| goo.by/content/blog/goo-gl-rip.png |  104.21.86.233 | 200 OK | 3.4 kB |
URL GET HTTP/3goo.by/content/blog/goo-gl-rip.png IP104.21.86.233:443
CertificateIssuerGoogle Trust Services LLC Subjectgoo.by Fingerprint03:D4:14:16:09:C7:C4:60:8A:FE:CC:5B:63:26:F3:3A:FA:A2:BF:4D ValidityThu, 14 Mar 2024 15:06:08 GMT - Wed, 12 Jun 2024 15:06:07 GMT
File typePNG image data, 720 x 300, 8-bit colormap, non-interlaced Hash7ccc35751256c390b699c6bc86fc8de6 d6ee8504163ea0f1c6472ab90e69b13540ef138c 96742b2bb7cc5318e6407d55b9c5692521a3451624b5ee5f142dfec1ffd07c64
| Analyzer | Verdict | Alert |
|---|
| PhishTank | phishing | Other | | Quad9 DNS | malicious | Sinkholed |
GET /content/blog/goo-gl-rip.png HTTP/1.1
Host: goo.by
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://goo.by/
Cookie: PHPSESSID=pc12ofq8hb0f4ffr3n18afqlnf
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 04 May 2024 07:39:07 GMT
content-type: image/png
content-length: 3437
last-modified: Mon, 16 Oct 2023 21:00:00 GMT
etag: "652da450-d6d"
strict-transport-security: max-age=31536000
cf-cache-status: HIT
age: 6476
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=KJLgLzg97M4sbWZbQzPQdlRs%2Fl823kupD7%2BVegIl7NFRoCyPR2hum6rYvh961fkLfAkAf4TP4z30V1ZojkXK7nSMreYh6sfhtegWo%2FD0Kh2qDtj1YCKMT6A%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87e6d5cb3e32b51d-OSL
alt-svc: h3=":443"; ma=86400
|
|
| goo.by/content/blog/google-link-shortener.png | 104.21.86.233 | 200 OK | 107 kB |
URL GET HTTP/3goo.by/content/blog/google-link-shortener.png IP104.21.86.233:443
CertificateIssuerGoogle Trust Services LLC Subjectgoo.by Fingerprint03:D4:14:16:09:C7:C4:60:8A:FE:CC:5B:63:26:F3:3A:FA:A2:BF:4D ValidityThu, 14 Mar 2024 15:06:08 GMT - Wed, 12 Jun 2024 15:06:07 GMT
File typePNG image data, 720 x 300, 8-bit colormap, non-interlaced Size107 kB (106619 bytes) Hashb6546ad1d54cb267cfdc19916f8d2db7 8b30c499566e67ae0f8406789d94c0d9fbefd2d9 4fc334384301de4ebac1f06c1fb4ff6721edde0c861c5e6becba0d100f06e83f
| Analyzer | Verdict | Alert |
|---|
| PhishTank | phishing | Other | | Quad9 DNS | malicious | Sinkholed |
GET /content/blog/google-link-shortener.png HTTP/1.1
Host: goo.by
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://goo.by/
Cookie: PHPSESSID=pc12ofq8hb0f4ffr3n18afqlnf
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 04 May 2024 07:39:07 GMT
content-type: image/png
content-length: 106619
last-modified: Tue, 14 Nov 2023 18:02:00 GMT
etag: "6553b618-1a07b"
strict-transport-security: max-age=31536000
cf-cache-status: HIT
age: 6476
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=5snXBJjnidIw%2BmdBs6aBtr6ghrTwTon1h3%2FNljCH7AqEBb5G%2Bl5TBmw%2F1gceLhZqYPXQ9b25Z%2F%2FjNITf6F5m0kSYdAuNmV7ac612xR6QxX85XKo6QB2F0wk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87e6d5cb3e35b51d-OSL
alt-svc: h3=":443"; ma=86400
|
|
| goo.by/static/frontend/images/blog4.jpg | 104.21.86.233 | 200 OK | 16 kB |
URL GET HTTP/3goo.by/static/frontend/images/blog4.jpg IP104.21.86.233:443
CertificateIssuerGoogle Trust Services LLC Subjectgoo.by Fingerprint03:D4:14:16:09:C7:C4:60:8A:FE:CC:5B:63:26:F3:3A:FA:A2:BF:4D ValidityThu, 14 Mar 2024 15:06:08 GMT - Wed, 12 Jun 2024 15:06:07 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 120x120, segment length 16, progressive, precision 8, 720x300, components 3 Hashb9501d6637673009855ac39d0e2cced8 0f2ef925e177e2b9815897f3bfeb10351d231031 d5c73c1bdb830080a11cfe7ff9fe89c1cba9ad1bbaa5ec7962371a99251bd4f6
| Analyzer | Verdict | Alert |
|---|
| PhishTank | phishing | Other | | Quad9 DNS | malicious | Sinkholed |
GET /static/frontend/images/blog4.jpg HTTP/1.1
Host: goo.by
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://goo.by/
Cookie: PHPSESSID=pc12ofq8hb0f4ffr3n18afqlnf
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 04 May 2024 07:39:07 GMT
content-type: image/jpeg
content-length: 16215
last-modified: Tue, 17 Oct 2023 21:00:00 GMT
etag: "652ef5d0-3f57"
strict-transport-security: max-age=31536000
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=FRZOK7IyjWD46ntS%2Blo7FPssWzO2JjABW%2Bl6aP36QqVQFG2GZ50BmEflymt8uxUAbW98cH18ZqF1K6cg9nqTdlu1mVkoHh2dN7vDY8vW%2FuyxFi2Mg1JDKpA%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87e6d5cb2e29b51d-OSL
alt-svc: h3=":443"; ma=86400
|
|
| goo.by/content/blog/notcoin.png | 104.21.86.233 | 200 OK | 6.1 kB |
URL GET HTTP/3goo.by/content/blog/notcoin.png IP104.21.86.233:443
CertificateIssuerGoogle Trust Services LLC Subjectgoo.by Fingerprint03:D4:14:16:09:C7:C4:60:8A:FE:CC:5B:63:26:F3:3A:FA:A2:BF:4D ValidityThu, 14 Mar 2024 15:06:08 GMT - Wed, 12 Jun 2024 15:06:07 GMT
File typePNG image data, 720 x 300, 8-bit colormap, non-interlaced Hash306f820663f667801e68733a684b0397 fc9ce0d1301cb11acffdc64e8b9d9ab66bb8b80c dd2e9587397f5a0d572ce6d9c7b344f29badbafbeca89064bb9a574ff1e02d57
| Analyzer | Verdict | Alert |
|---|
| PhishTank | phishing | Other | | Quad9 DNS | malicious | Sinkholed |
GET /content/blog/notcoin.png HTTP/1.1
Host: goo.by
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://goo.by/
Cookie: PHPSESSID=pc12ofq8hb0f4ffr3n18afqlnf
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 04 May 2024 07:39:07 GMT
content-type: image/png
content-length: 6096
last-modified: Mon, 08 Jan 2024 09:05:00 GMT
etag: "659bbabc-17d0"
strict-transport-security: max-age=31536000
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=VxOgRtpHil5%2Bn26dM6nG%2F69GGtSxcQFdu%2F2LBKitcLg3WH3ywsR%2B5DIvtp4DC%2Fi3q%2BE8%2F3Pfx89M4WP5tK4WX4XLTT%2FuxWgbDWn2fjCjEBm8PvrY9H8LYbg%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87e6d5cb3e37b51d-OSL
alt-svc: h3=":443"; ma=86400
|
|
| goo.by/static/frontend/js/app.min.js?v=1.2 | 104.21.86.233 | 200 OK | 2.5 kB |
URL GET HTTP/3goo.by/static/frontend/js/app.min.js?v=1.2 IP104.21.86.233:443
CertificateIssuerGoogle Trust Services LLC Subjectgoo.by Fingerprint03:D4:14:16:09:C7:C4:60:8A:FE:CC:5B:63:26:F3:3A:FA:A2:BF:4D ValidityThu, 14 Mar 2024 15:06:08 GMT - Wed, 12 Jun 2024 15:06:07 GMT
File typeJavaScript source, ASCII text, with very long lines (5886), with no line terminators Hash82374b423499415c2c3173513ec1615c 3b219efdc592a49a680e2c71cb22989c686b5417 12116847297eb16ae5aa1d26b27a0b4704afcc352272ab89cd6d28a27b2604be
| Analyzer | Verdict | Alert |
|---|
| PhishTank | phishing | Other | | Quad9 DNS | malicious | Sinkholed |
GET /static/frontend/js/app.min.js?v=1.2 HTTP/1.1
Host: goo.by
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://goo.by/
Cookie: PHPSESSID=pc12ofq8hb0f4ffr3n18afqlnf
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 04 May 2024 07:39:07 GMT
content-type: application/javascript; charset=utf-8
last-modified: Mon, 21 Aug 2023 21:00:00 GMT
etag: W/"64e3d050-16fe"
strict-transport-security: max-age=31536000
cf-cache-status: HIT
age: 6476
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=7Tawy%2BIWn9jtJkJO8mkPDv4CmTF6wbjDZCE1%2Baee3B%2FmtiyYrDzTmYnsnYPHyeVxJTOIAKJFUeIqWCpBQX9Y7lGgZEfTIvmP0a8oiL1UiGDttuTWYX%2BZPW0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87e6d5cb4e45b51d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| goo.by/static/server.min.js?v=1.2 | 104.21.86.233 | 200 OK | 2.3 kB |
URL GET HTTP/3goo.by/static/server.min.js?v=1.2 IP104.21.86.233:443
CertificateIssuerGoogle Trust Services LLC Subjectgoo.by Fingerprint03:D4:14:16:09:C7:C4:60:8A:FE:CC:5B:63:26:F3:3A:FA:A2:BF:4D ValidityThu, 14 Mar 2024 15:06:08 GMT - Wed, 12 Jun 2024 15:06:07 GMT
File typeJavaScript source, ASCII text, with very long lines (6640), with no line terminators Hash75615ee1407a7b254fdf4e1611993374 b0bc74b4b9c6fe3cbd94d136a240a8c98a174bf4 99ed7bb31293008bb7c66efdec7c8ac4403d229e69d4631c68775ad4a75af674
| Analyzer | Verdict | Alert |
|---|
| PhishTank | phishing | Other | | Quad9 DNS | malicious | Sinkholed |
GET /static/server.min.js?v=1.2 HTTP/1.1
Host: goo.by
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://goo.by/
Cookie: PHPSESSID=pc12ofq8hb0f4ffr3n18afqlnf
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 04 May 2024 07:39:07 GMT
content-type: application/javascript; charset=utf-8
last-modified: Sat, 27 Jan 2024 12:59:00 GMT
etag: W/"65b4fe14-19f0"
strict-transport-security: max-age=31536000
cf-cache-status: HIT
age: 6476
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=1tqfKbgriFJK6YYdFnvXUOpfERdxuS%2F6I4olC00ZB24u%2FgchWqndV38CDAst1p9KwBIEj5PDHH3anuxuAwscgI8iL7ZfK764I7IW1bUnxVjRQf8UDtnfdRI%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87e6d5cb5e51b51d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| www.googletagmanager.com/gtag/js?id=G-YM89WYEN8N |  142.250.74.168 | 200 OK | 102 kB |
URL GET HTTP/2www.googletagmanager.com/gtag/js?id=G-YM89WYEN8N IP142.250.74.168:443
CertificateIssuerGoogle Trust Services LLC Subject*.google-analytics.com Fingerprint93:6B:D2:9D:92:BE:2D:D8:02:67:82:83:5E:EF:A3:F9:13:F3:26:AE ValidityTue, 16 Apr 2024 03:18:45 GMT - Tue, 09 Jul 2024 03:18:44 GMT
File typeJavaScript source, ASCII text, with very long lines (5955) Size102 kB (102389 bytes) Hash55634680e25dad68eaf6608f6f3399a3 be73e34d79ea31952dfe18e2b495c5d89d73e747 c3cbd0bf6d8333da3a5ad3d2ccc4d8d400c89964895b29abd232f693abc6f3e1
GET /gtag/js?id=G-YM89WYEN8N HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://goo.by/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Sat, 04 May 2024 07:39:07 GMT
expires: Sat, 04 May 2024 07:39:07 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 102389
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| fonts.googleapis.com/css2?family=Roboto&display=swap | 142.250.74.106 | 200 OK | 1.1 kB |
URL GET HTTP/2fonts.googleapis.com/css2?family=Roboto&display=swap IP142.250.74.106:443
CertificateIssuerGoogle Trust Services LLC Subjectupload.video.google.com Fingerprint36:49:20:36:0C:4D:DA:55:65:64:23:0F:49:3E:FA:78:87:35:A3:79 ValidityTue, 16 Apr 2024 04:17:12 GMT - Tue, 09 Jul 2024 04:17:11 GMT
File typegzip compressed data, max compression Hashf81bcf3dada1ee5ffbac358e2242c162 ff08744f1dd8b79acadfca6dcca3742b43ba8287 e501bd1f53c0940f125d6150d3fd2cc8a6d40354138dfd76c8d8618dbfc364fd
GET /css2?family=Roboto&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://goo.by/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Sat, 04 May 2024 07:39:07 GMT
date: Sat, 04 May 2024 07:39:07 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| goo.by/static/frontend/libs/select2/dist/css/select2.min.css | 104.21.86.233 | 200 OK | 22 kB |
URL GET HTTP/3goo.by/static/frontend/libs/select2/dist/css/select2.min.css IP104.21.86.233:443
CertificateIssuerGoogle Trust Services LLC Subjectgoo.by Fingerprint03:D4:14:16:09:C7:C4:60:8A:FE:CC:5B:63:26:F3:3A:FA:A2:BF:4D ValidityThu, 14 Mar 2024 15:06:08 GMT - Wed, 12 Jun 2024 15:06:07 GMT
File typeASCII text, with very long lines (14965) Hash9f54e6414f87e0d14b9e966f19a174f9 ae5735562faabd1a2d9803bbd7bf4c502b5e4f51 15d6ad4dfdb43d0affad683e70029f97a8f8fc8637a28845009ee0542dccdf81
| Analyzer | Verdict | Alert |
|---|
| PhishTank | phishing | Other | | Quad9 DNS | malicious | Sinkholed |
GET /static/frontend/libs/select2/dist/css/select2.min.css HTTP/1.1
Host: goo.by
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://goo.by/
Cookie: PHPSESSID=pc12ofq8hb0f4ffr3n18afqlnf
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 04 May 2024 07:39:07 GMT
content-type: text/css
last-modified: Sun, 11 Dec 2022 21:00:00 GMT
etag: W/"639644d0-3a76"
strict-transport-security: max-age=31536000
cf-cache-status: HIT
age: 6476
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=lg2O5V2RW%2Fr%2B0TGS12v2f73%2B89B1ZKy7LurxbGYGbGf3TYbmTTPL362NGAYzz8DKyLdRbCBAOxphEf29eJD01G6OblDZ1aefx1D6aBgPnN42T7DYv8eJb9A%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87e6d5cb0e0eb51d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 | 216.58.207.227 | 200 OK | 16 kB |
URL GET HTTP/2fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 IP216.58.207.227:443
CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com Fingerprint15:DD:05:B3:2F:D8:E3:54:C9:B4:FA:E4:AC:01:ED:C8:E1:EA:A7:AD ValidityTue, 16 Apr 2024 04:17:07 GMT - Tue, 09 Jul 2024 04:17:06 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 15744, version 1.0 Hash15d9f621c3bd1599f0169dcf0bd5e63e 7ca9c5967f3bb8bffeab24b639b49c1e7d03fa52 f6734f8177112c0839b961f96d813fcb189d81b60e96c33278c1983b6f419615
GET /s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://goo.by
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15744
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 02 May 2024 22:40:35 GMT
expires: Fri, 02 May 2025 22:40:35 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 11 May 2022 19:24:48 GMT
content-type: font/woff2
age: 118712
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu7GxKOzY.woff2 | 216.58.207.227 | 200 OK | 12 kB |
URL GET HTTP/2fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu7GxKOzY.woff2 IP216.58.207.227:443
CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com Fingerprint15:DD:05:B3:2F:D8:E3:54:C9:B4:FA:E4:AC:01:ED:C8:E1:EA:A7:AD ValidityTue, 16 Apr 2024 04:17:07 GMT - Tue, 09 Jul 2024 04:17:06 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 11872, version 1.0 Hash87ace20058325aa069320aa4af875dff b743548770c46d905ae1ba06310bc001c587fe8e 3c23eb02de6b34e30f18cfb7167abd81a2cedfd1da60dfcb71989517ab3fb431
GET /s/roboto/v30/KFOmCnqEu92Fr1Mu7GxKOzY.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://goo.by
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 11872
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 02 May 2024 01:56:11 GMT
expires: Fri, 02 May 2025 01:56:11 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 11 May 2022 19:25:01 GMT
content-type: font/woff2
age: 193376
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| goo.by/static/frontend/fonts/icomoon.ttf?ulfgh0 | 104.21.86.233 | 200 OK | 4.6 kB |
URL GET HTTP/3goo.by/static/frontend/fonts/icomoon.ttf?ulfgh0 IP104.21.86.233:443
CertificateIssuerGoogle Trust Services LLC Subjectgoo.by Fingerprint03:D4:14:16:09:C7:C4:60:8A:FE:CC:5B:63:26:F3:3A:FA:A2:BF:4D ValidityThu, 14 Mar 2024 15:06:08 GMT - Wed, 12 Jun 2024 15:06:07 GMT
File typeTrueType Font data, 11 tables, 1st "OS/2", 14 names, Macintosh, type 1 string, icomoon Hash2730962e9d816bcbf082ceca4c7cf5e5 28ae7090a594369f674b376423b8df3e5a813f42 357004e9ec66eab37303083efa2b4877246d779542ef28917017ab4ee5ce382f
| Analyzer | Verdict | Alert |
|---|
| PhishTank | phishing | Other | | Quad9 DNS | malicious | Sinkholed |
GET /static/frontend/fonts/icomoon.ttf?ulfgh0 HTTP/1.1
Host: goo.by
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://goo.by/static/frontend/css/reset.css?v37
Cookie: PHPSESSID=pc12ofq8hb0f4ffr3n18afqlnf
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 04 May 2024 07:39:07 GMT
content-type: application/octet-stream
content-length: 4568
last-modified: Wed, 14 Jun 2023 21:00:00 GMT
etag: "648a2a50-11d8"
strict-transport-security: max-age=31536000
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ZhbTQYN4t9KmjeuQAK8LFNeFZvgYSi8%2FxwColi1N6D4s8%2FMOchqVxAMNvLd0%2FTi3XNRgdN1Hcd8CGvrphFeqlAM3TZlvaWEKcXkCVdLrn7QHZ2QkNepcr9c%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87e6d5cdc8deb51d-OSL
alt-svc: h3=":443"; ma=86400
|
|
| www.gstatic.com/recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/recaptcha__en.js | 142.250.74.131 | 200 OK | 206 kB |
URL GET HTTP/3www.gstatic.com/recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/recaptcha__en.js IP142.250.74.131:443
Requested byhttps://www.google.com/recaptcha/api2/anchor?ar=1&k=6LcUoOQUAAAAANHj_juVSgLjxCWAABmUxJr-DhCw&co=aHR0cHM6Ly9nb28uYnk6NDQz&hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&size=invisible&cb=lncp6oz3ywua CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com Fingerprint15:DD:05:B3:2F:D8:E3:54:C9:B4:FA:E4:AC:01:ED:C8:E1:EA:A7:AD ValidityTue, 16 Apr 2024 04:17:07 GMT - Tue, 09 Jul 2024 04:17:06 GMT
File typeJavaScript source, ASCII text, with very long lines (631) Size206 kB (205803 bytes) Hashe2e79d6b927169d9e0e57e3baecc0993 1299473950b2999ba0b7f39bd5e4a60eafd1819d 231336ed913a5ebd4445b85486e053caf2b81cab91318241375f3f7a245b6c6b
GET /recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/recaptcha__en.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://goo.by
DNT: 1
Connection: keep-alive
Referer: https://goo.by/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 205803
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 02 May 2024 01:59:48 GMT
expires: Fri, 02 May 2025 01:59:48 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 22 Apr 2024 21:03:35 GMT
content-type: text/javascript
vary: Accept-Encoding
age: 193160
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| www.gstatic.com/recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/styles__ltr.css | 142.250.74.131 | 200 OK | 25 kB |
URL GET HTTP/3www.gstatic.com/recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/styles__ltr.css IP142.250.74.131:443
Requested byhttps://www.google.com/recaptcha/api2/anchor?ar=1&k=6LcUoOQUAAAAANHj_juVSgLjxCWAABmUxJr-DhCw&co=aHR0cHM6Ly9nb28uYnk6NDQz&hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&size=invisible&cb=lncp6oz3ywua CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com Fingerprint15:DD:05:B3:2F:D8:E3:54:C9:B4:FA:E4:AC:01:ED:C8:E1:EA:A7:AD ValidityTue, 16 Apr 2024 04:17:07 GMT - Tue, 09 Jul 2024 04:17:06 GMT
File typeASCII text, with very long lines (56412), with no line terminators Hash2c00b9f417b688224937053cd0c284a5 17b4c18ebc129055dd25f214c3f11e03e9df2d82 1e754b107428162c65a26d399b66db3daaea09616bf8620d9de4bc689ce48eed
GET /recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/styles__ltr.css HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 24617
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 02 May 2024 23:24:54 GMT
expires: Fri, 02 May 2025 23:24:54 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 22 Apr 2024 21:03:35 GMT
content-type: text/css
vary: Accept-Encoding
age: 116054
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| www.gstatic.com/recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/recaptcha__en.js | 142.250.74.131 | 200 OK | 206 kB |
URL GET HTTP/3www.gstatic.com/recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/recaptcha__en.js IP142.250.74.131:443
Requested byhttps://www.google.com/recaptcha/api2/anchor?ar=1&k=6LcUoOQUAAAAANHj_juVSgLjxCWAABmUxJr-DhCw&co=aHR0cHM6Ly9nb28uYnk6NDQz&hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&size=invisible&cb=lncp6oz3ywua CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com Fingerprint15:DD:05:B3:2F:D8:E3:54:C9:B4:FA:E4:AC:01:ED:C8:E1:EA:A7:AD ValidityTue, 16 Apr 2024 04:17:07 GMT - Tue, 09 Jul 2024 04:17:06 GMT
File typeJavaScript source, ASCII text, with very long lines (631) Size206 kB (205803 bytes) Hashe2e79d6b927169d9e0e57e3baecc0993 1299473950b2999ba0b7f39bd5e4a60eafd1819d 231336ed913a5ebd4445b85486e053caf2b81cab91318241375f3f7a245b6c6b
GET /recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/recaptcha__en.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 205803
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 02 May 2024 01:59:48 GMT
expires: Fri, 02 May 2025 01:59:48 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 22 Apr 2024 21:03:35 GMT
content-type: text/javascript
vary: Accept-Encoding
age: 193160
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| goo.by/static/frontend/js/owl.carousel.min.js?v=1.2 | 104.21.86.233 | 200 OK | 15 kB |
URL GET HTTP/3goo.by/static/frontend/js/owl.carousel.min.js?v=1.2 IP104.21.86.233:443
CertificateIssuerGoogle Trust Services LLC Subjectgoo.by Fingerprint03:D4:14:16:09:C7:C4:60:8A:FE:CC:5B:63:26:F3:3A:FA:A2:BF:4D ValidityThu, 14 Mar 2024 15:06:08 GMT - Wed, 12 Jun 2024 15:06:07 GMT
File typeJavaScript source, ASCII text, with very long lines (31997), with CRLF line terminators Hash47c357c05cb99cedbac2874840319818 d8b05365de4b760618328fdeef7672e8374978e4 4e0781bdd2cbb5db04da3b5e059eeca34e325fabb893bee7457b5babf5b7c029
| Analyzer | Verdict | Alert |
|---|
| PhishTank | phishing | Other | | Quad9 DNS | malicious | Sinkholed |
GET /static/frontend/js/owl.carousel.min.js?v=1.2 HTTP/1.1
Host: goo.by
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://goo.by/
Cookie: PHPSESSID=pc12ofq8hb0f4ffr3n18afqlnf
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 04 May 2024 07:39:07 GMT
content-type: application/javascript; charset=utf-8
last-modified: Wed, 13 Jan 2021 21:00:00 GMT
etag: W/"5fff5f50-ad3c"
strict-transport-security: max-age=31536000
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2FOWGZLFTuMAvGZ23oPFivApHBfY3NlUDWh6CsCTbH%2FAG6K%2FapiZqyHA0IHHYToVDdZTExt8t6yu4X0BWAfl5tZ%2F0XpGbuGgL0gT50TZOGSlKf3pc%2B07onpw%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87e6d5cb4e48b51d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| goo.by/static/frontend/libs/fontawesome/all.min.css | 104.21.86.233 | 200 OK | 33 kB |
URL GET HTTP/3goo.by/static/frontend/libs/fontawesome/all.min.css IP104.21.86.233:443
CertificateIssuerGoogle Trust Services LLC Subjectgoo.by Fingerprint03:D4:14:16:09:C7:C4:60:8A:FE:CC:5B:63:26:F3:3A:FA:A2:BF:4D ValidityThu, 14 Mar 2024 15:06:08 GMT - Wed, 12 Jun 2024 15:06:07 GMT
File typeASCII text, with very long lines (52276) Hash9a99091cf45671ab2ee178fc3896a494 043f09bf20c5478aaca2abb5b3f4b034a20cca6a 58fdbb37ecb0c8a4d514714e322edef085c1f9d71e703b3925b054437f446166
| Analyzer | Verdict | Alert |
|---|
| PhishTank | phishing | Other | | Quad9 DNS | malicious | Sinkholed |
GET /static/frontend/libs/fontawesome/all.min.css HTTP/1.1
Host: goo.by
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://goo.by/
Cookie: PHPSESSID=pc12ofq8hb0f4ffr3n18afqlnf
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 04 May 2024 07:39:07 GMT
content-type: text/css
last-modified: Tue, 15 Aug 2023 21:00:00 GMT
etag: W/"64dbe750-18efb"
strict-transport-security: max-age=31536000
cf-cache-status: HIT
age: 6476
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Zfq8U9lOPIWEQ5zp8IdymWajb0Zbm2fSa3xKVXLghODjBjFOIZ4DS2HA%2F4dcEWCeWr71B8w1fk65Se9X25tqjoD7bN0laGD9AMXo%2F7BiPdvEvr7XAvKOTes%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87e6d5cb0e09b51d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2 | 216.58.207.227 | 200 OK | 15 kB |
URL GET HTTP/3fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2 IP216.58.207.227:443
Requested byhttps://www.google.com/recaptcha/api2/anchor?ar=1&k=6LcUoOQUAAAAANHj_juVSgLjxCWAABmUxJr-DhCw&co=aHR0cHM6Ly9nb28uYnk6NDQz&hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&size=invisible&cb=lncp6oz3ywua CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com Fingerprint15:DD:05:B3:2F:D8:E3:54:C9:B4:FA:E4:AC:01:ED:C8:E1:EA:A7:AD ValidityTue, 16 Apr 2024 04:17:07 GMT - Tue, 09 Jul 2024 04:17:06 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 15344, version 1.0 Hash5d4aeb4e5f5ef754e307d7ffaef688bd 06db651cdf354c64a7383ea9c77024ef4fb4cef8 3e253b66056519aa065b00a453bac37ac5ed8f3e6fe7b542e93a9dcdcc11d0bc
GET /s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.google.com
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15344
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 03 May 2024 16:31:04 GMT
expires: Sat, 03 May 2025 16:31:04 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 16 Oct 2017 17:32:55 GMT
content-type: font/woff2
age: 54484
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 | 216.58.207.227 | 200 OK | 16 kB |
URL GET HTTP/3fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 IP216.58.207.227:443
Requested byhttps://www.google.com/recaptcha/api2/anchor?ar=1&k=6LcUoOQUAAAAANHj_juVSgLjxCWAABmUxJr-DhCw&co=aHR0cHM6Ly9nb28uYnk6NDQz&hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&size=invisible&cb=lncp6oz3ywua CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com Fingerprint15:DD:05:B3:2F:D8:E3:54:C9:B4:FA:E4:AC:01:ED:C8:E1:EA:A7:AD ValidityTue, 16 Apr 2024 04:17:07 GMT - Tue, 09 Jul 2024 04:17:06 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 15552, version 1.0 Hash285467176f7fe6bb6a9c6873b3dad2cc ea04e4ff5142ddd69307c183def721a160e0a64e 5a8c1e7681318caa29e9f44e8a6e271f6a4067a2703e9916dfd4fe9099241db7
GET /s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.google.com
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15552
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 02 May 2024 01:50:52 GMT
expires: Fri, 02 May 2025 01:50:52 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 16 Oct 2017 17:33:02 GMT
content-type: font/woff2
age: 193696
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| www.google.com/js/bg/bUdxsAjTAIzRSD77hvzEWafZZa_dWpPwAsOs2AXeH2g.js | 216.58.211.4 | 200 OK | 7.5 kB |
URL GET HTTP/3www.google.com/js/bg/bUdxsAjTAIzRSD77hvzEWafZZa_dWpPwAsOs2AXeH2g.js IP216.58.211.4:443
Requested byhttps://www.google.com/recaptcha/api2/anchor?ar=1&k=6LcUoOQUAAAAANHj_juVSgLjxCWAABmUxJr-DhCw&co=aHR0cHM6Ly9nb28uYnk6NDQz&hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&size=invisible&cb=lncp6oz3ywua CertificateIssuerGoogle Trust Services LLC Subject*.google.com Fingerprint7C:B7:E1:97:03:6E:82:B6:52:F8:EC:C6:C6:50:D9:DD:80:47:E6:A0 ValidityTue, 16 Apr 2024 03:18:53 GMT - Tue, 09 Jul 2024 03:18:52 GMT
File typeJavaScript source, ASCII text, with very long lines (17649) Hash85eff967b6703760e0e562179e7ef0ef a4567db32ae2ea7049209561d2edde3d26fbef88 6d4771b008d3008cd1483efb86fcc459a7d965afdd5a93f002c3acd805de1f68
GET /js/bg/bUdxsAjTAIzRSD77hvzEWafZZa_dWpPwAsOs2AXeH2g.js HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LcUoOQUAAAAANHj_juVSgLjxCWAABmUxJr-DhCw&co=aHR0cHM6Ly9nb28uYnk6NDQz&hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&size=invisible&cb=lncp6oz3ywua
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: br
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/botguard-scs
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="botguard-scs"
report-to: {"group":"botguard-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/botguard-scs"}]}
content-length: 7493
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 03 May 2024 03:43:48 GMT
expires: Sat, 03 May 2025 03:43:48 GMT
cache-control: public, max-age=31536000
last-modified: Tue, 23 Apr 2024 17:30:00 GMT
content-type: text/javascript
vary: Accept-Encoding
age: 100520
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| www.gstatic.com/recaptcha/api2/logo_48.png | 142.250.74.131 | 200 OK | 2.2 kB |
URL GET HTTP/3www.gstatic.com/recaptcha/api2/logo_48.png IP142.250.74.131:443
Requested byhttps://www.google.com/recaptcha/api2/anchor?ar=1&k=6LcUoOQUAAAAANHj_juVSgLjxCWAABmUxJr-DhCw&co=aHR0cHM6Ly9nb28uYnk6NDQz&hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&size=invisible&cb=lncp6oz3ywua CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com Fingerprint15:DD:05:B3:2F:D8:E3:54:C9:B4:FA:E4:AC:01:ED:C8:E1:EA:A7:AD ValidityTue, 16 Apr 2024 04:17:07 GMT - Tue, 09 Jul 2024 04:17:06 GMT
File typePNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced Hashef9941290c50cd3866e2ba6b793f010d 4736508c795667dcea21f8d864233031223b7832 1b9efb22c938500971aac2b2130a475fa23684dd69e43103894968df83145b8a
GET /recaptcha/api2/logo_48.png HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.gstatic.com/recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/styles__ltr.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 2228
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 03 May 2024 00:37:29 GMT
expires: Fri, 10 May 2024 00:37:29 GMT
cache-control: public, max-age=604800
last-modified: Tue, 03 Mar 2020 20:15:00 GMT
content-type: image/png
age: 111699
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| www.google.com/recaptcha/api2/webworker.js?hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m | 216.58.211.4 | 200 OK | 206 kB |
URL GET HTTP/3www.google.com/recaptcha/api2/webworker.js?hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m IP216.58.211.4:443
Requested byhttps://www.google.com/recaptcha/api2/anchor?ar=1&k=6LcUoOQUAAAAANHj_juVSgLjxCWAABmUxJr-DhCw&co=aHR0cHM6Ly9nb28uYnk6NDQz&hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&size=invisible&cb=lncp6oz3ywua CertificateIssuerGoogle Trust Services LLC Subject*.google.com Fingerprint7C:B7:E1:97:03:6E:82:B6:52:F8:EC:C6:C6:50:D9:DD:80:47:E6:A0 ValidityTue, 16 Apr 2024 03:18:53 GMT - Tue, 09 Jul 2024 03:18:52 GMT
File typeJavaScript source, ASCII text, with very long lines (631) Size206 kB (205913 bytes) Hashe4eb924eec164dfe5fb43e5d8e6b2a2f 582bad0eac6440aa49632ca1e24d7a52a89d7d92 428ed37cf336160c986f3c470a345bd9790e95d119cfb794767637df59eb3a59
GET /recaptcha/api2/webworker.js?hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LcUoOQUAAAAANHj_juVSgLjxCWAABmUxJr-DhCw&co=aHR0cHM6Ly9nb28uYnk6NDQz&hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&size=invisible&cb=lncp6oz3ywua
Sec-Fetch-Dest: worker
Sec-Fetch-Mode: same-origin
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: text/javascript; charset=utf-8
cross-origin-embedder-policy: require-corp
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
expires: Sat, 04 May 2024 07:39:08 GMT
date: Sat, 04 May 2024 07:39:08 GMT
cache-control: private, max-age=300
content-encoding: gzip
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
x-xss-protection: 1; mode=block
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| www.google.com/recaptcha/api2/clr?k=6LcUoOQUAAAAANHj_juVSgLjxCWAABmUxJr-DhCw | 216.58.211.4 | 200 OK | 0 B |
URL POST HTTP/3www.google.com/recaptcha/api2/clr?k=6LcUoOQUAAAAANHj_juVSgLjxCWAABmUxJr-DhCw IP216.58.211.4:443
Requested byhttps://www.google.com/recaptcha/api2/anchor?ar=1&k=6LcUoOQUAAAAANHj_juVSgLjxCWAABmUxJr-DhCw&co=aHR0cHM6Ly9nb28uYnk6NDQz&hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&size=invisible&cb=lncp6oz3ywua CertificateIssuerGoogle Trust Services LLC Subject*.google.com Fingerprint7C:B7:E1:97:03:6E:82:B6:52:F8:EC:C6:C6:50:D9:DD:80:47:E6:A0 ValidityTue, 16 Apr 2024 03:18:53 GMT - Tue, 09 Jul 2024 03:18:52 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /recaptcha/api2/clr?k=6LcUoOQUAAAAANHj_juVSgLjxCWAABmUxJr-DhCw HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-protobuf
Content-Length: 1458
Origin: https://www.google.com
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LcUoOQUAAAAANHj_juVSgLjxCWAABmUxJr-DhCw&co=aHR0cHM6Ly9nb28uYnk6NDQz&hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&size=invisible&cb=lncp6oz3ywua
Cookie: _GRECAPTCHA=09AIgNtRUjJJ-uA-ojV-B6LqY5PoZaaoZg33eRYwHMSF1yNV-Ier-46dzgw6dRss84I3W6VILa7-QcABzcge4sOng
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/binary
date: Sat, 04 May 2024 07:39:09 GMT
expires: Sat, 04 May 2024 07:39:09 GMT
cache-control: private, max-age=0
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
x-xss-protection: 1; mode=block
content-length: 0
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| www.google.com/recaptcha/api.js?hl=en&render=6LcUoOQUAAAAANHj_juVSgLjxCWAABmUxJr-DhCw | 216.58.211.4 | 200 OK | 884 B |
URL GET HTTP/2www.google.com/recaptcha/api.js?hl=en&render=6LcUoOQUAAAAANHj_juVSgLjxCWAABmUxJr-DhCw IP216.58.211.4:443
CertificateIssuerGoogle Trust Services LLC Subjectwww.google.com FingerprintC6:A2:DC:31:5A:53:FA:DD:55:71:A3:F4:DD:43:3D:16:71:B8:B3:99 ValidityTue, 16 Apr 2024 04:20:32 GMT - Tue, 09 Jul 2024 04:20:31 GMT
File typeJavaScript source, ASCII text, with very long lines (884), with no line terminators Hash8eed34ee5682cd7f973cf3c6ac9e9794 d040af8e178f3c9e370421632ecd8443f612415b 47b0bd5e1cf3922c3cef7088f09b322130325ca71206893bdd661ff6425e57c6
GET /recaptcha/api.js?hl=en&render=6LcUoOQUAAAAANHj_juVSgLjxCWAABmUxJr-DhCw HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://goo.by/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/javascript; charset=utf-8
expires: Sat, 04 May 2024 07:39:07 GMT
date: Sat, 04 May 2024 07:39:07 GMT
cache-control: private, max-age=300
cross-origin-resource-policy: cross-origin
content-encoding: gzip
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
x-xss-protection: 1; mode=block
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| goo.by/static/frontend/fonts/ProductSansBold.woff2 | 104.21.86.233 | 200 OK | 20 kB |
URL GET HTTP/3goo.by/static/frontend/fonts/ProductSansBold.woff2 IP104.21.86.233:443
CertificateIssuerGoogle Trust Services LLC Subjectgoo.by Fingerprint03:D4:14:16:09:C7:C4:60:8A:FE:CC:5B:63:26:F3:3A:FA:A2:BF:4D ValidityThu, 14 Mar 2024 15:06:08 GMT - Wed, 12 Jun 2024 15:06:07 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 20076, version 1.0 Hash13a47ee656cbc436ca8fa57bb9a8dd83 19b89ca9746162164048c2ed3b6b40c6442766b2 d0b7851b22885a5bdbdff394d13dd99be03f6f6909790db9f5f6025cde6dac4e
| Analyzer | Verdict | Alert |
|---|
| PhishTank | phishing | Other | | Quad9 DNS | malicious | Sinkholed |
GET /static/frontend/fonts/ProductSansBold.woff2 HTTP/1.1
Host: goo.by
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://goo.by/static/frontend/css/main-style.css?127
Cookie: PHPSESSID=pc12ofq8hb0f4ffr3n18afqlnf
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 07:39:07 GMT
content-type: font/woff2
content-length: 20076
last-modified: Mon, 26 Jun 2023 21:00:00 GMT
etag: "6499fc50-4e6c"
strict-transport-security: max-age=31536000
cf-cache-status: HIT
age: 6476
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=wNTngsWtMe8FxthJEEmjN4ikbRu3E2z0m1J86UGlG73mVRhgl7sqzEEYtJm1kRJ9lwxkqzT6jO7%2Bf3hmEw0e%2FZPzMHGyZoW%2B31EAvTbNLY3JmvZS01yxiMM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87e6d5cdc8e1b51d-OSL
alt-svc: h3=":443"; ma=86400
|
|
| goo.by/static/frontend/css/main-style.css?127 | 104.21.86.233 | 200 OK | 12 kB |
URL GET HTTP/3goo.by/static/frontend/css/main-style.css?127 IP104.21.86.233:443
CertificateIssuerGoogle Trust Services LLC Subjectgoo.by Fingerprint03:D4:14:16:09:C7:C4:60:8A:FE:CC:5B:63:26:F3:3A:FA:A2:BF:4D ValidityThu, 14 Mar 2024 15:06:08 GMT - Wed, 12 Jun 2024 15:06:07 GMT
File typeASCII text, with very long lines (12314), with no line terminators Hash140b0de26704b056ef9d586ee48f325c 92f683ea9517987c360fda2a91db3b1edddc8993 07c9b35783b51438b0a0f508524c2184c98546989f8a0f6573cca67e4c23b569
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /static/frontend/css/main-style.css?127 HTTP/1.1
Host: goo.by
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://goo.by/
Cookie: PHPSESSID=pc12ofq8hb0f4ffr3n18afqlnf
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 07:39:07 GMT
content-type: text/css
cf-bgj: minify
cf-polished: origSize=17584
etag: W/"65231850-44b0"
last-modified: Sun, 08 Oct 2023 21:00:00 GMT
strict-transport-security: max-age=31536000
cf-cache-status: HIT
age: 6476
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=8vIFRG%2FxibKiVVLAHXVT0Cz%2Bma6%2FsxW2L6GYFA%2BN2Q3aWiwXMk%2FOKztAa2K3x%2Fbc86Rc6FIm1OSey2ZcuLsFYZ7atrUlAqMJ0KupRtmD7p%2Bvt8kOO49Y4QM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87e6d5cb1e1ab51d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| | 104.21.86.233 | 200 OK | 61 kB |
URL User Request GET HTTP/3IP104.21.86.233:443
CertificateIssuerGoogle Trust Services LLC Subjectgoo.by Fingerprint03:D4:14:16:09:C7:C4:60:8A:FE:CC:5B:63:26:F3:3A:FA:A2:BF:4D ValidityThu, 14 Mar 2024 15:06:08 GMT - Wed, 12 Jun 2024 15:06:07 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| PhishTank | phishing | Other | | Quad9 DNS | malicious | Sinkholed |
GET / HTTP/1.1
Host: goo.by
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: PHPSESSID=pc12ofq8hb0f4ffr3n18afqlnf
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 07:39:07 GMT
content-type: text/html; charset=UTF-8
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
strict-transport-security: max-age=31536000
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Eftmoo0S8NCMAu6CwKrV%2BhZme26XH%2F5GDhQ4%2Bg6ThXsyE3SfdYWRMu3rHhh3%2F%2BIn2wt4W1Va955nB0PYrDVk1vXzEVZqotucTlHKGYz4mXg53pUPgzN8PDU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e6d5c7db3eb51d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| goo.by/static/frontend/css/owl.carousel.min.css | 104.21.86.233 | 200 OK | 3.4 kB |
URL GET HTTP/3goo.by/static/frontend/css/owl.carousel.min.css IP104.21.86.233:443
CertificateIssuerGoogle Trust Services LLC Subjectgoo.by Fingerprint03:D4:14:16:09:C7:C4:60:8A:FE:CC:5B:63:26:F3:3A:FA:A2:BF:4D ValidityThu, 14 Mar 2024 15:06:08 GMT - Wed, 12 Jun 2024 15:06:07 GMT
File typeASCII text, with very long lines (3360), with no line terminators Hash06f43716d0212754cb1515bbbdf64363 279aeb287509128c33862dd0036c9e5e4aeeef64 2d73eb5bd445ed88512875da316dfaedb52fd7fb2b30e94e9b6cb139f05d0c36
| Analyzer | Verdict | Alert |
|---|
| PhishTank | phishing | Other | | Quad9 DNS | malicious | Sinkholed |
GET /static/frontend/css/owl.carousel.min.css HTTP/1.1
Host: goo.by
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://goo.by/
Cookie: PHPSESSID=pc12ofq8hb0f4ffr3n18afqlnf
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 07:39:07 GMT
content-type: text/css
last-modified: Wed, 13 Jan 2021 21:00:00 GMT
etag: W/"5fff5f50-d17"
strict-transport-security: max-age=31536000
cf-cache-status: HIT
age: 6476
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=38o4JxZI3x%2FZto77ai8jLXYk0SIs%2Bgit45b1bcpNl18mGudowWBH78si4pXSF8yGZsAwVH9xC3whlnaq%2B4VSsOo4DkXvD%2FmWf4gZGCI5jFmIWEI8IdUm0iU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87e6d5cb1e14b51d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| goo.by/favicon.ico | 104.21.86.233 | 200 OK | 15 kB |
IP104.21.86.233:443
CertificateIssuerGoogle Trust Services LLC Subjectgoo.by Fingerprint03:D4:14:16:09:C7:C4:60:8A:FE:CC:5B:63:26:F3:3A:FA:A2:BF:4D ValidityThu, 14 Mar 2024 15:06:08 GMT - Wed, 12 Jun 2024 15:06:07 GMT
File typeMS Windows icon resource - 3 icons, 48x48, 32 bits/pixel, 32x32, 32 bits/pixel Hashbbb398f1a44d5bddb9bf3ef50133cba4 13832932e0a46129cf7263130aaa9d8be2609689 6668e0b78f5c65698c0a3a3e48d447f4d703609a774cacabda1ef7ad143a529b
| Analyzer | Verdict | Alert |
|---|
| PhishTank | phishing | Other | | Quad9 DNS | malicious | Sinkholed |
GET /favicon.ico HTTP/1.1
Host: goo.by
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://goo.by/
Cookie: PHPSESSID=pc12ofq8hb0f4ffr3n18afqlnf
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 07:39:07 GMT
content-type: image/x-icon
last-modified: Tue, 15 Mar 2022 21:00:00 GMT
etag: W/"6230fe50-3aee"
strict-transport-security: max-age=31536000
cf-cache-status: HIT
age: 6475
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=4qVXikzvuQFaqIbW3qY%2BH0xzGI24nahQCjLSoPPK9xx1L6BXvoWhU8SOyoWIBx%2F7klHp5K9n82%2BxdOI2jEBTosULzS2swp%2F84%2Fp%2B%2BwcW8KcSinJFkEFGf3g%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87e6d5cee987b51d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| goo.by/static/frontend/css/media-queries.css?v118 | 104.21.86.233 | 200 OK | 2.0 kB |
URL GET HTTP/3goo.by/static/frontend/css/media-queries.css?v118 IP104.21.86.233:443
CertificateIssuerGoogle Trust Services LLC Subjectgoo.by Fingerprint03:D4:14:16:09:C7:C4:60:8A:FE:CC:5B:63:26:F3:3A:FA:A2:BF:4D ValidityThu, 14 Mar 2024 15:06:08 GMT - Wed, 12 Jun 2024 15:06:07 GMT
File typeASCII text, with very long lines (1957), with no line terminators Hash5d34dba97baea9dd45143175e74122b2 268c7c2b7c811fb7abfc567fb14b449c3b35d529 78aa8fb69ae4ef9ab5af7815d44449b512137223880dcc7302fd8b3aa91823e7
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /static/frontend/css/media-queries.css?v118 HTTP/1.1
Host: goo.by
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://goo.by/
Cookie: PHPSESSID=pc12ofq8hb0f4ffr3n18afqlnf
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 07:39:07 GMT
content-type: text/css
cf-bgj: minify
cf-polished: origSize=3357
etag: W/"662c7cab-d1d"
last-modified: Sat, 27 Apr 2024 04:18:51 GMT
strict-transport-security: max-age=31536000
cf-cache-status: HIT
age: 6476
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=V2KM8dXyWkGZf%2Fe79FT%2FileWPk3I7Xmm40Ri7MKoFKFaMRO00pY%2BjJfd%2BM5M2aDTSqCzH2Z41hTEaa%2B4SELSkCk3d6YjlxwJwc0bGWmem74jBYO4spsOilw%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87e6d5cb1e1cb51d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| goo.by/static/frontend/libs/cookieconsent/cookieconsent.css | 104.21.86.233 | 200 OK | 19 kB |
URL GET HTTP/3goo.by/static/frontend/libs/cookieconsent/cookieconsent.css IP104.21.86.233:443
CertificateIssuerGoogle Trust Services LLC Subjectgoo.by Fingerprint03:D4:14:16:09:C7:C4:60:8A:FE:CC:5B:63:26:F3:3A:FA:A2:BF:4D ValidityThu, 14 Mar 2024 15:06:08 GMT - Wed, 12 Jun 2024 15:06:07 GMT
File typeASCII text, with very long lines (18785), with no line terminators Hash9515c583afb986f4eabd856cbfa87366 f1e1dc181d598fbdedab2fbb9c6d78cff257eccd 55584e5df2cbee159381522d38d5e31ba145f35c69f6f8b7c1aaa8676b2c0a7e
| Analyzer | Verdict | Alert |
|---|
| PhishTank | phishing | Other | | Quad9 DNS | malicious | Sinkholed |
GET /static/frontend/libs/cookieconsent/cookieconsent.css HTTP/1.1
Host: goo.by
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://goo.by/
Cookie: PHPSESSID=pc12ofq8hb0f4ffr3n18afqlnf
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 07:39:07 GMT
content-type: text/css
cf-bgj: minify
cf-polished: origSize=18803
etag: W/"639644d0-4973"
last-modified: Sun, 11 Dec 2022 21:00:00 GMT
strict-transport-security: max-age=31536000
cf-cache-status: HIT
age: 6476
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=4stS7X8eL%2B%2Bp5bajvM69hbBAZi7AFK2yrvUg47iPvLuCVa41Zz2vIGyoE4xZWIGOu2BRrBJSW3oJLa6DCuQuOA5JH2T8YxdMlwfkFhZ4E0unLbaZMfhvgmw%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87e6d5cb1e10b51d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| www.google.com/recaptcha/api2/reload?k=6LcUoOQUAAAAANHj_juVSgLjxCWAABmUxJr-DhCw | 216.58.211.4 | 200 OK | 12 kB |
URL POST HTTP/3www.google.com/recaptcha/api2/reload?k=6LcUoOQUAAAAANHj_juVSgLjxCWAABmUxJr-DhCw IP216.58.211.4:443
Requested byhttps://www.google.com/recaptcha/api2/anchor?ar=1&k=6LcUoOQUAAAAANHj_juVSgLjxCWAABmUxJr-DhCw&co=aHR0cHM6Ly9nb28uYnk6NDQz&hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&size=invisible&cb=lncp6oz3ywua CertificateIssuerGoogle Trust Services LLC Subject*.google.com Fingerprint7C:B7:E1:97:03:6E:82:B6:52:F8:EC:C6:C6:50:D9:DD:80:47:E6:A0 ValidityTue, 16 Apr 2024 03:18:53 GMT - Tue, 09 Jul 2024 03:18:52 GMT
File typeASCII text, with very long lines (11760) Hash844b064c9e487f465e6470636f7ee047 53e116cc5095788f524b500e49fddf125babcb52 804b76ad84627596b198e6cf7b82ae8c19dd0e8af861b3497ab03ee97aad74b3
POST /recaptcha/api2/reload?k=6LcUoOQUAAAAANHj_juVSgLjxCWAABmUxJr-DhCw HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-protobuffer
Content-Length: 6862
Origin: https://www.google.com
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LcUoOQUAAAAANHj_juVSgLjxCWAABmUxJr-DhCw&co=aHR0cHM6Ly9nb28uYnk6NDQz&hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&size=invisible&cb=lncp6oz3ywua
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: application/json; charset=utf-8
content-encoding: gzip
date: Sat, 04 May 2024 07:39:09 GMT
expires: Sat, 04 May 2024 07:39:09 GMT
cache-control: private, max-age=0
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
x-xss-protection: 1; mode=block
server: GSE
set-cookie: _GRECAPTCHA=09AIgNtRUjJJ-uA-ojV-B6LqY5PoZaaoZg33eRYwHMSF1yNV-Ier-46dzgw6dRss84I3W6VILa7-QcABzcge4sOng;Path=/recaptcha;Expires=Thu, 31-Oct-2024 07:39:09 GMT;Secure;HttpOnly;Priority=HIGH;SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| goo.by/static/frontend/js/js.js?v=1.28 | 104.21.86.233 | 200 OK | 4.9 kB |
URL GET HTTP/3goo.by/static/frontend/js/js.js?v=1.28 IP104.21.86.233:443
CertificateIssuerGoogle Trust Services LLC Subjectgoo.by Fingerprint03:D4:14:16:09:C7:C4:60:8A:FE:CC:5B:63:26:F3:3A:FA:A2:BF:4D ValidityThu, 14 Mar 2024 15:06:08 GMT - Wed, 12 Jun 2024 15:06:07 GMT
File typeJavaScript source, ASCII text, with very long lines (4986), with no line terminators Hash57d46be98236403a1a04d5dcd3f08bf3 34d8e97ecd3a87f7b9b74ac9373ef364d613444b fe64df29db5431d391f3ac9c0889d9c05fe706f6bc08604568ce5bcc9db035a8
| Analyzer | Verdict | Alert |
|---|
| PhishTank | phishing | Other | | Quad9 DNS | malicious | Sinkholed |
GET /static/frontend/js/js.js?v=1.28 HTTP/1.1
Host: goo.by
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://goo.by/
Cookie: PHPSESSID=pc12ofq8hb0f4ffr3n18afqlnf
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 07:39:07 GMT
content-type: application/javascript; charset=utf-8
cf-bgj: minify
cf-polished: origSize=6312
etag: W/"64e91650-18a8"
last-modified: Fri, 25 Aug 2023 21:00:00 GMT
strict-transport-security: max-age=31536000
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=0Zw8kP6LhiGW8SvL435j4ZVBYHXOKmwkPJ2oTWTWoe0A5hgSlzwxUO%2BVp7p4VgIVhJn%2FjjJoz%2BOvHym5ayQtcd%2FEIeMOSJS1vauiU35FG3AivqxdFJIhgx0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87e6d5cb4e4ab51d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| goo.by/static/frontend/css/reset.css?v37 | 104.21.86.233 | 200 OK | 477 kB |
URL GET HTTP/3goo.by/static/frontend/css/reset.css?v37 IP104.21.86.233:443
CertificateIssuerGoogle Trust Services LLC Subjectgoo.by Fingerprint03:D4:14:16:09:C7:C4:60:8A:FE:CC:5B:63:26:F3:3A:FA:A2:BF:4D ValidityThu, 14 Mar 2024 15:06:08 GMT - Wed, 12 Jun 2024 15:06:07 GMT
Size477 kB (477324 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| PhishTank | phishing | Other | | Quad9 DNS | malicious | Sinkholed |
GET /static/frontend/css/reset.css?v37 HTTP/1.1
Host: goo.by
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://goo.by/
Cookie: PHPSESSID=pc12ofq8hb0f4ffr3n18afqlnf
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 07:39:07 GMT
content-type: text/css
cf-bgj: minify
cf-polished: origSize=666309
etag: W/"64e3d050-a2ac5"
last-modified: Mon, 21 Aug 2023 21:00:00 GMT
strict-transport-security: max-age=31536000
cf-cache-status: HIT
age: 6476
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=aVMzDbU547BKy4MZRqosAIdNyD%2F%2FUePvWERFN4ScGcBjC91kJgL3PuX2A%2FTSM%2BtnOa64IM1wI1xoCdOyWP2e%2F0GtlZhaR0GJm1fYDttsUyqE03EeeUeEHcU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87e6d5cb1e12b51d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| goo.by/static/bundle.pack.js | 104.21.86.233 | 200 OK | 332 kB |
URL GET HTTP/3goo.by/static/bundle.pack.js IP104.21.86.233:443
CertificateIssuerGoogle Trust Services LLC Subjectgoo.by Fingerprint03:D4:14:16:09:C7:C4:60:8A:FE:CC:5B:63:26:F3:3A:FA:A2:BF:4D ValidityThu, 14 Mar 2024 15:06:08 GMT - Wed, 12 Jun 2024 15:06:07 GMT
Size332 kB (331782 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| PhishTank | phishing | Other | | Quad9 DNS | malicious | Sinkholed |
GET /static/bundle.pack.js HTTP/1.1
Host: goo.by
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://goo.by/
Cookie: PHPSESSID=pc12ofq8hb0f4ffr3n18afqlnf
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 07:39:07 GMT
content-type: application/javascript; charset=utf-8
cf-bgj: minify
cf-polished: origSize=331817
etag: W/"6179bdd0-51029"
last-modified: Wed, 27 Oct 2021 21:00:00 GMT
strict-transport-security: max-age=31536000
cf-cache-status: HIT
age: 6476
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=nJqT6AN4b%2By7EyNh4DZFUP4CNW9CVuqggaAjDBzgasgP7mVQ6eLB8lVgXwyExW6RIGInPFO3olKSy%2BJOKfIHdLtnVoWX0qlrXD4mS4tTbuYxC0oYwNwlSgU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87e6d5cb3e39b51d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| www.google.com/recaptcha/api2/anchor?ar=1&k=6LcUoOQUAAAAANHj_juVSgLjxCWAABmUxJr-DhCw&co=aHR0cHM6Ly9nb28uYnk6NDQz&hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&size=invisible&cb=lncp6oz3ywua | 216.58.211.4 | 200 OK | 46 kB |
URL GET HTTP/3www.google.com/recaptcha/api2/anchor?ar=1&k=6LcUoOQUAAAAANHj_juVSgLjxCWAABmUxJr-DhCw&co=aHR0cHM6Ly9nb28uYnk6NDQz&hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&size=invisible&cb=lncp6oz3ywua IP216.58.211.4:443
CertificateIssuerGoogle Trust Services LLC Subject*.google.com Fingerprint7C:B7:E1:97:03:6E:82:B6:52:F8:EC:C6:C6:50:D9:DD:80:47:E6:A0 ValidityTue, 16 Apr 2024 03:18:53 GMT - Tue, 09 Jul 2024 03:18:52 GMT
File typeHTML document, ASCII text, with very long lines (37716) Hash57a85d65984802c21353ed0e6b5493bb bb9bf4644be46d2cbdba7a505173b0c092881036 2e411fb4823ebbc93523c6de4ff5a6ce570c8e67721389db4587c390d4f9bfe5
GET /recaptcha/api2/anchor?ar=1&k=6LcUoOQUAAAAANHj_juVSgLjxCWAABmUxJr-DhCw&co=aHR0cHM6Ly9nb28uYnk6NDQz&hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&size=invisible&cb=lncp6oz3ywua HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://goo.by/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: text/html; charset=utf-8
cross-origin-resource-policy: cross-origin
cross-origin-embedder-policy: require-corp
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Sat, 04 May 2024 07:39:08 GMT
content-security-policy: script-src 'nonce-frsmZT_EWLYSRwDkksRpMA' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| | 104.21.86.233 | 301 Moved Permanently | 61 kB |
URL User Request GET HTTP/2IP104.21.86.233:443
CertificateIssuerGoogle Trust Services LLC Subjectgoo.by Fingerprint03:D4:14:16:09:C7:C4:60:8A:FE:CC:5B:63:26:F3:3A:FA:A2:BF:4D ValidityThu, 14 Mar 2024 15:06:08 GMT - Wed, 12 Jun 2024 15:06:07 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| PhishTank | phishing | Other | | Quad9 DNS | malicious | Sinkholed |
GET /fdRqsi HTTP/1.1
Host: goo.by
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 301 Moved Permanently
date: Sat, 04 May 2024 07:39:06 GMT
content-type: text/html; charset=UTF-8
set-cookie: PHPSESSID=pc12ofq8hb0f4ffr3n18afqlnf; path=/
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
location: /
strict-transport-security: max-age=31536000
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=A7spQlWtGl0K8yLCHSg2EyEg5netDS4WF5DKjaiR2Ar3juVTaAEFWj7VPqghks4aezgScdoM2xAa1eaTFilg6XSHDqYfpvnslFEItMoYX3RrXUGdhab38IU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e6d5c67bba5684-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| goo.by/static/frontend/js/readmore.min.js?v=1.2 | 104.21.86.233 | 200 OK | 4.4 kB |
URL GET HTTP/3goo.by/static/frontend/js/readmore.min.js?v=1.2 IP104.21.86.233:443
CertificateIssuerGoogle Trust Services LLC Subjectgoo.by Fingerprint03:D4:14:16:09:C7:C4:60:8A:FE:CC:5B:63:26:F3:3A:FA:A2:BF:4D ValidityThu, 14 Mar 2024 15:06:08 GMT - Wed, 12 Jun 2024 15:06:07 GMT
File typeJavaScript source, ASCII text, with very long lines (4611), with no line terminators Hash4403b1ebbb9e690c33cbddf4fef4af9c c3360998542bd400146ee3a055b97bd4438eb2c9 f00bd0fd827fdfb6e2fe7e6790abb5c6313f1fa22561041d78e38420063a0658
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /static/frontend/js/readmore.min.js?v=1.2 HTTP/1.1
Host: goo.by
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://goo.by/
Cookie: PHPSESSID=pc12ofq8hb0f4ffr3n18afqlnf
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 07:39:07 GMT
content-type: application/javascript; charset=utf-8
last-modified: Fri, 25 Aug 2023 21:00:00 GMT
etag: W/"64e91650-1155"
strict-transport-security: max-age=31536000
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=yUuPq8Th98J8BldYDhkzAytslADtONr3WZ8z%2BKytkiUBVpCTcISyla%2BaJdec5GlvAI43gYTKLTB7zgq44by1EmaFOcz5CvCtwAOHRldw8jJXLvyrZ1I0RwY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87e6d5cb4e49b51d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| goo.by/static/frontend/libs/typedjs/typed.min.js | 104.21.86.233 | 200 OK | 12 kB |
URL GET HTTP/3goo.by/static/frontend/libs/typedjs/typed.min.js IP104.21.86.233:443
CertificateIssuerGoogle Trust Services LLC Subjectgoo.by Fingerprint03:D4:14:16:09:C7:C4:60:8A:FE:CC:5B:63:26:F3:3A:FA:A2:BF:4D ValidityThu, 14 Mar 2024 15:06:08 GMT - Wed, 12 Jun 2024 15:06:07 GMT
File typeJavaScript source, ASCII text, with very long lines (11549) Hashf68641147185cbded4b38b4900a20f40 e8ce2b674a637b0c0396a3106c1aedf10186249c 39b5f0a136ac9c139981b89e2ee615ac75fed86c0761c7ebf87d827be7d86e5e
| Analyzer | Verdict | Alert |
|---|
| PhishTank | phishing | Other | | Quad9 DNS | malicious | Sinkholed |
GET /static/frontend/libs/typedjs/typed.min.js HTTP/1.1
Host: goo.by
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://goo.by/
Cookie: PHPSESSID=pc12ofq8hb0f4ffr3n18afqlnf
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 07:39:07 GMT
content-type: application/javascript; charset=utf-8
last-modified: Tue, 24 Jan 2023 21:00:00 GMT
etag: W/"63d046d0-2de9"
strict-transport-security: max-age=31536000
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ayn%2FnWbK066g%2FVg8T%2FRlCDs5yGsHcK4byXttx2o1e9%2Bb%2F4yIlRvAxdxqPLvpyZI%2BjgP%2BaBtahYwINIaSxt09chH3zTnoJQ7EKzg%2BaVMPz%2BtVouJhm7kCsG4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87e6d5cb3e41b51d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| goo.by/static/frontend/libs/clipboard/dist/clipboard.min.js | 104.21.86.233 | 200 OK | 10 kB |
URL GET HTTP/3goo.by/static/frontend/libs/clipboard/dist/clipboard.min.js IP104.21.86.233:443
CertificateIssuerGoogle Trust Services LLC Subjectgoo.by Fingerprint03:D4:14:16:09:C7:C4:60:8A:FE:CC:5B:63:26:F3:3A:FA:A2:BF:4D ValidityThu, 14 Mar 2024 15:06:08 GMT - Wed, 12 Jun 2024 15:06:07 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| PhishTank | phishing | Other | | Quad9 DNS | malicious | Sinkholed |
GET /static/frontend/libs/clipboard/dist/clipboard.min.js HTTP/1.1
Host: goo.by
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://goo.by/
Cookie: PHPSESSID=pc12ofq8hb0f4ffr3n18afqlnf
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 07:39:07 GMT
content-type: application/javascript; charset=utf-8
last-modified: Thu, 24 Oct 1985 21:00:00 GMT
etag: W/"1dbeadd0-28d5"
strict-transport-security: max-age=31536000
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=9Q%2B7G5KKQGe8pv8VTA5%2FM7MmktqBvPkuTS6zQx39psdrcBMP104geixxTw3vweIQsUYcOQXO6o4B1SX%2FqTYsESpBt6%2F1bLETCWfAPeMwPvmzVUbHbiO4FpE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87e6d5cb3e3db51d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|