| sageintl.karlacalixtro.com/ | 162.241.61.129 | | 109 B |
URL sageintl.karlacalixtro.com/ IP 162.241.61.129:0
ASN#46606 UNIFIEDLAYER-AS-1
File typeHTML document, ASCII text Hashea4da9a32ed23b8c0e4f4a609fef49c1 bdbf6dc0112a322b21399ca767d35e169a362cfa 9c761a9192d8996094b8b59388c99ff02860a6cee374c85eb978a9aa8c669018
Analyzer | Verdict | Alert | OpenPhish | phishing | Office365 |
GET / HTTP/1.1
Host: sageintl.karlacalixtro.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
set-cookie: PHPSESSID=4303b0e8f7a2443a57daf62e0eb0ab33; path=/
vary: Accept-Encoding
content-encoding: gzip
content-length: 109
content-type: text/html; charset=UTF-8
date: Sat, 11 Nov 2023 00:45:18 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| emuzkjtabb.eorgesca.ru/pkttju/myscr890047.js | 188.114.97.1 | | 39 kB |
URL emuzkjtabb.eorgesca.ru/pkttju/myscr890047.js IP 188.114.97.1:0
Hashe88dee6e3b98e0a97a158ca01ae4bc14 b20211fed4975a987eb39fabdd627137eeb07504 2d5ee1eefd82176369cce79273286a4593a4e5c52f6164bd8ef936c0e4c7e107
GET /pkttju/myscr890047.js HTTP/1.1
Host: emuzkjtabb.eorgesca.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://emuzkjtabb.eorgesca.ru/pkttju/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 11 Nov 2023 00:45:18 GMT
content-type: application/javascript
last-modified: Wed, 01 Nov 2023 20:33:35 GMT
cache-control: max-age=14400
cf-cache-status: HIT
age: 2783
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=DxSJuDig7rZGi2FAYxnsAN78aWOTSn8qE8n3K5C1zQxOQGzirnUN819YeuEh4R7QBstKIepfxdgnTDPN8a13v%2BFm6vIndF7WQaZRUKhYkonDHGe%2FJ1NYEJmZP0K%2F%2BwpqDcCkxOtSHNLO"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82428301582d56c5-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| emuzkjtabb.eorgesca.ru/web2/assets/fonts/GDSherpa-bold.woff2 | 188.114.97.1 | 200 OK | 28 kB |
URL GET HTTP/3emuzkjtabb.eorgesca.ru/web2/assets/fonts/GDSherpa-bold.woff2 IP 188.114.97.1:443
Requested byhttps://emuzkjtabb.eorgesca.ru/pkttju/# CertificateIssuerGoogle Trust Services LLC Subjecteorgesca.ru Fingerprint3F:72:2A:54:74:C2:7A:6F:62:C8:FC:29:B5:2B:F3:4B:61:70:3D:3F ValidityWed, 01 Nov 2023 16:30:38 GMT - Tue, 30 Jan 2024 16:30:37 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 28000, version 1.66\012- data Hasha4bca6c95fed0d0c5cc46cf07710dcec 73b56e33b82b42921db8702a33efd0f2b2ec9794 5a51d246af54d903f67f07f2bd820ce77736f8d08c5f1602db07469d96dbf77f
GET /web2/assets/fonts/GDSherpa-bold.woff2 HTTP/1.1
Host: emuzkjtabb.eorgesca.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://emuzkjtabb.eorgesca.ru/pkttju/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 11 Nov 2023 00:45:20 GMT
content-type: font/woff2
content-length: 28000
last-modified: Fri, 25 Aug 2023 04:00:16 GMT
etag: "6d60-603b761e42cdb"
access-control-allow-origin: *
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-frame-options: DENY
content-security-policy: frame-ancestors 'none'
cache-control: max-age=14400
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=QbPxkHIGMM9RXIf2HD9XTlYiSZMtBFKlqqamh1O2nDb61KMz%2F3cjglcuxoiDY0Bo92VOn2mtHCj1jz8pRnT3jRlcFH3bJcENs4DJz277oC7MXf6DGkjO3DTZ0xOhh%2FAn5NHVFJGnfodqFxU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
cf-cache-status: HIT
age: 2783
accept-ranges: bytes
server: cloudflare
cf-ray: 8242830b4c4956c5-OSL
|
|
| emuzkjtabb.eorgesca.ru/web2/assets/fonts/GDSherpa-bold.woff | 188.114.97.1 | 200 OK | 36 kB |
URL GET HTTP/3emuzkjtabb.eorgesca.ru/web2/assets/fonts/GDSherpa-bold.woff IP 188.114.97.1:443
Requested byhttps://emuzkjtabb.eorgesca.ru/pkttju/# CertificateIssuerGoogle Trust Services LLC Subjecteorgesca.ru Fingerprint3F:72:2A:54:74:C2:7A:6F:62:C8:FC:29:B5:2B:F3:4B:61:70:3D:3F ValidityWed, 01 Nov 2023 16:30:38 GMT - Tue, 30 Jan 2024 16:30:37 GMT
File typeWeb Open Font Format, TrueType, length 35970, version 1.0\012- data Hash496b7bbde91c7dc7cf9bbabbb3921da8 2bd3c406a715ab52dad84c803c55bf4a6e66a924 ae40a04f95df12b0c364f26ab691dc0c391d394a28bcdb4aeacfaca325d0a798
GET /web2/assets/fonts/GDSherpa-bold.woff HTTP/1.1
Host: emuzkjtabb.eorgesca.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://emuzkjtabb.eorgesca.ru/pkttju/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 11 Nov 2023 00:45:20 GMT
content-type: font/woff
content-length: 35970
last-modified: Fri, 25 Aug 2023 04:00:22 GMT
etag: "8c82-603b7623b006b"
access-control-allow-origin: *
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-frame-options: DENY
content-security-policy: frame-ancestors 'none'
cache-control: max-age=14400
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=uBTBMO1L87FNpgrxp7SzObDYTxSW0qrajOYOXBPVq6Crr8IIjLhM8Zl1UTXCZ36zhNhgDy0QrIii44cDYmuKDBPe8jjIucr%2Beofg4lEfFpTyAa94xevh6idZ2Af6qV59b7%2B8ZHFFKKQSNdA%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
cf-cache-status: HIT
age: 2783
accept-ranges: bytes
server: cloudflare
cf-ray: 8242830b5c4a56c5-OSL
|
|
| emuzkjtabb.eorgesca.ru/web2/assets/fonts/GDSherpa-regular.woff2 | 188.114.97.1 | 200 OK | 29 kB |
URL GET HTTP/3emuzkjtabb.eorgesca.ru/web2/assets/fonts/GDSherpa-regular.woff2 IP 188.114.97.1:443
Requested byhttps://emuzkjtabb.eorgesca.ru/pkttju/# CertificateIssuerGoogle Trust Services LLC Subjecteorgesca.ru Fingerprint3F:72:2A:54:74:C2:7A:6F:62:C8:FC:29:B5:2B:F3:4B:61:70:3D:3F ValidityWed, 01 Nov 2023 16:30:38 GMT - Tue, 30 Jan 2024 16:30:37 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 28584, version 1.66\012- data Hash17081510f3a6f2f619ec8c6f244523c7 87f34b2a1532c50f2a424c345d03fe028db35635 2c7292014e2ef00374aeb63691d9f23159a010455784ee0b274ba7db2bcca956
GET /web2/assets/fonts/GDSherpa-regular.woff2 HTTP/1.1
Host: emuzkjtabb.eorgesca.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://emuzkjtabb.eorgesca.ru/pkttju/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 11 Nov 2023 00:45:20 GMT
content-type: font/woff2
content-length: 28584
last-modified: Fri, 25 Aug 2023 04:00:25 GMT
etag: "6fa8-603b76269b664"
access-control-allow-origin: *
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-frame-options: DENY
content-security-policy: frame-ancestors 'none'
cache-control: max-age=14400
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=sPfrAiwNfWEdMv5V0kTrpOvZM5ZiJa5OJrWDZQ0RGRsWCcaBUpKiIZ8p208mUJJIrlGgwnf8xUucaO%2FDZRESdsvw%2B1UIBUD%2BJPnvFOsgpDN4SughtX2aHEe63IfuUP8PesmPxB9YLG38b2s%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
cf-cache-status: HIT
age: 2783
accept-ranges: bytes
server: cloudflare
cf-ray: 8242830b5c4b56c5-OSL
|
|
| emuzkjtabb.eorgesca.ru/web2/assets/fonts/GDSherpa-regular.woff | 188.114.97.1 | | 37 kB |
URL emuzkjtabb.eorgesca.ru/web2/assets/fonts/GDSherpa-regular.woff IP 188.114.97.1:0
File typeWeb Open Font Format, TrueType, length 36696, version 1.0\012- data Hasha69e9ab8afdd7486ec0749c551051ff2 c34e6aa327b536fb48d1fe03577a47c7ee2231b8 fd78a1913db912221b8ead1e62fad47d1ff0a9fa6cd88d3b128a721ad91d2faf
GET /web2/assets/fonts/GDSherpa-regular.woff HTTP/1.1
Host: emuzkjtabb.eorgesca.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://emuzkjtabb.eorgesca.ru/pkttju/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 11 Nov 2023 00:45:20 GMT
content-type: font/woff
content-length: 36696
last-modified: Fri, 25 Aug 2023 04:00:28 GMT
etag: "8f58-603b762947b93"
access-control-allow-origin: *
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-frame-options: DENY
content-security-policy: frame-ancestors 'none'
cache-control: max-age=14400
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=PS9X%2FLo6i1pcerAaQQjKJibpUY59VW3xoD%2FDD3V%2BcWZzM%2FdEV8g4KHKk1qpjfMRi3Y1mQUKA%2BmNzYLaLG%2BtLBaS6iolVlOajlsy0u5ggWeNwx99s4tOFlyBQBQfRM%2BwHlX%2B%2F2bIFH0EBoXk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
cf-cache-status: HIT
age: 2783
accept-ranges: bytes
server: cloudflare
cf-ray: 8242830b5c4e56c5-OSL
|
|
| emuzkjtabb.eorgesca.ru/web2/assets/fonts/GDSherpa-vf.woff2 | 188.114.97.1 | | 44 kB |
URL emuzkjtabb.eorgesca.ru/web2/assets/fonts/GDSherpa-vf.woff2 IP 188.114.97.1:0
File typeWeb Open Font Format (Version 2), TrueType, length 43596, version 1.0\012- data Hash2a05e9e5572abc320b2b7ea38a70dcc1 d5fa2a856d5632c2469e42436159375117ef3c35 3efcb941aaddaf4aea08dab3fb97d3e904aa1b83264e64b4d5bda53bc7c798ec
GET /web2/assets/fonts/GDSherpa-vf.woff2 HTTP/1.1
Host: emuzkjtabb.eorgesca.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://emuzkjtabb.eorgesca.ru/pkttju/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 11 Nov 2023 00:45:20 GMT
content-type: font/woff2
content-length: 43596
last-modified: Fri, 25 Aug 2023 04:00:36 GMT
etag: "aa4c-603b7631474f7"
access-control-allow-origin: *
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-frame-options: DENY
content-security-policy: frame-ancestors 'none'
cache-control: max-age=14400
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ty6aHsRyLpzC67TuBhQ57rKTw3iSyAYBZ8%2F4InDr01txyJC5Bb9%2Bu82LNd90GAckR42AB3lv8z1nGeqLKJ1AS8tKYhzm%2F37Ag2ATFU9i9lf8v5OiT2cMc%2FHXCZVCcuGkxIcvWKIm9PweDTo%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
cf-cache-status: HIT
age: 2783
accept-ranges: bytes
server: cloudflare
cf-ray: 8242830b6c5356c5-OSL
|
|
| emuzkjtabb.eorgesca.ru/web2/assets/fonts/GDSherpa-vf2.woff2 | 188.114.97.1 | | 93 kB |
URL emuzkjtabb.eorgesca.ru/web2/assets/fonts/GDSherpa-vf2.woff2 IP 188.114.97.1:0
File typeWeb Open Font Format (Version 2), TrueType, length 93276, version 1.0\012- data Hashbcd7983ea5aa57c55f6758b4977983cb ef3a009e205229e07fb0ec8569e669b11c378ef1 6528a0bf9a836a53dfd8536e1786ba6831c9d1faa74967126fddf5b2081b858c
GET /web2/assets/fonts/GDSherpa-vf2.woff2 HTTP/1.1
Host: emuzkjtabb.eorgesca.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://emuzkjtabb.eorgesca.ru/pkttju/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 11 Nov 2023 00:45:20 GMT
content-type: font/woff2
content-length: 93276
last-modified: Fri, 25 Aug 2023 04:00:32 GMT
etag: "16c5c-603b762dd727e"
access-control-allow-origin: *
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-frame-options: DENY
content-security-policy: frame-ancestors 'none'
cache-control: max-age=14400
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=dFNKkba3r16Ckreew4QpSlbqJPFONdCEKNnXg7hdpCQjY0TSWHBKTUtW0cjqpo%2BzbOuF5SwQ9a1YZ%2FKiaxcj0BANBi21GO3xY708GdLh7rQOeitd5VtM8pILHnLStlMAUCazkAiMHOcmj3U%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
cf-cache-status: HIT
age: 2783
accept-ranges: bytes
server: cloudflare
cf-ray: 8242830b6c5956c5-OSL
|
|
| emuzkjtabb.eorgesca.ru/web2/assets/css/pages-okta.css?cb=1699663520464 | 188.114.97.1 | | 0 B |
URL emuzkjtabb.eorgesca.ru/web2/assets/css/pages-okta.css?cb=1699663520464 IP 188.114.97.1:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /web2/assets/css/pages-okta.css?cb=1699663520464 HTTP/1.1
Host: emuzkjtabb.eorgesca.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://emuzkjtabb.eorgesca.ru/pkttju/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 11 Nov 2023 00:45:21 GMT
content-type: text/css
content-length: 0
last-modified: Thu, 24 Aug 2023 12:07:13 GMT
etag: "0-603aa11867866"
access-control-allow-origin: *
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-frame-options: DENY
content-security-policy: frame-ancestors 'none'
cache-control: max-age=14400
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=yyaSJUuS1paoRxOmQ2ASkjtPmIX43H2LZetEUERFZtZ%2B3KuXtOt%2Bw5qJmLumwKGHWMzsaSnc32SlQ3F5yaA3amKbCwyxF7JRSM5BWL16DRR%2FHbt7v%2FtH2%2BsJQNev%2B3eFqXf4W2UUO8YpAJ0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
cf-cache-status: MISS
accept-ranges: bytes
server: cloudflare
cf-ray: 8242830b2c4056c5-OSL
|
|
| emuzkjtabb.eorgesca.ru/web2/assets/back.png | 188.114.97.1 | | 231 B |
URL emuzkjtabb.eorgesca.ru/web2/assets/back.png IP 188.114.97.1:0
File typePNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced\012- data Hash547988bac5584b4608466d761e16f370 c11bb71049702528402a31027f200184910a7e23 70e32b2db3f079bb0295a85a0db15ed9e5926294dd947938d6cfa595f5ab18b4
GET /web2/assets/back.png HTTP/1.1
Host: emuzkjtabb.eorgesca.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://emuzkjtabb.eorgesca.ru/pkttju/
Cookie: XSRF-TOKEN=eyJpdiI6InlRbFhOeDVzMHdvUFc1Ny9RTThmRlE9PSIsInZhbHVlIjoiVDN1TlNwcWFTcDh0UThuMnhyRnNEL0xsLzJDYTF6Z0ovaXYyc25kb1JlbDF4UDNJRVRvZlhiWlBMbXNtcVNTdFkrY2tlOGZEWjVTTFZrVEVySUl4OWNQMUllWExSb0orbWIzZnpQNUpNRVBhcUNUTWlpb1NzbTNUVTlteUFITGYiLCJtYWMiOiIwZGFkNTg1YWIzY2I1NTNlMjY3ZTU4ZWM5YTU0Njk2YTA3ZjViZGNjMTAxODIzMzQwYjUwNzY0MGY5YmIxMWYzIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjBKbnhzL1lFQmVSM2tqRUJGMHB1TWc9PSIsInZhbHVlIjoiOENPb0ZkNWV1UC9iVC9pdldzV29ORjB1OU9BVEhhNHZ2eDROWnBQNlh0eldtYXp2NGNraytPcUkzR2M0SVVLUXdaRVBPRGZLSzRPTSs5dURzYWFqQ1cwQWtyQjYybUppbHVqZHhFbTdWVk9TbjVoSzFSTU9oc3pOTlltQWZWU0IiLCJtYWMiOiJkOWFlYzZmYjllOTY0MGJmOTM4Y2VkYjkzNTJlMGRkZTgwZTA2MzBkZDI4ZmUzMGFiMTE0MTk5MjY4NGZiZWU4IiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 11 Nov 2023 00:45:29 GMT
content-type: image/png
content-length: 231
last-modified: Sun, 19 Mar 2023 15:20:17 GMT
etag: "e7-5f7425905ae40"
access-control-allow-origin: *
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-frame-options: DENY
content-security-policy: frame-ancestors 'none'
cache-control: max-age=14400
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=V6gp7G31DTPy1l3rl9Vt17Qdu3jZ2R7mDg6E1OC8lgrO8QfjgPNcazFn8N%2B2Lu2RqBM2Nni%2Fu9rYw%2BDKWi%2FZw3W65cTU67zCTc5Zkkn4%2BqeVhIpSlQVy5VmNkwBjSFjo65k7LNY%2Fokpf1mI%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
cf-cache-status: HIT
age: 2785
accept-ranges: bytes
server: cloudflare
cf-ray: 824283425db256c5-OSL
|
|
| challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/pat/82428311281e56a5/1699663524368/7d065e9e2d9c6da8bf9185305960f061aaf88b9c0419482dbca48695af7b03c2/L-_4uhhxcOsshgf | 104.17.2.184 | | 789 B |
URL challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/pat/82428311281e56a5/1699663524368/7d065e9e2d9c6da8bf9185305960f061aaf88b9c0419482dbca48695af7b03c2/L-_4uhhxcOsshgf IP 104.17.2.184:0
Hash400ae0adfcfe62d838b03b977f17f0e5 fe413815deef42ba48e06213bba36106ddc14904 71b2ea3eeacee37fed5b38a9782bc61fa4ac782f512d68a63419bcd6e893a086
GET /cdn-cgi/challenge-platform/h/g/pat/82428311281e56a5/1699663524368/7d065e9e2d9c6da8bf9185305960f061aaf88b9c0419482dbca48695af7b03c2/L-_4uhhxcOsshgf HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/3kc2n/0x4AAAAAAAMhkGlXpUVzzdsY/auto/normal
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 401 Unauthorized
date: Sat, 11 Nov 2023 00:45:25 GMT
content-type: text/plain; charset=UTF-8
www-authenticate: PrivateToken challenge=AAIAGXBhdC1pc3N1ZXIuY2xvdWRmbGFyZS5jb20gfQZeni2cbai_kYUwWWDwYar4i5wEGUgtvKSGla97A8IAGWNoYWxsZW5nZXMuY2xvdWRmbGFyZS5jb20=, token-key=MIIBUjA9BgkqhkiG9w0BAQowMKANMAsGCWCGSAFlAwQCAqEaMBgGCSqGSIb3DQEBCDALBglghkgBZQMEAgKiAwIBMAOCAQ8AMIIBCgKCAQEAw3-G2azMDQz14MtEw9Yc4MTiu1DUnWsnsI8X04PL5SI1i6hYY_VhUXes642jWVNaNc9DvTk3VKiAwkv_2admYcGRqYwL4lLF-lyE4ia0s35wIzqyKBhy6kksXyNNhZHqdbX2dhXVviFzQcnIOAIm1lKN-L8jeweQ74ibV2j-YnBH88c3EBOtxW8uP5ZSK97pwBY5J9cWrKMTZgPoYVcXoPZOM2rhbpF39cQyzcSbR8xFe2wEDELzsImry1fNMcDXohGoiOBeBIXjCDNWREvYxvSMPvZV4um_Po47y8007qf2T2nTYvEh0R03Lr5tR0V6wrS214LvJ_ZiPmyzjTFdDQIDAQAB, max-age=20, PrivateToken challenge=AAIALHBwLWlzc3Vlci1wcm9kdWN0aW9uLnJlc2VhcmNoLmNsb3VkZmxhcmUuY29tIH0GXp4tnG2ov5GFMFlg8GGq-IucBBlILbykhpWvewPCABljaGFsbGVuZ2VzLmNsb3VkZmxhcmUuY29t, token-key=MIIBUjA9BgkqhkiG9w0BAQowMKANMAsGCWCGSAFlAwQCAqEaMBgGCSqGSIb3DQEBCDALBglghkgBZQMEAgKiAwIBMAOCAQ8AMIIBCgKCAQEAyAcIyqXWj0XAym0z5V844rFA0WOzLVwj0uCwmVj6zC4qOH40oBiGHrMNMBnDyk95jvnBAuHeEs855e7nA4l4DPJ4jUWKZbua8BxGAzjn74A1BV81a52F1zvBPUm-VEJXPAPXQehXphSv51uR7HKtfcM5oaS33TGDSy-6xv0r84xjMuTBvwPgXGehxpi1MCGGE5yWkzKN5Zzllk7m6Nkiv6learV-Uz7tzaoPbdZkBk1bFXxm2q07jWavoBZ-JEuEJyjQ00PSTz2Zjpbct6AlR3eCS9sbmXtb5XxSs7JMsvoa8uojD7a5m2SEJIwaf8xKL6wtxkaPonUfvsLj4JoJZQIDAQAB, max-age=20
server: cloudflare
cf-ray: 82428327ab6556a5-OSL
alt-svc: h3=":443"; ma=86400
|
|
| emuzkjtabb.eorgesca.ru/web2/info | 188.114.97.1 | | 56 kB |
URL emuzkjtabb.eorgesca.ru/web2/info IP 188.114.97.1:0
File typeHTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (309), with CRLF line terminators Hash62a73cf4cf12315a8832b7fa66effa78 f90574a44bd3a16d4fe6ecb90f76f3606ea99eff eee37d3866703f7ca99a6a4f4155b6293ac0f4f610ff2fc70f024f4ab7a44043
POST /web2/info HTTP/1.1
Host: emuzkjtabb.eorgesca.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 23
Origin: https://emuzkjtabb.eorgesca.ru
DNT: 1
Connection: keep-alive
Referer: https://emuzkjtabb.eorgesca.ru/pkttju/
Cookie: XSRF-TOKEN=eyJpdiI6IkhkbW5WSHdPcWk1bzFQd0MwOUEyU1E9PSIsInZhbHVlIjoiVHRTd1pXelUrVnJKakc1SEF1M04yK3c4V29UWkNDMXZ1bHpVeWNiNjRYVUMvOGYxV3FxU0xLQVNXOUhKRnBKM3VieU5VZ0I0bHQwV3o2ZVJUQ2EwNXd5UUJlUjUvdE93QUxOVjJCTm80eUh2U0V6UGRxaHUvVThSTUluQXcyWmciLCJtYWMiOiI5N2I4ZmJkYWE1OWZhZDYyZDQzYjg5NDAxNTkzYWJhMjI0ODM5MjkyMjMyYzYyMTcyNWNiYjFkZGU3ZjQzN2IzIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjRjRGl0TkJicUdpRkNkcFpLZ2tCaUE9PSIsInZhbHVlIjoiMGtuU1VsTytObjhIbjdLNVJtSWNPaFNFNWlqblhLemZLbUt3bmJPdVFQMW1zRUI3ZFl0dVBOSFRuL1lqTFZ5RUU0RVNoZnMvRGFXay9oWVRsank2akF4SEhoUHFXY2w0Y1g4THhEYURTdGxkV25paThUOXJOay9aT0JTMzVHekciLCJtYWMiOiJlMjhiNzQ0MTc2ZDQ5NGFiOTE2ZDZhZWJiODZlMTA1NmFmMWY3NDBmMjJmMzM1NTc1ZWE5ODU5MTk4ZjkyNjAyIiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 11 Nov 2023 00:45:29 GMT
content-type: text/html; charset=UTF-8
x-powered-by: PHP/8.1.10
cache-control: no-cache, private
access-control-allow-origin: *
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-frame-options: DENY
content-security-policy: frame-ancestors 'none'
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=QKq9hIFac8sDTGNKqs1%2B5siCwO4PK7BaZmjAiU7Snl2vbkv6g01NMAfPgeFpIG%2Bbsq955JoHLpHmdgAWIHRRhzhsMC%2FpF09qupQ0HRHD%2FIIPGqGacVPb5mmqnUjmLzJ4Q3YKU43cZgVxqBE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
set-cookie: XSRF-TOKEN=eyJpdiI6InlRbFhOeDVzMHdvUFc1Ny9RTThmRlE9PSIsInZhbHVlIjoiVDN1TlNwcWFTcDh0UThuMnhyRnNEL0xsLzJDYTF6Z0ovaXYyc25kb1JlbDF4UDNJRVRvZlhiWlBMbXNtcVNTdFkrY2tlOGZEWjVTTFZrVEVySUl4OWNQMUllWExSb0orbWIzZnpQNUpNRVBhcUNUTWlpb1NzbTNUVTlteUFITGYiLCJtYWMiOiIwZGFkNTg1YWIzY2I1NTNlMjY3ZTU4ZWM5YTU0Njk2YTA3ZjViZGNjMTAxODIzMzQwYjUwNzY0MGY5YmIxMWYzIiwidGFnIjoiIn0%3D; expires=Sat, 11-Nov-2023 02:45:28 GMT; Max-Age=7200; path=/; samesite=lax
laravel_session=eyJpdiI6IjBKbnhzL1lFQmVSM2tqRUJGMHB1TWc9PSIsInZhbHVlIjoiOENPb0ZkNWV1UC9iVC9pdldzV29ORjB1OU9BVEhhNHZ2eDROWnBQNlh0eldtYXp2NGNraytPcUkzR2M0SVVLUXdaRVBPRGZLSzRPTSs5dURzYWFqQ1cwQWtyQjYybUppbHVqZHhFbTdWVk9TbjVoSzFSTU9oc3pOTlltQWZWU0IiLCJtYWMiOiJkOWFlYzZmYjllOTY0MGJmOTM4Y2VkYjkzNTJlMGRkZTgwZTA2MzBkZDI4ZmUzMGFiMTE0MTk5MjY4NGZiZWU4IiwidGFnIjoiIn0%3D; expires=Sat, 11-Nov-2023 02:45:28 GMT; Max-Age=7200; path=/; httponly; samesite=lax
server: cloudflare
cf-ray: 82428339b9e556c5-OSL
content-encoding: br
|
|
| emuzkjtabb.eorgesca.ru/web2/assets/godaddy-left.png | 188.114.97.1 | | 30 kB |
URL emuzkjtabb.eorgesca.ru/web2/assets/godaddy-left.png IP 188.114.97.1:0
File typePNG image data, 506 x 303, 8-bit/color RGBA, non-interlaced\012- data Hash210433a8774859368f3a7b86d125a2a7 408bacddc39f12cad285579c102fe4a629862d88 9c6addfc339ce1c1d262290ab4cc2de8d38d4b54b11a8e85afd44fbb0acc2561
GET /web2/assets/godaddy-left.png HTTP/1.1
Host: emuzkjtabb.eorgesca.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://emuzkjtabb.eorgesca.ru/pkttju/
Cookie: XSRF-TOKEN=eyJpdiI6InlRbFhOeDVzMHdvUFc1Ny9RTThmRlE9PSIsInZhbHVlIjoiVDN1TlNwcWFTcDh0UThuMnhyRnNEL0xsLzJDYTF6Z0ovaXYyc25kb1JlbDF4UDNJRVRvZlhiWlBMbXNtcVNTdFkrY2tlOGZEWjVTTFZrVEVySUl4OWNQMUllWExSb0orbWIzZnpQNUpNRVBhcUNUTWlpb1NzbTNUVTlteUFITGYiLCJtYWMiOiIwZGFkNTg1YWIzY2I1NTNlMjY3ZTU4ZWM5YTU0Njk2YTA3ZjViZGNjMTAxODIzMzQwYjUwNzY0MGY5YmIxMWYzIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjBKbnhzL1lFQmVSM2tqRUJGMHB1TWc9PSIsInZhbHVlIjoiOENPb0ZkNWV1UC9iVC9pdldzV29ORjB1OU9BVEhhNHZ2eDROWnBQNlh0eldtYXp2NGNraytPcUkzR2M0SVVLUXdaRVBPRGZLSzRPTSs5dURzYWFqQ1cwQWtyQjYybUppbHVqZHhFbTdWVk9TbjVoSzFSTU9oc3pOTlltQWZWU0IiLCJtYWMiOiJkOWFlYzZmYjllOTY0MGJmOTM4Y2VkYjkzNTJlMGRkZTgwZTA2MzBkZDI4ZmUzMGFiMTE0MTk5MjY4NGZiZWU4IiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 11 Nov 2023 00:45:29 GMT
content-type: image/png
content-length: 29796
last-modified: Thu, 24 Aug 2023 14:10:07 GMT
etag: "7464-603abc9079d32"
access-control-allow-origin: *
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-frame-options: DENY
content-security-policy: frame-ancestors 'none'
cache-control: max-age=14400
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=RQHKRWg%2Fx6x%2FQ34v37YQeylfy4I25oSBK3SMD158THPa62H1h6i7hPt8XIuh%2FqCictJ04X1w%2BlpDdGOhXwNGtgPwISZsj1eLpu6PlU6cxxJoKXE538yL%2FH2nvDrsF6C6rvyfksasFzHSEtM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
cf-cache-status: HIT
age: 2785
accept-ranges: bytes
server: cloudflare
cf-ray: 824283426dbc56c5-OSL
|
|
| cdn.socket.io/4.6.0/socket.io.min.js | 143.204.55.77 | | 84 kB |
URL cdn.socket.io/4.6.0/socket.io.min.js IP 143.204.55.77:0
File typegzip compressed data, from Unix\012- data Hash775570c953a6656aff69fdc82580dc20 a16809f92b26543485c8bea607bcf32a51c1b58e 48225f488a4b747458256a6494d7cc1423c4d66ca224ad14311b1d23677dabad
GET /4.6.0/socket.io.min.js HTTP/1.1
Host: cdn.socket.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://emuzkjtabb.eorgesca.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
access-control-allow-origin: *
cache-control: public, max-age=31536000, immutable
content-disposition: inline; filename="socket.io.min.js"
content-encoding: gzip
date: Fri, 27 Oct 2023 10:49:06 GMT
etag: W/"80f5b8c6a9eeac15de93e5a112036a06"
server: Vercel
strict-transport-security: max-age=63072000
x-vercel-cache: HIT
x-vercel-id: fra1::bqgb5-1698403746025-0e8d119dc2bf
x-cache: Hit from cloudfront
via: 1.1 c9f2a4d2bcd548d1a3cbe1617a22f216.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: B8p_8Jlz8F3KHsXa6cDCqjpFmm-uVygYbpGvc7ig5Z86CNDRBtCbFA==
age: 1649242
X-Firefox-Spdy: h2
|
|
| emuzkjtabb.eorgesca.ru/web2/assets/officelogo.png | 188.114.97.1 | | 1.4 kB |
URL emuzkjtabb.eorgesca.ru/web2/assets/officelogo.png IP 188.114.97.1:0
File typePNG image data, 108 x 24, 8-bit/color RGBA, non-interlaced\012- data Hash333ee830e5ab72c41dd9126a27b4d878 12d8d66ebb3076f3d6069e133c3212f97c8774e1 8702292cbc365e9f0488143e2b309b85efe09c61fd2e0a2e21c53735a309313c
GET /web2/assets/officelogo.png HTTP/1.1
Host: emuzkjtabb.eorgesca.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://emuzkjtabb.eorgesca.ru/web2/assets/pages/h99271.css?cb=1699663520464
Cookie: XSRF-TOKEN=eyJpdiI6InlRbFhOeDVzMHdvUFc1Ny9RTThmRlE9PSIsInZhbHVlIjoiVDN1TlNwcWFTcDh0UThuMnhyRnNEL0xsLzJDYTF6Z0ovaXYyc25kb1JlbDF4UDNJRVRvZlhiWlBMbXNtcVNTdFkrY2tlOGZEWjVTTFZrVEVySUl4OWNQMUllWExSb0orbWIzZnpQNUpNRVBhcUNUTWlpb1NzbTNUVTlteUFITGYiLCJtYWMiOiIwZGFkNTg1YWIzY2I1NTNlMjY3ZTU4ZWM5YTU0Njk2YTA3ZjViZGNjMTAxODIzMzQwYjUwNzY0MGY5YmIxMWYzIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjBKbnhzL1lFQmVSM2tqRUJGMHB1TWc9PSIsInZhbHVlIjoiOENPb0ZkNWV1UC9iVC9pdldzV29ORjB1OU9BVEhhNHZ2eDROWnBQNlh0eldtYXp2NGNraytPcUkzR2M0SVVLUXdaRVBPRGZLSzRPTSs5dURzYWFqQ1cwQWtyQjYybUppbHVqZHhFbTdWVk9TbjVoSzFSTU9oc3pOTlltQWZWU0IiLCJtYWMiOiJkOWFlYzZmYjllOTY0MGJmOTM4Y2VkYjkzNTJlMGRkZTgwZTA2MzBkZDI4ZmUzMGFiMTE0MTk5MjY4NGZiZWU4IiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 11 Nov 2023 00:45:29 GMT
content-type: image/png
content-length: 1400
last-modified: Sun, 19 Mar 2023 15:20:17 GMT
etag: "578-5f7425905ae40"
access-control-allow-origin: *
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-frame-options: DENY
content-security-policy: frame-ancestors 'none'
cache-control: max-age=14400
age: 2785
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=wddKkdgBsyP2Ja86Ko6kuxgBXOZUOwqH1rgdpF5NnVgJkxoViPaon06zBLRjfgL13MF1K5hwN0iUP4prcEaVVqyGbi5sYSJq%2BDzrzATyFGp8b5yUcCwSjJLRO0NOTsMfQENYYOhaIci%2BgOg%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
cf-cache-status: HIT
accept-ranges: bytes
server: cloudflare
cf-ray: 82428342edf356c5-OSL
|
|
| aadcdn.msftauth.net/shared/1.0/content/images/close_790189870c9543725dc3f5a15fb25e46.svg | 152.199.23.37 | | 190 B |
URL aadcdn.msftauth.net/shared/1.0/content/images/close_790189870c9543725dc3f5a15fb25e46.svg IP 152.199.23.37:0
File typeSVG Scalable Vector Graphics image\012- HTML document, ASCII text, with no line terminators Hash40eb39126300b56bf66c20ee75b54093 83678d94097257eb474713dec49e8094f49d2e2a 765709425a5b9209e875dccf2217d3161429d2d48159fc1df7b253b77c1574f4
GET /shared/1.0/content/images/close_790189870c9543725dc3f5a15fb25e46.svg HTTP/1.1
Host: aadcdn.msftauth.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://emuzkjtabb.eorgesca.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-encoding: gzip
accept-ranges: bytes
access-control-allow-origin: *
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
age: 14057762
cache-control: public, max-age=31536000
content-md5: rp+/fadJKxLUo+jgFmYTeQ==
content-type: image/svg+xml
date: Sat, 11 Nov 2023 00:45:29 GMT
etag: 0x8DB5C3F4721247A
last-modified: Wed, 24 May 2023 10:11:44 GMT
server: ECAcc (ska/F697)
vary: Accept-Encoding
x-cache: HIT
x-ms-blob-type: BlockBlob
x-ms-lease-status: unlocked
x-ms-request-id: cf4cbdca-101e-0042-0c5d-942f4a000000
x-ms-version: 2009-09-19
content-length: 190
X-Firefox-Spdy: h2
|
|
| logincdn.msauth.net/shared/1.0/content/images/picker_verify_email_958962caa7cf6b75cd412e9e3b687b22.svg | 192.229.221.185 | | 212 B |
URL logincdn.msauth.net/shared/1.0/content/images/picker_verify_email_958962caa7cf6b75cd412e9e3b687b22.svg IP 192.229.221.185:0
File typeSVG Scalable Vector Graphics image\012- HTML document, ASCII text, with no line terminators Hash59759b80e24a89c8cd029b14700e646d 651b1921c99e143d3c242de3faacfb9ad51dbb53 b02b5df3ecd59d6cd90c60878683477532cbfc24660028657f290bdc7bc774b5
GET /shared/1.0/content/images/picker_verify_email_958962caa7cf6b75cd412e9e3b687b22.svg HTTP/1.1
Host: logincdn.msauth.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://emuzkjtabb.eorgesca.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-encoding: gzip
accept-ranges: bytes
access-control-allow-origin: *
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
age: 13498955
cache-control: public, max-age=31536000
content-md5: pFQUXilUkzYtIbvSwGgVBQ==
content-type: image/svg+xml
date: Sat, 11 Nov 2023 00:45:29 GMT
etag: 0x8DB5C409F549E50
last-modified: Wed, 24 May 2023 10:21:22 GMT
server: ECAcc (ska/F7AD)
vary: Accept-Encoding
x-cache: HIT
x-ms-blob-type: BlockBlob
x-ms-lease-status: unlocked
x-ms-request-id: e6e3cc87-601e-0079-1c72-993a7c000000
x-ms-version: 2009-09-19
content-length: 212
X-Firefox-Spdy: h2
|
|
| aadcdn.msftauth.net/shared/1.0/content/images/picker_verify_fluent_authenticator_59892f1e05e3adf9fd2f71b42d92a27f.svg | 152.199.23.37 | | 2.4 kB |
URL aadcdn.msftauth.net/shared/1.0/content/images/picker_verify_fluent_authenticator_59892f1e05e3adf9fd2f71b42d92a27f.svg IP 152.199.23.37:0
File typeSVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (4714), with CRLF line terminators Hashb59c16ca9bf156438a8a96d45e33db64 4e51b7d3477414b220f688adabd76d3ae6472ee3 a7ee799dd5b6f6dbb70b043b766362a6724e71458f9839306c995f06b218c2f8
GET /shared/1.0/content/images/picker_verify_fluent_authenticator_59892f1e05e3adf9fd2f71b42d92a27f.svg HTTP/1.1
Host: aadcdn.msftauth.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://emuzkjtabb.eorgesca.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-encoding: gzip
accept-ranges: bytes
access-control-allow-origin: *
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
age: 14064226
cache-control: public, max-age=31536000
content-md5: nTculR1Fom7eLci0F6rk+A==
content-type: image/svg+xml
date: Sat, 11 Nov 2023 00:45:29 GMT
etag: 0x8DB5C3F4ADC079A
last-modified: Wed, 24 May 2023 10:11:51 GMT
server: ECAcc (ska/F7B6)
vary: Accept-Encoding
x-cache: HIT
x-ms-blob-type: BlockBlob
x-ms-lease-status: unlocked
x-ms-request-id: 9d35d246-701e-009b-604e-944da7000000
x-ms-version: 2009-09-19
content-length: 2407
X-Firefox-Spdy: h2
|
|
| aadcdn.msftauth.net/shared/1.0/content/images/picker_verify_call_c2616792e1950f83fdef6e72dab97293.svg | 152.199.23.37 | 200 OK | 1.2 kB |
URL GET HTTP/2aadcdn.msftauth.net/shared/1.0/content/images/picker_verify_call_c2616792e1950f83fdef6e72dab97293.svg IP 152.199.23.37:443
Requested byhttps://emuzkjtabb.eorgesca.ru/pkttju/# CertificateIssuerDigiCert Inc Subjectaadcdn.msftauth.net Fingerprint99:06:D8:1E:EC:BF:DB:78:DF:F4:89:A3:ED:23:07:3D:79:F1:16:D6 ValidityTue, 31 Jan 2023 00:00:00 GMT - Wed, 31 Jan 2024 23:59:59 GMT
File typeSVG Scalable Vector Graphics image\012- HTML document, ASCII text, with very long lines (2905), with no line terminators Hashfe87496cc7a44412f7893a72099c120a a0c1458c08a815df63d3cb0406d60be6607ca699 55ce3b0ce5bc71339308107982cd7671f96014256ded0be36dc8062e64c847f1
GET /shared/1.0/content/images/picker_verify_call_c2616792e1950f83fdef6e72dab97293.svg HTTP/1.1
Host: aadcdn.msftauth.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://emuzkjtabb.eorgesca.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-encoding: gzip
accept-ranges: bytes
access-control-allow-origin: *
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
age: 13495421
cache-control: public, max-age=31536000
content-md5: XHrPYKKsqlxUvysuxtSE2A==
content-type: image/svg+xml
date: Sat, 11 Nov 2023 00:45:29 GMT
etag: 0x8DB5C3F4A98E9BB
last-modified: Wed, 24 May 2023 10:11:50 GMT
server: ECAcc (ska/F6F3)
vary: Accept-Encoding
x-cache: HIT
x-ms-blob-type: BlockBlob
x-ms-lease-status: unlocked
x-ms-request-id: 3afb7c4b-e01e-0039-1e7a-99c6de000000
x-ms-version: 2009-09-19
content-length: 1173
X-Firefox-Spdy: h2
|
|
| aadcdn.msauth.net/shared/1.0/content/images/backgrounds/2_11d9e3bcdfede9ce5ce5ace2d129f1c4.svg | 13.107.246.53 | | 673 B |
URL aadcdn.msauth.net/shared/1.0/content/images/backgrounds/2_11d9e3bcdfede9ce5ce5ace2d129f1c4.svg IP 13.107.246.53:0
ASN#8068 MICROSOFT-CORP-MSN-AS-BLOCK
File typeSVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (1864), with no line terminators Hashbc3d32a696895f78c19df6c717586a5d 9191cb156a30a3ed79c44c0a16c95159e8ff689d 0e88b6fcbb8591edfd28184fa70a04b6dd3af8a14367c628edd7caba32e58c68
GET /shared/1.0/content/images/backgrounds/2_11d9e3bcdfede9ce5ce5ace2d129f1c4.svg HTTP/1.1
Host: aadcdn.msauth.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://emuzkjtabb.eorgesca.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
cache-control: public, max-age=31536000
content-length: 673
content-type: image/svg+xml
content-encoding: gzip
content-md5: DhdidjYrlCeaRJJRG/y9mA==
last-modified: Wed, 24 May 2023 10:11:46 GMT
etag: 0x8DB5C3F47E260FD
x-cache: TCP_HIT
x-ms-request-id: ee5225fd-a01e-0009-35e6-114460000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
access-control-allow-origin: *
x-azure-ref-originshield: 0tUlLZQAAAACdcK/mu1h3TL1eetsEATepQU1TMDRFREdFMTgxMgAzOWExMmY3ZS04OTlmLTQ2Y2YtYTZkMC0yNGJiYmEyN2Q5NTY=
x-azure-ref: 0qc5OZQAAAACZWSeFrxkISpj+6uyoxduyU1ZHMjBFREdFMDUxMAAzOWExMmY3ZS04OTlmLTQ2Y2YtYTZkMC0yNGJiYmEyN2Q5NTY=
date: Sat, 11 Nov 2023 00:45:29 GMT
X-Firefox-Spdy: h2
|
|
| emuzkjtabb.eorgesca.ru/web2/info | 188.114.97.1 | | 6.5 kB |
URL emuzkjtabb.eorgesca.ru/web2/info IP 188.114.97.1:0
File typeJSON data\012- , ASCII text, with no line terminators Hasha2f34ca5e0995b045fe450a03081e413 a12ecc45a251cfc27c60ebc4083e7b512367e461 25d5f415ae93ed1d6d30a42f8615e6c5e0e69756d2aaafaeb3a5df19c7f18b87
POST /web2/info HTTP/1.1
Host: emuzkjtabb.eorgesca.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 22
Origin: https://emuzkjtabb.eorgesca.ru
DNT: 1
Connection: keep-alive
Referer: https://emuzkjtabb.eorgesca.ru/pkttju/
Cookie: XSRF-TOKEN=eyJpdiI6IkhkbW5WSHdPcWk1bzFQd0MwOUEyU1E9PSIsInZhbHVlIjoiVHRTd1pXelUrVnJKakc1SEF1M04yK3c4V29UWkNDMXZ1bHpVeWNiNjRYVUMvOGYxV3FxU0xLQVNXOUhKRnBKM3VieU5VZ0I0bHQwV3o2ZVJUQ2EwNXd5UUJlUjUvdE93QUxOVjJCTm80eUh2U0V6UGRxaHUvVThSTUluQXcyWmciLCJtYWMiOiI5N2I4ZmJkYWE1OWZhZDYyZDQzYjg5NDAxNTkzYWJhMjI0ODM5MjkyMjMyYzYyMTcyNWNiYjFkZGU3ZjQzN2IzIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjRjRGl0TkJicUdpRkNkcFpLZ2tCaUE9PSIsInZhbHVlIjoiMGtuU1VsTytObjhIbjdLNVJtSWNPaFNFNWlqblhLemZLbUt3bmJPdVFQMW1zRUI3ZFl0dVBOSFRuL1lqTFZ5RUU0RVNoZnMvRGFXay9oWVRsank2akF4SEhoUHFXY2w0Y1g4THhEYURTdGxkV25paThUOXJOay9aT0JTMzVHekciLCJtYWMiOiJlMjhiNzQ0MTc2ZDQ5NGFiOTE2ZDZhZWJiODZlMTA1NmFmMWY3NDBmMjJmMzM1NTc1ZWE5ODU5MTk4ZjkyNjAyIiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 11 Nov 2023 00:45:28 GMT
content-type: application/json
x-powered-by: PHP/8.1.10
cache-control: no-cache, private
access-control-allow-origin: *
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-frame-options: DENY
content-security-policy: frame-ancestors 'none'
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Hdxnale2ej%2FEMBW8LlnYRIgqTrLwO6G77Gf9iJ4YkHNPeaImDIil2w%2BDV5fDlT1Q1cer5OZor8lFupbARIouLPNr5jPZNgKeG6xju8jUsnqZ5I6RgBsQx4Ech26lW7%2FBtGN4oFBat%2FV3KOY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
set-cookie: XSRF-TOKEN=eyJpdiI6IjBPSnhXWUNvQkIxUW9BNGVqai9mVGc9PSIsInZhbHVlIjoiV1UvYm1MQW13UnRCekRsMUUxLzhBUmd2YVBWdzlVUGVZWnBDNVN3akVIbkoxQ2JVNUdmRGdoTGQrZzhCNjBCSXl0cCtVYkd4dlNWbmo5a2ZubDBIQmZDa29yYzJjbmszMitzc0JLNzNFNURBeHZLTkFMLzJqelBDcitKSlZsSFoiLCJtYWMiOiJjNTUxNTA1MzcwNWRiYTAxODJhMzg1ZTNmMjNlZmQwNGI4OTM2NGRiYzc5Y2JkNTFlOTZmYjNkMjc2MjEzMDdjIiwidGFnIjoiIn0%3D; expires=Sat, 11-Nov-2023 02:45:28 GMT; Max-Age=7200; path=/; samesite=lax
laravel_session=eyJpdiI6IitLVzFkS3BXQ21FMHhRbmYrdGk2V2c9PSIsInZhbHVlIjoiNkhuZVcvdmlyMyswSDZEWU9EMCt4blJUSWVNYklidVdkMnN0NnRMampnM2R6Wmk1RGRYQk9FTE9sOVlXVi8zclFNVHlxNDI2MmgxdTE0amVvTzVNV1ZTM3pQRld3UDZaTkNvekZCYUlpNW9RUzZaT3Y1T3F4R1I2OXJmeDB3SEoiLCJtYWMiOiJhMDBiZDA1ZGVkYTFlZTJjY2FjNDFlOGQzYWY5YTFkZjVkNzIzMjU0YmY5MzgyY2RlNGMxMzBkYzM0YTM2OWVmIiwidGFnIjoiIn0%3D; expires=Sat, 11-Nov-2023 02:45:28 GMT; Max-Age=7200; path=/; httponly; samesite=lax
server: cloudflare
cf-ray: 82428339a9e456c5-OSL
content-encoding: br
|
|
| emuzkjtabb.eorgesca.ru/web2/assets/microsoftfavicon.ico | 188.114.97.1 | | 448 B |
URL emuzkjtabb.eorgesca.ru/web2/assets/microsoftfavicon.ico IP 188.114.97.1:0
File typeMS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors\012- data Hash12e3dac858061d088023b2bd48e2fa96 e08ce1a144eceae0c3c2ea7a9d6fbc5658f24ce5 90cdaf487716184e4034000935c605d1633926d348116d198f355a98b8c6cd21
GET /web2/assets/microsoftfavicon.ico HTTP/1.1
Host: emuzkjtabb.eorgesca.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://emuzkjtabb.eorgesca.ru/pkttju/
Cookie: XSRF-TOKEN=eyJpdiI6InlRbFhOeDVzMHdvUFc1Ny9RTThmRlE9PSIsInZhbHVlIjoiVDN1TlNwcWFTcDh0UThuMnhyRnNEL0xsLzJDYTF6Z0ovaXYyc25kb1JlbDF4UDNJRVRvZlhiWlBMbXNtcVNTdFkrY2tlOGZEWjVTTFZrVEVySUl4OWNQMUllWExSb0orbWIzZnpQNUpNRVBhcUNUTWlpb1NzbTNUVTlteUFITGYiLCJtYWMiOiIwZGFkNTg1YWIzY2I1NTNlMjY3ZTU4ZWM5YTU0Njk2YTA3ZjViZGNjMTAxODIzMzQwYjUwNzY0MGY5YmIxMWYzIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjBKbnhzL1lFQmVSM2tqRUJGMHB1TWc9PSIsInZhbHVlIjoiOENPb0ZkNWV1UC9iVC9pdldzV29ORjB1OU9BVEhhNHZ2eDROWnBQNlh0eldtYXp2NGNraytPcUkzR2M0SVVLUXdaRVBPRGZLSzRPTSs5dURzYWFqQ1cwQWtyQjYybUppbHVqZHhFbTdWVk9TbjVoSzFSTU9oc3pOTlltQWZWU0IiLCJtYWMiOiJkOWFlYzZmYjllOTY0MGJmOTM4Y2VkYjkzNTJlMGRkZTgwZTA2MzBkZDI4ZmUzMGFiMTE0MTk5MjY4NGZiZWU4IiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 11 Nov 2023 00:45:29 GMT
content-type: image/x-icon
last-modified: Sun, 19 Mar 2023 15:20:17 GMT
etag: W/"4316-5f7425905ae40"
access-control-allow-origin: *
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-frame-options: DENY
content-security-policy: frame-ancestors 'none'
cache-control: max-age=14400
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=H%2BCfBhYs2NwuHlxy2lAjUnXDBPr7jS0GGIjfAE0NKjA9AMd35tESK51W5cLgu7TDoOOpL8%2FwxUWGvX0YB0B%2BSgDeQc9rj3MTp6ZlJqDJV%2BjdVPNYU01vOoBvp4f7Rn6%2BLeVwHSjfD6RrDRI%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
cf-cache-status: HIT
age: 2784
server: cloudflare
cf-ray: 824283467f6c56c5-OSL
content-encoding: br
|
|
| challenges.cloudflare.com/turnstile/v0/g/9914b343/api.js?render=explicit | 104.17.2.184 | 200 OK | 34 kB |
URL GET HTTP/2challenges.cloudflare.com/turnstile/v0/g/9914b343/api.js?render=explicit IP 104.17.2.184:443
Requested byhttps://emuzkjtabb.eorgesca.ru/pkttju/# CertificateIssuerCloudflare, Inc. Subjectchallenges.cloudflare.com Fingerprint5F:E4:AA:8C:2E:24:D2:B1:69:9D:13:28:31:5C:65:FA:97:2A:E9:6E ValidityFri, 18 Aug 2023 00:00:00 GMT - Sat, 17 Aug 2024 23:59:59 GMT
File typeASCII text, with very long lines (34253) Hash6142a5f5c66e2c1be52ee9506a565962 c3b39e8352efd1e0619b6dd62af8b2a917622868 51cd12da61a7401c73472b2ac77067adfa30e9fc0545b4b7c240e9154e011fc7
GET /turnstile/v0/g/9914b343/api.js?render=explicit HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://emuzkjtabb.eorgesca.ru/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 11 Nov 2023 00:45:19 GMT
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
cache-control: max-age=31536000
vary: Accept-Encoding
server: cloudflare
cf-ray: 824283034e370afe-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| emuzkjtabb.eorgesca.ru/web2/assets/css/pages-godaddy.css?cb=1699663520464 | 188.114.97.1 | 200 OK | 38 kB |
URL GET HTTP/3emuzkjtabb.eorgesca.ru/web2/assets/css/pages-godaddy.css?cb=1699663520464 IP 188.114.97.1:443
Requested byhttps://emuzkjtabb.eorgesca.ru/pkttju/# CertificateIssuerGoogle Trust Services LLC Subjecteorgesca.ru Fingerprint3F:72:2A:54:74:C2:7A:6F:62:C8:FC:29:B5:2B:F3:4B:61:70:3D:3F ValidityWed, 01 Nov 2023 16:30:38 GMT - Tue, 30 Jan 2024 16:30:37 GMT
File typeASCII text, with very long lines (1437), with CRLF line terminators Hashd7c87990c89310fcf5a9d4deb542a902 3ed17c7eaf31bb310798ec719b8d93db8a7316f8 709724756ac73892ac3709ec162d48f0aa2a94399d3d86a5df0cf5600be58513
GET /web2/assets/css/pages-godaddy.css?cb=1699663520464 HTTP/1.1
Host: emuzkjtabb.eorgesca.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://emuzkjtabb.eorgesca.ru/pkttju/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 11 Nov 2023 00:45:21 GMT
content-type: text/css
last-modified: Mon, 09 Oct 2023 21:26:59 GMT
etag: W/"954d-6074f4019072e"
access-control-allow-origin: *
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-frame-options: DENY
content-security-policy: frame-ancestors 'none'
cache-control: max-age=14400
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=3xj8h2NktiMLAR00IUbjNunGz%2BT1MSMSEkoQA45eYvTIIKp6Hw5qipymolktB1H2bDV%2BZKLFXiMc%2B%2B00VnXhV1%2FEWbKvb9ql4mwwt5Io5NU333dLMf9kH0Jxh6goX7DmvORL0sqAro%2FS0dE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
cf-cache-status: MISS
server: cloudflare
cf-ray: 8242830b2c3e56c5-OSL
content-encoding: br
|
|
| emuzkjtabb.eorgesca.ru/web2/assets/cloudfavicon.ico | 188.114.97.1 | 200 OK | 34 kB |
URL GET HTTP/3emuzkjtabb.eorgesca.ru/web2/assets/cloudfavicon.ico IP 188.114.97.1:443
Requested byhttps://emuzkjtabb.eorgesca.ru/pkttju/# CertificateIssuerGoogle Trust Services LLC Subjecteorgesca.ru Fingerprint3F:72:2A:54:74:C2:7A:6F:62:C8:FC:29:B5:2B:F3:4B:61:70:3D:3F ValidityWed, 01 Nov 2023 16:30:38 GMT - Tue, 30 Jan 2024 16:30:37 GMT
File typeMS Windows icon resource - 5 icons, 16x16, 32 bits/pixel, 24x24, 32 bits/pixel\012- data Hash88415acda09a4cbd9d87543c3ba78180 2dec4705e9ab399efdc6eef36e079aa31d1df8d9 20cccc47c1bac9d2ef36b6a1c58af58c5c169ad5ca084080f0392b86f949641c
GET /web2/assets/cloudfavicon.ico HTTP/1.1
Host: emuzkjtabb.eorgesca.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://emuzkjtabb.eorgesca.ru/pkttju/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 11 Nov 2023 00:45:21 GMT
content-type: image/x-icon
last-modified: Wed, 16 Aug 2023 15:22:46 GMT
etag: W/"86be-6030bde212b57"
access-control-allow-origin: *
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-frame-options: DENY
content-security-policy: frame-ancestors 'none'
cache-control: max-age=14400
age: 2785
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=XkMUYrQ4Wi8Kwb9UlIHK3bDsXQHLluMuM7nfX43IV92dKzWq82%2BklF9178HqAeSREeJZWmRYOvGMJbLnnBXpiQjT2YpmnlW68aYt0ipKtUK%2FxyYSkBucOB%2F2O%2FDVh%2BinqnKCOA1KO6pkLl0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
cf-cache-status: HIT
server: cloudflare
cf-ray: 8242830f0d9256c5-OSL
content-encoding: br
|
|
| emuzkjtabb.eorgesca.ru/web2/assets/godaddy-microsoftlogo.png | 188.114.97.1 | 200 OK | 71 kB |
URL GET HTTP/3emuzkjtabb.eorgesca.ru/web2/assets/godaddy-microsoftlogo.png IP 188.114.97.1:443
Requested byhttps://emuzkjtabb.eorgesca.ru/pkttju/# CertificateIssuerGoogle Trust Services LLC Subjecteorgesca.ru Fingerprint3F:72:2A:54:74:C2:7A:6F:62:C8:FC:29:B5:2B:F3:4B:61:70:3D:3F ValidityWed, 01 Nov 2023 16:30:38 GMT - Tue, 30 Jan 2024 16:30:37 GMT
File typePNG image data, 2446 x 899, 8-bit/color RGBA, non-interlaced\012- data Hashf70ff06d19498d80b130ec78176fd3ff 9d8a3b74c5164ff7ae2c7930b6d7b14707b404fc df6dbab5251e56b405e48aaf57d3cd4188f073ffba71131fa6cd26e6742923ae
GET /web2/assets/godaddy-microsoftlogo.png HTTP/1.1
Host: emuzkjtabb.eorgesca.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://emuzkjtabb.eorgesca.ru/pkttju/
Cookie: XSRF-TOKEN=eyJpdiI6InlRbFhOeDVzMHdvUFc1Ny9RTThmRlE9PSIsInZhbHVlIjoiVDN1TlNwcWFTcDh0UThuMnhyRnNEL0xsLzJDYTF6Z0ovaXYyc25kb1JlbDF4UDNJRVRvZlhiWlBMbXNtcVNTdFkrY2tlOGZEWjVTTFZrVEVySUl4OWNQMUllWExSb0orbWIzZnpQNUpNRVBhcUNUTWlpb1NzbTNUVTlteUFITGYiLCJtYWMiOiIwZGFkNTg1YWIzY2I1NTNlMjY3ZTU4ZWM5YTU0Njk2YTA3ZjViZGNjMTAxODIzMzQwYjUwNzY0MGY5YmIxMWYzIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjBKbnhzL1lFQmVSM2tqRUJGMHB1TWc9PSIsInZhbHVlIjoiOENPb0ZkNWV1UC9iVC9pdldzV29ORjB1OU9BVEhhNHZ2eDROWnBQNlh0eldtYXp2NGNraytPcUkzR2M0SVVLUXdaRVBPRGZLSzRPTSs5dURzYWFqQ1cwQWtyQjYybUppbHVqZHhFbTdWVk9TbjVoSzFSTU9oc3pOTlltQWZWU0IiLCJtYWMiOiJkOWFlYzZmYjllOTY0MGJmOTM4Y2VkYjkzNTJlMGRkZTgwZTA2MzBkZDI4ZmUzMGFiMTE0MTk5MjY4NGZiZWU4IiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 11 Nov 2023 00:45:29 GMT
content-type: image/png
content-length: 70712
last-modified: Thu, 24 Aug 2023 12:58:17 GMT
etag: "11438-603aac821e121"
access-control-allow-origin: *
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-frame-options: DENY
content-security-policy: frame-ancestors 'none'
cache-control: max-age=14400
age: 2785
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=9XXXK9N40Ms%2FSCLsvnzX0%2FnU2TPwdo4o8oqfYW30oxOftUN%2BnamPtOvmNV16ZG7nQv1AppA1opPoNv%2FotMJ8B0vRZBOrZDWg2Or0tLMVER7Is5%2BcsB67tAiWo%2BPR3H0fznw4445QbaiOAI0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
cf-cache-status: HIT
accept-ranges: bytes
server: cloudflare
cf-ray: 824283426dc156c5-OSL
|
|
| code.jquery.com/jquery-3.6.0.min.js | 151.101.130.137 | 200 OK | 90 kB |
URL GET HTTP/2code.jquery.com/jquery-3.6.0.min.js IP 151.101.130.137:443
Requested byhttps://emuzkjtabb.eorgesca.ru/pkttju/# CertificateIssuerSectigo Limited Subject*.jquery.com FingerprintD2:19:0A:AD:CE:BB:9C:61:17:5D:29:4B:A2:54:E8:C6:91:B8:F9:8D ValidityTue, 11 Jul 2023 00:00:00 GMT - Sun, 14 Jul 2024 23:59:59 GMT
File typeASCII text, with very long lines (65447) Hash8fb8fee4fcc3cc86ff6c724154c49c42 b82d238d4e31fdf618bae8ac11a6c812c03dd0d4 ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e
GET /jquery-3.6.0.min.js HTTP/1.1
Host: code.jquery.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://emuzkjtabb.eorgesca.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Fri, 18 Oct 1991 12:00:00 GMT
etag: W/"28feccc0-15d9d"
cache-control: public, max-age=31536000, stale-while-revalidate=604800
access-control-allow-origin: *
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Sat, 11 Nov 2023 00:45:19 GMT
age: 4425418
x-served-by: cache-lga21931-LGA, cache-bma1683-BMA
x-cache: HIT, HIT
x-cache-hits: 30, 92558
x-timer: S1699663519.323045,VS0,VE0
vary: Accept-Encoding
content-length: 30875
X-Firefox-Spdy: h2
|
|
| emuzkjtabb.eorgesca.ru/web2/assets/js/pages.min.js?cb=1699663520464 | 188.114.97.1 | 200 OK | 92 kB |
URL GET HTTP/3emuzkjtabb.eorgesca.ru/web2/assets/js/pages.min.js?cb=1699663520464 IP 188.114.97.1:443
Requested byhttps://emuzkjtabb.eorgesca.ru/pkttju/# CertificateIssuerGoogle Trust Services LLC Subjecteorgesca.ru Fingerprint3F:72:2A:54:74:C2:7A:6F:62:C8:FC:29:B5:2B:F3:4B:61:70:3D:3F ValidityWed, 01 Nov 2023 16:30:38 GMT - Tue, 30 Jan 2024 16:30:37 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /web2/assets/js/pages.min.js?cb=1699663520464 HTTP/1.1
Host: emuzkjtabb.eorgesca.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://emuzkjtabb.eorgesca.ru/pkttju/
Cookie: XSRF-TOKEN=eyJpdiI6InlRbFhOeDVzMHdvUFc1Ny9RTThmRlE9PSIsInZhbHVlIjoiVDN1TlNwcWFTcDh0UThuMnhyRnNEL0xsLzJDYTF6Z0ovaXYyc25kb1JlbDF4UDNJRVRvZlhiWlBMbXNtcVNTdFkrY2tlOGZEWjVTTFZrVEVySUl4OWNQMUllWExSb0orbWIzZnpQNUpNRVBhcUNUTWlpb1NzbTNUVTlteUFITGYiLCJtYWMiOiIwZGFkNTg1YWIzY2I1NTNlMjY3ZTU4ZWM5YTU0Njk2YTA3ZjViZGNjMTAxODIzMzQwYjUwNzY0MGY5YmIxMWYzIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjBKbnhzL1lFQmVSM2tqRUJGMHB1TWc9PSIsInZhbHVlIjoiOENPb0ZkNWV1UC9iVC9pdldzV29ORjB1OU9BVEhhNHZ2eDROWnBQNlh0eldtYXp2NGNraytPcUkzR2M0SVVLUXdaRVBPRGZLSzRPTSs5dURzYWFqQ1cwQWtyQjYybUppbHVqZHhFbTdWVk9TbjVoSzFSTU9oc3pOTlltQWZWU0IiLCJtYWMiOiJkOWFlYzZmYjllOTY0MGJmOTM4Y2VkYjkzNTJlMGRkZTgwZTA2MzBkZDI4ZmUzMGFiMTE0MTk5MjY4NGZiZWU4IiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 11 Nov 2023 00:45:30 GMT
content-type: application/javascript
last-modified: Wed, 01 Nov 2023 20:01:40 GMT
etag: W/"168df-6091cbd4f670c"
access-control-allow-origin: *
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-frame-options: DENY
content-security-policy: frame-ancestors 'none'
cache-control: max-age=14400
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=EATpEr54pbJU1e%2Bp8Zg1pOvpAutWpNLQjenCvVie9ICu8feb%2BguqDsZZwZPq81%2FdDw3l76FsMLUSRoO3nIcfWbLyxZLpk%2BBcif9cS4ScsC%2FKTlz2EOs4X4zxfLxvvvV9glRc8KBXT%2F4qU64%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
cf-cache-status: MISS
server: cloudflare
cf-ray: 824283427dc856c5-OSL
content-encoding: br
|
|