www.google.ae/url?q=38pQvvq6xRyj7Y00xDjnlx9kIHOSozurMOiaAkImPuQJnOIWtJjqJLi6stjtDz3yh&rct=tTPSrMOiaAkImPuQJnOIWtJjqJLi6stjtFX08pQvvq6xRyj7Y00xDjnlx9kIjusucT&sa=t&url=amp/unclecosmosattic.com/4d2e848d/3710351157/eXVuYS5tYXJ0aW5AY2hlY2ttYXJ4LmNvbQ==
142.250.74.99302 Found 300 B URL www.google.ae/url?q=38pQvvq6xRyj7Y00xDjnlx9kIHOSozurMOiaAkImPuQJnOIWtJjqJLi6stjtDz3yh&rct=tTPSrMOiaAkImPuQJnOIWtJjqJLi6stjtFX08pQvvq6xRyj7Y00xDjnlx9kIjusucT&sa=t&url=amp/unclecosmosattic.com/4d2e848d/3710351157/eXVuYS5tYXJ0aW5AY2hlY2ttYXJ4LmNvbQ==
IP 142.250.74.99:0
File type HTML document, ASCII text, with CRLF, LF line terminators
Hash 220b6598aaa9e62d31a7951baf0f78c1
79274259d78da9b63fa5879de5c4ad225c691eb9
d5377d7392d5bda783af6202d19cd6535a644c576301855d92ceb1c6b56de66b
GET /url?q=38pQvvq6xRyj7Y00xDjnlx9kIHOSozurMOiaAkImPuQJnOIWtJjqJLi6stjtDz3yh&rct=tTPSrMOiaAkImPuQJnOIWtJjqJLi6stjtFX08pQvvq6xRyj7Y00xDjnlx9kIjusucT&sa=t&url=amp/unclecosmosattic.com/4d2e848d/3710351157/eXVuYS5tYXJ0aW5AY2hlY2ttYXJ4LmNvbQ== HTTP/1.1
Host: www.google.ae
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Cookie: SOCS=CAESHAgBEhJnd3NfMjAyMjA5MjktMF9SQzEaAnJvIAEaBgiAkvOZBg
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
location: https://www.google.ae/amp/unclecosmosattic.com/4d2e848d/3710351157/eXVuYS5tYXJ0aW5AY2hlY2ttYXJ4LmNvbQ==
cache-control: private
content-type: text/html; charset=UTF-8
strict-transport-security: max-age=31536000
content-security-policy: object-src 'none';base-uri 'self';script-src 'nonce-eg9FolFr3FfamZhr6Qc90w' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other
p3p: CP="This is not a P3P policy! See g.co/p3phelp for more info."
date: Tue, 29 Oct 2024 17:58:42 GMT
server: gws
content-length: 300
x-xss-protection: 0
set-cookie: __Secure-ENID=23.SE=eSxTTZBNM_A2KyJAmwraGBwxbXkhZHR8MsXW5VYng1g8ZP0uCt-zXlvv-KYFqOB5EWR7wsZJACmQQgTlyLTZFgzzDoRTMRt0cHJQ1BbB0JpfEWnbZY8Lc1kU2PJpvRx40uk1nXwrWtQFx8hLG8APm1XEBYDijOkoOCl7VrOtE5KxaX0_Hf3mvV9s_txKqu5nOxmDr2B1oFy173VmfppjB8dSOu8uRplUT7LeR9M; expires=Sat, 29-Nov-2025 10:16:59 GMT; path=/; domain=.google.ae; Secure; HttpOnly; SameSite=lax
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.google.ae/amp/unclecosmosattic.com/4d2e848d/3710351157/eXVuYS5tYXJ0aW5AY2hlY2ttYXJ4LmNvbQ==
142.250.74.99302 Found 281 B URL www.google.ae/amp/unclecosmosattic.com/4d2e848d/3710351157/eXVuYS5tYXJ0aW5AY2hlY2ttYXJ4LmNvbQ==
IP 142.250.74.99:0
File type HTML document, ASCII text, with CRLF, LF line terminators
Hash 71f83732d506bc8a6db6b1eaef051fd7
1384dfa2a6e7776311b0b76aedcb8f666cb341c1
41b1cb544e2692bb1b4537343b87c9dfc5e27a30f4bf84e738d26ddd97d89c09
GET /amp/unclecosmosattic.com/4d2e848d/3710351157/eXVuYS5tYXJ0aW5AY2hlY2ttYXJ4LmNvbQ== HTTP/1.1
Host: www.google.ae
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: SOCS=CAESHAgBEhJnd3NfMjAyMjA5MjktMF9SQzEaAnJvIAEaBgiAkvOZBg; __Secure-ENID=23.SE=eSxTTZBNM_A2KyJAmwraGBwxbXkhZHR8MsXW5VYng1g8ZP0uCt-zXlvv-KYFqOB5EWR7wsZJACmQQgTlyLTZFgzzDoRTMRt0cHJQ1BbB0JpfEWnbZY8Lc1kU2PJpvRx40uk1nXwrWtQFx8hLG8APm1XEBYDijOkoOCl7VrOtE5KxaX0_Hf3mvV9s_txKqu5nOxmDr2B1oFy173VmfppjB8dSOu8uRplUT7LeR9M
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 302 Found
location: http://unclecosmosattic.com/4d2e848d/3710351157/eXVuYS5tYXJ0aW5AY2hlY2ttYXJ4LmNvbQ==
cache-control: private
x-robots-tag: noindex
content-type: text/html; charset=UTF-8
content-security-policy: object-src 'none';base-uri 'self';script-src 'nonce-TlNoD-sHaK9I1NnEfUshEw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/fff
cross-origin-opener-policy: same-origin-allow-popups; report-to="gws"
report-to: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/fff"}]}
date: Tue, 29 Oct 2024 17:58:42 GMT
server: gws
content-length: 281
x-xss-protection: 0
x-frame-options: SAMEORIGIN
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
unclecosmosattic.com/4d2e848d/3710351157/eXVuYS5tYXJ0aW5AY2hlY2ttYXJ4LmNvbQ==
143.95.237.27200 OK 0 B URL unclecosmosattic.com/4d2e848d/3710351157/eXVuYS5tYXJ0aW5AY2hlY2ttYXJ4LmNvbQ==
IP 143.95.237.27:0
ASN #46606 UNIFIEDLAYER-AS-1
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /4d2e848d/3710351157/eXVuYS5tYXJ0aW5AY2hlY2ttYXJ4LmNvbQ== HTTP/1.1
Host: unclecosmosattic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 29 Oct 2024 17:58:42 GMT
Server: Apache
refresh: 0;url=https://astronomy.radjobsoc.com/E5nT/#Dyuna.martin@checkmarx.com
Upgrade: h2,h2c
Connection: Upgrade, Keep-Alive
Content-Length: 0
Keep-Alive: timeout=5, max=75
Content-Type: text/html; charset=UTF-8
GET cdnjs.cloudflare.com/ajax/libs/crypto-js/4.1.1/crypto-js.min.js
104.17.24.14200 OK 14 kB URL GET HTTP/2 cdnjs.cloudflare.com/ajax/libs/crypto-js/4.1.1/crypto-js.min.js
IP 104.17.24.14:443
Requested by https://astronomy.radjobsoc.com/E5nT/#Dyuna.martin@checkmarx.com
Certificate IssuerGoogle Trust Services
Subjectcdnjs.cloudflare.com
FingerprintE6:47:BB:06:9C:32:48:7E:A6:0A:4B:62:53:7B:F0:35:5D:A9:A3:8A
ValiditySat, 28 Sep 2024 05:35:05 GMT - Fri, 27 Dec 2024 05:35:04 GMT
File type JavaScript source, ASCII text, with very long lines (48316), with no line terminators
Hash 2ca03ad87885ab983541092b87adb299
1a17f60bf776a8c468a185c1e8e985c41a50dc27
8e3b0117f4df4be452c0b6af5b8f0a0acf9d4ade23d08d55d7e312af22077762
GET /ajax/libs/crypto-js/4.1.1/crypto-js.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://astronomy.radjobsoc.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 29 Oct 2024 17:58:44 GMT
content-type: application/javascript; charset=utf-8
content-length: 13972
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "61182885-3694"
last-modified: Sat, 14 Aug 2021 20:33:09 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 426796
expires: Sun, 19 Oct 2025 17:58:44 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=kigKAAFAmG5JQqEQDtTtEPNBFx1a6SS%2FX2OaWBIMJzvsUTX5o7E1SjPLfvoOupRAr3%2BeeUopuX5qfsb8%2BULJRLwQA2242oga9AV2FdqVy78%2BYvk0qo9yUrlZgyvdHBKFmz0bVM0J"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 8da50e2d3c0aca5c-HAM
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET challenges.cloudflare.com/turnstile/v0/api.js?render=explicit
104.18.94.41302 Found 0 B URL GET HTTP/2 challenges.cloudflare.com/turnstile/v0/api.js?render=explicit
IP 104.18.94.41:443
Requested by https://astronomy.radjobsoc.com/E5nT/#Dyuna.martin@checkmarx.com
Certificate IssuerGoogle Trust Services
Subjectchallenges.cloudflare.com
Fingerprint65:75:A9:DF:EC:98:9B:14:E5:F1:43:E6:B9:E2:E3:9C:50:C4:E8:A4
ValidityThu, 05 Sep 2024 16:26:55 GMT - Wed, 04 Dec 2024 17:26:54 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /turnstile/v0/api.js?render=explicit HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://astronomy.radjobsoc.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
date: Tue, 29 Oct 2024 17:58:44 GMT
content-length: 0
access-control-allow-origin: *
cache-control: max-age=300, stale-if-error=10800, stale-while-revalidate=300, public
cross-origin-resource-policy: cross-origin
location: /turnstile/v0/g/f2bbd6738e15/api.js
vary: Accept-Encoding
server: cloudflare
cf-ray: 8da50e2d4ca46a61-HAM
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET code.jquery.com/jquery-3.6.0.min.js
151.101.2.137200 OK 31 kB URL GET HTTP/2 code.jquery.com/jquery-3.6.0.min.js
IP 151.101.2.137:443
Requested by https://astronomy.radjobsoc.com/E5nT/#Dyuna.martin@checkmarx.com
Certificate IssuerSectigo Limited
Subject*.jquery.com
FingerprintCD:B5:6E:05:85:0C:5A:AE:47:12:80:2A:5B:C6:E5:8F:11:72:E2:B5
ValidityTue, 25 Jun 2024 00:00:00 GMT - Wed, 25 Jun 2025 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (65447)
Hash 8fb8fee4fcc3cc86ff6c724154c49c42
b82d238d4e31fdf618bae8ac11a6c812c03dd0d4
ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e
GET /jquery-3.6.0.min.js HTTP/1.1
Host: code.jquery.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://astronomy.radjobsoc.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Fri, 18 Oct 1991 12:00:00 GMT
etag: W/"28feccc0-15d9d"
cache-control: public, max-age=31536000, stale-while-revalidate=604800
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Tue, 29 Oct 2024 17:58:44 GMT
age: 1241610
x-served-by: cache-lga21931-LGA, cache-hel1410024-HEL
x-cache: HIT, HIT
x-cache-hits: 71, 386335
x-timer: S1730224724.065455,VS0,VE0
vary: Accept-Encoding
content-length: 30875
X-Firefox-Spdy: h2
GET challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/cmg/1
104.18.94.41200 OK 61 B URL GET HTTP/3 challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/cmg/1
IP 104.18.94.41:443
Requested by https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/vynit/0x4AAAAAAAktVIf1mhdRw6LA/auto/fbE/normal/auto/
Certificate IssuerGoogle Trust Services
Subjectchallenges.cloudflare.com
Fingerprint65:75:A9:DF:EC:98:9B:14:E5:F1:43:E6:B9:E2:E3:9C:50:C4:E8:A4
ValidityThu, 05 Sep 2024 16:26:55 GMT - Wed, 04 Dec 2024 17:26:54 GMT
File type PNG image data, 2 x 2, 8-bit/color RGB, non-interlaced
Hash 9246cca8fc3c00f50035f28e9f6b7f7d
3aa538440f70873b574f40cd793060f53ec17a5d
c07d7d29e3c20fa6ca4c5d20663688d52bad13e129ad82ce06b80eb187d9dc84
GET /cdn-cgi/challenge-platform/h/g/cmg/1 HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/vynit/0x4AAAAAAAktVIf1mhdRw6LA/auto/fbE/normal/auto/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 29 Oct 2024 17:58:44 GMT
content-type: image/png
content-length: 61
cache-control: max-age=2629800, public
server: cloudflare
cf-ray: 8da50e2fca386a69-HAM
alt-svc: h3=":443"; ma=86400
GET challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/pat/8da50e2f09c06a69/1730224724740/8eaf165c480d566e8ea2c97af601d21350fde0d07272e975661590af352aed6f/wTHG_NYuw9tv_cn
104.18.94.41401 Unauthorized 1 B URL GET HTTP/3 challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/pat/8da50e2f09c06a69/1730224724740/8eaf165c480d566e8ea2c97af601d21350fde0d07272e975661590af352aed6f/wTHG_NYuw9tv_cn
IP 104.18.94.41:443
Requested by https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/vynit/0x4AAAAAAAktVIf1mhdRw6LA/auto/fbE/normal/auto/
Certificate IssuerGoogle Trust Services
Subjectchallenges.cloudflare.com
Fingerprint65:75:A9:DF:EC:98:9B:14:E5:F1:43:E6:B9:E2:E3:9C:50:C4:E8:A4
ValidityThu, 05 Sep 2024 16:26:55 GMT - Wed, 04 Dec 2024 17:26:54 GMT
File type very short file (no magic)
Hash ff44570aca8241914870afbc310cdb85
58668e7669fd564d99db5d581fcdb6a5618440b5
6da43b944e494e885e69af021f93c6d9331c78aa228084711429160a5bbd15b5
GET /cdn-cgi/challenge-platform/h/g/pat/8da50e2f09c06a69/1730224724740/8eaf165c480d566e8ea2c97af601d21350fde0d07272e975661590af352aed6f/wTHG_NYuw9tv_cn HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/vynit/0x4AAAAAAAktVIf1mhdRw6LA/auto/fbE/normal/auto/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 401 Unauthorized
date: Tue, 29 Oct 2024 17:58:46 GMT
content-type: text/plain; charset=UTF-8
content-length: 1
www-authenticate: PrivateToken challenge="AAIAGXBhdC1pc3N1ZXIuY2xvdWRmbGFyZS5jb20gjq8WXEgNVm6Oosl69gHSE1D94NBycul1ZhWQrzUq7W8AGWNoYWxsZW5nZXMuY2xvdWRmbGFyZS5jb20=", token-key="MIIBUjA9BgkqhkiG9w0BAQowMKANMAsGCWCGSAFlAwQCAqEaMBgGCSqGSIb3DQEBCDALBglghkgBZQMEAgKiAwIBMAOCAQ8AMIIBCgKCAQEAscjm_UO_k901rNdCKgLw5bvI4i6M_jDNCIXpfs2LRbtxwLOrUyplqVvML_hVlB5tIDMuj0ihhaOFHose-Y0_UjQnNUGE_vol46VvGgscTMtTjU4xINriap8AMTIygvljEBt6my-nBwkUGhY3U9v5iKC-eWR5bTfvrqFsuIVxafkSfhHqDXB4KLGNjvOOV71GGJ9x4yxA-C2OcULZ1uDDKuvAaMhuiWdF6OzSTXruP9yPg1vmuteavOW1re0YDbCbtK16PhHdSzWym7v_FrvId-2zf26j50FlTd_vl_DcKNDVCgWDoU0uX3cU6V3rSQoVXREEqPr-2ywSGru8ZuXRoQIDAQAB", max-age=20, PrivateToken challenge="AAIAHXNhdC5wYXQtaXNzdWVyLmNsb3VkZmxhcmUuY29tII6vFlxIDVZujqLJevYB0hNQ_eDQcnLpdWYVkK81Ku1vABljaGFsbGVuZ2VzLmNsb3VkZmxhcmUuY29t", token-key="MIIBUjA9BgkqhkiG9w0BAQowMKANMAsGCWCGSAFlAwQCAqEaMBgGCSqGSIb3DQEBCDALBglghkgBZQMEAgKiAwIBMAOCAQ8AMIIBCgKCAQEAsLS4HBnLGydwK-bLQGRCaoyMsrXBRrDgQVmxS06j3UF0nYSd6GdTGCKIu1WV60eg-tJtTttfEVq7wHVQf4vzjYBidmCh88ebzxKv2GB6PESSodf5MsEup9xd5dxpkYScgL1CCJq89kRrOQ_CS61bvkL_oGyZf4ffqG5THgaOsopqj8dFLH6_SMy9yf8EgMYqpyjxfKsD-1_qb1m1DRjJEKPWKIGwmHXIKQJUqsxZFm4_Inwkxx7QMpVP4GyqlTxFVz7stWwJRSkMLHjEM_IWLUYfPhuwIUVqmRjGsY1n8flA1bRfxaWHNDxoi25-M2BKTP9NkNNJBbTKErhrZ9LGywIDAQAB", max-age=20, PrivateToken challenge="AAIALHBwLWlzc3Vlci1wcm9kdWN0aW9uLnJlc2VhcmNoLmNsb3VkZmxhcmUuY29tII6vFlxIDVZujqLJevYB0hNQ_eDQcnLpdWYVkK81Ku1vABljaGFsbGVuZ2VzLmNsb3VkZmxhcmUuY29t", token-key="MIIBUjA9BgkqhkiG9w0BAQowMKANMAsGCWCGSAFlAwQCAqEaMBgGCSqGSIb3DQEBCDALBglghkgBZQMEAgKiAwIBMAOCAQ8AMIIBCgKCAQEAwOXxuf_YfH60WXLdHNNMi668yTzkAIuksAL2v5Hmho3odFuawAT0cyief1oGo8EaTM_mzmbWK1XdowTDWz2k8-mVmWsgyW3NdrIQwZo-pqOoSiMOVVjpDsnwZmGR_SeoYczHldSUjidO3m4djRGeWR4Iv7sZ131HRg8MZGc0BLoTAJ8WLryDVz1Kp_D_qSxsI1b5cap8Y1yGShRIAZ1O6b3zuooeDoLh9q098fsCdlZbnGh28gTNXgdkiFt_yjyaf5upGTHXcizT4TWTDdmvgSNE19n7ahXuj-_GH_XzP42QLUomcuqNEhu5wSj7XNnyRFURH19l6_sLROivytIY2wIDAQAB", max-age=20
server: cloudflare
cf-ray: 8da50e3e4d606a69-HAM
alt-svc: h3=":443"; ma=86400
GET challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/i/8da50e2f09c06a69/1730224724741/Oy2MMQk_qu_0XmN
104.18.94.41200 OK 61 B URL GET HTTP/3 challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/i/8da50e2f09c06a69/1730224724741/Oy2MMQk_qu_0XmN
IP 104.18.94.41:443
Requested by https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/vynit/0x4AAAAAAAktVIf1mhdRw6LA/auto/fbE/normal/auto/
Certificate IssuerGoogle Trust Services
Subjectchallenges.cloudflare.com
Fingerprint65:75:A9:DF:EC:98:9B:14:E5:F1:43:E6:B9:E2:E3:9C:50:C4:E8:A4
ValidityThu, 05 Sep 2024 16:26:55 GMT - Wed, 04 Dec 2024 17:26:54 GMT
File type PNG image data, 98 x 85, 8-bit/color RGB, non-interlaced
Hash f5e916339163d60e1ed658e517794f00
67527c18dbfa3e5ab7389f30acc813c6f799e08c
fbf844f131147029a117415dacdb312aa1a48027380dbcf6e36a146a939cc193
GET /cdn-cgi/challenge-platform/h/g/i/8da50e2f09c06a69/1730224724741/Oy2MMQk_qu_0XmN HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/vynit/0x4AAAAAAAktVIf1mhdRw6LA/auto/fbE/normal/auto/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 29 Oct 2024 17:58:46 GMT
content-type: image/png
content-length: 61
server: cloudflare
cf-ray: 8da50e3e8d8d6a69-HAM
alt-svc: h3=":443"; ma=86400
POST challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/flow/ov1/765729660:1730223466:wnwA9Op_y0e06RJ3EjugvUEf66-A9bkbXvEiDCFBs4Y/8da50e2f09c06a69/9kneg.VlCG3If2T8Qjhi.ifP5d1aoT72WOYTYzJzzP0-1730224724-1.1.1.1-o9Z85h9hktCl4_pbBRz6HXbBTy9K2AgtPkefXTtwz7ny0qTtK8gCdz2Wpvz3VnNa
104.18.94.41200 OK 26 kB URL POST HTTP/3 challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/flow/ov1/765729660:1730223466:wnwA9Op_y0e06RJ3EjugvUEf66-A9bkbXvEiDCFBs4Y/8da50e2f09c06a69/9kneg.VlCG3If2T8Qjhi.ifP5d1aoT72WOYTYzJzzP0-1730224724-1.1.1.1-o9Z85h9hktCl4_pbBRz6HXbBTy9K2AgtPkefXTtwz7ny0qTtK8gCdz2Wpvz3VnNa
IP 104.18.94.41:443
Requested by https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/vynit/0x4AAAAAAAktVIf1mhdRw6LA/auto/fbE/normal/auto/
Certificate IssuerGoogle Trust Services
Subjectchallenges.cloudflare.com
Fingerprint65:75:A9:DF:EC:98:9B:14:E5:F1:43:E6:B9:E2:E3:9C:50:C4:E8:A4
ValidityThu, 05 Sep 2024 16:26:55 GMT - Wed, 04 Dec 2024 17:26:54 GMT
File type ASCII text, with very long lines (26336), with no line terminators
Hash cfe7357f3519eb8c81c643e8328b2428
e60de6cd1710cc20bfce8509dcb70fb9aa173f23
a7e0d3d6fec04a55c86105a9ccb086c928b8e395faaa84ca7a45ee8c001ca92f
POST /cdn-cgi/challenge-platform/h/g/flow/ov1/765729660:1730223466:wnwA9Op_y0e06RJ3EjugvUEf66-A9bkbXvEiDCFBs4Y/8da50e2f09c06a69/9kneg.VlCG3If2T8Qjhi.ifP5d1aoT72WOYTYzJzzP0-1730224724-1.1.1.1-o9Z85h9hktCl4_pbBRz6HXbBTy9K2AgtPkefXTtwz7ny0qTtK8gCdz2Wpvz3VnNa HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/vynit/0x4AAAAAAAktVIf1mhdRw6LA/auto/fbE/normal/auto/
Content-type: application/x-www-form-urlencoded
CF-Challenge: 9kneg.VlCG3If2T8Qjhi.ifP5d1aoT72WOYTYzJzzP0-1730224724-1.1.1.1-o9Z85h9hktCl4_pbBRz6HXbBTy9K2AgtPkefXTtwz7ny0qTtK8gCdz2Wpvz3VnNa
Content-Length: 28011
Origin: https://challenges.cloudflare.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 29 Oct 2024 17:58:47 GMT
content-type: text/plain; charset=UTF-8
cf-chl-gen: QqHL/RQ3rgyHaN7TH6VigJG2lhRwRF4ezCT4Sym0PLyg50X/B8xHa4N5qcqDDMIx9/52rWckt/aQtE9i$zlDUPF5WptnioKGu
server: cloudflare
cf-ray: 8da50e3f7e186a69-HAM
content-encoding: br
alt-svc: h3=":443"; ma=86400
GET challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/vynit/0x4AAAAAAAktVIf1mhdRw6LA/auto/fbE/normal/auto/
104.18.94.41200 OK 26 kB URL GET HTTP/3 challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/vynit/0x4AAAAAAAktVIf1mhdRw6LA/auto/fbE/normal/auto/
IP 104.18.94.41:443
Requested by https://astronomy.radjobsoc.com/E5nT/#Dyuna.martin@checkmarx.com
Certificate IssuerGoogle Trust Services
Subjectchallenges.cloudflare.com
Fingerprint65:75:A9:DF:EC:98:9B:14:E5:F1:43:E6:B9:E2:E3:9C:50:C4:E8:A4
ValidityThu, 05 Sep 2024 16:26:55 GMT - Wed, 04 Dec 2024 17:26:54 GMT
File type HTML document, ASCII text, with very long lines (22049)
Hash 3777a12eabe7657b2e18b53ddc9c99a7
0a5777a7aec5fa069acfb97beb0123619615b0e6
fe06fe9763c99fe101a0ebe1a368da67050e480e113f1d4a068c9d73613d72e4
GET /cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/vynit/0x4AAAAAAAktVIf1mhdRw6LA/auto/fbE/normal/auto/ HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://astronomy.radjobsoc.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 29 Oct 2024 17:58:44 GMT
content-type: text/html; charset=UTF-8
cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
origin-agent-cluster: ?1
content-security-policy: frame-src https://challenges.cloudflare.com/ blob:; base-uri 'self'
cross-origin-opener-policy: same-origin
referrer-policy: same-origin
cross-origin-embedder-policy: require-corp
document-policy: js-profiling
cross-origin-resource-policy: cross-origin
critical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
permissions-policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()
server: cloudflare
cf-ray: 8da50e2f09c06a69-HAM
content-encoding: br
alt-svc: h3=":443"; ma=86400
GET astronomy.radjobsoc.com/favicon.ico
104.21.8.164404 Not Found 0 B URL GET HTTP/3 astronomy.radjobsoc.com/favicon.ico
IP 104.21.8.164:443
Requested by https://astronomy.radjobsoc.com/E5nT/#Dyuna.martin@checkmarx.com
Certificate IssuerGoogle Trust Services
Subjectradjobsoc.com
FingerprintD0:0E:32:CD:3D:88:0E:A8:CF:C7:0E:8E:7A:F4:BE:C5:D0:D0:AE:61
ValiditySat, 21 Sep 2024 21:10:02 GMT - Fri, 20 Dec 2024 21:10:01 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /favicon.ico HTTP/1.1
Host: astronomy.radjobsoc.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://astronomy.radjobsoc.com/E5nT/
Cookie: XSRF-TOKEN=eyJpdiI6Inh6OEtRZFlLdXkwYVpZNWVvWmRBc2c9PSIsInZhbHVlIjoiQ3I5QUY0NFNUcjBkaUd2VkVyRXFTdjVTZDZWd2loZW5RRk9wZjFuTUJveFRWaVgwamJ4RVFiaVpORTd6Zy9WYnlNcitRNHl5eGdJSlZhYlVaTGRFRk1PS2xFVWxURm9FY21IbWR6YmwvTm9DbGFpMEFpcDJqSTRUbmpHbm5ZMUoiLCJtYWMiOiI3MzU3ZmY1NTJjMjhjZTc3N2UxOWY1NmM2ZDRmYTc1OGFiZjFjOWExMTBlMjJmMmExMjJlYWY4NGRhZGI4ZjRkIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImVUOUZOMTlrZnNScWRaQ1JZbGF4RWc9PSIsInZhbHVlIjoiV1l5NjFVN2VSWDZIaDFLZHlreFdLWlIrSUlRRkQvM0FZREtRekgxN2R6RUh2U3BLai9paWhmOFE3WnQxYU9hRnAxOGlydDlPVDNaeU1uaDMyajFVZlBmTE50UThUNXhFQWY5ZERvOXpoSkw2dHNCVjhCdXM3RTdjanVaR3lXcGIiLCJtYWMiOiI0YmIwNGNkYWZmZjFiM2E4ZjdiNDNhMGI2ZjNlZjdmOWIxYzVmOTA2YjdjOWVkMThjOGY4OGY0NWJhZTRmYWFmIiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 404 Not Found
date: Tue, 29 Oct 2024 17:58:44 GMT
content-type: text/html; charset=UTF-8
cache-control: max-age=14400
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=bN4Sl43kcWGMFqiW6HIKQaiyKkBOzRry5%2FZNSvMOD2HDX%2F9GleRwkOxlBpTtbcAPa9dqU0Wzyx0QzfL8MwtBnYG6J4JoX77nsKFKOi4HUfxGDsKzN%2F6J5ZVBu3UX%2Fw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
cf-cache-status: HIT
age: 12297
priority: u=6,i=?0
server: cloudflare
cf-ray: 8da50e2f29935c41-AMS
content-encoding: br
server-timing: cfL4;desc="?proto=TCP&rtt=22689&sent=4&recv=7&lost=0&retrans=0&sent_bytes=2825&recv_bytes=2245&delivery_rate=125407&cwnd=252&unsent_bytes=0&cid=339fa2a864b951d1&ts=331&x=0", cfL4;desc="?proto=QUIC&rtt=23774&sent=11&recv=6&lost=0&retrans=0&sent_bytes=4043&recv_bytes=1690&delivery_rate=20339&cwnd=12000&unsent_bytes=0&cid=2dca5ae0451858bd&ts=508&x=1", cfExtPri, cfHdrFlush;dur=0
GET challenges.cloudflare.com/turnstile/v0/g/f2bbd6738e15/api.js
104.18.94.41200 OK 48 kB URL GET HTTP/3 challenges.cloudflare.com/turnstile/v0/g/f2bbd6738e15/api.js
IP 104.18.94.41:443
Requested by https://astronomy.radjobsoc.com/E5nT/#Dyuna.martin@checkmarx.com
Certificate IssuerGoogle Trust Services
Subjectchallenges.cloudflare.com
Fingerprint65:75:A9:DF:EC:98:9B:14:E5:F1:43:E6:B9:E2:E3:9C:50:C4:E8:A4
ValidityThu, 05 Sep 2024 16:26:55 GMT - Wed, 04 Dec 2024 17:26:54 GMT
File type JavaScript source, ASCII text, with very long lines (47531)
Hash 808a57cae0b6fee71f46efdded44b348
dd570a24c8bda1b391aa1ddea6004125818e579a
5b75ac6f98994352699841dffa6e562725ebbd0005c539946ad3625ec550eb0f
GET /turnstile/v0/g/f2bbd6738e15/api.js HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://astronomy.radjobsoc.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 29 Oct 2024 17:58:44 GMT
content-type: application/javascript; charset=UTF-8
last-modified: Fri, 18 Oct 2024 17:38:58 GMT
cache-control: max-age=31536000, stale-if-error=10800, stale-while-revalidate=31536000, public
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding
server: cloudflare
cf-ray: 8da50e2e39426a69-HAM
content-encoding: br
alt-svc: h3=":443"; ma=86400
GET astronomy.radjobsoc.com/E5nT/
104.21.8.164200 OK 19 kB URL User Request GET HTTP/2 astronomy.radjobsoc.com/E5nT/
IP 104.21.8.164:443
Certificate IssuerGoogle Trust Services
Subjectradjobsoc.com
FingerprintD0:0E:32:CD:3D:88:0E:A8:CF:C7:0E:8E:7A:F4:BE:C5:D0:D0:AE:61
ValiditySat, 21 Sep 2024 21:10:02 GMT - Fri, 20 Dec 2024 21:10:01 GMT
File type HTML document, ASCII text, with very long lines (6893), with CRLF line terminators
Hash d5c09b41f1a0602bbadc7a98f985f9c4
76bcd498de7224bc07c31494115ad0ce46da5ee5
de895f5a392cadbc1d819ba600f47219dea995ce0a3f18de7a4adf70c3beac43
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /E5nT/ HTTP/1.1
Host: astronomy.radjobsoc.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 29 Oct 2024 17:58:43 GMT
content-type: text/html; charset=UTF-8
cache-control: no-cache, private
cf-cache-status: DYNAMIC
vary: accept-encoding
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=pndgVa6IhBxgNi74N%2BYm0bAF5VYhIDgtzNCqGj1%2BryRm3j27uM2nsYGHigWQ9cP7H4jjyU8kxnR7xQ3ir3vySSU8MMjO4TrHPwds%2Fa1KaC0jjrix6pbbMfiLa1dO0Q%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
set-cookie: XSRF-TOKEN=eyJpdiI6Inh6OEtRZFlLdXkwYVpZNWVvWmRBc2c9PSIsInZhbHVlIjoiQ3I5QUY0NFNUcjBkaUd2VkVyRXFTdjVTZDZWd2loZW5RRk9wZjFuTUJveFRWaVgwamJ4RVFiaVpORTd6Zy9WYnlNcitRNHl5eGdJSlZhYlVaTGRFRk1PS2xFVWxURm9FY21IbWR6YmwvTm9DbGFpMEFpcDJqSTRUbmpHbm5ZMUoiLCJtYWMiOiI3MzU3ZmY1NTJjMjhjZTc3N2UxOWY1NmM2ZDRmYTc1OGFiZjFjOWExMTBlMjJmMmExMjJlYWY4NGRhZGI4ZjRkIiwidGFnIjoiIn0%3D; expires=Tue, 29-Oct-2024 19:58:43 GMT; Max-Age=7200; path=/; secure; samesite=none
laravel_session=eyJpdiI6ImVUOUZOMTlrZnNScWRaQ1JZbGF4RWc9PSIsInZhbHVlIjoiV1l5NjFVN2VSWDZIaDFLZHlreFdLWlIrSUlRRkQvM0FZREtRekgxN2R6RUh2U3BLai9paWhmOFE3WnQxYU9hRnAxOGlydDlPVDNaeU1uaDMyajFVZlBmTE50UThUNXhFQWY5ZERvOXpoSkw2dHNCVjhCdXM3RTdjanVaR3lXcGIiLCJtYWMiOiI0YmIwNGNkYWZmZjFiM2E4ZjdiNDNhMGI2ZjNlZjdmOWIxYzVmOTA2YjdjOWVkMThjOGY4OGY0NWJhZTRmYWFmIiwidGFnIjoiIn0%3D; expires=Tue, 29-Oct-2024 19:58:43 GMT; Max-Age=7200; path=/; secure; httponly; samesite=none
server: cloudflare
cf-ray: 8da50e28a93ad5b8-CDG
content-encoding: br
server-timing: cfL4;desc="?proto=TCP&rtt=22695&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2825&recv_bytes=1391&delivery_rate=126129&cwnd=252&unsent_bytes=0&cid=6eb3c5ff77544f01&ts=216&x=0", cfL4;desc="?proto=TCP&rtt=76241&sent=8&recv=11&lost=0&retrans=0&sent_bytes=3276&recv_bytes=1262&delivery_rate=67351&cwnd=35&unsent_bytes=0&cid=3e36457627638edc&ts=540&x=0"
X-Firefox-Spdy: h2
GET challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/orchestrate/chl_api/v1?ray=8da50e2f09c06a69&lang=auto
104.18.94.41200 OK 122 kB URL GET HTTP/3 challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/orchestrate/chl_api/v1?ray=8da50e2f09c06a69&lang=auto
IP 104.18.94.41:443
Requested by https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/vynit/0x4AAAAAAAktVIf1mhdRw6LA/auto/fbE/normal/auto/
Certificate IssuerGoogle Trust Services
Subjectchallenges.cloudflare.com
Fingerprint65:75:A9:DF:EC:98:9B:14:E5:F1:43:E6:B9:E2:E3:9C:50:C4:E8:A4
ValidityThu, 05 Sep 2024 16:26:55 GMT - Wed, 04 Dec 2024 17:26:54 GMT
File type JavaScript source, ASCII text, with very long lines (65536), with no line terminators
Size 122 kB (121479 bytes)
Hash ccdb3bd9cd9fe1b978afa5e2083efb9c
ff53b008d420f8310a1c33d7a02c3d79931e68ce
8e19c6fcebbecac34c76594259539d6550d4289aacd7467c28ad6a530e3ace6c
GET /cdn-cgi/challenge-platform/h/g/orchestrate/chl_api/v1?ray=8da50e2f09c06a69&lang=auto HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/vynit/0x4AAAAAAAktVIf1mhdRw6LA/auto/fbE/normal/auto/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 29 Oct 2024 17:58:44 GMT
content-type: application/javascript; charset=UTF-8
cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
server: cloudflare
cf-ray: 8da50e2fca3c6a69-HAM
content-encoding: br
alt-svc: h3=":443"; ma=86400