkHbomUyoWAh08IpXOYaBD.NjzfatJmO8Tz7dpnvwNBNXrDQ4C.29jqU8XpfF3r2qyZ5h2rg
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 26 Feb 2025 21:13:56 GMT
Content-Type: text/plain; charset=UTF-8
Content-Length: 0
Connection: keep-alive
Set-Cookie: cf_clearance=CWlKPymhdutH.UtlQqmoylzXyz8fE7qUk3KtW96Guqg-1740604436-1.2.1.1-bbFZBWzJnEw9GB3TYvLTjAY_0Hx_njTSPRkLI7WMUwV3qcxqX2GaS6GTJ31RzlCTaxfPi.VZIVokELKtFBfsYLlI_P90s8Chgkei3DlDJUXCGzq7v_jBNfhbVqswZzfgdDahyAw4k2BBGUXgLJSVzvuuhD0kIiP0AerhBSQL4X9eBDJ4IGe2SiwNSHUePtFAMKZejd2lGSo1bFrTIgtKKHw9JKXqW53iO64906ZeCnpb3.J.MbVUXb7QHSuMJ7foh3XV9hWimAFWokZpSEuWY4jA_u2YuIcjUNytXb8.ui09L9zSYaEYTczguNlMU319CXaDBVLaXiOc5U_2jT8S7w; Path=/; Expires=Thu, 26-Feb-26 21:13:56 GMT; Domain=.k78-we.blog; Priority=High; HttpOnly
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=OTXAc8ziKRU%2BJicvrKTki5ZfxWi7BNPq925EtoRZMJArw6DvjEMUlXQgXuLi%2FYndAsitebMlpj%2Bc8CHhNVLF7fbOmn%2BXwmW3yGNKSbwF53q1gGvRSLLTZ3%2BoLkKKwsfiknQR"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 9182f12118d556c6-OSL
alt-svc: h2=":443"; ma=60
server-timing: cfL4;desc="?proto=TCP&rtt=592&min_rtt=502&rtt_var=240&sent=9&recv=15&lost=0&retrans=0&sent_bytes=5734&recv_bytes=14031&delivery_rate=8691476&cwnd=255&unsent_bytes=0&cid=0000000000000000&ts=0&x=0"
|
|
| gf56.k78-we.blog/favicon.ico | 188.114.96.1 | 404 Not Found | 256 B |
URL GET HTTP/1.1gf56.k78-we.blog/favicon.ico IP 188.114.96.1:80
File typeHTML document, ASCII text Hash0f883a0f65d4fa21399d9036be8e23da 1bf8df7beda5e7400cfe0900e9200931fef4ed13 04a5650273784836555ff7d2c9bdbea4918a0f91dca0b5f49e4212bc6b849860
GET /favicon.ico HTTP/1.1
Host: gf56.k78-we.blog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://gf56.k78-we.blog/
Cookie: cf_clearance=JjlaCOi17Xo40D1Rx5lM9dHMze52q2Lmy43Onrl1_dw-1740604435-1.2.1.1-baHwTluYWMjmsLGFaP02K4PTK3kqU4VM3VYFnQu6WPrwRwzoREyw9S.aa_GH_GwpKK44VV0o575S3c7GcDU0Q82NSwjrOe46ejh3Te7k6LISqSZ27HrMPc_s0xfr9tNQhKjQHg5ht7wn6ww2W16n2i5m9ds0EBZVUMAYVow5d8y5t_wTVDWqydPLAjflVUfYuOZxQCeBKcbR5zzvxswJhNHnIv6y.sVkQ678RMFjnFszOM0u0FHg0BDHxPnKdI9wSZLuworTETh1T9fkHbomUyoWAh08IpXOYaBD.NjzfatJmO8Tz7dpnvwNBNXrDQ4C.29jqU8XpfF3r2qyZ5h2rg
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Date: Wed, 26 Feb 2025 21:13:57 GMT
Content-Type: text/html; charset=iso-8859-1
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=14400
cf-cache-status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Si%2FS0%2Fd3aisp0IjDItmlCpi4lTjgwDqDXagIyNGv%2Bdbbv7WL8cJpsDtGlXsczmLLUjrOCmrVfpUY4fyFusHT2EdVz3hdCpALwT%2B09ONFr%2Fb2LYus9OHI5JF5Hjl%2FS6s4FUl3"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 9182f11fcff156b4-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
server-timing: cfL4;desc="?proto=TCP&rtt=681&min_rtt=464&rtt_var=101&sent=26&recv=34&lost=0&retrans=0&sent_bytes=19841&recv_bytes=14461&delivery_rate=21379865&cwnd=257&unsent_bytes=0&cid=0000000000000000&ts=0&x=0"
|
|