eats.sng.link/A99vk/mi87?_dl=ubereats://promo/apply?promoCode=PP25&_fallback_redirect=https://seasonsaleon.com/takeout/mix/IQNzM/b21hci5oYWVkb0BlbGFuLmluc3VyZQ==
23.73.2.90 178 B URL eats.sng.link/A99vk/mi87?_dl=ubereats://promo/apply?promoCode=PP25&_fallback_redirect=https://seasonsaleon.com/takeout/mix/IQNzM/b21hci5oYWVkb0BlbGFuLmluc3VyZQ==
IP 23.73.2.90:0
ASN #20940 Akamai International B.V.
File type HTML document, ASCII text
Hash 27ebcf8dc10790aaf8699a77222f0d78
b24188c574fa0cd5488fa36960d43dc70d007f63
a718f3e01ea90e4bec2f7871ef9aa09e4255c47f263e580fac194071e1bb17db
GET /A99vk/mi87?_dl=ubereats://promo/apply?promoCode=PP25&_fallback_redirect=https://seasonsaleon.com/takeout/mix/IQNzM/b21hci5oYWVkb0BlbGFuLmluc3VyZQ== HTTP/1.1
Host: eats.sng.link
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
content-type: text/html; charset=utf-8
content-length: 178
content-encoding: gzip
location: https://seasonsaleon.com/takeout/mix/IQNzM/b21hci5oYWVkb0BlbGFuLmluc3VyZQ==?referrer=singular_click_id%3D555618fc-519c-4a54-817b-d82fdabd6866
vary: Accept-Encoding
expires: Fri, 01 Dec 2023 20:17:59 GMT
cache-control: max-age=0, no-cache, no-store
pragma: no-cache
date: Fri, 01 Dec 2023 20:17:59 GMT
X-Firefox-Spdy: h2
seasonsaleon.com/takeout/mix/IQNzM/b21hci5oYWVkb0BlbGFuLmluc3VyZQ==?referrer=singular_click_id%3D555618fc-519c-4a54-817b-d82fdabd6866
173.208.131.82 20 B URL seasonsaleon.com/takeout/mix/IQNzM/b21hci5oYWVkb0BlbGFuLmluc3VyZQ==?referrer=singular_click_id%3D555618fc-519c-4a54-817b-d82fdabd6866
IP 173.208.131.82:0
File type gzip compressed data, from Unix\012- data
Hash 7029066c27ac6f5ef18d660d5741979a
46c6643f07aa7f6bfe7118de926b86defc5087c4
59869db34853933b239f1e2219cf7d431da006aa919635478511fabbfc8849d2
GET /takeout/mix/IQNzM/b21hci5oYWVkb0BlbGFuLmluc3VyZQ==?referrer=singular_click_id%3D555618fc-519c-4a54-817b-d82fdabd6866 HTTP/1.1
Host: seasonsaleon.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 01 Dec 2023 20:17:59 GMT
Server: Apache
refresh: 0;url=https://csaescvesaae.belclaire.co#omar.haedo@elan.insure
Content-Encoding: gzip
Vary: Accept-Encoding
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
bsrworks.net/yex/host2.4/admin/js/sc.php
199.204.248.120200 OK 1.8 kB URL GET HTTP/1.1 bsrworks.net/yex/host2.4/admin/js/sc.php
IP 199.204.248.120:443
Requested by https://csaescvesaae.belclaire.co/#omar.haedo@elan.insure
Certificate IssuerLet's Encrypt
Subjectwebdisk.bsrworks.net
Fingerprint43:CA:F6:6C:7D:07:4F:C0:DA:FC:61:E2:72:15:B7:35:7D:66:DB:AB
ValidityTue, 07 Nov 2023 19:56:38 GMT - Mon, 05 Feb 2024 19:56:37 GMT
File type ASCII text, with CRLF line terminators
Hash 2205593b132cd72ef7f1d6c0e9da12fb
f7062573896e7aa6c027c830a5c99709e5514cd7
658df3904168b46bdb3d5b11dd3b8932ed169eb01a3af2f09d5e46daa387715a
Analyzer Verdict Alert urlquery phishing Phishing - Microsoft Outlook
GET /yex/host2.4/admin/js/sc.php HTTP/1.1
Host: bsrworks.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://csaescvesaae.belclaire.co/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 01 Dec 2023 20:18:50 GMT
Server: Apache/2.4.52 (cPanel) OpenSSL/1.1.1m mod_bwlimited/1.4
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: true
Access-Control-Allow-Methods: GET, PUT, POST, DELETE, OPTIONS
Keep-Alive: timeout=30, max=100
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: application/javascript; charset=utf-8
csaescvesaae.belclaire.co/favicon.ico
172.67.176.149200 OK 14 kB URL GET HTTP/3 csaescvesaae.belclaire.co/favicon.ico
IP 172.67.176.149:443
Requested by https://csaescvesaae.belclaire.co/#omar.haedo@elan.insure
Certificate IssuerLet's Encrypt
Subjectcsaescvesaae.belclaire.co
FingerprintA5:60:5C:CC:86:9E:72:6E:7E:EC:71:E7:17:CB:33:A6:32:A8:6F:B2
ValidityWed, 29 Nov 2023 13:30:34 GMT - Tue, 27 Feb 2024 13:30:33 GMT
File type HTML document text\012- HTML document text\012- HTML document, ASCII text
Hash acc5cb623b29f6c409d3f4cafb18331a
ee3f67a76c62cba5a6d8de6e3ec0351e827555e6
3fe93ba27c780a33f5a8165f34064e4ecc8a00445b79dbaffb4bd65773ebe925
GET /favicon.ico HTTP/1.1
Host: csaescvesaae.belclaire.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://csaescvesaae.belclaire.co/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 01 Dec 2023 20:18:01 GMT
content-type: text/html; charset=utf-8
access-control-allow-origin: *
cache-control: public, max-age=14400, must-revalidate
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=5zujEs1kfUs6%2BKe8k%2B4nbm790f10IDSyU8b8scWcAbd%2BsulkVre%2FbviXF2OdWwXSgtO3TxpFwIwYYQiHO3WFIvUSYOwSyZxoJdJTrMpefOJDSFeswbDe8xEhJXVKlRzuUXm2mQ%2F95hw8R%2BfI"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
cf-cache-status: HIT
age: 4854
server: cloudflare
cf-ray: 82ee0456f853b515-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
code.jquery.com/jquery-3.1.1.min.js
151.101.66.137200 OK 30 kB URL GET HTTP/2 code.jquery.com/jquery-3.1.1.min.js
IP 151.101.66.137:443
Requested by https://csaescvesaae.belclaire.co/#omar.haedo@elan.insure
Certificate IssuerSectigo Limited
Subject*.jquery.com
FingerprintD2:19:0A:AD:CE:BB:9C:61:17:5D:29:4B:A2:54:E8:C6:91:B8:F9:8D
ValidityTue, 11 Jul 2023 00:00:00 GMT - Sun, 14 Jul 2024 23:59:59 GMT
File type ASCII text, with very long lines (32030)
Hash e071abda8fe61194711cfc2ab99fe104
f647a6d37dc4ca055ced3cf64bbc1f490070acba
85556761a8800d14ced8fcd41a6b8b26bf012d44a318866c0d81a62092efd9bf
GET /jquery-3.1.1.min.js HTTP/1.1
Host: code.jquery.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://csaescvesaae.belclaire.co/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Fri, 18 Oct 1991 12:00:00 GMT
etag: W/"28feccc0-152b5"
cache-control: public, max-age=31536000, stale-while-revalidate=604800
access-control-allow-origin: *
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Fri, 01 Dec 2023 20:18:04 GMT
age: 6661283
x-served-by: cache-lga21947-LGA, cache-bma1639-BMA
x-cache: HIT, HIT
x-cache-hits: 119, 113602
x-timer: S1701461885.676284,VS0,VE0
vary: Accept-Encoding
content-length: 30070
X-Firefox-Spdy: h2
csaescvesaae.belclaire.co/
172.67.176.149200 OK 1.3 kB URL User Request GET HTTP/2 csaescvesaae.belclaire.co/
IP 172.67.176.149:443
Certificate IssuerLet's Encrypt
Subjectcsaescvesaae.belclaire.co
FingerprintA5:60:5C:CC:86:9E:72:6E:7E:EC:71:E7:17:CB:33:A6:32:A8:6F:B2
ValidityWed, 29 Nov 2023 13:30:34 GMT - Tue, 27 Feb 2024 13:30:33 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (1322), with no line terminators
Hash d1d0d6bc394656c89992e45981967bce
ecd8f8e3a9774535d356b660ea273624d3337237
f1f487a3c47aa9337ba9706dc718721ff1f59bf1b27b60ea7445599e9213121f
GET / HTTP/1.1
Host: csaescvesaae.belclaire.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 01 Dec 2023 20:18:00 GMT
content-type: text/html; charset=utf-8
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=UzDhkjfPaqGqJgl1SHz8p%2FAWeoHsUMtKbeQd7vQ%2FzsCHjC5e7IpnC7QgEgLHibGHaF57xog9DeHThoZ4W1WKNJevqmruiBkB8mzVBChMxcLcfMZHss35Iin97q9Bm%2FYaGj7s%2FTS%2FH3TmRyKM"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 82ee044e8d0bb4ff-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
csaescvesaae.belclaire.co/cdn-cgi/challenge-platform/scripts/jsd/main.js
172.67.176.149302 Found 7.4 kB URL GET HTTP/3 csaescvesaae.belclaire.co/cdn-cgi/challenge-platform/scripts/jsd/main.js
IP 172.67.176.149:443
Requested by https://csaescvesaae.belclaire.co/#omar.haedo@elan.insure
Certificate IssuerLet's Encrypt
Subjectcsaescvesaae.belclaire.co
FingerprintA5:60:5C:CC:86:9E:72:6E:7E:EC:71:E7:17:CB:33:A6:32:A8:6F:B2
ValidityWed, 29 Nov 2023 13:30:34 GMT - Tue, 27 Feb 2024 13:30:33 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /cdn-cgi/challenge-platform/scripts/jsd/main.js HTTP/1.1
Host: csaescvesaae.belclaire.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 302 Found
date: Fri, 01 Dec 2023 20:18:04 GMT
vary: accept-encoding
cache-control: max-age=300, public
location: /cdn-cgi/challenge-platform/h/b/scripts/jsd/56d3063b/main.js
access-control-allow-origin: *
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=hENRkjw36tCWLqHo4%2FGRiKMEkc24Z8gHgMMJPIXna%2FQjAY%2Fbf4yHVXrurLMZ1JbsGRm%2By%2Fa%2F9hn0MtkbJ3TCvNXWg2M%2B4SzFCQ9ndDnTt7dH8BqcrgDmS9%2Ba%2FFPWShIh2ac4pBajdNtEJ60v"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 82ee046af9c4b515-OSL
alt-svc: h3=":443"; ma=86400
csaescvesaae.belclaire.co/cdn-cgi/challenge-platform/h/b/scripts/jsd/56d3063b/main.js
172.67.176.149200 OK 7.4 kB URL GET HTTP/3 csaescvesaae.belclaire.co/cdn-cgi/challenge-platform/h/b/scripts/jsd/56d3063b/main.js
IP 172.67.176.149:443
Requested by https://csaescvesaae.belclaire.co/#omar.haedo@elan.insure
Certificate IssuerLet's Encrypt
Subjectcsaescvesaae.belclaire.co
FingerprintA5:60:5C:CC:86:9E:72:6E:7E:EC:71:E7:17:CB:33:A6:32:A8:6F:B2
ValidityWed, 29 Nov 2023 13:30:34 GMT - Tue, 27 Feb 2024 13:30:33 GMT
File type ASCII text, with very long lines (7382), with no line terminators
Hash 02c905b841cef9f3814694c61e8ff553
34aade4cbbd636e6d5f452e2d03336c7c2c874b7
0e939a4b1abe0cb43ecf54c26440ec0a753e8ce731528f0a6e746f6c6f14fe55
GET /cdn-cgi/challenge-platform/h/b/scripts/jsd/56d3063b/main.js HTTP/1.1
Host: csaescvesaae.belclaire.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 01 Dec 2023 20:18:04 GMT
content-type: application/javascript; charset=UTF-8
x-content-type-options: nosniff
cache-control: max-age=14400, public
vary: accept-encoding
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=qeAAOqxlwYqzpLHoq3GNQ8%2BGQqJnbLmQmGckXHhKvTKaCUOBwxbE6ZhMxn4%2Fr1%2BYzaY64NMUPvWaHJSOxjd2zQ7c45q%2FwF%2BJl5pd7%2FlXD1cbCcbwG1UPboPZi0MWpsBPnPEeGDTZHI5dJBnw"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 82ee046b39f3b515-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
cdnjs.cloudflare.com/ajax/libs/crypto-js/4.0.0/crypto-js.min.js
104.17.24.14200 OK 48 kB URL GET HTTP/2 cdnjs.cloudflare.com/ajax/libs/crypto-js/4.0.0/crypto-js.min.js
IP 104.17.24.14:443
Requested by https://csaescvesaae.belclaire.co/#omar.haedo@elan.insure
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint7A:EA:B9:09:71:70:6C:87:C9:D3:82:74:8A:7B:B4:60:E5:40:2D:8D
ValidityMon, 03 Jul 2023 00:00:00 GMT - Tue, 02 Jul 2024 23:59:59 GMT
File type ASCII text, with very long lines (47992), with no line terminators
Hash cf3402d7483b127ded4069d651ea4a22
bde186152457cacf9c35477b5bdda5bcb56b1f45
eab5d90a71736f267af39fdf32caa8c71673fd06703279b01e0f92b0d7be0bfc
GET /ajax/libs/crypto-js/4.0.0/crypto-js.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://csaescvesaae.belclaire.co/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 01 Dec 2023 20:18:04 GMT
content-type: application/javascript; charset=utf-8
content-length: 14107
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03e2d-bb78"
last-modified: Mon, 04 May 2020 16:09:17 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 744379
expires: Wed, 20 Nov 2024 20:18:04 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=3b%2FF9RtTvg82gnyfE6BC3ioAGJw8SkswrjHUgZt3kKgCNwhLTPx%2FsFdt8Rznq2TpN50TOLfbbTaJOYJuLNZru0aPeeVMLjwpMKPvfAIQktHPW4Pcasjz9ls45HYVCwQutG1yxCD8"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 82ee046aeb5656c3-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
csaescvesaae.belclaire.co/cdn-cgi/challenge-platform/h/b/jsd/r/82ee044e8d0bb4ff
172.67.176.149200 OK 0 B URL POST HTTP/3 csaescvesaae.belclaire.co/cdn-cgi/challenge-platform/h/b/jsd/r/82ee044e8d0bb4ff
IP 172.67.176.149:443
Requested by https://csaescvesaae.belclaire.co/#omar.haedo@elan.insure
Certificate IssuerLet's Encrypt
Subjectcsaescvesaae.belclaire.co
FingerprintA5:60:5C:CC:86:9E:72:6E:7E:EC:71:E7:17:CB:33:A6:32:A8:6F:B2
ValidityWed, 29 Nov 2023 13:30:34 GMT - Tue, 27 Feb 2024 13:30:33 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /cdn-cgi/challenge-platform/h/b/jsd/r/82ee044e8d0bb4ff HTTP/1.1
Host: csaescvesaae.belclaire.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 12229
Origin: https://csaescvesaae.belclaire.co
DNT: 1
Connection: keep-alive
Referer: https://csaescvesaae.belclaire.co/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 01 Dec 2023 20:18:04 GMT
content-type: text/plain; charset=UTF-8
set-cookie: cf_clearance=ChXySHvOAiTaXCZpfzkzPj3d6fbcWSR7RbuKwJ_tz3E-1701461884-0-1-730ca2d2.73a07051.5b213570-0.2.1701461884; path=/; expires=Sat, 30-Nov-24 20:18:04 GMT; domain=.belclaire.co; HttpOnly; Secure; SameSite=None
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=1v30I5K1cYJWLvkLrA57CWFYurM4p2Zm9N1dhjDSeKFmrDiKUx7fktb6UwX3IrqXlVdKYOn6WXhBsUUWtEAhlkDrDIuJQuM5jFco9ardxt%2Fxv4p%2FKlQEkbXgieEDfjElYePXKX8jFULVcRv9"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 82ee046c3addb515-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
bsrworks.net/yex/host2.4/6125725.php
0.0.0.0 0 B URL POST bsrworks.net/yex/host2.4/6125725.php
IP 0.0.0.0:0
Requested by https://csaescvesaae.belclaire.co/#omar.haedo@elan.insure
Certificate IssuerLet's Encrypt
Subjectwebdisk.bsrworks.net
Fingerprint43:CA:F6:6C:7D:07:4F:C0:DA:FC:61:E2:72:15:B7:35:7D:66:DB:AB
ValidityTue, 07 Nov 2023 19:56:38 GMT - Mon, 05 Feb 2024 19:56:37 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /yex/host2.4/6125725.php HTTP/1.1
Host: bsrworks.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://csaescvesaae.belclaire.co/
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
Content-Length: 16
Origin: https://csaescvesaae.belclaire.co
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache