| disk.grizvolt.ru/index.php/s/yajxrqbqnam2t6y/download/kms%20tools%20portable.rar |  79.164.239.246 | 301 Moved Permanently | 169 B |
URL HTTP/1.1disk.grizvolt.ru/index.php/s/yajxrqbqnam2t6y/download/kms%20tools%20portable.rar IP79.164.239.246:0 ASN#8615 Central Telegraph Public Joint-stock Company
File typeHTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators Hash84855c13836b389d5ec7cfd4c9266173 1cf3056ff23c4176fd7ca9816a000ed461d6d323 502083c916ae481cdd413b8d93315300653df5fb3dcc5770c01991de19977eae
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /index.php/s/yajxrqbqnam2t6y/download/kms%20tools%20portable.rar HTTP/1.1
Host: disk.grizvolt.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Server: nginx/1.18.0
Date: Mon, 26 Sep 2022 15:48:06 GMT
Content-Type: text/html
Content-Length: 169
Connection: keep-alive
Location: https://disk.grizvolt.ru/index.php/s/yajxrqbqnam2t6y/download/kms%20tools%20portable.rar
|
|
| r3.o.lencr.org/ |  23.36.77.32 | 200 OK | 503 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hashd2560f62890e75b8de444fed96c22f52 334ce0c48e606ee029f31eeb1463af87b1024bb9 4397e6b45b5822fbab9b83abe0b96ee70efba7cd2160b51936159865ede5fdb1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "4397E6B45B5822FBAB9B83ABE0B96EE70EFBA7CD2160B51936159865EDE5FDB1"
Last-Modified: Sun, 25 Sep 2022 18:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11031
Expires: Mon, 26 Sep 2022 18:51:57 GMT
Date: Mon, 26 Sep 2022 15:48:06 GMT
Connection: keep-alive
|
|
| firefox.settings.services.mozilla.com/v1/ |  143.204.55.115 | 200 OK | 939 B |
URL HTTP/1.1firefox.settings.services.mozilla.com/v1/ IP143.204.55.115:0
File typeJSON data\012- , ASCII text, with very long lines (939), with no line terminators Hash2d12f67fe57a87e7366b662d153a5582 d7b02d81cc74f24a251d9363e0f4b0a149264ec1 73c273c0b5a2de3cb970b8e8c187999d3b55e760dc7766dab4bb76428d19b551
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Content-Type, Alert, Backoff, Retry-After, Content-Length
Cache-Control: max-age=3600
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Mon, 26 Sep 2022 15:15:18 GMT
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 a2b4f68a89fc87406bff22c95fc07fba.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: 8oXgjHs7ezHb7Mvp0_6Pf1V2ygYzPlYrspUDlOdgnMSa_QdFplvw7w==
Age: 1968
|
|
| content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain | 143.204.55.49 | 200 OK | 5.3 kB |
URL HTTP/2content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain IP143.204.55.49:0
File typePEM certificate\012- , ASCII text Hash6113f8408c59aebe188d6af273b90743 7398873bf00f99944eaa77ad3ebc0d43c23dba6b b6e0cc9ad68306208a160f3835fb8da76acc5a82d8fde1da5a98e1de1c11a770
GET /chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: binary/octet-stream
content-length: 5348
last-modified: Sat, 10 Sep 2022 18:47:45 GMT
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
date: Mon, 26 Sep 2022 04:35:16 GMT
etag: "6113f8408c59aebe188d6af273b90743"
x-cache: Hit from cloudfront
via: 1.1 a6d89f7e2d55548b941f1ff5d5b3c8d4.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: zAOoX9w6GDwXFMX3J5pSmRj_2XJFy1cQ8WNhtPhH3oFJYzdbcrDKAg==
age: 40371
X-Firefox-Spdy: h2
|
|
| contile.services.mozilla.com/v1/tiles | 34.117.237.239 | 200 OK | 12 B |
URL HTTP/2contile.services.mozilla.com/v1/tiles IP34.117.237.239:0
File typeJSON data\012- , ASCII text, with no line terminators Hash23e88fb7b99543fb33315b29b1fad9d6 a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Mon, 26 Sep 2022 15:48:06 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| r3.o.lencr.org/ | 23.36.77.32 | 200 OK | 503 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hashe6a3efe19205ef8b2066b5db34118271 e299590ba43abda164f5bcf6f05ff52de214c6f6 77e4451b69b3803ab2125ceefd99977bf19fe149aecaae2e9568cfeb0d12f4b7
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "77E4451B69B3803AB2125CEEFD99977BF19FE149AECAAE2E9568CFEB0D12F4B7"
Last-Modified: Mon, 26 Sep 2022 15:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21569
Expires: Mon, 26 Sep 2022 21:47:35 GMT
Date: Mon, 26 Sep 2022 15:48:06 GMT
Connection: keep-alive
|
|
| disk.grizvolt.ru/apps/music/dist/webpack.files_music_player.361a5d8ccce9f2d0904e.css?v=ca9f0d77-24 | 79.164.239.246 | 200 OK | 7.5 kB |
URL HTTP/2disk.grizvolt.ru/apps/music/dist/webpack.files_music_player.361a5d8ccce9f2d0904e.css?v=ca9f0d77-24 IP79.164.239.246:0 ASN#8615 Central Telegraph Public Joint-stock Company
Hash6499dda8ccbad9a9596cd295a388701f c2f114f04170151c04b586022c1ffd59d4f6b0b4 a72918e8f28591a10354feb1b404ebdb09eca5f2e5f02ed0a9a96397e91fb1fc
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /apps/music/dist/webpack.files_music_player.361a5d8ccce9f2d0904e.css?v=ca9f0d77-24 HTTP/1.1
Host: disk.grizvolt.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: oc_sessionPassphrase=HOy2yB0uGbm%2BBfJWImPqc%2B8syv1OZar6H%2BC0sFpmVUkP7JsC7zHCDN3%2FjsdeSZc0AeALtm5ZeRYOqbuco25X5pJDIsTb7lJrZY0NuCCV7BPbj3279%2BoqPWhqBApdhrcb; ocav6ijr871k=tnh3i4ov2o0r3ihcefefebh22a; __Host-nc_sameSiteCookielax=true; __Host-nc_sameSiteCookiestrict=true
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx/1.18.0
date: Mon, 26 Sep 2022 15:48:06 GMT
content-type: text/css
content-length: 7495
last-modified: Wed, 14 Sep 2022 19:19:13 GMT
etag: "63222931-1d47"
expires: Fri, 14 Oct 2022 19:19:13 GMT
cache-control: max-age=1567867
strict-transport-security: max-age=31536000; includeSubDomains
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| disk.grizvolt.ru/apps/files_rightclick/css/app.css?v=198068b3-24 | 79.164.239.246 | 200 OK | 412 B |
URL HTTP/2disk.grizvolt.ru/apps/files_rightclick/css/app.css?v=198068b3-24 IP79.164.239.246:0 ASN#8615 Central Telegraph Public Joint-stock Company
Hashfdf5f4b9a2cf9214a61c17e5455f4f57 cd2b0c8819d98513930bac4284ac16d9820a1a3c 2d1f3b92d7591b69a06cb8bd6cda8e4d2fa4ed9ebb470488990780a2423d0bb7
GET /apps/files_rightclick/css/app.css?v=198068b3-24 HTTP/1.1
Host: disk.grizvolt.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: oc_sessionPassphrase=HOy2yB0uGbm%2BBfJWImPqc%2B8syv1OZar6H%2BC0sFpmVUkP7JsC7zHCDN3%2FjsdeSZc0AeALtm5ZeRYOqbuco25X5pJDIsTb7lJrZY0NuCCV7BPbj3279%2BoqPWhqBApdhrcb; ocav6ijr871k=tnh3i4ov2o0r3ihcefefebh22a; __Host-nc_sameSiteCookielax=true; __Host-nc_sameSiteCookiestrict=true
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx/1.18.0
date: Mon, 26 Sep 2022 15:48:06 GMT
content-type: text/css
content-length: 412
last-modified: Wed, 14 Sep 2022 17:39:20 GMT
etag: "632211c8-19c"
expires: Fri, 14 Oct 2022 17:39:20 GMT
cache-control: max-age=1561874
strict-transport-security: max-age=31536000; includeSubDomains
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| disk.grizvolt.ru/apps/unsplash/css/login.css?v=db3daece-24 | 79.164.239.246 | 200 OK | 467 B |
URL HTTP/2disk.grizvolt.ru/apps/unsplash/css/login.css?v=db3daece-24 IP79.164.239.246:0 ASN#8615 Central Telegraph Public Joint-stock Company
Hash80efbde01c0eb9e201f8d176ee491092 e24dae196403c0db9e73fb783bd3f6fbf4621cb4 2d701bdf83199c20a26aa4f84369c1a448ec5758c003a9fc8aef4b4a667b5cee
GET /apps/unsplash/css/login.css?v=db3daece-24 HTTP/1.1
Host: disk.grizvolt.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: oc_sessionPassphrase=HOy2yB0uGbm%2BBfJWImPqc%2B8syv1OZar6H%2BC0sFpmVUkP7JsC7zHCDN3%2FjsdeSZc0AeALtm5ZeRYOqbuco25X5pJDIsTb7lJrZY0NuCCV7BPbj3279%2BoqPWhqBApdhrcb; ocav6ijr871k=tnh3i4ov2o0r3ihcefefebh22a; __Host-nc_sameSiteCookielax=true; __Host-nc_sameSiteCookiestrict=true
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx/1.18.0
date: Mon, 26 Sep 2022 15:48:06 GMT
content-type: text/css
content-length: 467
last-modified: Wed, 25 May 2022 08:16:09 GMT
etag: "628de5c9-1d3"
expires: Fri, 24 Jun 2022 08:16:09 GMT
cache-control: no-cache
strict-transport-security: max-age=31536000; includeSubDomains
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US | 143.204.55.115 | 200 OK | 329 B |
URL HTTP/1.1firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US IP143.204.55.115:0
File typeJSON data\012- , ASCII text, with very long lines (329), with no line terminators Hash0333b0655111aa68de771adfcc4db243 63f295a144ac87a7c8e23417626724eeca68a7eb 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: ETag, Expires, Content-Length, Cache-Control, Pragma, Content-Type, Alert, Backoff, Last-Modified, Retry-After
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Cache-Control: max-age=3600, max-age=3600
Date: Mon, 26 Sep 2022 15:10:46 GMT
Expires: Mon, 26 Sep 2022 15:23:12 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 410f51195842d9b592b15d6588c36654.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: rGPSUEMIrrtA5cWhyJypMA5PleZw8KU6PimvomuLV95mTe-6G5hdOA==
Age: 2240
|
|
| disk.grizvolt.ru/core/css/guest.css?v=f87f2977-24 | 79.164.239.246 | 200 OK | 22 kB |
URL HTTP/2disk.grizvolt.ru/core/css/guest.css?v=f87f2977-24 IP79.164.239.246:0 ASN#8615 Central Telegraph Public Joint-stock Company
File typeASCII text, with very long lines (455) Hashd781a20849ae6bb5b75200615bd59676 7f5b0afb7e675f47c314ca4e6575aa75a8363d72 46b03c96ae558e5f6d42a95ab2cc8bf39c963e66e5874d2de98ecb3b0fc80c8f
GET /core/css/guest.css?v=f87f2977-24 HTTP/1.1
Host: disk.grizvolt.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: oc_sessionPassphrase=HOy2yB0uGbm%2BBfJWImPqc%2B8syv1OZar6H%2BC0sFpmVUkP7JsC7zHCDN3%2FjsdeSZc0AeALtm5ZeRYOqbuco25X5pJDIsTb7lJrZY0NuCCV7BPbj3279%2BoqPWhqBApdhrcb; ocav6ijr871k=tnh3i4ov2o0r3ihcefefebh22a; __Host-nc_sameSiteCookielax=true; __Host-nc_sameSiteCookiestrict=true
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx/1.18.0
date: Mon, 26 Sep 2022 15:48:06 GMT
content-type: text/css
content-length: 21612
last-modified: Wed, 14 Sep 2022 17:39:20 GMT
etag: "632211c8-546c"
expires: Fri, 14 Oct 2022 17:39:20 GMT
cache-control: max-age=1561874
strict-transport-security: max-age=31536000; includeSubDomains
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| disk.grizvolt.ru/dist/core-files_fileinfo.js?v=f87f2977-24 | 79.164.239.246 | 200 OK | 928 B |
URL HTTP/2disk.grizvolt.ru/dist/core-files_fileinfo.js?v=f87f2977-24 IP79.164.239.246:0 ASN#8615 Central Telegraph Public Joint-stock Company
File typeASCII text, with very long lines (780) Hash7c7bdc349e1bdb7494ca37540d06b7f8 e56f3ad7e0623640211db61b521f33e7e7e62860 1889e20598b510771e1c2c378ce8cc073fd2e1f6cdaa9c65a9031a68514d5e02
GET /dist/core-files_fileinfo.js?v=f87f2977-24 HTTP/1.1
Host: disk.grizvolt.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: oc_sessionPassphrase=HOy2yB0uGbm%2BBfJWImPqc%2B8syv1OZar6H%2BC0sFpmVUkP7JsC7zHCDN3%2FjsdeSZc0AeALtm5ZeRYOqbuco25X5pJDIsTb7lJrZY0NuCCV7BPbj3279%2BoqPWhqBApdhrcb; ocav6ijr871k=tnh3i4ov2o0r3ihcefefebh22a; __Host-nc_sameSiteCookielax=true; __Host-nc_sameSiteCookiestrict=true
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx/1.18.0
date: Mon, 26 Sep 2022 15:48:06 GMT
content-type: application/javascript
content-length: 928
last-modified: Wed, 14 Sep 2022 17:39:20 GMT
etag: "632211c8-3a0"
expires: Fri, 14 Oct 2022 17:39:20 GMT
cache-control: max-age=1561874
strict-transport-security: max-age=31536000; includeSubDomains
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| disk.grizvolt.ru/dist/core-files_client.js?v=f87f2977-24 | 79.164.239.246 | 200 OK | 12 kB |
URL HTTP/2disk.grizvolt.ru/dist/core-files_client.js?v=f87f2977-24 IP79.164.239.246:0 ASN#8615 Central Telegraph Public Joint-stock Company
File typeASCII text, with very long lines (12318) Hash1e0f99b21be206ce53798a4a30631fa2 471540737b2c399966db05ac50c6e47193642df1 5fc9d9568976eab1260de67055d73f200fd729254477e3c34b19eaff26734bfc
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /dist/core-files_client.js?v=f87f2977-24 HTTP/1.1
Host: disk.grizvolt.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: oc_sessionPassphrase=HOy2yB0uGbm%2BBfJWImPqc%2B8syv1OZar6H%2BC0sFpmVUkP7JsC7zHCDN3%2FjsdeSZc0AeALtm5ZeRYOqbuco25X5pJDIsTb7lJrZY0NuCCV7BPbj3279%2BoqPWhqBApdhrcb; ocav6ijr871k=tnh3i4ov2o0r3ihcefefebh22a; __Host-nc_sameSiteCookielax=true; __Host-nc_sameSiteCookiestrict=true
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx/1.18.0
date: Mon, 26 Sep 2022 15:48:06 GMT
content-type: application/javascript
content-length: 12462
last-modified: Wed, 14 Sep 2022 17:39:20 GMT
etag: "632211c8-30ae"
expires: Fri, 14 Oct 2022 17:39:20 GMT
cache-control: max-age=1561874
strict-transport-security: max-age=31536000; includeSubDomains
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| disk.grizvolt.ru/dist/files_sharing-main.js?v=f87f2977-24 | 79.164.239.246 | 200 OK | 371 B |
URL HTTP/2disk.grizvolt.ru/dist/files_sharing-main.js?v=f87f2977-24 IP79.164.239.246:0 ASN#8615 Central Telegraph Public Joint-stock Company
Hash757ae5c6ed8301a47c368a464cffde66 08bfc89db0f17aaf9a4edd8b81cecc9069d147c8 6e31f758314d2748c68e8db4aafbc5c6c26574ed21dee3c191e900ddba223d60
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /dist/files_sharing-main.js?v=f87f2977-24 HTTP/1.1
Host: disk.grizvolt.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: oc_sessionPassphrase=HOy2yB0uGbm%2BBfJWImPqc%2B8syv1OZar6H%2BC0sFpmVUkP7JsC7zHCDN3%2FjsdeSZc0AeALtm5ZeRYOqbuco25X5pJDIsTb7lJrZY0NuCCV7BPbj3279%2BoqPWhqBApdhrcb; ocav6ijr871k=tnh3i4ov2o0r3ihcefefebh22a; __Host-nc_sameSiteCookielax=true; __Host-nc_sameSiteCookiestrict=true
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx/1.18.0
date: Mon, 26 Sep 2022 15:48:06 GMT
content-type: application/javascript
content-length: 371
last-modified: Wed, 14 Sep 2022 17:39:20 GMT
etag: "632211c8-173"
expires: Fri, 14 Oct 2022 17:39:20 GMT
cache-control: max-age=1561874
strict-transport-security: max-age=31536000; includeSubDomains
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| disk.grizvolt.ru/dist/accessibility-accessibilityoca.js?v=f87f2977-24 | 79.164.239.246 | 200 OK | 2.5 kB |
URL HTTP/2disk.grizvolt.ru/dist/accessibility-accessibilityoca.js?v=f87f2977-24 IP79.164.239.246:0 ASN#8615 Central Telegraph Public Joint-stock Company
File typeASCII text, with very long lines (2340) Hashf8ee4537689e92bb6e972aaebc442d26 7cca77bee2157412fc99ba6dcff77b3262bd57eb 1024f983ca3d6bca03fa8731f5b54a53a964236f8319c8c526b764f8717df463
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /dist/accessibility-accessibilityoca.js?v=f87f2977-24 HTTP/1.1
Host: disk.grizvolt.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: oc_sessionPassphrase=HOy2yB0uGbm%2BBfJWImPqc%2B8syv1OZar6H%2BC0sFpmVUkP7JsC7zHCDN3%2FjsdeSZc0AeALtm5ZeRYOqbuco25X5pJDIsTb7lJrZY0NuCCV7BPbj3279%2BoqPWhqBApdhrcb; ocav6ijr871k=tnh3i4ov2o0r3ihcefefebh22a; __Host-nc_sameSiteCookielax=true; __Host-nc_sameSiteCookiestrict=true
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx/1.18.0
date: Mon, 26 Sep 2022 15:48:06 GMT
content-type: application/javascript
content-length: 2510
last-modified: Wed, 14 Sep 2022 17:39:20 GMT
etag: "632211c8-9ce"
expires: Fri, 14 Oct 2022 17:39:20 GMT
cache-control: max-age=1561874
strict-transport-security: max-age=31536000; includeSubDomains
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| disk.grizvolt.ru/apps/files_rightclick/js/script.js?v=f87f2977-24 | 79.164.239.246 | 200 OK | 15 kB |
URL HTTP/2disk.grizvolt.ru/apps/files_rightclick/js/script.js?v=f87f2977-24 IP79.164.239.246:0 ASN#8615 Central Telegraph Public Joint-stock Company
Hashc96a8f5f25ef51f00b32b37b051fb4ce f117ec65e8387932c674908a30ab90d0a7f01eba 2263fdb9b43029256cf21ee1a577e3d4cc91ae150949200c05733b19e1e15912
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /apps/files_rightclick/js/script.js?v=f87f2977-24 HTTP/1.1
Host: disk.grizvolt.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: oc_sessionPassphrase=HOy2yB0uGbm%2BBfJWImPqc%2B8syv1OZar6H%2BC0sFpmVUkP7JsC7zHCDN3%2FjsdeSZc0AeALtm5ZeRYOqbuco25X5pJDIsTb7lJrZY0NuCCV7BPbj3279%2BoqPWhqBApdhrcb; ocav6ijr871k=tnh3i4ov2o0r3ihcefefebh22a; __Host-nc_sameSiteCookielax=true; __Host-nc_sameSiteCookiestrict=true
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx/1.18.0
date: Mon, 26 Sep 2022 15:48:06 GMT
content-type: application/javascript
content-length: 14871
last-modified: Wed, 14 Sep 2022 17:39:20 GMT
etag: "632211c8-3a17"
expires: Fri, 14 Oct 2022 17:39:20 GMT
cache-control: max-age=1561874
strict-transport-security: max-age=31536000; includeSubDomains
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| disk.grizvolt.ru/apps/files_rightclick/js/files.js?v=f87f2977-24 | 79.164.239.246 | 200 OK | 4.8 kB |
URL HTTP/2disk.grizvolt.ru/apps/files_rightclick/js/files.js?v=f87f2977-24 IP79.164.239.246:0 ASN#8615 Central Telegraph Public Joint-stock Company
Hasha682b52f941fdd957bf3538f10737736 8f668164a5519e1dbc69d2dcdb8c4f769d621373 aa78ab981938cac2c4c07e3a247c6c244e51f6820a2ffe371b8c22ea2905c9d6
GET /apps/files_rightclick/js/files.js?v=f87f2977-24 HTTP/1.1
Host: disk.grizvolt.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: oc_sessionPassphrase=HOy2yB0uGbm%2BBfJWImPqc%2B8syv1OZar6H%2BC0sFpmVUkP7JsC7zHCDN3%2FjsdeSZc0AeALtm5ZeRYOqbuco25X5pJDIsTb7lJrZY0NuCCV7BPbj3279%2BoqPWhqBApdhrcb; ocav6ijr871k=tnh3i4ov2o0r3ihcefefebh22a; __Host-nc_sameSiteCookielax=true; __Host-nc_sameSiteCookiestrict=true
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx/1.18.0
date: Mon, 26 Sep 2022 15:48:06 GMT
content-type: application/javascript
content-length: 4773
last-modified: Wed, 14 Sep 2022 17:39:20 GMT
etag: "632211c8-12a5"
expires: Fri, 14 Oct 2022 17:39:20 GMT
cache-control: max-age=1561874
strict-transport-security: max-age=31536000; includeSubDomains
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| disk.grizvolt.ru/apps/theming/js/theming.js?v=f87f2977-24 | 79.164.239.246 | 200 OK | 60 B |
URL HTTP/2disk.grizvolt.ru/apps/theming/js/theming.js?v=f87f2977-24 IP79.164.239.246:0 ASN#8615 Central Telegraph Public Joint-stock Company
Hash44b0d37d24a2e33ca0b64b50f83cfd6a 1c09d10dcabf2c8fac03ea3b56852ca3feb58cb0 ec4e73e49bca3f6e523c3dfd66e58fa157c81c4da5eb3fa0ceaa589ba8dc0785
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /apps/theming/js/theming.js?v=f87f2977-24 HTTP/1.1
Host: disk.grizvolt.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: oc_sessionPassphrase=HOy2yB0uGbm%2BBfJWImPqc%2B8syv1OZar6H%2BC0sFpmVUkP7JsC7zHCDN3%2FjsdeSZc0AeALtm5ZeRYOqbuco25X5pJDIsTb7lJrZY0NuCCV7BPbj3279%2BoqPWhqBApdhrcb; ocav6ijr871k=tnh3i4ov2o0r3ihcefefebh22a; __Host-nc_sameSiteCookielax=true; __Host-nc_sameSiteCookiestrict=true
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx/1.18.0
date: Mon, 26 Sep 2022 15:48:06 GMT
content-type: application/javascript
content-length: 60
last-modified: Wed, 14 Sep 2022 17:39:20 GMT
etag: "632211c8-3c"
expires: Fri, 14 Oct 2022 17:39:20 GMT
cache-control: max-age=1561874
strict-transport-security: max-age=31536000; includeSubDomains
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| disk.grizvolt.ru/dist/core-main.js?v=f87f2977-24 | 79.164.239.246 | 200 OK | 138 kB |
URL HTTP/2disk.grizvolt.ru/dist/core-main.js?v=f87f2977-24 IP79.164.239.246:0 ASN#8615 Central Telegraph Public Joint-stock Company
File typeUnicode text, UTF-8 text, with very long lines (65459) Size138 kB (137689 bytes) Hash51ce047c8a3b3843b5eeb4f4f1bf428f 3f1d1de4421e87b0d18d6299822c9368bd6ec377 7829021174904bdd4c0b131fe4ab01e7572cc691fc01d6e463b5141838385a64
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /dist/core-main.js?v=f87f2977-24 HTTP/1.1
Host: disk.grizvolt.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: oc_sessionPassphrase=HOy2yB0uGbm%2BBfJWImPqc%2B8syv1OZar6H%2BC0sFpmVUkP7JsC7zHCDN3%2FjsdeSZc0AeALtm5ZeRYOqbuco25X5pJDIsTb7lJrZY0NuCCV7BPbj3279%2BoqPWhqBApdhrcb; ocav6ijr871k=tnh3i4ov2o0r3ihcefefebh22a; __Host-nc_sameSiteCookielax=true; __Host-nc_sameSiteCookiestrict=true
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx/1.18.0
date: Mon, 26 Sep 2022 15:48:06 GMT
content-type: application/javascript
content-length: 137689
last-modified: Wed, 14 Sep 2022 17:39:20 GMT
etag: "632211c8-219d9"
expires: Fri, 14 Oct 2022 17:39:20 GMT
cache-control: max-age=1561874
strict-transport-security: max-age=31536000; includeSubDomains
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| disk.grizvolt.ru/index.php/css/icons/icons-vars.css?v=1663183318 | 79.164.239.246 | 200 OK | 271 kB |
URL HTTP/2disk.grizvolt.ru/index.php/css/icons/icons-vars.css?v=1663183318 IP79.164.239.246:0 ASN#8615 Central Telegraph Public Joint-stock Company
File typeASCII text, with very long lines (65528) Size271 kB (271392 bytes) Hash99f9dfcceb53359eb3ceed189c7e9696 902ace0cae7f20141a3a2af971b2fd17d8355f7d 4e9861d32b216c0cbb31e5112b6eb396120c51388d865911a8d0ab39c91bd977
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /index.php/css/icons/icons-vars.css?v=1663183318 HTTP/1.1
Host: disk.grizvolt.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: oc_sessionPassphrase=HOy2yB0uGbm%2BBfJWImPqc%2B8syv1OZar6H%2BC0sFpmVUkP7JsC7zHCDN3%2FjsdeSZc0AeALtm5ZeRYOqbuco25X5pJDIsTb7lJrZY0NuCCV7BPbj3279%2BoqPWhqBApdhrcb; ocav6ijr871k=tnh3i4ov2o0r3ihcefefebh22a; __Host-nc_sameSiteCookielax=true; __Host-nc_sameSiteCookiestrict=true
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx/1.18.0
date: Mon, 26 Sep 2022 15:48:07 GMT
content-type: text/css;charset=UTF-8
content-length: 271392
referrer-policy: no-referrer
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-permitted-cross-domain-policies: none
x-xss-protection: 1; mode=block
last-modified: Wed, 14 Sep 2022 19:21:58 +0000
etag: "63dd71ed47674b14a555dc53241c9b99"
cache-control: max-age=31536000, immutable
x-request-id: 1BnACClYg5DAYaHcjH6b
content-security-policy: default-src 'none';base-uri 'none';manifest-src 'self';frame-ancestors 'none'
feature-policy: autoplay 'none';camera 'none';fullscreen 'none';geolocation 'none';microphone 'none';payment 'none'
x-robots-tag: none
content-disposition: inline; filename="icons-vars.css"
expires: Tue, 26 Sep 2023 15:48:07 +0000
pragma: cache
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
|
|
| disk.grizvolt.ru/index.php/css/core/7fcc-5cbd-css-variables.css?v=9bb603fd960a76f4e4a2299f3fcda655-f87f2977-24 | 79.164.239.246 | 200 OK | 712 B |
URL HTTP/2disk.grizvolt.ru/index.php/css/core/7fcc-5cbd-css-variables.css?v=9bb603fd960a76f4e4a2299f3fcda655-f87f2977-24 IP79.164.239.246:0 ASN#8615 Central Telegraph Public Joint-stock Company
File typeASCII text, with very long lines (1851), with no line terminators Hashf9329702d2ed147d6d478e0d07662c25 a6a068dfa12f58f5951ca6f81bd3634b89d488b6 73f49e975f2dc21d7cdfbbd602e7fb1d70b1f8a7d1834f57e2685e78ed3fc747
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /index.php/css/core/7fcc-5cbd-css-variables.css?v=9bb603fd960a76f4e4a2299f3fcda655-f87f2977-24 HTTP/1.1
Host: disk.grizvolt.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: oc_sessionPassphrase=HOy2yB0uGbm%2BBfJWImPqc%2B8syv1OZar6H%2BC0sFpmVUkP7JsC7zHCDN3%2FjsdeSZc0AeALtm5ZeRYOqbuco25X5pJDIsTb7lJrZY0NuCCV7BPbj3279%2BoqPWhqBApdhrcb; ocav6ijr871k=tnh3i4ov2o0r3ihcefefebh22a; __Host-nc_sameSiteCookielax=true; __Host-nc_sameSiteCookiestrict=true
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx/1.18.0
date: Mon, 26 Sep 2022 15:48:07 GMT
content-type: text/css;charset=UTF-8
content-length: 712
referrer-policy: no-referrer
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-permitted-cross-domain-policies: none
x-xss-protection: 1; mode=block
last-modified: Wed, 14 Sep 2022 17:42:19 +0000
etag: "26baaf18c8e9000bf4c3c6188ffccb5c"
cache-control: max-age=31536000, immutable
x-request-id: srrTn29v7ktomx0goKf7
content-security-policy: default-src 'none';base-uri 'none';manifest-src 'self';frame-ancestors 'none'
feature-policy: autoplay 'none';camera 'none';fullscreen 'none';geolocation 'none';microphone 'none';payment 'none'
x-robots-tag: none
content-disposition: inline; filename="7fcc-5cbd-css-variables.css.gzip"
content-encoding: gzip
expires: Tue, 26 Sep 2023 15:48:07 +0000
pragma: cache
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
|
|
| disk.grizvolt.ru/index.php/css/core/7fcc-5cbd-server.css?v=9bb603fd960a76f4e4a2299f3fcda655-f87f2977-24 | 79.164.239.246 | 200 OK | 20 kB |
URL HTTP/2disk.grizvolt.ru/index.php/css/core/7fcc-5cbd-server.css?v=9bb603fd960a76f4e4a2299f3fcda655-f87f2977-24 IP79.164.239.246:0 ASN#8615 Central Telegraph Public Joint-stock Company
File typeASCII text, with very long lines (65536), with no line terminators Hashca85c35fcc3e084ca790797c20332156 0eafd8daa829d94a9f7193d56a1b070d33ac8ed9 d0a0b86495351e63930d8e717a544a074a33a9b3610bd19761aa594434b316fe
GET /index.php/css/core/7fcc-5cbd-server.css?v=9bb603fd960a76f4e4a2299f3fcda655-f87f2977-24 HTTP/1.1
Host: disk.grizvolt.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: oc_sessionPassphrase=HOy2yB0uGbm%2BBfJWImPqc%2B8syv1OZar6H%2BC0sFpmVUkP7JsC7zHCDN3%2FjsdeSZc0AeALtm5ZeRYOqbuco25X5pJDIsTb7lJrZY0NuCCV7BPbj3279%2BoqPWhqBApdhrcb; ocav6ijr871k=tnh3i4ov2o0r3ihcefefebh22a; __Host-nc_sameSiteCookielax=true; __Host-nc_sameSiteCookiestrict=true
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx/1.18.0
date: Mon, 26 Sep 2022 15:48:07 GMT
content-type: text/css;charset=UTF-8
content-length: 19856
referrer-policy: no-referrer
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-permitted-cross-domain-policies: none
x-xss-protection: 1; mode=block
last-modified: Wed, 14 Sep 2022 17:42:19 +0000
etag: "bf9eb5ed2fcd068a29767cfd10b80102"
cache-control: max-age=31536000, immutable
x-request-id: XArDrD2pEPjtOUMbFy7H
content-security-policy: default-src 'none';base-uri 'none';manifest-src 'self';frame-ancestors 'none'
feature-policy: autoplay 'none';camera 'none';fullscreen 'none';geolocation 'none';microphone 'none';payment 'none'
x-robots-tag: none
content-disposition: inline; filename="7fcc-5cbd-server.css.gzip"
content-encoding: gzip
expires: Tue, 26 Sep 2023 15:48:07 +0000
pragma: cache
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
|
|
| disk.grizvolt.ru/index.php/apps/theming/styles?v=24 | 79.164.239.246 | 200 OK | 2.0 kB |
URL HTTP/2disk.grizvolt.ru/index.php/apps/theming/styles?v=24 IP79.164.239.246:0 ASN#8615 Central Telegraph Public Joint-stock Company
File typeASCII text, with very long lines (1991), with no line terminators Hashef3e1446dbad69c2f66b7a2e83baf83e 477e37d6edaaa47423890c737abecb24ba0150d2 fa79442a954f17c46ce0dd94d32a10d81a99d1994fc845a6f714bc023bf1a162
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /index.php/apps/theming/styles?v=24 HTTP/1.1
Host: disk.grizvolt.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: oc_sessionPassphrase=HOy2yB0uGbm%2BBfJWImPqc%2B8syv1OZar6H%2BC0sFpmVUkP7JsC7zHCDN3%2FjsdeSZc0AeALtm5ZeRYOqbuco25X5pJDIsTb7lJrZY0NuCCV7BPbj3279%2BoqPWhqBApdhrcb; ocav6ijr871k=tnh3i4ov2o0r3ihcefefebh22a; __Host-nc_sameSiteCookielax=true; __Host-nc_sameSiteCookiestrict=true
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx/1.18.0
date: Mon, 26 Sep 2022 15:48:07 GMT
content-type: text/css;charset=UTF-8
content-length: 1991
referrer-policy: no-referrer
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-permitted-cross-domain-policies: none
x-xss-protection: 1; mode=block
last-modified: Wed, 14 Sep 2022 17:42:20 +0000
etag: "f19c85666d50c7799a1678792178f535"
cache-control: private, max-age=86400, must-revalidate
x-request-id: EFVgqcWDrsaP1SwMLIM0
content-security-policy: default-src 'none';base-uri 'none';manifest-src 'self';frame-ancestors 'none'
feature-policy: autoplay 'none';camera 'none';fullscreen 'none';geolocation 'none';microphone 'none';payment 'none'
x-robots-tag: none
content-disposition: inline; filename="d71e-5cbd-theming.css"
pragma: private
expires: Tue, 27 Sep 2022 15:48:07 +0000
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
|
|
| disk.grizvolt.ru/index.php/apps/theming/image/logo?useSvg=1&v=24 | 79.164.239.246 | 200 OK | 231 kB |
URL HTTP/2disk.grizvolt.ru/index.php/apps/theming/image/logo?useSvg=1&v=24 IP79.164.239.246:0 ASN#8615 Central Telegraph Public Joint-stock Company
File typePNG image data, 994 x 980, 8-bit/color RGBA, non-interlaced\012- data Size231 kB (230973 bytes) Hash9aa9dbf886021600fe8cfa2e23e9e339 00f66a52bd45415da94b7e61f080bf2cfea0e374 02a0938889d80308372cd29b6f2e3530b70483976e117e0290193ce06f792996
GET /index.php/apps/theming/image/logo?useSvg=1&v=24 HTTP/1.1
Host: disk.grizvolt.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: oc_sessionPassphrase=HOy2yB0uGbm%2BBfJWImPqc%2B8syv1OZar6H%2BC0sFpmVUkP7JsC7zHCDN3%2FjsdeSZc0AeALtm5ZeRYOqbuco25X5pJDIsTb7lJrZY0NuCCV7BPbj3279%2BoqPWhqBApdhrcb; ocav6ijr871k=tnh3i4ov2o0r3ihcefefebh22a; __Host-nc_sameSiteCookielax=true; __Host-nc_sameSiteCookiestrict=true
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx/1.18.0
date: Mon, 26 Sep 2022 15:48:07 GMT
content-type: image/png
content-length: 230973
referrer-policy: no-referrer
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-permitted-cross-domain-policies: none
x-xss-protection: 1; mode=block
last-modified: Thu, 06 Jan 2022 07:51:24 +0000
etag: "8c4d6f729d2d0cced55921e0a5aff2aa"
cache-control: private, max-age=3600, must-revalidate
x-request-id: YuRI8xHCuya8T7fVVRgN
content-security-policy: default-src 'none';base-uri 'none';manifest-src 'self';script-src 'nonce-c3hnRkYrVFBkbFArN2JlNytrdjd5R0JNazYyMkRWV0lzL3lodFo3djhMQT06K1hrOVdZdWdCUVhNcklhUHJnS0RyQWQvOHB6eWJDYi8yNXJqaFBYWG90VT0=' blob:;style-src 'self' 'unsafe-inline';img-src 'self' data: blob: https://disk.grizvolt.ru https://*.tile.openstreetmap.org https://source.unsplash.com https://images.unsplash.com;font-src 'self' data:;connect-src 'self' blob: stun.nextcloud.com:443;media-src 'self' blob:;frame-src 'self' https://disk.grizvolt.ru;child-src blob: 'self';frame-ancestors 'self' https://disk.grizvolt.ru;worker-src 'self' blob:;form-action 'self' https://disk.grizvolt.ru
feature-policy: autoplay 'none';camera 'none';fullscreen 'none';geolocation 'none';microphone 'none';payment 'none'
x-robots-tag: none
content-disposition: attachment; filename="logo"
pragma: private
expires: Mon, 26 Sep 2022 16:48:07 +0000
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
|
|
| push.services.mozilla.com/ | 35.80.175.197 | 101 Switching Protocols | 0 B |
URL HTTP/1.1push.services.mozilla.com/ IP35.80.175.197:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: LzGx82q2DWlVQLGPAIbNhg==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: jc0EwsTpCKNbyxZYjdvEt6S9Rn8=
|
|
| disk.grizvolt.ru/apps/music/dist/webpack.files_music_player.47ff0ab9f20e96966cfe.js?v=f87f2977-24 | 79.164.239.246 | 200 OK | 552 kB |
URL HTTP/2disk.grizvolt.ru/apps/music/dist/webpack.files_music_player.47ff0ab9f20e96966cfe.js?v=f87f2977-24 IP79.164.239.246:0 ASN#8615 Central Telegraph Public Joint-stock Company
File typeUnicode text, UTF-8 text, with very long lines (65427) Size552 kB (552200 bytes) Hash58a741cf323cf56cdead431ed63e1216 35a1d4b78109dc78dbcb57cfc8aaf06d8c744f2f b1833a19e043e6d90521c66bdf4cd81fe7722684e96a45a99b1b7390752a6332
GET /apps/music/dist/webpack.files_music_player.47ff0ab9f20e96966cfe.js?v=f87f2977-24 HTTP/1.1
Host: disk.grizvolt.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: oc_sessionPassphrase=HOy2yB0uGbm%2BBfJWImPqc%2B8syv1OZar6H%2BC0sFpmVUkP7JsC7zHCDN3%2FjsdeSZc0AeALtm5ZeRYOqbuco25X5pJDIsTb7lJrZY0NuCCV7BPbj3279%2BoqPWhqBApdhrcb; ocav6ijr871k=tnh3i4ov2o0r3ihcefefebh22a; __Host-nc_sameSiteCookielax=true; __Host-nc_sameSiteCookiestrict=true
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx/1.18.0
date: Mon, 26 Sep 2022 15:48:06 GMT
content-type: application/javascript
content-length: 552200
last-modified: Wed, 14 Sep 2022 19:19:13 GMT
etag: "63222931-86d08"
expires: Fri, 14 Oct 2022 19:19:13 GMT
cache-control: max-age=1567867
strict-transport-security: max-age=31536000; includeSubDomains
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| disk.grizvolt.ru/index.php/js/core/merged-template-prepend.js?v=f87f2977-24 | 79.164.239.246 | 200 OK | 3.1 kB |
URL HTTP/2disk.grizvolt.ru/index.php/js/core/merged-template-prepend.js?v=f87f2977-24 IP79.164.239.246:0 ASN#8615 Central Telegraph Public Joint-stock Company
Hash9ea2faef93a66a111807bd8427636654 e82570c5ce89397158d7ad34b0f628f57ef439bd 5a714ea86f3ce9eb59a67cd96e45939d55e0563ff848718beacdfd28f30fab03
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /index.php/js/core/merged-template-prepend.js?v=f87f2977-24 HTTP/1.1
Host: disk.grizvolt.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: oc_sessionPassphrase=HOy2yB0uGbm%2BBfJWImPqc%2B8syv1OZar6H%2BC0sFpmVUkP7JsC7zHCDN3%2FjsdeSZc0AeALtm5ZeRYOqbuco25X5pJDIsTb7lJrZY0NuCCV7BPbj3279%2BoqPWhqBApdhrcb; ocav6ijr871k=tnh3i4ov2o0r3ihcefefebh22a; __Host-nc_sameSiteCookielax=true; __Host-nc_sameSiteCookiestrict=true
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx/1.18.0
date: Mon, 26 Sep 2022 15:48:07 GMT
content-type: application/javascript
content-length: 3054
referrer-policy: no-referrer
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-permitted-cross-domain-policies: none
x-xss-protection: 1; mode=block
last-modified: Wed, 14 Sep 2022 17:42:19 +0000
etag: "cb6c9402fd095501a7e553e3e50c9ec4"
cache-control: max-age=31536000, immutable
x-request-id: VtAX6JvSInvjUoHUSKDy
content-security-policy: default-src 'none';base-uri 'none';manifest-src 'self';frame-ancestors 'none'
feature-policy: autoplay 'none';camera 'none';fullscreen 'none';geolocation 'none';microphone 'none';payment 'none'
x-robots-tag: none
content-disposition: inline; filename="merged-template-prepend.js.gzip"
content-encoding: gzip
expires: Tue, 26 Sep 2023 15:48:07 +0000
pragma: cache
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
|
|
| disk.grizvolt.ru/index.php/apps/theming/image/logo?v=24 | 79.164.239.246 | 200 OK | 231 kB |
URL HTTP/2disk.grizvolt.ru/index.php/apps/theming/image/logo?v=24 IP79.164.239.246:0 ASN#8615 Central Telegraph Public Joint-stock Company
File typePNG image data, 994 x 980, 8-bit/color RGBA, non-interlaced\012- data Size231 kB (230973 bytes) Hash9aa9dbf886021600fe8cfa2e23e9e339 00f66a52bd45415da94b7e61f080bf2cfea0e374 02a0938889d80308372cd29b6f2e3530b70483976e117e0290193ce06f792996
GET /index.php/apps/theming/image/logo?v=24 HTTP/1.1
Host: disk.grizvolt.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: oc_sessionPassphrase=HOy2yB0uGbm%2BBfJWImPqc%2B8syv1OZar6H%2BC0sFpmVUkP7JsC7zHCDN3%2FjsdeSZc0AeALtm5ZeRYOqbuco25X5pJDIsTb7lJrZY0NuCCV7BPbj3279%2BoqPWhqBApdhrcb; ocav6ijr871k=tnh3i4ov2o0r3ihcefefebh22a; __Host-nc_sameSiteCookielax=true; __Host-nc_sameSiteCookiestrict=true
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx/1.18.0
date: Mon, 26 Sep 2022 15:48:07 GMT
content-type: image/png
content-length: 230973
referrer-policy: no-referrer
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-permitted-cross-domain-policies: none
x-xss-protection: 1; mode=block
last-modified: Thu, 06 Jan 2022 07:51:24 +0000
etag: "8c4d6f729d2d0cced55921e0a5aff2aa"
cache-control: private, max-age=3600, must-revalidate
x-request-id: hP8ySZ2wF635P9ZgsRiG
content-security-policy: default-src 'none';base-uri 'none';manifest-src 'self';script-src 'nonce-ZzZ1eTFrVHIvai9QdElMaHkyUS8rZzYyRVh2cURWY1ZFOHpxVjBscUF3Yz06eWNxS21DdUVqV245OWJQVm55MUhubW1GY0VxdWJDUmllNnFvWmlKU1VXST0=' blob:;style-src 'self' 'unsafe-inline';img-src 'self' data: blob: https://disk.grizvolt.ru https://*.tile.openstreetmap.org https://source.unsplash.com https://images.unsplash.com;font-src 'self' data:;connect-src 'self' blob: stun.nextcloud.com:443;media-src 'self' blob:;frame-src 'self' https://disk.grizvolt.ru;child-src blob: 'self';frame-ancestors 'self' https://disk.grizvolt.ru;worker-src 'self' blob:;form-action 'self' https://disk.grizvolt.ru
feature-policy: autoplay 'none';camera 'none';fullscreen 'none';geolocation 'none';microphone 'none';payment 'none'
x-robots-tag: none
content-disposition: attachment; filename="logo"
pragma: private
expires: Mon, 26 Sep 2022 16:48:07 +0000
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
|
|
| r3.o.lencr.org/ | 23.36.77.32 | 200 OK | 503 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hash73d00e46df48343cd9099cf7899044d3 bbfd44b1967be960ceeee9870d4bd05932389567 8097d21a8cd66eeba96238594cd6c57a0446909c34226da4e9241e529b49112f
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "8097D21A8CD66EEBA96238594CD6C57A0446909C34226DA4E9241E529B49112F"
Last-Modified: Sun, 25 Sep 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3770
Expires: Mon, 26 Sep 2022 16:50:57 GMT
Date: Mon, 26 Sep 2022 15:48:07 GMT
Connection: keep-alive
|
|
| disk.grizvolt.ru/index.php/apps/accessibility/css/user-a82fd95db10ff25dfad39f07372ebe37 | 79.164.239.246 | 200 OK | 31 kB |
URL HTTP/2disk.grizvolt.ru/index.php/apps/accessibility/css/user-a82fd95db10ff25dfad39f07372ebe37 IP79.164.239.246:0 ASN#8615 Central Telegraph Public Joint-stock Company
File typeASCII text, with very long lines (27402) Hashc033ee333751d9b8f6b270b3409f9432 6c33c2c65692208544cd41ee277626b8952e7859 28afbe0cb3b8039e5c855c4ea55f69f080301ad4d53615cf51c3b097b3b0192f
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /index.php/apps/accessibility/css/user-a82fd95db10ff25dfad39f07372ebe37 HTTP/1.1
Host: disk.grizvolt.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: oc_sessionPassphrase=HOy2yB0uGbm%2BBfJWImPqc%2B8syv1OZar6H%2BC0sFpmVUkP7JsC7zHCDN3%2FjsdeSZc0AeALtm5ZeRYOqbuco25X5pJDIsTb7lJrZY0NuCCV7BPbj3279%2BoqPWhqBApdhrcb; ocav6ijr871k=tnh3i4ov2o0r3ihcefefebh22a; __Host-nc_sameSiteCookielax=true; __Host-nc_sameSiteCookiestrict=true
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx/1.18.0
date: Mon, 26 Sep 2022 15:48:07 GMT
content-type: text/css;charset=UTF-8
content-length: 31423
referrer-policy: no-referrer
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-permitted-cross-domain-policies: none
x-xss-protection: 1; mode=block
cache-control: max-age=31536000, immutable
x-request-id: JN139HIFPE6qpixOy9UT
content-security-policy: default-src 'none';base-uri 'none';manifest-src 'self';frame-ancestors 'none'
feature-policy: autoplay 'none';camera 'none';fullscreen 'none';geolocation 'none';microphone 'none';payment 'none'
x-robots-tag: none
content-disposition: inline; filename=""
expires: Tue, 26 Sep 2023 15:48:07 +0000
pragma: cache
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
|
|
| source.unsplash.com/featured/?nature,nature | 54.91.59.199 | 302 Found | 373 B |
URL HTTP/1.1source.unsplash.com/featured/?nature,nature IP54.91.59.199:0
File typeHTML document text\012- HTML document, ASCII text, with very long lines (373), with no line terminators Hasha51543a90bbb6a5605f68760daede588 b1605a59315e10cc4c3f20343d7a32f79a05f068 900d227116210310d8314e46f95b7784e8b90ad922e1db48bf81f46d33d3c099
GET /featured/?nature,nature HTTP/1.1
Host: source.unsplash.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://disk.grizvolt.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Server: Cowboy
Date: Mon, 26 Sep 2022 15:48:07 GMT
Connection: keep-alive
X-Frame-Options: SAMEORIGIN
X-Xss-Protection: 1; mode=block
X-Content-Type-Options: nosniff
X-Download-Options: noopen
X-Permitted-Cross-Domain-Policies: none
Referrer-Policy: strict-origin-when-cross-origin
Location: https://images.unsplash.com/photo-1473448912268-2022ce9509d8?crop=entropy&cs=tinysrgb&fit=max&fm=jpg&ixid=MnwxfDB8MXxyYW5kb218MHx8bmF0dXJlLG5hdHVyZXx8fHx8fDE2NjQyMDcyODc&ixlib=rb-1.2.1&q=80&utm_campaign=api-credit&utm_medium=referral&utm_source=unsplash_source&w=1080
Content-Type: text/html; charset=utf-8
Cache-Control: no-cache
X-Request-Id: c668e50d-b90d-4e41-9def-e419dde3d0a7
X-Runtime: 0.060073
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Origin
Transfer-Encoding: chunked
Via: 1.1 vegur
|
|
| images.unsplash.com/photo-1473448912268-2022ce9509d8?crop=entropy&cs=tinysrgb&fit=max&fm=jpg&ixid=MnwxfDB8MXxyYW5kb218MHx8bmF0dXJlLG5hdHVyZXx8fHx8fDE2NjQyMDcyODc&ixlib=rb-1.2.1&q=80&utm_campaign=api-credit&utm_medium=referral&utm_source=unsplash_source&w=1080 |  151.101.86.208 | 200 OK | 240 kB |
URL HTTP/2images.unsplash.com/photo-1473448912268-2022ce9509d8?crop=entropy&cs=tinysrgb&fit=max&fm=jpg&ixid=MnwxfDB8MXxyYW5kb218MHx8bmF0dXJlLG5hdHVyZXx8fHx8fDE2NjQyMDcyODc&ixlib=rb-1.2.1&q=80&utm_campaign=api-credit&utm_medium=referral&utm_source=unsplash_source&w=1080 IP151.101.86.208:0
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 1080x745, components 3\012- data Size240 kB (239824 bytes) Hashb57bc42d9b4c158cb970ae6284ded913 78c215297b0f91d5f3489f908bcffa68b637af57 14132d3be9c58338439b0afe40424ea882306a86be6efb9292fb067a5f726af6
GET /photo-1473448912268-2022ce9509d8?crop=entropy&cs=tinysrgb&fit=max&fm=jpg&ixid=MnwxfDB8MXxyYW5kb218MHx8bmF0dXJlLG5hdHVyZXx8fHx8fDE2NjQyMDcyODc&ixlib=rb-1.2.1&q=80&utm_campaign=api-credit&utm_medium=referral&utm_source=unsplash_source&w=1080 HTTP/1.1
Host: images.unsplash.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://disk.grizvolt.ru/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
last-modified: Fri, 29 Jul 2022 05:47:25 GMT
cache-control: public, max-age=315360000
server: imgix
x-imgix-id: 39d4685a8a884dc6a492b2186719e7ee3b7596bf
date: Mon, 26 Sep 2022 15:48:07 GMT
age: 5133641
accept-ranges: bytes
set-cookie: ugid=9d6e7ba6b11abc9b513207f25a3e5c655547357;domain=.unsplash.com;path=/;expires=Tue, 26 Sep 2023 15:48:07 GMT;SameSite=None;Secure
content-type: image/jpeg
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-sjc10051-SJC, cache-bma1673-BMA
x-cache: HIT, HIT
content-length: 239824
X-Firefox-Spdy: h2
|
|
| disk.grizvolt.ru/dist/core-common.js?v=f87f2977-24 | 79.164.239.246 | 200 OK | 8.8 MB |
URL HTTP/2disk.grizvolt.ru/dist/core-common.js?v=f87f2977-24 IP79.164.239.246:0 ASN#8615 Central Telegraph Public Joint-stock Company
File typeUnicode text, UTF-8 text, with very long lines (65435) Size8.8 MB (8786280 bytes) Hasha49b70069af465949da88b0f3a7b312f 717ac83a17b0cd3229d8c5700c97c8f1c85de9e2 6bca4d7f5393308cbdabb52ac4c2abc0ca5c4de47c95f8f3d9306c3c9c9db971
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /dist/core-common.js?v=f87f2977-24 HTTP/1.1
Host: disk.grizvolt.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: oc_sessionPassphrase=HOy2yB0uGbm%2BBfJWImPqc%2B8syv1OZar6H%2BC0sFpmVUkP7JsC7zHCDN3%2FjsdeSZc0AeALtm5ZeRYOqbuco25X5pJDIsTb7lJrZY0NuCCV7BPbj3279%2BoqPWhqBApdhrcb; ocav6ijr871k=tnh3i4ov2o0r3ihcefefebh22a; __Host-nc_sameSiteCookielax=true; __Host-nc_sameSiteCookiestrict=true
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx/1.18.0
date: Mon, 26 Sep 2022 15:48:06 GMT
content-type: application/javascript
content-length: 8786280
last-modified: Wed, 14 Sep 2022 17:39:20 GMT
etag: "632211c8-861168"
expires: Fri, 14 Oct 2022 17:39:20 GMT
cache-control: max-age=1561874
strict-transport-security: max-age=31536000; includeSubDomains
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| r3.o.lencr.org/ | 23.36.77.32 | 200 OK | 503 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hash639785692dc29802e484e1e1d0ec86c4 cf81784351ce6302f540f491f893b44496809677 0e47d6e33fe9f6e588d308b62fa059c960a000c56651713e30baf6cd09b7de41
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0E47D6E33FE9F6E588D308B62FA059C960A000C56651713E30BAF6CD09B7DE41"
Last-Modified: Sun, 25 Sep 2022 22:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8494
Expires: Mon, 26 Sep 2022 18:09:42 GMT
Date: Mon, 26 Sep 2022 15:48:08 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 23.36.77.32 | 200 OK | 503 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hash639785692dc29802e484e1e1d0ec86c4 cf81784351ce6302f540f491f893b44496809677 0e47d6e33fe9f6e588d308b62fa059c960a000c56651713e30baf6cd09b7de41
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0E47D6E33FE9F6E588D308B62FA059C960A000C56651713E30BAF6CD09B7DE41"
Last-Modified: Sun, 25 Sep 2022 22:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8494
Expires: Mon, 26 Sep 2022 18:09:42 GMT
Date: Mon, 26 Sep 2022 15:48:08 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 23.36.77.32 | 200 OK | 503 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hash639785692dc29802e484e1e1d0ec86c4 cf81784351ce6302f540f491f893b44496809677 0e47d6e33fe9f6e588d308b62fa059c960a000c56651713e30baf6cd09b7de41
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0E47D6E33FE9F6E588D308B62FA059C960A000C56651713E30BAF6CD09B7DE41"
Last-Modified: Sun, 25 Sep 2022 22:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8494
Expires: Mon, 26 Sep 2022 18:09:42 GMT
Date: Mon, 26 Sep 2022 15:48:08 GMT
Connection: keep-alive
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9723d426-a6ee-4860-8067-0b8d98143233.jpeg | 34.120.237.76 | 200 OK | 8.6 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9723d426-a6ee-4860-8067-0b8d98143233.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hashd02ede0c964f3346fd53ae2950bf2a62 e49306a3713cb724be024a4ddb5e90645718a718 c0e653d89656016c55aca9b198b9191620f1ae9a3c45742a90744bd74c4f9505
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9723d426-a6ee-4860-8067-0b8d98143233.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8637
x-amzn-requestid: 07dc23e0-000f-4f6c-8d2b-0e65d88be270
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZCSvvEenoAMFr0Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6330cb31-520803124760abc216152d7b;Sampled=0
x-amzn-remapped-date: Sun, 25 Sep 2022 21:42:09 GMT
x-amz-cf-pop: SEA19-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: HCJ483GPdpPhC7oYm1GrA02BqqST9sfqfCBSA93rZqaQYl-jezgP5Q==
via: 1.1 27a84054de24e45f952ea4056a821764.cloudfront.net (CloudFront), 1.1 2ab6211e66998c8b58132661a7e3cade.cloudfront.net (CloudFront), 1.1 google
date: Sun, 25 Sep 2022 22:20:40 GMT
age: 62848
etag: "e49306a3713cb724be024a4ddb5e90645718a718"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff3689ec8-63b4-42ae-b7d5-a9b4b63af788.jpeg | 34.120.237.76 | 200 OK | 6.0 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff3689ec8-63b4-42ae-b7d5-a9b4b63af788.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hashef17205adb2b478d3bff54b048208d22 12aac1bd22e675f09a220de08b4656e801c2e647 620fe39cf421ed3a21e968570f7e863d69224113be867ec2457ed3850ea113f6
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff3689ec8-63b4-42ae-b7d5-a9b4b63af788.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-length: 5980
x-amzn-requestid: fbf0c390-da24-49e2-8492-43e29e5d4bb3
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZCTHCGJVoAMFgxA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6330cbc6-1f9b1b7d63467c58702e6d7e;Sampled=0
x-amzn-remapped-date: Sun, 25 Sep 2022 21:44:38 GMT
x-amz-cf-pop: SEA19-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: Iy0oyFx_T6CEuOQckEzvUQOUo307Jm_OgJzomWlMz9BhgD3eOaysdA==
via: 1.1 ec2a2c75c16156e4d43504606c118b90.cloudfront.net (CloudFront), 1.1 5954c6394458ffb44c970b3819d7ff2a.cloudfront.net (CloudFront), 1.1 google
date: Sun, 25 Sep 2022 21:48:52 GMT
age: 64756
etag: "12aac1bd22e675f09a220de08b4656e801c2e647"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7838a122-2b2e-4e4c-9bcc-7c6b46a93b1e.jpeg | 34.120.237.76 | 200 OK | 12 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7838a122-2b2e-4e4c-9bcc-7c6b46a93b1e.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash968b9c138702fb5994d1d9eab1a697fa 9660bb2d38079182efbd11d7a687bfc7f9d30751 5ba74820ad451747c8ed25529f06b037bebf4c0616a1f2165c9197c1171db7a6
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7838a122-2b2e-4e4c-9bcc-7c6b46a93b1e.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-length: 11728
x-amzn-requestid: bf60e58f-c4f4-45c7-923b-0d1539f720f5
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZCUCGGw7oAMF3wQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6330cd40-32043c1b1411544f5d00edc0;Sampled=0
x-amzn-remapped-date: Sun, 25 Sep 2022 21:50:56 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: H4KXhBaRw3SvzBrbl30mV6R_vJ8bXBkyicb8fQiTp6YSBHjE8iFkNQ==
via: 1.1 26ca01ec7377e425b59b6a08cb1ec342.cloudfront.net (CloudFront), 1.1 ce71f64ad5dca81beca846466f2d5008.cloudfront.net (CloudFront), 1.1 google
date: Sun, 25 Sep 2022 22:49:56 GMT
etag: "9660bb2d38079182efbd11d7a687bfc7f9d30751"
content-type: image/jpeg
age: 61092
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb77ad616-c829-40b4-8b70-2be46252d64c.jpeg | 34.120.237.76 | 200 OK | 10 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb77ad616-c829-40b4-8b70-2be46252d64c.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash8ea5f06ad31f0cedd2cb5c6df82f35f4 60a83a1618ffae06e49ca3002bac1db9980dcfe8 5f6a4cb92c016ef0f229b11d727e9680a15b10782b5bfe9e66ad9d100b458d8d
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb77ad616-c829-40b4-8b70-2be46252d64c.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10279
x-amzn-requestid: 0f361c26-1f12-421a-9752-7d4fcdf839ac
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Y4V65GTXIAMF9-Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-632cd045-25677a637307879044de8242;Sampled=0
x-amzn-remapped-date: Thu, 22 Sep 2022 21:14:45 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: qvSIyV7uvUzXFn6Sw3izoZxQoFbmyRzQ9WKl33D7fNTcuV6WXTzD9Q==
via: 1.1 0aebf3fe433ff96e68d785fad4ea4c0e.cloudfront.net (CloudFront), 1.1 567b44ed19c8caed2570b7bcd8c70034.cloudfront.net (CloudFront), 1.1 google
date: Mon, 26 Sep 2022 05:01:28 GMT
age: 38800
etag: "60a83a1618ffae06e49ca3002bac1db9980dcfe8"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| disk.grizvolt.ru/index.php/apps/theming/icon?v=24 | 79.164.239.246 | 200 OK | 83 kB |
URL HTTP/2disk.grizvolt.ru/index.php/apps/theming/icon?v=24 IP79.164.239.246:0 ASN#8615 Central Telegraph Public Joint-stock Company
File typePNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced\012- data Hashd92ff98434276cb0937fd8a17b7a78da b33b9bd81a79ff0a8c28095f20ade79e181d4395 985356e1e00a64bc0a234846d12e5b55f5556cb43b0f029952ed83efadc8a7a4
GET /index.php/apps/theming/icon?v=24 HTTP/1.1
Host: disk.grizvolt.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: oc_sessionPassphrase=HOy2yB0uGbm%2BBfJWImPqc%2B8syv1OZar6H%2BC0sFpmVUkP7JsC7zHCDN3%2FjsdeSZc0AeALtm5ZeRYOqbuco25X5pJDIsTb7lJrZY0NuCCV7BPbj3279%2BoqPWhqBApdhrcb; ocav6ijr871k=tnh3i4ov2o0r3ihcefefebh22a; __Host-nc_sameSiteCookielax=true; __Host-nc_sameSiteCookiestrict=true
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx/1.18.0
date: Mon, 26 Sep 2022 15:48:09 GMT
content-type: image/png
content-length: 82694
referrer-policy: no-referrer
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-permitted-cross-domain-policies: none
x-xss-protection: 1; mode=block
last-modified: Thu, 06 Jan 2022 08:33:03 +0000
etag: "b4ed8cbb031f4909fa42c897dd860025"
cache-control: private, max-age=86400, must-revalidate
x-request-id: cFh5LQELgq9Dd6huxiUA
content-security-policy: default-src 'none';base-uri 'none';manifest-src 'self';frame-ancestors 'none'
feature-policy: autoplay 'none';camera 'none';fullscreen 'none';geolocation 'none';microphone 'none';payment 'none'
x-robots-tag: none
content-disposition: inline; filename="touchIcon-core"
pragma: private
expires: Tue, 27 Sep 2022 15:48:09 +0000
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
|
|
| disk.grizvolt.ru/index.php/apps/theming/favicon?v=24 | 79.164.239.246 | 200 OK | 90 kB |
URL HTTP/2disk.grizvolt.ru/index.php/apps/theming/favicon?v=24 IP79.164.239.246:0 ASN#8615 Central Telegraph Public Joint-stock Company
File typeMS Windows icon resource - 4 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel\012- data Hash403a00d9c2292bb62a1c5310872d019c 6065649ef04ae5366b62455422b245b0e9cb7dda c3cdfefd6246c41fd93040e30de8346f07692c18b35072216dbeaf95d83d22ed
GET /index.php/apps/theming/favicon?v=24 HTTP/1.1
Host: disk.grizvolt.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: oc_sessionPassphrase=HOy2yB0uGbm%2BBfJWImPqc%2B8syv1OZar6H%2BC0sFpmVUkP7JsC7zHCDN3%2FjsdeSZc0AeALtm5ZeRYOqbuco25X5pJDIsTb7lJrZY0NuCCV7BPbj3279%2BoqPWhqBApdhrcb; ocav6ijr871k=tnh3i4ov2o0r3ihcefefebh22a; __Host-nc_sameSiteCookielax=true; __Host-nc_sameSiteCookiestrict=true
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx/1.18.0
date: Mon, 26 Sep 2022 15:48:09 GMT
content-type: image/x-icon
content-length: 90022
referrer-policy: no-referrer
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-permitted-cross-domain-policies: none
x-xss-protection: 1; mode=block
last-modified: Thu, 06 Jan 2022 08:33:02 +0000
etag: "7f0782b5d25a7991d5abd95ca9f487b4"
cache-control: private, max-age=86400, must-revalidate
x-request-id: UY7rfBpH02Sf48PdShjp
content-security-policy: default-src 'none';base-uri 'none';manifest-src 'self';frame-ancestors 'none'
feature-policy: autoplay 'none';camera 'none';fullscreen 'none';geolocation 'none';microphone 'none';payment 'none'
x-robots-tag: none
content-disposition: inline; filename="favIcon-core"
pragma: private
expires: Tue, 27 Sep 2022 15:48:09 +0000
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
|
|
| disk.grizvolt.ru/index.php/s/yajxrqbqnam2t6y/download/kms%20tools%20portable.rar | 79.164.239.246 | 404 Not Found | 0 B |
URL HTTP/2disk.grizvolt.ru/index.php/s/yajxrqbqnam2t6y/download/kms%20tools%20portable.rar IP79.164.239.246:0 ASN#8615 Central Telegraph Public Joint-stock Company
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /index.php/s/yajxrqbqnam2t6y/download/kms%20tools%20portable.rar HTTP/1.1
Host: disk.grizvolt.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 404 Not Found
server: nginx/1.18.0
date: Mon, 26 Sep 2022 15:48:06 GMT
content-type: text/html; charset=UTF-8
expires: Thu, 19 Nov 1981 08:52:00 GMT
pragma: no-cache
set-cookie: oc_sessionPassphrase=HOy2yB0uGbm%2BBfJWImPqc%2B8syv1OZar6H%2BC0sFpmVUkP7JsC7zHCDN3%2FjsdeSZc0AeALtm5ZeRYOqbuco25X5pJDIsTb7lJrZY0NuCCV7BPbj3279%2BoqPWhqBApdhrcb; path=/; secure; HttpOnly; SameSite=Lax
ocav6ijr871k=tnh3i4ov2o0r3ihcefefebh22a; path=/; secure; HttpOnly; SameSite=Lax
__Host-nc_sameSiteCookielax=true; path=/; httponly;secure; expires=Fri, 31-Dec-2100 23:59:59 GMT; SameSite=lax
__Host-nc_sameSiteCookiestrict=true; path=/; httponly;secure; expires=Fri, 31-Dec-2100 23:59:59 GMT; SameSite=strict
referrer-policy: no-referrer
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-permitted-cross-domain-policies: none
x-xss-protection: 1; mode=block
cache-control: no-cache, no-store, must-revalidate
x-request-id: lcIhC3GrJb5cmLUwUfE2
content-security-policy: default-src 'none';base-uri 'none';manifest-src 'self';script-src 'nonce-NGlVTE5vcHRJQjQzRUlmcDkzQWYwNlpvQUhSaTY0RHQ3ME5QdjBTbGxCND06cUVRemVPVUNVMGdGVWJiZG96bG50OEZiWVVVbWl2T2FoeVVOamkrZHhucz0=' blob:;style-src 'self' 'unsafe-inline';img-src 'self' data: blob: http://*:* https://*:* https://disk.grizvolt.ru https://*.tile.openstreetmap.org https://source.unsplash.com https://images.unsplash.com;font-src 'self' data:;connect-src 'self' blob: stun.nextcloud.com:443;media-src 'self' http://*:* https://*:* data: blob:;frame-src 'self' https://disk.grizvolt.ru;child-src blob: 'self';frame-ancestors 'self' https://disk.grizvolt.ru;worker-src 'self' blob:;form-action 'self' https://disk.grizvolt.ru
feature-policy: autoplay 'self';camera 'self';fullscreen 'self';geolocation 'self';microphone 'self';payment 'none'
x-robots-tag: none
strict-transport-security: max-age=31536000; includeSubDomains
content-encoding: gzip
X-Firefox-Spdy: h2
|
|