| torxa3k7p.cc/invite/i=18770 |  188.114.96.1 | 403 Forbidden | 5.8 kB |
URL User Request GET HTTP/1.1torxa3k7p.cc/invite/i=18770 IP188.114.96.1:80
File typeHTML document, ASCII text, with very long lines (14182), with no line terminators Hasha7b7391d5c5499f2db36f30e6b2db51d 2f7053983193c27f8f1ce22520987b1837697fe1 44be8006f51baacdc05ab05d575815d017efe58f97b29ce0a68cf03b95a8b611
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /invite/i=18770 HTTP/1.1
Host: torxa3k7p.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 403 Forbidden
Date: Wed, 05 Jun 2024 09:25:15 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
Accept-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
Critical-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
Cross-Origin-Embedder-Policy: require-corp
Cross-Origin-Opener-Policy: same-origin
Cross-Origin-Resource-Policy: same-origin
Origin-Agent-Cluster: ?1
Permissions-Policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()
Referrer-Policy: same-origin
X-Content-Options: nosniff
X-Frame-Options: SAMEORIGIN
cf-mitigated: challenge
cf-chl-out: Yz3DlgpPN+qSkBjk0dbqaE3xAjCfiibnDVhYsep9qDxUqxgGQ7ke8nXN4ptF21st+2lMdEZTYHtyw3Cb2/1+vhgTnv98ToC2dzFQKCD/5iE=$f1AEC9471OwZN6GzcCuLFQ==
Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Q96BEBxbK2WGhVQsBN57eUmAbov08zlBOssbcIPMiiTV8X1L8mnYuCG7mm12frA8biLnTne9yfUdBVYkYesgGFrdKTBwC4AZKZbHyCHlXOgqlXUJUqw0YzDzdb6qfsk%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 88ef1d419853b4f7-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
|
|
| torxa3k7p.cc/cdn-cgi/challenge-platform/h/g/orchestrate/chl_page/v1?ray=88ef1d419853b4f7 | 188.114.97.1 | | 105 kB |
URL torxa3k7p.cc/cdn-cgi/challenge-platform/h/g/orchestrate/chl_page/v1?ray=88ef1d419853b4f7 IP188.114.97.1:0
File typeJavaScript source, ASCII text, with very long lines (65536), with no line terminators Size105 kB (105441 bytes) Hash7714dfb25789f2e1ed984752fca33a31 53e64e2eb7c7822256198d3e7c0d82b853d037bd 8cca45fd655df591fa3f322cbd423719909b3df24e5610ee6616b84eed16878f
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /cdn-cgi/challenge-platform/h/g/orchestrate/chl_page/v1?ray=88ef1d419853b4f7 HTTP/1.1
Host: torxa3k7p.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://torxa3k7p.cc/invite/i=18770?__cf_chl_rt_tk=8AbjCcgdsRtIgAkVo4Gt_KBVRzTdWijXr303Oo3AyEM-1717579515-0.0.1.1-2281
DNT: 1
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 05 Jun 2024 09:25:15 GMT
Content-Type: application/javascript; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2BseEihnBvZqjSEEhiSq4KmXd21xwPPFVLUc1dur%2FrNuru%2BneO5lntz5z1iLYao4BoMICpmqfkA36VDLFYde5ZFmsU4m2kAnr6pnTsgZ5MDh%2BrHWosEeUzFtlSvJa7d0%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 88ef1d437fe3569a-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
|
|
| torxa3k7p.cc/favicon.ico | 188.114.97.1 | 200 OK | 994 B |
IP188.114.97.1:80
Requested byhttp://torxa3k7p.cc/invite/i=18770
File typeHTML document, ASCII text, with very long lines (2701), with no line terminators Hashb00c94bfce6f210ef677d2942277c2a9 ab08c14ae2373121619fdfbaa9e7e60a786583f6 d4d89c2510ab5f5b9e527544a69760e742b9b3310a3383de1fb685368f1e30ec
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /favicon.ico HTTP/1.1
Host: torxa3k7p.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://torxa3k7p.cc/invite/i=18770?__cf_chl_rt_tk=8AbjCcgdsRtIgAkVo4Gt_KBVRzTdWijXr303Oo3AyEM-1717579515-0.0.1.1-2281
DNT: 1
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 05 Jun 2024 09:25:15 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=14400
CF-Cache-Status: EXPIRED
Last-Modified: Wed, 05 Jun 2024 07:23:42 GMT
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=oqC7CBsOsyKN3zJINeIvtrUyBqfZ1m%2FoCoGufhWVU5rzkhfDRuVyxcXy2g1Y5dcFomsSolJsxpfIX8z%2FVaSRjlJT2iiqv6moWL53%2Bf6qbSENQs43I4f7SZ2dALxzc1A%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 88ef1d43f8aa569a-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
|
|
| torxa3k7p.cc/favicon.ico | 188.114.97.1 | 200 OK | 994 B |
IP188.114.97.1:80
Requested byhttp://torxa3k7p.cc/invite/i=18770
File typeHTML document, ASCII text, with very long lines (2701), with no line terminators Hashb00c94bfce6f210ef677d2942277c2a9 ab08c14ae2373121619fdfbaa9e7e60a786583f6 d4d89c2510ab5f5b9e527544a69760e742b9b3310a3383de1fb685368f1e30ec
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /favicon.ico HTTP/1.1
Host: torxa3k7p.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://torxa3k7p.cc/invite/i=18770
DNT: 1
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 05 Jun 2024 09:25:15 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=14400
CF-Cache-Status: EXPIRED
Last-Modified: Wed, 05 Jun 2024 07:23:42 GMT
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=il7wY2u4w1l0SBIoVTvJE2dM5%2FgFMkcYQAFucidfgRF%2FJm2EM7hWeZa1eAu%2F9zifHifpRnIi0FD1lK39fG1OO1lj6mDJxmocgMOadBaqxSjvCU33AnXrgPRZ7hJQ894%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 88ef1d446aabb529-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
|
|
| torxa3k7p.cc/cdn-cgi/challenge-platform/h/g/flow/ov1/1548327953:1717575765:rC4CMWZ8rujCz9TkD1meNorj9AoE8tbfUQ37EFFA8Bs/88ef1d419853b4f7/b1a09e877a4ef17 | 188.114.97.1 | | 12 kB |
URL torxa3k7p.cc/cdn-cgi/challenge-platform/h/g/flow/ov1/1548327953:1717575765:rC4CMWZ8rujCz9TkD1meNorj9AoE8tbfUQ37EFFA8Bs/88ef1d419853b4f7/b1a09e877a4ef17 IP188.114.97.1:0
File typeASCII text, with very long lines (16492), with no line terminators Hash412139ba6022fbd8b7fdf5a4f853a270 880f6a147613ce5767d0748174c56f58acc221d2 2b5c0cdc74e1424cd2d7484acfbcf5c275928119e1b292255df5c76199e4b063
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
POST /cdn-cgi/challenge-platform/h/g/flow/ov1/1548327953:1717575765:rC4CMWZ8rujCz9TkD1meNorj9AoE8tbfUQ37EFFA8Bs/88ef1d419853b4f7/b1a09e877a4ef17 HTTP/1.1
Host: torxa3k7p.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://torxa3k7p.cc/invite/i=18770
Content-type: application/x-www-form-urlencoded
CF-Challenge: b1a09e877a4ef17
Content-Length: 1649
Origin: http://torxa3k7p.cc
DNT: 1
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 05 Jun 2024 09:25:15 GMT
Content-Type: text/plain; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
cf-chl-gen: D4c6WDcEOEPpSCJYl8zlAxVxsXg1G4DQvCOPoY4eGWG+SDfW3MkjmBQ1kI0p+1TJ$Dsevtpa4W7OhR3mZqRlreA==
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=4b0DXsU0UEMy7HaIHl5TZ5xr0TBUMKD%2Fcu5guJNWXB4W3Qmu3InJKB8Z%2BAbuFtLMKf70xsdgvX8mVNLSRfAK0zhiTlrTHt4%2FMwHsi%2B2H8Tj25YlNTzD%2BN96M8m3Exs0%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 88ef1d452aa9569a-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
|
|
| challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/cmg/1/GLhOioXg0bs57t4qPrORXFsL1%2BWig2mIKbgpVPMu7ZQ%3D |  104.17.2.184 | | 61 B |
URL challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/cmg/1/GLhOioXg0bs57t4qPrORXFsL1%2BWig2mIKbgpVPMu7ZQ%3D IP104.17.2.184:0
File typePNG image data, 2 x 2, 8-bit/color RGB, non-interlaced Hash9246cca8fc3c00f50035f28e9f6b7f7d 3aa538440f70873b574f40cd793060f53ec17a5d c07d7d29e3c20fa6ca4c5d20663688d52bad13e129ad82ce06b80eb187d9dc84
GET /cdn-cgi/challenge-platform/h/g/cmg/1/GLhOioXg0bs57t4qPrORXFsL1%2BWig2mIKbgpVPMu7ZQ%3D HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/mkh0o/0x4AAAAAAADnPIDROrmt1Wwj/light/normal
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 05 Jun 2024 09:25:15 GMT
content-type: image/png
content-length: 61
cache-control: max-age=2629800, public
server: cloudflare
cf-ray: 88ef1d46d93556c7-OSL
alt-svc: h3=":443"; ma=86400
|
|
| challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/flow/ov1/498163913:1717575921:mknM1w-ZjKx6geBuJoosUBBNzWDbA4Fxqht0yCXhqB4/88ef1d46481a56c7/2cf906eda413b4b | 104.17.2.184 | | 81 kB |
URL challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/flow/ov1/498163913:1717575921:mknM1w-ZjKx6geBuJoosUBBNzWDbA4Fxqht0yCXhqB4/88ef1d46481a56c7/2cf906eda413b4b IP104.17.2.184:0
File typeASCII text, with very long lines (65536), with no line terminators Hashb5bce78474f0e9a763f531c2bb596bd6 ba38a65d3cc662dae9a116fb36b417077ba9b4fe b8d2c1946dd9cd0c0166eba5463c9d056f99ddbd5d04c1453b63f4bdc49b3de2
POST /cdn-cgi/challenge-platform/h/g/flow/ov1/498163913:1717575921:mknM1w-ZjKx6geBuJoosUBBNzWDbA4Fxqht0yCXhqB4/88ef1d46481a56c7/2cf906eda413b4b HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/mkh0o/0x4AAAAAAADnPIDROrmt1Wwj/light/normal
Content-type: application/x-www-form-urlencoded
CF-Challenge: 2cf906eda413b4b
Content-Length: 3339
Origin: https://challenges.cloudflare.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 05 Jun 2024 09:25:16 GMT
content-type: text/plain; charset=UTF-8
cf-chl-gen: M59JUBWKH2+KgS6DCmQoL0OZJFvphDo0zxJR3C8en84UULMIdqJ3ayinArmstnZBgt+fvwc89+8QHBg039QDXopu22Uhs1ujjzwTeE0rpFH69yG/+adWva3wrUKGA59+bhjPb61qGzoYD5fYs7JwL5M9keO9xwUE8ZaShdG2AGaEn8yD8CtO6mWueDTSZeTYmNiSHFuMwdrP4dH3/HrQgD/acecC/K3Ry1IBTcQB6mB25uDNcMRS4oqGYrwiJS4Yf1tSObKa3lKOtm0j8wVyMJ8Fu6qoHPHnRJEfmevPmFCNA1joRTwrhTMiKLqCHRYikNin5DsYINOJxKxRT8QyFzg1+CohNErmhLguCMWNETdgLwop9YfhkvR7jZ/SqJBFzOGEfvcC5YdDasoN4ZmLBzxoZghepiGvZv0jtn78iy0WpmPojUOd1w4TiygrL9CS$iPEf/ZY4t8eUmZw3m3hUDg==
server: cloudflare
cf-ray: 88ef1d483bbb56c7-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| challenges.cloudflare.com/turnstile/v0/g/26ed7e9dda49/api.js?onload=sIeY1&render=explicit | 104.17.2.184 | 200 OK | 15 kB |
URL GET HTTP/3challenges.cloudflare.com/turnstile/v0/g/26ed7e9dda49/api.js?onload=sIeY1&render=explicit IP104.17.2.184:443
Requested byhttp://torxa3k7p.cc/invite/i=18770 CertificateIssuerCloudflare, Inc. Subjectchallenges.cloudflare.com Fingerprint5F:E4:AA:8C:2E:24:D2:B1:69:9D:13:28:31:5C:65:FA:97:2A:E9:6E ValidityFri, 18 Aug 2023 00:00:00 GMT - Sat, 17 Aug 2024 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (42645) Hashf5f31d5db1b3f33370b3bbb73cd19ff2 0aa24c9c90e643fc50e514879eb9c9db8269374e 3c2a394ecfa4f9b4c1fa348b40019e2b1c9d576ea84a30630411211a8ede3e3a
GET /turnstile/v0/g/26ed7e9dda49/api.js?onload=sIeY1&render=explicit HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://torxa3k7p.cc
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 05 Jun 2024 09:25:15 GMT
content-type: application/javascript; charset=UTF-8
last-modified: Wed, 29 May 2024 17:53:08 GMT
cache-control: max-age=31536000
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding
server: cloudflare
cf-ray: 88ef1d44ac880b45-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/flow/ov1/498163913:1717575921:mknM1w-ZjKx6geBuJoosUBBNzWDbA4Fxqht0yCXhqB4/88ef1d46481a56c7/2cf906eda413b4b | 104.17.2.184 | | 19 kB |
URL challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/flow/ov1/498163913:1717575921:mknM1w-ZjKx6geBuJoosUBBNzWDbA4Fxqht0yCXhqB4/88ef1d46481a56c7/2cf906eda413b4b IP104.17.2.184:0
File typeASCII text, with very long lines (22200), with no line terminators Hash534dd76b8965f7e4ad709650b49646a4 5537ce50161aab83c85e00d0e8ea27d7b281c902 dda07c76b6388bb6c8d4b7bf9327e2e3700b3f1911f8aba51bcc85875667a8bf
POST /cdn-cgi/challenge-platform/h/g/flow/ov1/498163913:1717575921:mknM1w-ZjKx6geBuJoosUBBNzWDbA4Fxqht0yCXhqB4/88ef1d46481a56c7/2cf906eda413b4b HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/mkh0o/0x4AAAAAAADnPIDROrmt1Wwj/light/normal
Content-type: application/x-www-form-urlencoded
CF-Challenge: 2cf906eda413b4b
Content-Length: 27737
Origin: https://challenges.cloudflare.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 05 Jun 2024 09:25:18 GMT
content-type: text/plain; charset=UTF-8
cf-chl-gen: ZgR7Hotfw7RuDBmhANnAzIrM2ICtsZeOUjK1ky1nE8y6KhdmhvbI5DaTAi6qxaNy$HTBQ0WKrE2bw97eEo3XXKQ==
server: cloudflare
cf-ray: 88ef1d58ed7456c7-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/mkh0o/0x4AAAAAAADnPIDROrmt1Wwj/light/normal | 104.17.2.184 | | 24 kB |
URL challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/mkh0o/0x4AAAAAAADnPIDROrmt1Wwj/light/normal IP104.17.2.184:0
File typeHTML document, ASCII text, with very long lines (42150) Hash770a9058632b53622f4700d00d6e5c6f 487633a8e4b2e7a506c6213e5b26199f0ff0b7a1 feb8d7dc21058f18a72bf7a34dd2089c67455b07d1ca59ac9ca64835380e51e4
GET /cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/mkh0o/0x4AAAAAAADnPIDROrmt1Wwj/light/normal HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 05 Jun 2024 09:25:15 GMT
content-type: text/html; charset=UTF-8
permissions-policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()
accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
referrer-policy: same-origin
cross-origin-opener-policy: same-origin
critical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
cross-origin-resource-policy: cross-origin
content-security-policy: frame-src https://challenges.cloudflare.com/; base-uri 'self'
cross-origin-embedder-policy: require-corp
document-policy: js-profiling
cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
origin-agent-cluster: ?1
server: cloudflare
cf-ray: 88ef1d46481a56c7-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| torxa3k7p.cc/invite/i=18770 | 188.114.97.1 | 403 Forbidden | 5.8 kB |
URL User Request GET HTTP/1.1torxa3k7p.cc/invite/i=18770 IP188.114.97.1:80
File typeHTML document, ASCII text, with very long lines (14205), with no line terminators Hashc5dfc939054ae2907bd04e65946bd522 450e1aef0ce1a4ab4be47ed862c9370e8e0f5321 e46356fd689ce6e7d36871ba64b67d3460192b074db55219d24ac9fce7c65973
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /invite/i=18770 HTTP/1.1
Host: torxa3k7p.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Cookie: cf_chl_rc_m=1
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 403 Forbidden
Date: Wed, 05 Jun 2024 09:25:25 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
Accept-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
Critical-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
Cross-Origin-Embedder-Policy: require-corp
Cross-Origin-Opener-Policy: same-origin
Cross-Origin-Resource-Policy: same-origin
Origin-Agent-Cluster: ?1
Permissions-Policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()
Referrer-Policy: same-origin
X-Content-Options: nosniff
X-Frame-Options: SAMEORIGIN
cf-mitigated: challenge
cf-chl-out: N80uvfYYnIY6Zfm3Yxvx7rK/TVT9nU9mLfvUmTrdSB1eDkU4XxV+qQ9RhkkS55L0RKGv+ZOuXYXPt7sk8v/C89KDes/eZLLnGaYSNLJe5TI=$fdqJBMYAXgvj8FrcxzL4wQ==
Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=5tHG8cMCyGwO7egBYtWsHfWMpoEjhI7%2BGWQ%2F3ckMzRgfi%2Ff9N9ujOEvk5T5CGse2%2FVpvqjvXfQiBCBisxhHsqjrQ3Jgb448H0euTseCgYQSmblTOHzNtDC6%2B333ONFw%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 88ef1d83dafd569a-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
|
|
| torxa3k7p.cc/cdn-cgi/challenge-platform/h/g/orchestrate/chl_page/v1?ray=88ef1d83dafd569a | 188.114.97.1 | 200 OK | 104 kB |
URL GET HTTP/1.1torxa3k7p.cc/cdn-cgi/challenge-platform/h/g/orchestrate/chl_page/v1?ray=88ef1d83dafd569a IP188.114.97.1:80
Requested byhttp://torxa3k7p.cc/invite/i=18770
File typeASCII text, with very long lines (65536), with no line terminators Size104 kB (104489 bytes) Hashe127cc70cbe0f902118b5af37a1e4167 5bf2d7fc61a7b7c0773833b351b0ac71b2eee794 2dbcd816f229164f92488237302a855d5a3fb2cbc9aaa1c7bc6260f2a977b5b0
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /cdn-cgi/challenge-platform/h/g/orchestrate/chl_page/v1?ray=88ef1d83dafd569a HTTP/1.1
Host: torxa3k7p.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://torxa3k7p.cc/invite/i=18770?__cf_chl_rt_tk=wtzVBJpr1HCD24yuaR0JQWXvkuOGiNtvz6eSveMWCXI-1717579525-0.0.1.1-2303
DNT: 1
Connection: keep-alive
Cookie: cf_chl_rc_m=1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 05 Jun 2024 09:25:25 GMT
Content-Type: application/javascript; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=173KKQxrCp1AOfjVfF8F8RALmxE8Es%2FhfypBKyxW56LIJjlcx5WQ3QwWsOkhtAAeZsT0D5zCvElwGJKegV7BssijLAD%2Bzjpy8B8qJ6uysT822IKTt5KkIBjnnwtbUCY%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 88ef1d843f95b529-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
|
|
| torxa3k7p.cc/favicon.ico | 188.114.97.1 | 200 OK | 994 B |
IP188.114.97.1:80
Requested byhttp://torxa3k7p.cc/invite/i=18770
File typeHTML document, ASCII text, with very long lines (2701), with no line terminators Hashb00c94bfce6f210ef677d2942277c2a9 ab08c14ae2373121619fdfbaa9e7e60a786583f6 d4d89c2510ab5f5b9e527544a69760e742b9b3310a3383de1fb685368f1e30ec
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /favicon.ico HTTP/1.1
Host: torxa3k7p.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://torxa3k7p.cc/invite/i=18770?__cf_chl_rt_tk=wtzVBJpr1HCD24yuaR0JQWXvkuOGiNtvz6eSveMWCXI-1717579525-0.0.1.1-2303
DNT: 1
Connection: keep-alive
Cookie: cf_chl_rc_m=1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 05 Jun 2024 09:25:25 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Age: 10
Last-Modified: Wed, 05 Jun 2024 09:25:15 GMT
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=uS10HmCZlyGVnguoW7lqVX674tIDmJyG0bFEI4yM6o%2FI1iy4L%2FovNS06HiaQN6sbbDPoWip0B5Yi%2Buwo0r%2FoWPU4d52WTLgLv147%2FyTp0NDuUcHoQYXoF8OQvv4sGSA%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 88ef1d847ff9b529-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
|
|
| torxa3k7p.cc/favicon.ico | 188.114.97.1 | 200 OK | 994 B |
IP188.114.97.1:80
Requested byhttp://torxa3k7p.cc/invite/i=18770
File typeHTML document, ASCII text, with very long lines (2701), with no line terminators Hashb00c94bfce6f210ef677d2942277c2a9 ab08c14ae2373121619fdfbaa9e7e60a786583f6 d4d89c2510ab5f5b9e527544a69760e742b9b3310a3383de1fb685368f1e30ec
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /favicon.ico HTTP/1.1
Host: torxa3k7p.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://torxa3k7p.cc/invite/i=18770
DNT: 1
Connection: keep-alive
Cookie: cf_chl_rc_m=1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 05 Jun 2024 09:25:25 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Age: 10
Last-Modified: Wed, 05 Jun 2024 09:25:15 GMT
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Zx8mOkxvB0OgPxh8z4maES4z2%2Bi%2FqNnxo3EShJu3WJBh2KmEZ9fvZUr2Kn6mJuv1QN%2BMgnfTeSeM0y3CDZo0izIVkz3Ids4RTrXRmFBCeS2YEBrnCijKDEGCvZRwzCM%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 88ef1d84d888b529-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
|
|
| torxa3k7p.cc/cdn-cgi/challenge-platform/h/g/flow/ov1/755853952:1717575863:3iO8l1RszDHLyIiPp7MuIEzH3N4zcDT_RTYUtBWX-cM/88ef1d83dafd569a/579a175a038cb4d | 188.114.97.1 | 200 OK | 12 kB |
URL POST HTTP/1.1torxa3k7p.cc/cdn-cgi/challenge-platform/h/g/flow/ov1/755853952:1717575863:3iO8l1RszDHLyIiPp7MuIEzH3N4zcDT_RTYUtBWX-cM/88ef1d83dafd569a/579a175a038cb4d IP188.114.97.1:80
Requested byhttp://torxa3k7p.cc/invite/i=18770
File typeASCII text, with very long lines (16460), with no line terminators Hashc8f26fa1d7316870bd5ba106d321b4f2 df877f1e6ed4c934e1cb3a1cfe5ba886a2155276 55336e8aebf0364dc7bf4c329342a05ebc3bc5226226e40d4b58f24dc700063f
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
POST /cdn-cgi/challenge-platform/h/g/flow/ov1/755853952:1717575863:3iO8l1RszDHLyIiPp7MuIEzH3N4zcDT_RTYUtBWX-cM/88ef1d83dafd569a/579a175a038cb4d HTTP/1.1
Host: torxa3k7p.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://torxa3k7p.cc/invite/i=18770
Content-type: application/x-www-form-urlencoded
CF-Challenge: 579a175a038cb4d
Content-Length: 1656
Origin: http://torxa3k7p.cc
DNT: 1
Connection: keep-alive
Cookie: cf_chl_rc_m=1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 05 Jun 2024 09:25:26 GMT
Content-Type: text/plain; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
cf-chl-gen: IDMamxiVE5P7Q5Q8infitiejoK6s0kQJXfuDe3ZNTfu4Ln5r24fjrEP0Iz7H+LLJ$ThjeFDSxnSjGvB5sHPBf0Q==
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=x32a28H3GpI6HaH8ozOWteFp42btPJxFfOXhbObgMdjmDJPTjBMa4Orm2uGn3GbeoZO2xtY%2BTcy5LU%2BEVVdSLGoFzegj96K6k166qJepc81t8d9VMjvtzg1eGPayjQo%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 88ef1d85999ab529-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
|
|
| challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/cmg/1/GLhOioXg0bs57t4qPrORXFsL1%2BWig2mIKbgpVPMu7ZQ%3D | 104.17.2.184 | | 61 B |
URL challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/cmg/1/GLhOioXg0bs57t4qPrORXFsL1%2BWig2mIKbgpVPMu7ZQ%3D IP104.17.2.184:0
File typePNG image data, 2 x 2, 8-bit/color RGB, non-interlaced Hash9246cca8fc3c00f50035f28e9f6b7f7d 3aa538440f70873b574f40cd793060f53ec17a5d c07d7d29e3c20fa6ca4c5d20663688d52bad13e129ad82ce06b80eb187d9dc84
GET /cdn-cgi/challenge-platform/h/g/cmg/1/GLhOioXg0bs57t4qPrORXFsL1%2BWig2mIKbgpVPMu7ZQ%3D HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/qr08g/0x4AAAAAAADnPIDROrmt1Wwj/light/normal
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 05 Jun 2024 09:25:26 GMT
content-type: image/png
content-length: 61
cache-control: max-age=2629800, public
server: cloudflare
cf-ray: 88ef1d872c7056c7-OSL
alt-svc: h3=":443"; ma=86400
|
|
| challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/i/88ef1d869b8956c7/1717579526544/Utq6tve-0kO3A4H | 104.17.2.184 | | 61 B |
URL challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/i/88ef1d869b8956c7/1717579526544/Utq6tve-0kO3A4H IP104.17.2.184:0
File typePNG image data, 18 x 69, 8-bit/color RGB, non-interlaced Hash1b5ed3ab681a48ba30cf60e71ca4fcd3 2f1df6a0c9686de21d991884ae17d146686071a1 6aa51e6b164f1fe6a765470d15a9ba99e2a8187c68855c21eb76295bf1e69bac
GET /cdn-cgi/challenge-platform/h/g/i/88ef1d869b8956c7/1717579526544/Utq6tve-0kO3A4H HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/qr08g/0x4AAAAAAADnPIDROrmt1Wwj/light/normal
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 05 Jun 2024 09:25:28 GMT
content-type: image/png
content-length: 61
server: cloudflare
cf-ray: 88ef1d95fbd656c7-OSL
alt-svc: h3=":443"; ma=86400
|
|
| torxa3k7p.cc/cdn-cgi/challenge-platform/h/g/flow/ov1/755853952:1717575863:3iO8l1RszDHLyIiPp7MuIEzH3N4zcDT_RTYUtBWX-cM/88ef1d83dafd569a/579a175a038cb4d | 188.114.97.1 | 200 OK | 2.4 kB |
URL POST HTTP/1.1torxa3k7p.cc/cdn-cgi/challenge-platform/h/g/flow/ov1/755853952:1717575863:3iO8l1RszDHLyIiPp7MuIEzH3N4zcDT_RTYUtBWX-cM/88ef1d83dafd569a/579a175a038cb4d IP188.114.97.1:80
Requested byhttp://torxa3k7p.cc/invite/i=18770
File typeASCII text, with very long lines (3056), with no line terminators Hash0d571103ec2ef6e90cebe35aa9541d71 5b5ca84f89ec1bf01dac5ca9a986c53a0b0da668 01e7df57c86d6d9b6f178c0e02d0749df46402e8ef24099565a8c239a48ca2b6
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
POST /cdn-cgi/challenge-platform/h/g/flow/ov1/755853952:1717575863:3iO8l1RszDHLyIiPp7MuIEzH3N4zcDT_RTYUtBWX-cM/88ef1d83dafd569a/579a175a038cb4d HTTP/1.1
Host: torxa3k7p.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://torxa3k7p.cc/invite/i=18770
Content-type: application/x-www-form-urlencoded
CF-Challenge: 579a175a038cb4d
Content-Length: 2312
Origin: http://torxa3k7p.cc
DNT: 1
Connection: keep-alive
Cookie: cf_chl_rc_m=1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 05 Jun 2024 09:25:34 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
cf-chl-out-s: UqJrRUuayLiP9BSGT+iAZA2QyqVeHOSjLyhlF8CXjwhs90L8smVdus9DfDjrGYBl8tbH481Awb5VNSJe68c9uvFcORmWolbi7DR2+YzeC4jPGAge09VDWRZhRBpAaV7RRYAkvPTAqUQWZSkesbK0pG8R5CKa027/JpnySshFXAaOt/gXYLAu0eUFIrVqviSFGadtGm7Hgm0szoazSgWU/SQ0dDdUi61bUYNihWlD2UWIFUc+iSXji7uHzJKrOz60gQMvDrCqw2LMlMJB0mTkbFOxCTd10q+k0rthO0TdqD7E1EIglW11U7IyisDSdG9zkAZKG80QSpnfRkaFeDgDXu62nhHzQ4hXGDvVnV/4ChlxtXZWrH/8vHyuQigol0KEtJHF+RMd9Etm33zGSPbI5tN/FfCZgCggkuM+a/3zq9odhTpRX1+TIBMNCGIo4pYdiLns0ojljLfDFtPA6R2+3Y9orX00pKm8TLsGiD+34Kc=$U+omTBIxgU3RUdprbzU/pA==
cf-chl-out: 5lP+8DhL+TBNQGJCYIrQpHu6W2KTs6RZCxs1sbzKg9PMRsYLQlxzSVoTN+RwFNeO4THKmlpP8f/x/pIKFRRLSOsJ31ixIJYhvr/O3zg9dkQ=$0HmnStCOFKaWrvCoJCxsRQ==
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Ry897HlEbKp85l1C1VT%2F1zq1RhUeDq4RkpjfDwudFjWVquSXwGGnUqCDfJX8Dk2iChKI%2BSycb0oBA9ygyraf7XDeVlXDJ7zXlfwmomPhfxffeW8bvS3q0QssYvlutdo%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 88ef1dbd5a85b529-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
|
|
| challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/qr08g/0x4AAAAAAADnPIDROrmt1Wwj/light/normal | 104.17.2.184 | 200 OK | 79 kB |
URL GET HTTP/3challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/qr08g/0x4AAAAAAADnPIDROrmt1Wwj/light/normal IP104.17.2.184:443
Requested byhttp://torxa3k7p.cc/invite/i=18770 CertificateIssuerCloudflare, Inc. Subjectchallenges.cloudflare.com Fingerprint5F:E4:AA:8C:2E:24:D2:B1:69:9D:13:28:31:5C:65:FA:97:2A:E9:6E ValidityFri, 18 Aug 2023 00:00:00 GMT - Sat, 17 Aug 2024 23:59:59 GMT
File typeHTML document, ASCII text, with very long lines (42150) Hash33a78750c318e500fc6acb1240b2f6aa 8d79ccd57bf219bd8b53871d0ac4f796535db5b3 3244dc405ac07604077aa09a77665c27f8cc013ec4ed303e2bffa9886c939de7
GET /cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/qr08g/0x4AAAAAAADnPIDROrmt1Wwj/light/normal HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 05 Jun 2024 09:25:26 GMT
content-type: text/html; charset=UTF-8
referrer-policy: same-origin
accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
cross-origin-embedder-policy: require-corp
document-policy: js-profiling
permissions-policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()
origin-agent-cluster: ?1
critical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
cross-origin-opener-policy: same-origin
cross-origin-resource-policy: cross-origin
content-security-policy: frame-src https://challenges.cloudflare.com/; base-uri 'self'
server: cloudflare
cf-ray: 88ef1d869b8956c7-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|