GET challenges.cloudflare.com/turnstile/v0/api.js
104.18.94.41302 Found 49 kB URL GET challenges.cloudflare.com/turnstile/v0/api.js
IP 104.18.94.41:443
Requested by https://growermetal.welcoming.com.de/3Gn9r/
Certificate IssuerGoogle Trust Services
Subjectchallenges.cloudflare.com
FingerprintFC:98:AC:45:6F:F6:41:18:0B:96:F4:70:AB:D7:E3:D4:3D:B4:66:71
ValidityFri, 27 Jun 2025 18:18:48 GMT - Thu, 25 Sep 2025 19:18:44 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /turnstile/v0/api.js HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://growermetal.welcoming.com.de/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
date: Wed, 02 Jul 2025 23:21:44 GMT
content-length: 0
access-control-allow-origin: *
cache-control: max-age=300, stale-if-error=10800, stale-while-revalidate=300, public
cross-origin-resource-policy: cross-origin
location: /turnstile/v0/g/5f8a20c0c87c/api.js
vary: Accept-Encoding
server: cloudflare
cf-ray: 9591e1957c2cb518-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/enyax/0x4AAAAAABi-z0Ab5E58Y0qk/auto/fbE/new/normal/auto/
104.18.94.41200 OK 27 kB URL GET challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/enyax/0x4AAAAAABi-z0Ab5E58Y0qk/auto/fbE/new/normal/auto/
IP 104.18.94.41:443
Requested by https://growermetal.welcoming.com.de/3Gn9r/
Certificate IssuerGoogle Trust Services
Subjectchallenges.cloudflare.com
FingerprintFC:98:AC:45:6F:F6:41:18:0B:96:F4:70:AB:D7:E3:D4:3D:B4:66:71
ValidityFri, 27 Jun 2025 18:18:48 GMT - Thu, 25 Sep 2025 19:18:44 GMT
File type HTML document, ASCII text, with very long lines (26768), with no line terminators
Hash e051eda480a4ce36055a8d457def83e4
574bdd85248686b0f8fff9cf722f267120b6b8dc
2449b75091acebf0ae9064c7bb8a4e19292e03d04eeb58e81647c7b9e4d0586b
GET /cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/enyax/0x4AAAAAABi-z0Ab5E58Y0qk/auto/fbE/new/normal/auto/ HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://growermetal.welcoming.com.de/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 02 Jul 2025 23:21:44 GMT
content-type: text/html; charset=UTF-8
cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
permissions-policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()
content-security-policy: default-src 'none'; script-src 'nonce-8fmwohs4Eb1Q8za5' 'unsafe-eval'; script-src-attr 'none'; worker-src blob:; style-src 'unsafe-inline'; img-src 'self'; connect-src 'self'; frame-src 'self' blob:; child-src 'self' blob:; form-action 'none'; base-uri 'self'; sandbox allow-same-origin allow-scripts allow-popups allow-forms
cross-origin-embedder-policy: require-corp
cross-origin-opener-policy: same-origin
cross-origin-resource-policy: cross-origin
origin-agent-cluster: ?1
accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
critical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
referrer-policy: same-origin
document-policy: js-profiling
priority: u=4,i=?0
server: cloudflare
cf-ray: 9591e19689f756c0-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
GET challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/orchestrate/chl_api/v1?ray=9591e19689f756c0&lang=auto
104.18.94.41200 OK 144 kB URL GET challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/orchestrate/chl_api/v1?ray=9591e19689f756c0&lang=auto
IP 104.18.94.41:443
Requested by https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/enyax/0x4AAAAAABi-z0Ab5E58Y0qk/auto/fbE/new/normal/auto/
Certificate IssuerGoogle Trust Services
Subjectchallenges.cloudflare.com
FingerprintFC:98:AC:45:6F:F6:41:18:0B:96:F4:70:AB:D7:E3:D4:3D:B4:66:71
ValidityFri, 27 Jun 2025 18:18:48 GMT - Thu, 25 Sep 2025 19:18:44 GMT
File type JavaScript source, ASCII text, with very long lines (65536), with no line terminators
Size 144 kB (143678 bytes)
Hash 707866c7a9bd0b93b57dbe1bbac59fa9
099a6616905e237b734657cebb0bfce89b995928
cbfe23a6fdcbdc5d2e1fccf077bbe0428d67f143984325ee3652178b52e9caf6
GET /cdn-cgi/challenge-platform/h/g/orchestrate/chl_api/v1?ray=9591e19689f756c0&lang=auto HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/enyax/0x4AAAAAABi-z0Ab5E58Y0qk/auto/fbE/new/normal/auto/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 02 Jul 2025 23:21:44 GMT
content-type: application/javascript; charset=UTF-8
cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
priority: u=3,i=?0
server: cloudflare
cf-ray: 9591e197eb2a56c0-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
GET ajax.googleapis.com/ajax/libs/jquery/2.2.4/jquery.min.js
216.58.207.234200 OK 86 kB URL GET ajax.googleapis.com/ajax/libs/jquery/2.2.4/jquery.min.js
IP 216.58.207.234:443
Requested by https://growermetal.welcoming.com.de/3Gn9r/
Certificate IssuerGoogle Trust Services
Subjectupload.video.google.com
Fingerprint58:09:05:96:27:31:E2:3D:AB:89:AD:1C:2E:C3:03:82:B0:27:3D:86
ValidityMon, 02 Jun 2025 08:36:37 GMT - Mon, 25 Aug 2025 08:36:36 GMT
File type JavaScript source, ASCII text, with very long lines (32065)
Hash 2f6b11a7e914718e0290410e85366fe9
69bb69e25ca7d5ef0935317584e6153f3fd9a88c
05b85d96f41fff14d8f608dad03ab71e2c1017c2da0914d7c59291bad7a54f8e
GET /ajax/libs/jquery/2.2.4/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://growermetal.welcoming.com.de/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 30028
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 26 Jun 2025 10:25:13 GMT
expires: Fri, 26 Jun 2026 10:25:13 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
last-modified: Tue, 03 Mar 2020 19:15:00 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
age: 565006
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET stackpath.bootstrapcdn.com/bootstrap/4.1.3/js/bootstrap.min.js
104.18.11.207200 OK 51 kB URL GET stackpath.bootstrapcdn.com/bootstrap/4.1.3/js/bootstrap.min.js
IP 104.18.11.207:443
Requested by https://growermetal.welcoming.com.de/3Gn9r/
Certificate IssuerGoogle Trust Services
Subjectbootstrapcdn.com
Fingerprint73:3E:54:5A:E7:0A:B5:3C:11:79:4A:9F:FE:64:7B:38:B7:15:03:C0
ValidityWed, 14 May 2025 02:01:13 GMT - Tue, 12 Aug 2025 03:00:50 GMT
File type JavaScript source, ASCII text, with very long lines (50758)
Hash 67176c242e1bdc20603c878dee836df3
27a71b00383d61ef3c489326b3564d698fc1227c
56c12a125b021d21a69e61d7190cefa168d6c28ce715265cea1b3b0112d169c4
GET /bootstrap/4.1.3/js/bootstrap.min.js HTTP/1.1
Host: stackpath.bootstrapcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://growermetal.welcoming.com.de/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 02 Jul 2025 23:21:59 GMT
content-type: application/javascript; charset=utf-8
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: US
vary: Accept-Encoding
access-control-allow-origin: *
cache-control: public, max-age=31919000
content-encoding: br
etag: "67176c242e1bdc20603c878dee836df3"
last-modified: Mon, 25 Jan 2021 22:04:06 GMT
cdn-proxyver: 1.04
cdn-requestpullsuccess: True
cdn-requestpullcode: 200
cdn-cachedat: 10/04/2024 02:53:43
cdn-edgestorageid: 1029
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
cdn-status: 200
cdn-requesttime: 1
cdn-requestid: 7fedeed1ac4f734c4f5baf0abe375bbe
cdn-cache: HIT
cf-cache-status: HIT
age: 72946
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 9591e1f3480856c6-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
POST 6343322631.cfd/next.php
162.241.121.156200 OK 16 B IP 162.241.121.156:443
ASN #19871 NETWORK-SOLUTIONS-HOSTING
Requested by https://growermetal.welcoming.com.de/3Gn9r/
Certificate IssuerLet's Encrypt
Subject6343322631.cfd
Fingerprint95:D6:50:3C:0C:C2:40:B2:4B:8E:24:0E:49:EF:8E:77:04:0F:60:7B
ValidityMon, 30 Jun 2025 16:25:26 GMT - Sun, 28 Sep 2025 16:25:25 GMT
Hash 1f57cbd1f1a1ced8f62d34242408414c
52279c54b16f0a88d43d57b4cbb9813ea3cc39ab
c462d460eab61de19f36cc384c99666e5bf65eaeba0c12b8f594c5410c01f220
Analyzer Verdict Alert urlquery phishing Phishing - Microsoft
urlquery phishing Phishing - FlowerStorm Phishing Kit
POST /next.php HTTP/1.1
Host: 6343322631.cfd
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://growermetal.welcoming.com.de/
Content-Type: application/x-www-form-urlencoded
Content-Length: 13
Origin: https://growermetal.welcoming.com.de
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 02 Jul 2025 23:22:01 GMT
Server: Apache
Access-Control-Allow-Origin: https://growermetal.welcoming.com.de
Access-Control-Allow-Credentials: true
Access-Control-Max-Age: 86400
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
GET aadcdn.msftauth.net/shared/1.0/content/images/backgrounds/2_bc3d32a696895f78c19df6c717586a5d.svg
23.36.79.136200 OK 1.9 kB URL GET aadcdn.msftauth.net/shared/1.0/content/images/backgrounds/2_bc3d32a696895f78c19df6c717586a5d.svg
IP 23.36.79.136:443
ASN #20940 Akamai International B.V.
Requested by https://growermetal.welcoming.com.de/3Gn9r/
Certificate IssuerMicrosoft Corporation
Subjectidnaakamaicdn.msftauth.net
FingerprintDC:51:C1:FA:8A:C3:85:DA:8E:3C:1C:06:37:00:90:7A:B4:62:A9:DC
ValidityFri, 27 Dec 2024 18:21:36 GMT - Mon, 22 Dec 2025 18:21:36 GMT
File type SVG Scalable Vector Graphics image
Hash bc3d32a696895f78c19df6c717586a5d
9191cb156a30a3ed79c44c0a16c95159e8ff689d
0e88b6fcbb8591edfd28184fa70a04b6dd3af8a14367c628edd7caba32e58c68
GET /shared/1.0/content/images/backgrounds/2_bc3d32a696895f78c19df6c717586a5d.svg HTTP/1.1
Host: aadcdn.msftauth.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://growermetal.welcoming.com.de/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-length: 673
content-type: image/svg+xml
content-encoding: gzip
content-md5: DhdidjYrlCeaRJJRG/y9mA==
last-modified: Wed, 15 Jan 2025 17:54:26 GMT
accept-ranges: bytes
etag: "0x8DD358DA72AAF33"
x-ms-request-id: 6471a91d-601e-0074-7d76-67603e000000
x-ms-version: 2018-03-28
access-control-expose-headers: Accept-Ranges,Cache-Control,Content-Encoding,Content-Length,Content-MD5,Content-Type,Date,ETag,Last-Modified,Server,x-ms-request-id,x-ms-version
access-control-allow-origin: *
cache-control: public, max-age=17001029
date: Wed, 02 Jul 2025 23:22:06 GMT
vary: Accept-Encoding
akamai-grn: 0.844f2417.1751498526.1a5f9c9a
X-Firefox-Spdy: h2
GET challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/cmg/1
104.18.94.41200 OK 86 B URL GET challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/cmg/1
IP 104.18.94.41:443
Requested by https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/enyax/0x4AAAAAABi-z0Ab5E58Y0qk/auto/fbE/new/normal/auto/
Certificate IssuerGoogle Trust Services
Subjectchallenges.cloudflare.com
FingerprintFC:98:AC:45:6F:F6:41:18:0B:96:F4:70:AB:D7:E3:D4:3D:B4:66:71
ValidityFri, 27 Jun 2025 18:18:48 GMT - Thu, 25 Sep 2025 19:18:44 GMT
File type PNG image data, 2 x 2, 8-bit/color RGBA, non-interlaced
Hash 70c202196187ab3c11b4e094c20c6de1
9c52b959e74aee9d79cbc9f35d1f9f65a3b8c863
6255b9231d09ebe6aa1ac19ba46bdd81f3df58989c9ef2e11d6cd6e2e7b21643
GET /cdn-cgi/challenge-platform/h/g/cmg/1 HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/enyax/0x4AAAAAABi-z0Ab5E58Y0qk/auto/fbE/new/normal/auto/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 02 Jul 2025 23:21:44 GMT
content-type: image/png
content-length: 86
priority: u=4,i=?0
server: cloudflare
cf-ray: 9591e1979aea56c0-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
POST challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/flow/ov1/1364160261:1751494595:9jTvZehjRNzaGPzAsZZiXo_TWXqOJgwisDCbmLiTfjs/9591e19689f756c0/TthhP_h.O3r_I3V6wcxEy_NdNyk2_SlI3WpndY9Vtgs-1751498504-1.2.1.1-EtEBzsT.1VnzeMRPWvGdrYBXwuf6xx9CZmDwVSrO8ALo0SPmaoKOAsLlV_KWn3WY
104.18.94.41200 OK 285 kB URL POST challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/flow/ov1/1364160261:1751494595:9jTvZehjRNzaGPzAsZZiXo_TWXqOJgwisDCbmLiTfjs/9591e19689f756c0/TthhP_h.O3r_I3V6wcxEy_NdNyk2_SlI3WpndY9Vtgs-1751498504-1.2.1.1-EtEBzsT.1VnzeMRPWvGdrYBXwuf6xx9CZmDwVSrO8ALo0SPmaoKOAsLlV_KWn3WY
IP 104.18.94.41:443
Requested by https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/enyax/0x4AAAAAABi-z0Ab5E58Y0qk/auto/fbE/new/normal/auto/
Certificate IssuerGoogle Trust Services
Subjectchallenges.cloudflare.com
FingerprintFC:98:AC:45:6F:F6:41:18:0B:96:F4:70:AB:D7:E3:D4:3D:B4:66:71
ValidityFri, 27 Jun 2025 18:18:48 GMT - Thu, 25 Sep 2025 19:18:44 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Size 285 kB (284680 bytes)
Hash d755079cc1b157b3bec8990db283ca21
9dfb7f78c42ad3a43ae433eace5c1d8ed39abbb0
ffce75b013c453469a5827785279901bedf302357a063d10ff74bb6e155f32a8
POST /cdn-cgi/challenge-platform/h/g/flow/ov1/1364160261:1751494595:9jTvZehjRNzaGPzAsZZiXo_TWXqOJgwisDCbmLiTfjs/9591e19689f756c0/TthhP_h.O3r_I3V6wcxEy_NdNyk2_SlI3WpndY9Vtgs-1751498504-1.2.1.1-EtEBzsT.1VnzeMRPWvGdrYBXwuf6xx9CZmDwVSrO8ALo0SPmaoKOAsLlV_KWn3WY HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/enyax/0x4AAAAAABi-z0Ab5E58Y0qk/auto/fbE/new/normal/auto/
cf-chl: TthhP_h.O3r_I3V6wcxEy_NdNyk2_SlI3WpndY9Vtgs-1751498504-1.2.1.1-EtEBzsT.1VnzeMRPWvGdrYBXwuf6xx9CZmDwVSrO8ALo0SPmaoKOAsLlV_KWn3WY
cf-chl-ra: 0
Content-Type: text/plain;charset=UTF-8
Content-Length: 3671
Origin: https://challenges.cloudflare.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 02 Jul 2025 23:21:45 GMT
content-type: text/plain; charset=UTF-8
cf-chl-gen: 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$4BnVsrcvWxU3BYGLxxVyDQ==
priority: u=3,i=?0
server: cloudflare
cf-ray: 9591e19a9d8f56c0-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
GET challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/d/9591e19689f756c0/1751498505391/1YbIanRh-J6_eWT
104.18.94.41200 OK 327 B URL GET challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/d/9591e19689f756c0/1751498505391/1YbIanRh-J6_eWT
IP 104.18.94.41:443
Requested by https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/enyax/0x4AAAAAABi-z0Ab5E58Y0qk/auto/fbE/new/normal/auto/
Certificate IssuerGoogle Trust Services
Subjectchallenges.cloudflare.com
FingerprintFC:98:AC:45:6F:F6:41:18:0B:96:F4:70:AB:D7:E3:D4:3D:B4:66:71
ValidityFri, 27 Jun 2025 18:18:48 GMT - Thu, 25 Sep 2025 19:18:44 GMT
File type PNG image data, 37 x 48, 8-bit/color RGBA, non-interlaced
Hash 19fa902baceb04b4e95593c979aa649d
77528c7b20756177b9030dd11338cd8a7a09b439
7459ed4d47f84a84eb86ef052ce0b2ace31e743db6df081befd2e5e118580858
GET /cdn-cgi/challenge-platform/h/g/d/9591e19689f756c0/1751498505391/1YbIanRh-J6_eWT HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/enyax/0x4AAAAAABi-z0Ab5E58Y0qk/auto/fbE/new/normal/auto/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 02 Jul 2025 23:21:47 GMT
content-type: image/png
content-length: 327
priority: u=4,i=?0
server: cloudflare
cf-ray: 9591e1a7f94d56c0-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
POST challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/flow/ov1/1364160261:1751494595:9jTvZehjRNzaGPzAsZZiXo_TWXqOJgwisDCbmLiTfjs/9591e19689f756c0/TthhP_h.O3r_I3V6wcxEy_NdNyk2_SlI3WpndY9Vtgs-1751498504-1.2.1.1-EtEBzsT.1VnzeMRPWvGdrYBXwuf6xx9CZmDwVSrO8ALo0SPmaoKOAsLlV_KWn3WY
104.18.94.41200 OK 30 kB URL POST challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/flow/ov1/1364160261:1751494595:9jTvZehjRNzaGPzAsZZiXo_TWXqOJgwisDCbmLiTfjs/9591e19689f756c0/TthhP_h.O3r_I3V6wcxEy_NdNyk2_SlI3WpndY9Vtgs-1751498504-1.2.1.1-EtEBzsT.1VnzeMRPWvGdrYBXwuf6xx9CZmDwVSrO8ALo0SPmaoKOAsLlV_KWn3WY
IP 104.18.94.41:443
Requested by https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/enyax/0x4AAAAAABi-z0Ab5E58Y0qk/auto/fbE/new/normal/auto/
Certificate IssuerGoogle Trust Services
Subjectchallenges.cloudflare.com
FingerprintFC:98:AC:45:6F:F6:41:18:0B:96:F4:70:AB:D7:E3:D4:3D:B4:66:71
ValidityFri, 27 Jun 2025 18:18:48 GMT - Thu, 25 Sep 2025 19:18:44 GMT
File type ASCII text, with very long lines (29696), with no line terminators
Hash 72027ad90ca1bf3ceedac6fad040ca0e
fe97511906298aa8684228827bfe780ba746f99c
98f7aa27ff948a1357348abcce90e7de0d3049b550925b16e633ef26b7b97bfd
POST /cdn-cgi/challenge-platform/h/g/flow/ov1/1364160261:1751494595:9jTvZehjRNzaGPzAsZZiXo_TWXqOJgwisDCbmLiTfjs/9591e19689f756c0/TthhP_h.O3r_I3V6wcxEy_NdNyk2_SlI3WpndY9Vtgs-1751498504-1.2.1.1-EtEBzsT.1VnzeMRPWvGdrYBXwuf6xx9CZmDwVSrO8ALo0SPmaoKOAsLlV_KWn3WY HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/enyax/0x4AAAAAABi-z0Ab5E58Y0qk/auto/fbE/new/normal/auto/
cf-chl: TthhP_h.O3r_I3V6wcxEy_NdNyk2_SlI3WpndY9Vtgs-1751498504-1.2.1.1-EtEBzsT.1VnzeMRPWvGdrYBXwuf6xx9CZmDwVSrO8ALo0SPmaoKOAsLlV_KWn3WY
cf-chl-ra: 0
Content-Type: text/plain;charset=UTF-8
Content-Length: 35020
Origin: https://challenges.cloudflare.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 02 Jul 2025 23:21:51 GMT
content-type: text/plain; charset=UTF-8
cf-chl-gen: O1+f7tuD6IrCwUoeMapDYtV0D2DckIW6s3GZYxI2FH9t+oXe7vbGLQCDIa27bnIM$/dGEqV9QZpCcqP/fpjl5CA==
priority: u=3,i=?0
server: cloudflare
cf-ray: 9591e1bfddf956c0-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
GET 6343322631-1317754460.cos.na-siliconvalley.myqcloud.com/bootstrap.min.js
170.106.97.195200 OK 562 kB URL GET 6343322631-1317754460.cos.na-siliconvalley.myqcloud.com/bootstrap.min.js
IP 170.106.97.195:443
ASN #132203 Tencent Building, Kejizhongyi Avenue
Requested by https://growermetal.welcoming.com.de/3Gn9r/
Certificate IssuerGlobalSign nv-sa
Subject*.cos.na-siliconvalley.myqcloud.com
Fingerprint75:2B:EF:E8:8B:E8:82:57:DD:BF:EA:50:7F:30:F0:4A:86:C7:AF:F9
ValidityMon, 30 Dec 2024 11:31:05 GMT - Sat, 31 Jan 2026 11:31:04 GMT
File type Unicode text, UTF-8 text, with very long lines (65471), with CRLF line terminators
Size 562 kB (561582 bytes)
Hash d63d1c687b228a0d56f203c28d6542f0
8a3f392168e993d05afa136dca3a579db23c688b
223d81ed0a4bdcab2b93472640cbfe67f8a0246b9765b7c44c7b485960320f9c
Analyzer Verdict Alert urlquery phishing Phishing - FlowerStorm Phishing Kit
GET /bootstrap.min.js HTTP/1.1
Host: 6343322631-1317754460.cos.na-siliconvalley.myqcloud.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://growermetal.welcoming.com.de/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: text/javascript
Content-Length: 561582
Connection: keep-alive
Accept-Ranges: bytes
Content-Disposition: attachment
Date: Wed, 02 Jul 2025 23:22:01 GMT
ETag: "d63d1c687b228a0d56f203c28d6542f0"
Last-Modified: Mon, 30 Jun 2025 19:20:21 GMT
Server: tencent-cos
x-cos-force-download: true
x-cos-hash-crc64ecma: 16413493774722746505
x-cos-request-id: Njg2NWJmMThfOGI5MTUwMGJfOWFlNl8zMjI0NjZl
GET challenges.cloudflare.com/turnstile/v0/g/5f8a20c0c87c/api.js
104.18.94.41200 OK 49 kB URL GET challenges.cloudflare.com/turnstile/v0/g/5f8a20c0c87c/api.js
IP 104.18.94.41:443
Requested by https://growermetal.welcoming.com.de/3Gn9r/
Certificate IssuerGoogle Trust Services
Subjectchallenges.cloudflare.com
FingerprintFC:98:AC:45:6F:F6:41:18:0B:96:F4:70:AB:D7:E3:D4:3D:B4:66:71
ValidityFri, 27 Jun 2025 18:18:48 GMT - Thu, 25 Sep 2025 19:18:44 GMT
File type JavaScript source, ASCII text, with very long lines (48827)
Hash 31ef18c7aa69a5a102364b7938216a12
a3398313b19b1b9c2c929b420c01df000f5d4c6a
e35158744fc010eb2219015a6171d7b955674a9f7e11a0d0013e803009454efe
GET /turnstile/v0/g/5f8a20c0c87c/api.js HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://growermetal.welcoming.com.de/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 02 Jul 2025 23:21:44 GMT
content-type: application/javascript; charset=UTF-8
last-modified: Mon, 30 Jun 2025 17:30:47 GMT
cache-control: max-age=31536000, stale-if-error=10800, stale-while-revalidate=31536000, public
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding
server: cloudflare
cf-ray: 9591e195ac5db518-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET growermetal.welcoming.com.de/favicon.ico
188.114.97.1404 Not Found 196 B URL GET growermetal.welcoming.com.de/favicon.ico
IP 188.114.97.1:443
Requested by https://growermetal.welcoming.com.de/3Gn9r/
Certificate IssuerGoogle Trust Services
Subjectwelcoming.com.de
FingerprintDC:AF:94:48:62:C5:43:45:A0:C7:44:12:17:66:B3:03:3E:FD:32:E2
ValidityMon, 30 Jun 2025 14:24:08 GMT - Sun, 28 Sep 2025 15:21:11 GMT
File type HTML document, ASCII text
Hash 62962daa1b19bbcc2db10b7bfd531ea6
d64bae91091eda6a7532ebec06aa70893b79e1f8
80c3fe2ae1062abf56456f52518bd670f9ec3917b7f85e152b347ac6b6faf880
Analyzer Verdict Alert urlquery phishing Phishing - Microsoft
GET /favicon.ico HTTP/1.1
Host: growermetal.welcoming.com.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://growermetal.welcoming.com.de/3Gn9r/
Cookie: PHPSESSID=614bjn6esrmgfeqp13lo8dvqkk
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 404 Not Found
date: Wed, 02 Jul 2025 23:21:44 GMT
content-type: text/html; charset=iso-8859-1
server: cloudflare
cache-control: max-age=14400
cf-cache-status: EXPIRED
priority: u=6,i=?0
vary: accept-encoding
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=JELyNTshHr7UwVkyB%2FR20xksqXkyLjztLoCdPXu2egVp3ybUkDycUef4YFlKanWUgM6FVA%2FeAkHZkb0myHWcbbklPSNsgXvesTFttGdcjAdxz1JAkbfF0WgB"}]}
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
content-encoding: br
cf-ray: 9591e1967b98569a-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
POST growermetal.welcoming.com.de/3Gn9r/
188.114.97.1200 OK 2.1 kB URL User Request POST growermetal.welcoming.com.de/3Gn9r/
IP 188.114.97.1:443
Certificate IssuerGoogle Trust Services
Subjectwelcoming.com.de
FingerprintDC:AF:94:48:62:C5:43:45:A0:C7:44:12:17:66:B3:03:3E:FD:32:E2
ValidityMon, 30 Jun 2025 14:24:08 GMT - Sun, 28 Sep 2025 15:21:11 GMT
File type HTML document, ASCII text
Hash 4d9ad07587c75fd4e0125028e020d90a
a3ed3effb5a6538fb90b0502b605a16234a52858
582e3d6a1e294f92d034b199fb37ea4f64db0e222c2d2cfc2b98d079c7c4377b
Analyzer Verdict Alert urlquery phishing Phishing - Microsoft
POST /3Gn9r/ HTTP/1.1
Host: growermetal.welcoming.com.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 1030
Origin: https://growermetal.welcoming.com.de
DNT: 1
Connection: keep-alive
Referer: https://growermetal.welcoming.com.de/3Gn9r/
Cookie: PHPSESSID=614bjn6esrmgfeqp13lo8dvqkk
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Sec-Fetch-User: ?1
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 02 Jul 2025 23:21:59 GMT
content-type: text/html; charset=UTF-8
server: cloudflare
x-powered-by: PHP/8.0.30
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
cf-cache-status: DYNAMIC
priority: u=1,i=?0
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=ybEyNdiGbuixW6MFt%2Ffuy6l49EPaH3D1%2BR0ox16N7StVNHrt%2B%2Fd%2BDXmk6aSSTwkFbcmrrp92ZaYlO9RjXQdu%2Fo3NyOfrMt%2Bcdk1R9myKMrmrNJKIfD%2FTO6xz"}]}
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
content-encoding: br
cf-ray: 9591e1ef3e6b569a-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
GET maxcdn.bootstrapcdn.com/bootstrap/4.0.0/js/bootstrap.min.js
104.18.11.207200 OK 49 kB URL GET maxcdn.bootstrapcdn.com/bootstrap/4.0.0/js/bootstrap.min.js
IP 104.18.11.207:443
Requested by https://growermetal.welcoming.com.de/3Gn9r/
Certificate IssuerGoogle Trust Services
Subjectbootstrapcdn.com
Fingerprint73:3E:54:5A:E7:0A:B5:3C:11:79:4A:9F:FE:64:7B:38:B7:15:03:C0
ValidityWed, 14 May 2025 02:01:13 GMT - Tue, 12 Aug 2025 03:00:50 GMT
File type JavaScript source, ASCII text, with very long lines (48664)
Hash 14d449eb8876fa55e1ef3c2cc52b0c17
a9545831803b1359cfeed47e3b4d6bae68e40e99
e7ed36ceee5450b4243bbc35188afabdfb4280c7c57597001de0ed167299b01b
GET /bootstrap/4.0.0/js/bootstrap.min.js HTTP/1.1
Host: maxcdn.bootstrapcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://growermetal.welcoming.com.de
DNT: 1
Connection: keep-alive
Referer: https://growermetal.welcoming.com.de/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 02 Jul 2025 23:21:59 GMT
content-type: application/javascript; charset=utf-8
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: DE
vary: Accept-Encoding
access-control-allow-origin: *
cache-control: public, max-age=31919000
content-encoding: br
etag: "14d449eb8876fa55e1ef3c2cc52b0c17"
last-modified: Mon, 25 Jan 2021 22:04:04 GMT
cdn-cachedat: 03/22/2025 12:19:15
cdn-proxyver: 1.22
cdn-requestpullcode: 200
cdn-requestpullsuccess: True
cdn-edgestorageid: 1048
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
cdn-status: 200
cdn-requesttime: 0
cdn-requestid: bab9f284db46ea1d4033726d2ce5372b
cdn-cache: HIT
cf-cache-status: HIT
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 9591e1f32fa956a3-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET growermetal.welcoming.com.de/favicon.ico
188.114.97.1404 Not Found 196 B URL GET growermetal.welcoming.com.de/favicon.ico
IP 188.114.97.1:443
Requested by https://growermetal.welcoming.com.de/3Gn9r/
Certificate IssuerGoogle Trust Services
Subjectwelcoming.com.de
FingerprintDC:AF:94:48:62:C5:43:45:A0:C7:44:12:17:66:B3:03:3E:FD:32:E2
ValidityMon, 30 Jun 2025 14:24:08 GMT - Sun, 28 Sep 2025 15:21:11 GMT
File type HTML document, ASCII text
Hash 62962daa1b19bbcc2db10b7bfd531ea6
d64bae91091eda6a7532ebec06aa70893b79e1f8
80c3fe2ae1062abf56456f52518bd670f9ec3917b7f85e152b347ac6b6faf880
Analyzer Verdict Alert urlquery phishing Phishing - Microsoft
GET /favicon.ico HTTP/1.1
Host: growermetal.welcoming.com.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://growermetal.welcoming.com.de/3Gn9r/
Cookie: PHPSESSID=614bjn6esrmgfeqp13lo8dvqkk
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 404 Not Found
date: Wed, 02 Jul 2025 23:22:01 GMT
content-type: text/html; charset=iso-8859-1
server: cloudflare
age: 16
cache-control: max-age=14400
cf-cache-status: HIT
priority: u=6,i=?0
vary: accept-encoding
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=euv5Fgnk98H%2FQgXLupJfD%2Fjjw8wG71EuT8yURQscImFhP2FquLLSUbj9%2BCHRVxbMDtrcSgacvQfcmtpb0OJnl7jWr6ruRZwZRPMaT%2Bp45tQk%2F0ruGzxu1NBd"}]}
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
content-encoding: br
cf-ray: 9591e1fc9992569a-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
GET aadcdn.msauth.net/shared/1.0/content/images/signin-options_4e48046ce74f4b89d45037c90576bfac.svg
13.107.246.53200 OK 1.6 kB URL GET aadcdn.msauth.net/shared/1.0/content/images/signin-options_4e48046ce74f4b89d45037c90576bfac.svg
IP 13.107.246.53:443
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://growermetal.welcoming.com.de/3Gn9r/
Certificate IssuerDigiCert Inc
Subjectaadcdn.msauth.net
Fingerprint38:05:DB:30:B5:83:1A:A0:A9:AD:24:B2:62:0F:E7:F6:60:9B:7C:00
ValidityTue, 29 Oct 2024 00:00:00 GMT - Wed, 29 Oct 2025 23:59:59 GMT
File type SVG Scalable Vector Graphics image
Hash 4e48046ce74f4b89d45037c90576bfac
4a41b3b51ed787f7b33294202da72220c7cd2c32
8e6db1634f1812d42516778fc890010aa57f3e39914fb4803df2c38abbf56d93
GET /shared/1.0/content/images/signin-options_4e48046ce74f4b89d45037c90576bfac.svg HTTP/1.1
Host: aadcdn.msauth.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://growermetal.welcoming.com.de/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 02 Jul 2025 23:22:06 GMT
content-type: image/svg+xml
content-length: 621
cache-control: public, max-age=31536000
content-encoding: gzip
last-modified: Tue, 10 Nov 2020 03:41:24 GMT
etag: 0x8D8852A7FA6B761
x-ms-request-id: 3f6762d1-601e-005a-21d1-e4d20e000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
access-control-allow-origin: *
x-azure-ref: 20250702T232206Z-17dfff74684r47xvhC1SVGm2uw00000017p0000000003erb
x-fd-int-roxy-purgeid: 4554691
x-cache: TCP_HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
GET growermetal.welcoming.com.de/3Gn9r/
188.114.97.1200 OK 2.7 kB URL User Request GET growermetal.welcoming.com.de/3Gn9r/
IP 188.114.97.1:443
Certificate IssuerGoogle Trust Services
Subjectwelcoming.com.de
FingerprintDC:AF:94:48:62:C5:43:45:A0:C7:44:12:17:66:B3:03:3E:FD:32:E2
ValidityMon, 30 Jun 2025 14:24:08 GMT - Sun, 28 Sep 2025 15:21:11 GMT
File type HTML document, Unicode text, UTF-8 text
Hash 4b1e8e8ac82379e59501b9941b5a01f0
d5ceda8865cc2f34437eaa02f93dbe0c5677496f
52fbc283f41e4b6b13c36fef4b3dca7a06f9651dacb14bdd57911e5427951225
Analyzer Verdict Alert urlquery phishing Phishing - Microsoft
GET /3Gn9r/ HTTP/1.1
Host: growermetal.welcoming.com.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 02 Jul 2025 23:21:44 GMT
content-type: text/html; charset=UTF-8
server: cloudflare
x-powered-by: PHP/8.0.30
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
cf-cache-status: DYNAMIC
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=JErr9fqWvR9nVNfrXhFn2Dze9Kpg6sXrlJlxDEA8QwHbAbodsjoJCv6bTBxVvD2vc5ExrJRBkxP6usSf4GXmtxLJIu2VQdHIopmwcMsNjpU438k2gDmnQb9b"}]}
content-encoding: br
set-cookie: PHPSESSID=614bjn6esrmgfeqp13lo8dvqkk; Path=/
cf-ray: 9591e1913ed7b4fa-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/pat/9591e19689f756c0/1751498505394/68c2554ba57fc452f35ee4ef0bb1342f1e2d11afac67a84a5760ce0cb3cbba7c/FJL-VO1uxUuydJ5
104.18.94.41401 Unauthorized 1 B URL GET challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/pat/9591e19689f756c0/1751498505394/68c2554ba57fc452f35ee4ef0bb1342f1e2d11afac67a84a5760ce0cb3cbba7c/FJL-VO1uxUuydJ5
IP 104.18.94.41:443
Requested by https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/enyax/0x4AAAAAABi-z0Ab5E58Y0qk/auto/fbE/new/normal/auto/
Certificate IssuerGoogle Trust Services
Subjectchallenges.cloudflare.com
FingerprintFC:98:AC:45:6F:F6:41:18:0B:96:F4:70:AB:D7:E3:D4:3D:B4:66:71
ValidityFri, 27 Jun 2025 18:18:48 GMT - Thu, 25 Sep 2025 19:18:44 GMT
File type very short file (no magic)
Hash ff44570aca8241914870afbc310cdb85
58668e7669fd564d99db5d581fcdb6a5618440b5
6da43b944e494e885e69af021f93c6d9331c78aa228084711429160a5bbd15b5
GET /cdn-cgi/challenge-platform/h/g/pat/9591e19689f756c0/1751498505394/68c2554ba57fc452f35ee4ef0bb1342f1e2d11afac67a84a5760ce0cb3cbba7c/FJL-VO1uxUuydJ5 HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/enyax/0x4AAAAAABi-z0Ab5E58Y0qk/auto/fbE/new/normal/auto/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 401 Unauthorized
date: Wed, 02 Jul 2025 23:21:48 GMT
content-type: text/plain; charset=utf-8
content-length: 1
www-authenticate: PrivateToken challenge="AAIAGXBhdC1pc3N1ZXIuY2xvdWRmbGFyZS5jb20gaMJVS6V_xFLzXuTvC7E0Lx4tEa-sZ6hKV2DODLPLunwAGWNoYWxsZW5nZXMuY2xvdWRmbGFyZS5jb20=", token-key="MIIBUjA9BgkqhkiG9w0BAQowMKANMAsGCWCGSAFlAwQCAqEaMBgGCSqGSIb3DQEBCDALBglghkgBZQMEAgKiAwIBMAOCAQ8AMIIBCgKCAQEAscjm_UO_k901rNdCKgLw5bvI4i6M_jDNCIXpfs2LRbtxwLOrUyplqVvML_hVlB5tIDMuj0ihhaOFHose-Y0_UjQnNUGE_vol46VvGgscTMtTjU4xINriap8AMTIygvljEBt6my-nBwkUGhY3U9v5iKC-eWR5bTfvrqFsuIVxafkSfhHqDXB4KLGNjvOOV71GGJ9x4yxA-C2OcULZ1uDDKuvAaMhuiWdF6OzSTXruP9yPg1vmuteavOW1re0YDbCbtK16PhHdSzWym7v_FrvId-2zf26j50FlTd_vl_DcKNDVCgWDoU0uX3cU6V3rSQoVXREEqPr-2ywSGru8ZuXRoQIDAQAB", max-age=20, PrivateToken challenge="AAIAHXNhdC5wYXQtaXNzdWVyLmNsb3VkZmxhcmUuY29tIGjCVUulf8RS817k7wuxNC8eLRGvrGeoSldgzgyzy7p8ABljaGFsbGVuZ2VzLmNsb3VkZmxhcmUuY29t", token-key="MIIBUjA9BgkqhkiG9w0BAQowMKANMAsGCWCGSAFlAwQCAqEaMBgGCSqGSIb3DQEBCDALBglghkgBZQMEAgKiAwIBMAOCAQ8AMIIBCgKCAQEAsLS4HBnLGydwK-bLQGRCaoyMsrXBRrDgQVmxS06j3UF0nYSd6GdTGCKIu1WV60eg-tJtTttfEVq7wHVQf4vzjYBidmCh88ebzxKv2GB6PESSodf5MsEup9xd5dxpkYScgL1CCJq89kRrOQ_CS61bvkL_oGyZf4ffqG5THgaOsopqj8dFLH6_SMy9yf8EgMYqpyjxfKsD-1_qb1m1DRjJEKPWKIGwmHXIKQJUqsxZFm4_Inwkxx7QMpVP4GyqlTxFVz7stWwJRSkMLHjEM_IWLUYfPhuwIUVqmRjGsY1n8flA1bRfxaWHNDxoi25-M2BKTP9NkNNJBbTKErhrZ9LGywIDAQAB", max-age=20, PrivateToken challenge="AAIALHBwLWlzc3Vlci1wcm9kdWN0aW9uLnJlc2VhcmNoLmNsb3VkZmxhcmUuY29tIGjCVUulf8RS817k7wuxNC8eLRGvrGeoSldgzgyzy7p8ABljaGFsbGVuZ2VzLmNsb3VkZmxhcmUuY29t", token-key="MIIBUjA9BgkqhkiG9w0BAQowMKANMAsGCWCGSAFlAwQCAqEaMBgGCSqGSIb3DQEBCDALBglghkgBZQMEAgKiAwIBMAOCAQ8AMIIBCgKCAQEArFBSpY0YPcNslVpklXsEb2gfZsCpmIVdQhoS4K7cHrhquWhyk4MLkyi7_s6aWrx_Xf7HlTYTdYhnNJYeSmBvNR-rT9Jr-vgHew2EKxCRkzFMKPiBFgHMw6CQNwFmH4vtDoB7QjzQGuScPRdzh7kPu8509ew2xkFnr9tjB-6n7HM01yE-AK-YLGAsO2pnr7E7uB1wVPOxxon_JAZ3bYOfTUgjOOdXlFNC8lcuocjbz6S74A95qx_Ud-iEvXXfOoBv5KLuG4xndLeZHQmGd8Zt7VxbSldzBAmsB7NLLExZxPD-x71RLAY9HVS2lcMOPbQ3diWMBwpfS95tytYOn-a5rwIDAQAB", max-age=20
priority: u=4,i=?0
server: cloudflare
cf-ray: 9591e1afcfe956c0-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
POST challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/flow/ov1/1364160261:1751494595:9jTvZehjRNzaGPzAsZZiXo_TWXqOJgwisDCbmLiTfjs/9591e19689f756c0/TthhP_h.O3r_I3V6wcxEy_NdNyk2_SlI3WpndY9Vtgs-1751498504-1.2.1.1-EtEBzsT.1VnzeMRPWvGdrYBXwuf6xx9CZmDwVSrO8ALo0SPmaoKOAsLlV_KWn3WY
104.18.94.41200 OK 5.0 kB URL POST challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/flow/ov1/1364160261:1751494595:9jTvZehjRNzaGPzAsZZiXo_TWXqOJgwisDCbmLiTfjs/9591e19689f756c0/TthhP_h.O3r_I3V6wcxEy_NdNyk2_SlI3WpndY9Vtgs-1751498504-1.2.1.1-EtEBzsT.1VnzeMRPWvGdrYBXwuf6xx9CZmDwVSrO8ALo0SPmaoKOAsLlV_KWn3WY
IP 104.18.94.41:443
Requested by https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/enyax/0x4AAAAAABi-z0Ab5E58Y0qk/auto/fbE/new/normal/auto/
Certificate IssuerGoogle Trust Services
Subjectchallenges.cloudflare.com
FingerprintFC:98:AC:45:6F:F6:41:18:0B:96:F4:70:AB:D7:E3:D4:3D:B4:66:71
ValidityFri, 27 Jun 2025 18:18:48 GMT - Thu, 25 Sep 2025 19:18:44 GMT
File type ASCII text, with very long lines (5024), with no line terminators
Hash 4f4ac836a7d1358f5d820b2c651c38bd
21d0295d607bcddd61fac7fa22365430b9bd9a49
7527585ff9148e448853b35630a1e1936d0f95a39c13918b8ac37900788b1179
POST /cdn-cgi/challenge-platform/h/g/flow/ov1/1364160261:1751494595:9jTvZehjRNzaGPzAsZZiXo_TWXqOJgwisDCbmLiTfjs/9591e19689f756c0/TthhP_h.O3r_I3V6wcxEy_NdNyk2_SlI3WpndY9Vtgs-1751498504-1.2.1.1-EtEBzsT.1VnzeMRPWvGdrYBXwuf6xx9CZmDwVSrO8ALo0SPmaoKOAsLlV_KWn3WY HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/enyax/0x4AAAAAABi-z0Ab5E58Y0qk/auto/fbE/new/normal/auto/
cf-chl: TthhP_h.O3r_I3V6wcxEy_NdNyk2_SlI3WpndY9Vtgs-1751498504-1.2.1.1-EtEBzsT.1VnzeMRPWvGdrYBXwuf6xx9CZmDwVSrO8ALo0SPmaoKOAsLlV_KWn3WY
cf-chl-ra: 0
Content-Type: text/plain;charset=UTF-8
Content-Length: 44450
Origin: https://challenges.cloudflare.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 02 Jul 2025 23:21:58 GMT
content-type: text/html; charset=UTF-8
cf-chl-out: FN8qwmtR0cLwV+vmo0NirvExtXUNnu3eZU3Dbvh6gFiHCEYBSSSYHISVvdo1ezALioDHOGHMb2whYaalb9stUw==$WjRjxn0kX5X68+NPpF9IFg==
cf-chl-out-s: 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$6604WGTeKKUOLNNcCigfbw==
priority: u=3,i=?0
server: cloudflare
cf-ray: 9591e1ee3edd56c0-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
GET code.jquery.com/jquery-3.2.1.slim.min.js
151.101.2.137200 OK 70 kB URL GET code.jquery.com/jquery-3.2.1.slim.min.js
IP 151.101.2.137:443
Requested by https://growermetal.welcoming.com.de/3Gn9r/
Certificate IssuerSectigo Limited
Subject*.jquery.com
Fingerprint56:36:FB:D3:E0:9E:71:88:98:A4:C9:34:94:9B:43:3A:C4:C5:1E:BE
ValidityThu, 12 Jun 2025 00:00:00 GMT - Fri, 26 Jun 2026 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (32012)
Hash 5f48fc77cac90c4778fa24ec9c57f37d
9e89d1515bc4c371b86f4cb1002fd8e377c1829f
9365920887b11b33a3dc4ba28a0f93951f200341263e3b9cefd384798e4be398
GET /jquery-3.2.1.slim.min.js HTTP/1.1
Host: code.jquery.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://growermetal.welcoming.com.de
DNT: 1
Connection: keep-alive
Referer: https://growermetal.welcoming.com.de/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Fri, 18 Oct 1991 12:00:00 GMT
etag: W/"28feccc0-10fdd"
cache-control: public, max-age=31536000, stale-while-revalidate=604800
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Wed, 02 Jul 2025 23:21:59 GMT
age: 1949937
x-served-by: cache-lga21963-LGA, cache-hel1410024-HEL
x-cache: HIT, HIT
x-cache-hits: 38, 6846
x-timer: S1751498520.737430,VS0,VE0
vary: Accept-Encoding
content-length: 23856
X-Firefox-Spdy: h2
GET cdnjs.cloudflare.com/ajax/libs/popper.js/1.12.9/umd/popper.min.js
104.17.24.14200 OK 19 kB URL GET cdnjs.cloudflare.com/ajax/libs/popper.js/1.12.9/umd/popper.min.js
IP 104.17.24.14:443
Requested by https://growermetal.welcoming.com.de/3Gn9r/
Certificate IssuerGoogle Trust Services
Subjectcdnjs.cloudflare.com
Fingerprint4B:06:E9:E2:47:47:F5:3C:33:58:F8:2A:95:70:22:5E:23:19:03:77
ValidityThu, 22 May 2025 14:38:44 GMT - Wed, 20 Aug 2025 15:38:38 GMT
File type JavaScript source, ASCII text, with very long lines (19015)
Hash 70d3fda195602fe8b75e0097eed74dde
c3b977aa4b8dfb69d651e07015031d385ded964b
a52f7aa54d7bcaafa056ee0a050262dfc5694ae28dee8b4cac3429af37ff0d66
GET /ajax/libs/popper.js/1.12.9/umd/popper.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://growermetal.welcoming.com.de
DNT: 1
Connection: keep-alive
Referer: https://growermetal.welcoming.com.de/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 02 Jul 2025 23:21:59 GMT
content-type: application/javascript; charset=utf-8
content-length: 6157
cf-ray: 9591e1f31c0e56be-OSL
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03fa9-4af4"
last-modified: Mon, 04 May 2020 16:15:37 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 1734175
expires: Mon, 22 Jun 2026 23:21:59 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=gHQg5L4VTLHL86vLCPyUsjNN8HoR%2FdW9lKWYL8ke3yul%2Fy7XgeNrkyQLHEC9t1F7mKA9UlNaKq5ppaX%2FiCB0SGFvXLSL8zk1M%2BZMVEH7kQemqBsysjLZ%2BcE12APlwyyHd0edXJ%2B1"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET aadcdn.msauth.net/ests/2.1/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico
13.107.246.53200 OK 17 kB URL GET aadcdn.msauth.net/ests/2.1/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico
IP 13.107.246.53:443
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://growermetal.welcoming.com.de/3Gn9r/
Certificate IssuerDigiCert Inc
Subjectaadcdn.msauth.net
Fingerprint38:05:DB:30:B5:83:1A:A0:A9:AD:24:B2:62:0F:E7:F6:60:9B:7C:00
ValidityTue, 29 Oct 2024 00:00:00 GMT - Wed, 29 Oct 2025 23:59:59 GMT
File type MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors
Hash 12e3dac858061d088023b2bd48e2fa96
e08ce1a144eceae0c3c2ea7a9d6fbc5658f24ce5
90cdaf487716184e4034000935c605d1633926d348116d198f355a98b8c6cd21
GET /ests/2.1/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico HTTP/1.1
Host: aadcdn.msauth.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://growermetal.welcoming.com.de/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 02 Jul 2025 23:22:06 GMT
content-type: image/x-icon
content-length: 17174
cache-control: public, max-age=604800
last-modified: Fri, 02 Nov 2018 20:25:25 GMT
etag: 0x8D6410152A9D7E1
x-ms-request-id: 98734eed-d01e-001a-4d68-eba289000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
access-control-allow-origin: *
x-azure-ref: 20250702T232206Z-17dfff74684r47xvhC1SVGm2uw00000017p0000000003erc
x-fd-int-roxy-purgeid: 4554691
x-cache: TCP_HIT
accept-ranges: bytes
X-Firefox-Spdy: h2