| cdnjs.cloudflare.com/ajax/libs/crypto-js/4.1.1/crypto-js.min.js | 104.17.25.14 | 200 OK | 14 kB |
URL GET HTTP/3cdnjs.cloudflare.com/ajax/libs/crypto-js/4.1.1/crypto-js.min.js IP 104.17.25.14:443
Requested byhttps://rgo.borouseburba.ru/daf83/ CertificateIssuerGoogle Trust Services Subjectcdnjs.cloudflare.com Fingerprint00:0E:39:59:53:CF:68:07:90:75:EB:68:26:B9:04:22:44:7D:9A:32 ValidityFri, 24 Jan 2025 09:16:22 GMT - Thu, 24 Apr 2025 10:16:21 GMT
File typeJavaScript source, ASCII text, with very long lines (48316), with no line terminators Hash2ca03ad87885ab983541092b87adb299 1a17f60bf776a8c468a185c1e8e985c41a50dc27 8e3b0117f4df4be452c0b6af5b8f0a0acf9d4ade23d08d55d7e312af22077762
GET /ajax/libs/crypto-js/4.1.1/crypto-js.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rgo.borouseburba.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 30 Jan 2025 00:30:38 GMT
content-type: application/javascript; charset=utf-8
content-length: 13972
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "61182885-3694"
last-modified: Sat, 14 Aug 2021 20:33:09 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 629940
expires: Tue, 20 Jan 2026 00:30:38 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=gIgstSzMpkoKqaNS54jFcJYrR1bv48X4i1XKlb%2Fd%2BeEpFXCwTnebUtgcnWRlQbuU1zbEcA8odWqWf%2FFtL6%2FHHImPl4R3x2eOHFBe4sBalQ1tFet9%2BeH%2BAuoJEdvIZpKLVnxczO%2FA"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 909d5ac2c84056b1-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| challenges.cloudflare.com/turnstile/v0/api.js?onload=onloadTurnstileCallback | 104.18.95.41 | 302 Found | 0 B |
URL challenges.cloudflare.com/turnstile/v0/api.js?onload=onloadTurnstileCallback IP 104.18.95.41:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /turnstile/v0/api.js?onload=onloadTurnstileCallback HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rgo.borouseburba.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
date: Thu, 30 Jan 2025 00:30:38 GMT
content-length: 0
access-control-allow-origin: *
cache-control: max-age=300, stale-if-error=10800, stale-while-revalidate=300, public
cross-origin-resource-policy: cross-origin
location: /turnstile/v0/g/dc9b2fe37153/api.js
vary: Accept-Encoding
server: cloudflare
cf-ray: 909d5ac2ce48569c-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| code.jquery.com/jquery-3.6.0.min.js | 151.101.130.137 | 200 OK | 31 kB |
URL GET HTTP/2code.jquery.com/jquery-3.6.0.min.js IP 151.101.130.137:443
Requested byhttps://rgo.borouseburba.ru/daf83/ CertificateIssuerSectigo Limited Subject*.jquery.com FingerprintCD:B5:6E:05:85:0C:5A:AE:47:12:80:2A:5B:C6:E5:8F:11:72:E2:B5 ValidityTue, 25 Jun 2024 00:00:00 GMT - Wed, 25 Jun 2025 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (65447) Hash8fb8fee4fcc3cc86ff6c724154c49c42 b82d238d4e31fdf618bae8ac11a6c812c03dd0d4 ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e
GET /jquery-3.6.0.min.js HTTP/1.1
Host: code.jquery.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rgo.borouseburba.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Fri, 18 Oct 1991 12:00:00 GMT
etag: W/"28feccc0-15d9d"
cache-control: public, max-age=31536000, stale-while-revalidate=604800
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Thu, 30 Jan 2025 00:30:38 GMT
age: 3682376
x-served-by: cache-lga21931-LGA, cache-hel1410031-HEL
x-cache: HIT, HIT
x-cache-hits: 71, 1193210
x-timer: S1738197039.575835,VS0,VE0
vary: Accept-Encoding
content-length: 30875
X-Firefox-Spdy: h2
|
|
| developers.cloudflare.com/favicon.png | 104.16.3.189 | 200 OK | 937 B |
URL developers.cloudflare.com/favicon.png IP 104.16.3.189:0
File typePNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced Hashfc3b7bbe7970f47579127561139060e2 3f7c5783fe1f4404cb16304a5a274778ea3abd25 85e6223afdbd5badf2c79bcfbaa6fe686acaa781eca52c196647ffabb3be2ffe
GET /favicon.png HTTP/1.1
Host: developers.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rgo.borouseburba.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 30 Jan 2025 00:30:38 GMT
content-type: image/png
content-length: 937
cache-control: public, max-age=0, must-revalidate
etag: "6be7ff94b6151f8cfbf08b53a17e2ac1"
set-cookie: __cf_bm=9843Zyi8qo8eMc3S6EmZoYSvJAVIOEj6h7h.ySECAmE-1738197038-1.0.1.1-pmd4ybwopJuYvlslnGuWpVGlmC9HkiQuCIFv0gssSQ9_5RFkcgXm_6_ZQrKEuvjzWloVJjiX.vAcmGwc2q0LsA; path=/; expires=Thu, 30-Jan-25 01:00:38 GMT; domain=.developers.cloudflare.com; HttpOnly; Secure; SameSite=None
vary: Accept-Encoding
strict-transport-security: max-age=15552000; preload
x-content-type-options: nosniff
access-control-allow-origin: *
server: cloudflare
cf-ray: 909d5ac46864b509-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| challenges.cloudflare.com/turnstile/v0/g/dc9b2fe37153/api.js | 104.18.95.41 | 200 OK | 21 kB |
URL challenges.cloudflare.com/turnstile/v0/g/dc9b2fe37153/api.js IP 104.18.95.41:0
File typeJavaScript source, ASCII text, with very long lines (48121) Hash91f676f3335188d2681a442249e0e73c 128163cca8a902a564570e31ef09f36aefb1a98b 57d6a8ffd948f2ee0898b43639e8a58c2a37420d3a11d56f2eacc96ee7862065
GET /turnstile/v0/g/dc9b2fe37153/api.js HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://rgo.borouseburba.ru/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 30 Jan 2025 00:30:38 GMT
content-type: application/javascript; charset=UTF-8
last-modified: Mon, 27 Jan 2025 15:47:50 GMT
cache-control: max-age=31536000, stale-if-error=10800, stale-while-revalidate=31536000, public
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding
server: cloudflare
cf-ray: 909d5ac31eb6569c-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| cdnjs.cloudflare.com/ajax/libs/crypto-js/4.1.1/crypto-js.min.js | 104.17.25.14 | 200 OK | 14 kB |
URL GET HTTP/3cdnjs.cloudflare.com/ajax/libs/crypto-js/4.1.1/crypto-js.min.js IP 104.17.25.14:443
Requested byhttps://rgo.borouseburba.ru/daf83/ CertificateIssuerGoogle Trust Services Subjectcdnjs.cloudflare.com Fingerprint00:0E:39:59:53:CF:68:07:90:75:EB:68:26:B9:04:22:44:7D:9A:32 ValidityFri, 24 Jan 2025 09:16:22 GMT - Thu, 24 Apr 2025 10:16:21 GMT
File typeJavaScript source, ASCII text, with very long lines (48316), with no line terminators Hash2ca03ad87885ab983541092b87adb299 1a17f60bf776a8c468a185c1e8e985c41a50dc27 8e3b0117f4df4be452c0b6af5b8f0a0acf9d4ade23d08d55d7e312af22077762
GET /ajax/libs/crypto-js/4.1.1/crypto-js.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rgo.borouseburba.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 30 Jan 2025 00:30:48 GMT
content-type: application/javascript; charset=utf-8
content-length: 13972
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "61182885-3694"
last-modified: Sat, 14 Aug 2021 20:33:09 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 629950
expires: Tue, 20 Jan 2026 00:30:48 GMT
accept-ranges: bytes
priority: u=2,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ki9shSZ%2BweBp5iJdwEj1b%2FaEY8aW3SSwROBiA4a8tJYsjXy3GQ2MfPIFB4bHEj1BalJWrm6FwBNYx4sxXDip4sFwn2z5gzfNH8RsMqis5hR%2BeffgI2CTGIeQVbwTt8k4Ngt%2BbhMx"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 909d5b01fad91c02-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
|
|
| code.jquery.com/jquery-3.6.0.min.js | 151.101.130.137 | 200 OK | 31 kB |
URL GET HTTP/2code.jquery.com/jquery-3.6.0.min.js IP 151.101.130.137:443
Requested byhttps://rgo.borouseburba.ru/daf83/ CertificateIssuerSectigo Limited Subject*.jquery.com FingerprintCD:B5:6E:05:85:0C:5A:AE:47:12:80:2A:5B:C6:E5:8F:11:72:E2:B5 ValidityTue, 25 Jun 2024 00:00:00 GMT - Wed, 25 Jun 2025 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (65447) Hash8fb8fee4fcc3cc86ff6c724154c49c42 b82d238d4e31fdf618bae8ac11a6c812c03dd0d4 ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e
GET /jquery-3.6.0.min.js HTTP/1.1
Host: code.jquery.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rgo.borouseburba.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Fri, 18 Oct 1991 12:00:00 GMT
etag: W/"28feccc0-15d9d"
cache-control: public, max-age=31536000, stale-while-revalidate=604800
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Thu, 30 Jan 2025 00:30:48 GMT
age: 3682386
x-served-by: cache-lga21931-LGA, cache-hel1410031-HEL
x-cache: HIT, HIT
x-cache-hits: 71, 1193219
x-timer: S1738197049.651836,VS0,VE0
vary: Accept-Encoding
content-length: 30875
X-Firefox-Spdy: h2
|
|
| cdnjs.cloudflare.com/ajax/libs/crypto-js/4.1.1/crypto-js.min.js | 104.17.25.14 | 200 OK | 14 kB |
URL GET HTTP/3cdnjs.cloudflare.com/ajax/libs/crypto-js/4.1.1/crypto-js.min.js IP 104.17.25.14:443
Requested byhttps://rgo.borouseburba.ru/daf83/ CertificateIssuerGoogle Trust Services Subjectcdnjs.cloudflare.com Fingerprint00:0E:39:59:53:CF:68:07:90:75:EB:68:26:B9:04:22:44:7D:9A:32 ValidityFri, 24 Jan 2025 09:16:22 GMT - Thu, 24 Apr 2025 10:16:21 GMT
File typeJavaScript source, ASCII text, with very long lines (48316), with no line terminators Hash2ca03ad87885ab983541092b87adb299 1a17f60bf776a8c468a185c1e8e985c41a50dc27 8e3b0117f4df4be452c0b6af5b8f0a0acf9d4ade23d08d55d7e312af22077762
GET /ajax/libs/crypto-js/4.1.1/crypto-js.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rgo.borouseburba.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 30 Jan 2025 00:30:49 GMT
content-type: application/javascript; charset=utf-8
content-length: 13972
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "61182885-3694"
last-modified: Sat, 14 Aug 2021 20:33:09 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 629951
expires: Tue, 20 Jan 2026 00:30:49 GMT
accept-ranges: bytes
priority: u=3,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=60It9TPJdHiyyuh%2Fq%2BHajkLGtryaCk5FzBRSMq%2F5cv9F%2FlQjv3OzzFwsxevl6qU1WrO5e%2BYZmhmaj3emA9hY8YA4MvxBBozbG7tDGSey7XJkjBwkae4VwqeEZ9%2B4dv8gNpIRNxl3"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 909d5b06ac721c02-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
|
|
| rgo.borouseburba.ru/lmo9ipKgu5x1WPC37kwgsODPeVJCz5szbU9qfq | 104.21.96.1 | 200 OK | 92 kB |
URL POST HTTP/3rgo.borouseburba.ru/lmo9ipKgu5x1WPC37kwgsODPeVJCz5szbU9qfq IP 104.21.96.1:443
Requested byhttps://rgo.borouseburba.ru/daf83/ CertificateIssuerGoogle Trust Services Subjectborouseburba.ru Fingerprint0D:4D:20:3B:FD:5F:AD:A4:EF:BF:6D:AA:59:54:5F:AB:82:53:C8:63 ValidityWed, 15 Jan 2025 00:24:29 GMT - Tue, 15 Apr 2025 01:23:13 GMT
Hash8cc09f31d720f6e36eadf8eac372f990 46e3dc009b79e0da6fc64e8cd773fc0b4028f12b db6e4bd304dc7e69b0966b74f1ef08fee5adbf84251fc53e8165721ac2a40ad1
POST /lmo9ipKgu5x1WPC37kwgsODPeVJCz5szbU9qfq HTTP/1.1
Host: rgo.borouseburba.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 6
Origin: https://rgo.borouseburba.ru
DNT: 1
Connection: keep-alive
Referer: https://rgo.borouseburba.ru/daf83/
Cookie: XSRF-TOKEN=eyJpdiI6IlBZcFV5TmU2RFllRHlYVGdBcTRVRkE9PSIsInZhbHVlIjoiSEoybnZsSk9VRnVJRTJPOUZBTkdKNTNxdGZlZ093T3owN0JDU2ZwS1k2bmd5eGl1SjhDRk1LTDVtYTZVR2xBanBQZGpFcXIrUGl2RzJLYW1DZ0FIcEJoOFhOaFprTGFyYWJMTkhhbU1YOVE2UFR0N3kzQWdlKytlYVFudHZ5aVQiLCJtYWMiOiJhMTA3Y2E3ZDBhMjhmZGFjYjUwMDI0MDc0Mzk0MDcyMjdlOGM5YmZiNmYzMmY5MWQ0NjAwMDMyODVjMmJkMWQ3IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImRBWnQxdDFxU1hmZjNRaEZoU1VNNFE9PSIsInZhbHVlIjoiOWQ5WDBDR05MWGJJZXcyUFFmWTJRNUFsclQyazVnR3cwcktHblhIOVd4TU9YMlRFQ1JsaGs1TGVDdU93ZHNXNGt0M2hRZytGSEEzWnZXOTF2OXBWUkdXb3Rkak5iM2ZDdHE2Nm0wVDJUNHhVZHVvbkExN0tNa25wZ0xCNE5KUEgiLCJtYWMiOiI0YjRiNmI4MjM1OGRiNzYxODczYjZiNTA5MDk3MThkMGEyNzFiMzgyYTczNGQzNmRiNWJmY2ZlNTI4MWUxYThmIiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 30 Jan 2025 00:30:48 GMT
content-type: text/html; charset=UTF-8
cf-ray: 909d5b02686756c6-OSL
server: cloudflare
cache-control: no-cache, private
cf-cache-status: DYNAMIC
vary: accept-encoding
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=gw9ICu7APgHDXMSB7GiM1vt8leIzlu9ul0ASADWxXiyfAWsZy3AJbTedS7h15Sc7nv4vz8GLPBSFCBV7x%2F1LNKNHalqlCQGMaWo2yP%2FphCaRukuxKeOvGq3GOu7qMA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=5174&min_rtt=5173&rtt_var=1943&sent=4&recv=7&lost=0&retrans=0&sent_bytes=2823&recv_bytes=2252&delivery_rate=549170&cwnd=228&unsent_bytes=0&cid=6576e53a8a7d4e9a&ts=105&x=0"
set-cookie: XSRF-TOKEN=eyJpdiI6IlYyS3VNK1NWSXVMY3QvczlQNm9zNGc9PSIsInZhbHVlIjoidEFQY1BJaDZzL2s3eDNMR0FiUithTFlub2I1VnArOCtERndkaTNlREU4M1FQY05yQzlqT004T014WUZQajNjRjVubGw0RjRhUWROZ0loeW55SFpaczRyTmIrQnEzT0l1aGhpQ2ZZYXlxSnNtVXdUTGVLYWdlZjVmcVorbTZsYWoiLCJtYWMiOiI1YWE1ZmMyZmIxYmVmMTM4NWI1YmE3MjUxZWZhMTM1Y2MwN2MxMzNlYzYwYmQzZjk0ZDY5YzA0ZWU5Y2M3YzM0IiwidGFnIjoiIn0%3D; expires=Thu, 30-Jan-2025 02:30:48 GMT; Max-Age=7200; path=/; secure; samesite=none
laravel_session=eyJpdiI6IkZRajRHVHRGUmRveS9iZG13aWc4T3c9PSIsInZhbHVlIjoiS1ZjYjlNbThnSnNubXZnL1BEdHB6cWt1UnY3NGV3dS9lTXFVY05qZnNrLzJjWDdLcnA2SWF4RWVhMEpTMmkxTEQ1ZVg5MWV3VFVJeVBseWpHeU1Ra0k4OW5NMEJtNUtjRzFCVVVKajBqbGN5Q210bXVEdkZXUXBXSHlEZHhUa1giLCJtYWMiOiJmYWRjOWYwMTRlNWY4ZDUwMTllODFmMDc1ZTJhMWU4NWI0MDA2MGM2MjI5YmMyNjkwZjY0Y2E1ZmNhZWRiYmU5IiwidGFnIjoiIn0%3D; expires=Thu, 30-Jan-2025 02:30:48 GMT; Max-Age=7200; path=/; secure; httponly; samesite=none
content-encoding: br
|
|
| ok4static.oktacdn.com/fs/bcg/4/gfsh9pi7jcWKJKMAs1t7 | 143.204.55.81 | 200 OK | 11 kB |
URL GET HTTP/2ok4static.oktacdn.com/fs/bcg/4/gfsh9pi7jcWKJKMAs1t7 IP 143.204.55.81:443
Requested byhttps://rgo.borouseburba.ru/daf83/ CertificateIssuerDigiCert Inc Subject*.oktacdn.com Fingerprint3E:D7:C7:A6:35:70:74:E4:BF:45:2E:A1:D5:A3:25:88:24:76:B3:B5 ValidityMon, 02 Dec 2024 00:00:00 GMT - Fri, 02 Jan 2026 23:59:59 GMT
File typePNG image data, 420 x 94, 8-bit/color RGBA, non-interlaced Hash12bdacc832185d0367ecc23fd24c86ce 4422f316eb4d8c8d160312bb695fd1d944cbff12 877ae491d9aac5c6ef82a8430f9f652ace8a0dbc7294bd112aad49bd593769d0
GET /fs/bcg/4/gfsh9pi7jcWKJKMAs1t7 HTTP/1.1
Host: ok4static.oktacdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rgo.borouseburba.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 10796
server: nginx
last-modified: Tue, 23 Feb 2021 04:20:08 GMT
strict-transport-security: max-age=315360000; includeSubDomains
access-control-allow-origin: *
accept-ranges: bytes
date: Wed, 29 Jan 2025 00:59:17 GMT
expires: Thu, 29 Jan 2026 00:59:17 GMT
cache-control: max-age=31536000, public,max-age=31536000,s-maxage=1814400
etag: "12bdacc832185d0367ecc23fd24c86ce"
x-cache: Hit from cloudfront
via: 1.1 76c917e0bb0ba45eb834d25d76ee125e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: Z6ddsfzg1iAYnPh0DeciJVyinGFe_5kcoz1fa3vtttNscArP5jAY5Q==
age: 84692
X-Firefox-Spdy: h2
|
|
| ok4static.oktacdn.com/assets/js/sdk/okta-signin-widget/7.18.0/css/okta-sign-in.min.css | 143.204.55.81 | 200 OK | 38 kB |
URL GET HTTP/2ok4static.oktacdn.com/assets/js/sdk/okta-signin-widget/7.18.0/css/okta-sign-in.min.css IP 143.204.55.81:443
Requested byhttps://rgo.borouseburba.ru/daf83/ CertificateIssuerDigiCert Inc Subject*.oktacdn.com Fingerprint3E:D7:C7:A6:35:70:74:E4:BF:45:2E:A1:D5:A3:25:88:24:76:B3:B5 ValidityMon, 02 Dec 2024 00:00:00 GMT - Fri, 02 Jan 2026 23:59:59 GMT
File typegzip compressed data, from Unix Hashd19332e9ecd7dca430f8e97896805c9c 350e71c23568fd8e9e9f29d9ae16943b0d3a7f2c bff930a2412f225ab47150f45b80c65cdda3ebb8a749880151cc79b2e273c5de
GET /assets/js/sdk/okta-signin-widget/7.18.0/css/okta-sign-in.min.css HTTP/1.1
Host: ok4static.oktacdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rgo.borouseburba.ru/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css
server: nginx
last-modified: Tue, 14 May 2024 21:48:24 GMT
x-amz-meta-sha1sum: 7b5499b46660a0348cc2b22cae927dcc3fda8b20
strict-transport-security: max-age=315360000; includeSubDomains
access-control-allow-origin: *
content-encoding: gzip
date: Wed, 29 Jan 2025 17:13:28 GMT
expires: Thu, 29 Jan 2026 17:13:28 GMT
cache-control: max-age=31536000, public,max-age=31536000,s-maxage=1814400
etag: W/"0329c939fca7c78756b94fbcd95e322b"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 76c917e0bb0ba45eb834d25d76ee125e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: LAb4kuhzfAI-7V4vVDk8dYNWYCRKUgO8WMNVZosza9m3mpJAQvip9Q==
age: 26241
X-Firefox-Spdy: h2
|
|
| rgo.borouseburba.ru/34cbiWT3HYu2xy4fLNZg6720 | 104.21.96.1 | 200 OK | 16 kB |
URL GET HTTP/3rgo.borouseburba.ru/34cbiWT3HYu2xy4fLNZg6720 IP 104.21.96.1:443
Requested byhttps://rgo.borouseburba.ru/daf83/ CertificateIssuerGoogle Trust Services Subjectborouseburba.ru Fingerprint0D:4D:20:3B:FD:5F:AD:A4:EF:BF:6D:AA:59:54:5F:AB:82:53:C8:63 ValidityWed, 15 Jan 2025 00:24:29 GMT - Tue, 15 Apr 2025 01:23:13 GMT
File typeASCII text, with very long lines (23854), with no line terminators Hash8025ea2266871f7af97c89d4b43dc4a6 b80f1279a6438e2325d0ece6642ba34cebd9b4d8 bad46ff2d915998c6f922bfca9b0f01b805f3b548cf038da1bf6643fe371385e
Analyzer | Verdict | Alert | urlquery | phishing | Phishing - Microsoft |
GET /34cbiWT3HYu2xy4fLNZg6720 HTTP/1.1
Host: rgo.borouseburba.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rgo.borouseburba.ru/daf83/
Cookie: XSRF-TOKEN=eyJpdiI6IlJkT1NTaCtDNitJWGdhNm85YWpVZkE9PSIsInZhbHVlIjoiTHBtK1NhczNJQjNRUDdUL05UL001Y1p3N0JiY1A3UjRubThPUVBRU0ZhRGxiNjVhZWwyQnhYT2pFYWlMdXhOVWdsN3Rrdk5pREhqNnViNTc2VHZRYnZISyt4V3Q1R1JrUVRXSDNPWDliRmFMTW1PUnRhVnZ4VjgyT2VvbUYvVUoiLCJtYWMiOiI2M2IzYTkwNGQzYjIzMzlkYjgwOTEzMmI2MDRiMjcxZjI1MzJiNzAyNDVkNmUzOGUxY2UxZjQzNDQ2MGNiZTUyIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjA3WmdIVWNsV1gybSs5RXN1Z0pMSHc9PSIsInZhbHVlIjoiWVQ1dFIxNW94cWtlQmFRMk9rVTFCSHB6RmJDV0NDdi9jaFZ4TTM5WTVXbHB1YzdSQWU4M1htblZYb2FnSVZvRVczM3NETWNRUnhNTnd0aEd3S2lUcEZBSzJxeE52Y0txaWQ0c0ZNVjdxU2xENHJMWkFlb0o3ZUdFRGxWQVNBREUiLCJtYWMiOiJmMDE2YzZjNzEzNzAxMmMyODFmOGY1MDA0NmVmMTg0NzE1ZjhiNmRhYTQ2MWZjMTY2YWE4ZmJlNzcxOTYzYWRiIiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 30 Jan 2025 00:30:49 GMT
content-type: text/css;charset=UTF-8
cf-ray: 909d5b06a86f56c6-OSL
server: cloudflare
content-disposition: inline; filename="34cbiWT3HYu2xy4fLNZg6720"
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=o1v0%2BKa44r8Ft%2BVTnfUz2BQp2sjPsevuxV02nfWTALpnJ9HKzYKgB2uymf03NI0yiGOC%2FdsOBOni4E3G4NGt49SbIjKQAd07fjZiSnpCkFnMcgHUKugHxjS8t%2FkBLA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=4330&min_rtt=4274&rtt_var=1306&sent=5&recv=8&lost=0&retrans=0&sent_bytes=2822&recv_bytes=2110&delivery_rate=617519&cwnd=249&unsent_bytes=0&cid=96f18ec3f12ff4b5&ts=97&x=0"
vary: accept-encoding
content-encoding: br
|
|
| github.com/fent/randexp.js/releases/download/v0.4.3/randexp.min.js | 140.82.121.3 | 302 Found | 0 B |
URL GET HTTP/2github.com/fent/randexp.js/releases/download/v0.4.3/randexp.min.js IP 140.82.121.3:443
Requested byhttps://rgo.borouseburba.ru/daf83/ CertificateIssuerSectigo Limited Subjectgithub.com FingerprintE7:03:5B:CC:1C:18:77:1F:79:2F:90:86:6B:6C:1D:F8:DF:AA:BD:C0 ValidityThu, 07 Mar 2024 00:00:00 GMT - Fri, 07 Mar 2025 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /fent/randexp.js/releases/download/v0.4.3/randexp.min.js HTTP/1.1
Host: github.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rgo.borouseburba.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
server: GitHub.com
date: Thu, 30 Jan 2025 00:30:45 GMT
content-type: text/html; charset=utf-8
vary: X-PJAX, X-PJAX-Container, Turbo-Visit, Turbo-Frame, Accept-Encoding, Accept, X-Requested-With
location: https://objects.githubusercontent.com/github-production-release-asset-2e65be/2925284/11f3acf8-4ccb-11e6-8ce4-c179c0a212de?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=releaseassetproduction%2F20250130%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20250130T003045Z&X-Amz-Expires=300&X-Amz-Signature=ccc3bcd803d34117ea24c715ae2c84f319557d3d6ba9ddad26327e37a6b936cf&X-Amz-SignedHeaders=host&response-content-disposition=attachment%3B%20filename%3Drandexp.min.js&response-content-type=application%2Foctet-stream
cache-control: no-cache
strict-transport-security: max-age=31536000; includeSubdomains; preload
x-frame-options: deny
x-content-type-options: nosniff
x-xss-protection: 0
referrer-policy: no-referrer-when-downgrade
content-security-policy: default-src 'none'; base-uri 'self'; child-src github.com/assets-cdn/worker/ github.com/webpack/ github.com/assets/ gist.github.com/assets-cdn/worker/; connect-src 'self' uploads.github.com www.githubstatus.com collector.github.com raw.githubusercontent.com api.github.com github-cloud.s3.amazonaws.com github-production-repository-file-5c1aeb.s3.amazonaws.com github-production-upload-manifest-file-7fdce7.s3.amazonaws.com github-production-user-asset-6210df.s3.amazonaws.com *.rel.tunnels.api.visualstudio.com wss://*.rel.tunnels.api.visualstudio.com objects-origin.githubusercontent.com copilot-proxy.githubusercontent.com proxy.individual.githubcopilot.com proxy.business.githubcopilot.com proxy.enterprise.githubcopilot.com *.actions.githubusercontent.com wss://*.actions.githubusercontent.com productionresultssa0.blob.core.windows.net/ productionresultssa1.blob.core.windows.net/ productionresultssa2.blob.core.windows.net/ productionresultssa3.blob.core.windows.net/ productionresultssa4.blob.core.windows.net/ productionresultssa5.blob.core.windows.net/ productionresultssa6.blob.core.windows.net/ productionresultssa7.blob.core.windows.net/ productionresultssa8.blob.core.windows.net/ productionresultssa9.blob.core.windows.net/ productionresultssa10.blob.core.windows.net/ productionresultssa11.blob.core.windows.net/ productionresultssa12.blob.core.windows.net/ productionresultssa13.blob.core.windows.net/ productionresultssa14.blob.core.windows.net/ productionresultssa15.blob.core.windows.net/ productionresultssa16.blob.core.windows.net/ productionresultssa17.blob.core.windows.net/ productionresultssa18.blob.core.windows.net/ productionresultssa19.blob.core.windows.net/ github-production-repository-image-32fea6.s3.amazonaws.com github-production-release-asset-2e65be.s3.amazonaws.com insights.github.com wss://alive.github.com api.githubcopilot.com api.individual.githubcopilot.com api.business.githubcopilot.com api.enterprise.githubcopilot.com; font-src github.githubassets.com; form-action 'self' github.com gist.github.com copilot-workspace.githubnext.com objects-origin.githubusercontent.com; frame-ancestors 'none'; frame-src viewscreen.githubusercontent.com notebooks.githubusercontent.com; img-src 'self' data: blob: github.githubassets.com media.githubusercontent.com camo.githubusercontent.com identicons.github.com avatars.githubusercontent.com private-avatars.githubusercontent.com github-cloud.s3.amazonaws.com objects.githubusercontent.com secured-user-images.githubusercontent.com/ user-images.githubusercontent.com/ private-user-images.githubusercontent.com opengraph.githubassets.com github-production-user-asset-6210df.s3.amazonaws.com customer-stories-feed.github.com spotlights-feed.github.com objects-origin.githubusercontent.com *.githubusercontent.com; manifest-src 'self'; media-src github.com user-images.githubusercontent.com/ secured-user-images.githubusercontent.com/ private-user-images.githubusercontent.com github-production-user-asset-6210df.s3.amazonaws.com gist.github.com; script-src github.githubassets.com; style-src 'unsafe-inline' github.githubassets.com; upgrade-insecure-requests; worker-src github.com/assets-cdn/worker/ github.com/webpack/ github.com/assets/ gist.github.com/assets-cdn/worker/
content-length: 0
x-github-request-id: 0BB4:10F1BD:CA7F82:D1E629:679AC839
X-Firefox-Spdy: h2
|
|
| rgo.borouseburba.ru/uvxbim6YVwoPiPLQJQ2Rb0sstW147hc9fmLu4iMIsJHrx34127 | 104.21.96.1 | 200 OK | 644 B |
URL GET HTTP/3rgo.borouseburba.ru/uvxbim6YVwoPiPLQJQ2Rb0sstW147hc9fmLu4iMIsJHrx34127 IP 104.21.96.1:443
Requested byhttps://rgo.borouseburba.ru/daf83/ CertificateIssuerGoogle Trust Services Subjectborouseburba.ru Fingerprint0D:4D:20:3B:FD:5F:AD:A4:EF:BF:6D:AA:59:54:5F:AB:82:53:C8:63 ValidityWed, 15 Jan 2025 00:24:29 GMT - Tue, 15 Apr 2025 01:23:13 GMT
File typeRIFF (little-endian) data, Web/P image Hash541b83c2195088043337e4353b6fd60d f09630596b6713217984785a64f6ea83e91b49c5 2658b8874f0d2a12e8726df78ac8954324c3bbe4695e66bdef89195fde64322f
Analyzer | Verdict | Alert | urlquery | phishing | Phishing - Microsoft |
GET /uvxbim6YVwoPiPLQJQ2Rb0sstW147hc9fmLu4iMIsJHrx34127 HTTP/1.1
Host: rgo.borouseburba.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rgo.borouseburba.ru/daf83/
Cookie: XSRF-TOKEN=eyJpdiI6IlJkT1NTaCtDNitJWGdhNm85YWpVZkE9PSIsInZhbHVlIjoiTHBtK1NhczNJQjNRUDdUL05UL001Y1p3N0JiY1A3UjRubThPUVBRU0ZhRGxiNjVhZWwyQnhYT2pFYWlMdXhOVWdsN3Rrdk5pREhqNnViNTc2VHZRYnZISyt4V3Q1R1JrUVRXSDNPWDliRmFMTW1PUnRhVnZ4VjgyT2VvbUYvVUoiLCJtYWMiOiI2M2IzYTkwNGQzYjIzMzlkYjgwOTEzMmI2MDRiMjcxZjI1MzJiNzAyNDVkNmUzOGUxY2UxZjQzNDQ2MGNiZTUyIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjA3WmdIVWNsV1gybSs5RXN1Z0pMSHc9PSIsInZhbHVlIjoiWVQ1dFIxNW94cWtlQmFRMk9rVTFCSHB6RmJDV0NDdi9jaFZ4TTM5WTVXbHB1YzdSQWU4M1htblZYb2FnSVZvRVczM3NETWNRUnhNTnd0aEd3S2lUcEZBSzJxeE52Y0txaWQ0c0ZNVjdxU2xENHJMWkFlb0o3ZUdFRGxWQVNBREUiLCJtYWMiOiJmMDE2YzZjNzEzNzAxMmMyODFmOGY1MDA0NmVmMTg0NzE1ZjhiNmRhYTQ2MWZjMTY2YWE4ZmJlNzcxOTYzYWRiIiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 30 Jan 2025 00:30:49 GMT
content-type: image/webp
content-length: 644
server: cloudflare
content-disposition: inline; filename="uvxbim6YVwoPiPLQJQ2Rb0sstW147hc9fmLu4iMIsJHrx34127"
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2BKaGPwHq%2F%2FaufrDFepw7nvo3I%2FewL0tl14SiPmfCsfxy6HmGkH2Vy3orXvymYK%2Bcnlk8Mv9yMIWhVd9SHL9cXjAXEjINI%2FNjVEdyKCAw4R1LYqyW8CUwjxgWyI5yaA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=5631&min_rtt=5606&rtt_var=1625&sent=5&recv=8&lost=0&retrans=0&sent_bytes=2823&recv_bytes=2143&delivery_rate=492989&cwnd=232&unsent_bytes=0&cid=c1d386083f099c9e&ts=106&x=0"
cf-ray: 909d5b06e87756c6-OSL
|
|
| rgo.borouseburba.ru/qrZnVbFqzh4kM6sBNXMG0kSfTRbamvWCoquv7PHbOiFRQVUhl2hIhlBulD57nLcd240 | 104.21.96.1 | 200 OK | 9.6 kB |
URL GET HTTP/3rgo.borouseburba.ru/qrZnVbFqzh4kM6sBNXMG0kSfTRbamvWCoquv7PHbOiFRQVUhl2hIhlBulD57nLcd240 IP 104.21.96.1:443
Requested byhttps://rgo.borouseburba.ru/daf83/ CertificateIssuerGoogle Trust Services Subjectborouseburba.ru Fingerprint0D:4D:20:3B:FD:5F:AD:A4:EF:BF:6D:AA:59:54:5F:AB:82:53:C8:63 ValidityWed, 15 Jan 2025 00:24:29 GMT - Tue, 15 Apr 2025 01:23:13 GMT
File typeRIFF (little-endian) data, Web/P image Hash4946eb373b18d178c93d473489673bb6 16477acb73b63ca251d37401249e7e4515febd24 666bc574c9f3fb28a8ac626fa8105c187c2a313736494a06bd5a937473673c92
Analyzer | Verdict | Alert | urlquery | phishing | Phishing - Microsoft |
GET /qrZnVbFqzh4kM6sBNXMG0kSfTRbamvWCoquv7PHbOiFRQVUhl2hIhlBulD57nLcd240 HTTP/1.1
Host: rgo.borouseburba.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rgo.borouseburba.ru/daf83/
Cookie: XSRF-TOKEN=eyJpdiI6IlJkT1NTaCtDNitJWGdhNm85YWpVZkE9PSIsInZhbHVlIjoiTHBtK1NhczNJQjNRUDdUL05UL001Y1p3N0JiY1A3UjRubThPUVBRU0ZhRGxiNjVhZWwyQnhYT2pFYWlMdXhOVWdsN3Rrdk5pREhqNnViNTc2VHZRYnZISyt4V3Q1R1JrUVRXSDNPWDliRmFMTW1PUnRhVnZ4VjgyT2VvbUYvVUoiLCJtYWMiOiI2M2IzYTkwNGQzYjIzMzlkYjgwOTEzMmI2MDRiMjcxZjI1MzJiNzAyNDVkNmUzOGUxY2UxZjQzNDQ2MGNiZTUyIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjA3WmdIVWNsV1gybSs5RXN1Z0pMSHc9PSIsInZhbHVlIjoiWVQ1dFIxNW94cWtlQmFRMk9rVTFCSHB6RmJDV0NDdi9jaFZ4TTM5WTVXbHB1YzdSQWU4M1htblZYb2FnSVZvRVczM3NETWNRUnhNTnd0aEd3S2lUcEZBSzJxeE52Y0txaWQ0c0ZNVjdxU2xENHJMWkFlb0o3ZUdFRGxWQVNBREUiLCJtYWMiOiJmMDE2YzZjNzEzNzAxMmMyODFmOGY1MDA0NmVmMTg0NzE1ZjhiNmRhYTQ2MWZjMTY2YWE4ZmJlNzcxOTYzYWRiIiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 30 Jan 2025 00:30:49 GMT
content-type: image/webp
content-length: 9648
server: cloudflare
content-disposition: inline; filename="qrZnVbFqzh4kM6sBNXMG0kSfTRbamvWCoquv7PHbOiFRQVUhl2hIhlBulD57nLcd240"
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=zv28js440QFXwqPsnTchvxUa5Fza%2Fw1LBn%2F2OwW3wt3WlSMnPv1IqKgvR3bKk9BUNAnwZSpsge89I9aDyMQAWeoBowdmUT53pcVopMcoKTLlFbuDjBlCbuvbGyGxaQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=4313&min_rtt=4297&rtt_var=1240&sent=4&recv=8&lost=0&retrans=0&sent_bytes=2822&recv_bytes=2160&delivery_rate=645219&cwnd=236&unsent_bytes=0&cid=f85564ba6533a4a6&ts=138&x=0"
cf-ray: 909d5b07087e56c6-OSL
|
|
| rgo.borouseburba.ru/qrivOKy1wjpmBHKDcpoZx1rQKd9UMStgW5mnlbl0GhGYCRO67131 | 104.21.96.1 | 200 OK | 892 B |
URL GET HTTP/3rgo.borouseburba.ru/qrivOKy1wjpmBHKDcpoZx1rQKd9UMStgW5mnlbl0GhGYCRO67131 IP 104.21.96.1:443
Requested byhttps://rgo.borouseburba.ru/daf83/ CertificateIssuerGoogle Trust Services Subjectborouseburba.ru Fingerprint0D:4D:20:3B:FD:5F:AD:A4:EF:BF:6D:AA:59:54:5F:AB:82:53:C8:63 ValidityWed, 15 Jan 2025 00:24:29 GMT - Tue, 15 Apr 2025 01:23:13 GMT
File typeRIFF (little-endian) data, Web/P image Hash41d62ca205d54a78e4298367482b4e2b 839aae21ed8ecfc238fdc68b93ccb27431cd5393 20a4a780db0bcc047015a0d8037eb4eb58b3e5cb338673799c030a3e1b626b40
Analyzer | Verdict | Alert | urlquery | phishing | Phishing - Microsoft |
GET /qrivOKy1wjpmBHKDcpoZx1rQKd9UMStgW5mnlbl0GhGYCRO67131 HTTP/1.1
Host: rgo.borouseburba.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rgo.borouseburba.ru/daf83/
Cookie: XSRF-TOKEN=eyJpdiI6IlJkT1NTaCtDNitJWGdhNm85YWpVZkE9PSIsInZhbHVlIjoiTHBtK1NhczNJQjNRUDdUL05UL001Y1p3N0JiY1A3UjRubThPUVBRU0ZhRGxiNjVhZWwyQnhYT2pFYWlMdXhOVWdsN3Rrdk5pREhqNnViNTc2VHZRYnZISyt4V3Q1R1JrUVRXSDNPWDliRmFMTW1PUnRhVnZ4VjgyT2VvbUYvVUoiLCJtYWMiOiI2M2IzYTkwNGQzYjIzMzlkYjgwOTEzMmI2MDRiMjcxZjI1MzJiNzAyNDVkNmUzOGUxY2UxZjQzNDQ2MGNiZTUyIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjA3WmdIVWNsV1gybSs5RXN1Z0pMSHc9PSIsInZhbHVlIjoiWVQ1dFIxNW94cWtlQmFRMk9rVTFCSHB6RmJDV0NDdi9jaFZ4TTM5WTVXbHB1YzdSQWU4M1htblZYb2FnSVZvRVczM3NETWNRUnhNTnd0aEd3S2lUcEZBSzJxeE52Y0txaWQ0c0ZNVjdxU2xENHJMWkFlb0o3ZUdFRGxWQVNBREUiLCJtYWMiOiJmMDE2YzZjNzEzNzAxMmMyODFmOGY1MDA0NmVmMTg0NzE1ZjhiNmRhYTQ2MWZjMTY2YWE4ZmJlNzcxOTYzYWRiIiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 30 Jan 2025 00:30:49 GMT
content-type: image/webp
content-length: 892
server: cloudflare
content-disposition: inline; filename="qrivOKy1wjpmBHKDcpoZx1rQKd9UMStgW5mnlbl0GhGYCRO67131"
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=lyhfK7RTDaGcv1D7IBX2SbWejLEQQBMQER3MRyMQLrdy1G%2FLg3gAYQ3%2FVBLAfeaKarADiccWVFq6PCYZxj9sQFBRsMvX5ebeVxlb14%2F64%2FLktZJaT4ItMotXNA1xzA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=5634&min_rtt=5583&rtt_var=1666&sent=5&recv=8&lost=0&retrans=0&sent_bytes=2823&recv_bytes=2145&delivery_rate=483695&cwnd=226&unsent_bytes=0&cid=e07a3efa93c2d9b7&ts=146&x=0"
cf-ray: 909d5b06e87856c6-OSL
|
|
| rgo.borouseburba.ru/ghqYLP6MHoZ4KyEjM8NcWKxymLNTIIbt62VkXy43DXLaIB12210 | 104.21.96.1 | 200 OK | 25 kB |
URL GET HTTP/3rgo.borouseburba.ru/ghqYLP6MHoZ4KyEjM8NcWKxymLNTIIbt62VkXy43DXLaIB12210 IP 104.21.96.1:443
Requested byhttps://rgo.borouseburba.ru/daf83/ CertificateIssuerGoogle Trust Services Subjectborouseburba.ru Fingerprint0D:4D:20:3B:FD:5F:AD:A4:EF:BF:6D:AA:59:54:5F:AB:82:53:C8:63 ValidityWed, 15 Jan 2025 00:24:29 GMT - Tue, 15 Apr 2025 01:23:13 GMT
File typeRIFF (little-endian) data, Web/P image Hashf9a795e2270664a7a169c73b6d84a575 0fbb60ab27ab88c064eb347d0722c8ed4cf5e8b8 d00203b2eea6e418c31baafa949ada5349a9f9b7e99fa003aec7406822693740
Analyzer | Verdict | Alert | urlquery | phishing | Phishing - Microsoft |
GET /ghqYLP6MHoZ4KyEjM8NcWKxymLNTIIbt62VkXy43DXLaIB12210 HTTP/1.1
Host: rgo.borouseburba.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rgo.borouseburba.ru/daf83/
Cookie: XSRF-TOKEN=eyJpdiI6IlJkT1NTaCtDNitJWGdhNm85YWpVZkE9PSIsInZhbHVlIjoiTHBtK1NhczNJQjNRUDdUL05UL001Y1p3N0JiY1A3UjRubThPUVBRU0ZhRGxiNjVhZWwyQnhYT2pFYWlMdXhOVWdsN3Rrdk5pREhqNnViNTc2VHZRYnZISyt4V3Q1R1JrUVRXSDNPWDliRmFMTW1PUnRhVnZ4VjgyT2VvbUYvVUoiLCJtYWMiOiI2M2IzYTkwNGQzYjIzMzlkYjgwOTEzMmI2MDRiMjcxZjI1MzJiNzAyNDVkNmUzOGUxY2UxZjQzNDQ2MGNiZTUyIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjA3WmdIVWNsV1gybSs5RXN1Z0pMSHc9PSIsInZhbHVlIjoiWVQ1dFIxNW94cWtlQmFRMk9rVTFCSHB6RmJDV0NDdi9jaFZ4TTM5WTVXbHB1YzdSQWU4M1htblZYb2FnSVZvRVczM3NETWNRUnhNTnd0aEd3S2lUcEZBSzJxeE52Y0txaWQ0c0ZNVjdxU2xENHJMWkFlb0o3ZUdFRGxWQVNBREUiLCJtYWMiOiJmMDE2YzZjNzEzNzAxMmMyODFmOGY1MDA0NmVmMTg0NzE1ZjhiNmRhYTQ2MWZjMTY2YWE4ZmJlNzcxOTYzYWRiIiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 30 Jan 2025 00:30:49 GMT
content-type: image/webp
content-length: 25216
server: cloudflare
content-disposition: inline; filename="ghqYLP6MHoZ4KyEjM8NcWKxymLNTIIbt62VkXy43DXLaIB12210"
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=GGHAycjlmbz21Yrfwwbg05eaoBlflQ%2BZSMVEe1GSA2n6WhNj%2B13WOhobMQI56RY6%2BBnNvztb3aBfxXWB7PHxuHJylSdntYktfY4EwzBaNJPcpKvpQv9r4tAv3uQgYQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=4921&min_rtt=4899&rtt_var=1421&sent=4&recv=8&lost=0&retrans=0&sent_bytes=2823&recv_bytes=2144&delivery_rate=563291&cwnd=250&unsent_bytes=0&cid=d07ab035fca89749&ts=92&x=0"
cf-ray: 909d5b07087d56c6-OSL
|
|
| rgo.borouseburba.ru/stxGmy5f49LQJGcbZQGJ7jy6QmOL512nhY09c2npvoBoI6mnbTPQVvEzpWeJBXBrcc0konOfk3jTmLZrE3f2gdef260 | 104.21.96.1 | 200 OK | 18 kB |
URL GET HTTP/3rgo.borouseburba.ru/stxGmy5f49LQJGcbZQGJ7jy6QmOL512nhY09c2npvoBoI6mnbTPQVvEzpWeJBXBrcc0konOfk3jTmLZrE3f2gdef260 IP 104.21.96.1:443
Requested byhttps://rgo.borouseburba.ru/daf83/ CertificateIssuerGoogle Trust Services Subjectborouseburba.ru Fingerprint0D:4D:20:3B:FD:5F:AD:A4:EF:BF:6D:AA:59:54:5F:AB:82:53:C8:63 ValidityWed, 15 Jan 2025 00:24:29 GMT - Tue, 15 Apr 2025 01:23:13 GMT
File typeRIFF (little-endian) data, Web/P image Hash4b52ecdc33382c9dca874f551990e704 8f3bf8e41cd4cdddb17836b261e73f827b84341b cce050cc3b150c0b370751021bb15018ee2b64ac369e230fe3b571a9b00d4342
Analyzer | Verdict | Alert | urlquery | phishing | Phishing - Microsoft |
GET /stxGmy5f49LQJGcbZQGJ7jy6QmOL512nhY09c2npvoBoI6mnbTPQVvEzpWeJBXBrcc0konOfk3jTmLZrE3f2gdef260 HTTP/1.1
Host: rgo.borouseburba.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rgo.borouseburba.ru/daf83/
Cookie: XSRF-TOKEN=eyJpdiI6IlJkT1NTaCtDNitJWGdhNm85YWpVZkE9PSIsInZhbHVlIjoiTHBtK1NhczNJQjNRUDdUL05UL001Y1p3N0JiY1A3UjRubThPUVBRU0ZhRGxiNjVhZWwyQnhYT2pFYWlMdXhOVWdsN3Rrdk5pREhqNnViNTc2VHZRYnZISyt4V3Q1R1JrUVRXSDNPWDliRmFMTW1PUnRhVnZ4VjgyT2VvbUYvVUoiLCJtYWMiOiI2M2IzYTkwNGQzYjIzMzlkYjgwOTEzMmI2MDRiMjcxZjI1MzJiNzAyNDVkNmUzOGUxY2UxZjQzNDQ2MGNiZTUyIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjA3WmdIVWNsV1gybSs5RXN1Z0pMSHc9PSIsInZhbHVlIjoiWVQ1dFIxNW94cWtlQmFRMk9rVTFCSHB6RmJDV0NDdi9jaFZ4TTM5WTVXbHB1YzdSQWU4M1htblZYb2FnSVZvRVczM3NETWNRUnhNTnd0aEd3S2lUcEZBSzJxeE52Y0txaWQ0c0ZNVjdxU2xENHJMWkFlb0o3ZUdFRGxWQVNBREUiLCJtYWMiOiJmMDE2YzZjNzEzNzAxMmMyODFmOGY1MDA0NmVmMTg0NzE1ZjhiNmRhYTQ2MWZjMTY2YWE4ZmJlNzcxOTYzYWRiIiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 30 Jan 2025 00:30:49 GMT
content-type: image/webp
content-length: 17842
server: cloudflare
content-disposition: inline; filename="stxGmy5f49LQJGcbZQGJ7jy6QmOL512nhY09c2npvoBoI6mnbTPQVvEzpWeJBXBrcc0konOfk3jTmLZrE3f2gdef260"
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=9dgEMGdNm6K8YPgr7%2BmNeQ9z6dwABqFqbyaZCStZWgzl%2FLesSXd73HJCMv5A6J2D4s8SC2Hf6TQ5sPt1glKRzA76YOQXdu3NrdHrK9bAxear8jf%2Bpptu74hXgf2hRQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=4946&min_rtt=4925&rtt_var=1413&sent=5&recv=8&lost=0&retrans=0&sent_bytes=2822&recv_bytes=2184&delivery_rate=566653&cwnd=251&unsent_bytes=0&cid=5d2b09e53f90b528&ts=98&x=0"
cf-ray: 909d5b07087f56c6-OSL
|
|
| rgo.borouseburba.ru/GDSherpa-bold.woff2 | 104.21.96.1 | 200 OK | 28 kB |
URL GET HTTP/3rgo.borouseburba.ru/GDSherpa-bold.woff2 IP 104.21.96.1:443
Requested byhttps://rgo.borouseburba.ru/daf83/ CertificateIssuerGoogle Trust Services Subjectborouseburba.ru Fingerprint0D:4D:20:3B:FD:5F:AD:A4:EF:BF:6D:AA:59:54:5F:AB:82:53:C8:63 ValidityWed, 15 Jan 2025 00:24:29 GMT - Tue, 15 Apr 2025 01:23:13 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 28000, version 1.66 Hasha4bca6c95fed0d0c5cc46cf07710dcec 73b56e33b82b42921db8702a33efd0f2b2ec9794 5a51d246af54d903f67f07f2bd820ce77736f8d08c5f1602db07469d96dbf77f
Analyzer | Verdict | Alert | urlquery | phishing | Phishing - Microsoft |
GET /GDSherpa-bold.woff2 HTTP/1.1
Host: rgo.borouseburba.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://rgo.borouseburba.ru/daf83/
DNT: 1
Connection: keep-alive
Cookie: XSRF-TOKEN=eyJpdiI6IlJkT1NTaCtDNitJWGdhNm85YWpVZkE9PSIsInZhbHVlIjoiTHBtK1NhczNJQjNRUDdUL05UL001Y1p3N0JiY1A3UjRubThPUVBRU0ZhRGxiNjVhZWwyQnhYT2pFYWlMdXhOVWdsN3Rrdk5pREhqNnViNTc2VHZRYnZISyt4V3Q1R1JrUVRXSDNPWDliRmFMTW1PUnRhVnZ4VjgyT2VvbUYvVUoiLCJtYWMiOiI2M2IzYTkwNGQzYjIzMzlkYjgwOTEzMmI2MDRiMjcxZjI1MzJiNzAyNDVkNmUzOGUxY2UxZjQzNDQ2MGNiZTUyIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjA3WmdIVWNsV1gybSs5RXN1Z0pMSHc9PSIsInZhbHVlIjoiWVQ1dFIxNW94cWtlQmFRMk9rVTFCSHB6RmJDV0NDdi9jaFZ4TTM5WTVXbHB1YzdSQWU4M1htblZYb2FnSVZvRVczM3NETWNRUnhNTnd0aEd3S2lUcEZBSzJxeE52Y0txaWQ0c0ZNVjdxU2xENHJMWkFlb0o3ZUdFRGxWQVNBREUiLCJtYWMiOiJmMDE2YzZjNzEzNzAxMmMyODFmOGY1MDA0NmVmMTg0NzE1ZjhiNmRhYTQ2MWZjMTY2YWE4ZmJlNzcxOTYzYWRiIiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 30 Jan 2025 00:30:49 GMT
content-type: font/woff2
content-length: 28000
server: cloudflare
content-disposition: inline; filename="GDSherpa-bold.woff2"
cache-control: max-age=14400
last-modified: Thu, 30 Jan 2025 00:30:49 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=1QXol1fVl1e%2BrfscUJ4%2BZq8gJeQyEb%2BFccXl09DxafODFBqN2ksdIS2e308XBqqPklAcaQvIidehNz0O3VqBTeLUVfIxAqGSVuoSDdmYjeMyzoDYvRtqTQCTT0loBg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=4002&min_rtt=3999&rtt_var=1507&sent=4&recv=7&lost=0&retrans=0&sent_bytes=2823&recv_bytes=2185&delivery_rate=706875&cwnd=251&unsent_bytes=0&cid=b8cf391d998386bf&ts=195&x=0"
cf-cache-status: EXPIRED
accept-ranges: bytes
cf-ray: 909d5b06b87156c6-OSL
|
|
| rgo.borouseburba.ru/GDSherpa-bold.woff | 104.21.96.1 | 200 OK | 36 kB |
URL GET HTTP/3rgo.borouseburba.ru/GDSherpa-bold.woff IP 104.21.96.1:443
Requested byhttps://rgo.borouseburba.ru/daf83/ CertificateIssuerGoogle Trust Services Subjectborouseburba.ru Fingerprint0D:4D:20:3B:FD:5F:AD:A4:EF:BF:6D:AA:59:54:5F:AB:82:53:C8:63 ValidityWed, 15 Jan 2025 00:24:29 GMT - Tue, 15 Apr 2025 01:23:13 GMT
File typeWeb Open Font Format, TrueType, length 35970, version 1.0 Hash496b7bbde91c7dc7cf9bbabbb3921da8 2bd3c406a715ab52dad84c803c55bf4a6e66a924 ae40a04f95df12b0c364f26ab691dc0c391d394a28bcdb4aeacfaca325d0a798
Analyzer | Verdict | Alert | urlquery | phishing | Phishing - Microsoft |
GET /GDSherpa-bold.woff HTTP/1.1
Host: rgo.borouseburba.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://rgo.borouseburba.ru/daf83/
DNT: 1
Connection: keep-alive
Cookie: XSRF-TOKEN=eyJpdiI6IlJkT1NTaCtDNitJWGdhNm85YWpVZkE9PSIsInZhbHVlIjoiTHBtK1NhczNJQjNRUDdUL05UL001Y1p3N0JiY1A3UjRubThPUVBRU0ZhRGxiNjVhZWwyQnhYT2pFYWlMdXhOVWdsN3Rrdk5pREhqNnViNTc2VHZRYnZISyt4V3Q1R1JrUVRXSDNPWDliRmFMTW1PUnRhVnZ4VjgyT2VvbUYvVUoiLCJtYWMiOiI2M2IzYTkwNGQzYjIzMzlkYjgwOTEzMmI2MDRiMjcxZjI1MzJiNzAyNDVkNmUzOGUxY2UxZjQzNDQ2MGNiZTUyIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjA3WmdIVWNsV1gybSs5RXN1Z0pMSHc9PSIsInZhbHVlIjoiWVQ1dFIxNW94cWtlQmFRMk9rVTFCSHB6RmJDV0NDdi9jaFZ4TTM5WTVXbHB1YzdSQWU4M1htblZYb2FnSVZvRVczM3NETWNRUnhNTnd0aEd3S2lUcEZBSzJxeE52Y0txaWQ0c0ZNVjdxU2xENHJMWkFlb0o3ZUdFRGxWQVNBREUiLCJtYWMiOiJmMDE2YzZjNzEzNzAxMmMyODFmOGY1MDA0NmVmMTg0NzE1ZjhiNmRhYTQ2MWZjMTY2YWE4ZmJlNzcxOTYzYWRiIiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 30 Jan 2025 00:30:49 GMT
content-type: font/woff
content-length: 35970
server: cloudflare
content-disposition: inline; filename="GDSherpa-bold.woff"
cache-control: max-age=14400
last-modified: Thu, 30 Jan 2025 00:30:49 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=vNELMe0bNvvha5RV9uIHpNbgrpzkQNu5NmHOZHNTs21F8%2BZf7XZVtMlAvLR4qqsMB1%2BtGlYNtJO1gX3WyeGPDlyNSjzGaX2FNEGcd%2FlJLBIwobv9Q3A%2BeZpHZ0brvA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=5550&min_rtt=5527&rtt_var=1599&sent=4&recv=8&lost=0&retrans=0&sent_bytes=2824&recv_bytes=2184&delivery_rate=501231&cwnd=251&unsent_bytes=0&cid=a7c85e7c61c25c77&ts=207&x=0"
cf-cache-status: EXPIRED
accept-ranges: bytes
cf-ray: 909d5b06b87256c6-OSL
|
|
| rgo.borouseburba.ru/pl7YZChM2R2Ns314PyaIG1JS6z5t | 104.21.96.1 | 200 OK | 37 kB |
URL rgo.borouseburba.ru/pl7YZChM2R2Ns314PyaIG1JS6z5t IP 104.21.96.1:0
CertificateIssuerGoogle Trust Services Subjectborouseburba.ru Fingerprint0D:4D:20:3B:FD:5F:AD:A4:EF:BF:6D:AA:59:54:5F:AB:82:53:C8:63 ValidityWed, 15 Jan 2025 00:24:29 GMT - Tue, 15 Apr 2025 01:23:13 GMT
Hash5820854f62a6eb3d38ba7ba0d1b3ea75 639df0b84fe699b4a290a713fd6b9a94bd4deb95 912d0c07da7bdb22cdae025b96da26d01523aaab7362edb28544e3949deb369d
Analyzer | Verdict | Alert | urlquery | phishing | Phishing - Microsoft |
POST /pl7YZChM2R2Ns314PyaIG1JS6z5t HTTP/1.1
Host: rgo.borouseburba.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://rgo.borouseburba.ru/daf83/
Content-Type: multipart/form-data; boundary=---------------------------377774488027279813653936137382
Content-Length: 925
Origin: https://rgo.borouseburba.ru
DNT: 1
Connection: keep-alive
Cookie: XSRF-TOKEN=eyJpdiI6Ill4WWdwbnE3VzVPUlhxUEN6dmNzdVE9PSIsInZhbHVlIjoiQnN5Z0MwTEdXYi9DNUhlZ3Jub3Z3L2x6UGtQbk5FeTRFVm1HOUt1NTluaWFEZENwamRjc21pdnUwaHIyNDAzOHBsc3JEU1BCY3dsMThsME53eFFnVkZLSzRGMVNJMEdHN1JraDFKVkM5SG1JSVJGSHNoN2dNc3VyQkxmS3g3T0UiLCJtYWMiOiIwMmQyYzVhZGQ1NmYwMThmMWY5YTNkNTBjOWUzMWRkOTZkYzRhNmFlODcyNDcwODY5N2Q4ODIxMTEzNTc0OGY4IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InM4ejcwYjlieTlKQW9JUk1nTzBCeVE9PSIsInZhbHVlIjoiZHkwZlViTW1HYUNhN2ExcUFXYnJyRkw2L2JBeG84QjRUb3NIekNlVGR4RytVM1RrdklDcGRETmxVdWh0aVkzdERjbUhrOS92TUptRmFzREhFRjZFMythdXNoTy80UG9zSmFWNzBmbVdNVzN3dFBYZkhCM1Y5WUltelNpSWpqUzMiLCJtYWMiOiJiYjc0NTA2MWQ0MWUwOGM2YTEyZDliYWNhZjRmYmY5MDIzZmIzM2Q4NzAwNGY0ZTk5YTkzNDhlMGRjNWEwYjYzIiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 30 Jan 2025 00:30:48 GMT
content-type: application/json
cf-ray: 909d5aff086556c6-OSL
server: cloudflare
cache-control: no-cache, private
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Kb2SZxA%2BqrYaoVmagSf8b9FRfVsvKEJ3gRgVCD5RsGe2IJ%2Bh5DrHJDcYGQLsIVtMC1taoG%2B%2BGS8EMZRnci7c%2BAQiNaHZ9dPy8IGN1o5VnZ4uyDwiPvhGcoxzMSMd3Q%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=4637&min_rtt=4615&rtt_var=1340&sent=5&recv=8&lost=0&retrans=0&sent_bytes=2824&recv_bytes=3183&delivery_rate=598822&cwnd=244&unsent_bytes=0&cid=5944d70e96ece62a&ts=100&x=0"
set-cookie: XSRF-TOKEN=eyJpdiI6IjZwQWVZZkorQW5kZW9jb09wQVhuVmc9PSIsInZhbHVlIjoidFVrUmtHN0pRZGNZRlNJRXI4RGluN3phckdvL0V4bTExNy9WTWpwVFZwZTBRV2NmeEZmcnRCUjhEL2RJZGFuVGViRktNWnJNMWpkWnhHakZrMzhnL2VzK2VMTGJDell4SnVVejV0UVZNaDhHVndDUmRmN0p6WjJTOTEyY0t5SVEiLCJtYWMiOiI3N2RkMDRkZWE5NWE3ZjI1YmRiYWI3MWI5NDNjMGM0NzQzYWUzMTRjZjVmNmRkNzJiNDYwOGQ4ZjQyM2EwMGQ1IiwidGFnIjoiIn0%3D; expires=Thu, 30-Jan-2025 02:30:48 GMT; Max-Age=7200; path=/; secure; samesite=none
laravel_session=eyJpdiI6IjBHcmhjanFaZEY5N1FTSk1IWDJYK2c9PSIsInZhbHVlIjoiY0hhMmFaOGtFZUVXWFlwckREbTF2RmMzZC96WExRWmNuTE1va0RlL0JrSkMyQlRzcHl4ZkFZY3FkRCtJYW9uN3M2NkJubnV5akdDbTVVbjVUNlJRMjJVRVhLWkNCb1FXYTIvWHR3aW05dlVEUzZzK3U0aFN5bGM5TmYyNStnemkiLCJtYWMiOiJlZGJlM2FmMDczNGNhNjY3ODhhMjM0MDhhNzlmNTVkZjc3MmRlNGRhZTk2MTdkMDY5YTBkNTk0MzM4ZjQ0NDQwIiwidGFnIjoiIn0%3D; expires=Thu, 30-Jan-2025 02:30:48 GMT; Max-Age=7200; path=/; secure; httponly; samesite=none
vary: accept-encoding
content-encoding: br
|
|
| rgo.borouseburba.ru/GDSherpa-regular.woff2 | 104.21.96.1 | 200 OK | 29 kB |
URL GET HTTP/3rgo.borouseburba.ru/GDSherpa-regular.woff2 IP 104.21.96.1:443
Requested byhttps://rgo.borouseburba.ru/daf83/ CertificateIssuerGoogle Trust Services Subjectborouseburba.ru Fingerprint0D:4D:20:3B:FD:5F:AD:A4:EF:BF:6D:AA:59:54:5F:AB:82:53:C8:63 ValidityWed, 15 Jan 2025 00:24:29 GMT - Tue, 15 Apr 2025 01:23:13 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 28584, version 1.66 Hash17081510f3a6f2f619ec8c6f244523c7 87f34b2a1532c50f2a424c345d03fe028db35635 2c7292014e2ef00374aeb63691d9f23159a010455784ee0b274ba7db2bcca956
Analyzer | Verdict | Alert | urlquery | phishing | Phishing - Microsoft |
GET /GDSherpa-regular.woff2 HTTP/1.1
Host: rgo.borouseburba.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://rgo.borouseburba.ru/daf83/
DNT: 1
Connection: keep-alive
Cookie: XSRF-TOKEN=eyJpdiI6IlJkT1NTaCtDNitJWGdhNm85YWpVZkE9PSIsInZhbHVlIjoiTHBtK1NhczNJQjNRUDdUL05UL001Y1p3N0JiY1A3UjRubThPUVBRU0ZhRGxiNjVhZWwyQnhYT2pFYWlMdXhOVWdsN3Rrdk5pREhqNnViNTc2VHZRYnZISyt4V3Q1R1JrUVRXSDNPWDliRmFMTW1PUnRhVnZ4VjgyT2VvbUYvVUoiLCJtYWMiOiI2M2IzYTkwNGQzYjIzMzlkYjgwOTEzMmI2MDRiMjcxZjI1MzJiNzAyNDVkNmUzOGUxY2UxZjQzNDQ2MGNiZTUyIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjA3WmdIVWNsV1gybSs5RXN1Z0pMSHc9PSIsInZhbHVlIjoiWVQ1dFIxNW94cWtlQmFRMk9rVTFCSHB6RmJDV0NDdi9jaFZ4TTM5WTVXbHB1YzdSQWU4M1htblZYb2FnSVZvRVczM3NETWNRUnhNTnd0aEd3S2lUcEZBSzJxeE52Y0txaWQ0c0ZNVjdxU2xENHJMWkFlb0o3ZUdFRGxWQVNBREUiLCJtYWMiOiJmMDE2YzZjNzEzNzAxMmMyODFmOGY1MDA0NmVmMTg0NzE1ZjhiNmRhYTQ2MWZjMTY2YWE4ZmJlNzcxOTYzYWRiIiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 30 Jan 2025 00:30:49 GMT
content-type: font/woff2
content-length: 28584
server: cloudflare
content-disposition: inline; filename="GDSherpa-regular.woff2"
cache-control: max-age=14400
last-modified: Thu, 30 Jan 2025 00:30:49 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=1tEo5Rv%2FFKoncOBJfYTjgMtwrfHAHeOCxLaderRU9TeQ8hu4CTog%2Ffm0V27rUaPi3%2BoP%2FeVPYc5jdixHKG9VLNmGBqAO%2FtibXTdFSb9%2F4GErdX0G1iPIgie%2BgCJLbA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=4051&min_rtt=4023&rtt_var=1566&sent=4&recv=7&lost=0&retrans=0&sent_bytes=2824&recv_bytes=2187&delivery_rate=669487&cwnd=201&unsent_bytes=0&cid=933deb885b5f27f3&ts=201&x=0"
cf-cache-status: EXPIRED
accept-ranges: bytes
cf-ray: 909d5b06e87456c6-OSL
|
|
| rgo.borouseburba.ru/GDSherpa-vf.woff2 | 104.21.96.1 | 200 OK | 44 kB |
URL GET HTTP/3rgo.borouseburba.ru/GDSherpa-vf.woff2 IP 104.21.96.1:443
Requested byhttps://rgo.borouseburba.ru/daf83/ CertificateIssuerGoogle Trust Services Subjectborouseburba.ru Fingerprint0D:4D:20:3B:FD:5F:AD:A4:EF:BF:6D:AA:59:54:5F:AB:82:53:C8:63 ValidityWed, 15 Jan 2025 00:24:29 GMT - Tue, 15 Apr 2025 01:23:13 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 43596, version 1.0 Hash2a05e9e5572abc320b2b7ea38a70dcc1 d5fa2a856d5632c2469e42436159375117ef3c35 3efcb941aaddaf4aea08dab3fb97d3e904aa1b83264e64b4d5bda53bc7c798ec
Analyzer | Verdict | Alert | urlquery | phishing | Phishing - Microsoft |
GET /GDSherpa-vf.woff2 HTTP/1.1
Host: rgo.borouseburba.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://rgo.borouseburba.ru/daf83/
DNT: 1
Connection: keep-alive
Cookie: XSRF-TOKEN=eyJpdiI6IlJkT1NTaCtDNitJWGdhNm85YWpVZkE9PSIsInZhbHVlIjoiTHBtK1NhczNJQjNRUDdUL05UL001Y1p3N0JiY1A3UjRubThPUVBRU0ZhRGxiNjVhZWwyQnhYT2pFYWlMdXhOVWdsN3Rrdk5pREhqNnViNTc2VHZRYnZISyt4V3Q1R1JrUVRXSDNPWDliRmFMTW1PUnRhVnZ4VjgyT2VvbUYvVUoiLCJtYWMiOiI2M2IzYTkwNGQzYjIzMzlkYjgwOTEzMmI2MDRiMjcxZjI1MzJiNzAyNDVkNmUzOGUxY2UxZjQzNDQ2MGNiZTUyIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjA3WmdIVWNsV1gybSs5RXN1Z0pMSHc9PSIsInZhbHVlIjoiWVQ1dFIxNW94cWtlQmFRMk9rVTFCSHB6RmJDV0NDdi9jaFZ4TTM5WTVXbHB1YzdSQWU4M1htblZYb2FnSVZvRVczM3NETWNRUnhNTnd0aEd3S2lUcEZBSzJxeE52Y0txaWQ0c0ZNVjdxU2xENHJMWkFlb0o3ZUdFRGxWQVNBREUiLCJtYWMiOiJmMDE2YzZjNzEzNzAxMmMyODFmOGY1MDA0NmVmMTg0NzE1ZjhiNmRhYTQ2MWZjMTY2YWE4ZmJlNzcxOTYzYWRiIiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 30 Jan 2025 00:30:49 GMT
content-type: font/woff2
content-length: 43596
server: cloudflare
content-disposition: inline; filename="GDSherpa-vf.woff2"
cache-control: max-age=14400
last-modified: Thu, 30 Jan 2025 00:30:49 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=asYDSBwplTHOv0nGuM2EZOmUSfinNg9A%2FCcS2EZDgDjyOOXxWG67nHIBytkknM1mDYtKoi7bUKmWzbOdgCuhd2CohTepFRgS90KeHcGxme2m9SBD%2Bbi3bJPeQk9k9w%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=4932&min_rtt=4916&rtt_var=1413&sent=5&recv=8&lost=0&retrans=0&sent_bytes=2822&recv_bytes=2182&delivery_rate=568009&cwnd=221&unsent_bytes=0&cid=c642242ebd67eb60&ts=242&x=0"
cf-cache-status: EXPIRED
accept-ranges: bytes
cf-ray: 909d5b06e87356c6-OSL
|
|
| rgo.borouseburba.ru/GDSherpa-vf2.woff2 | 104.21.96.1 | 200 OK | 93 kB |
URL GET HTTP/3rgo.borouseburba.ru/GDSherpa-vf2.woff2 IP 104.21.96.1:443
Requested byhttps://rgo.borouseburba.ru/daf83/ CertificateIssuerGoogle Trust Services Subjectborouseburba.ru Fingerprint0D:4D:20:3B:FD:5F:AD:A4:EF:BF:6D:AA:59:54:5F:AB:82:53:C8:63 ValidityWed, 15 Jan 2025 00:24:29 GMT - Tue, 15 Apr 2025 01:23:13 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 93276, version 1.0 Hashbcd7983ea5aa57c55f6758b4977983cb ef3a009e205229e07fb0ec8569e669b11c378ef1 6528a0bf9a836a53dfd8536e1786ba6831c9d1faa74967126fddf5b2081b858c
Analyzer | Verdict | Alert | urlquery | phishing | Phishing - Microsoft |
GET /GDSherpa-vf2.woff2 HTTP/1.1
Host: rgo.borouseburba.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://rgo.borouseburba.ru/daf83/
DNT: 1
Connection: keep-alive
Cookie: XSRF-TOKEN=eyJpdiI6IlJkT1NTaCtDNitJWGdhNm85YWpVZkE9PSIsInZhbHVlIjoiTHBtK1NhczNJQjNRUDdUL05UL001Y1p3N0JiY1A3UjRubThPUVBRU0ZhRGxiNjVhZWwyQnhYT2pFYWlMdXhOVWdsN3Rrdk5pREhqNnViNTc2VHZRYnZISyt4V3Q1R1JrUVRXSDNPWDliRmFMTW1PUnRhVnZ4VjgyT2VvbUYvVUoiLCJtYWMiOiI2M2IzYTkwNGQzYjIzMzlkYjgwOTEzMmI2MDRiMjcxZjI1MzJiNzAyNDVkNmUzOGUxY2UxZjQzNDQ2MGNiZTUyIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjA3WmdIVWNsV1gybSs5RXN1Z0pMSHc9PSIsInZhbHVlIjoiWVQ1dFIxNW94cWtlQmFRMk9rVTFCSHB6RmJDV0NDdi9jaFZ4TTM5WTVXbHB1YzdSQWU4M1htblZYb2FnSVZvRVczM3NETWNRUnhNTnd0aEd3S2lUcEZBSzJxeE52Y0txaWQ0c0ZNVjdxU2xENHJMWkFlb0o3ZUdFRGxWQVNBREUiLCJtYWMiOiJmMDE2YzZjNzEzNzAxMmMyODFmOGY1MDA0NmVmMTg0NzE1ZjhiNmRhYTQ2MWZjMTY2YWE4ZmJlNzcxOTYzYWRiIiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 30 Jan 2025 00:30:49 GMT
content-type: font/woff2
content-length: 93276
server: cloudflare
content-disposition: inline; filename="GDSherpa-vf2.woff2"
cache-control: max-age=14400
last-modified: Thu, 30 Jan 2025 00:30:49 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=aVYreie4tZoZeXK0MTIigOfgFx9blcimJNyZWOBWyEolOQKXm2FlLjPsGgSTk%2FhEi9kfpRrQeqebKd%2B8QlhWFVmXDTxuKYVyBoY5HoaeZ96gI6YZKBTujpI1fKHC3w%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=5676&min_rtt=5672&rtt_var=2135&sent=4&recv=7&lost=0&retrans=0&sent_bytes=2823&recv_bytes=2182&delivery_rate=499211&cwnd=173&unsent_bytes=0&cid=a01a5d39b8389d99&ts=245&x=0"
cf-cache-status: EXPIRED
accept-ranges: bytes
cf-ray: 909d5b06e87656c6-OSL
|
|
| rgo.borouseburba.ru/opdnnJTnNQBusDG268KUcN1NOCcj8kD3zcagghkJ4JaNTOWOuFnlgwqef196 | 104.21.96.1 | 200 OK | 10 kB |
URL GET HTTP/3rgo.borouseburba.ru/opdnnJTnNQBusDG268KUcN1NOCcj8kD3zcagghkJ4JaNTOWOuFnlgwqef196 IP 104.21.96.1:443
Requested byhttps://rgo.borouseburba.ru/daf83/ CertificateIssuerGoogle Trust Services Subjectborouseburba.ru Fingerprint0D:4D:20:3B:FD:5F:AD:A4:EF:BF:6D:AA:59:54:5F:AB:82:53:C8:63 ValidityWed, 15 Jan 2025 00:24:29 GMT - Tue, 15 Apr 2025 01:23:13 GMT
File typeSVG Scalable Vector Graphics image Hash59759b80e24a89c8cd029b14700e646d 651b1921c99e143d3c242de3faacfb9ad51dbb53 b02b5df3ecd59d6cd90c60878683477532cbfc24660028657f290bdc7bc774b5
Analyzer | Verdict | Alert | urlquery | phishing | Phishing - Microsoft |
GET /opdnnJTnNQBusDG268KUcN1NOCcj8kD3zcagghkJ4JaNTOWOuFnlgwqef196 HTTP/1.1
Host: rgo.borouseburba.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rgo.borouseburba.ru/daf83/
Cookie: XSRF-TOKEN=eyJpdiI6IlJkT1NTaCtDNitJWGdhNm85YWpVZkE9PSIsInZhbHVlIjoiTHBtK1NhczNJQjNRUDdUL05UL001Y1p3N0JiY1A3UjRubThPUVBRU0ZhRGxiNjVhZWwyQnhYT2pFYWlMdXhOVWdsN3Rrdk5pREhqNnViNTc2VHZRYnZISyt4V3Q1R1JrUVRXSDNPWDliRmFMTW1PUnRhVnZ4VjgyT2VvbUYvVUoiLCJtYWMiOiI2M2IzYTkwNGQzYjIzMzlkYjgwOTEzMmI2MDRiMjcxZjI1MzJiNzAyNDVkNmUzOGUxY2UxZjQzNDQ2MGNiZTUyIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjA3WmdIVWNsV1gybSs5RXN1Z0pMSHc9PSIsInZhbHVlIjoiWVQ1dFIxNW94cWtlQmFRMk9rVTFCSHB6RmJDV0NDdi9jaFZ4TTM5WTVXbHB1YzdSQWU4M1htblZYb2FnSVZvRVczM3NETWNRUnhNTnd0aEd3S2lUcEZBSzJxeE52Y0txaWQ0c0ZNVjdxU2xENHJMWkFlb0o3ZUdFRGxWQVNBREUiLCJtYWMiOiJmMDE2YzZjNzEzNzAxMmMyODFmOGY1MDA0NmVmMTg0NzE1ZjhiNmRhYTQ2MWZjMTY2YWE4ZmJlNzcxOTYzYWRiIiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 30 Jan 2025 00:30:49 GMT
content-type: image/svg+xml
cf-ray: 909d5b06f87c56c6-OSL
server: cloudflare
content-disposition: inline; filename="opdnnJTnNQBusDG268KUcN1NOCcj8kD3zcagghkJ4JaNTOWOuFnlgwqef196"
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=5kZi8Wd9zWdqnQetmPEOZXNicGMMF8mstasFLFnxhaPlNWev9YabQl%2BOm8Im7MF1fMCrNQh%2B8h3Wskuy9z8AD9nc%2BR%2FpXHMPCyDEgSPuKblvq8sSyNJ8RrV7KAPERA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=4963&min_rtt=4917&rtt_var=1468&sent=5&recv=8&lost=0&retrans=0&sent_bytes=2824&recv_bytes=2153&delivery_rate=549276&cwnd=251&unsent_bytes=0&cid=3dc11feadeda07ca&ts=102&x=0"
vary: accept-encoding
content-encoding: br
|
|
| ok4static.oktacdn.com/assets/loginpage/font/assets/proximanova-reg-webfont.353416ed0ff540352235.woff2 | 143.204.55.81 | 200 OK | 20 kB |
URL GET HTTP/2ok4static.oktacdn.com/assets/loginpage/font/assets/proximanova-reg-webfont.353416ed0ff540352235.woff2 IP 143.204.55.81:443
Requested byhttps://rgo.borouseburba.ru/daf83/ CertificateIssuerDigiCert Inc Subject*.oktacdn.com Fingerprint3E:D7:C7:A6:35:70:74:E4:BF:45:2E:A1:D5:A3:25:88:24:76:B3:B5 ValidityMon, 02 Dec 2024 00:00:00 GMT - Fri, 02 Jan 2026 23:59:59 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 20416, version 2.197 Hashd99a7377dabb55772ca9f986b0a04b57 2b5fcd8431953c44e410d0489899e74f6d2cfecc affdba1620552b12a1a8a04467136aeb408c03fa337d20e9c38374d682d4d149
GET /assets/loginpage/font/assets/proximanova-reg-webfont.353416ed0ff540352235.woff2 HTTP/1.1
Host: ok4static.oktacdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://rgo.borouseburba.ru
DNT: 1
Connection: keep-alive
Referer: https://ok4static.oktacdn.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: application/font-woff2
content-length: 20416
date: Mon, 27 Jan 2025 07:42:18 GMT
server: nginx
last-modified: Tue, 07 Nov 2023 18:56:28 GMT
etag: "d99a7377dabb55772ca9f986b0a04b57"
x-amz-meta-sha1sum: 2b5fcd8431953c44e410d0489899e74f6d2cfecc
expires: Tue, 27 Jan 2026 07:42:18 GMT
cache-control: max-age=31536000, public,max-age=31536000,s-maxage=1814400
strict-transport-security: max-age=315360000; includeSubDomains
access-control-allow-origin: *
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 76c917e0bb0ba45eb834d25d76ee125e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: hVs-xhBEIz-O-nEshrsOIHY0MLcezSH_OSTjFoS2fBe3d_gByZYmow==
age: 233312
X-Firefox-Spdy: h2
|
|
| rgo.borouseburba.ru/klFnc9StEUmtTwGbw2RSHLTFRrIoaXx9opuCqK34nGJqeCdYALDzCy2xTJWrnJibCvFab229 | 104.21.96.1 | 200 OK | 1.3 kB |
URL GET HTTP/3rgo.borouseburba.ru/klFnc9StEUmtTwGbw2RSHLTFRrIoaXx9opuCqK34nGJqeCdYALDzCy2xTJWrnJibCvFab229 IP 104.21.96.1:443
Requested byhttps://rgo.borouseburba.ru/daf83/ CertificateIssuerGoogle Trust Services Subjectborouseburba.ru Fingerprint0D:4D:20:3B:FD:5F:AD:A4:EF:BF:6D:AA:59:54:5F:AB:82:53:C8:63 ValidityWed, 15 Jan 2025 00:24:29 GMT - Tue, 15 Apr 2025 01:23:13 GMT
File typeRIFF (little-endian) data, Web/P image Hash32ca2081553e969f9fdd4374134521ad 7b09924c4c3d8b6e41fe38363e342da098be4173 216fc342a469aa6a005b2eacc24622095e5282d3e9f1ae99ce54c27b92ec3587
Analyzer | Verdict | Alert | urlquery | phishing | Phishing - Microsoft |
GET /klFnc9StEUmtTwGbw2RSHLTFRrIoaXx9opuCqK34nGJqeCdYALDzCy2xTJWrnJibCvFab229 HTTP/1.1
Host: rgo.borouseburba.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rgo.borouseburba.ru/daf83/
Cookie: XSRF-TOKEN=eyJpdiI6IlJkT1NTaCtDNitJWGdhNm85YWpVZkE9PSIsInZhbHVlIjoiTHBtK1NhczNJQjNRUDdUL05UL001Y1p3N0JiY1A3UjRubThPUVBRU0ZhRGxiNjVhZWwyQnhYT2pFYWlMdXhOVWdsN3Rrdk5pREhqNnViNTc2VHZRYnZISyt4V3Q1R1JrUVRXSDNPWDliRmFMTW1PUnRhVnZ4VjgyT2VvbUYvVUoiLCJtYWMiOiI2M2IzYTkwNGQzYjIzMzlkYjgwOTEzMmI2MDRiMjcxZjI1MzJiNzAyNDVkNmUzOGUxY2UxZjQzNDQ2MGNiZTUyIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjA3WmdIVWNsV1gybSs5RXN1Z0pMSHc9PSIsInZhbHVlIjoiWVQ1dFIxNW94cWtlQmFRMk9rVTFCSHB6RmJDV0NDdi9jaFZ4TTM5WTVXbHB1YzdSQWU4M1htblZYb2FnSVZvRVczM3NETWNRUnhNTnd0aEd3S2lUcEZBSzJxeE52Y0txaWQ0c0ZNVjdxU2xENHJMWkFlb0o3ZUdFRGxWQVNBREUiLCJtYWMiOiJmMDE2YzZjNzEzNzAxMmMyODFmOGY1MDA0NmVmMTg0NzE1ZjhiNmRhYTQ2MWZjMTY2YWE4ZmJlNzcxOTYzYWRiIiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 30 Jan 2025 00:30:50 GMT
content-type: image/webp
content-length: 1298
server: cloudflare
content-disposition: inline; filename="klFnc9StEUmtTwGbw2RSHLTFRrIoaXx9opuCqK34nGJqeCdYALDzCy2xTJWrnJibCvFab229"
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=AGjQSZ%2BEYk2Flj3fIHR%2FUAQfSAyfC0ne6imAqAFeIzTzr3z2UJcvRH7El0EbNRFQuiRU2vw4tBtu2nMDexRw%2Fbn4jDXPnr16xAD%2B2RBn96IAScdhPO3j2vjb%2FObcQw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=5801&min_rtt=5727&rtt_var=1664&sent=5&recv=8&lost=0&retrans=0&sent_bytes=2823&recv_bytes=2165&delivery_rate=485675&cwnd=244&unsent_bytes=0&cid=25532e28521ada6c&ts=91&x=0"
cf-ray: 909d5b0d388356c6-OSL
|
|
| rgo.borouseburba.ru/ijjIB03zkv9xWoYBf07hyzOU4tVMFHCfUmEMsnAkVS78163 | 104.21.96.1 | 200 OK | 7.4 kB |
URL GET HTTP/3rgo.borouseburba.ru/ijjIB03zkv9xWoYBf07hyzOU4tVMFHCfUmEMsnAkVS78163 IP 104.21.96.1:443
Requested byhttps://rgo.borouseburba.ru/daf83/ CertificateIssuerGoogle Trust Services Subjectborouseburba.ru Fingerprint0D:4D:20:3B:FD:5F:AD:A4:EF:BF:6D:AA:59:54:5F:AB:82:53:C8:63 ValidityWed, 15 Jan 2025 00:24:29 GMT - Tue, 15 Apr 2025 01:23:13 GMT
File typeSVG Scalable Vector Graphics image Hashbca9b46fee32162356ba5b4783e614dc cc09ee862df9bf86e545f9dfdf2fbd4facfa71f5 fb48e7087def752683bc9a9fe4035acf2419cebbe8b17a16e5c81699a06f6fec
Analyzer | Verdict | Alert | urlquery | phishing | Phishing - Microsoft |
GET /ijjIB03zkv9xWoYBf07hyzOU4tVMFHCfUmEMsnAkVS78163 HTTP/1.1
Host: rgo.borouseburba.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rgo.borouseburba.ru/daf83/
Cookie: XSRF-TOKEN=eyJpdiI6IlJkT1NTaCtDNitJWGdhNm85YWpVZkE9PSIsInZhbHVlIjoiTHBtK1NhczNJQjNRUDdUL05UL001Y1p3N0JiY1A3UjRubThPUVBRU0ZhRGxiNjVhZWwyQnhYT2pFYWlMdXhOVWdsN3Rrdk5pREhqNnViNTc2VHZRYnZISyt4V3Q1R1JrUVRXSDNPWDliRmFMTW1PUnRhVnZ4VjgyT2VvbUYvVUoiLCJtYWMiOiI2M2IzYTkwNGQzYjIzMzlkYjgwOTEzMmI2MDRiMjcxZjI1MzJiNzAyNDVkNmUzOGUxY2UxZjQzNDQ2MGNiZTUyIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjA3WmdIVWNsV1gybSs5RXN1Z0pMSHc9PSIsInZhbHVlIjoiWVQ1dFIxNW94cWtlQmFRMk9rVTFCSHB6RmJDV0NDdi9jaFZ4TTM5WTVXbHB1YzdSQWU4M1htblZYb2FnSVZvRVczM3NETWNRUnhNTnd0aEd3S2lUcEZBSzJxeE52Y0txaWQ0c0ZNVjdxU2xENHJMWkFlb0o3ZUdFRGxWQVNBREUiLCJtYWMiOiJmMDE2YzZjNzEzNzAxMmMyODFmOGY1MDA0NmVmMTg0NzE1ZjhiNmRhYTQ2MWZjMTY2YWE4ZmJlNzcxOTYzYWRiIiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 30 Jan 2025 00:30:49 GMT
content-type: image/svg+xml
cf-ray: 909d5b06e87a56c6-OSL
server: cloudflare
content-disposition: inline; filename="ijjIB03zkv9xWoYBf07hyzOU4tVMFHCfUmEMsnAkVS78163"
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=5k871pjShFKvyCc7q5bDTWpqmxEtallKT2xAl48OIbDN2Fg9BRMgyHIUPhoA5fm%2Bk9MyKsqApFddNpzCvQV%2BwmfA6IP1wy8UxWnXOB1hqzNs60KU1XGDC57I0suMNg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=5164&min_rtt=5107&rtt_var=1542&sent=5&recv=8&lost=0&retrans=0&sent_bytes=2824&recv_bytes=2140&delivery_rate=522856&cwnd=210&unsent_bytes=0&cid=d82981da9d5666a3&ts=104&x=0"
vary: accept-encoding
content-encoding: br
|
|
| rgo.borouseburba.ru/kl4ZVDstvhtWJc2lPpNaAH53R9KO41wUkvB56nywWRrqqMVJmZdgVwBUqEEwx211 | 104.21.96.1 | 200 OK | 1.9 kB |
URL GET HTTP/3rgo.borouseburba.ru/kl4ZVDstvhtWJc2lPpNaAH53R9KO41wUkvB56nywWRrqqMVJmZdgVwBUqEEwx211 IP 104.21.96.1:443
Requested byhttps://rgo.borouseburba.ru/daf83/ CertificateIssuerGoogle Trust Services Subjectborouseburba.ru Fingerprint0D:4D:20:3B:FD:5F:AD:A4:EF:BF:6D:AA:59:54:5F:AB:82:53:C8:63 ValidityWed, 15 Jan 2025 00:24:29 GMT - Tue, 15 Apr 2025 01:23:13 GMT
File typeSVG Scalable Vector Graphics image Hash4b5c228b4faba433d06ec569ed855b2d a7d3882b93e332460e7c59510a6a811ef011983f eb19d76cd1fad39abf0f2778991883a5cf9ff560117ce8f7c64124e71471b4ed
Analyzer | Verdict | Alert | urlquery | phishing | Phishing - Microsoft |
GET /kl4ZVDstvhtWJc2lPpNaAH53R9KO41wUkvB56nywWRrqqMVJmZdgVwBUqEEwx211 HTTP/1.1
Host: rgo.borouseburba.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rgo.borouseburba.ru/daf83/
Cookie: XSRF-TOKEN=eyJpdiI6IlJkT1NTaCtDNitJWGdhNm85YWpVZkE9PSIsInZhbHVlIjoiTHBtK1NhczNJQjNRUDdUL05UL001Y1p3N0JiY1A3UjRubThPUVBRU0ZhRGxiNjVhZWwyQnhYT2pFYWlMdXhOVWdsN3Rrdk5pREhqNnViNTc2VHZRYnZISyt4V3Q1R1JrUVRXSDNPWDliRmFMTW1PUnRhVnZ4VjgyT2VvbUYvVUoiLCJtYWMiOiI2M2IzYTkwNGQzYjIzMzlkYjgwOTEzMmI2MDRiMjcxZjI1MzJiNzAyNDVkNmUzOGUxY2UxZjQzNDQ2MGNiZTUyIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjA3WmdIVWNsV1gybSs5RXN1Z0pMSHc9PSIsInZhbHVlIjoiWVQ1dFIxNW94cWtlQmFRMk9rVTFCSHB6RmJDV0NDdi9jaFZ4TTM5WTVXbHB1YzdSQWU4M1htblZYb2FnSVZvRVczM3NETWNRUnhNTnd0aEd3S2lUcEZBSzJxeE52Y0txaWQ0c0ZNVjdxU2xENHJMWkFlb0o3ZUdFRGxWQVNBREUiLCJtYWMiOiJmMDE2YzZjNzEzNzAxMmMyODFmOGY1MDA0NmVmMTg0NzE1ZjhiNmRhYTQ2MWZjMTY2YWE4ZmJlNzcxOTYzYWRiIiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 30 Jan 2025 00:30:50 GMT
content-type: image/svg+xml
cf-ray: 909d5b0d388256c6-OSL
server: cloudflare
content-disposition: inline; filename="kl4ZVDstvhtWJc2lPpNaAH53R9KO41wUkvB56nywWRrqqMVJmZdgVwBUqEEwx211"
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=kI8s0LzgruBFXGpWW37Gmiec7I9U6yS0oAvzM%2Bq1KFF1MLG9cbHllxmairjOP494CSpr%2BoHW5aw8xxPxoFqe6hN87W8fFntMSwrL1D1wO3Hh%2BBXZcFR3Kx2CjxRxPA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=5582&min_rtt=5523&rtt_var=1662&sent=5&recv=8&lost=0&retrans=0&sent_bytes=2824&recv_bytes=2157&delivery_rate=487170&cwnd=251&unsent_bytes=0&cid=6402ff112909e628&ts=108&x=0"
vary: accept-encoding
content-encoding: br
|
|
| rgo.borouseburba.ru/56AqGGIiaRHxU2x6OOqPoHUZghUDHU5whQTw89101 | 104.21.96.1 | 200 OK | 137 kB |
URL GET HTTP/3rgo.borouseburba.ru/56AqGGIiaRHxU2x6OOqPoHUZghUDHU5whQTw89101 IP 104.21.96.1:443
Requested byhttps://rgo.borouseburba.ru/daf83/ CertificateIssuerGoogle Trust Services Subjectborouseburba.ru Fingerprint0D:4D:20:3B:FD:5F:AD:A4:EF:BF:6D:AA:59:54:5F:AB:82:53:C8:63 ValidityWed, 15 Jan 2025 00:24:29 GMT - Tue, 15 Apr 2025 01:23:13 GMT
Size137 kB (136817 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /56AqGGIiaRHxU2x6OOqPoHUZghUDHU5whQTw89101 HTTP/1.1
Host: rgo.borouseburba.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rgo.borouseburba.ru/daf83/
Cookie: XSRF-TOKEN=eyJpdiI6IlJkT1NTaCtDNitJWGdhNm85YWpVZkE9PSIsInZhbHVlIjoiTHBtK1NhczNJQjNRUDdUL05UL001Y1p3N0JiY1A3UjRubThPUVBRU0ZhRGxiNjVhZWwyQnhYT2pFYWlMdXhOVWdsN3Rrdk5pREhqNnViNTc2VHZRYnZISyt4V3Q1R1JrUVRXSDNPWDliRmFMTW1PUnRhVnZ4VjgyT2VvbUYvVUoiLCJtYWMiOiI2M2IzYTkwNGQzYjIzMzlkYjgwOTEzMmI2MDRiMjcxZjI1MzJiNzAyNDVkNmUzOGUxY2UxZjQzNDQ2MGNiZTUyIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjA3WmdIVWNsV1gybSs5RXN1Z0pMSHc9PSIsInZhbHVlIjoiWVQ1dFIxNW94cWtlQmFRMk9rVTFCSHB6RmJDV0NDdi9jaFZ4TTM5WTVXbHB1YzdSQWU4M1htblZYb2FnSVZvRVczM3NETWNRUnhNTnd0aEd3S2lUcEZBSzJxeE52Y0txaWQ0c0ZNVjdxU2xENHJMWkFlb0o3ZUdFRGxWQVNBREUiLCJtYWMiOiJmMDE2YzZjNzEzNzAxMmMyODFmOGY1MDA0NmVmMTg0NzE1ZjhiNmRhYTQ2MWZjMTY2YWE4ZmJlNzcxOTYzYWRiIiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 30 Jan 2025 00:30:49 GMT
content-type: application/javascript
cf-ray: 909d5b07088056c6-OSL
server: cloudflare
content-disposition: inline; filename="56AqGGIiaRHxU2x6OOqPoHUZghUDHU5whQTw89101"
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ICVWL0q6xODM3442ETs0Y%2Fw%2BxGbr8wWrUxlNq539Id08h8Vuh6Dho0FnyCTFua2kuMvil0Lr3%2BTAy6YILluVg9usajhlk9k%2F0ckC%2FOUuyAsfvABtwWQFJGxJNswfVg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=4387&min_rtt=4355&rtt_var=1286&sent=5&recv=8&lost=0&retrans=0&sent_bytes=2822&recv_bytes=2098&delivery_rate=624150&cwnd=249&unsent_bytes=0&cid=a64c07ad33100dbd&ts=95&x=0"
vary: accept-encoding
content-encoding: br
|
|
| rgo.borouseburba.ru/rvadKv6WSsQzupHrtA11Tjd3M7mbJVu4aufBzqTGIRGmLQZ8sdnT23GGrTlc | 104.21.96.1 | 200 OK | 4.5 kB |
URL POST HTTP/3rgo.borouseburba.ru/rvadKv6WSsQzupHrtA11Tjd3M7mbJVu4aufBzqTGIRGmLQZ8sdnT23GGrTlc IP 104.21.96.1:443
Requested byhttps://rgo.borouseburba.ru/daf83/ CertificateIssuerGoogle Trust Services Subjectborouseburba.ru Fingerprint0D:4D:20:3B:FD:5F:AD:A4:EF:BF:6D:AA:59:54:5F:AB:82:53:C8:63 ValidityWed, 15 Jan 2025 00:24:29 GMT - Tue, 15 Apr 2025 01:23:13 GMT
File typetroff or preprocessor input, ASCII text, with very long lines (4535), with no line terminators Hash283f1ad1463f43ca7f5e59720a33a17f 055e75c1d9ba219e51c0fb69b804701d884b3df0 8bbcade546b04172244451bca209bbeea1f189626798bfe9014deaed755b64b7
POST /rvadKv6WSsQzupHrtA11Tjd3M7mbJVu4aufBzqTGIRGmLQZ8sdnT23GGrTlc HTTP/1.1
Host: rgo.borouseburba.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 55
Origin: https://rgo.borouseburba.ru
DNT: 1
Connection: keep-alive
Referer: https://rgo.borouseburba.ru/daf83/
Cookie: XSRF-TOKEN=eyJpdiI6IlJkT1NTaCtDNitJWGdhNm85YWpVZkE9PSIsInZhbHVlIjoiTHBtK1NhczNJQjNRUDdUL05UL001Y1p3N0JiY1A3UjRubThPUVBRU0ZhRGxiNjVhZWwyQnhYT2pFYWlMdXhOVWdsN3Rrdk5pREhqNnViNTc2VHZRYnZISyt4V3Q1R1JrUVRXSDNPWDliRmFMTW1PUnRhVnZ4VjgyT2VvbUYvVUoiLCJtYWMiOiI2M2IzYTkwNGQzYjIzMzlkYjgwOTEzMmI2MDRiMjcxZjI1MzJiNzAyNDVkNmUzOGUxY2UxZjQzNDQ2MGNiZTUyIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjA3WmdIVWNsV1gybSs5RXN1Z0pMSHc9PSIsInZhbHVlIjoiWVQ1dFIxNW94cWtlQmFRMk9rVTFCSHB6RmJDV0NDdi9jaFZ4TTM5WTVXbHB1YzdSQWU4M1htblZYb2FnSVZvRVczM3NETWNRUnhNTnd0aEd3S2lUcEZBSzJxeE52Y0txaWQ0c0ZNVjdxU2xENHJMWkFlb0o3ZUdFRGxWQVNBREUiLCJtYWMiOiJmMDE2YzZjNzEzNzAxMmMyODFmOGY1MDA0NmVmMTg0NzE1ZjhiNmRhYTQ2MWZjMTY2YWE4ZmJlNzcxOTYzYWRiIiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 30 Jan 2025 00:30:50 GMT
content-type: application/json
cf-ray: 909d5b0d288156c6-OSL
server: cloudflare
cache-control: no-cache, private
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=U4kQZjp8cF4CWETpFY9Rkbm20VRwKt2n7Pt1VaX45re2BW3IBzTihE72OY8VSL5j4zjIx9DvPvERfgYnNWHg7ljjCF%2Fgb1KfQsxQE1uJ5MHSby%2BAHM8aTGp8NAJjFg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=4753&min_rtt=4730&rtt_var=1373&sent=5&recv=8&lost=0&retrans=0&sent_bytes=2824&recv_bytes=2324&delivery_rate=586128&cwnd=215&unsent_bytes=0&cid=a372c97ab135f172&ts=99&x=0"
set-cookie: XSRF-TOKEN=eyJpdiI6IlBvRWovQnBWYUgwZUhSYkVGeW50bEE9PSIsInZhbHVlIjoiaUZ2TzF3aSt0TUJuNWRrK253Q2s0OUUxcjQyaDByTFY4VnJybGd1ZFpJUmdZWWVLMnJTNVg3d2thNGdsSDlsc05KdkphYkRLMEgzVWw4YmExbmJjdHZpdzNtTzV1clBSWjZBTThLb3hmdkZ1SzVTNjdnM09qdGxHT2R5cS9Bby8iLCJtYWMiOiI0MTcxODEyZTM4OWVlMTc0Yzk0MTMxYzMyMDcwODM1N2UxZDUxNDY5OWJmOGNmZTNlMjg1MmExOWRjYzJkMGUzIiwidGFnIjoiIn0%3D; expires=Thu, 30-Jan-2025 02:30:50 GMT; Max-Age=7200; path=/; secure; samesite=none
laravel_session=eyJpdiI6IktMWUkxNTNWOVJZSy8zMDM0a3dhbVE9PSIsInZhbHVlIjoiQmdmNjFndUJkdy9SRUkrNHRBNFNySjZFRVlvSnBYVnhRT0FyQ0wzejlmVWh1MEdLTDlab0NMNnUydEhsc1M5OHN3dDU5TjJoa3ZFOVpXWTZGbG1HbCs1Q0UvQmh0Q2QwS1Fnay9IcUc0eUo3N1k4QUc0UTVBYjdnaTYrSzRqS1MiLCJtYWMiOiIwNzdiMGYwY2U4YmFhNTc2ODIxMmI5NDAzNDQ0NWFmNWZiMGM4N2Q4ODA1MTc2MDE1ZDFlNWViY2RmOTAwNGQ0IiwidGFnIjoiIn0%3D; expires=Thu, 30-Jan-2025 02:30:50 GMT; Max-Age=7200; path=/; secure; httponly; samesite=none
vary: accept-encoding
content-encoding: br
|
|
| rgo.borouseburba.ru/abyY2k4Z0IMpq2ncd30 | 104.21.96.1 | 200 OK | 36 kB |
URL GET HTTP/3rgo.borouseburba.ru/abyY2k4Z0IMpq2ncd30 IP 104.21.96.1:443
Requested byhttps://rgo.borouseburba.ru/daf83/ CertificateIssuerGoogle Trust Services Subjectborouseburba.ru Fingerprint0D:4D:20:3B:FD:5F:AD:A4:EF:BF:6D:AA:59:54:5F:AB:82:53:C8:63 ValidityWed, 15 Jan 2025 00:24:29 GMT - Tue, 15 Apr 2025 01:23:13 GMT
File typeASCII text, with CRLF line terminators Hash38501e3fbbbd89b56aa5ba35de1a32fe d9b31981b6f834e8480ba28fbc1cff1be772f589 a1ca6b381cb01968851c98512c6e7f6c5309a49f7a16b864813135cbff82a85b
Analyzer | Verdict | Alert | urlquery | phishing | Phishing - Microsoft |
GET /abyY2k4Z0IMpq2ncd30 HTTP/1.1
Host: rgo.borouseburba.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rgo.borouseburba.ru/daf83/
Cookie: XSRF-TOKEN=eyJpdiI6IlJkT1NTaCtDNitJWGdhNm85YWpVZkE9PSIsInZhbHVlIjoiTHBtK1NhczNJQjNRUDdUL05UL001Y1p3N0JiY1A3UjRubThPUVBRU0ZhRGxiNjVhZWwyQnhYT2pFYWlMdXhOVWdsN3Rrdk5pREhqNnViNTc2VHZRYnZISyt4V3Q1R1JrUVRXSDNPWDliRmFMTW1PUnRhVnZ4VjgyT2VvbUYvVUoiLCJtYWMiOiI2M2IzYTkwNGQzYjIzMzlkYjgwOTEzMmI2MDRiMjcxZjI1MzJiNzAyNDVkNmUzOGUxY2UxZjQzNDQ2MGNiZTUyIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjA3WmdIVWNsV1gybSs5RXN1Z0pMSHc9PSIsInZhbHVlIjoiWVQ1dFIxNW94cWtlQmFRMk9rVTFCSHB6RmJDV0NDdi9jaFZ4TTM5WTVXbHB1YzdSQWU4M1htblZYb2FnSVZvRVczM3NETWNRUnhNTnd0aEd3S2lUcEZBSzJxeE52Y0txaWQ0c0ZNVjdxU2xENHJMWkFlb0o3ZUdFRGxWQVNBREUiLCJtYWMiOiJmMDE2YzZjNzEzNzAxMmMyODFmOGY1MDA0NmVmMTg0NzE1ZjhiNmRhYTQ2MWZjMTY2YWE4ZmJlNzcxOTYzYWRiIiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 30 Jan 2025 00:30:49 GMT
content-type: text/css;charset=UTF-8
cf-ray: 909d5b06a87056c6-OSL
server: cloudflare
content-disposition: inline; filename="abyY2k4Z0IMpq2ncd30"
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=XeUCwmjQ2GMnUw9OI0Si2xVD594ktC7wPvz%2FIEE06TKAld5GqvqY01OxIdmXCfbPcQa2c2ytgXnoGQJ02vs1IB4%2BUe8NpMXpzugBZ8lfyBQgeD6NHjsEJBZuYOTvcw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=5366&min_rtt=5354&rtt_var=1531&sent=5&recv=8&lost=0&retrans=0&sent_bytes=2823&recv_bytes=2105&delivery_rate=521898&cwnd=251&unsent_bytes=0&cid=b9999f53c1425fad&ts=93&x=0"
vary: accept-encoding
content-encoding: br
|
|
| rgo.borouseburba.ru/efziL5apek3L7UhCghxhTguvepDw6kc1hDcRWxBAIrgtNfgx90141 | 104.21.96.1 | 200 OK | 270 B |
URL GET HTTP/3rgo.borouseburba.ru/efziL5apek3L7UhCghxhTguvepDw6kc1hDcRWxBAIrgtNfgx90141 IP 104.21.96.1:443
Requested byhttps://rgo.borouseburba.ru/daf83/ CertificateIssuerGoogle Trust Services Subjectborouseburba.ru Fingerprint0D:4D:20:3B:FD:5F:AD:A4:EF:BF:6D:AA:59:54:5F:AB:82:53:C8:63 ValidityWed, 15 Jan 2025 00:24:29 GMT - Tue, 15 Apr 2025 01:23:13 GMT
File typeSVG Scalable Vector Graphics image Hash0c09c5ea7c28d6feb4d124957dde0a0d 1b9efde2d8f0e2a3d9d5315117e597c2d622fc5e b3c39d2c15327b7ae68940502a2d7bf457fe521e075e6e671d0340edc58bcb3a
Analyzer | Verdict | Alert | urlquery | phishing | Phishing - Microsoft |
GET /efziL5apek3L7UhCghxhTguvepDw6kc1hDcRWxBAIrgtNfgx90141 HTTP/1.1
Host: rgo.borouseburba.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rgo.borouseburba.ru/daf83/
Cookie: XSRF-TOKEN=eyJpdiI6IlJkT1NTaCtDNitJWGdhNm85YWpVZkE9PSIsInZhbHVlIjoiTHBtK1NhczNJQjNRUDdUL05UL001Y1p3N0JiY1A3UjRubThPUVBRU0ZhRGxiNjVhZWwyQnhYT2pFYWlMdXhOVWdsN3Rrdk5pREhqNnViNTc2VHZRYnZISyt4V3Q1R1JrUVRXSDNPWDliRmFMTW1PUnRhVnZ4VjgyT2VvbUYvVUoiLCJtYWMiOiI2M2IzYTkwNGQzYjIzMzlkYjgwOTEzMmI2MDRiMjcxZjI1MzJiNzAyNDVkNmUzOGUxY2UxZjQzNDQ2MGNiZTUyIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjA3WmdIVWNsV1gybSs5RXN1Z0pMSHc9PSIsInZhbHVlIjoiWVQ1dFIxNW94cWtlQmFRMk9rVTFCSHB6RmJDV0NDdi9jaFZ4TTM5WTVXbHB1YzdSQWU4M1htblZYb2FnSVZvRVczM3NETWNRUnhNTnd0aEd3S2lUcEZBSzJxeE52Y0txaWQ0c0ZNVjdxU2xENHJMWkFlb0o3ZUdFRGxWQVNBREUiLCJtYWMiOiJmMDE2YzZjNzEzNzAxMmMyODFmOGY1MDA0NmVmMTg0NzE1ZjhiNmRhYTQ2MWZjMTY2YWE4ZmJlNzcxOTYzYWRiIiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 30 Jan 2025 00:30:49 GMT
content-type: image/svg+xml
cf-ray: 909d5b06e87956c6-OSL
server: cloudflare
content-disposition: inline; filename="efziL5apek3L7UhCghxhTguvepDw6kc1hDcRWxBAIrgtNfgx90141"
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=3mnXbmB6W6i%2FmjEDsKWu%2FykRAhNVSqQgeo7EcatQzA8%2BKTvXvhlNKXjBr3o6k%2FFgsKo1%2FEiqoS5hIDai9c7VQV4F7UNP5ELj6%2FGe7ag65k1b7lY8x492AQRakasdjQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=5002&min_rtt=4943&rtt_var=1437&sent=5&recv=8&lost=0&retrans=0&sent_bytes=2824&recv_bytes=2146&delivery_rate=561292&cwnd=246&unsent_bytes=0&cid=d9dff7fa10cf1146&ts=146&x=0"
vary: accept-encoding
content-encoding: br
|
|
| objects.githubusercontent.com/github-production-release-asset-2e65be/2925284/11f3acf8-4ccb-11e6-8ce4-c179c0a212de?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=releaseassetproduction%2F20250130%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20250130T003045Z&X-Amz-Expires=300&X-Amz-Signature=ccc3bcd803d34117ea24c715ae2c84f319557d3d6ba9ddad26327e37a6b936cf&X-Amz-SignedHeaders=host&response-content-disposition=attachment%3B%20filename%3Drandexp.min.js&response-content-type=application%2Foctet-stream | 185.199.111.133 | 200 OK | 10 kB |
URL GET HTTP/2objects.githubusercontent.com/github-production-release-asset-2e65be/2925284/11f3acf8-4ccb-11e6-8ce4-c179c0a212de?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=releaseassetproduction%2F20250130%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20250130T003045Z&X-Amz-Expires=300&X-Amz-Signature=ccc3bcd803d34117ea24c715ae2c84f319557d3d6ba9ddad26327e37a6b936cf&X-Amz-SignedHeaders=host&response-content-disposition=attachment%3B%20filename%3Drandexp.min.js&response-content-type=application%2Foctet-stream IP 185.199.111.133:443
Requested byhttps://rgo.borouseburba.ru/daf83/ CertificateIssuerDigiCert Inc Subject*.github.io Fingerprint97:D8:C5:70:0F:12:24:6C:88:BC:FA:06:7E:8C:A7:4D:A8:62:67:28 ValidityFri, 15 Mar 2024 00:00:00 GMT - Fri, 14 Mar 2025 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (10017) Hash6c20a2be8ba900bc0a7118893a2b1072 ff7766fde1f33882c6e1c481ceed6f6588ea764c b1c42acd0288c435e95e00332476781532ed002cac6f3dcee9110ced30b31500
GET /github-production-release-asset-2e65be/2925284/11f3acf8-4ccb-11e6-8ce4-c179c0a212de?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=releaseassetproduction%2F20250130%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20250130T003045Z&X-Amz-Expires=300&X-Amz-Signature=ccc3bcd803d34117ea24c715ae2c84f319557d3d6ba9ddad26327e37a6b936cf&X-Amz-SignedHeaders=host&response-content-disposition=attachment%3B%20filename%3Drandexp.min.js&response-content-type=application%2Foctet-stream HTTP/1.1
Host: objects.githubusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rgo.borouseburba.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/octet-stream
last-modified: Tue, 07 Dec 2021 16:38:45 GMT
etag: "0x8D9B9A009499A1E"
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
x-ms-request-id: d91f6eaf-e01e-0032-2f18-13e122000000
x-ms-version: 2023-11-03
x-ms-creation-time: Tue, 17 Aug 2021 14:57:31 GMT
x-ms-blob-content-md5: bCCivoupALwKcRiJOisQcg==
x-ms-lease-status: unlocked
x-ms-lease-state: available
x-ms-blob-type: BlockBlob
content-disposition: attachment; filename=randexp.min.js
x-ms-server-encrypted: true
via: 1.1 varnish, 1.1 varnish
fastly-restarts: 1
accept-ranges: bytes
date: Thu, 30 Jan 2025 00:30:50 GMT
age: 4611
x-served-by: cache-iad-kiad7000045-IAD, cache-hel1410030-HEL
x-cache: HIT, HIT
x-cache-hits: 11369, 1
x-timer: S1738197050.756987,VS0,VE1
content-length: 10245
X-Firefox-Spdy: h2
|
|
| ok4static.oktacdn.com/assets/loginpage/css/loginpage-theme.e0d37a504604ef874bad26435d62011f.css | 143.204.55.81 | 200 OK | 10 kB |
URL GET HTTP/2ok4static.oktacdn.com/assets/loginpage/css/loginpage-theme.e0d37a504604ef874bad26435d62011f.css IP 143.204.55.81:443
Requested byhttps://rgo.borouseburba.ru/daf83/ CertificateIssuerDigiCert Inc Subject*.oktacdn.com Fingerprint3E:D7:C7:A6:35:70:74:E4:BF:45:2E:A1:D5:A3:25:88:24:76:B3:B5 ValidityMon, 02 Dec 2024 00:00:00 GMT - Fri, 02 Jan 2026 23:59:59 GMT
File typeASCII text, with very long lines (10450) Hashe0d37a504604ef874bad26435d62011f 4301f0d2b729ae22adece657d79eccaa25f429b1 c39ff65e2a102e644eb0bf2e31d2bad3d18f7afb25b3b9ba7a4d46263a711179
GET /assets/loginpage/css/loginpage-theme.e0d37a504604ef874bad26435d62011f.css HTTP/1.1
Host: ok4static.oktacdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rgo.borouseburba.ru/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css
date: Fri, 10 Jan 2025 02:18:42 GMT
server: nginx
last-modified: Thu, 14 Mar 2024 00:03:58 GMT
etag: W/"e0d37a504604ef874bad26435d62011f"
x-amz-meta-sha1sum: 4301f0d2b729ae22adece657d79eccaa25f429b1
expires: Sat, 10 Jan 2026 02:18:42 GMT
cache-control: max-age=31536000, public,max-age=31536000,s-maxage=1814400
strict-transport-security: max-age=315360000; includeSubDomains
access-control-allow-origin: *
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 76c917e0bb0ba45eb834d25d76ee125e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: P6gJblMci0AnRowR3UAAauUpTJvblR8yXqnok9xmITdvjIJ5g-H2Qw==
age: 1721527
X-Firefox-Spdy: h2
|
|
| rgo.borouseburba.ru/eeiotfamiqhxkomjqotrridqvfuzhpxmjdxbbfdq1ljz1h9tqedwnd?RVOVPYGRZFEGLMBZKWAA | 104.21.96.1 | 200 OK | 141 kB |
URL GET HTTP/3rgo.borouseburba.ru/eeiotfamiqhxkomjqotrridqvfuzhpxmjdxbbfdq1ljz1h9tqedwnd?RVOVPYGRZFEGLMBZKWAA IP 104.21.96.1:443
Requested byhttps://rgo.borouseburba.ru/daf83/ CertificateIssuerGoogle Trust Services Subjectborouseburba.ru Fingerprint0D:4D:20:3B:FD:5F:AD:A4:EF:BF:6D:AA:59:54:5F:AB:82:53:C8:63 ValidityWed, 15 Jan 2025 00:24:29 GMT - Tue, 15 Apr 2025 01:23:13 GMT
File typeHTML document, ASCII text, with very long lines (52489), with CRLF line terminators Size141 kB (141064 bytes) Hash65f8719af2fbe4b04ce4c940b4da4b3e 0de75615de850b7e8fbe13ac92e4175fe263da24 0bc874e36b3de2b1b0edec419afc067674addee8a3854343f468f3fb07ba4de4
GET /eeiotfamiqhxkomjqotrridqvfuzhpxmjdxbbfdq1ljz1h9tqedwnd?RVOVPYGRZFEGLMBZKWAA HTTP/1.1
Host: rgo.borouseburba.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
DNT: 1
Connection: keep-alive
Referer: https://rgo.borouseburba.ru/daf83/
Cookie: XSRF-TOKEN=eyJpdiI6IlYyS3VNK1NWSXVMY3QvczlQNm9zNGc9PSIsInZhbHVlIjoidEFQY1BJaDZzL2s3eDNMR0FiUithTFlub2I1VnArOCtERndkaTNlREU4M1FQY05yQzlqT004T014WUZQajNjRjVubGw0RjRhUWROZ0loeW55SFpaczRyTmIrQnEzT0l1aGhpQ2ZZYXlxSnNtVXdUTGVLYWdlZjVmcVorbTZsYWoiLCJtYWMiOiI1YWE1ZmMyZmIxYmVmMTM4NWI1YmE3MjUxZWZhMTM1Y2MwN2MxMzNlYzYwYmQzZjk0ZDY5YzA0ZWU5Y2M3YzM0IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkZRajRHVHRGUmRveS9iZG13aWc4T3c9PSIsInZhbHVlIjoiS1ZjYjlNbThnSnNubXZnL1BEdHB6cWt1UnY3NGV3dS9lTXFVY05qZnNrLzJjWDdLcnA2SWF4RWVhMEpTMmkxTEQ1ZVg5MWV3VFVJeVBseWpHeU1Ra0k4OW5NMEJtNUtjRzFCVVVKajBqbGN5Q210bXVEdkZXUXBXSHlEZHhUa1giLCJtYWMiOiJmYWRjOWYwMTRlNWY4ZDUwMTllODFmMDc1ZTJhMWU4NWI0MDA2MGM2MjI5YmMyNjkwZjY0Y2E1ZmNhZWRiYmU5IiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 30 Jan 2025 00:30:49 GMT
content-type: text/html; charset=UTF-8
cf-ray: 909d5b04386a56c6-OSL
server: cloudflare
cache-control: no-cache, private
cf-cache-status: DYNAMIC
vary: accept-encoding
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=JfzbWfLzm7HqxxblwzgdJTciQQWqNvZwMtCk4wVhq5TUkkvFi3rTC72QQ3tUqW%2BLIiCisKvaONCnZ%2FS5LYL05fINLUpUDafA6h8WaYaPwfcUGW14uzSbCPuJrOqSmw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=5798&min_rtt=5728&rtt_var=2198&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2823&recv_bytes=2162&delivery_rate=497206&cwnd=174&unsent_bytes=0&cid=a4f626897588d61b&ts=158&x=0"
set-cookie: XSRF-TOKEN=eyJpdiI6IlJkT1NTaCtDNitJWGdhNm85YWpVZkE9PSIsInZhbHVlIjoiTHBtK1NhczNJQjNRUDdUL05UL001Y1p3N0JiY1A3UjRubThPUVBRU0ZhRGxiNjVhZWwyQnhYT2pFYWlMdXhOVWdsN3Rrdk5pREhqNnViNTc2VHZRYnZISyt4V3Q1R1JrUVRXSDNPWDliRmFMTW1PUnRhVnZ4VjgyT2VvbUYvVUoiLCJtYWMiOiI2M2IzYTkwNGQzYjIzMzlkYjgwOTEzMmI2MDRiMjcxZjI1MzJiNzAyNDVkNmUzOGUxY2UxZjQzNDQ2MGNiZTUyIiwidGFnIjoiIn0%3D; expires=Thu, 30-Jan-2025 02:30:49 GMT; Max-Age=7200; path=/; secure; samesite=none
laravel_session=eyJpdiI6IjA3WmdIVWNsV1gybSs5RXN1Z0pMSHc9PSIsInZhbHVlIjoiWVQ1dFIxNW94cWtlQmFRMk9rVTFCSHB6RmJDV0NDdi9jaFZ4TTM5WTVXbHB1YzdSQWU4M1htblZYb2FnSVZvRVczM3NETWNRUnhNTnd0aEd3S2lUcEZBSzJxeE52Y0txaWQ0c0ZNVjdxU2xENHJMWkFlb0o3ZUdFRGxWQVNBREUiLCJtYWMiOiJmMDE2YzZjNzEzNzAxMmMyODFmOGY1MDA0NmVmMTg0NzE1ZjhiNmRhYTQ2MWZjMTY2YWE4ZmJlNzcxOTYzYWRiIiwidGFnIjoiIn0%3D; expires=Thu, 30-Jan-2025 02:30:49 GMT; Max-Age=7200; path=/; secure; httponly; samesite=none
content-encoding: br
|
|
| rgo.borouseburba.ru/daf83/ | 104.21.96.1 | 200 OK | 17 kB |
URL User Request GET HTTP/3rgo.borouseburba.ru/daf83/ IP 104.21.96.1:443
CertificateIssuerGoogle Trust Services Subjectborouseburba.ru Fingerprint0D:4D:20:3B:FD:5F:AD:A4:EF:BF:6D:AA:59:54:5F:AB:82:53:C8:63 ValidityWed, 15 Jan 2025 00:24:29 GMT - Tue, 15 Apr 2025 01:23:13 GMT
File typeHTML document, ASCII text, with very long lines (11769), with CRLF line terminators Hash536dbe38cca032ab639e0632ddbdf01e 8e771b2fcfc8f6b6abf3e723a55c28f13181bff9 ea958d013b1fb7f5b1b28b365d4b13691e8cddfbbc0a220aff121ab9031de49f
Analyzer | Verdict | Alert | urlquery | phishing | Phishing - Microsoft Outlook |
GET /daf83/ HTTP/1.1
Host: rgo.borouseburba.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: XSRF-TOKEN=eyJpdiI6IjZwQWVZZkorQW5kZW9jb09wQVhuVmc9PSIsInZhbHVlIjoidFVrUmtHN0pRZGNZRlNJRXI4RGluN3phckdvL0V4bTExNy9WTWpwVFZwZTBRV2NmeEZmcnRCUjhEL2RJZGFuVGViRktNWnJNMWpkWnhHakZrMzhnL2VzK2VMTGJDell4SnVVejV0UVZNaDhHVndDUmRmN0p6WjJTOTEyY0t5SVEiLCJtYWMiOiI3N2RkMDRkZWE5NWE3ZjI1YmRiYWI3MWI5NDNjMGM0NzQzYWUzMTRjZjVmNmRkNzJiNDYwOGQ4ZjQyM2EwMGQ1IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjBHcmhjanFaZEY5N1FTSk1IWDJYK2c9PSIsInZhbHVlIjoiY0hhMmFaOGtFZUVXWFlwckREbTF2RmMzZC96WExRWmNuTE1va0RlL0JrSkMyQlRzcHl4ZkFZY3FkRCtJYW9uN3M2NkJubnV5akdDbTVVbjVUNlJRMjJVRVhLWkNCb1FXYTIvWHR3aW05dlVEUzZzK3U0aFN5bGM5TmYyNStnemkiLCJtYWMiOiJlZGJlM2FmMDczNGNhNjY3ODhhMjM0MDhhNzlmNTVkZjc3MmRlNGRhZTk2MTdkMDY5YTBkNTk0MzM4ZjQ0NDQwIiwidGFnIjoiIn0%3D
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 30 Jan 2025 00:30:48 GMT
content-type: text/html; charset=UTF-8
cf-ray: 909d5b00886656c6-OSL
server: cloudflare
cache-control: no-cache, private
cf-cache-status: DYNAMIC
vary: accept-encoding
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=U%2B%2FQpL9ralxghUpEiq1IM6pnYUC6hWPE4qWZpSM8f6tlRxrlU1qaVLhKSLitW1y3pzg%2By2GdVbFd%2Bi6%2BIfPRD%2B01xpog0eLWx01NU3PmLf5wUhqNuqTHHQ3oEuPRcA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=10946&min_rtt=5574&rtt_var=5865&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2824&recv_bytes=2154&delivery_rate=510943&cwnd=251&unsent_bytes=0&cid=e315da00438b7db9&ts=126&x=0"
set-cookie: XSRF-TOKEN=eyJpdiI6IlBZcFV5TmU2RFllRHlYVGdBcTRVRkE9PSIsInZhbHVlIjoiSEoybnZsSk9VRnVJRTJPOUZBTkdKNTNxdGZlZ093T3owN0JDU2ZwS1k2bmd5eGl1SjhDRk1LTDVtYTZVR2xBanBQZGpFcXIrUGl2RzJLYW1DZ0FIcEJoOFhOaFprTGFyYWJMTkhhbU1YOVE2UFR0N3kzQWdlKytlYVFudHZ5aVQiLCJtYWMiOiJhMTA3Y2E3ZDBhMjhmZGFjYjUwMDI0MDc0Mzk0MDcyMjdlOGM5YmZiNmYzMmY5MWQ0NjAwMDMyODVjMmJkMWQ3IiwidGFnIjoiIn0%3D; expires=Thu, 30-Jan-2025 02:30:48 GMT; Max-Age=7200; path=/; secure; samesite=none
laravel_session=eyJpdiI6ImRBWnQxdDFxU1hmZjNRaEZoU1VNNFE9PSIsInZhbHVlIjoiOWQ5WDBDR05MWGJJZXcyUFFmWTJRNUFsclQyazVnR3cwcktHblhIOVd4TU9YMlRFQ1JsaGs1TGVDdU93ZHNXNGt0M2hRZytGSEEzWnZXOTF2OXBWUkdXb3Rkak5iM2ZDdHE2Nm0wVDJUNHhVZHVvbkExN0tNa25wZ0xCNE5KUEgiLCJtYWMiOiI0YjRiNmI4MjM1OGRiNzYxODczYjZiNTA5MDk3MThkMGEyNzFiMzgyYTczNGQzNmRiNWJmY2ZlNTI4MWUxYThmIiwidGFnIjoiIn0%3D; expires=Thu, 30-Jan-2025 02:30:48 GMT; Max-Age=7200; path=/; secure; httponly; samesite=none
content-encoding: br
|
|
| rgo.borouseburba.ru/yzOWBZ8HgPi5qB05ewmfX4mvt5Ho8Ps22l2prsaH3YwvK9vaSnBUFZUK90178 | 104.21.96.1 | 200 OK | 2.9 kB |
URL GET HTTP/3rgo.borouseburba.ru/yzOWBZ8HgPi5qB05ewmfX4mvt5Ho8Ps22l2prsaH3YwvK9vaSnBUFZUK90178 IP 104.21.96.1:443
Requested byhttps://rgo.borouseburba.ru/daf83/ CertificateIssuerGoogle Trust Services Subjectborouseburba.ru Fingerprint0D:4D:20:3B:FD:5F:AD:A4:EF:BF:6D:AA:59:54:5F:AB:82:53:C8:63 ValidityWed, 15 Jan 2025 00:24:29 GMT - Tue, 15 Apr 2025 01:23:13 GMT
File typeSVG Scalable Vector Graphics image Hashe924de0d471df54b6280f3dc8b187cb8 857f03226070b502a9e06b4249710ec10be4c9e9 24ce135a31ce83ac3d62471fcc0e1a82ce6f1533c993ee59ca4e110d5f2fae33
Analyzer | Verdict | Alert | urlquery | phishing | Phishing - Microsoft |
GET /yzOWBZ8HgPi5qB05ewmfX4mvt5Ho8Ps22l2prsaH3YwvK9vaSnBUFZUK90178 HTTP/1.1
Host: rgo.borouseburba.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rgo.borouseburba.ru/daf83/
Cookie: XSRF-TOKEN=eyJpdiI6IlJkT1NTaCtDNitJWGdhNm85YWpVZkE9PSIsInZhbHVlIjoiTHBtK1NhczNJQjNRUDdUL05UL001Y1p3N0JiY1A3UjRubThPUVBRU0ZhRGxiNjVhZWwyQnhYT2pFYWlMdXhOVWdsN3Rrdk5pREhqNnViNTc2VHZRYnZISyt4V3Q1R1JrUVRXSDNPWDliRmFMTW1PUnRhVnZ4VjgyT2VvbUYvVUoiLCJtYWMiOiI2M2IzYTkwNGQzYjIzMzlkYjgwOTEzMmI2MDRiMjcxZjI1MzJiNzAyNDVkNmUzOGUxY2UxZjQzNDQ2MGNiZTUyIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjA3WmdIVWNsV1gybSs5RXN1Z0pMSHc9PSIsInZhbHVlIjoiWVQ1dFIxNW94cWtlQmFRMk9rVTFCSHB6RmJDV0NDdi9jaFZ4TTM5WTVXbHB1YzdSQWU4M1htblZYb2FnSVZvRVczM3NETWNRUnhNTnd0aEd3S2lUcEZBSzJxeE52Y0txaWQ0c0ZNVjdxU2xENHJMWkFlb0o3ZUdFRGxWQVNBREUiLCJtYWMiOiJmMDE2YzZjNzEzNzAxMmMyODFmOGY1MDA0NmVmMTg0NzE1ZjhiNmRhYTQ2MWZjMTY2YWE4ZmJlNzcxOTYzYWRiIiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 30 Jan 2025 00:30:49 GMT
content-type: image/svg+xml
cf-ray: 909d5b06f87b56c6-OSL
server: cloudflare
content-disposition: inline; filename="yzOWBZ8HgPi5qB05ewmfX4mvt5Ho8Ps22l2prsaH3YwvK9vaSnBUFZUK90178"
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ZfPjeur%2F5HS5a8L0Zrv037T2kP2UsWQvMwAuUIdoVDclkkEW5uw1TpGa5zvgw4ZocqRtt%2BVwnVnwfvhqLC5FKGbXzlW02uePbqSRD0fori26%2FUKhb53UOGzTvamPJg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=4519&min_rtt=4494&rtt_var=1736&sent=5&recv=8&lost=0&retrans=0&sent_bytes=2823&recv_bytes=2154&delivery_rate=606344&cwnd=158&unsent_bytes=0&cid=fbcae44fbade9b5d&ts=92&x=0"
vary: accept-encoding
content-encoding: br
|
|
| rgo.borouseburba.ru/favicon.ico | 104.21.96.1 | 404 Not Found | 0 B |
URL GET HTTP/3rgo.borouseburba.ru/favicon.ico IP 104.21.96.1:443
Requested byhttps://rgo.borouseburba.ru/daf83/ CertificateIssuerGoogle Trust Services Subjectborouseburba.ru Fingerprint0D:4D:20:3B:FD:5F:AD:A4:EF:BF:6D:AA:59:54:5F:AB:82:53:C8:63 ValidityWed, 15 Jan 2025 00:24:29 GMT - Tue, 15 Apr 2025 01:23:13 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /favicon.ico HTTP/1.1
Host: rgo.borouseburba.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rgo.borouseburba.ru/daf83/
Cookie: XSRF-TOKEN=eyJpdiI6IlBZcFV5TmU2RFllRHlYVGdBcTRVRkE9PSIsInZhbHVlIjoiSEoybnZsSk9VRnVJRTJPOUZBTkdKNTNxdGZlZ093T3owN0JDU2ZwS1k2bmd5eGl1SjhDRk1LTDVtYTZVR2xBanBQZGpFcXIrUGl2RzJLYW1DZ0FIcEJoOFhOaFprTGFyYWJMTkhhbU1YOVE2UFR0N3kzQWdlKytlYVFudHZ5aVQiLCJtYWMiOiJhMTA3Y2E3ZDBhMjhmZGFjYjUwMDI0MDc0Mzk0MDcyMjdlOGM5YmZiNmYzMmY5MWQ0NjAwMDMyODVjMmJkMWQ3IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImRBWnQxdDFxU1hmZjNRaEZoU1VNNFE9PSIsInZhbHVlIjoiOWQ5WDBDR05MWGJJZXcyUFFmWTJRNUFsclQyazVnR3cwcktHblhIOVd4TU9YMlRFQ1JsaGs1TGVDdU93ZHNXNGt0M2hRZytGSEEzWnZXOTF2OXBWUkdXb3Rkak5iM2ZDdHE2Nm0wVDJUNHhVZHVvbkExN0tNa25wZ0xCNE5KUEgiLCJtYWMiOiI0YjRiNmI4MjM1OGRiNzYxODczYjZiNTA5MDk3MThkMGEyNzFiMzgyYTczNGQzNmRiNWJmY2ZlNTI4MWUxYThmIiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 404 Not Found
date: Thu, 30 Jan 2025 00:30:49 GMT
content-type: text/html; charset=UTF-8
cf-ray: 909d5b03186856c6-OSL
server: cloudflare
cache-control: max-age=14400
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=0OO0VXblfKbSLFCYNDJszzLiPKY2gOCHo4TYVYMYzORsioQRRy%2B%2Fw69XXijbTEMLUMDyg%2B%2FRKeghVMr0ye%2BQOUej69QZly1Ijv8TAJZ2hgNLbmf4h7rq0p1ZsBDTCg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=4891&min_rtt=4890&rtt_var=1837&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2823&recv_bytes=2104&delivery_rate=580632&cwnd=240&unsent_bytes=0&cid=130b9ff08169a1e4&ts=154&x=0"
cf-cache-status: EXPIRED
content-encoding: br
|
|
| rgo.borouseburba.ru/GDSherpa-regular.woff | 104.21.96.1 | 200 OK | 37 kB |
URL GET HTTP/3rgo.borouseburba.ru/GDSherpa-regular.woff IP 104.21.96.1:443
Requested byhttps://rgo.borouseburba.ru/daf83/ CertificateIssuerGoogle Trust Services Subjectborouseburba.ru Fingerprint0D:4D:20:3B:FD:5F:AD:A4:EF:BF:6D:AA:59:54:5F:AB:82:53:C8:63 ValidityWed, 15 Jan 2025 00:24:29 GMT - Tue, 15 Apr 2025 01:23:13 GMT
File typeWeb Open Font Format, TrueType, length 36696, version 1.0 Hasha69e9ab8afdd7486ec0749c551051ff2 c34e6aa327b536fb48d1fe03577a47c7ee2231b8 fd78a1913db912221b8ead1e62fad47d1ff0a9fa6cd88d3b128a721ad91d2faf
Analyzer | Verdict | Alert | urlquery | phishing | Phishing - Microsoft |
GET /GDSherpa-regular.woff HTTP/1.1
Host: rgo.borouseburba.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://rgo.borouseburba.ru/daf83/
DNT: 1
Connection: keep-alive
Cookie: XSRF-TOKEN=eyJpdiI6IlJkT1NTaCtDNitJWGdhNm85YWpVZkE9PSIsInZhbHVlIjoiTHBtK1NhczNJQjNRUDdUL05UL001Y1p3N0JiY1A3UjRubThPUVBRU0ZhRGxiNjVhZWwyQnhYT2pFYWlMdXhOVWdsN3Rrdk5pREhqNnViNTc2VHZRYnZISyt4V3Q1R1JrUVRXSDNPWDliRmFMTW1PUnRhVnZ4VjgyT2VvbUYvVUoiLCJtYWMiOiI2M2IzYTkwNGQzYjIzMzlkYjgwOTEzMmI2MDRiMjcxZjI1MzJiNzAyNDVkNmUzOGUxY2UxZjQzNDQ2MGNiZTUyIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjA3WmdIVWNsV1gybSs5RXN1Z0pMSHc9PSIsInZhbHVlIjoiWVQ1dFIxNW94cWtlQmFRMk9rVTFCSHB6RmJDV0NDdi9jaFZ4TTM5WTVXbHB1YzdSQWU4M1htblZYb2FnSVZvRVczM3NETWNRUnhNTnd0aEd3S2lUcEZBSzJxeE52Y0txaWQ0c0ZNVjdxU2xENHJMWkFlb0o3ZUdFRGxWQVNBREUiLCJtYWMiOiJmMDE2YzZjNzEzNzAxMmMyODFmOGY1MDA0NmVmMTg0NzE1ZjhiNmRhYTQ2MWZjMTY2YWE4ZmJlNzcxOTYzYWRiIiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 30 Jan 2025 00:30:49 GMT
content-type: font/woff
content-length: 36696
server: cloudflare
content-disposition: inline; filename="GDSherpa-regular.woff"
cache-control: max-age=14400
last-modified: Thu, 30 Jan 2025 00:30:49 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=UBvIJll%2FnHN%2FPbqW1eewrW3NigLEZCxzZKWTx0gCe5nB0Oqe7KZv6OEjCtZwISt9Ybg6%2F8diDtOShRKuBQ2gk21grAL2tTjmfqsbk7mFf%2FEz%2BdHr0TOzk%2FShSAYX8Q%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=5181&min_rtt=5115&rtt_var=1965&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2823&recv_bytes=2186&delivery_rate=556793&cwnd=247&unsent_bytes=0&cid=f63a46097efbf45a&ts=201&x=0"
cf-cache-status: EXPIRED
accept-ranges: bytes
cf-ray: 909d5b06e87556c6-OSL
|
|