ocsp.r2m02.amazontrust.com/
143.204.48.16 471 B URL ocsp.r2m02.amazontrust.com/
IP 143.204.48.16:0
Hash 623f3305858c8414306dabbb45a90931
0e6d9965066eef6f38873e7fb81bd6ccd863820c
034ca23944f599ab3262bcfd72b89742d374e5ddcacda57e2d5245c619ae28a7
POST / HTTP/1.1
Host: ocsp.r2m02.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=7200
Date: Tue, 03 Oct 2023 14:02:06 GMT
Last-Modified: Tue, 03 Oct 2023 12:19:47 GMT
Server: ECAcc (ska/F78F)
X-Cache: Miss from cloudfront
Via: 1.1 9ede9483eb891e14681c7c693b47c862.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: 7-QrWKnm-BpssAmq5zw3saex58iZ-Uluof5SKuD-QrdMC80UGQ90ZA==
Age: 6139
tracker.club-os.com/campaign/click?msgId=&test=true&target=https://coastalbodies.com.au/new/auth/diouvu/anNjaHdhcnR6QGVzaWdyb3VwdXNhLmNvbQ==
44.215.63.61 0 B URL tracker.club-os.com/campaign/click?msgId=&test=true&target=https://coastalbodies.com.au/new/auth/diouvu/anNjaHdhcnR6QGVzaWdyb3VwdXNhLmNvbQ==
IP 44.215.63.61:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /campaign/click?msgId=&test=true&target=https://coastalbodies.com.au/new/auth/diouvu/anNjaHdhcnR6QGVzaWdyb3VwdXNhLmNvbQ== HTTP/1.1
Host: tracker.club-os.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 303 See Other
date: Tue, 03 Oct 2023 14:02:06 GMT
content-length: 0
location: https://coastalbodies.com.au/new/auth/diouvu/anNjaHdhcnR6QGVzaWdyb3VwdXNhLmNvbQ==
server: Apache/2.4.57 () OpenSSL/1.0.2k-fips
X-Firefox-Spdy: h2
coastalbodies.com.au/new/auth/diouvu/anNjaHdhcnR6QGVzaWdyb3VwdXNhLmNvbQ==
203.98.95.166 0 B URL coastalbodies.com.au/new/auth/diouvu/anNjaHdhcnR6QGVzaWdyb3VwdXNhLmNvbQ==
IP 203.98.95.166:0
ASN #55803 Hostopia Australia Web Pty Ltd
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert urlquery phishing Phishing - Microsoft Outlook
GET /new/auth/diouvu/anNjaHdhcnR6QGVzaWdyb3VwdXNhLmNvbQ== HTTP/1.1
Host: coastalbodies.com.au
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
x-powered-by: PHP/7.4.33
refresh: 0;url=https://lajg05z8w9s48y1.glfbreak.ru/updonp4w44n#jschwartz@esigroupusa.com
content-type: text/html; charset=UTF-8
content-length: 0
date: Tue, 03 Oct 2023 14:02:07 GMT
server: LiteSpeed
vary: User-Agent
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2
lajg05z8w9s48y1.glfbreak.ru/myscr185725.js
104.21.21.57200 OK 38 kB URL GET HTTP/3 lajg05z8w9s48y1.glfbreak.ru/myscr185725.js
IP 104.21.21.57:443
Requested by https://lajg05z8w9s48y1.glfbreak.ru/updonp4w44n#jschwartz@esigroupusa.com
Certificate IssuerGoogle Trust Services LLC
Subject*.glfbreak.ru
FingerprintFE:09:67:09:64:85:14:9F:26:37:8F:9A:B6:BA:D0:EC:CA:3B:8D:C8
ValidityThu, 07 Sep 2023 12:26:20 GMT - Wed, 06 Dec 2023 12:26:19 GMT
Hash 975c7c1a745d565c7671a1e9234fc029
b1a3d79ccc0729e0c259bb89449c22ad08e83dc9
7c4703d839cb0682cb1bb7f38b1390c5f65c2ec3950b685b39363d0f6ae5b0c6
GET /myscr185725.js HTTP/1.1
Host: lajg05z8w9s48y1.glfbreak.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lajg05z8w9s48y1.glfbreak.ru/updonp4w44n
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 03 Oct 2023 14:02:08 GMT
content-type: application/javascript
last-modified: Tue, 03 Oct 2023 12:02:01 GMT
cache-control: max-age=14400
cf-cache-status: HIT
age: 7054
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Mxsa2rFa0WrRXkQUEyoYqs05amcbM75XL7bIz6G2df5oeGEcj3iaaLOS%2F37vj1OEWV5JFEUpui2XWwKsvS1VDSBNR2sWzMR2cQWiPwjqBuIdHgFcTfulhXCEHoBjcQQVKf3%2ByVxczluMeRqLlzw%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8105b89c19485691-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
lajg05z8w9s48y1.glfbreak.ru/web1/assets/fonts/GDSherpa-bold.woff2
104.21.21.57200 OK 28 kB URL GET HTTP/3 lajg05z8w9s48y1.glfbreak.ru/web1/assets/fonts/GDSherpa-bold.woff2
IP 104.21.21.57:443
Requested by https://lajg05z8w9s48y1.glfbreak.ru/updonp4w44n#jschwartz@esigroupusa.com
Certificate IssuerGoogle Trust Services LLC
Subject*.glfbreak.ru
FingerprintFE:09:67:09:64:85:14:9F:26:37:8F:9A:B6:BA:D0:EC:CA:3B:8D:C8
ValidityThu, 07 Sep 2023 12:26:20 GMT - Wed, 06 Dec 2023 12:26:19 GMT
File type Web Open Font Format (Version 2), TrueType, length 28000, version 1.66\012- data
Hash a4bca6c95fed0d0c5cc46cf07710dcec
73b56e33b82b42921db8702a33efd0f2b2ec9794
5a51d246af54d903f67f07f2bd820ce77736f8d08c5f1602db07469d96dbf77f
GET /web1/assets/fonts/GDSherpa-bold.woff2 HTTP/1.1
Host: lajg05z8w9s48y1.glfbreak.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://lajg05z8w9s48y1.glfbreak.ru/updonp4w44n
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 03 Oct 2023 14:02:09 GMT
content-type: font/woff2
content-length: 28000
last-modified: Fri, 25 Aug 2023 04:00:16 GMT
etag: "6d60-603b761e42cdb"
access-control-allow-origin: *
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
cache-control: max-age=14400
age: 7054
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=6WYDiT5G9jFLbVnJO9CSq%2BxP8SRDMup35WET24MsraUCjEG5aKtZ60pISSZMlKHd%2B0bVY3XveFKTZYnZyGAnC8LsTn8ag4kQMmxbZL4OULwovUF3nMlfP9xO6uVblyVJOuoxprs%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
cf-cache-status: HIT
accept-ranges: bytes
server: cloudflare
cf-ray: 8105b8a23a6b5691-OSL
lajg05z8w9s48y1.glfbreak.ru/web1/assets/fonts/GDSherpa-bold.woff
104.21.21.57200 OK 36 kB URL GET HTTP/3 lajg05z8w9s48y1.glfbreak.ru/web1/assets/fonts/GDSherpa-bold.woff
IP 104.21.21.57:443
Requested by https://lajg05z8w9s48y1.glfbreak.ru/updonp4w44n#jschwartz@esigroupusa.com
Certificate IssuerGoogle Trust Services LLC
Subject*.glfbreak.ru
FingerprintFE:09:67:09:64:85:14:9F:26:37:8F:9A:B6:BA:D0:EC:CA:3B:8D:C8
ValidityThu, 07 Sep 2023 12:26:20 GMT - Wed, 06 Dec 2023 12:26:19 GMT
File type Web Open Font Format, TrueType, length 35970, version 1.0\012- data
Hash 496b7bbde91c7dc7cf9bbabbb3921da8
2bd3c406a715ab52dad84c803c55bf4a6e66a924
ae40a04f95df12b0c364f26ab691dc0c391d394a28bcdb4aeacfaca325d0a798
GET /web1/assets/fonts/GDSherpa-bold.woff HTTP/1.1
Host: lajg05z8w9s48y1.glfbreak.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://lajg05z8w9s48y1.glfbreak.ru/updonp4w44n
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 03 Oct 2023 14:02:09 GMT
content-type: font/woff
content-length: 35970
last-modified: Fri, 25 Aug 2023 04:00:22 GMT
etag: "8c82-603b7623b006b"
access-control-allow-origin: *
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
cache-control: max-age=14400
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Aqud7ZSDgDZUj70LX6nqUjs6Mtucr2Lht2vF39aYA66oRvkeV5JxK1WL%2BdD5F1S61%2Bm3zwNpkcRod1%2FrkYlYctOupt6S25nUnN0v69h%2FUtysZRzApK%2B8pQHlRnHaHybBUZ01djA%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
cf-cache-status: HIT
age: 7054
accept-ranges: bytes
server: cloudflare
cf-ray: 8105b8a25a8c5691-OSL
lajg05z8w9s48y1.glfbreak.ru/web1/assets/fonts/GDSherpa-regular.woff2
104.21.21.57200 OK 29 kB URL GET HTTP/3 lajg05z8w9s48y1.glfbreak.ru/web1/assets/fonts/GDSherpa-regular.woff2
IP 104.21.21.57:443
Requested by https://lajg05z8w9s48y1.glfbreak.ru/updonp4w44n#jschwartz@esigroupusa.com
Certificate IssuerGoogle Trust Services LLC
Subject*.glfbreak.ru
FingerprintFE:09:67:09:64:85:14:9F:26:37:8F:9A:B6:BA:D0:EC:CA:3B:8D:C8
ValidityThu, 07 Sep 2023 12:26:20 GMT - Wed, 06 Dec 2023 12:26:19 GMT
File type Web Open Font Format (Version 2), TrueType, length 28584, version 1.66\012- data
Hash 17081510f3a6f2f619ec8c6f244523c7
87f34b2a1532c50f2a424c345d03fe028db35635
2c7292014e2ef00374aeb63691d9f23159a010455784ee0b274ba7db2bcca956
GET /web1/assets/fonts/GDSherpa-regular.woff2 HTTP/1.1
Host: lajg05z8w9s48y1.glfbreak.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://lajg05z8w9s48y1.glfbreak.ru/updonp4w44n
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 03 Oct 2023 14:02:09 GMT
content-type: font/woff2
content-length: 28584
last-modified: Fri, 25 Aug 2023 04:00:25 GMT
etag: "6fa8-603b76269b664"
access-control-allow-origin: *
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
cache-control: max-age=14400
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=3Q8bKhrpG1HIMxY2EUCVH%2BAqedq2K5eSAKIRUO1t8P2eb1wLzKjNKTnf2z9gkhaowJmaPcDPGvBgHbrCm7YBs6oBnDV8uGzp7HnnHJNrpgZVuZVMiTEqSf9Q71W2d2O5dCC0KN8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
cf-cache-status: HIT
age: 7054
accept-ranges: bytes
server: cloudflare
cf-ray: 8105b8a25a8e5691-OSL
lajg05z8w9s48y1.glfbreak.ru/web1/assets/fonts/GDSherpa-regular.woff
104.21.21.57200 OK 37 kB URL GET HTTP/3 lajg05z8w9s48y1.glfbreak.ru/web1/assets/fonts/GDSherpa-regular.woff
IP 104.21.21.57:443
Requested by https://lajg05z8w9s48y1.glfbreak.ru/updonp4w44n#jschwartz@esigroupusa.com
Certificate IssuerGoogle Trust Services LLC
Subject*.glfbreak.ru
FingerprintFE:09:67:09:64:85:14:9F:26:37:8F:9A:B6:BA:D0:EC:CA:3B:8D:C8
ValidityThu, 07 Sep 2023 12:26:20 GMT - Wed, 06 Dec 2023 12:26:19 GMT
File type Web Open Font Format, TrueType, length 36696, version 1.0\012- data
Hash a69e9ab8afdd7486ec0749c551051ff2
c34e6aa327b536fb48d1fe03577a47c7ee2231b8
fd78a1913db912221b8ead1e62fad47d1ff0a9fa6cd88d3b128a721ad91d2faf
GET /web1/assets/fonts/GDSherpa-regular.woff HTTP/1.1
Host: lajg05z8w9s48y1.glfbreak.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://lajg05z8w9s48y1.glfbreak.ru/updonp4w44n
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 03 Oct 2023 14:02:09 GMT
content-type: font/woff
content-length: 36696
last-modified: Fri, 25 Aug 2023 04:00:28 GMT
etag: "8f58-603b762947b93"
access-control-allow-origin: *
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
cache-control: max-age=14400
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Pp6xVfoJlsEqshLesgjORMBhGZ2a0mu6YbwMZfONbjmTpN3BLWOLRpEjSMNj25cd50LmpaVIvaKU8wr0147iU24BtL7VHCdL%2FnIJ%2FA7dEnNc6rnynclUq6gjnUeGgjTY%2BskwWOU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
cf-cache-status: HIT
age: 7053
accept-ranges: bytes
server: cloudflare
cf-ray: 8105b8a25a8f5691-OSL
lajg05z8w9s48y1.glfbreak.ru/web1/assets/fonts/GDSherpa-vf.woff2
104.21.21.57200 OK 44 kB URL GET HTTP/3 lajg05z8w9s48y1.glfbreak.ru/web1/assets/fonts/GDSherpa-vf.woff2
IP 104.21.21.57:443
Requested by https://lajg05z8w9s48y1.glfbreak.ru/updonp4w44n#jschwartz@esigroupusa.com
Certificate IssuerGoogle Trust Services LLC
Subject*.glfbreak.ru
FingerprintFE:09:67:09:64:85:14:9F:26:37:8F:9A:B6:BA:D0:EC:CA:3B:8D:C8
ValidityThu, 07 Sep 2023 12:26:20 GMT - Wed, 06 Dec 2023 12:26:19 GMT
File type Web Open Font Format (Version 2), TrueType, length 43596, version 1.0\012- data
Hash 2a05e9e5572abc320b2b7ea38a70dcc1
d5fa2a856d5632c2469e42436159375117ef3c35
3efcb941aaddaf4aea08dab3fb97d3e904aa1b83264e64b4d5bda53bc7c798ec
GET /web1/assets/fonts/GDSherpa-vf.woff2 HTTP/1.1
Host: lajg05z8w9s48y1.glfbreak.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://lajg05z8w9s48y1.glfbreak.ru/updonp4w44n
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 03 Oct 2023 14:02:09 GMT
content-type: font/woff2
content-length: 43596
last-modified: Fri, 25 Aug 2023 04:00:36 GMT
etag: "aa4c-603b7631474f7"
access-control-allow-origin: *
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
cache-control: max-age=14400
age: 7054
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=GvKc0mAYuC4JWIqRAl2dfquxxD9nTAx0e7LfUKB3fYouFAoxrOEb4SBiGMyF%2BbugPBB9nPp2LN4J2yoYXsLtjBtgMqilyIrAFkSxYaZoaJeAWbOj7nIe9a00hSmlmKuc2BDLwM0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
cf-cache-status: HIT
accept-ranges: bytes
server: cloudflare
cf-ray: 8105b8a25a915691-OSL
lajg05z8w9s48y1.glfbreak.ru/web1/assets/fonts/GDSherpa-vf2.woff2
104.21.21.57200 OK 93 kB URL GET HTTP/3 lajg05z8w9s48y1.glfbreak.ru/web1/assets/fonts/GDSherpa-vf2.woff2
IP 104.21.21.57:443
Requested by https://lajg05z8w9s48y1.glfbreak.ru/updonp4w44n#jschwartz@esigroupusa.com
Certificate IssuerGoogle Trust Services LLC
Subject*.glfbreak.ru
FingerprintFE:09:67:09:64:85:14:9F:26:37:8F:9A:B6:BA:D0:EC:CA:3B:8D:C8
ValidityThu, 07 Sep 2023 12:26:20 GMT - Wed, 06 Dec 2023 12:26:19 GMT
File type Web Open Font Format (Version 2), TrueType, length 93276, version 1.0\012- data
Hash bcd7983ea5aa57c55f6758b4977983cb
ef3a009e205229e07fb0ec8569e669b11c378ef1
6528a0bf9a836a53dfd8536e1786ba6831c9d1faa74967126fddf5b2081b858c
GET /web1/assets/fonts/GDSherpa-vf2.woff2 HTTP/1.1
Host: lajg05z8w9s48y1.glfbreak.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://lajg05z8w9s48y1.glfbreak.ru/updonp4w44n
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 03 Oct 2023 14:02:09 GMT
content-type: font/woff2
content-length: 93276
last-modified: Fri, 25 Aug 2023 04:00:32 GMT
etag: "16c5c-603b762dd727e"
access-control-allow-origin: *
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
cache-control: max-age=14400
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=BFH1pUblvA7qUJOWpXoXc9h0F5YfM0JUh5IHU5Oyy6P3qGalgztOhCaSEWCYuYJQNkyqUWnfmx3jk23Js5lDImZ1De0BwUHWvxR4ptm3LUdOi1FdiJXlwH6h8M%2FyeABLWCiraH0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
cf-cache-status: HIT
age: 7054
accept-ranges: bytes
server: cloudflare
cf-ray: 8105b8a25a925691-OSL
challenges.cloudflare.com/turnstile/v0/g/dffb14d6/api.js?render=explicit
104.17.2.184200 OK 12 kB URL GET HTTP/2 challenges.cloudflare.com/turnstile/v0/g/dffb14d6/api.js?render=explicit
IP 104.17.2.184:443
Requested by https://lajg05z8w9s48y1.glfbreak.ru/updonp4w44n#jschwartz@esigroupusa.com
Certificate IssuerCloudflare, Inc.
Subjectchallenges.cloudflare.com
Fingerprint5F:E4:AA:8C:2E:24:D2:B1:69:9D:13:28:31:5C:65:FA:97:2A:E9:6E
ValidityFri, 18 Aug 2023 00:00:00 GMT - Sat, 17 Aug 2024 23:59:59 GMT
File type ASCII text, with very long lines (33998)
Hash cc3e43876d80dbb4f1bff1e8b15a9c60
3b43cbd347df372f7c1daf463b1229e4a8849195
06d063d7e58bade3ae244489087afa82f9f7c59276cdd7dcfbb2a9b5b600c5da
GET /turnstile/v0/g/dffb14d6/api.js?render=explicit HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://lajg05z8w9s48y1.glfbreak.ru/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Tue, 03 Oct 2023 14:02:08 GMT
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
cache-control: max-age=31536000
vary: Accept-Encoding
server: cloudflare
cf-ray: 8105b89d08641c16-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
lajg05z8w9s48y1.glfbreak.ru/web1/assets/back.png
104.21.21.57200 OK 231 B URL GET HTTP/3 lajg05z8w9s48y1.glfbreak.ru/web1/assets/back.png
IP 104.21.21.57:443
Requested by https://lajg05z8w9s48y1.glfbreak.ru/updonp4w44n#jschwartz@esigroupusa.com
Certificate IssuerGoogle Trust Services LLC
Subject*.glfbreak.ru
FingerprintFE:09:67:09:64:85:14:9F:26:37:8F:9A:B6:BA:D0:EC:CA:3B:8D:C8
ValidityThu, 07 Sep 2023 12:26:20 GMT - Wed, 06 Dec 2023 12:26:19 GMT
File type PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced\012- data
Hash 547988bac5584b4608466d761e16f370
c11bb71049702528402a31027f200184910a7e23
70e32b2db3f079bb0295a85a0db15ed9e5926294dd947938d6cfa595f5ab18b4
GET /web1/assets/back.png HTTP/1.1
Host: lajg05z8w9s48y1.glfbreak.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lajg05z8w9s48y1.glfbreak.ru/updonp4w44n
Cookie: XSRF-TOKEN=eyJpdiI6IlFtaEJRNXByRzJqZ3d3eUllSFRxcHc9PSIsInZhbHVlIjoicmFqbkF2QUREVldsZmp0MVBEVDArbEV6SmNFNE5xaTBwQ0t1bVMwRiswU3dROWppbG1iRkY4elZBbjV0MHdMNUZnVlJwSzJaaVcwTHpaRTdvWHVPUkpHUFZtTG9DSEZRcW1ZcXNHMm9wOFpkM2wydEZmeGhqWHR0Znk5UGF3SE0iLCJtYWMiOiIxZWQ2NDFhODgyOTJhZjhiNjg4ZDU5ZmNjYWU2OTA1ZDI1ZWY5OTIwZDM3MTFkOWIyZTI5M2IzMjRjMzZmZGQxIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjJjOEl2Y3hzYmNqd3gzL1dXNFh0SVE9PSIsInZhbHVlIjoicy9WaGdTRCs2dGJrZXdrR0Uzc2N1TnYrZzRTY0N5VjVpZVp1SUJycUJ1bmlTNHNqRUprZEVSZjJMSTZZbmFhSUdGUkZJc1pXTGZ5MVB3MmVyMzliaVhUMjAySzFVa3R0UmN0RVk5aldOSlVmcmM2U2JiU0xHVHQyRmpXaHg5bmMiLCJtYWMiOiI3NTFjZjRkZjY1NTg2ZDk2NzYwMWYxMTZiODk3MTZkMDIzODQ5MjQ5YTE2NzkxNmVhZWQ0OGU0OThhYTA0ZmQ2IiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 03 Oct 2023 14:02:16 GMT
content-type: image/png
content-length: 231
last-modified: Sun, 19 Mar 2023 15:20:17 GMT
etag: "e7-5f7425905ae40"
access-control-allow-origin: *
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
cache-control: max-age=14400
age: 7054
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=lyndZhP32IBeFNQFxtkRE3ItbNj9009xT%2FGxL9jrhC%2BNBI04CozvOtUUNniUOiOKdysO8R8%2F4wGc1ldgSELTD8%2FLwMy2drGCdoWXrUEHpjPXshws49ZJ8As2wl3s3jCklcH0oSc%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
cf-cache-status: HIT
accept-ranges: bytes
server: cloudflare
cf-ray: 8105b8ca287e5691-OSL
lajg05z8w9s48y1.glfbreak.ru/web1/assets/key.png
104.21.21.57200 OK 727 B URL GET HTTP/3 lajg05z8w9s48y1.glfbreak.ru/web1/assets/key.png
IP 104.21.21.57:443
Requested by https://lajg05z8w9s48y1.glfbreak.ru/updonp4w44n#jschwartz@esigroupusa.com
Certificate IssuerGoogle Trust Services LLC
Subject*.glfbreak.ru
FingerprintFE:09:67:09:64:85:14:9F:26:37:8F:9A:B6:BA:D0:EC:CA:3B:8D:C8
ValidityThu, 07 Sep 2023 12:26:20 GMT - Wed, 06 Dec 2023 12:26:19 GMT
File type PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced\012- data
Hash 839cb0f55c3d2d5c2f740bda95cb2878
93f6fa3a2da8b7184d4b5c5f2065872793370c2e
40ecb8832f6a9a8aaa0cc6e1287e867a4fca38433d091d86c6cab1f28fbab652
GET /web1/assets/key.png HTTP/1.1
Host: lajg05z8w9s48y1.glfbreak.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lajg05z8w9s48y1.glfbreak.ru/updonp4w44n
Cookie: XSRF-TOKEN=eyJpdiI6IlFtaEJRNXByRzJqZ3d3eUllSFRxcHc9PSIsInZhbHVlIjoicmFqbkF2QUREVldsZmp0MVBEVDArbEV6SmNFNE5xaTBwQ0t1bVMwRiswU3dROWppbG1iRkY4elZBbjV0MHdMNUZnVlJwSzJaaVcwTHpaRTdvWHVPUkpHUFZtTG9DSEZRcW1ZcXNHMm9wOFpkM2wydEZmeGhqWHR0Znk5UGF3SE0iLCJtYWMiOiIxZWQ2NDFhODgyOTJhZjhiNjg4ZDU5ZmNjYWU2OTA1ZDI1ZWY5OTIwZDM3MTFkOWIyZTI5M2IzMjRjMzZmZGQxIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjJjOEl2Y3hzYmNqd3gzL1dXNFh0SVE9PSIsInZhbHVlIjoicy9WaGdTRCs2dGJrZXdrR0Uzc2N1TnYrZzRTY0N5VjVpZVp1SUJycUJ1bmlTNHNqRUprZEVSZjJMSTZZbmFhSUdGUkZJc1pXTGZ5MVB3MmVyMzliaVhUMjAySzFVa3R0UmN0RVk5aldOSlVmcmM2U2JiU0xHVHQyRmpXaHg5bmMiLCJtYWMiOiI3NTFjZjRkZjY1NTg2ZDk2NzYwMWYxMTZiODk3MTZkMDIzODQ5MjQ5YTE2NzkxNmVhZWQ0OGU0OThhYTA0ZmQ2IiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 03 Oct 2023 14:02:16 GMT
content-type: image/png
content-length: 727
last-modified: Sun, 19 Mar 2023 15:20:17 GMT
etag: "2d7-5f7425905ae40"
access-control-allow-origin: *
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
cache-control: max-age=14400
age: 7054
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=8HVwpREOSgBURCubT8EM1LSpsDw3oHBBDwY7pawxapqtGZWR8fsGoYXZUNTUatInmjpLycBSO5cDyE%2FyWJzZmMEqQ5C0rT89l7kRfslhpOAXCeftehCzJl6M6vpCYXWeTVC72Kc%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
cf-cache-status: HIT
accept-ranges: bytes
server: cloudflare
cf-ray: 8105b8ca389f5691-OSL
lajg05z8w9s48y1.glfbreak.ru/web1/assets/godaddy-left.png
104.21.21.57200 OK 30 kB URL GET HTTP/3 lajg05z8w9s48y1.glfbreak.ru/web1/assets/godaddy-left.png
IP 104.21.21.57:443
Requested by https://lajg05z8w9s48y1.glfbreak.ru/updonp4w44n#jschwartz@esigroupusa.com
Certificate IssuerGoogle Trust Services LLC
Subject*.glfbreak.ru
FingerprintFE:09:67:09:64:85:14:9F:26:37:8F:9A:B6:BA:D0:EC:CA:3B:8D:C8
ValidityThu, 07 Sep 2023 12:26:20 GMT - Wed, 06 Dec 2023 12:26:19 GMT
File type PNG image data, 506 x 303, 8-bit/color RGBA, non-interlaced\012- data
Hash 210433a8774859368f3a7b86d125a2a7
408bacddc39f12cad285579c102fe4a629862d88
9c6addfc339ce1c1d262290ab4cc2de8d38d4b54b11a8e85afd44fbb0acc2561
GET /web1/assets/godaddy-left.png HTTP/1.1
Host: lajg05z8w9s48y1.glfbreak.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lajg05z8w9s48y1.glfbreak.ru/updonp4w44n
Cookie: XSRF-TOKEN=eyJpdiI6IlFtaEJRNXByRzJqZ3d3eUllSFRxcHc9PSIsInZhbHVlIjoicmFqbkF2QUREVldsZmp0MVBEVDArbEV6SmNFNE5xaTBwQ0t1bVMwRiswU3dROWppbG1iRkY4elZBbjV0MHdMNUZnVlJwSzJaaVcwTHpaRTdvWHVPUkpHUFZtTG9DSEZRcW1ZcXNHMm9wOFpkM2wydEZmeGhqWHR0Znk5UGF3SE0iLCJtYWMiOiIxZWQ2NDFhODgyOTJhZjhiNjg4ZDU5ZmNjYWU2OTA1ZDI1ZWY5OTIwZDM3MTFkOWIyZTI5M2IzMjRjMzZmZGQxIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjJjOEl2Y3hzYmNqd3gzL1dXNFh0SVE9PSIsInZhbHVlIjoicy9WaGdTRCs2dGJrZXdrR0Uzc2N1TnYrZzRTY0N5VjVpZVp1SUJycUJ1bmlTNHNqRUprZEVSZjJMSTZZbmFhSUdGUkZJc1pXTGZ5MVB3MmVyMzliaVhUMjAySzFVa3R0UmN0RVk5aldOSlVmcmM2U2JiU0xHVHQyRmpXaHg5bmMiLCJtYWMiOiI3NTFjZjRkZjY1NTg2ZDk2NzYwMWYxMTZiODk3MTZkMDIzODQ5MjQ5YTE2NzkxNmVhZWQ0OGU0OThhYTA0ZmQ2IiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 03 Oct 2023 14:02:16 GMT
content-type: image/png
content-length: 29796
last-modified: Thu, 24 Aug 2023 14:10:07 GMT
etag: "7464-603abc9079d32"
access-control-allow-origin: *
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
cache-control: max-age=14400
age: 7054
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=VLd%2FdBcfafSUL5UCnQjH%2Ff0SsbPD4aUFkl8Y0OS1q0hR8obJjw01ZqNrZqQoYywL7SkgYakQeE4LOkFgyVRWOF6BpBaZjEW%2BX3AKel7XLo6QhxbQg0kcBuDdd0smhx10H%2FdcCMk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
cf-cache-status: HIT
accept-ranges: bytes
server: cloudflare
cf-ray: 8105b8ca48ae5691-OSL
lajg05z8w9s48y1.glfbreak.ru/web1/info
104.21.21.57200 OK 55 kB URL POST HTTP/3 lajg05z8w9s48y1.glfbreak.ru/web1/info
IP 104.21.21.57:443
Requested by https://lajg05z8w9s48y1.glfbreak.ru/updonp4w44n#jschwartz@esigroupusa.com
Certificate IssuerGoogle Trust Services LLC
Subject*.glfbreak.ru
FingerprintFE:09:67:09:64:85:14:9F:26:37:8F:9A:B6:BA:D0:EC:CA:3B:8D:C8
ValidityThu, 07 Sep 2023 12:26:20 GMT - Wed, 06 Dec 2023 12:26:19 GMT
File type HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (309), with CRLF line terminators
Hash 6f30b74ef49a8e511b35fa003ad4dcad
bac75ebb0eb18b35fad90edcf3be1cc1c8448409
758649a8246824eea972cb1f5b6360a53b7d1f590a9746a0d8f6db8e8bc693d4
POST /web1/info HTTP/1.1
Host: lajg05z8w9s48y1.glfbreak.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 28
Origin: https://lajg05z8w9s48y1.glfbreak.ru
DNT: 1
Connection: keep-alive
Referer: https://lajg05z8w9s48y1.glfbreak.ru/updonp4w44n
Cookie: XSRF-TOKEN=eyJpdiI6Ik5MTmhZemJmMXc4OTkvMHZUbHB4akE9PSIsInZhbHVlIjoiRlF3QkVrUVp1SnVCTk5xeFp0RUhPUy9qUVJnSTNGM0tmTTZycytxMitTenZlYWhxTjdFSW5pZHBQQ1I2Q000L213NW1YdUpqdzR0SFVLQmFMMEtIWTN5WjhDQ0RRZlFEdHFVQTZDYUV5aUxHSm5pQS9lS045TVBlZWxnT21NTkciLCJtYWMiOiJkYjVhMzQ1NTZjYzgwZDg4YzZmNGM1NmZjMzc5MTg3YjI1ZjA4MTljN2EwMWYyNmJjZTAyYjk1NjIxZTZkMzJhIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkZVMXlIQkhuNExubjRncFVhSHJNQ0E9PSIsInZhbHVlIjoieVdUT0JrRkozczNkZWpCRmpTcDVSMHBoR2lKaWZNMEx6M2tFblpwVVFsRkFXV0lDQUJaSjJuWDcrTWZRQVVTYkIxM1BJM1ovczVDTXhjMUVtUE9ndWtXb0NHV0xzcWh1SzdXNGJSU1IxYTN2YmtpMCtGcXdsNE1UcDB5clVWT0QiLCJtYWMiOiJlZDJiZTVlMmNiYTViMTExYjAzMDNkMjk0MTVmYTEwNWVhYzU5MjQ5ZjI2NmVjODkzNDRlNDg0MThmY2Q3NWEyIiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 03 Oct 2023 14:02:15 GMT
content-type: text/html; charset=UTF-8
x-powered-by: PHP/8.1.10
cache-control: no-cache, private
access-control-allow-origin: *
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=rzs9kSotqla%2BuF8E%2B%2FDmZNtdtuG5BKXEXtAKdz5O1mE%2FdMw7KlpOdXYF%2Fp3zyJVPGrDJE3RGhQvXHdTbmiYRQiCODKB5aUu3h9%2Bq6d3VG%2BrU5C5O91okK7b399lvA5r%2BBt5tzr4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
set-cookie: XSRF-TOKEN=eyJpdiI6IlFtaEJRNXByRzJqZ3d3eUllSFRxcHc9PSIsInZhbHVlIjoicmFqbkF2QUREVldsZmp0MVBEVDArbEV6SmNFNE5xaTBwQ0t1bVMwRiswU3dROWppbG1iRkY4elZBbjV0MHdMNUZnVlJwSzJaaVcwTHpaRTdvWHVPUkpHUFZtTG9DSEZRcW1ZcXNHMm9wOFpkM2wydEZmeGhqWHR0Znk5UGF3SE0iLCJtYWMiOiIxZWQ2NDFhODgyOTJhZjhiNjg4ZDU5ZmNjYWU2OTA1ZDI1ZWY5OTIwZDM3MTFkOWIyZTI5M2IzMjRjMzZmZGQxIiwidGFnIjoiIn0%3D; expires=Tue, 03-Oct-2023 16:02:15 GMT; Max-Age=7200; path=/; samesite=lax
laravel_session=eyJpdiI6IjJjOEl2Y3hzYmNqd3gzL1dXNFh0SVE9PSIsInZhbHVlIjoicy9WaGdTRCs2dGJrZXdrR0Uzc2N1TnYrZzRTY0N5VjVpZVp1SUJycUJ1bmlTNHNqRUprZEVSZjJMSTZZbmFhSUdGUkZJc1pXTGZ5MVB3MmVyMzliaVhUMjAySzFVa3R0UmN0RVk5aldOSlVmcmM2U2JiU0xHVHQyRmpXaHg5bmMiLCJtYWMiOiI3NTFjZjRkZjY1NTg2ZDk2NzYwMWYxMTZiODk3MTZkMDIzODQ5MjQ5YTE2NzkxNmVhZWQ0OGU0OThhYTA0ZmQ2IiwidGFnIjoiIn0%3D; expires=Tue, 03-Oct-2023 16:02:15 GMT; Max-Age=7200; path=/; httponly; samesite=lax
server: cloudflare
cf-ray: 8105b8c409f05691-OSL
content-encoding: br
lajg05z8w9s48y1.glfbreak.ru/web1/assets/godaddy-microsoftlogo.png
104.21.21.57200 OK 71 kB URL GET HTTP/3 lajg05z8w9s48y1.glfbreak.ru/web1/assets/godaddy-microsoftlogo.png
IP 104.21.21.57:443
Requested by https://lajg05z8w9s48y1.glfbreak.ru/updonp4w44n#jschwartz@esigroupusa.com
Certificate IssuerGoogle Trust Services LLC
Subject*.glfbreak.ru
FingerprintFE:09:67:09:64:85:14:9F:26:37:8F:9A:B6:BA:D0:EC:CA:3B:8D:C8
ValidityThu, 07 Sep 2023 12:26:20 GMT - Wed, 06 Dec 2023 12:26:19 GMT
File type PNG image data, 2446 x 899, 8-bit/color RGBA, non-interlaced\012- data
Hash f70ff06d19498d80b130ec78176fd3ff
9d8a3b74c5164ff7ae2c7930b6d7b14707b404fc
df6dbab5251e56b405e48aaf57d3cd4188f073ffba71131fa6cd26e6742923ae
GET /web1/assets/godaddy-microsoftlogo.png HTTP/1.1
Host: lajg05z8w9s48y1.glfbreak.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lajg05z8w9s48y1.glfbreak.ru/updonp4w44n
Cookie: XSRF-TOKEN=eyJpdiI6IlFtaEJRNXByRzJqZ3d3eUllSFRxcHc9PSIsInZhbHVlIjoicmFqbkF2QUREVldsZmp0MVBEVDArbEV6SmNFNE5xaTBwQ0t1bVMwRiswU3dROWppbG1iRkY4elZBbjV0MHdMNUZnVlJwSzJaaVcwTHpaRTdvWHVPUkpHUFZtTG9DSEZRcW1ZcXNHMm9wOFpkM2wydEZmeGhqWHR0Znk5UGF3SE0iLCJtYWMiOiIxZWQ2NDFhODgyOTJhZjhiNjg4ZDU5ZmNjYWU2OTA1ZDI1ZWY5OTIwZDM3MTFkOWIyZTI5M2IzMjRjMzZmZGQxIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjJjOEl2Y3hzYmNqd3gzL1dXNFh0SVE9PSIsInZhbHVlIjoicy9WaGdTRCs2dGJrZXdrR0Uzc2N1TnYrZzRTY0N5VjVpZVp1SUJycUJ1bmlTNHNqRUprZEVSZjJMSTZZbmFhSUdGUkZJc1pXTGZ5MVB3MmVyMzliaVhUMjAySzFVa3R0UmN0RVk5aldOSlVmcmM2U2JiU0xHVHQyRmpXaHg5bmMiLCJtYWMiOiI3NTFjZjRkZjY1NTg2ZDk2NzYwMWYxMTZiODk3MTZkMDIzODQ5MjQ5YTE2NzkxNmVhZWQ0OGU0OThhYTA0ZmQ2IiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 03 Oct 2023 14:02:16 GMT
content-type: image/png
content-length: 70712
last-modified: Thu, 24 Aug 2023 12:58:17 GMT
etag: "11438-603aac821e121"
access-control-allow-origin: *
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
cache-control: max-age=14400
age: 7054
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=UsxF10MJq%2FMaCnfqM9lQkTgFe0NMNpHw%2F1YRH49Yi52ZbwyfBPMAFBcqOkg91ax56LNoi7AZFTYvNfaukyVL9FDBNUfbIUDyGfk%2FVpFboqQrN66XfD7YfwsrCb5aoGyTqmJT3Tk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
cf-cache-status: HIT
accept-ranges: bytes
server: cloudflare
cf-ray: 8105b8ca48af5691-OSL
aadcdn.msftauth.net/shared/1.0/content/images/picker_verify_call_c2616792e1950f83fdef6e72dab97293.svg
152.199.23.37200 OK 1.2 kB URL GET HTTP/2 aadcdn.msftauth.net/shared/1.0/content/images/picker_verify_call_c2616792e1950f83fdef6e72dab97293.svg
IP 152.199.23.37:443
Requested by https://lajg05z8w9s48y1.glfbreak.ru/updonp4w44n#jschwartz@esigroupusa.com
Certificate IssuerDigiCert Inc
Subjectaadcdn.msftauth.net
Fingerprint99:06:D8:1E:EC:BF:DB:78:DF:F4:89:A3:ED:23:07:3D:79:F1:16:D6
ValidityTue, 31 Jan 2023 00:00:00 GMT - Wed, 31 Jan 2024 23:59:59 GMT
File type SVG Scalable Vector Graphics image\012- HTML document, ASCII text, with very long lines (2905), with no line terminators
Hash fe87496cc7a44412f7893a72099c120a
a0c1458c08a815df63d3cb0406d60be6607ca699
55ce3b0ce5bc71339308107982cd7671f96014256ded0be36dc8062e64c847f1
GET /shared/1.0/content/images/picker_verify_call_c2616792e1950f83fdef6e72dab97293.svg HTTP/1.1
Host: aadcdn.msftauth.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lajg05z8w9s48y1.glfbreak.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-encoding: gzip
accept-ranges: bytes
access-control-allow-origin: *
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
age: 10173628
cache-control: public, max-age=31536000
content-md5: XHrPYKKsqlxUvysuxtSE2A==
content-type: image/svg+xml
date: Tue, 03 Oct 2023 14:02:16 GMT
etag: 0x8DB5C3F4A98E9BB
last-modified: Wed, 24 May 2023 10:11:50 GMT
server: ECAcc (ska/F6F3)
vary: Accept-Encoding
x-cache: HIT
x-ms-blob-type: BlockBlob
x-ms-lease-status: unlocked
x-ms-request-id: 3afb7c4b-e01e-0039-1e7a-99c6de000000
x-ms-version: 2009-09-19
content-length: 1173
X-Firefox-Spdy: h2
aadcdn.msftauth.net/shared/1.0/content/images/picker_verify_fluent_authenticator_59892f1e05e3adf9fd2f71b42d92a27f.svg
152.199.23.37200 OK 2.4 kB URL GET HTTP/2 aadcdn.msftauth.net/shared/1.0/content/images/picker_verify_fluent_authenticator_59892f1e05e3adf9fd2f71b42d92a27f.svg
IP 152.199.23.37:443
Requested by https://lajg05z8w9s48y1.glfbreak.ru/updonp4w44n#jschwartz@esigroupusa.com
Certificate IssuerDigiCert Inc
Subjectaadcdn.msftauth.net
Fingerprint99:06:D8:1E:EC:BF:DB:78:DF:F4:89:A3:ED:23:07:3D:79:F1:16:D6
ValidityTue, 31 Jan 2023 00:00:00 GMT - Wed, 31 Jan 2024 23:59:59 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (4714), with CRLF line terminators
Hash b59c16ca9bf156438a8a96d45e33db64
4e51b7d3477414b220f688adabd76d3ae6472ee3
a7ee799dd5b6f6dbb70b043b766362a6724e71458f9839306c995f06b218c2f8
GET /shared/1.0/content/images/picker_verify_fluent_authenticator_59892f1e05e3adf9fd2f71b42d92a27f.svg HTTP/1.1
Host: aadcdn.msftauth.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lajg05z8w9s48y1.glfbreak.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-encoding: gzip
accept-ranges: bytes
access-control-allow-origin: *
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
age: 10742433
cache-control: public, max-age=31536000
content-md5: nTculR1Fom7eLci0F6rk+A==
content-type: image/svg+xml
date: Tue, 03 Oct 2023 14:02:16 GMT
etag: 0x8DB5C3F4ADC079A
last-modified: Wed, 24 May 2023 10:11:51 GMT
server: ECAcc (ska/F7B6)
vary: Accept-Encoding
x-cache: HIT
x-ms-blob-type: BlockBlob
x-ms-lease-status: unlocked
x-ms-request-id: 9d35d246-701e-009b-604e-944da7000000
x-ms-version: 2009-09-19
content-length: 2407
X-Firefox-Spdy: h2
aadcdn.msftauth.net/shared/1.0/content/images/close_790189870c9543725dc3f5a15fb25e46.svg
152.199.23.37200 OK 190 B URL GET HTTP/2 aadcdn.msftauth.net/shared/1.0/content/images/close_790189870c9543725dc3f5a15fb25e46.svg
IP 152.199.23.37:443
Requested by https://lajg05z8w9s48y1.glfbreak.ru/updonp4w44n#jschwartz@esigroupusa.com
Certificate IssuerDigiCert Inc
Subjectaadcdn.msftauth.net
Fingerprint99:06:D8:1E:EC:BF:DB:78:DF:F4:89:A3:ED:23:07:3D:79:F1:16:D6
ValidityTue, 31 Jan 2023 00:00:00 GMT - Wed, 31 Jan 2024 23:59:59 GMT
File type SVG Scalable Vector Graphics image\012- HTML document, ASCII text, with no line terminators
Hash 40eb39126300b56bf66c20ee75b54093
83678d94097257eb474713dec49e8094f49d2e2a
765709425a5b9209e875dccf2217d3161429d2d48159fc1df7b253b77c1574f4
GET /shared/1.0/content/images/close_790189870c9543725dc3f5a15fb25e46.svg HTTP/1.1
Host: aadcdn.msftauth.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lajg05z8w9s48y1.glfbreak.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-encoding: gzip
accept-ranges: bytes
access-control-allow-origin: *
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
age: 10735969
cache-control: public, max-age=31536000
content-md5: rp+/fadJKxLUo+jgFmYTeQ==
content-type: image/svg+xml
date: Tue, 03 Oct 2023 14:02:16 GMT
etag: 0x8DB5C3F4721247A
last-modified: Wed, 24 May 2023 10:11:44 GMT
server: ECAcc (ska/F697)
vary: Accept-Encoding
x-cache: HIT
x-ms-blob-type: BlockBlob
x-ms-lease-status: unlocked
x-ms-request-id: cf4cbdca-101e-0042-0c5d-942f4a000000
x-ms-version: 2009-09-19
content-length: 190
X-Firefox-Spdy: h2
logincdn.msauth.net/shared/1.0/content/images/picker_verify_email_958962caa7cf6b75cd412e9e3b687b22.svg
192.229.221.185200 OK 212 B URL GET HTTP/2 logincdn.msauth.net/shared/1.0/content/images/picker_verify_email_958962caa7cf6b75cd412e9e3b687b22.svg
IP 192.229.221.185:443
Requested by https://lajg05z8w9s48y1.glfbreak.ru/updonp4w44n#jschwartz@esigroupusa.com
Certificate IssuerMicrosoft Corporation
Subjectidentitycdn.msauth.net
Fingerprint7E:49:E0:7F:53:0A:55:E1:C7:51:9E:26:2E:16:15:30:F1:F6:FB:0A
ValidityThu, 10 Aug 2023 19:09:28 GMT - Thu, 27 Jun 2024 23:59:59 GMT
File type SVG Scalable Vector Graphics image\012- HTML document, ASCII text, with no line terminators
Hash 59759b80e24a89c8cd029b14700e646d
651b1921c99e143d3c242de3faacfb9ad51dbb53
b02b5df3ecd59d6cd90c60878683477532cbfc24660028657f290bdc7bc774b5
GET /shared/1.0/content/images/picker_verify_email_958962caa7cf6b75cd412e9e3b687b22.svg HTTP/1.1
Host: logincdn.msauth.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lajg05z8w9s48y1.glfbreak.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-encoding: gzip
accept-ranges: bytes
access-control-allow-origin: *
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
age: 10177162
cache-control: public, max-age=31536000
content-md5: pFQUXilUkzYtIbvSwGgVBQ==
content-type: image/svg+xml
date: Tue, 03 Oct 2023 14:02:16 GMT
etag: 0x8DB5C409F549E50
last-modified: Wed, 24 May 2023 10:21:22 GMT
server: ECAcc (ska/F7AD)
vary: Accept-Encoding
x-cache: HIT
x-ms-blob-type: BlockBlob
x-ms-lease-status: unlocked
x-ms-request-id: e6e3cc87-601e-0079-1c72-993a7c000000
x-ms-version: 2009-09-19
content-length: 212
X-Firefox-Spdy: h2
lajg05z8w9s48y1.glfbreak.ru/web1/assets/365background.png
104.21.21.57200 OK 326 kB URL GET HTTP/3 lajg05z8w9s48y1.glfbreak.ru/web1/assets/365background.png
IP 104.21.21.57:443
Requested by https://lajg05z8w9s48y1.glfbreak.ru/updonp4w44n#jschwartz@esigroupusa.com
Certificate IssuerGoogle Trust Services LLC
Subject*.glfbreak.ru
FingerprintFE:09:67:09:64:85:14:9F:26:37:8F:9A:B6:BA:D0:EC:CA:3B:8D:C8
ValidityThu, 07 Sep 2023 12:26:20 GMT - Wed, 06 Dec 2023 12:26:19 GMT
File type PNG image data, 914 x 469, 8-bit/color RGBA, non-interlaced\012- data
Size 326 kB (326065 bytes)
Hash 0b882e24f250e42375a5688107b17241
f27d6076ee98c5df3e7c77a241fa7585f05aea6b
5b32845a56e326ae3ea16d90d2142d7e43e990a356eabe8990f4af921488efa9
GET /web1/assets/365background.png HTTP/1.1
Host: lajg05z8w9s48y1.glfbreak.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lajg05z8w9s48y1.glfbreak.ru/web1/assets/pages/ul8ez297rtg.css?cb=1696341730020
Cookie: XSRF-TOKEN=eyJpdiI6IlFtaEJRNXByRzJqZ3d3eUllSFRxcHc9PSIsInZhbHVlIjoicmFqbkF2QUREVldsZmp0MVBEVDArbEV6SmNFNE5xaTBwQ0t1bVMwRiswU3dROWppbG1iRkY4elZBbjV0MHdMNUZnVlJwSzJaaVcwTHpaRTdvWHVPUkpHUFZtTG9DSEZRcW1ZcXNHMm9wOFpkM2wydEZmeGhqWHR0Znk5UGF3SE0iLCJtYWMiOiIxZWQ2NDFhODgyOTJhZjhiNjg4ZDU5ZmNjYWU2OTA1ZDI1ZWY5OTIwZDM3MTFkOWIyZTI5M2IzMjRjMzZmZGQxIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjJjOEl2Y3hzYmNqd3gzL1dXNFh0SVE9PSIsInZhbHVlIjoicy9WaGdTRCs2dGJrZXdrR0Uzc2N1TnYrZzRTY0N5VjVpZVp1SUJycUJ1bmlTNHNqRUprZEVSZjJMSTZZbmFhSUdGUkZJc1pXTGZ5MVB3MmVyMzliaVhUMjAySzFVa3R0UmN0RVk5aldOSlVmcmM2U2JiU0xHVHQyRmpXaHg5bmMiLCJtYWMiOiI3NTFjZjRkZjY1NTg2ZDk2NzYwMWYxMTZiODk3MTZkMDIzODQ5MjQ5YTE2NzkxNmVhZWQ0OGU0OThhYTA0ZmQ2IiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 03 Oct 2023 14:02:16 GMT
content-type: image/png
content-length: 326065
last-modified: Tue, 08 Aug 2023 13:37:54 GMT
etag: "4f9b1-60269785e9266"
access-control-allow-origin: *
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
cache-control: max-age=14400
age: 4637
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Qi8Y223IDtKuvVWx3ZJ%2BtDtKQ7Qtcc4agfz3fiZeESa3%2FX14HMqfp6z3l3qsDxGj3H64DmkdH39bvoA1wHMYbLQ89A8kSr0Ptz8MaLla%2BPnWAG1Ymi%2BqhHUn8BYQcrEnI4TK9eA%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
cf-cache-status: HIT
accept-ranges: bytes
server: cloudflare
cf-ray: 8105b8cab93b5691-OSL
lajg05z8w9s48y1.glfbreak.ru/web1/assets/365logo.png
104.21.21.57200 OK 29 kB URL GET HTTP/3 lajg05z8w9s48y1.glfbreak.ru/web1/assets/365logo.png
IP 104.21.21.57:443
Requested by https://lajg05z8w9s48y1.glfbreak.ru/updonp4w44n#jschwartz@esigroupusa.com
Certificate IssuerGoogle Trust Services LLC
Subject*.glfbreak.ru
FingerprintFE:09:67:09:64:85:14:9F:26:37:8F:9A:B6:BA:D0:EC:CA:3B:8D:C8
ValidityThu, 07 Sep 2023 12:26:20 GMT - Wed, 06 Dec 2023 12:26:19 GMT
File type PNG image data, 1172 x 264, 8-bit/color RGBA, non-interlaced\012- data
Hash 9e1e850547d90314a73ec1ff2cdf04a3
81b46404c8859f997da090a6b57dfb00ca539b83
f27766e5d5667af5eefb552aee52c24b59d19a5717a212de86c31bdcf47b1f37
GET /web1/assets/365logo.png HTTP/1.1
Host: lajg05z8w9s48y1.glfbreak.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lajg05z8w9s48y1.glfbreak.ru/web1/assets/pages/ul8ez297rtg.css?cb=1696341730020
Cookie: XSRF-TOKEN=eyJpdiI6IlFtaEJRNXByRzJqZ3d3eUllSFRxcHc9PSIsInZhbHVlIjoicmFqbkF2QUREVldsZmp0MVBEVDArbEV6SmNFNE5xaTBwQ0t1bVMwRiswU3dROWppbG1iRkY4elZBbjV0MHdMNUZnVlJwSzJaaVcwTHpaRTdvWHVPUkpHUFZtTG9DSEZRcW1ZcXNHMm9wOFpkM2wydEZmeGhqWHR0Znk5UGF3SE0iLCJtYWMiOiIxZWQ2NDFhODgyOTJhZjhiNjg4ZDU5ZmNjYWU2OTA1ZDI1ZWY5OTIwZDM3MTFkOWIyZTI5M2IzMjRjMzZmZGQxIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjJjOEl2Y3hzYmNqd3gzL1dXNFh0SVE9PSIsInZhbHVlIjoicy9WaGdTRCs2dGJrZXdrR0Uzc2N1TnYrZzRTY0N5VjVpZVp1SUJycUJ1bmlTNHNqRUprZEVSZjJMSTZZbmFhSUdGUkZJc1pXTGZ5MVB3MmVyMzliaVhUMjAySzFVa3R0UmN0RVk5aldOSlVmcmM2U2JiU0xHVHQyRmpXaHg5bmMiLCJtYWMiOiI3NTFjZjRkZjY1NTg2ZDk2NzYwMWYxMTZiODk3MTZkMDIzODQ5MjQ5YTE2NzkxNmVhZWQ0OGU0OThhYTA0ZmQ2IiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 03 Oct 2023 14:02:16 GMT
content-type: image/png
content-length: 29399
last-modified: Tue, 08 Aug 2023 13:39:17 GMT
etag: "72d7-602697d4ebe02"
access-control-allow-origin: *
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
cache-control: max-age=14400
age: 4637
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=pSsvP%2FzpFzGwMA0R7oCC306JFz8BrxXqJ82nZN1NwPQKm2p3L2Fa1KT3LbFwYUSwy41lpEs8McawyNDqT6J2YQblMHkzkcgvBmLkJau6UnjGSkPt1klHQslpp%2ByuCZMbDZ8gauc%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
cf-cache-status: HIT
accept-ranges: bytes
server: cloudflare
cf-ray: 8105b8cab93c5691-OSL
adfs.heart.org/adfs/portal/logo/logo.png
69.152.183.140200 OK 6.4 kB URL GET HTTP/1.1 adfs.heart.org/adfs/portal/logo/logo.png
IP 69.152.183.140:443
Requested by https://lajg05z8w9s48y1.glfbreak.ru/updonp4w44n#jschwartz@esigroupusa.com
Certificate IssuerSectigo Limited
Subjectadfs.heart.org
Fingerprint11:D1:74:EB:5A:DF:CB:58:DE:8A:EE:06:70:FD:78:6D:A5:F4:22:58
ValidityTue, 16 May 2023 00:00:00 GMT - Wed, 15 May 2024 23:59:59 GMT
File type PNG image data, 260 x 32, 8-bit/color RGBA, non-interlaced\012- data
Hash d3f69be16baf7acef2e7f4dd03729866
e11aa0084b93253a24dd3ed57ddde66d27c84d2b
3a5eeea11e1041db96b81498ab69c050dd045d9e56c69e19bd98430ba752165f
GET /adfs/portal/logo/logo.png HTTP/1.1
Host: adfs.heart.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lajg05z8w9s48y1.glfbreak.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Length: 6428
Content-Type: image/png
Expires: Thu, 02 Nov 2023 14:02:16 GMT
ETag: 3A5EEEA11E1041DB96B81498AB69C050DD045D9E56C69E19BD98430BA752165F
Server: Microsoft-HTTPAPI/2.0 Microsoft-HTTPAPI/2.0
Strict-Transport-Security: max-age = 31536000
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Content-Security-Policy: default-src 'self' 'unsafe-inline' 'unsafe-eval'; img-src 'self' data:;
Date: Tue, 03 Oct 2023 14:02:16 GMT
ocsp.r2m02.amazontrust.com/
143.204.48.16 471 B URL ocsp.r2m02.amazontrust.com/
IP 143.204.48.16:0
Hash a7ddb2db2f1de23f7a6fc64b19de2f61
5aefbc40e408a311a6797bdcc7d94d2e96fc8a45
4631ed72391d6480637d1d1dd7e02669ccf49a6a8e1e03e6a8191957daad81f3
POST / HTTP/1.1
Host: ocsp.r2m02.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=7200
Date: Tue, 03 Oct 2023 14:02:18 GMT
Last-Modified: Tue, 03 Oct 2023 13:24:58 GMT
Server: ECAcc (ska/F7A5)
X-Cache: Miss from cloudfront
Via: 1.1 9ede9483eb891e14681c7c693b47c862.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: pLTnkcm2DjYfPzY-Z23-3HXNg4f-0vlw9dMHJEXOYAZvxShnUiNO8w==
Age: 2240
httpbin.org/ip
34.236.85.82200 OK 31 B IP 34.236.85.82:443
Requested by https://lajg05z8w9s48y1.glfbreak.ru/updonp4w44n#jschwartz@esigroupusa.com
Certificate IssuerAmazon
Subjecthttpbin.org
Fingerprint14:0C:C7:A8:EC:FA:7F:9C:9D:D2:B8:7E:C9:B8:93:3A:A1:11:F6:01
ValidityThu, 21 Sep 2023 00:00:00 GMT - Fri, 18 Oct 2024 23:59:59 GMT
File type JSON data\012- , ASCII text
Hash 421fbb31f37428f936586985bd35b7ef
df617524b5cf0200e58b7ed3ce98c102fb952ca4
f0c09e029405dd8f7f6574163ea5018413c7e621b7a69e6fb2ee223efdc32ddf
GET /ip HTTP/1.1
Host: httpbin.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://lajg05z8w9s48y1.glfbreak.ru
DNT: 1
Connection: keep-alive
Referer: https://lajg05z8w9s48y1.glfbreak.ru/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 03 Oct 2023 14:02:18 GMT
content-type: application/json
content-length: 31
server: gunicorn/19.9.0
access-control-allow-origin: https://lajg05z8w9s48y1.glfbreak.ru
access-control-allow-credentials: true
X-Firefox-Spdy: h2
lajg05z8w9s48y1.glfbreak.ru/web1/assets/js/pages.js?cb=1696341730020
104.21.21.57200 OK 81 kB URL GET HTTP/3 lajg05z8w9s48y1.glfbreak.ru/web1/assets/js/pages.js?cb=1696341730020
IP 104.21.21.57:443
Requested by https://lajg05z8w9s48y1.glfbreak.ru/updonp4w44n#jschwartz@esigroupusa.com
Certificate IssuerGoogle Trust Services LLC
Subject*.glfbreak.ru
FingerprintFE:09:67:09:64:85:14:9F:26:37:8F:9A:B6:BA:D0:EC:CA:3B:8D:C8
ValidityThu, 07 Sep 2023 12:26:20 GMT - Wed, 06 Dec 2023 12:26:19 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /web1/assets/js/pages.js?cb=1696341730020 HTTP/1.1
Host: lajg05z8w9s48y1.glfbreak.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lajg05z8w9s48y1.glfbreak.ru/updonp4w44n
Cookie: XSRF-TOKEN=eyJpdiI6IlFtaEJRNXByRzJqZ3d3eUllSFRxcHc9PSIsInZhbHVlIjoicmFqbkF2QUREVldsZmp0MVBEVDArbEV6SmNFNE5xaTBwQ0t1bVMwRiswU3dROWppbG1iRkY4elZBbjV0MHdMNUZnVlJwSzJaaVcwTHpaRTdvWHVPUkpHUFZtTG9DSEZRcW1ZcXNHMm9wOFpkM2wydEZmeGhqWHR0Znk5UGF3SE0iLCJtYWMiOiIxZWQ2NDFhODgyOTJhZjhiNjg4ZDU5ZmNjYWU2OTA1ZDI1ZWY5OTIwZDM3MTFkOWIyZTI5M2IzMjRjMzZmZGQxIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjJjOEl2Y3hzYmNqd3gzL1dXNFh0SVE9PSIsInZhbHVlIjoicy9WaGdTRCs2dGJrZXdrR0Uzc2N1TnYrZzRTY0N5VjVpZVp1SUJycUJ1bmlTNHNqRUprZEVSZjJMSTZZbmFhSUdGUkZJc1pXTGZ5MVB3MmVyMzliaVhUMjAySzFVa3R0UmN0RVk5aldOSlVmcmM2U2JiU0xHVHQyRmpXaHg5bmMiLCJtYWMiOiI3NTFjZjRkZjY1NTg2ZDk2NzYwMWYxMTZiODk3MTZkMDIzODQ5MjQ5YTE2NzkxNmVhZWQ0OGU0OThhYTA0ZmQ2IiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 03 Oct 2023 14:02:16 GMT
content-type: application/javascript
last-modified: Mon, 25 Sep 2023 20:22:34 GMT
etag: W/"13b82-60634b7f30722"
access-control-allow-origin: *
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
cache-control: max-age=14400
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=2Ij5dS%2F4O5R5ovyxIbSM9yPvHDltkoj42jFv%2B8O%2FHEPPViAW6%2BjwMUBORUmLVhHHsh2LiQqhoVXEwRTXHITbTZgx6Ci6zzkNkFi%2FzqCcEng5FICqu%2BWFkD2E4ebZRhYI0BJOISs%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
cf-cache-status: MISS
server: cloudflare
cf-ray: 8105b8ca68f15691-OSL
content-encoding: br
lajg05z8w9s48y1.glfbreak.ru/web1/assets/js/pages-head-top-web.min.js?cb=1696341729349
104.21.21.57200 OK 2.2 kB URL GET HTTP/3 lajg05z8w9s48y1.glfbreak.ru/web1/assets/js/pages-head-top-web.min.js?cb=1696341729349
IP 104.21.21.57:443
Requested by https://lajg05z8w9s48y1.glfbreak.ru/updonp4w44n#jschwartz@esigroupusa.com
Certificate IssuerGoogle Trust Services LLC
Subject*.glfbreak.ru
FingerprintFE:09:67:09:64:85:14:9F:26:37:8F:9A:B6:BA:D0:EC:CA:3B:8D:C8
ValidityThu, 07 Sep 2023 12:26:20 GMT - Wed, 06 Dec 2023 12:26:19 GMT
File type ASCII text, with very long lines (2377), with no line terminators
Hash 0f2e26038b2d0d2114e7abc2290e680d
ddd6bcce2bfcebdd49a781316cb74f49c00da143
4f0ba78178d3349808ddb2fb8d4d775bd3914ac66557c8aeba189e7b49d72517
GET /web1/assets/js/pages-head-top-web.min.js?cb=1696341729349 HTTP/1.1
Host: lajg05z8w9s48y1.glfbreak.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lajg05z8w9s48y1.glfbreak.ru/updonp4w44n
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 03 Oct 2023 14:02:09 GMT
content-type: application/javascript
last-modified: Sat, 23 Sep 2023 01:00:14 GMT
etag: W/"8a1-605fc3f69c290"
access-control-allow-origin: *
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
cache-control: max-age=14400
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=PZHMnzeqm4LubkY8qkOXnGxbGGja3lF16%2FHEXomPI%2BuA%2Bqj3TNtJdAv%2F%2BJtFlonS%2BMmQzuqvA%2Fb3HspDz0Z6YdGLvEGnDdEI0kbeJJIHdLgazG%2F%2BeoKeZMbCQTDo6CAFQ6nm%2Bw4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
cf-cache-status: MISS
server: cloudflare
cf-ray: 8105b89e0c535691-OSL
content-encoding: br
lajg05z8w9s48y1.glfbreak.ru/web1/assets/css/pages-godaddy.css?cb=1696341730020
104.21.21.57200 OK 39 kB URL GET HTTP/3 lajg05z8w9s48y1.glfbreak.ru/web1/assets/css/pages-godaddy.css?cb=1696341730020
IP 104.21.21.57:443
Requested by https://lajg05z8w9s48y1.glfbreak.ru/updonp4w44n#jschwartz@esigroupusa.com
Certificate IssuerGoogle Trust Services LLC
Subject*.glfbreak.ru
FingerprintFE:09:67:09:64:85:14:9F:26:37:8F:9A:B6:BA:D0:EC:CA:3B:8D:C8
ValidityThu, 07 Sep 2023 12:26:20 GMT - Wed, 06 Dec 2023 12:26:19 GMT
File type ASCII text, with very long lines (1723), with CRLF line terminators
Hash d3fd47cb9314b9d1c6916e4179076329
babecdeb0a31fae079c8401d945563d91e3dc65a
b6b8147ef345a398d599d894f543d58ea9899af8fca1d050d8ecd6efa7fb211a
GET /web1/assets/css/pages-godaddy.css?cb=1696341730020 HTTP/1.1
Host: lajg05z8w9s48y1.glfbreak.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lajg05z8w9s48y1.glfbreak.ru/updonp4w44n
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 03 Oct 2023 14:02:10 GMT
content-type: text/css
last-modified: Fri, 25 Aug 2023 04:39:37 GMT
etag: W/"971b-603b7ee9e50a8"
access-control-allow-origin: *
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
cache-control: max-age=14400
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=NfcI8g5%2BojQGmZ%2BOGadrYEqBac%2FtJqWwXgTKsGbH10FPhNU%2BiHBKWuCLg4gwNpKMhKdkDQsogEKXNi%2BMlA%2FzoBCAcqCpzoTs0zX3MpU4PG0vmH9vcIQX5iiEH91YLXGsutXFyUs%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
cf-cache-status: MISS
server: cloudflare
cf-ray: 8105b8a21a4c5691-OSL
content-encoding: br
lajg05z8w9s48y1.glfbreak.ru/web1/validatecaptcha
104.21.21.57200 OK 20 B URL POST HTTP/3 lajg05z8w9s48y1.glfbreak.ru/web1/validatecaptcha
IP 104.21.21.57:443
Requested by https://lajg05z8w9s48y1.glfbreak.ru/updonp4w44n#jschwartz@esigroupusa.com
Certificate IssuerGoogle Trust Services LLC
Subject*.glfbreak.ru
FingerprintFE:09:67:09:64:85:14:9F:26:37:8F:9A:B6:BA:D0:EC:CA:3B:8D:C8
ValidityThu, 07 Sep 2023 12:26:20 GMT - Wed, 06 Dec 2023 12:26:19 GMT
File type troff or preprocessor input, ASCII text, with no line terminators
Hash 0b35866f4a3aa4d34ce5dda2d14c2cd8
d2b80911f09c3106fdf0df9920f983945d644083
493851374626d927bfe1c7d084fa977a0e636c03f163fda258ab6b638edc2f0d
POST /web1/validatecaptcha HTTP/1.1
Host: lajg05z8w9s48y1.glfbreak.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 567
Origin: https://lajg05z8w9s48y1.glfbreak.ru
DNT: 1
Connection: keep-alive
Referer: https://lajg05z8w9s48y1.glfbreak.ru/updonp4w44n
Cookie: XSRF-TOKEN=eyJpdiI6IkVZcVBSQzZrTVVFU1YrU1lNeE5YVFE9PSIsInZhbHVlIjoib0JxazRVUHdYZWJkLzdvWGtPZ0ZXVzV2Ly83UW5xcENSVjZvbUF6VWpKSFE5eTJrSVZyTXU5bnRWTDVib0J1SDRCSUdCZlJjdWlMaTZLNExKUFlUUjRNOUVFRGFndlBoQlZpSTFwQkk3aHJGQUk4aVoxY3Y5a3FIM2l6TStoSVEiLCJtYWMiOiIwNjVmMDQ2YjlmZTU5YmQ1MGE1MTA0MzU3NDYxMTBiNjhlYWZlYzJmNmIwYzczODA5YTExMjUyMDgzMGI5NzU3IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImVJRzcxRUo2V09tNXNNV1dLeExQdXc9PSIsInZhbHVlIjoiZG16dWNZc0FQTFhRRm1XTnVkTWpsdGpTR1ZEQWVUOFhxZ1lrUzJQblJ1NXUvWFY2R3NNbTdYT2FWTnpkQU52U1V4SktDYVp4T04vS0M2T1FpQXh2VWRtdU1JR3ZQNERNNWFyeVlMVVYyNmsya1VaOFBreWZuNGVpZ1BkeFBzR1giLCJtYWMiOiIwODQxZjNhN2ExYmRkMzVmMjI0NzQ3Yjc2YWUxYWZhOGZhYzc1ODY4MjgxNmMyZTJhNjIzMDMwOWY2Yzg0MTAxIiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 03 Oct 2023 14:02:15 GMT
content-type: application/json
x-powered-by: PHP/8.1.10
cache-control: no-cache, private
access-control-allow-origin: *
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=5Y0f6s0czP7EnzmvLv8qv%2Fh4oihj5x3ldH9aGRxgN58xNex9q%2B7M%2FIH4Dg92ifUceocgR5WBTLyNjBZ8xJZYcNPy85woxNgS7BZpaW9DcFwVeaANaz%2FGz8AhVKszzPFOZKT%2F8bI%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
set-cookie: XSRF-TOKEN=eyJpdiI6Ik5MTmhZemJmMXc4OTkvMHZUbHB4akE9PSIsInZhbHVlIjoiRlF3QkVrUVp1SnVCTk5xeFp0RUhPUy9qUVJnSTNGM0tmTTZycytxMitTenZlYWhxTjdFSW5pZHBQQ1I2Q000L213NW1YdUpqdzR0SFVLQmFMMEtIWTN5WjhDQ0RRZlFEdHFVQTZDYUV5aUxHSm5pQS9lS045TVBlZWxnT21NTkciLCJtYWMiOiJkYjVhMzQ1NTZjYzgwZDg4YzZmNGM1NmZjMzc5MTg3YjI1ZjA4MTljN2EwMWYyNmJjZTAyYjk1NjIxZTZkMzJhIiwidGFnIjoiIn0%3D; expires=Tue, 03-Oct-2023 16:02:14 GMT; Max-Age=7200; path=/; samesite=lax
laravel_session=eyJpdiI6IkZVMXlIQkhuNExubjRncFVhSHJNQ0E9PSIsInZhbHVlIjoieVdUT0JrRkozczNkZWpCRmpTcDVSMHBoR2lKaWZNMEx6M2tFblpwVVFsRkFXV0lDQUJaSjJuWDcrTWZRQVVTYkIxM1BJM1ovczVDTXhjMUVtUE9ndWtXb0NHV0xzcWh1SzdXNGJSU1IxYTN2YmtpMCtGcXdsNE1UcDB5clVWT0QiLCJtYWMiOiJlZDJiZTVlMmNiYTViMTExYjAzMDNkMjk0MTVmYTEwNWVhYzU5MjQ5ZjI2NmVjODkzNDRlNDg0MThmY2Q3NWEyIiwidGFnIjoiIn0%3D; expires=Tue, 03-Oct-2023 16:02:14 GMT; Max-Age=7200; path=/; httponly; samesite=lax
server: cloudflare
cf-ray: 8105b8bdaa3f5691-OSL
content-encoding: br
challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/3kefk/0x4AAAAAAAJ1zx-MJxCL7z8m/auto/normal
0.0.0.0 0 B URL GET challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/3kefk/0x4AAAAAAAJ1zx-MJxCL7z8m/auto/normal
IP 0.0.0.0:0
Requested by https://lajg05z8w9s48y1.glfbreak.ru/updonp4w44n#jschwartz@esigroupusa.com
Certificate IssuerCloudflare, Inc.
Subjectchallenges.cloudflare.com
Fingerprint5F:E4:AA:8C:2E:24:D2:B1:69:9D:13:28:31:5C:65:FA:97:2A:E9:6E
ValidityFri, 18 Aug 2023 00:00:00 GMT - Sat, 17 Aug 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/3kefk/0x4AAAAAAAJ1zx-MJxCL7z8m/auto/normal HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lajg05z8w9s48y1.glfbreak.ru/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
lajg05z8w9s48y1.glfbreak.ru/web1/assets/godaddy-logo.png
104.21.21.57200 OK 50 kB URL GET HTTP/3 lajg05z8w9s48y1.glfbreak.ru/web1/assets/godaddy-logo.png
IP 104.21.21.57:443
Requested by https://lajg05z8w9s48y1.glfbreak.ru/updonp4w44n#jschwartz@esigroupusa.com
Certificate IssuerGoogle Trust Services LLC
Subject*.glfbreak.ru
FingerprintFE:09:67:09:64:85:14:9F:26:37:8F:9A:B6:BA:D0:EC:CA:3B:8D:C8
ValidityThu, 07 Sep 2023 12:26:20 GMT - Wed, 06 Dec 2023 12:26:19 GMT
File type PNG image data, 2160 x 443, 8-bit/color RGBA, non-interlaced\012- data
Hash db783743cd246ff4d77f4a3694285989
b9466716904457641b7831868b47162d8d378d41
5913b1ec0fc58ab2bec576804b9e9b566a584ea3d21a1bf74a7b40051a447fdc
GET /web1/assets/godaddy-logo.png HTTP/1.1
Host: lajg05z8w9s48y1.glfbreak.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lajg05z8w9s48y1.glfbreak.ru/updonp4w44n
Cookie: XSRF-TOKEN=eyJpdiI6IlFtaEJRNXByRzJqZ3d3eUllSFRxcHc9PSIsInZhbHVlIjoicmFqbkF2QUREVldsZmp0MVBEVDArbEV6SmNFNE5xaTBwQ0t1bVMwRiswU3dROWppbG1iRkY4elZBbjV0MHdMNUZnVlJwSzJaaVcwTHpaRTdvWHVPUkpHUFZtTG9DSEZRcW1ZcXNHMm9wOFpkM2wydEZmeGhqWHR0Znk5UGF3SE0iLCJtYWMiOiIxZWQ2NDFhODgyOTJhZjhiNjg4ZDU5ZmNjYWU2OTA1ZDI1ZWY5OTIwZDM3MTFkOWIyZTI5M2IzMjRjMzZmZGQxIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjJjOEl2Y3hzYmNqd3gzL1dXNFh0SVE9PSIsInZhbHVlIjoicy9WaGdTRCs2dGJrZXdrR0Uzc2N1TnYrZzRTY0N5VjVpZVp1SUJycUJ1bmlTNHNqRUprZEVSZjJMSTZZbmFhSUdGUkZJc1pXTGZ5MVB3MmVyMzliaVhUMjAySzFVa3R0UmN0RVk5aldOSlVmcmM2U2JiU0xHVHQyRmpXaHg5bmMiLCJtYWMiOiI3NTFjZjRkZjY1NTg2ZDk2NzYwMWYxMTZiODk3MTZkMDIzODQ5MjQ5YTE2NzkxNmVhZWQ0OGU0OThhYTA0ZmQ2IiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 03 Oct 2023 14:02:16 GMT
content-type: image/png
content-length: 49602
last-modified: Thu, 24 Aug 2023 13:40:53 GMT
etag: "c1c2-603ab607e0f57"
access-control-allow-origin: *
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
cache-control: max-age=14400
age: 7054
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=NKeGxaAmqVYSo7RfC4EPreW4S%2Bas1VlEEMBld2QPl5MrFnh1mKszPIBi%2BXa1T4x4afXUGyEhqwR6cltaw8qH7vR7tgxOgeB0SRBSKx%2BgZWmciKCSuqRpP0oCIiszJo6CuZBCF3o%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
cf-cache-status: HIT
accept-ranges: bytes
server: cloudflare
cf-ray: 8105b8ca48ac5691-OSL
lajg05z8w9s48y1.glfbreak.ru/web1/call
0.0.0.0 0 B URL POST lajg05z8w9s48y1.glfbreak.ru/web1/call
IP 0.0.0.0:0
Requested by https://lajg05z8w9s48y1.glfbreak.ru/updonp4w44n#jschwartz@esigroupusa.com
Certificate IssuerGoogle Trust Services LLC
Subject*.glfbreak.ru
FingerprintFE:09:67:09:64:85:14:9F:26:37:8F:9A:B6:BA:D0:EC:CA:3B:8D:C8
ValidityThu, 07 Sep 2023 12:26:20 GMT - Wed, 06 Dec 2023 12:26:19 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /web1/call HTTP/1.1
Host: lajg05z8w9s48y1.glfbreak.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 111
Origin: https://lajg05z8w9s48y1.glfbreak.ru
DNT: 1
Connection: keep-alive
Referer: https://lajg05z8w9s48y1.glfbreak.ru/updonp4w44n
Cookie: XSRF-TOKEN=eyJpdiI6ImZzWVk1OXMwL09rTDFpZm05TFVPckE9PSIsInZhbHVlIjoiL3dPWXl4b1czQUR0S2d0Yjd6bUFaZmVMcjdDT0x4K2h2d0lJSWhpZEJucUdnS1VINEdXSm9wZkMxTXBGSGVtby85UUxDMGhKTGpYUjhQbytWNmJOY09RWGZpd3YzbmFQRWxhNEUrR2dDdTJ5RlpBQ2lXa2JVUEg0ZDNpT0VsMXEiLCJtYWMiOiJmN2VmNWM4NTVmMmRlMmY0OGJkZWM5MDFkNjI5NGFkYWNjMDUzNzUwYzIwOTRkMGI0MDgzMGRkYTc5OTdhNzkyIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjJQTTBmcSt6Y1d5a3R4c2xqZmh1QXc9PSIsInZhbHVlIjoibGE0ZHJUQmFSbEY3bGVlTlBmb1FVVFNDdmkySTR1VUhuYTN0bEQwZlliRHhueFh6NnJwb3o4RytDTGpNQWMva0cvMU1iUnFpN3l5Uk9JRWQzdnp5TEx5ZUxZRkJBWGxBbkxXK29samNWdHkvSXNHaWJOdzh5bGRKeC9CK2xFNEIiLCJtYWMiOiI0NTk0ZGE5ZmZjOTc2OWMxM2M4YWViNzM1MWY4NjVmZDQ4YjkyZGQ0YTkxMzBkZmNlNzczZWUwMDk3ZDJjOTkyIiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
lajg05z8w9s48y1.glfbreak.ru/updonp4w44n
104.21.21.57200 OK 111 B URL User Request GET HTTP/2 lajg05z8w9s48y1.glfbreak.ru/updonp4w44n
IP 104.21.21.57:443
Certificate IssuerGoogle Trust Services LLC
Subject*.glfbreak.ru
FingerprintFE:09:67:09:64:85:14:9F:26:37:8F:9A:B6:BA:D0:EC:CA:3B:8D:C8
ValidityThu, 07 Sep 2023 12:26:20 GMT - Wed, 06 Dec 2023 12:26:19 GMT
File type HTML document text\012- HTML document, ASCII text, with no line terminators
Hash 101582db1e6308eb1f6053d4208191a7
43a6096dc780f98a5d3b9b7fb908e342e91b5133
da724a8ef3986a489698138b03a1e6bdc2e0b25196fcf558db46af0d8442d5c8
Analyzer Verdict Alert urlquery phishing Phishing - Microsoft Outlook
GET /updonp4w44n HTTP/1.1
Host: lajg05z8w9s48y1.glfbreak.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 03 Oct 2023 14:02:08 GMT
content-type: text/html; charset=UTF-8
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=V771AnNsk2gKyfm34dQ0K%2B2%2BuvTVRWqcfXabJHf5ioF%2Bg2fLGXqliMxVyRcoSnroZRNrjMyng%2FyuezxUYAtN8hmq%2BfKpzBfrm0QnDy1%2Bm4kzXHPNPPiRNJVzvTMZDGYxumuYY6Ap6MQ85Jy6woM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8105b8993af10b06-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
lajg05z8w9s48y1.glfbreak.ru/web1/assets/cloudfavicon.ico
104.21.21.57200 OK 34 kB URL GET HTTP/3 lajg05z8w9s48y1.glfbreak.ru/web1/assets/cloudfavicon.ico
IP 104.21.21.57:443
Requested by https://lajg05z8w9s48y1.glfbreak.ru/updonp4w44n#jschwartz@esigroupusa.com
Certificate IssuerGoogle Trust Services LLC
Subject*.glfbreak.ru
FingerprintFE:09:67:09:64:85:14:9F:26:37:8F:9A:B6:BA:D0:EC:CA:3B:8D:C8
ValidityThu, 07 Sep 2023 12:26:20 GMT - Wed, 06 Dec 2023 12:26:19 GMT
File type MS Windows icon resource - 5 icons, 16x16, 32 bits/pixel, 24x24, 32 bits/pixel\012- data
Hash 88415acda09a4cbd9d87543c3ba78180
2dec4705e9ab399efdc6eef36e079aa31d1df8d9
20cccc47c1bac9d2ef36b6a1c58af58c5c169ad5ca084080f0392b86f949641c
GET /web1/assets/cloudfavicon.ico HTTP/1.1
Host: lajg05z8w9s48y1.glfbreak.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lajg05z8w9s48y1.glfbreak.ru/updonp4w44n
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 03 Oct 2023 14:02:10 GMT
content-type: image/x-icon
last-modified: Wed, 16 Aug 2023 15:22:46 GMT
etag: W/"86be-6030bde212b57"
access-control-allow-origin: *
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
cache-control: max-age=14400
age: 7055
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=se%2B8k5qHoeNrPyhih9NUa55PkN7eFqBIY3sjaTIMAWpMyuwzzJm0CqvZLruiBKinGz9V4iMZ0%2BMn6j%2FcxspkIvQwblv21LatX5ia4MJExO9hfbbaXWkhYvTCZgf1j5bpHYtDApg%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
cf-cache-status: HIT
server: cloudflare
cf-ray: 8105b8a60e475691-OSL
content-encoding: br
lajg05z8w9s48y1.glfbreak.ru/web1/assets/cloudfavicon.ico
104.21.21.57200 OK 34 kB URL GET HTTP/3 lajg05z8w9s48y1.glfbreak.ru/web1/assets/cloudfavicon.ico
IP 104.21.21.57:443
Requested by https://lajg05z8w9s48y1.glfbreak.ru/updonp4w44n#jschwartz@esigroupusa.com
Certificate IssuerGoogle Trust Services LLC
Subject*.glfbreak.ru
FingerprintFE:09:67:09:64:85:14:9F:26:37:8F:9A:B6:BA:D0:EC:CA:3B:8D:C8
ValidityThu, 07 Sep 2023 12:26:20 GMT - Wed, 06 Dec 2023 12:26:19 GMT
File type MS Windows icon resource - 5 icons, 16x16, 32 bits/pixel, 24x24, 32 bits/pixel\012- data
Hash 88415acda09a4cbd9d87543c3ba78180
2dec4705e9ab399efdc6eef36e079aa31d1df8d9
20cccc47c1bac9d2ef36b6a1c58af58c5c169ad5ca084080f0392b86f949641c
GET /web1/assets/cloudfavicon.ico HTTP/1.1
Host: lajg05z8w9s48y1.glfbreak.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lajg05z8w9s48y1.glfbreak.ru/updonp4w44n
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 03 Oct 2023 14:02:09 GMT
content-type: image/x-icon
last-modified: Wed, 16 Aug 2023 15:22:46 GMT
etag: W/"86be-6030bde212b57"
access-control-allow-origin: *
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
cache-control: max-age=14400
age: 7054
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=se%2B8k5qHoeNrPyhih9NUa55PkN7eFqBIY3sjaTIMAWpMyuwzzJm0CqvZLruiBKinGz9V4iMZ0%2BMn6j%2FcxspkIvQwblv21LatX5ia4MJExO9hfbbaXWkhYvTCZgf1j5bpHYtDApg%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
cf-cache-status: HIT
server: cloudflare
cf-ray: 8105b89f0da95691-OSL
content-encoding: br
lajg05z8w9s48y1.glfbreak.ru/web1/assets/css/pages-okta.css?cb=1696341730020
104.21.21.57200 OK 0 B URL GET HTTP/3 lajg05z8w9s48y1.glfbreak.ru/web1/assets/css/pages-okta.css?cb=1696341730020
IP 104.21.21.57:443
Requested by https://lajg05z8w9s48y1.glfbreak.ru/updonp4w44n#jschwartz@esigroupusa.com
Certificate IssuerGoogle Trust Services LLC
Subject*.glfbreak.ru
FingerprintFE:09:67:09:64:85:14:9F:26:37:8F:9A:B6:BA:D0:EC:CA:3B:8D:C8
ValidityThu, 07 Sep 2023 12:26:20 GMT - Wed, 06 Dec 2023 12:26:19 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /web1/assets/css/pages-okta.css?cb=1696341730020 HTTP/1.1
Host: lajg05z8w9s48y1.glfbreak.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lajg05z8w9s48y1.glfbreak.ru/updonp4w44n
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 03 Oct 2023 14:02:10 GMT
content-type: text/css
content-length: 0
last-modified: Thu, 24 Aug 2023 12:07:13 GMT
etag: "0-603aa11867866"
access-control-allow-origin: *
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
cache-control: max-age=14400
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=tSX%2FT7BGlF3ARnaA0A3%2FrEFpYTi2sZdPu4Aon7%2FAE%2BhGy7lROf3Ntb3pWOKyXNUuSDZ8qgilagyR1hu%2FOj1Fm%2BSpUECBKlZddhiwF0kw901suANUpHOKKu%2BodREAalhXUSsO3E0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
cf-cache-status: MISS
accept-ranges: bytes
server: cloudflare
cf-ray: 8105b8a23a605691-OSL
code.jquery.com/jquery-3.6.0.min.js
151.101.66.137200 OK 90 kB URL GET HTTP/2 code.jquery.com/jquery-3.6.0.min.js
IP 151.101.66.137:443
Requested by https://lajg05z8w9s48y1.glfbreak.ru/updonp4w44n#jschwartz@esigroupusa.com
Certificate IssuerSectigo Limited
Subject*.jquery.com
FingerprintD2:19:0A:AD:CE:BB:9C:61:17:5D:29:4B:A2:54:E8:C6:91:B8:F9:8D
ValidityTue, 11 Jul 2023 00:00:00 GMT - Sun, 14 Jul 2024 23:59:59 GMT
File type ASCII text, with very long lines (65447)
Hash 8fb8fee4fcc3cc86ff6c724154c49c42
b82d238d4e31fdf618bae8ac11a6c812c03dd0d4
ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e
GET /jquery-3.6.0.min.js HTTP/1.1
Host: code.jquery.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lajg05z8w9s48y1.glfbreak.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Fri, 18 Oct 1991 12:00:00 GMT
etag: W/"28feccc0-15d9d"
cache-control: public, max-age=31536000, stale-while-revalidate=604800
access-control-allow-origin: *
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Tue, 03 Oct 2023 14:02:08 GMT
age: 1103628
x-served-by: cache-lga21931-LGA, cache-bma1626-BMA
x-cache: HIT, HIT
x-cache-hits: 30, 190942
x-timer: S1696341729.742930,VS0,VE0
vary: Accept-Encoding
content-length: 30875
X-Firefox-Spdy: h2
challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/3kefk/0x4AAAAAAAJ1zx-MJxCL7z8m/auto/normal
104.17.2.184200 OK 27 kB URL GET HTTP/3 challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/3kefk/0x4AAAAAAAJ1zx-MJxCL7z8m/auto/normal
IP 104.17.2.184:443
Requested by https://lajg05z8w9s48y1.glfbreak.ru/updonp4w44n#jschwartz@esigroupusa.com
Certificate IssuerCloudflare, Inc.
Subjectchallenges.cloudflare.com
Fingerprint5F:E4:AA:8C:2E:24:D2:B1:69:9D:13:28:31:5C:65:FA:97:2A:E9:6E
ValidityFri, 18 Aug 2023 00:00:00 GMT - Sat, 17 Aug 2024 23:59:59 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (14577)
Hash d7f6f4bb182e3863d91a2e5720172c48
51a43972758789dd57352acbb97bc5720167f3a1
e9b7035d87f1a3bf3a48904b835b107d1ef9605d08459152d49f8d3cd0446cf1
GET /cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/3kefk/0x4AAAAAAAJ1zx-MJxCL7z8m/auto/normal HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lajg05z8w9s48y1.glfbreak.ru/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 03 Oct 2023 14:02:11 GMT
content-type: text/html; charset=UTF-8
cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
content-security-policy: frame-src https://challenges.cloudflare.com/; base-uri 'self'
cross-origin-embedder-policy: require-corp
cross-origin-opener-policy: same-origin
cross-origin-resource-policy: cross-origin
document-policy: js-profiling
origin-agent-cluster: ?1
permissions-policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()
referrer-policy: same-origin
server: cloudflare
cf-ray: 8105b8acf9a856bb-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
lajg05z8w9s48y1.glfbreak.ru/web1/assets/microsoftfavicon.ico
104.21.21.57200 OK 17 kB URL GET HTTP/3 lajg05z8w9s48y1.glfbreak.ru/web1/assets/microsoftfavicon.ico
IP 104.21.21.57:443
Requested by https://lajg05z8w9s48y1.glfbreak.ru/updonp4w44n#jschwartz@esigroupusa.com
Certificate IssuerGoogle Trust Services LLC
Subject*.glfbreak.ru
FingerprintFE:09:67:09:64:85:14:9F:26:37:8F:9A:B6:BA:D0:EC:CA:3B:8D:C8
ValidityThu, 07 Sep 2023 12:26:20 GMT - Wed, 06 Dec 2023 12:26:19 GMT
File type MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors\012- data
Hash 12e3dac858061d088023b2bd48e2fa96
e08ce1a144eceae0c3c2ea7a9d6fbc5658f24ce5
90cdaf487716184e4034000935c605d1633926d348116d198f355a98b8c6cd21
GET /web1/assets/microsoftfavicon.ico HTTP/1.1
Host: lajg05z8w9s48y1.glfbreak.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lajg05z8w9s48y1.glfbreak.ru/updonp4w44n
Cookie: XSRF-TOKEN=eyJpdiI6IlFtaEJRNXByRzJqZ3d3eUllSFRxcHc9PSIsInZhbHVlIjoicmFqbkF2QUREVldsZmp0MVBEVDArbEV6SmNFNE5xaTBwQ0t1bVMwRiswU3dROWppbG1iRkY4elZBbjV0MHdMNUZnVlJwSzJaaVcwTHpaRTdvWHVPUkpHUFZtTG9DSEZRcW1ZcXNHMm9wOFpkM2wydEZmeGhqWHR0Znk5UGF3SE0iLCJtYWMiOiIxZWQ2NDFhODgyOTJhZjhiNjg4ZDU5ZmNjYWU2OTA1ZDI1ZWY5OTIwZDM3MTFkOWIyZTI5M2IzMjRjMzZmZGQxIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjJjOEl2Y3hzYmNqd3gzL1dXNFh0SVE9PSIsInZhbHVlIjoicy9WaGdTRCs2dGJrZXdrR0Uzc2N1TnYrZzRTY0N5VjVpZVp1SUJycUJ1bmlTNHNqRUprZEVSZjJMSTZZbmFhSUdGUkZJc1pXTGZ5MVB3MmVyMzliaVhUMjAySzFVa3R0UmN0RVk5aldOSlVmcmM2U2JiU0xHVHQyRmpXaHg5bmMiLCJtYWMiOiI3NTFjZjRkZjY1NTg2ZDk2NzYwMWYxMTZiODk3MTZkMDIzODQ5MjQ5YTE2NzkxNmVhZWQ0OGU0OThhYTA0ZmQ2IiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 03 Oct 2023 14:02:16 GMT
content-type: image/x-icon
last-modified: Sun, 19 Mar 2023 15:20:17 GMT
etag: W/"4316-5f7425905ae40"
access-control-allow-origin: *
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
cache-control: max-age=14400
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=4cHtDc289pypqKEpdITXlRr9InozZIblA9d4oEs5YPKTh1qLN7TaNQAjGRHnC6kdkJYu801E45l26xagK9WAGzQie%2BpN73p5tJJYk9WSGbWn08Q4aKXkq6wpA5vJIDhXJ6uqbfk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
cf-cache-status: HIT
age: 7053
server: cloudflare
cf-ray: 8105b8ce1d0d5691-OSL
content-encoding: br
challenges.cloudflare.com/turnstile/v0/api.js?render=explicit
104.17.2.184302 Found 34 kB URL GET HTTP/2 challenges.cloudflare.com/turnstile/v0/api.js?render=explicit
IP 104.17.2.184:443
Requested by https://lajg05z8w9s48y1.glfbreak.ru/updonp4w44n#jschwartz@esigroupusa.com
Certificate IssuerCloudflare, Inc.
Subjectchallenges.cloudflare.com
Fingerprint5F:E4:AA:8C:2E:24:D2:B1:69:9D:13:28:31:5C:65:FA:97:2A:E9:6E
ValidityFri, 18 Aug 2023 00:00:00 GMT - Sat, 17 Aug 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /turnstile/v0/api.js?render=explicit HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lajg05z8w9s48y1.glfbreak.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
date: Tue, 03 Oct 2023 14:02:08 GMT
vary: accept-encoding
access-control-allow-origin: *
cache-control: max-age=300, public
location: /turnstile/v0/g/dffb14d6/api.js?render=explicit
server: cloudflare
cf-ray: 8105b89c98291c16-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
lajg05z8w9s48y1.glfbreak.ru/web1/assets/css/pages.min.css?cb=1696341730020
104.21.21.57200 OK 17 kB URL GET HTTP/3 lajg05z8w9s48y1.glfbreak.ru/web1/assets/css/pages.min.css?cb=1696341730020
IP 104.21.21.57:443
Requested by https://lajg05z8w9s48y1.glfbreak.ru/updonp4w44n#jschwartz@esigroupusa.com
Certificate IssuerGoogle Trust Services LLC
Subject*.glfbreak.ru
FingerprintFE:09:67:09:64:85:14:9F:26:37:8F:9A:B6:BA:D0:EC:CA:3B:8D:C8
ValidityThu, 07 Sep 2023 12:26:20 GMT - Wed, 06 Dec 2023 12:26:19 GMT
File type ASCII text, with very long lines (17002), with no line terminators
Hash 68dd1bcccde5656be56122a5370bbb98
18d1618561916e13668295570a157c32acd9e1f5
bd5a242e3cd9e703a92c7d2667e8f78a3ba2c97cbd04237665782034e4760ed3
GET /web1/assets/css/pages.min.css?cb=1696341730020 HTTP/1.1
Host: lajg05z8w9s48y1.glfbreak.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lajg05z8w9s48y1.glfbreak.ru/updonp4w44n
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 03 Oct 2023 14:02:10 GMT
content-type: text/css
last-modified: Thu, 21 Sep 2023 16:09:25 GMT
etag: W/"426a-605e0b73dd2ad"
access-control-allow-origin: *
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
cache-control: max-age=14400
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=bNwqhxwABE9tRUxScyXDYlRR1GNb1oEiIP5lMldolVP%2BVeDw5mGdsS%2BdN1OWwYujK5i1b5vyVhk2SfHvhI37rEmYj8Sgn4LTaQkyg8nknVqzdJJGY6YgYrhoWYMUmnuPye8dz5Q%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
cf-cache-status: MISS
server: cloudflare
cf-ray: 8105b8a21a4a5691-OSL
content-encoding: br
lajg05z8w9s48y1.glfbreak.ru/web1/assets/pages/ul8ez297rtg.css?cb=1696341730020
104.21.21.57200 OK 1.0 kB URL GET HTTP/3 lajg05z8w9s48y1.glfbreak.ru/web1/assets/pages/ul8ez297rtg.css?cb=1696341730020
IP 104.21.21.57:443
Requested by https://lajg05z8w9s48y1.glfbreak.ru/updonp4w44n#jschwartz@esigroupusa.com
Certificate IssuerGoogle Trust Services LLC
Subject*.glfbreak.ru
FingerprintFE:09:67:09:64:85:14:9F:26:37:8F:9A:B6:BA:D0:EC:CA:3B:8D:C8
ValidityThu, 07 Sep 2023 12:26:20 GMT - Wed, 06 Dec 2023 12:26:19 GMT
File type ASCII text, with very long lines (1090), with no line terminators
Hash 8724eafd89ef122222e5d0e054fe9bc7
7074bd4cd9c2a0c3836c5a1d4494371a2916ec53
48a4199b291b585d42bc7bc1d4803f165cb5b5f418e39dda93fa6a552ed711ff
GET /web1/assets/pages/ul8ez297rtg.css?cb=1696341730020 HTTP/1.1
Host: lajg05z8w9s48y1.glfbreak.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lajg05z8w9s48y1.glfbreak.ru/updonp4w44n
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 03 Oct 2023 14:02:10 GMT
content-type: text/css
last-modified: Tue, 03 Oct 2023 12:16:33 GMT
etag: W/"417-606cedc897b85"
access-control-allow-origin: *
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
cache-control: max-age=14400
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=jzNbl7EwE9zuPhVzrJKfYQVxQSjV3V82yY68cdlXPcxi8HhMeHDT5dhQo%2Fpmv4HI%2Fx5ftL77LVHBJNlEjvva1n0Eh6Xcb%2BU81laq%2FFd1n1S41XqvFP2zxgPMnTsrfWlDBbuKewQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
cf-cache-status: MISS
server: cloudflare
cf-ray: 8105b8a21a455691-OSL
content-encoding: br
lajg05z8w9s48y1.glfbreak.ru/web1/assets/js/pages-head-web.min.js?cb=1696341730020
104.21.21.57200 OK 10 kB URL GET HTTP/3 lajg05z8w9s48y1.glfbreak.ru/web1/assets/js/pages-head-web.min.js?cb=1696341730020
IP 104.21.21.57:443
Requested by https://lajg05z8w9s48y1.glfbreak.ru/updonp4w44n#jschwartz@esigroupusa.com
Certificate IssuerGoogle Trust Services LLC
Subject*.glfbreak.ru
FingerprintFE:09:67:09:64:85:14:9F:26:37:8F:9A:B6:BA:D0:EC:CA:3B:8D:C8
ValidityThu, 07 Sep 2023 12:26:20 GMT - Wed, 06 Dec 2023 12:26:19 GMT
File type ASCII text, with very long lines (10179), with no line terminators
Hash 91ca724283fd63e0366176adac255a3c
1657c9af872393e385b399d72471dd7c8b476d03
8e7b8fe78eb8a61b0d77628fe1a02c9569fcd0ef4c44ee1b1d06069b8a2787e7
GET /web1/assets/js/pages-head-web.min.js?cb=1696341730020 HTTP/1.1
Host: lajg05z8w9s48y1.glfbreak.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lajg05z8w9s48y1.glfbreak.ru/updonp4w44n
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 03 Oct 2023 14:02:10 GMT
content-type: application/javascript
last-modified: Mon, 25 Sep 2023 19:33:09 GMT
etag: W/"27c3-6063407397648"
access-control-allow-origin: *
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
cache-control: max-age=14400
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ivYVYY0WS9L7GLrgFyd8sKt5ZH6lgPbFlL3VM3UHYvKIcjQBjy8O5GFSix6yHH1qvEoSzHoX%2BRXO4dpVeVCsyp9km6zbbpabtlj7Rxr%2Fo797JOHKucRzGQJg9c2j1uhMAc5Da88%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
cf-cache-status: MISS
server: cloudflare
cf-ray: 8105b8a23a635691-OSL
content-encoding: br