| za.zalo.me/v3/verifyv2/pc?token=rpaeyjfpL0XY2F3BtHzNRs4A-hhQ5q5sPXtbk3O&continue=dengetemizlik%E3%80%82com/pl/jct/Y2Fyb2x5bi5yZW56aW5AZmFuZHVlbC5jb20=$ |  49.213.95.247 | | 0 B |
URL za.zalo.me/v3/verifyv2/pc?token=rpaeyjfpL0XY2F3BtHzNRs4A-hhQ5q5sPXtbk3O&continue=dengetemizlik%E3%80%82com/pl/jct/Y2Fyb2x5bi5yZW56aW5AZmFuZHVlbC5jb20=$ IP49.213.95.247:0 ASN#38244 VNG Corporation
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /v3/verifyv2/pc?token=rpaeyjfpL0XY2F3BtHzNRs4A-hhQ5q5sPXtbk3O&continue=dengetemizlik%E3%80%82com/pl/jct/Y2Fyb2x5bi5yZW56aW5AZmFuZHVlbC5jb20=$ HTTP/1.1
Host: za.zalo.me
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
date: Thu, 02 May 2024 09:53:48 GMT
content-length: 0
location: http://dengetemizlik%E3%80%82com/pl/jct/Y2Fyb2x5bi5yZW56aW5AZmFuZHVlbC5jb20=$
server: za-ngx-srv
strict-transport-security: max-age=86400; includeSubdomains;
X-Firefox-Spdy: h2
|
|
| dengetemizlik.com/pl/jct/Y2Fyb2x5bi5yZW56aW5AZmFuZHVlbC5jb20=$ |  78.142.209.32 | | 0 B |
URL dengetemizlik.com/pl/jct/Y2Fyb2x5bi5yZW56aW5AZmFuZHVlbC5jb20=$ IP78.142.209.32:0 ASN#209853 Veridyen Bilisim Teknolojileri Sanayi ve Ticaret Limited Sirketi
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /pl/jct/Y2Fyb2x5bi5yZW56aW5AZmFuZHVlbC5jb20=$ HTTP/1.1
Host: dengetemizlik.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
refresh: 0;url=https://csc.shareonlinefilemcrosoftnline.ru/MY2Fyb2x5bi5yZW56aW5AZmFuZHVlbC5jb20=$
content-type: text/html; charset=UTF-8
content-length: 0
date: Thu, 02 May 2024 09:53:49 GMT
|
|
| csc.shareonlinefilemcrosoftnline.ru/MY2Fyb2x5bi5yZW56aW5AZmFuZHVlbC5jb20=$ |  104.21.68.177 | 302 Found | 6.8 kB |
URL User Request GET HTTP/3csc.shareonlinefilemcrosoftnline.ru/MY2Fyb2x5bi5yZW56aW5AZmFuZHVlbC5jb20=$ IP104.21.68.177:443
CertificateIssuerGoogle Trust Services LLC Subjectshareonlinefilemcrosoftnline.ru Fingerprint93:BB:D9:1F:EF:62:B0:FC:E3:30:34:4E:EF:D6:D0:93:6F:00:7F:35 ValiditySun, 17 Mar 2024 02:00:08 GMT - Sat, 15 Jun 2024 02:00:07 GMT
File typeHTML document, ASCII text, with CRLF line terminators Hash575a3dc6a80b9cde39d3d2b51fc4a5e7 f76302814dd55a74ebda835c18834d2b9d1a04a8 734a677ccfe667d0cd78c797534b0ca4c0ce3d490ecc8c0ccd47a5c7377e04c1
GET /MY2Fyb2x5bi5yZW56aW5AZmFuZHVlbC5jb20=$ HTTP/1.1
Host: csc.shareonlinefilemcrosoftnline.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 02 May 2024 09:53:49 GMT
content-type: text/html; charset=UTF-8
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
set-cookie: PHPSESSID=b06acabd259a632526db2611b906b4db; path=/
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=JG7I1nttR7xcRHA%2BUM2fgnVOgztfluGussmFo0JzKTg%2BWyB6AVSwIyWqGIY%2FkjGh46GdxF55lEgoEIcoSoSEM0DQMFnm4bE%2FDE7q8SAVrita12FUWohetUc28MrcJknswci%2BdjYTlbnkSFH0rdcnBYI5zKLLZA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87d7205afdc656c0-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| challenges.cloudflare.com/turnstile/v0/api.js?render=explicit | 104.17.2.184 | | 0 B |
URL challenges.cloudflare.com/turnstile/v0/api.js?render=explicit IP104.17.2.184:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /turnstile/v0/api.js?render=explicit HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://csc.shareonlinefilemcrosoftnline.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
date: Thu, 02 May 2024 09:53:49 GMT
content-length: 0
access-control-allow-origin: *
cache-control: max-age=300, public
cross-origin-resource-policy: cross-origin
location: /turnstile/v0/g/d0ff3ebede6b/api.js
vary: Accept-Encoding
server: cloudflare
cf-ray: 87d7205ebfb35687-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| code.jquery.com/jquery-3.6.0.min.js |  151.101.66.137 | | 31 kB |
URL code.jquery.com/jquery-3.6.0.min.js IP151.101.66.137:0
File typeJavaScript source, ASCII text, with very long lines (65447) Hash8fb8fee4fcc3cc86ff6c724154c49c42 b82d238d4e31fdf618bae8ac11a6c812c03dd0d4 ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e
GET /jquery-3.6.0.min.js HTTP/1.1
Host: code.jquery.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://csc.shareonlinefilemcrosoftnline.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Fri, 18 Oct 1991 12:00:00 GMT
etag: W/"28feccc0-15d9d"
cache-control: public, max-age=31536000, stale-while-revalidate=604800
access-control-allow-origin: *
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Thu, 02 May 2024 09:53:49 GMT
age: 499811
x-served-by: cache-lga21931-LGA, cache-hel1410026-HEL
x-cache: HIT, HIT
x-cache-hits: 3, 367830
x-timer: S1714643630.942192,VS0,VE0
vary: Accept-Encoding
content-length: 30875
X-Firefox-Spdy: h2
|
|
| challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/cmg/1/GLhOioXg0bs57t4qPrORXFsL1%2BWig2mIKbgpVPMu7ZQ%3D | 104.17.2.184 | | 61 B |
URL challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/cmg/1/GLhOioXg0bs57t4qPrORXFsL1%2BWig2mIKbgpVPMu7ZQ%3D IP104.17.2.184:0
File typePNG image data, 2 x 2, 8-bit/color RGB, non-interlaced Hash9246cca8fc3c00f50035f28e9f6b7f7d 3aa538440f70873b574f40cd793060f53ec17a5d c07d7d29e3c20fa6ca4c5d20663688d52bad13e129ad82ce06b80eb187d9dc84
GET /cdn-cgi/challenge-platform/h/g/cmg/1/GLhOioXg0bs57t4qPrORXFsL1%2BWig2mIKbgpVPMu7ZQ%3D HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/o1d6e/0x4AAAAAAAYWMpwK2BgolPlh/auto/normal
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 02 May 2024 09:53:50 GMT
content-type: image/png
content-length: 61
cache-control: max-age=2629800, public
server: cloudflare
cf-ray: 87d72060f9bd5690-OSL
alt-svc: h3=":443"; ma=86400
|
|
| challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/pat/87d7206048cf5690/1714643630598/9f1365549d684bbc3654f79298c057e1671da1464f5845741c52f04c74068187/OgU1IHCcK8PqxEI | 104.17.2.184 | | 1 B |
URL challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/pat/87d7206048cf5690/1714643630598/9f1365549d684bbc3654f79298c057e1671da1464f5845741c52f04c74068187/OgU1IHCcK8PqxEI IP104.17.2.184:0
File typevery short file (no magic) Hashff44570aca8241914870afbc310cdb85 58668e7669fd564d99db5d581fcdb6a5618440b5 6da43b944e494e885e69af021f93c6d9331c78aa228084711429160a5bbd15b5
GET /cdn-cgi/challenge-platform/h/g/pat/87d7206048cf5690/1714643630598/9f1365549d684bbc3654f79298c057e1671da1464f5845741c52f04c74068187/OgU1IHCcK8PqxEI HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/o1d6e/0x4AAAAAAAYWMpwK2BgolPlh/auto/normal
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 401 Unauthorized
date: Thu, 02 May 2024 09:53:51 GMT
content-type: text/plain; charset=UTF-8
content-length: 1
www-authenticate: PrivateToken challenge="AAIAGXBhdC1pc3N1ZXIuY2xvdWRmbGFyZS5jb20gnxNlVJ1oS7w2VPeSmMBX4WcdoUZPWEV0HFLwTHQGgYcAGWNoYWxsZW5nZXMuY2xvdWRmbGFyZS5jb20=", token-key="MIIBUjA9BgkqhkiG9w0BAQowMKANMAsGCWCGSAFlAwQCAqEaMBgGCSqGSIb3DQEBCDALBglghkgBZQMEAgKiAwIBMAOCAQ8AMIIBCgKCAQEAycESnW8nWijopFBbXs0ShsFXencIiaM4x8DmoYUMDVIj9LKs0W82Vt7SxGoLjV854ZLsONjPcD9gaNsV1U7ial-U1eHrh6bc6pi2_dUVK8NsyLnCLOtvOiP0SY8vabqRR4dPd6S61Y-diDWwToPoCSioJqJhohK4pCLZ5_YF-5VfEFiyMTtIeFQadCwQWCTWWHJgK8wlIzn3e6mBeQZJ1VsOf21BzIlCKUydJy4Pf1ah0N7KjgN2pp4S9j2sSUl0ZbfnPznB7zO130ijqjcDO7wydsvznYw_ApvEdn5mKTlOFBQM1jktH72KBkAGAS-M4Zko5MazCXVbKxK3oLAhkwIDAQAB", max-age=20, PrivateToken challenge="AAIALHBwLWlzc3Vlci1wcm9kdWN0aW9uLnJlc2VhcmNoLmNsb3VkZmxhcmUuY29tIJ8TZVSdaEu8NlT3kpjAV-FnHaFGT1hFdBxS8Ex0BoGHABljaGFsbGVuZ2VzLmNsb3VkZmxhcmUuY29t", token-key="MIIBUjA9BgkqhkiG9w0BAQowMKANMAsGCWCGSAFlAwQCAqEaMBgGCSqGSIb3DQEBCDALBglghkgBZQMEAgKiAwIBMAOCAQ8AMIIBCgKCAQEAi_Bv1vvWWnyuOfVJgRV-AQLxEJECUUmMRrMnYz-gJA-oMd79ajvP3atoTZqB_EsZIq7SMmpbCRFhPolqzIrtXh7AF1Q-ZWY2RoRVRgKr7d6iJMZ49iZUmbz837eqBZJrEMuXftZmY35str5sb0GjzklF8z_hcQJC9vancYXncsYoiMDaROW0tLwSQA9BGfbmA6GlbVj4XH8DH19cKifxmO6RlIPPKlL1KmZbrRakkpuqvJO2-x1Zc2S5GCpponuvQTqJQH8Ud9loZLI75e-Xa9KAUNtBTM0t9WSEsv8cSJLV1BPBVTy1lOnwghofw4fqmlYv6CXClzAUqWouSTJ7uwIDAQAB", max-age=20
server: cloudflare
cf-ray: 87d7206b785e5690-OSL
alt-svc: h3=":443"; ma=86400
|
|
| challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/i/87d7206048cf5690/1714643630601/DmDPLS-svxXrApv | 104.17.2.184 | | 61 B |
URL challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/i/87d7206048cf5690/1714643630601/DmDPLS-svxXrApv IP104.17.2.184:0
File typePNG image data, 67 x 26, 8-bit/color RGB, non-interlaced Hash084d3b58244cb81f8950a285e8be8a50 fdb94aea2b76123989a1f35957829445bd2d4774 d605835be0661870f48d9a52244eec943ff1c3d38f1c51274d5eee39033546ab
GET /cdn-cgi/challenge-platform/h/g/i/87d7206048cf5690/1714643630601/DmDPLS-svxXrApv HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/o1d6e/0x4AAAAAAAYWMpwK2BgolPlh/auto/normal
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 02 May 2024 09:53:52 GMT
content-type: image/png
content-length: 61
server: cloudflare
cf-ray: 87d720702dd35690-OSL
alt-svc: h3=":443"; ma=86400
|
|
| challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/cmg/1/GLhOioXg0bs57t4qPrORXFsL1%2BWig2mIKbgpVPMu7ZQ%3D | 104.17.2.184 | | 61 B |
URL challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/cmg/1/GLhOioXg0bs57t4qPrORXFsL1%2BWig2mIKbgpVPMu7ZQ%3D IP104.17.2.184:0
File typePNG image data, 2 x 2, 8-bit/color RGB, non-interlaced Hash9246cca8fc3c00f50035f28e9f6b7f7d 3aa538440f70873b574f40cd793060f53ec17a5d c07d7d29e3c20fa6ca4c5d20663688d52bad13e129ad82ce06b80eb187d9dc84
GET /cdn-cgi/challenge-platform/h/g/cmg/1/GLhOioXg0bs57t4qPrORXFsL1%2BWig2mIKbgpVPMu7ZQ%3D HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv1/42BoqtBW7FWf6hi/o1d6e/0x4AAAAAAAYWMpwK2BgolPlh/auto/normal
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 02 May 2024 09:54:00 GMT
content-type: image/png
content-length: 61
cache-control: max-age=2629800, public
server: cloudflare
cf-ray: 87d720a14b8a5690-OSL
alt-svc: h3=":443"; ma=86400
|
|
| challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv1/42BoqtBW7FWf6hi/o1d6e/0x4AAAAAAAYWMpwK2BgolPlh/auto/normal | 104.17.2.184 | | 26 kB |
URL challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv1/42BoqtBW7FWf6hi/o1d6e/0x4AAAAAAAYWMpwK2BgolPlh/auto/normal IP104.17.2.184:0
File typeHTML document, ASCII text, with very long lines (41702) Hash456ad6ea8aaff5011c9f7ea8e9914a17 f36499150c7ce3e8625806a7b0b279eb87d109e6 6f70057ccfdd01f27311adb507e9f75f15e81e4bb2fecd460bc52253725cb431
GET /cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv1/42BoqtBW7FWf6hi/o1d6e/0x4AAAAAAAYWMpwK2BgolPlh/auto/normal HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://csc.shareonlinefilemcrosoftnline.ru/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Sec-Fetch-User: ?1
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 02 May 2024 09:54:00 GMT
content-type: text/html; charset=UTF-8
cross-origin-opener-policy: same-origin
cross-origin-resource-policy: cross-origin
referrer-policy: same-origin
origin-agent-cluster: ?1
cross-origin-embedder-policy: require-corp
document-policy: js-profiling
permissions-policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()
accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
critical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
content-security-policy: frame-src https://challenges.cloudflare.com/ blob:; base-uri 'self'
cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
vary: accept-encoding
server: cloudflare
cf-ray: 87d720a0eb2e5690-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/i/87d720a0eb2e5690/1714643640827/BoBGFl_DA132oSW | 104.17.2.184 | | 61 B |
URL challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/i/87d720a0eb2e5690/1714643640827/BoBGFl_DA132oSW IP104.17.2.184:0
File typePNG image data, 74 x 93, 8-bit/color RGB, non-interlaced Hashbd54472c8a33bc6ea06e9773a10f8a5f 241d651fa736190954e906cd85eb5f36081f5323 f44a4cd4820673cb56e98073e48c229b26cdd67a7681c9008f23719594e8ea8d
GET /cdn-cgi/challenge-platform/h/g/i/87d720a0eb2e5690/1714643640827/BoBGFl_DA132oSW HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv1/42BoqtBW7FWf6hi/o1d6e/0x4AAAAAAAYWMpwK2BgolPlh/auto/normal
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 02 May 2024 09:54:03 GMT
content-type: image/png
content-length: 61
server: cloudflare
cf-ray: 87d720b17d175690-OSL
alt-svc: h3=":443"; ma=86400
|
|
| csc.shareonlinefilemcrosoftnline.ru/cdn-cgi/challenge-platform/h/g/rc/87d720a0eb2e5690 | 104.21.68.177 | | 21 B |
URL csc.shareonlinefilemcrosoftnline.ru/cdn-cgi/challenge-platform/h/g/rc/87d720a0eb2e5690 IP104.21.68.177:0
CertificateIssuerGoogle Trust Services LLC Subjectshareonlinefilemcrosoftnline.ru Fingerprint93:BB:D9:1F:EF:62:B0:FC:E3:30:34:4E:EF:D6:D0:93:6F:00:7F:35 ValiditySun, 17 Mar 2024 02:00:08 GMT - Sat, 15 Jun 2024 02:00:07 GMT
Hash018598ff9794435b440d1bbf293cc10f 9129b0ca1a4febdf97636946a1fe7be8abf11890 898a24300baa285e173627eb7801c18db52748bb2119f56a71dcce0a5f8c8063
POST /cdn-cgi/challenge-platform/h/g/rc/87d720a0eb2e5690 HTTP/1.1
Host: csc.shareonlinefilemcrosoftnline.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://csc.shareonlinefilemcrosoftnline.ru/MY2Fyb2x5bi5yZW56aW5AZmFuZHVlbC5jb20=$
Content-Type: application/json
Content-Length: 618
Origin: https://csc.shareonlinefilemcrosoftnline.ru
DNT: 1
Connection: keep-alive
Cookie: PHPSESSID=b06acabd259a632526db2611b906b4db
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 02 May 2024 09:54:08 GMT
content-type: application/json
content-length: 21
cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
set-cookie: cf_clearance=QPx.weJSCQvLENxAI35R4KlL.WNBEqErhsQCBZ.5Bm4-1714643648-1.0.1.1-6EUdmrFm6CiMt0rCqV4ETIQI_ep0VcGPpCeS10ewvVFgxCjZwxNg2E05nscm02mrPUpX8.ID8huUBn6263B3yw; path=/; expires=Fri, 02-May-25 09:54:08 GMT; domain=.shareonlinefilemcrosoftnline.ru; HttpOnly; Secure; SameSite=None
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=mU7Rmz1eHYcFswmphf5WdKUvvbyV49cUwbVaS4kAS7fbZb6uop0aaDg2Bgz5hpPycRnng0aC3GGDjRn6H24BSHTt9XIRsurI56NJ6qD8hDfzhR1ibvqoCWChc424n%2Bc1BsvVFSYgBFQ1OZNmM%2FbXDie0fxCNbA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87d720d1d8d7569f-OSL
alt-svc: h3=":443"; ma=86400
|
|
| csc.shareonlinefilemcrosoftnline.ru/beebb091955c06fa68b3eb8afc0bae51663362c0c6221PASbeebb091955c06fa68b3eb8afc0bae51663362c0c6222 | 104.21.68.177 | 200 OK | 5.5 kB |
URL User Request GET HTTP/3csc.shareonlinefilemcrosoftnline.ru/beebb091955c06fa68b3eb8afc0bae51663362c0c6221PASbeebb091955c06fa68b3eb8afc0bae51663362c0c6222 IP104.21.68.177:443
CertificateIssuerGoogle Trust Services LLC Subjectshareonlinefilemcrosoftnline.ru Fingerprint93:BB:D9:1F:EF:62:B0:FC:E3:30:34:4E:EF:D6:D0:93:6F:00:7F:35 ValiditySun, 17 Mar 2024 02:00:08 GMT - Sat, 15 Jun 2024 02:00:07 GMT
File typeHTML document, ASCII text, with very long lines (5541), with no line terminators Hashd808b31b9836ecbdd6f7afcb414278c6 c86c216df754aed263a6b570069bc5253c4631c7 70f1886bb44087ec52c1b45476035cfa81429e6bac7ca7e7c3f931097298a6d0
GET /beebb091955c06fa68b3eb8afc0bae51663362c0c6221PASbeebb091955c06fa68b3eb8afc0bae51663362c0c6222 HTTP/1.1
Host: csc.shareonlinefilemcrosoftnline.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: PHPSESSID=b06acabd259a632526db2611b906b4db; cf_clearance=QPx.weJSCQvLENxAI35R4KlL.WNBEqErhsQCBZ.5Bm4-1714643648-1.0.1.1-6EUdmrFm6CiMt0rCqV4ETIQI_ep0VcGPpCeS10ewvVFgxCjZwxNg2E05nscm02mrPUpX8.ID8huUBn6263B3yw
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 02 May 2024 09:54:08 GMT
content-type: text/html; charset=UTF-8
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Uk3Otvh4gdO8ZxCXS%2BEy%2FgbwCPKZ%2FBziM9bWQ15l6yHEvYqqQ8MO1zxlymCgipHke0KE2O2VW76zJJsMILPBdkNEiYeHBJcK35d70DxWRTspQod7KlaXpb4EhdiFARILjBKWzrFrg9ABSQq3BuAy6NjtV7%2BnqA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87d720d54da5569f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| csc.shareonlinefilemcrosoftnline.ru/2 | 104.21.68.177 | 200 OK | 38 kB |
URL GET HTTP/3csc.shareonlinefilemcrosoftnline.ru/2 IP104.21.68.177:443
Requested byhttps://csc.shareonlinefilemcrosoftnline.ru/beebb091955c06fa68b3eb8afc0bae51663362c0c6221PASbeebb091955c06fa68b3eb8afc0bae51663362c0c6222 CertificateIssuerGoogle Trust Services LLC Subjectshareonlinefilemcrosoftnline.ru Fingerprint93:BB:D9:1F:EF:62:B0:FC:E3:30:34:4E:EF:D6:D0:93:6F:00:7F:35 ValiditySun, 17 Mar 2024 02:00:08 GMT - Sat, 15 Jun 2024 02:00:07 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /2 HTTP/1.1
Host: csc.shareonlinefilemcrosoftnline.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://csc.shareonlinefilemcrosoftnline.ru/beebb091955c06fa68b3eb8afc0bae51663362c0c6221PASbeebb091955c06fa68b3eb8afc0bae51663362c0c6222
Cookie: PHPSESSID=b06acabd259a632526db2611b906b4db; cf_clearance=QPx.weJSCQvLENxAI35R4KlL.WNBEqErhsQCBZ.5Bm4-1714643648-1.0.1.1-6EUdmrFm6CiMt0rCqV4ETIQI_ep0VcGPpCeS10ewvVFgxCjZwxNg2E05nscm02mrPUpX8.ID8huUBn6263B3yw
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 02 May 2024 09:54:09 GMT
content-type: text/html; charset=UTF-8
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=lQatcKqSbN9sTa5P1u4dUSYURn5u5dvEHwmSXB2fjcc%2FCeV7PQSeOQNJtEW6Osa%2FFTlbGfWLzcGRZTSurhRZX9YUn2lEXpY3UdiT1NQtY4da29GjMZmoXxJJ36sdp2Ff2Eex2n%2F7WKa1z6iRH9aoR4MNA%2FFmMQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87d720d73faa569f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| csc.shareonlinefilemcrosoftnline.ru/jq/0c3d60d996bd4fc9a7062bd447c8eedf663362c0d16c5 | 104.21.68.177 | 200 OK | 86 kB |
URL GET HTTP/3csc.shareonlinefilemcrosoftnline.ru/jq/0c3d60d996bd4fc9a7062bd447c8eedf663362c0d16c5 IP104.21.68.177:443
Requested byhttps://csc.shareonlinefilemcrosoftnline.ru/beebb091955c06fa68b3eb8afc0bae51663362c0c6221PASbeebb091955c06fa68b3eb8afc0bae51663362c0c6222 CertificateIssuerGoogle Trust Services LLC Subjectshareonlinefilemcrosoftnline.ru Fingerprint93:BB:D9:1F:EF:62:B0:FC:E3:30:34:4E:EF:D6:D0:93:6F:00:7F:35 ValiditySun, 17 Mar 2024 02:00:08 GMT - Sat, 15 Jun 2024 02:00:07 GMT
File typeJavaScript source, ASCII text, with very long lines (32065) Hash2f6b11a7e914718e0290410e85366fe9 69bb69e25ca7d5ef0935317584e6153f3fd9a88c 05b85d96f41fff14d8f608dad03ab71e2c1017c2da0914d7c59291bad7a54f8e
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Microsoft |
GET /jq/0c3d60d996bd4fc9a7062bd447c8eedf663362c0d16c5 HTTP/1.1
Host: csc.shareonlinefilemcrosoftnline.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://csc.shareonlinefilemcrosoftnline.ru/beebb091955c06fa68b3eb8afc0bae51663362c0c6221PASbeebb091955c06fa68b3eb8afc0bae51663362c0c6222
Cookie: PHPSESSID=b06acabd259a632526db2611b906b4db; cf_clearance=QPx.weJSCQvLENxAI35R4KlL.WNBEqErhsQCBZ.5Bm4-1714643648-1.0.1.1-6EUdmrFm6CiMt0rCqV4ETIQI_ep0VcGPpCeS10ewvVFgxCjZwxNg2E05nscm02mrPUpX8.ID8huUBn6263B3yw
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 02 May 2024 09:54:08 GMT
content-type: text/javascript
last-modified: Wed, 01 May 2024 19:51:23 GMT
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=z38rKx7dM3JqJVZBbBl1rjD%2F4ms8pF0mrN6t6bx9T%2Fk0EFJdEsycjrYlCGNIoj3luWwvqRaGwQFC3XP%2BW9NU4jQzDaKx%2Bpc5qPcEzt%2BjxHLc2uQ6o6lbVEa7m3U82IN2MxuOqKmjzpQ4DSLlQTvDm0hpnNoAgw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87d720d5ee4d569f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| csc.shareonlinefilemcrosoftnline.ru/ic/0c3d60d996bd4fc9a7062bd447c8eedf663362c1296f6 | 104.21.68.177 | 200 OK | 17 kB |
URL GET HTTP/3csc.shareonlinefilemcrosoftnline.ru/ic/0c3d60d996bd4fc9a7062bd447c8eedf663362c1296f6 IP104.21.68.177:443
Requested byhttps://csc.shareonlinefilemcrosoftnline.ru/beebb091955c06fa68b3eb8afc0bae51663362c0c6221PASbeebb091955c06fa68b3eb8afc0bae51663362c0c6222 CertificateIssuerGoogle Trust Services LLC Subjectshareonlinefilemcrosoftnline.ru Fingerprint93:BB:D9:1F:EF:62:B0:FC:E3:30:34:4E:EF:D6:D0:93:6F:00:7F:35 ValiditySun, 17 Mar 2024 02:00:08 GMT - Sat, 15 Jun 2024 02:00:07 GMT
File typeMS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors Hash12e3dac858061d088023b2bd48e2fa96 e08ce1a144eceae0c3c2ea7a9d6fbc5658f24ce5 90cdaf487716184e4034000935c605d1633926d348116d198f355a98b8c6cd21
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Microsoft |
GET /ic/0c3d60d996bd4fc9a7062bd447c8eedf663362c1296f6 HTTP/1.1
Host: csc.shareonlinefilemcrosoftnline.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://csc.shareonlinefilemcrosoftnline.ru/beebb091955c06fa68b3eb8afc0bae51663362c0c6221PASbeebb091955c06fa68b3eb8afc0bae51663362c0c6222
Cookie: PHPSESSID=b06acabd259a632526db2611b906b4db; cf_clearance=QPx.weJSCQvLENxAI35R4KlL.WNBEqErhsQCBZ.5Bm4-1714643648-1.0.1.1-6EUdmrFm6CiMt0rCqV4ETIQI_ep0VcGPpCeS10ewvVFgxCjZwxNg2E05nscm02mrPUpX8.ID8huUBn6263B3yw
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 02 May 2024 09:54:09 GMT
content-type: image/x-icon
last-modified: Wed, 01 May 2024 19:51:23 GMT
vary: Accept-Encoding
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=lrQZhH01FzeRg7Zh4jEEFt9J2F4%2FGaMpOjgskesu4DKJpPN9KtgneXVuuEuSNvA%2FNTlnkVrfdxSiuM4SpkQKIuOFU3vw9NW9mDUtFp3Pn%2FoiDEzxX3a7r3v8Hqc%2BCrPlR7Bhzg%2F0FbYWJBRWG9Yif9uiK%2Fo6JQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87d720d9f9e0569f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| csc.shareonlinefilemcrosoftnline.ru/ASSETS/img/LIMG-663362c1ceb20.css | 104.21.68.177 | 200 OK | 1.6 kB |
URL GET HTTP/3csc.shareonlinefilemcrosoftnline.ru/ASSETS/img/LIMG-663362c1ceb20.css IP104.21.68.177:443
Requested byhttps://csc.shareonlinefilemcrosoftnline.ru/beebb091955c06fa68b3eb8afc0bae51663362c0c6221PASbeebb091955c06fa68b3eb8afc0bae51663362c0c6222 CertificateIssuerGoogle Trust Services LLC Subjectshareonlinefilemcrosoftnline.ru Fingerprint93:BB:D9:1F:EF:62:B0:FC:E3:30:34:4E:EF:D6:D0:93:6F:00:7F:35 ValiditySun, 17 Mar 2024 02:00:08 GMT - Sat, 15 Jun 2024 02:00:07 GMT
File typePNG image data, 108 x 24, 8-bit colormap, non-interlaced Hashee236805d05e24861ce1b6b0e7d94b8d d46828cf9df268ddaf62facf15590a447116aeb8 175986272200fb72da9a598d30016bbda9ddcaa9e6e3f07eb94bc74196d4b805
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Microsoft |
GET /ASSETS/img/LIMG-663362c1ceb20.css HTTP/1.1
Host: csc.shareonlinefilemcrosoftnline.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: PHPSESSID=b06acabd259a632526db2611b906b4db; cf_clearance=QPx.weJSCQvLENxAI35R4KlL.WNBEqErhsQCBZ.5Bm4-1714643648-1.0.1.1-6EUdmrFm6CiMt0rCqV4ETIQI_ep0VcGPpCeS10ewvVFgxCjZwxNg2E05nscm02mrPUpX8.ID8huUBn6263B3yw
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 02 May 2024 09:54:09 GMT
content-type: image/png
last-modified: Wed, 01 May 2024 19:51:23 GMT
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ILRpa%2Bkhuh5pd5JVRm2tMT4EEb96MDVD%2FyrdI1nvc4Y4Jn0REEiNTPJqWaCJYdx74ZtemepocepVy3X%2BvsfhbyQIh4ChBzgznCrQNRnEPhYK1fR%2FB44cDNWJPxqDyqSCqGbLUBERLGZo0hpfyxmvwjf42U%2BtaA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87d720dbbb9b569f-OSL
alt-svc: h3=":443"; ma=86400
|
|
| csc.shareonlinefilemcrosoftnline.ru/boot/0c3d60d996bd4fc9a7062bd447c8eedf663362c0d16c8 | 104.21.68.177 | 200 OK | 51 kB |
URL GET HTTP/3csc.shareonlinefilemcrosoftnline.ru/boot/0c3d60d996bd4fc9a7062bd447c8eedf663362c0d16c8 IP104.21.68.177:443
Requested byhttps://csc.shareonlinefilemcrosoftnline.ru/beebb091955c06fa68b3eb8afc0bae51663362c0c6221PASbeebb091955c06fa68b3eb8afc0bae51663362c0c6222 CertificateIssuerGoogle Trust Services LLC Subjectshareonlinefilemcrosoftnline.ru Fingerprint93:BB:D9:1F:EF:62:B0:FC:E3:30:34:4E:EF:D6:D0:93:6F:00:7F:35 ValiditySun, 17 Mar 2024 02:00:08 GMT - Sat, 15 Jun 2024 02:00:07 GMT
File typeJavaScript source, ASCII text, with very long lines (50758) Hash67176c242e1bdc20603c878dee836df3 27a71b00383d61ef3c489326b3564d698fc1227c 56c12a125b021d21a69e61d7190cefa168d6c28ce715265cea1b3b0112d169c4
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Microsoft |
GET /boot/0c3d60d996bd4fc9a7062bd447c8eedf663362c0d16c8 HTTP/1.1
Host: csc.shareonlinefilemcrosoftnline.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://csc.shareonlinefilemcrosoftnline.ru/beebb091955c06fa68b3eb8afc0bae51663362c0c6221PASbeebb091955c06fa68b3eb8afc0bae51663362c0c6222
Cookie: PHPSESSID=b06acabd259a632526db2611b906b4db; cf_clearance=QPx.weJSCQvLENxAI35R4KlL.WNBEqErhsQCBZ.5Bm4-1714643648-1.0.1.1-6EUdmrFm6CiMt0rCqV4ETIQI_ep0VcGPpCeS10ewvVFgxCjZwxNg2E05nscm02mrPUpX8.ID8huUBn6263B3yw
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 02 May 2024 09:54:08 GMT
content-type: text/javascript
last-modified: Wed, 01 May 2024 19:51:23 GMT
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=CZL6nYjd00Iqp0rNOREyYVs2tL%2FEqGjzfnwfNOWSQWeZIj0TRRX2tNwh7iu9u1xjm4Mj2f5etQyx0lz5RrgcgXBwtV11u6gxcciA9QqP%2BE2HS3GvCmUcZMtfVFhaMNEufd5vL25mjg%2FFgFbUniB3mwRQ0eLisQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87d720d5ee51569f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| unpkg.com/axios/dist/axios.min.js | 104.17.248.203 | 302 Found | 42 kB |
URL GET HTTP/2unpkg.com/axios/dist/axios.min.js IP104.17.248.203:443
Requested byhttps://csc.shareonlinefilemcrosoftnline.ru/beebb091955c06fa68b3eb8afc0bae51663362c0c6221PASbeebb091955c06fa68b3eb8afc0bae51663362c0c6222 CertificateIssuerGoogle Trust Services LLC Subjectunpkg.com Fingerprint2E:F1:F6:31:28:EC:29:20:41:F4:58:4B:B1:CF:51:16:77:7E:BF:E3 ValidityMon, 01 Apr 2024 02:40:24 GMT - Sun, 30 Jun 2024 02:40:23 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /axios/dist/axios.min.js HTTP/1.1
Host: unpkg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://csc.shareonlinefilemcrosoftnline.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
date: Thu, 02 May 2024 09:54:08 GMT
content-type: text/plain; charset=utf-8
access-control-allow-origin: *
cache-control: public, s-maxage=600, max-age=60
location: /axios@1.6.8/dist/axios.min.js
vary: Accept, Accept-Encoding
content-encoding: br
via: 1.1 fly.io
fly-request-id: 01HWWBC41GEFSZX2JK0MQ541CA-arn
cf-cache-status: HIT
age: 241
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 87d720d6086856c9-OSL
X-Firefox-Spdy: h2
|
|
| csc.shareonlinefilemcrosoftnline.ru/o/0c3d60d996bd4fc9a7062bd447c8eedf663362c129721 | 104.21.68.177 | 200 OK | 3.7 kB |
URL GET HTTP/3csc.shareonlinefilemcrosoftnline.ru/o/0c3d60d996bd4fc9a7062bd447c8eedf663362c129721 IP104.21.68.177:443
Requested byhttps://csc.shareonlinefilemcrosoftnline.ru/beebb091955c06fa68b3eb8afc0bae51663362c0c6221PASbeebb091955c06fa68b3eb8afc0bae51663362c0c6222 CertificateIssuerGoogle Trust Services LLC Subjectshareonlinefilemcrosoftnline.ru Fingerprint93:BB:D9:1F:EF:62:B0:FC:E3:30:34:4E:EF:D6:D0:93:6F:00:7F:35 ValiditySun, 17 Mar 2024 02:00:08 GMT - Sat, 15 Jun 2024 02:00:07 GMT
File typeSVG Scalable Vector Graphics image Hashd633a913e6f3b1f45774b9874dfc85e0 5ba1344048578062c93cfddfdf8458477eaca476 c1fbfbd9a81fc4d9c9539a65bdfb4c6738926b8d4681b0346706196413e92714
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Microsoft |
GET /o/0c3d60d996bd4fc9a7062bd447c8eedf663362c129721 HTTP/1.1
Host: csc.shareonlinefilemcrosoftnline.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://csc.shareonlinefilemcrosoftnline.ru/beebb091955c06fa68b3eb8afc0bae51663362c0c6221PASbeebb091955c06fa68b3eb8afc0bae51663362c0c6222
Cookie: PHPSESSID=b06acabd259a632526db2611b906b4db; cf_clearance=QPx.weJSCQvLENxAI35R4KlL.WNBEqErhsQCBZ.5Bm4-1714643648-1.0.1.1-6EUdmrFm6CiMt0rCqV4ETIQI_ep0VcGPpCeS10ewvVFgxCjZwxNg2E05nscm02mrPUpX8.ID8huUBn6263B3yw
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 02 May 2024 09:54:09 GMT
content-type: image/svg+xml
last-modified: Wed, 01 May 2024 19:51:23 GMT
vary: Accept-Encoding
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=lo8mo0QCNDlUuTJpx0fmtOWS5puIg8DVY750wq71e8jdI7P%2BaDch%2FWN%2Bj5O%2FB%2FMJS1Li9PDicW6D8REaIBzoD8pj6mgazzWPsFd9Kz%2BS0u%2BeEOnT81MVCF4uaLWmAMg4DlnMhpprqpS3wNUsleUWTLupbvWa7A%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87d720d79810569f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| csc.shareonlinefilemcrosoftnline.ru/e/0c3d60d996bd4fc9a7062bd447c8eedf663362c129728 | 104.21.68.177 | 200 OK | 513 B |
URL GET HTTP/3csc.shareonlinefilemcrosoftnline.ru/e/0c3d60d996bd4fc9a7062bd447c8eedf663362c129728 IP104.21.68.177:443
Requested byhttps://csc.shareonlinefilemcrosoftnline.ru/beebb091955c06fa68b3eb8afc0bae51663362c0c6221PASbeebb091955c06fa68b3eb8afc0bae51663362c0c6222 CertificateIssuerGoogle Trust Services LLC Subjectshareonlinefilemcrosoftnline.ru Fingerprint93:BB:D9:1F:EF:62:B0:FC:E3:30:34:4E:EF:D6:D0:93:6F:00:7F:35 ValiditySun, 17 Mar 2024 02:00:08 GMT - Sat, 15 Jun 2024 02:00:07 GMT
File typeSVG Scalable Vector Graphics image Hashadc405f5fd089662209870ca5d2106f7 3a8b776df84bf251afc6ddd802cc5bbeddfb0e36 e7bacc97751689afaae192e103fe9851664365c57c7d783560860ad456db7e49
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Microsoft |
GET /e/0c3d60d996bd4fc9a7062bd447c8eedf663362c129728 HTTP/1.1
Host: csc.shareonlinefilemcrosoftnline.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://csc.shareonlinefilemcrosoftnline.ru/beebb091955c06fa68b3eb8afc0bae51663362c0c6221PASbeebb091955c06fa68b3eb8afc0bae51663362c0c6222
Cookie: PHPSESSID=b06acabd259a632526db2611b906b4db; cf_clearance=QPx.weJSCQvLENxAI35R4KlL.WNBEqErhsQCBZ.5Bm4-1714643648-1.0.1.1-6EUdmrFm6CiMt0rCqV4ETIQI_ep0VcGPpCeS10ewvVFgxCjZwxNg2E05nscm02mrPUpX8.ID8huUBn6263B3yw
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 02 May 2024 09:54:09 GMT
content-type: image/svg+xml
last-modified: Wed, 01 May 2024 19:51:23 GMT
vary: Accept-Encoding
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=1u%2FWNQNaIe4mEF%2FPL6EgE1M8%2FPBxjHypabca%2BMEu6br4tZ5zT6R9R6MpMBFEHJI8%2BRJnfG3x1jcUXISlVB28pjGO2M4I7J7pKQu9iAp2jFN3GGHyYYbB4xhpw4PTEDTZqXz56rRkFnpNPwghCAM44Nx4R3fvDg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87d720d79818569f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| csc.shareonlinefilemcrosoftnline.ru/APP-YG7X91/0c3d60d996bd4fc9a7062bd447c8eedf663362c1296fa | 104.21.68.177 | 200 OK | 105 kB |
URL GET HTTP/3csc.shareonlinefilemcrosoftnline.ru/APP-YG7X91/0c3d60d996bd4fc9a7062bd447c8eedf663362c1296fa IP104.21.68.177:443
Requested byhttps://csc.shareonlinefilemcrosoftnline.ru/beebb091955c06fa68b3eb8afc0bae51663362c0c6221PASbeebb091955c06fa68b3eb8afc0bae51663362c0c6222 CertificateIssuerGoogle Trust Services LLC Subjectshareonlinefilemcrosoftnline.ru Fingerprint93:BB:D9:1F:EF:62:B0:FC:E3:30:34:4E:EF:D6:D0:93:6F:00:7F:35 ValiditySun, 17 Mar 2024 02:00:08 GMT - Sat, 15 Jun 2024 02:00:07 GMT
File typeASCII text, with very long lines (65536), with no line terminators Size105 kB (105369 bytes) Hash8e6b0f88563f9c33f78bce65cf287df7 ef7765cd2a7d64ed27dd7344702597aff6f8c397 a7057bebfff43e7281ca31da00d40bd88c8d02d1576b9c45891dd56a3853269a
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Microsoft |
GET /APP-YG7X91/0c3d60d996bd4fc9a7062bd447c8eedf663362c1296fa HTTP/1.1
Host: csc.shareonlinefilemcrosoftnline.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://csc.shareonlinefilemcrosoftnline.ru/beebb091955c06fa68b3eb8afc0bae51663362c0c6221PASbeebb091955c06fa68b3eb8afc0bae51663362c0c6222
Cookie: PHPSESSID=b06acabd259a632526db2611b906b4db; cf_clearance=QPx.weJSCQvLENxAI35R4KlL.WNBEqErhsQCBZ.5Bm4-1714643648-1.0.1.1-6EUdmrFm6CiMt0rCqV4ETIQI_ep0VcGPpCeS10ewvVFgxCjZwxNg2E05nscm02mrPUpX8.ID8huUBn6263B3yw
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 02 May 2024 09:54:09 GMT
content-type: text/css
last-modified: Wed, 01 May 2024 19:51:23 GMT
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=9M3kPLU80UhXo4mSUBDF54lcLPw2MtSwGGjZsCvprI4lEWwNK0VQufL%2FPGjjim80H86I5%2BWmbAS0JX%2FzohY%2BEG%2BUheGwRb%2BGVkYqN9%2BPxYqu73T32ZYuwrHBY1umhBWI2i9IjNTK77751Z5%2BSaBNagUCrdEFzg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87d720d7b831569f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| csc.shareonlinefilemcrosoftnline.ru/api-as1f?email=carolyn.renzin@fanduel.com&data=logo | 104.21.68.177 | 200 OK | 104 B |
URL GET HTTP/3csc.shareonlinefilemcrosoftnline.ru/api-as1f?email=carolyn.renzin@fanduel.com&data=logo IP104.21.68.177:443
Requested byhttps://csc.shareonlinefilemcrosoftnline.ru/beebb091955c06fa68b3eb8afc0bae51663362c0c6221PASbeebb091955c06fa68b3eb8afc0bae51663362c0c6222 CertificateIssuerGoogle Trust Services LLC Subjectshareonlinefilemcrosoftnline.ru Fingerprint93:BB:D9:1F:EF:62:B0:FC:E3:30:34:4E:EF:D6:D0:93:6F:00:7F:35 ValiditySun, 17 Mar 2024 02:00:08 GMT - Sat, 15 Jun 2024 02:00:07 GMT
File typetroff or preprocessor input, ASCII text, with no line terminators Hash7bc4e55bbd94bb6a5f736d4e527b2fc9 3cce4e00f399f439a38361a3d2f0399229fe8885 ae81a626613921afee804a6630d8777cb7502d682484e42052880ba4b644d385
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Microsoft Outlook |
GET /api-as1f?email=carolyn.renzin@fanduel.com&data=logo HTTP/1.1
Host: csc.shareonlinefilemcrosoftnline.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://csc.shareonlinefilemcrosoftnline.ru/beebb091955c06fa68b3eb8afc0bae51663362c0c6221PASbeebb091955c06fa68b3eb8afc0bae51663362c0c6222
Cookie: PHPSESSID=b06acabd259a632526db2611b906b4db; cf_clearance=QPx.weJSCQvLENxAI35R4KlL.WNBEqErhsQCBZ.5Bm4-1714643648-1.0.1.1-6EUdmrFm6CiMt0rCqV4ETIQI_ep0VcGPpCeS10ewvVFgxCjZwxNg2E05nscm02mrPUpX8.ID8huUBn6263B3yw
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 02 May 2024 09:54:09 GMT
content-type: text/html; charset=UTF-8
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=1scsehBaO%2BA9vv5eiT9kx3CgBaT%2FbW8G5KVOGb4NoF308FPCuz9SgdI04wA%2FwfnKJxQKg1is0SGpQE5FzQfxxMeymVfZvPv0TUovZHh75Ulv7nsoeV1CistvZhDkV1x%2Fshrk71dEpJsDJvEcZD1ipLgeAMTlww%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87d720d7a820569f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| csc.shareonlinefilemcrosoftnline.ru/api-as1f?email=carolyn.renzin@fanduel.com&data=background | 0.0.0.0 | | 110 B |
URL GET csc.shareonlinefilemcrosoftnline.ru/api-as1f?email=carolyn.renzin@fanduel.com&data=background IP0.0.0.0:0
Requested byhttps://csc.shareonlinefilemcrosoftnline.ru/beebb091955c06fa68b3eb8afc0bae51663362c0c6221PASbeebb091955c06fa68b3eb8afc0bae51663362c0c6222 CertificateIssuerGoogle Trust Services LLC Subjectshareonlinefilemcrosoftnline.ru Fingerprint93:BB:D9:1F:EF:62:B0:FC:E3:30:34:4E:EF:D6:D0:93:6F:00:7F:35 ValiditySun, 17 Mar 2024 02:00:08 GMT - Sat, 15 Jun 2024 02:00:07 GMT
File typetroff or preprocessor input, ASCII text, with no line terminators Hashccdd5c1ce95fa0a18ebb480706aa75f2 98aec89bb279a3fca32aee02334c3127f2965a37 59ada0ac1a7f688716a0a1a175bad61f275116aae559d7de362c5973f8fcd2f7
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Microsoft Outlook |
GET /api-as1f?email=carolyn.renzin@fanduel.com&data=background HTTP/1.1
Host: csc.shareonlinefilemcrosoftnline.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://csc.shareonlinefilemcrosoftnline.ru/beebb091955c06fa68b3eb8afc0bae51663362c0c6221PASbeebb091955c06fa68b3eb8afc0bae51663362c0c6222
Cookie: PHPSESSID=b06acabd259a632526db2611b906b4db; cf_clearance=QPx.weJSCQvLENxAI35R4KlL.WNBEqErhsQCBZ.5Bm4-1714643648-1.0.1.1-6EUdmrFm6CiMt0rCqV4ETIQI_ep0VcGPpCeS10ewvVFgxCjZwxNg2E05nscm02mrPUpX8.ID8huUBn6263B3yw
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 02 May 2024 09:54:10 GMT
content-type: text/html; charset=UTF-8
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=iXZekAMYkL3CGiwSWiIFUxQghYPZEGERE3sq1K2da2ApKWV3E5L5USjaZSsHwZPIUIRO16TAl0VEGue%2FbpiBPo5%2B24Cn1fEqB5tJlvqrr%2FHcMmJrs59DFw4LZi3sOVIaxJEZPStDmQLTc399EtLLjpeV04sHiA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87d720d7b82a569f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| unpkg.com/axios@1.6.8/dist/axios.min.js | 104.17.248.203 | 200 OK | 42 kB |
URL GET HTTP/2unpkg.com/axios@1.6.8/dist/axios.min.js IP104.17.248.203:443
Requested byhttps://csc.shareonlinefilemcrosoftnline.ru/beebb091955c06fa68b3eb8afc0bae51663362c0c6221PASbeebb091955c06fa68b3eb8afc0bae51663362c0c6222 CertificateIssuerGoogle Trust Services LLC Subjectunpkg.com Fingerprint2E:F1:F6:31:28:EC:29:20:41:F4:58:4B:B1:CF:51:16:77:7E:BF:E3 ValidityMon, 01 Apr 2024 02:40:24 GMT - Sun, 30 Jun 2024 02:40:23 GMT
File typeJavaScript source, ASCII text, with very long lines (41442) Hash3b5b3d36fde8ffe8ed76b1efbfc65410 d63107d0912fdb387530d5ce2d512c928d73d122 29d600462a30694efd15b9848b4ca42d178cd067009275c35a30580121114304
GET /axios@1.6.8/dist/axios.min.js HTTP/1.1
Host: unpkg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://csc.shareonlinefilemcrosoftnline.ru/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 02 May 2024 09:54:08 GMT
content-type: application/javascript; charset=utf-8
access-control-allow-origin: *
content-encoding: br
cache-control: public, max-age=31536000
last-modified: Sat, 26 Oct 1985 08:15:00 GMT
etag: "a209-1jEH0JEv2zh1MNXOLVEsko1z0SI"
via: 1.1 fly.io
fly-request-id: 01HWR4SQ10CZK3T39W1B2GFCAN-arn
cf-cache-status: HIT
age: 141354
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 87d720d6288f56c9-OSL
X-Firefox-Spdy: h2
|
|
| csc.shareonlinefilemcrosoftnline.ru/jm/0c3d60d996bd4fc9a7062bd447c8eedf663362c0d16c9 | 104.21.68.177 | 200 OK | 6.4 kB |
URL GET HTTP/3csc.shareonlinefilemcrosoftnline.ru/jm/0c3d60d996bd4fc9a7062bd447c8eedf663362c0d16c9 IP104.21.68.177:443
Requested byhttps://csc.shareonlinefilemcrosoftnline.ru/beebb091955c06fa68b3eb8afc0bae51663362c0c6221PASbeebb091955c06fa68b3eb8afc0bae51663362c0c6222 CertificateIssuerGoogle Trust Services LLC Subjectshareonlinefilemcrosoftnline.ru Fingerprint93:BB:D9:1F:EF:62:B0:FC:E3:30:34:4E:EF:D6:D0:93:6F:00:7F:35 ValiditySun, 17 Mar 2024 02:00:08 GMT - Sat, 15 Jun 2024 02:00:07 GMT
File typeJavaScript source, ASCII text, with very long lines (6376), with no line terminators Hash1e07a363eef4b40ab4a38d5e4371da5c 7351be2a378540a016aec380141927221a45f19b 01ba4de80540981fd34be681b5c1fce8b205e341ac6fa73a61817068ff566510
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Microsoft |
GET /jm/0c3d60d996bd4fc9a7062bd447c8eedf663362c0d16c9 HTTP/1.1
Host: csc.shareonlinefilemcrosoftnline.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://csc.shareonlinefilemcrosoftnline.ru/beebb091955c06fa68b3eb8afc0bae51663362c0c6221PASbeebb091955c06fa68b3eb8afc0bae51663362c0c6222
Cookie: PHPSESSID=b06acabd259a632526db2611b906b4db; cf_clearance=QPx.weJSCQvLENxAI35R4KlL.WNBEqErhsQCBZ.5Bm4-1714643648-1.0.1.1-6EUdmrFm6CiMt0rCqV4ETIQI_ep0VcGPpCeS10ewvVFgxCjZwxNg2E05nscm02mrPUpX8.ID8huUBn6263B3yw
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 02 May 2024 09:54:08 GMT
content-type: text/javascript
last-modified: Wed, 01 May 2024 19:51:23 GMT
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=3xaHhKkpR9jBMohIVlsD2c7XgmHF%2FO7nG9mxvmMmBuSQi0oQPxakQyEXVOjY7GjpMvOGeWTQTVK7EhMvZbgedfxSBzyeJegoZJfw2Nn5NXBFu%2BWRLM4zUCdr9MCrdT%2FLb5nt9JlUS0xAQOfdCv%2FuMZqAmXi2Xw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87d720d5ee52569f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| csc.shareonlinefilemcrosoftnline.ru/favicon.ico | 104.21.68.177 | 404 Not Found | 315 B |
URL GET HTTP/3csc.shareonlinefilemcrosoftnline.ru/favicon.ico IP104.21.68.177:443
Requested byhttps://csc.shareonlinefilemcrosoftnline.ru/beebb091955c06fa68b3eb8afc0bae51663362c0c6221PASbeebb091955c06fa68b3eb8afc0bae51663362c0c6222 CertificateIssuerGoogle Trust Services LLC Subjectshareonlinefilemcrosoftnline.ru Fingerprint93:BB:D9:1F:EF:62:B0:FC:E3:30:34:4E:EF:D6:D0:93:6F:00:7F:35 ValiditySun, 17 Mar 2024 02:00:08 GMT - Sat, 15 Jun 2024 02:00:07 GMT
File typeHTML document, ASCII text, with very long lines (326), with no line terminators Hash97ef40509b73c101d6815511c3adf98d a4242322497ea630ea72e26ba297a95a2bbe5ccd 322c1f60d9d454c801f7cff3173ef16b61cf9963a64e09a4d9e21d36218b56be
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Microsoft |
GET /favicon.ico HTTP/1.1
Host: csc.shareonlinefilemcrosoftnline.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://csc.shareonlinefilemcrosoftnline.ru/beebb091955c06fa68b3eb8afc0bae51663362c0c6221PASbeebb091955c06fa68b3eb8afc0bae51663362c0c6222
Cookie: PHPSESSID=b06acabd259a632526db2611b906b4db; cf_clearance=QPx.weJSCQvLENxAI35R4KlL.WNBEqErhsQCBZ.5Bm4-1714643648-1.0.1.1-6EUdmrFm6CiMt0rCqV4ETIQI_ep0VcGPpCeS10ewvVFgxCjZwxNg2E05nscm02mrPUpX8.ID8huUBn6263B3yw
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 404 Not Found
date: Thu, 02 May 2024 09:54:09 GMT
content-type: text/html; charset=iso-8859-1
cache-control: max-age=14400
cf-cache-status: HIT
age: 33
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=1WvMTZ6ZHR8bJkpB1wKduOoZ2X%2F1ZKQmkJqy9Hylagttk42EmcokR8DuyHazC%2BBtn%2F%2F%2BPduRUmTxKqjDkmio%2B2anaWMP1DMpEnlCPsPsms3o9ufD0Brf%2F0imxF%2BmuuOB2U9oioPghdRU3YwOa5R4utvFsermxA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87d720d78806569f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|