GET /cdn-cgi/challenge-platform/h/b/cmg/1 HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/r14on/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal/auto/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Sat, 26 Jul 2025 09:56:03 GMT
content-type: image/png
content-length: 86
priority: u=4,i=?0
server: cloudflare
cf-ray: 96530664385c568d-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri

GET /favicon.ico HTTP/1.1
Host: receiptcadenceresurrection.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://receiptcadenceresurrection.com/api/users?token=L3R5eTE1czFqP2tleT0yMDFmYzIzYzdlY2EwOWQ1Y2FkOWNiYjQ2N2E2YTk0MiZzdWJtZXRyaWM9MjcxNjQ1NzM
Cookie: ain=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.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.vdBViaLx5Ag8NwDaWbG9DLpE73wr9zJkrThXjpp2gjo; cjs=t
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

GET /favicon.ico HTTP/1.1
Host: stake.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://stake.com/?c=adseuppunder&offer=aterrapunddepbon&clickId=QNcG4HP3wtXauUNWr6XM1S&__cf_chl_rt_tk=82tzPbIbquwqE4ezpj4QOv19g7.AcTHho4Redch5vd8-1753523762-1.0.1.1-jUIcN_pkcNGPTah5QoGprf_iMxFwGQie9t9B5cx7zCw
DNT: 1
Connection: keep-alive
Cookie: __cf_bm=qoggjANI1g6WdPfTXh_hMZKBSmouYvlA7dXiMFmIfOg-1753523762-1.0.1.1-N6A.2kgH95HY0k8KygLSfoo_4MnNi3pPuqSTKt1y6wTha5pp.sb3eY_SmP_YiCk4gm07tbIlUqor6DhVNYz8gsCi6FtnKgdE8J2ciTd_pc0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Sat, 26 Jul 2025 09:56:03 GMT
content-length: 15086
etag: W/"15086-1753515955000"
last-modified: Sat, 26 Jul 2025 07:45:55 GMT
vary: Accept-Encoding
cf-cache-status: HIT
age: 40
accept-ranges: bytes
strict-transport-security: max-age=63072000; preload
set-cookie: _cfuvid=tGmBv3YL5feywSxulE.YWBzDx43FaY.q.TAXIIwy4dY-1753523763075-0.0.1.1-604800000; path=/; domain=.stake.com; HttpOnly; Secure; SameSite=None
server: cloudflare
cf-ray: 9653065f19d95690-OSL
X-Firefox-Spdy: h2

GET /cdn-cgi/challenge-platform/h/b/orchestrate/chl_page/v1?ray=9653065d2fa55690 HTTP/1.1
Host: stake.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://stake.com/?c=adseuppunder&offer=aterrapunddepbon&clickId=QNcG4HP3wtXauUNWr6XM1S&__cf_chl_rt_tk=82tzPbIbquwqE4ezpj4QOv19g7.AcTHho4Redch5vd8-1753523762-1.0.1.1-jUIcN_pkcNGPTah5QoGprf_iMxFwGQie9t9B5cx7zCw
DNT: 1
Connection: keep-alive
Cookie: __cf_bm=qoggjANI1g6WdPfTXh_hMZKBSmouYvlA7dXiMFmIfOg-1753523762-1.0.1.1-N6A.2kgH95HY0k8KygLSfoo_4MnNi3pPuqSTKt1y6wTha5pp.sb3eY_SmP_YiCk4gm07tbIlUqor6DhVNYz8gsCi6FtnKgdE8J2ciTd_pc0
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Sat, 26 Jul 2025 09:56:03 GMT
content-type: application/javascript; charset=UTF-8
cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
strict-transport-security: max-age=63072000; preload
server: cloudflare
cf-ray: 9653065ec97c5690-OSL
content-encoding: br
X-Firefox-Spdy: h2

GET /favicon.ico HTTP/1.1
Host: stake.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://stake.com/?c=adseuppunder&offer=aterrapunddepbon&clickId=QNcG4HP3wtXauUNWr6XM1S
DNT: 1
Connection: keep-alive
Cookie: __cf_bm=qoggjANI1g6WdPfTXh_hMZKBSmouYvlA7dXiMFmIfOg-1753523762-1.0.1.1-N6A.2kgH95HY0k8KygLSfoo_4MnNi3pPuqSTKt1y6wTha5pp.sb3eY_SmP_YiCk4gm07tbIlUqor6DhVNYz8gsCi6FtnKgdE8J2ciTd_pc0; _cfuvid=tGmBv3YL5feywSxulE.YWBzDx43FaY.q.TAXIIwy4dY-1753523763075-0.0.1.1-604800000
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Sat, 26 Jul 2025 09:56:03 GMT
content-length: 15086
cf-ray: 9653065f7a425690-OSL
etag: W/"15086-1753515955000"
last-modified: Sat, 26 Jul 2025 07:45:55 GMT
vary: Accept-Encoding
cf-cache-status: HIT
age: 40
accept-ranges: bytes
strict-transport-security: max-age=63072000; preload
server: cloudflare
X-Firefox-Spdy: h2

GET /cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/r14on/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal/auto/ HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Sat, 26 Jul 2025 09:56:03 GMT
content-type: text/html; charset=UTF-8
cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
permissions-policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()
content-security-policy: default-src 'none'; script-src 'nonce-mYCgjmMdmiXBK5jI' 'unsafe-eval'; script-src-attr 'none'; worker-src blob:; style-src 'unsafe-inline'; img-src 'self'; connect-src 'self'; frame-src 'self' blob:; child-src 'self' blob:; form-action 'none'; base-uri 'self'; sandbox allow-same-origin allow-scripts allow-popups allow-forms
cross-origin-embedder-policy: require-corp
cross-origin-opener-policy: same-origin
cross-origin-resource-policy: cross-origin
origin-agent-cluster: ?1
accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
critical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
referrer-policy: same-origin
document-policy: js-profiling
priority: u=4,i=?0
server: cloudflare
cf-ray: 965306635f34568d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri