https://tf5e.gxpxyviep.es/56t4R0ucfe7EtWg/

ID de l'analyse :: 40fb0856-f239-4f6c-8dc2-f62be955a904Terminée
URL soumise :: https://cutt.ly/Drfn1BZLRedirigé
Fin du rapport :: 12 avr. 2025, 22:54:23

Transactions HTTP · 3 détectées

Une liste de toutes les requêtes et réponses HTTP émises par la ressource au cours de la session en cours


GETh2	200	https://tf5e.gxpxyviep.es/56t4R0ucfe7EtWg Chaîne de redirection https://cutt.ly/Drfn1BZL301 https://tf5e.gxpxyviep.es/56t4R0ucfe7EtWg/	Documenttext/html	561,68ko27,54ko	104.21.48.1AS13335 (US)
Général URL complète https://tf5e.gxpxyviep.es/56t4R0ucfe7EtWg/ Protocole h2 Sécurité TLS 1.3, X25519Kyber768Draft00, AES_128_GCM Serveur 104.21.48.1AS13335 (US) Logiciel de serveur cloudflare Hachage de ressource cc6cdf0be16dbe6997c2ac06948001cdca1200da38597779c0459e2ed99c948f En-têtes de requête Upgrade-Insecure-Requests 1 User-Agent Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 sec-ch-ua "Google Chrome";v="126", "Not:A-Brand";v="8", "Chromium";v="119" sec-ch-ua-platform Win32 :authority tf5e.gxpxyviep.es :method GET :path /56t4R0ucfe7EtWg/ :scheme https accept text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 accept-encoding gzip, deflate, br, zstd accept-language en-US,en;q=0.9 cf-biso-devtools 1 cf-biso-request-id 0e6d96f3-f204-4951-9615-4496a7848cdd priority u=0, i sec-fetch-dest document sec-fetch-mode navigate sec-fetch-site none sec-fetch-user ?1 upgrade-insecure-requests 1 user-agent Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 En-têtes de réponse alt-svc h3=":443"; ma=86400 cache-control no-cache, private cf-cache-status DYNAMIC cf-ray 92f64e573e6d2fc9-MAD content-encoding zstd content-type text/html; charset=UTF-8 date Sat, 12 Apr 2025 22:54:31 GMT nel {"success_fraction":0,"report_to":"cf-nel","max_age":604800} report-to {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=o26Dm5CJGJtZZN%2Belv8%2FEx%2FqeeORmSvx18qotaD3nFoPl8bPHTd9gKBblyRMeDxswHlCnHYhm9wSMIbX10lud4bD%2F8ZgPC9rL9IZn3RCEIbcrhv9FIpZXcf%2BGi%2FLDw%3D%3D"}],"group":"cf-nel","max_age":604800} server cloudflare server-timing cfL4;desc="?proto=TCP&rtt=411&min_rtt=243&rtt_var=77&sent=97&recv=66&lost=0&retrans=0&sent_bytes=71872&recv_bytes=9335&delivery_rate=24962962&cwnd=257&unsent_bytes=0&cid=a300da263ad2fac0&ts=134581&x=0" cfL4;desc="?proto=TCP&rtt=0&min_rtt=0&rtt_var=0&sent=0&recv=0&lost=0&retrans=0&sent_bytes=0&recv_bytes=0&delivery_rate=0&cwnd=0&unsent_bytes=0&cid=3b867f4824ace587&ts=376&x=0" vary accept-encoding En-têtes de redirection https://cutt.ly/Drfn1BZL301 location https://tF5E.gxpxyviep.es/56t4R0ucfe7EtWg/ alt-svc h3=":443"; ma=86400 cache-control no-cache, no-store, must-revalidate cf-cache-status DYNAMIC cf-ray 92f64e552c972fc9-MAD content-type text/html; charset=UTF-8 date Sat, 12 Apr 2025 22:54:31 GMT expires Thu, 19 Nov 1981 08:52:00 GMT pragma no-cache referrer-policy same-origin server cloudflare strict-transport-security max-age=15552000; includeSubDomains; preload x-content-type-options nosniff x-frame-options SAMEORIGIN x-xss-protection 1; mode=block
GETh2	200	logo.pnghttps://www.jqueryscript.net/demo/Simple-Math-Captcha-Plugin-for-jQuery-ebcaptcha/demo/images	imageimage/png	12,76ko13,43ko	172.67.75.171AS13335 (US)
Général URL complète https://www.jqueryscript.net/demo/Simple-Math-Captcha-Plugin-for-jQuery-ebcaptcha/demo/images/logo.png Auteur de la requête URL https://tf5e.gxpxyviep.es/56t4R0ucfe7EtWg/ Hôte tf5e.gxpxyviep.es Type parser Protocole h2 Sécurité TLS 1.3, X25519Kyber768Draft00, AES_128_GCM Serveur 172.67.75.171AS13335 (US) Logiciel de serveur cloudflare Hachage de ressource c823ef0cb65d435b162879d8293e18bce29a99d9f47bf95a3b943fa4968464c7 En-têtes de requête sec-ch-ua "Google Chrome";v="126", "Not:A-Brand";v="8", "Chromium";v="119" Referer https://tf5e.gxpxyviep.es/ User-Agent Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 sec-ch-ua-platform Win32 :authority www.jqueryscript.net :method GET :path /demo/Simple-Math-Captcha-Plugin-for-jQuery-ebcaptcha/demo/images/logo.png :scheme https accept image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 accept-encoding gzip, deflate, br, zstd accept-language en-US,en;q=0.9 cf-biso-devtools 1 cf-biso-request-id 0e6d96f3-f204-4951-9615-4496a7848cdd priority u=1, i referer https://tf5e.gxpxyviep.es/ sec-fetch-dest image sec-fetch-mode no-cors sec-fetch-site cross-site user-agent Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 En-têtes de réponse date Sat, 12 Apr 2025 22:54:32 GMT cf-cache-status HIT nel {"success_fraction":0,"report_to":"cf-nel","max_age":604800} age 45145 server-timing cfL4;desc="?proto=TCP&rtt=0&min_rtt=0&rtt_var=0&sent=0&recv=0&lost=0&retrans=0&sent_bytes=0&recv_bytes=0&delivery_rate=0&cwnd=0&unsent_bytes=0&cid=5648a0f257a7d3b9&ts=22&x=0" alt-svc h3=":443"; ma=86400 content-length 13064 last-modified Thu, 14 Feb 2013 22:37:02 GMT server cloudflare etag "ea0983-3308-4d5b6e5bd5f80" vary Accept-Encoding report-to {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=YycwMbONCZ%2BSVre5firjRfssBqb%2BEHfBrm3hh%2FwvHEo7%2FcRS8AB%2FkVNzRYsuiz9ljbvcZeKKN9jIydB6XFQh08Cw4NrFKRWa82%2BbWHY29Z0%2BU3oap6DQuRDwAnWCWQES%2Fe0l7jY5gjat%2BN0%2B0aU%2FSxbz3Q%3D%3D"}],"group":"cf-nel","max_age":604800} content-type image/png cache-control max-age=25920000 accept-ranges bytes cf-ray 92f64e5b9a482fc9-MAD
GETh2	404	favicon.icohttps://tf5e.gxpxyviep.es	Autretext/html	0o626o	104.21.48.1AS13335 (US)
Général URL complète https://tf5e.gxpxyviep.es/favicon.ico Protocole h2 Sécurité TLS 1.3, X25519Kyber768Draft00, AES_128_GCM Serveur 104.21.48.1AS13335 (US) Logiciel de serveur cloudflare En-têtes de requête sec-ch-ua "Google Chrome";v="126", "Not:A-Brand";v="8", "Chromium";v="119" Referer https://tf5e.gxpxyviep.es/56t4R0ucfe7EtWg/ User-Agent Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 sec-ch-ua-platform Win32 :authority tf5e.gxpxyviep.es :method GET :path /favicon.ico :scheme https accept image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 accept-encoding gzip, deflate, br, zstd accept-language en-US,en;q=0.9 cf-biso-devtools 1 cf-biso-request-id 0e6d96f3-f204-4951-9615-4496a7848cdd cookie XSRF-TOKEN=eyJpdiI6InFSbWxYQ3ZwbktHOFhSOGFwSVdpbmc9PSIsInZhbHVlIjoiaHpRM3YxTS9UU2lNYzhXY1RsbGo3YnNuNTRFcldZa2h6SmVYQ1BYMGRLVmVxaFM0R1pvT0VwVVFlcHlGT0hCRlFwWmZPdnczaUI4UExnVjVWZ1drcytld05uQ3Y5MVNvSW80eTJHSTQ3eXJlQlZEdFlzM0dKTW5TZzQ2dGRaTEUiLCJtYWMiOiJkNTNkNWU1YmQzNGU3Njk0NGIwODljN2NlY2FmNzRhYjAwZDM1MzljY2VhMjNiMDNlZjUyNzJiNWZjZTEzZjRiIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InNDb05FWS81a0xDN2hjZTk3dFZzakE9PSIsInZhbHVlIjoieXVjaHlYVG5JUGtGaWppdFhuekluQ3N4ellQd0d2ekQ5elNpZGtvR0x1QmZNQTExTFRyNis0T2licnROaVRCMjZ6QkFFYXA3S3ljOEtCc1hWdjIySFo5VDlkd1ZEMXpUbUh5UmYrNEdJSnVmSWpRTERLM3lFQkYzN1BMM01RTkgiLCJtYWMiOiJkNjEwYjlmMmM1NDYwYzU1M2Q0YTE1MjBhMzRmYzVmZWRiNjg0YzBlY2VjMjVjYjc0M2QxZTEwNTRjMDI1Yzc2IiwidGFnIjoiIn0%3D priority u=1, i referer https://tf5e.gxpxyviep.es/56t4R0ucfe7EtWg/ sec-fetch-dest image sec-fetch-mode no-cors sec-fetch-site same-origin user-agent Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 En-têtes de réponse date Sat, 12 Apr 2025 22:54:32 GMT content-encoding zstd cf-cache-status MISS nel {"success_fraction":0,"report_to":"cf-nel","max_age":604800} server cloudflare vary Accept-Encoding report-to {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=JuSw%2FLLvIt0vGeWg5kiov%2FofeXP815j1Ib%2FaFpWDSTO5VSZfXrWmp9Q%2BoNCzUPH5nFHK5A%2FnGt4IGFRr2F3L11hMYTHEZjMQCfiQVMWhDw99qBE5nsK%2FUiE99VtnNg%3D%3D"}],"group":"cf-nel","max_age":604800} content-type text/html; charset=UTF-8 cache-control max-age=14400 server-timing cfL4;desc="?proto=TCP&rtt=11724&min_rtt=11635&rtt_var=33&sent=579&recv=272&lost=0&retrans=0&sent_bytes=568412&recv_bytes=30483&delivery_rate=5741919&cwnd=342&unsent_bytes=0&cid=743aee70c3b03149&ts=708722&x=0", cfL4;desc="?proto=TCP&rtt=0&min_rtt=0&rtt_var=0&sent=0&recv=0&lost=0&retrans=0&sent_bytes=0&recv_bytes=0&delivery_rate=0&cwnd=0&unsent_bytes=0&cid=3b867f4824ace587&ts=1184&x=0" cf-ray 92f64e5c0a8d2fc9-MAD alt-svc h3=":443"; ma=86400

Historique de la page : 2 entrées trouvées

Redirection HTTP, JavaScript ou Meta tag

https://cutt.ly/Drfn1BZL301
https://tf5e.gxpxyviep.es/56t4R0ucfe7EtWg/200

Chaînes de redirection : 1 trouvées

Redirections détectées sur les transactions HTTP

Chaîne de redirection pour la transaction N°1

https://cutt.ly/Drfn1BZL301
https://tf5e.gxpxyviep.es/56t4R0ucfe7EtWg/

Enregistrements DNS : 14 trouvé(s)

Les enregistrements DNS fournissent des informations concernant un domaine, notamment l'adresse IP à laquelle il est associé

Type	Nom	Contenu	DNSSEC
A	tf5e.gxpxyviep.es	104.21.48.1	Désactivé
A	tf5e.gxpxyviep.es	104.21.80.1	Désactivé
A	tf5e.gxpxyviep.es	104.21.32.1	Désactivé
A	tf5e.gxpxyviep.es	104.21.64.1	Désactivé
A	tf5e.gxpxyviep.es	104.21.16.1	Désactivé
A	tf5e.gxpxyviep.es	104.21.112.1	Désactivé
A	tf5e.gxpxyviep.es	104.21.96.1	Désactivé
AAAA	tf5e.gxpxyviep.es	2606:4700:3030::6815:5001	Désactivé
AAAA	tf5e.gxpxyviep.es	2606:4700:3030::6815:6001	Désactivé
AAAA	tf5e.gxpxyviep.es	2606:4700:3030::6815:1001	Désactivé