goo.su/logos/logo_blue_white.png
200 OK 90 kB URL GET HTTP/3 goo.su/logos/logo_blue_white.png
IP
Certificate IssuerGoogle Trust Services LLC
Subjectgoo.su
Fingerprint87:1B:25:96:4F:2E:0E:67:19:86:93:A2:A6:33:2A:8B:A6:61:6B:66
ValidityTue, 08 Aug 2023 22:44:19 GMT - Mon, 06 Nov 2023 22:44:18 GMT
File type PNG image data, 1500 x 1500, 8-bit/color RGBA, non-interlaced\012- data
Hash 36e9f41c38aa1717cbe04fbaa0eb097d
3ddbd3cedf3178386f950b2a1b7d63073876ee03
14780fc1a64fa4a12547d1ee5d6629779d6a99b35146dd51302a02f36f9af223
GET /logos/logo_blue_white.png HTTP/1.1
Host: goo.su
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://goo.su/VWGz8X
Cookie: XSRF-TOKEN=eyJpdiI6IkR5TDZsZW5zeSttbGVrMkVMeWhBRHc9PSIsInZhbHVlIjoidklEWlFsSWp3Tk54VkJIakJ2dlNRc2tmUS9EZW9JWUhJZFA2RmdvdWRiZ01CY3Bpc2VFdFVDUmNucGIza290cjZmRjBkYk5GMDJwMzR2VmlMb3FrRFpGcXBCSFFIVDc5Q1hTd2tFYURaOFRZd2tCRWpWa1I4TmFSdk1IVXpicTIiLCJtYWMiOiI3ODkzYjM1YzJmZTY0YzBmMDVjMTljZGYyZGE4Y2NmNWM4YmJjNDcwZTc0NTcyYzdkZjVhOGM2Zjc4NWM0Zjc5IiwidGFnIjoiIn0%3D; goosu_session=eyJpdiI6ImtadklJd0orUWovZGlCQVdUcERHVFE9PSIsInZhbHVlIjoiUUpTSU1hMGhiakZoT05UaDBJZTNiUkt3YzBYamhhZDVoc2dZUWhqLzVmeDBIZFAwYWVmSXA1UmYrMU56Mll0MjNFUWFRdHJITldyZlozMEVNSU91K0IvN3Y4SXQxc1ZUSFltOWVvdWQ4eDhhY0FxUFVOcDFMNThWdUJ1QkQrSW8iLCJtYWMiOiI4ODVjOTUyNTYxYmFjYzA0N2I4OGY1YjY3ZDM5MWVhMzFmNTQxMTRjYTUwMGE5M2I2OTU5NDM2YjMzOTY4ZmJiIiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 23 Sep 2023 11:24:42 GMT
content-type: image/png
content-length: 90183
last-modified: Sun, 13 Feb 2022 17:51:43 GMT
etag: "6209452f-16047"
expires: Thu, 28 Sep 2023 08:57:52 GMT
cache-control: max-age=604800
cf-cache-status: HIT
age: 181610
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=IwdDGOSL9t1FvHRPPEfHVhkHMEBSMpGMFsOOITr9TjpH%2BrZW%2BtDOdo9EFun3IQRmgkmQavueGLsj9M5vMIUuylFgSmvtruGshNY%2FrRcH2Re60Y1mC9EWNrU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 80b26c3e2d685694-OSL
alt-svc: h3=":443"; ma=86400
ocsp.pki.goog/gts1c3
471 B IP
Hash 8fe5097b12ddbaa7731f5c6d445db349
b1d9718a7e3ead4ad6c08b3c888129ddf9ba52af
3133a3d91f11eeb170b6a3149b7cceb04228b72a222187bcc374f1fbbdbf4bd3
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 23 Sep 2023 11:24:42 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
goo.su/img/spinner.svg
200 OK 1.1 kB IP
Certificate IssuerGoogle Trust Services LLC
Subjectgoo.su
Fingerprint87:1B:25:96:4F:2E:0E:67:19:86:93:A2:A6:33:2A:8B:A6:61:6B:66
ValidityTue, 08 Aug 2023 22:44:19 GMT - Mon, 06 Nov 2023 22:44:18 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (1490)
Hash e791b750e77c2a34f3cc273d6ec0641c
e0cd0f5fecead2d129b910bfbb95f25b22d48248
c7a987be3cbd97bc18f5c4dac63af0993a04e647ee2504812471192f423e591d
GET /img/spinner.svg HTTP/1.1
Host: goo.su
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://goo.su/VWGz8X
Cookie: XSRF-TOKEN=eyJpdiI6IkR5TDZsZW5zeSttbGVrMkVMeWhBRHc9PSIsInZhbHVlIjoidklEWlFsSWp3Tk54VkJIakJ2dlNRc2tmUS9EZW9JWUhJZFA2RmdvdWRiZ01CY3Bpc2VFdFVDUmNucGIza290cjZmRjBkYk5GMDJwMzR2VmlMb3FrRFpGcXBCSFFIVDc5Q1hTd2tFYURaOFRZd2tCRWpWa1I4TmFSdk1IVXpicTIiLCJtYWMiOiI3ODkzYjM1YzJmZTY0YzBmMDVjMTljZGYyZGE4Y2NmNWM4YmJjNDcwZTc0NTcyYzdkZjVhOGM2Zjc4NWM0Zjc5IiwidGFnIjoiIn0%3D; goosu_session=eyJpdiI6ImtadklJd0orUWovZGlCQVdUcERHVFE9PSIsInZhbHVlIjoiUUpTSU1hMGhiakZoT05UaDBJZTNiUkt3YzBYamhhZDVoc2dZUWhqLzVmeDBIZFAwYWVmSXA1UmYrMU56Mll0MjNFUWFRdHJITldyZlozMEVNSU91K0IvN3Y4SXQxc1ZUSFltOWVvdWQ4eDhhY0FxUFVOcDFMNThWdUJ1QkQrSW8iLCJtYWMiOiI4ODVjOTUyNTYxYmFjYzA0N2I4OGY1YjY3ZDM5MWVhMzFmNTQxMTRjYTUwMGE5M2I2OTU5NDM2YjMzOTY4ZmJiIiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 23 Sep 2023 11:24:42 GMT
content-type: image/svg+xml
last-modified: Sun, 13 Feb 2022 17:51:43 GMT
etag: W/"6209452f-63e"
expires: Mon, 25 Sep 2023 03:28:16 GMT
cache-control: max-age=604800
cf-cache-status: HIT
age: 460586
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=r35pQj4cVkybzsMepP8YIyD8vc6SUKFiEOD4EOZfPdYLGK2HoF0qO1xc%2B5m0a4YChxvMRrE%2FGwqdoLvRqf5ekQsTQqdgQ3kOBt7c9%2Bh8hyeiEKS%2BLLgBJUI%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 80b26c3e4d905694-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
fonts.googleapis.com/css?family=Roboto:400&display=swap
200 OK 1.0 kB URL GET HTTP/2 fonts.googleapis.com/css?family=Roboto:400&display=swap
IP
Certificate IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
FingerprintBE:40:3A:A6:DE:CC:A7:8B:75:43:68:F2:F9:56:63:71:49:61:06:49
ValidityMon, 04 Sep 2023 08:23:18 GMT - Mon, 27 Nov 2023 08:23:17 GMT
File type gzip compressed data, max compression\012- data
Hash 41e313da4f7813df6727b20221bf578d
d612529f1cbbd538fbbcbb16544b5eb119cf6aaa
606d3947339e7d46f896aa97e4ae0c4bc8078d2820af86b73d033a1ad26f4bcb
GET /css?family=Roboto:400&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://goo.su/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Sat, 23 Sep 2023 11:24:42 GMT
date: Sat, 23 Sep 2023 11:24:42 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
471 B IP
Hash 2a9cb3694beef11368f7284821163a4d
32d723fad91ccd0c154e5d7e489266cfe596aa61
08cd4f8a916cab4a520c51bd519209ebe87f4898f10d1f1c968bce537c4d3916
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 23 Sep 2023 11:24:43 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
471 B IP
Hash 2a9cb3694beef11368f7284821163a4d
32d723fad91ccd0c154e5d7e489266cfe596aa61
08cd4f8a916cab4a520c51bd519209ebe87f4898f10d1f1c968bce537c4d3916
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 23 Sep 2023 11:24:43 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
200 OK 16 kB URL GET HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
IP
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
Fingerprint3D:35:56:30:C0:0F:0C:7F:20:BA:7D:A8:48:DB:24:1B:15:F5:48:27
ValidityMon, 04 Sep 2023 08:23:09 GMT - Mon, 27 Nov 2023 08:23:08 GMT
File type Web Open Font Format (Version 2), TrueType, length 15744, version 1.0\012- data
Hash 15d9f621c3bd1599f0169dcf0bd5e63e
7ca9c5967f3bb8bffeab24b639b49c1e7d03fa52
f6734f8177112c0839b961f96d813fcb189d81b60e96c33278c1983b6f419615
GET /s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://goo.su
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15744
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 21 Sep 2023 04:50:55 GMT
expires: Fri, 20 Sep 2024 04:50:55 GMT
cache-control: public, max-age=31536000
age: 196428
last-modified: Wed, 11 May 2022 19:24:48 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Open%20Sans:400&display=swap
200 OK 19 kB URL GET HTTP/2 fonts.googleapis.com/css?family=Open%20Sans:400&display=swap
IP
Certificate IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
FingerprintBE:40:3A:A6:DE:CC:A7:8B:75:43:68:F2:F9:56:63:71:49:61:06:49
ValidityMon, 04 Sep 2023 08:23:18 GMT - Mon, 27 Nov 2023 08:23:17 GMT
File type gzip compressed data, max compression\012- data
Hash 58f9b021f57a16c4182fe603317fbcfd
41c5da8ab6b7d33cc39e951fccbb1b85c01468be
db2de989fcad7f93afcb5c59d2258d6974b334af0c0673c98bd0e603e7909b1f
GET /css?family=Open%20Sans:400&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://goo.su/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Sat, 23 Sep 2023 11:24:42 GMT
date: Sat, 23 Sep 2023 11:24:42 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
enduresopens.com/ttkXIvunodY/69489
200 OK 25 B URL GET HTTP/1.1 enduresopens.com/ttkXIvunodY/69489
IP
Certificate IssuerLet's Encrypt
Subjectenduresopens.com
FingerprintE8:42:A6:73:23:4C:00:23:FF:A4:A6:88:AE:BD:B3:28:D0:88:CE:E8
ValidityThu, 31 Aug 2023 11:04:59 GMT - Wed, 29 Nov 2023 11:04:58 GMT
File type ASCII text, with no line terminators
Hash f7a2939527fd9e68723da600e96d76bd
a9e717b6364d2895ee0a716050db32ca0ef1bb42
d810f5146f4cd1517512a6e31946e764a73c58fb01427aae88d42cc2ae28718a
GET /ttkXIvunodY/69489 HTTP/1.1
Host: enduresopens.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://goo.su/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 23 Sep 2023 11:24:43 GMT
Content-Type: application/javascript; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=20
Accept-ch: sec-ch-ua-platform-version,sec-ch-ua-model,sec-ch-ua-full-version
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://goo.su
Access-Control-Allow-Headers: content-type, megageocheckolololo, x-forwarded-for, x-requested-with, cache-control, pragma, expires
Access-Control-Max-Age: 600
Access-Control-Allow-Methods: GET, POST, OPTIONS
X-Frame-Options: SAMEORIGIN
Set-Cookie: GL_UI4=eJw9jU1Sg0AQhSH8RQ1oV3EAj8AQMcnSTVbegZphGhwD06lmQuLtHa3S3fteffVeEASr8hHCJY0husgGnl8aXe97Ve31tsZq34vda9UoIbp6u1PycIA7M7dOqhFdDOt5kuxat8SwGdAim67tSGMOT976a06WrjaGRLG0Oodk8saYQ6aYrjNyGUFs5YSQHQ1jTzdvyE9iiIQQPhvrc1jBiuYyKu4heTf2cis2aVAUaQAP51G6nnhqjfaYDCw1QvgG6046HIi%2FINM4nxydAWjU7b%2F%2Fe5qMP2uQalxM55HcB%2FI3ouZOdQ%3D%3D; expires=Sun, 24-Sep-2023 11:24:43 GMT; Max-Age=86400; path=/; secure; SameSite=None
GL_GI10=eJwVyM0KgkAUhuE5hxiIJPjCC%2FAKTMsWbrNl6MIrMIsYGObIzNjP3WeLd%2FG8SilOE7CZkNRlXhd5dcjLUwV6gtsOPDroVvx7%2BII8uDiCvcOmC1ayRmYXlz9i9TfIYHu25pP1YudoxAXw0roZbvaxv%2FRX0KQJHEUzONxTBXrp3Q9e7B3R; expires=Sun, 24-Sep-2023 11:24:43 GMT; Max-Age=86400; path=/; secure; SameSite=None
Content-Encoding: gzip
Vary: Accept-Encoding
Strict-Transport-Security: max-age=1
X-Content-Type-Options: nosniff
ocsp.pki.goog/gts1c3
471 B IP
Hash 2a9cb3694beef11368f7284821163a4d
32d723fad91ccd0c154e5d7e489266cfe596aa61
08cd4f8a916cab4a520c51bd519209ebe87f4898f10d1f1c968bce537c4d3916
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 23 Sep 2023 11:24:43 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
goo.su/img/favicons/apple-touch-icon.png
200 OK 11 kB URL GET HTTP/3 goo.su/img/favicons/apple-touch-icon.png
IP
Certificate IssuerGoogle Trust Services LLC
Subjectgoo.su
Fingerprint87:1B:25:96:4F:2E:0E:67:19:86:93:A2:A6:33:2A:8B:A6:61:6B:66
ValidityTue, 08 Aug 2023 22:44:19 GMT - Mon, 06 Nov 2023 22:44:18 GMT
File type PNG image data, 180 x 180, 8-bit/color RGB, non-interlaced\012- data
Hash dc1648f034a8879145ce2db071bdc305
28dfdc4f3f97f00e54528685427a83974cb04a81
7c51dc3139a5a8a07e00884f6558ed62511359803bcb4123668b8e0ccab896c7
GET /img/favicons/apple-touch-icon.png HTTP/1.1
Host: goo.su
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://goo.su/VWGz8X
Cookie: XSRF-TOKEN=eyJpdiI6IkR5TDZsZW5zeSttbGVrMkVMeWhBRHc9PSIsInZhbHVlIjoidklEWlFsSWp3Tk54VkJIakJ2dlNRc2tmUS9EZW9JWUhJZFA2RmdvdWRiZ01CY3Bpc2VFdFVDUmNucGIza290cjZmRjBkYk5GMDJwMzR2VmlMb3FrRFpGcXBCSFFIVDc5Q1hTd2tFYURaOFRZd2tCRWpWa1I4TmFSdk1IVXpicTIiLCJtYWMiOiI3ODkzYjM1YzJmZTY0YzBmMDVjMTljZGYyZGE4Y2NmNWM4YmJjNDcwZTc0NTcyYzdkZjVhOGM2Zjc4NWM0Zjc5IiwidGFnIjoiIn0%3D; goosu_session=eyJpdiI6ImtadklJd0orUWovZGlCQVdUcERHVFE9PSIsInZhbHVlIjoiUUpTSU1hMGhiakZoT05UaDBJZTNiUkt3YzBYamhhZDVoc2dZUWhqLzVmeDBIZFAwYWVmSXA1UmYrMU56Mll0MjNFUWFRdHJITldyZlozMEVNSU91K0IvN3Y4SXQxc1ZUSFltOWVvdWQ4eDhhY0FxUFVOcDFMNThWdUJ1QkQrSW8iLCJtYWMiOiI4ODVjOTUyNTYxYmFjYzA0N2I4OGY1YjY3ZDM5MWVhMzFmNTQxMTRjYTUwMGE5M2I2OTU5NDM2YjMzOTY4ZmJiIiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 23 Sep 2023 11:24:43 GMT
content-type: image/png
content-length: 10926
last-modified: Sun, 13 Feb 2022 17:51:43 GMT
etag: "6209452f-2aae"
expires: Thu, 28 Sep 2023 12:54:32 GMT
cache-control: max-age=604800
cf-cache-status: HIT
age: 167411
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=lWT8KDYkrvRejQ94ORiyVx%2BEsIhn9%2Fxle7k3SjAqtkrnv%2FYxxCjvDi81LOtTmqb16hREeRIwFcU5mfatXK7blLt6UOx0V1xNJq%2Buwm57WDQvgQFi2wCa5i8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 80b26c43df3e5694-OSL
alt-svc: h3=":443"; ma=86400
goo.su/img/favicons/favicon-16x16.png
200 OK 1.6 kB URL GET HTTP/3 goo.su/img/favicons/favicon-16x16.png
IP
Certificate IssuerGoogle Trust Services LLC
Subjectgoo.su
Fingerprint87:1B:25:96:4F:2E:0E:67:19:86:93:A2:A6:33:2A:8B:A6:61:6B:66
ValidityTue, 08 Aug 2023 22:44:19 GMT - Mon, 06 Nov 2023 22:44:18 GMT
File type PNG image data, 16 x 16, 8-bit colormap, non-interlaced\012- data
Hash 2b201347b6d90e0ad2bbad3be209db73
ae5de3e7f779cf33aefd5dc738f2126633bb7824
df0a5932ec719656fd8f147bcc0c14312e53e52c2df13f5f815d72833de9c852
GET /img/favicons/favicon-16x16.png HTTP/1.1
Host: goo.su
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://goo.su/VWGz8X
Cookie: XSRF-TOKEN=eyJpdiI6IkR5TDZsZW5zeSttbGVrMkVMeWhBRHc9PSIsInZhbHVlIjoidklEWlFsSWp3Tk54VkJIakJ2dlNRc2tmUS9EZW9JWUhJZFA2RmdvdWRiZ01CY3Bpc2VFdFVDUmNucGIza290cjZmRjBkYk5GMDJwMzR2VmlMb3FrRFpGcXBCSFFIVDc5Q1hTd2tFYURaOFRZd2tCRWpWa1I4TmFSdk1IVXpicTIiLCJtYWMiOiI3ODkzYjM1YzJmZTY0YzBmMDVjMTljZGYyZGE4Y2NmNWM4YmJjNDcwZTc0NTcyYzdkZjVhOGM2Zjc4NWM0Zjc5IiwidGFnIjoiIn0%3D; goosu_session=eyJpdiI6ImtadklJd0orUWovZGlCQVdUcERHVFE9PSIsInZhbHVlIjoiUUpTSU1hMGhiakZoT05UaDBJZTNiUkt3YzBYamhhZDVoc2dZUWhqLzVmeDBIZFAwYWVmSXA1UmYrMU56Mll0MjNFUWFRdHJITldyZlozMEVNSU91K0IvN3Y4SXQxc1ZUSFltOWVvdWQ4eDhhY0FxUFVOcDFMNThWdUJ1QkQrSW8iLCJtYWMiOiI4ODVjOTUyNTYxYmFjYzA0N2I4OGY1YjY3ZDM5MWVhMzFmNTQxMTRjYTUwMGE5M2I2OTU5NDM2YjMzOTY4ZmJiIiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 23 Sep 2023 11:24:43 GMT
content-type: image/png
content-length: 1567
last-modified: Sun, 13 Feb 2022 17:51:43 GMT
etag: "6209452f-61f"
expires: Tue, 26 Sep 2023 20:53:20 GMT
cache-control: max-age=604800
cf-cache-status: HIT
age: 311483
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Stfhkx1IFlOLNM4c%2Bsyc38kXAj1GKpZ4zoLwTspcV%2F0FDvwfQuOrLs%2BGn%2F4JxtkWVo9do6Uc1KH5Z764qvYIPnGQ34A9QNsVPgCskg3C7Y8WPo58vKEPk9E%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 80b26c43df405694-OSL
alt-svc: h3=":443"; ma=86400
rtb.pushdom.co/pb/st?sctp=content-locker&m=ht&pid=883146&sid=330256&dm=goo.su&c1=https&c2=1&c3=https://rtb.pushdom.co/pb/st
200 OK 0 B URL GET HTTP/2 rtb.pushdom.co/pb/st?sctp=content-locker&m=ht&pid=883146&sid=330256&dm=goo.su&c1=https&c2=1&c3=https://rtb.pushdom.co/pb/st
IP
Certificate IssuerLet's Encrypt
Subjectrtb.pushdom.co
Fingerprint3B:C5:69:85:74:CD:6A:AA:99:28:86:E3:55:E1:27:81:C3:ED:3C:75
ValidityFri, 04 Aug 2023 23:25:58 GMT - Thu, 02 Nov 2023 23:25:57 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /pb/st?sctp=content-locker&m=ht&pid=883146&sid=330256&dm=goo.su&c1=https&c2=1&c3=https://rtb.pushdom.co/pb/st HTTP/1.1
Host: rtb.pushdom.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://goo.su/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: openresty/1.21.4.1
date: Sat, 23 Sep 2023 11:24:43 GMT
content-type: text/html;charset=UTF-8
content-length: 0
X-Firefox-Spdy: h2
cpv.edu.vn/incoming/incoming/serv/SicursaBanolombia/mua/USER/scis/j6UnVHZsitlYrxStPNFUN4TsSjgEJkN7dlDp6FXSjFxO/3D/no-back-button/
200 OK 2.0 kB URL User Request GET HTTP/2 cpv.edu.vn/incoming/incoming/serv/SicursaBanolombia/mua/USER/scis/j6UnVHZsitlYrxStPNFUN4TsSjgEJkN7dlDp6FXSjFxO/3D/no-back-button/
IP
Certificate IssuerDigiCert Inc
Subjectcpv.edu.vn
Fingerprint85:A5:11:FD:4C:BF:F6:7E:9B:DA:3B:D0:D9:47:42:1A:1B:B3:CD:71
ValidityTue, 20 Jun 2023 00:00:00 GMT - Sat, 06 Jul 2024 23:59:59 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document, Unicode text, UTF-8 text, with CRLF line terminators
Hash ee93a86d7c4f072bf97fd92083ed4538
924c4807ff960320d99c1633b61d52c26199321e
a57d9a757171404a28a2a84c99f38f43b128ab67552dcbfa4538d9a87c6ce887
Analyzer Verdict Alert OpenPhish phishing Bancolombia
GET /incoming/incoming/serv/SicursaBanolombia/mua/USER/scis/j6UnVHZsitlYrxStPNFUN4TsSjgEJkN7dlDp6FXSjFxO/3D/no-back-button/ HTTP/1.1
Host: cpv.edu.vn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://goo.su/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
x-powered-by: PHP/7.4.33
content-type: text/html; charset=UTF-8
content-length: 1991
content-encoding: br
vary: Accept-Encoding
date: Sat, 23 Sep 2023 11:24:49 GMT
server: LiteSpeed
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2
cpv.edu.vn/incoming/incoming/serv/SicursaBanolombia/mua/css/style.css
200 OK 1.3 kB URL GET HTTP/2 cpv.edu.vn/incoming/incoming/serv/SicursaBanolombia/mua/css/style.css
IP
Requested by https://cpv.edu.vn/incoming/incoming/serv/SicursaBanolombia/mua/USER/scis/j6UnVHZsitlYrxStPNFUN4TsSjgEJkN7dlDp6FXSjFxO/3D/no-back-button/
Certificate IssuerDigiCert Inc
Subjectcpv.edu.vn
Fingerprint85:A5:11:FD:4C:BF:F6:7E:9B:DA:3B:D0:D9:47:42:1A:1B:B3:CD:71
ValidityTue, 20 Jun 2023 00:00:00 GMT - Sat, 06 Jul 2024 23:59:59 GMT
File type assembler source, ASCII text, with CRLF line terminators
Hash 72479bd20c38e802443cb174a470cbc9
2d9d08213047e1f765e40f8e35cc634042fe6a92
51aa53f23ba2b51e83eca02fdb47b2212252e7b5088a6c42b8b15431168fd15c
Analyzer Verdict Alert urlquery phishing Phishing - Bancolombia
urlquery phishing Phishing - Bancolombia
GET /incoming/incoming/serv/SicursaBanolombia/mua/css/style.css HTTP/1.1
Host: cpv.edu.vn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cpv.edu.vn/incoming/incoming/serv/SicursaBanolombia/mua/USER/scis/j6UnVHZsitlYrxStPNFUN4TsSjgEJkN7dlDp6FXSjFxO/3D/no-back-button/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Sat, 30 Sep 2023 11:24:50 GMT
content-type: text/css
last-modified: Wed, 15 Jun 2022 06:41:20 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 1291
date: Sat, 23 Sep 2023 11:24:50 GMT
server: LiteSpeed
X-Firefox-Spdy: h2
cpv.edu.vn/incoming/incoming/serv/SicursaBanolombia/mua/css/stylesheet.css
200 OK 410 B URL GET HTTP/2 cpv.edu.vn/incoming/incoming/serv/SicursaBanolombia/mua/css/stylesheet.css
IP
Requested by https://cpv.edu.vn/incoming/incoming/serv/SicursaBanolombia/mua/USER/scis/j6UnVHZsitlYrxStPNFUN4TsSjgEJkN7dlDp6FXSjFxO/3D/no-back-button/
Certificate IssuerDigiCert Inc
Subjectcpv.edu.vn
Fingerprint85:A5:11:FD:4C:BF:F6:7E:9B:DA:3B:D0:D9:47:42:1A:1B:B3:CD:71
ValidityTue, 20 Jun 2023 00:00:00 GMT - Sat, 06 Jul 2024 23:59:59 GMT
File type ASCII text, with very long lines (360)
Hash a310982fb888be050fb3ab09d40d7ffc
b4a86966fec0a29c9bae72c1279a762cc009bf21
f27f79e97e6af6f6003291117a51ded4ac0271248d26e5acf840f666d12d38b2
Analyzer Verdict Alert urlquery phishing Phishing - Bancolombia
urlquery phishing Phishing - Bancolombia
GET /incoming/incoming/serv/SicursaBanolombia/mua/css/stylesheet.css HTTP/1.1
Host: cpv.edu.vn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cpv.edu.vn/incoming/incoming/serv/SicursaBanolombia/mua/USER/scis/j6UnVHZsitlYrxStPNFUN4TsSjgEJkN7dlDp6FXSjFxO/3D/no-back-button/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Sat, 30 Sep 2023 11:24:50 GMT
content-type: text/css
last-modified: Mon, 13 Jun 2022 03:37:10 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 410
date: Sat, 23 Sep 2023 11:24:50 GMT
server: LiteSpeed
X-Firefox-Spdy: h2
cpv.edu.vn/incoming/incoming/serv/SicursaBanolombia/mua/js/jquery.jclock-min.js
200 OK 1.3 kB URL GET HTTP/2 cpv.edu.vn/incoming/incoming/serv/SicursaBanolombia/mua/js/jquery.jclock-min.js
IP
Requested by https://cpv.edu.vn/incoming/incoming/serv/SicursaBanolombia/mua/USER/scis/j6UnVHZsitlYrxStPNFUN4TsSjgEJkN7dlDp6FXSjFxO/3D/no-back-button/
Certificate IssuerDigiCert Inc
Subjectcpv.edu.vn
Fingerprint85:A5:11:FD:4C:BF:F6:7E:9B:DA:3B:D0:D9:47:42:1A:1B:B3:CD:71
ValidityTue, 20 Jun 2023 00:00:00 GMT - Sat, 06 Jul 2024 23:59:59 GMT
File type ASCII text, with very long lines (2957), with CRLF line terminators
Hash 71722c7314fed201941f23bc1fe9604e
1d1c35c3b25ea4056bd39ba290523e70bd2f8038
93bf1714fd8d4cad23861f0017d5b3335f8b009f59d2bd654dcf0c29b7f36031
Analyzer Verdict Alert urlquery phishing Phishing - Bancolombia
urlquery phishing Phishing - Bancolombia
GET /incoming/incoming/serv/SicursaBanolombia/mua/js/jquery.jclock-min.js HTTP/1.1
Host: cpv.edu.vn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cpv.edu.vn/incoming/incoming/serv/SicursaBanolombia/mua/USER/scis/j6UnVHZsitlYrxStPNFUN4TsSjgEJkN7dlDp6FXSjFxO/3D/no-back-button/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Sat, 30 Sep 2023 11:24:50 GMT
content-type: application/javascript
last-modified: Thu, 24 Jun 2021 01:34:36 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 1259
date: Sat, 23 Sep 2023 11:24:50 GMT
server: LiteSpeed
X-Firefox-Spdy: h2
cpv.edu.vn/incoming/incoming/serv/SicursaBanolombia/mua/js/jquery-3.6.0.min.js
200 OK 30 kB URL GET HTTP/2 cpv.edu.vn/incoming/incoming/serv/SicursaBanolombia/mua/js/jquery-3.6.0.min.js
IP
Requested by https://cpv.edu.vn/incoming/incoming/serv/SicursaBanolombia/mua/USER/scis/j6UnVHZsitlYrxStPNFUN4TsSjgEJkN7dlDp6FXSjFxO/3D/no-back-button/
Certificate IssuerDigiCert Inc
Subjectcpv.edu.vn
Fingerprint85:A5:11:FD:4C:BF:F6:7E:9B:DA:3B:D0:D9:47:42:1A:1B:B3:CD:71
ValidityTue, 20 Jun 2023 00:00:00 GMT - Sat, 06 Jul 2024 23:59:59 GMT
File type ASCII text, with very long lines (65447)
Hash 8fb8fee4fcc3cc86ff6c724154c49c42
b82d238d4e31fdf618bae8ac11a6c812c03dd0d4
ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e
Analyzer Verdict Alert urlquery phishing Phishing - Bancolombia
urlquery phishing Phishing - Bancolombia
GET /incoming/incoming/serv/SicursaBanolombia/mua/js/jquery-3.6.0.min.js HTTP/1.1
Host: cpv.edu.vn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cpv.edu.vn/incoming/incoming/serv/SicursaBanolombia/mua/USER/scis/j6UnVHZsitlYrxStPNFUN4TsSjgEJkN7dlDp6FXSjFxO/3D/no-back-button/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Sat, 30 Sep 2023 11:24:50 GMT
content-type: application/javascript
last-modified: Tue, 10 Aug 2021 22:21:10 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 30267
date: Sat, 23 Sep 2023 11:24:50 GMT
server: LiteSpeed
X-Firefox-Spdy: h2
cpv.edu.vn/incoming/incoming/serv/SicursaBanolombia/mua/js/functions.js
200 OK 699 B URL GET HTTP/2 cpv.edu.vn/incoming/incoming/serv/SicursaBanolombia/mua/js/functions.js
IP
Requested by https://cpv.edu.vn/incoming/incoming/serv/SicursaBanolombia/mua/USER/scis/j6UnVHZsitlYrxStPNFUN4TsSjgEJkN7dlDp6FXSjFxO/3D/no-back-button/
Certificate IssuerDigiCert Inc
Subjectcpv.edu.vn
Fingerprint85:A5:11:FD:4C:BF:F6:7E:9B:DA:3B:D0:D9:47:42:1A:1B:B3:CD:71
ValidityTue, 20 Jun 2023 00:00:00 GMT - Sat, 06 Jul 2024 23:59:59 GMT
File type ASCII text, with CRLF line terminators
Hash b997a6d94e03ee0a72f037450b0f1186
70e7b3fcf5da6898da405fe1e4795356bd77df45
e2a99f7b3e57b6db7e845380ffa28aaa1d27e433b0fb7b62c3ce34a6cc58825b
Analyzer Verdict Alert urlquery phishing Phishing - Bancolombia
urlquery phishing Phishing - Bancolombia
GET /incoming/incoming/serv/SicursaBanolombia/mua/js/functions.js HTTP/1.1
Host: cpv.edu.vn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cpv.edu.vn/incoming/incoming/serv/SicursaBanolombia/mua/USER/scis/j6UnVHZsitlYrxStPNFUN4TsSjgEJkN7dlDp6FXSjFxO/3D/no-back-button/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Sat, 30 Sep 2023 11:24:50 GMT
content-type: application/javascript
last-modified: Tue, 23 Aug 2022 10:31:02 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 699
date: Sat, 23 Sep 2023 11:24:50 GMT
server: LiteSpeed
X-Firefox-Spdy: h2
cpv.edu.vn/incoming/incoming/serv/SicursaBanolombia/mua/img/logo.svg
200 OK 2.5 kB URL GET HTTP/2 cpv.edu.vn/incoming/incoming/serv/SicursaBanolombia/mua/img/logo.svg
IP
Requested by https://cpv.edu.vn/incoming/incoming/serv/SicursaBanolombia/mua/USER/scis/j6UnVHZsitlYrxStPNFUN4TsSjgEJkN7dlDp6FXSjFxO/3D/no-back-button/
Certificate IssuerDigiCert Inc
Subjectcpv.edu.vn
Fingerprint85:A5:11:FD:4C:BF:F6:7E:9B:DA:3B:D0:D9:47:42:1A:1B:B3:CD:71
ValidityTue, 20 Jun 2023 00:00:00 GMT - Sat, 06 Jul 2024 23:59:59 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (667)
Hash c049dccd21049cb237daabdb645ec648
e29af3f65a8312efd3ea4c3b66d4bd86657dde1b
2c7a6ea74a49a6adc3fad622078895e9b2589448214913d8c035764148aca7d0
Analyzer Verdict Alert urlquery phishing Phishing - Bancolombia
urlquery phishing Phishing - Bancolombia
GET /incoming/incoming/serv/SicursaBanolombia/mua/img/logo.svg HTTP/1.1
Host: cpv.edu.vn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cpv.edu.vn/incoming/incoming/serv/SicursaBanolombia/mua/USER/scis/j6UnVHZsitlYrxStPNFUN4TsSjgEJkN7dlDp6FXSjFxO/3D/no-back-button/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Sat, 30 Sep 2023 11:24:50 GMT
content-type: image/svg+xml
last-modified: Mon, 13 Jun 2022 02:11:40 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 2479
date: Sat, 23 Sep 2023 11:24:50 GMT
server: LiteSpeed
X-Firefox-Spdy: h2
cpv.edu.vn/incoming/incoming/serv/SicursaBanolombia/mua/img/error.jpg
200 OK 5.4 kB URL GET HTTP/2 cpv.edu.vn/incoming/incoming/serv/SicursaBanolombia/mua/img/error.jpg
IP
Requested by https://cpv.edu.vn/incoming/incoming/serv/SicursaBanolombia/mua/USER/scis/j6UnVHZsitlYrxStPNFUN4TsSjgEJkN7dlDp6FXSjFxO/3D/no-back-button/
Certificate IssuerDigiCert Inc
Subjectcpv.edu.vn
Fingerprint85:A5:11:FD:4C:BF:F6:7E:9B:DA:3B:D0:D9:47:42:1A:1B:B3:CD:71
ValidityTue, 20 Jun 2023 00:00:00 GMT - Sat, 06 Jul 2024 23:59:59 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 195x194, components 3\012- data
Hash 845eeed3b61d4c19ed0059c42fa7fc2e
ace747921c0b92d8451a1562759c867296c31b44
f68c633109e951014c6c401f878be7196c8894f6723215afb18388dbbbb83f1d
Analyzer Verdict Alert urlquery phishing Phishing - Bancolombia
urlquery phishing Phishing - Bancolombia
GET /incoming/incoming/serv/SicursaBanolombia/mua/img/error.jpg HTTP/1.1
Host: cpv.edu.vn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cpv.edu.vn/incoming/incoming/serv/SicursaBanolombia/mua/USER/scis/j6UnVHZsitlYrxStPNFUN4TsSjgEJkN7dlDp6FXSjFxO/3D/no-back-button/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Sat, 30 Sep 2023 11:24:50 GMT
content-type: image/jpeg
last-modified: Wed, 15 Jun 2022 03:46:18 GMT
accept-ranges: bytes
content-length: 5363
date: Sat, 23 Sep 2023 11:24:50 GMT
server: LiteSpeed
X-Firefox-Spdy: h2
cpv.edu.vn/incoming/incoming/serv/SicursaBanolombia/mua/img/info.jpg
200 OK 3.4 kB URL GET HTTP/2 cpv.edu.vn/incoming/incoming/serv/SicursaBanolombia/mua/img/info.jpg
IP
Requested by https://cpv.edu.vn/incoming/incoming/serv/SicursaBanolombia/mua/USER/scis/j6UnVHZsitlYrxStPNFUN4TsSjgEJkN7dlDp6FXSjFxO/3D/no-back-button/
Certificate IssuerDigiCert Inc
Subjectcpv.edu.vn
Fingerprint85:A5:11:FD:4C:BF:F6:7E:9B:DA:3B:D0:D9:47:42:1A:1B:B3:CD:71
ValidityTue, 20 Jun 2023 00:00:00 GMT - Sat, 06 Jul 2024 23:59:59 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 62x61, components 3\012- data
Hash 72f07f88a708281bb165235fb88649ee
d2e7284036b30a170dc68c2ad476d664234ed66c
13df691e5ad1109013261983ff6272aa37353f3b28525a9e8b0b29355a1ebec4
Analyzer Verdict Alert urlquery phishing Phishing - Bancolombia
urlquery phishing Phishing - Bancolombia
GET /incoming/incoming/serv/SicursaBanolombia/mua/img/info.jpg HTTP/1.1
Host: cpv.edu.vn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cpv.edu.vn/incoming/incoming/serv/SicursaBanolombia/mua/USER/scis/j6UnVHZsitlYrxStPNFUN4TsSjgEJkN7dlDp6FXSjFxO/3D/no-back-button/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Sat, 30 Sep 2023 11:24:50 GMT
content-type: image/jpeg
last-modified: Tue, 14 Jun 2022 09:14:56 GMT
accept-ranges: bytes
content-length: 3438
date: Sat, 23 Sep 2023 11:24:50 GMT
server: LiteSpeed
X-Firefox-Spdy: h2
cpv.edu.vn/incoming/incoming/serv/SicursaBanolombia/mua/img/demo.jpg
200 OK 1.5 kB URL GET HTTP/2 cpv.edu.vn/incoming/incoming/serv/SicursaBanolombia/mua/img/demo.jpg
IP
Requested by https://cpv.edu.vn/incoming/incoming/serv/SicursaBanolombia/mua/USER/scis/j6UnVHZsitlYrxStPNFUN4TsSjgEJkN7dlDp6FXSjFxO/3D/no-back-button/
Certificate IssuerDigiCert Inc
Subjectcpv.edu.vn
Fingerprint85:A5:11:FD:4C:BF:F6:7E:9B:DA:3B:D0:D9:47:42:1A:1B:B3:CD:71
ValidityTue, 20 Jun 2023 00:00:00 GMT - Sat, 06 Jul 2024 23:59:59 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 103x103, components 3\012- data
Hash 992039d1b794268d688a19b3563b7cd2
9116dbfe0fe620a6351952c1053017501537002f
61541605fc80557ad8cbc03b7d7ea64e94732198e536d4618dea0cb70191eb48
Analyzer Verdict Alert urlquery phishing Phishing - Bancolombia
urlquery phishing Phishing - Bancolombia
GET /incoming/incoming/serv/SicursaBanolombia/mua/img/demo.jpg HTTP/1.1
Host: cpv.edu.vn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cpv.edu.vn/incoming/incoming/serv/SicursaBanolombia/mua/USER/scis/j6UnVHZsitlYrxStPNFUN4TsSjgEJkN7dlDp6FXSjFxO/3D/no-back-button/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Sat, 30 Sep 2023 11:24:50 GMT
content-type: image/jpeg
last-modified: Tue, 14 Jun 2022 17:00:58 GMT
accept-ranges: bytes
content-length: 1465
date: Sat, 23 Sep 2023 11:24:50 GMT
server: LiteSpeed
X-Firefox-Spdy: h2
cpv.edu.vn/incoming/incoming/serv/SicursaBanolombia/mua/img/seguridad.jpg
200 OK 1.9 kB URL GET HTTP/2 cpv.edu.vn/incoming/incoming/serv/SicursaBanolombia/mua/img/seguridad.jpg
IP
Requested by https://cpv.edu.vn/incoming/incoming/serv/SicursaBanolombia/mua/USER/scis/j6UnVHZsitlYrxStPNFUN4TsSjgEJkN7dlDp6FXSjFxO/3D/no-back-button/
Certificate IssuerDigiCert Inc
Subjectcpv.edu.vn
Fingerprint85:A5:11:FD:4C:BF:F6:7E:9B:DA:3B:D0:D9:47:42:1A:1B:B3:CD:71
ValidityTue, 20 Jun 2023 00:00:00 GMT - Sat, 06 Jul 2024 23:59:59 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 103x103, components 3\012- data
Hash 1aa9d62d948208093b507e8e1439b309
72f701f1204320b47d9966d5d0ed496a733adb80
1800e5e993450b4f547840ccb7abf5cd1f285f6cf9784b3ec23675528a49ff8c
Analyzer Verdict Alert urlquery phishing Phishing - Bancolombia
urlquery phishing Phishing - Bancolombia
GET /incoming/incoming/serv/SicursaBanolombia/mua/img/seguridad.jpg HTTP/1.1
Host: cpv.edu.vn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cpv.edu.vn/incoming/incoming/serv/SicursaBanolombia/mua/USER/scis/j6UnVHZsitlYrxStPNFUN4TsSjgEJkN7dlDp6FXSjFxO/3D/no-back-button/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Sat, 30 Sep 2023 11:24:50 GMT
content-type: image/jpeg
last-modified: Tue, 14 Jun 2022 16:56:48 GMT
accept-ranges: bytes
content-length: 1935
date: Sat, 23 Sep 2023 11:24:50 GMT
server: LiteSpeed
X-Firefox-Spdy: h2
cpv.edu.vn/incoming/incoming/serv/SicursaBanolombia/mua/img/reglamento.jpg
200 OK 1.8 kB URL GET HTTP/2 cpv.edu.vn/incoming/incoming/serv/SicursaBanolombia/mua/img/reglamento.jpg
IP
Requested by https://cpv.edu.vn/incoming/incoming/serv/SicursaBanolombia/mua/USER/scis/j6UnVHZsitlYrxStPNFUN4TsSjgEJkN7dlDp6FXSjFxO/3D/no-back-button/
Certificate IssuerDigiCert Inc
Subjectcpv.edu.vn
Fingerprint85:A5:11:FD:4C:BF:F6:7E:9B:DA:3B:D0:D9:47:42:1A:1B:B3:CD:71
ValidityTue, 20 Jun 2023 00:00:00 GMT - Sat, 06 Jul 2024 23:59:59 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 103x103, components 3\012- data
Hash be3af886cffea048856b7fc77eaeebfc
96c0ec1895b5544070fd9c3ff371812ea04c7932
4d31c93eab87267a6e5e827fedd488a02c824a79ded4f00ef19f7431eaedab12
Analyzer Verdict Alert urlquery phishing Phishing - Bancolombia
urlquery phishing Phishing - Bancolombia
GET /incoming/incoming/serv/SicursaBanolombia/mua/img/reglamento.jpg HTTP/1.1
Host: cpv.edu.vn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cpv.edu.vn/incoming/incoming/serv/SicursaBanolombia/mua/USER/scis/j6UnVHZsitlYrxStPNFUN4TsSjgEJkN7dlDp6FXSjFxO/3D/no-back-button/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Sat, 30 Sep 2023 11:24:50 GMT
content-type: image/jpeg
last-modified: Tue, 14 Jun 2022 16:56:50 GMT
accept-ranges: bytes
content-length: 1764
date: Sat, 23 Sep 2023 11:24:50 GMT
server: LiteSpeed
X-Firefox-Spdy: h2
cpv.edu.vn/incoming/incoming/serv/SicursaBanolombia/mua/img/politica.jpg
200 OK 2.6 kB URL GET HTTP/2 cpv.edu.vn/incoming/incoming/serv/SicursaBanolombia/mua/img/politica.jpg
IP
Requested by https://cpv.edu.vn/incoming/incoming/serv/SicursaBanolombia/mua/USER/scis/j6UnVHZsitlYrxStPNFUN4TsSjgEJkN7dlDp6FXSjFxO/3D/no-back-button/
Certificate IssuerDigiCert Inc
Subjectcpv.edu.vn
Fingerprint85:A5:11:FD:4C:BF:F6:7E:9B:DA:3B:D0:D9:47:42:1A:1B:B3:CD:71
ValidityTue, 20 Jun 2023 00:00:00 GMT - Sat, 06 Jul 2024 23:59:59 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 103x103, components 3\012- data
Hash 7bb6c2ef23b43c8b8723d9e68ddf2fec
351b75536ef2c3244b7ba1eec7fe13215990a177
7b4d681b13b2beeab7a0dbd807eac72b762dec8e3bb18410776270a51860ac86
Analyzer Verdict Alert urlquery phishing Phishing - Bancolombia
urlquery phishing Phishing - Bancolombia
GET /incoming/incoming/serv/SicursaBanolombia/mua/img/politica.jpg HTTP/1.1
Host: cpv.edu.vn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cpv.edu.vn/incoming/incoming/serv/SicursaBanolombia/mua/USER/scis/j6UnVHZsitlYrxStPNFUN4TsSjgEJkN7dlDp6FXSjFxO/3D/no-back-button/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Sat, 30 Sep 2023 11:24:50 GMT
content-type: image/jpeg
last-modified: Tue, 14 Jun 2022 16:56:52 GMT
accept-ranges: bytes
content-length: 2615
date: Sat, 23 Sep 2023 11:24:50 GMT
server: LiteSpeed
X-Firefox-Spdy: h2
cpv.edu.vn/incoming/incoming/serv/SicursaBanolombia/mua/img/inicio.jpg
200 OK 48 kB URL GET HTTP/2 cpv.edu.vn/incoming/incoming/serv/SicursaBanolombia/mua/img/inicio.jpg
IP
Requested by https://cpv.edu.vn/incoming/incoming/serv/SicursaBanolombia/mua/USER/scis/j6UnVHZsitlYrxStPNFUN4TsSjgEJkN7dlDp6FXSjFxO/3D/no-back-button/
Certificate IssuerDigiCert Inc
Subjectcpv.edu.vn
Fingerprint85:A5:11:FD:4C:BF:F6:7E:9B:DA:3B:D0:D9:47:42:1A:1B:B3:CD:71
ValidityTue, 20 Jun 2023 00:00:00 GMT - Sat, 06 Jul 2024 23:59:59 GMT
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 627x327, components 3\012- data
Hash 085532800ace541124cb3472d27a2365
153ac0b32e31c472e021e450b6e48f4564a4c40f
35500fe4c97323624f089389243374c56e666e25478685a849c2456461a6163d
Analyzer Verdict Alert urlquery phishing Phishing - Bancolombia
urlquery phishing Phishing - Bancolombia
GET /incoming/incoming/serv/SicursaBanolombia/mua/img/inicio.jpg HTTP/1.1
Host: cpv.edu.vn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cpv.edu.vn/incoming/incoming/serv/SicursaBanolombia/mua/USER/scis/j6UnVHZsitlYrxStPNFUN4TsSjgEJkN7dlDp6FXSjFxO/3D/no-back-button/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Sat, 30 Sep 2023 11:24:50 GMT
content-type: image/jpeg
last-modified: Mon, 13 Jun 2022 02:22:10 GMT
accept-ranges: bytes
content-length: 47804
date: Sat, 23 Sep 2023 11:24:50 GMT
server: LiteSpeed
X-Firefox-Spdy: h2
cpv.edu.vn/incoming/incoming/serv/SicursaBanolombia/mua/img/user.png
200 OK 447 B URL GET HTTP/2 cpv.edu.vn/incoming/incoming/serv/SicursaBanolombia/mua/img/user.png
IP
Requested by https://cpv.edu.vn/incoming/incoming/serv/SicursaBanolombia/mua/USER/scis/j6UnVHZsitlYrxStPNFUN4TsSjgEJkN7dlDp6FXSjFxO/3D/no-back-button/
Certificate IssuerDigiCert Inc
Subjectcpv.edu.vn
Fingerprint85:A5:11:FD:4C:BF:F6:7E:9B:DA:3B:D0:D9:47:42:1A:1B:B3:CD:71
ValidityTue, 20 Jun 2023 00:00:00 GMT - Sat, 06 Jul 2024 23:59:59 GMT
File type PNG image data, 18 x 18, 8-bit/color RGBA, non-interlaced\012- data
Hash 0e3457ed5ea858d1e9287ef66dcbbfe4
006c99b62e141ebbc69f6e06cab757995d3f7417
75d5b455151a3b1a0a5b100041fee37de2daa0b41d1d177deaa863177c5b5b83
Analyzer Verdict Alert urlquery phishing Phishing - Bancolombia
urlquery phishing Phishing - Bancolombia
GET /incoming/incoming/serv/SicursaBanolombia/mua/img/user.png HTTP/1.1
Host: cpv.edu.vn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cpv.edu.vn/incoming/incoming/serv/SicursaBanolombia/mua/css/style.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Sat, 30 Sep 2023 11:24:51 GMT
content-type: image/png
last-modified: Mon, 13 Jun 2022 23:54:50 GMT
accept-ranges: bytes
content-length: 447
date: Sat, 23 Sep 2023 11:24:51 GMT
server: LiteSpeed
X-Firefox-Spdy: h2
images-cdn.info/444/image.gif
200 OK 42 B URL GET HTTP/2 images-cdn.info/444/image.gif
IP
Requested by https://cpv.edu.vn/incoming/incoming/serv/SicursaBanolombia/mua/USER/scis/j6UnVHZsitlYrxStPNFUN4TsSjgEJkN7dlDp6FXSjFxO/3D/no-back-button/
Certificate IssuerLet's Encrypt
Subjectimages-cdn.info
Fingerprint88:93:F5:C8:53:76:D3:B8:44:CB:1E:F9:F2:4F:90:51:4C:69:12:80
ValidityFri, 22 Sep 2023 14:32:27 GMT - Thu, 21 Dec 2023 14:32:26 GMT
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
Analyzer Verdict Alert urlquery phishing Phishing - Bancolombia
urlquery phishing Phishing - Bancolombia
GET /444/image.gif HTTP/1.1
Host: images-cdn.info
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cpv.edu.vn/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/gif
server: envoy
vary: Origin
date: Sat, 23 Sep 2023 11:24:51 GMT
content-length: 42
x-envoy-upstream-service-time: 4
strict-transport-security: max-age=31536000; includeSubDomains; preload
X-Firefox-Spdy: h2
cpv.edu.vn/incoming/incoming/serv/SicursaBanolombia/mua/fonts/opensans/OpenSans-Regular.ttf
200 OK 83 kB URL GET HTTP/2 cpv.edu.vn/incoming/incoming/serv/SicursaBanolombia/mua/fonts/opensans/OpenSans-Regular.ttf
IP
Requested by https://cpv.edu.vn/incoming/incoming/serv/SicursaBanolombia/mua/USER/scis/j6UnVHZsitlYrxStPNFUN4TsSjgEJkN7dlDp6FXSjFxO/3D/no-back-button/
Certificate IssuerDigiCert Inc
Subjectcpv.edu.vn
Fingerprint85:A5:11:FD:4C:BF:F6:7E:9B:DA:3B:D0:D9:47:42:1A:1B:B3:CD:71
ValidityTue, 20 Jun 2023 00:00:00 GMT - Sat, 06 Jul 2024 23:59:59 GMT
File type TrueType Font data, digitally signed, 19 tables, 1st "DSIG", 26 names, Macintosh, Digitized data copyright \251 2010-2011, Google Corporation.Open SansRegular1.10;1ASC;OpenSans-R\012- data
Hash d7d5d4588a9f50c99264bc12e4892a7c
513966e260bb7610d47b2329dba194143831893e
13c03e22a633919beb2847c58c8285fb8a735ee97097d7c48fd403f8294b05f8
Analyzer Verdict Alert urlquery phishing Phishing - Bancolombia
urlquery phishing Phishing - Bancolombia
GET /incoming/incoming/serv/SicursaBanolombia/mua/fonts/opensans/OpenSans-Regular.ttf HTTP/1.1
Host: cpv.edu.vn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cpv.edu.vn/incoming/incoming/serv/SicursaBanolombia/mua/css/stylesheet.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Sat, 30 Sep 2023 11:24:51 GMT
content-type: font/ttf
last-modified: Thu, 24 Jun 2021 01:39:20 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 82652
date: Sat, 23 Sep 2023 11:24:51 GMT
server: LiteSpeed
X-Firefox-Spdy: h2
cpv.edu.vn/incoming/incoming/serv/SicursaBanolombia/mua/fonts/opensans/CIBFontSans-Light.ttf
200 OK 53 kB URL GET HTTP/2 cpv.edu.vn/incoming/incoming/serv/SicursaBanolombia/mua/fonts/opensans/CIBFontSans-Light.ttf
IP
Requested by https://cpv.edu.vn/incoming/incoming/serv/SicursaBanolombia/mua/USER/scis/j6UnVHZsitlYrxStPNFUN4TsSjgEJkN7dlDp6FXSjFxO/3D/no-back-button/
Certificate IssuerDigiCert Inc
Subjectcpv.edu.vn
Fingerprint85:A5:11:FD:4C:BF:F6:7E:9B:DA:3B:D0:D9:47:42:1A:1B:B3:CD:71
ValidityTue, 20 Jun 2023 00:00:00 GMT - Sat, 06 Jul 2024 23:59:59 GMT
File type TrueType Font data, digitally signed, 18 tables, 1st "DSIG", 33 names, Macintosh, Copyright (c) 2019 by Vasava Studio. All rights reserved.\011CIBFont SansLight1.300;UKWN;CIBFont\012- data
Hash 69096387df83ff65381f8ee25006b0aa
89689ed7f7547a3815d9fa2d0a2c11513480086e
decf1c3cb09b3e38d867e0d5cf648220584404c9cf8d18a6c51bdfa2af5047cc
Analyzer Verdict Alert urlquery phishing Phishing - Bancolombia
urlquery phishing Phishing - Bancolombia
GET /incoming/incoming/serv/SicursaBanolombia/mua/fonts/opensans/CIBFontSans-Light.ttf HTTP/1.1
Host: cpv.edu.vn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cpv.edu.vn/incoming/incoming/serv/SicursaBanolombia/mua/css/stylesheet.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Sat, 30 Sep 2023 11:24:51 GMT
content-type: font/ttf
last-modified: Thu, 24 Jun 2021 01:38:50 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 52943
date: Sat, 23 Sep 2023 11:24:51 GMT
server: LiteSpeed
X-Firefox-Spdy: h2
cpv.edu.vn/incoming/incoming/serv/SicursaBanolombia/mua/img/logo.png
200 OK 9.5 kB URL GET HTTP/2 cpv.edu.vn/incoming/incoming/serv/SicursaBanolombia/mua/img/logo.png
IP
Requested by https://cpv.edu.vn/incoming/incoming/serv/SicursaBanolombia/mua/USER/scis/j6UnVHZsitlYrxStPNFUN4TsSjgEJkN7dlDp6FXSjFxO/3D/no-back-button/
Certificate IssuerDigiCert Inc
Subjectcpv.edu.vn
Fingerprint85:A5:11:FD:4C:BF:F6:7E:9B:DA:3B:D0:D9:47:42:1A:1B:B3:CD:71
ValidityTue, 20 Jun 2023 00:00:00 GMT - Sat, 06 Jul 2024 23:59:59 GMT
File type PNG image data, 521 x 520, 8-bit/color RGBA, non-interlaced\012- data
Hash 2903c67701750d246b77ee1c1c9188f1
028e6e88d6563e81eb77807c38f401cf5e7f2be0
c2fd3f9e79070fdbcb7ed3270a428a6ecd22ae089ab6e573eb4dfe91079c41fb
Analyzer Verdict Alert urlquery phishing Phishing - Bancolombia
urlquery phishing Phishing - Bancolombia
GET /incoming/incoming/serv/SicursaBanolombia/mua/img/logo.png HTTP/1.1
Host: cpv.edu.vn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cpv.edu.vn/incoming/incoming/serv/SicursaBanolombia/mua/USER/scis/j6UnVHZsitlYrxStPNFUN4TsSjgEJkN7dlDp6FXSjFxO/3D/no-back-button/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Sat, 30 Sep 2023 11:24:52 GMT
content-type: image/png
last-modified: Thu, 06 Jan 2022 02:33:06 GMT
accept-ranges: bytes
content-length: 9489
date: Sat, 23 Sep 2023 11:24:52 GMT
server: LiteSpeed
X-Firefox-Spdy: h2
ka-f.fontawesome.com/releases/v6.4.2/css/free.min.css?token=45b9078c9f
200 OK 103 kB URL GET HTTP/2 ka-f.fontawesome.com/releases/v6.4.2/css/free.min.css?token=45b9078c9f
IP
Requested by https://cpv.edu.vn/incoming/incoming/serv/SicursaBanolombia/mua/USER/scis/j6UnVHZsitlYrxStPNFUN4TsSjgEJkN7dlDp6FXSjFxO/3D/no-back-button/
Certificate IssuerGoogle Trust Services LLC
Subjectka-f.fontawesome.com
Fingerprint64:27:AB:CA:DB:24:8C:C9:87:09:13:04:21:49:9C:6A:4E:DD:97:93
ValiditySun, 10 Sep 2023 05:39:32 GMT - Sat, 09 Dec 2023 05:39:31 GMT
File type ASCII text, with very long lines (65321)
Size 103 kB (102749 bytes)
Hash ae737a19e46fd502ba9cbe9e33213861
a4b5d757af122c49259d4398807e62d4ca6f2493
5e0821588462d15b0ff8e911760fc041332c162e2e30ab4b1071bcc8eb6c8223
GET /releases/v6.4.2/css/free.min.css?token=45b9078c9f HTTP/1.1
Host: ka-f.fontawesome.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://cpv.edu.vn/
Origin: https://cpv.edu.vn
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 23 Sep 2023 11:24:51 GMT
content-type: text/css
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-max-age: 3000
last-modified: Tue, 01 Aug 2023 19:07:56 GMT
etag: W/"ae737a19e46fd502ba9cbe9e33213861"
x-amz-server-side-encryption: AES256
cache-control: max-age=31556926
access-control-allow-headers: fa-kit-token
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 ee8862e43d7837ef5478becfe2eb7116.cloudfront.net (CloudFront)
x-amz-cf-pop: LHR50-P1
x-amz-cf-id: C7yEsK79nvrG0_O29hcjA7u0Uf74Coaf-syJyUp08dlOIk45XD_gyg==
age: 46974
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Xq2fB0YPW72K4eGCvJisWSvD%2BJ8GaD4e5rQXT5cXS%2FXK1%2Bj13FgOLk4I2QxrG1hwd62q%2FnqoWxU1Jgg50vnzlV19S8EcHpzziVKeLN5pLKPDmH%2Fpw54namk7KESG%2BH0PlObJGSbLXQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 80b26c746adf35de-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
fonts.gstatic.com/s/opensans/v36/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B4gaVI.woff2
200 OK 19 kB URL GET HTTP/2 fonts.gstatic.com/s/opensans/v36/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B4gaVI.woff2
IP
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
Fingerprint3D:35:56:30:C0:0F:0C:7F:20:BA:7D:A8:48:DB:24:1B:15:F5:48:27
ValidityMon, 04 Sep 2023 08:23:09 GMT - Mon, 27 Nov 2023 08:23:08 GMT
File type Web Open Font Format (Version 2), TrueType, length 18664, version 1.0\012- data
Hash 8d1c44b2bf75a4e6f1bd141f9a965f4f
1e5dfdb7ca5ee8e823f9f5787f84b18fbdc38434
441e23601fe7525a142857c98cbb2784997579d51a17f736d7964dceee609709
GET /s/opensans/v36/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B4gaVI.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://goo.su
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 18664
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 19 Sep 2023 09:27:11 GMT
expires: Wed, 18 Sep 2024 09:27:11 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 14 Sep 2023 01:36:18 GMT
content-type: font/woff2
age: 352652
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
kit.fontawesome.com/45b9078c9f.js
200 OK 12 kB URL GET HTTP/2 kit.fontawesome.com/45b9078c9f.js
IP
Requested by https://cpv.edu.vn/incoming/incoming/serv/SicursaBanolombia/mua/USER/scis/j6UnVHZsitlYrxStPNFUN4TsSjgEJkN7dlDp6FXSjFxO/3D/no-back-button/
Certificate IssuerDigiCert Inc
Subject*.fontawesome.com
Fingerprint6C:69:02:A7:9B:07:84:8E:D0:3D:0A:10:61:8E:01:80:88:37:EF:5E
ValidityTue, 22 Nov 2022 00:00:00 GMT - Sat, 23 Dec 2023 23:59:59 GMT
File type ASCII text, with very long lines (11213)
Hash e8e4f917ed26e3a1d2f26077eee3f73c
b37c96d5deda15c3754f058f8f42ecc4fb9e4970
8212039d17d158453c6305a5ca08559ca48007be17b5fc214a00b57461e9d8a4
GET /45b9078c9f.js HTTP/1.1
Host: kit.fontawesome.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://cpv.edu.vn
DNT: 1
Connection: keep-alive
Referer: https://cpv.edu.vn/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 23 Sep 2023 11:24:51 GMT
content-type: text/javascript
access-control-allow-headers: accept, accept-langauge, content-language, content-type, fa-kit-token
access-control-allow-methods: GET, OPTIONS
access-control-allow-origin: *
access-control-max-age: 3000
cache-control: max-age=60, public, stale-while-revalidate=30
vary: origin, accept-encoding, access-control-request-headers, access-control-request-method
x-request-id: F4dcwgna8CgTUSKPczch
cf-cache-status: REVALIDATED
server: cloudflare
cf-ray: 80b26c6fc8110b51-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
st.top100.ru/top100/3.13.33/usability.js
200 OK 15 kB URL GET HTTP/2 st.top100.ru/top100/3.13.33/usability.js
IP
ASN #24638 Rambler Internet Holding LLC
Certificate IssuerGlobalSign nv-sa
Subject*.top100.ru
Fingerprint69:AD:E6:85:0B:3A:87:2C:3B:C1:7E:CB:EF:53:D7:2E:12:F3:76:6B
ValidityWed, 08 Feb 2023 07:55:45 GMT - Mon, 11 Mar 2024 07:55:44 GMT
File type ASCII text, with very long lines (14628), with no line terminators
Hash 0f48ddea0b16499031202f8a27a111aa
023035e1fc6eb85e6d4a7546b7eaa0517091f0dd
5537da60034925390e2405795e1419b302abf55df07474fe1dfd98312c36a73c
GET /top100/3.13.33/usability.js HTTP/1.1
Host: st.top100.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://goo.su/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 23 Sep 2023 11:24:43 GMT
content-type: application/javascript
vary: Accept-Encoding
last-modified: Thu, 21 Sep 2023 09:13:19 GMT
x-rgw-object-type: Normal
etag: W/"0f48ddea0b16499031202f8a27a111aa"
x-amz-request-id: tx000000000000046ca75c3-00650ec9a5-e8bb14d-default
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
set-cookie: proto_uid=1CIAAPvKDmWyhhYGAUgfjwB=; expires=Thu, 31-Dec-37 23:55:55 GMT; domain=.rambler.ru; path=/
p3p: CP="NON DSP NID ADMa DEVa TAIa PSAa PSDa OUR IND UNI COM NAV"
content-encoding: gzip
X-Firefox-Spdy: h2
ka-f.fontawesome.com/releases/v6.4.2/css/free-v4-shims.min.css?token=45b9078c9f
200 OK 28 kB URL GET HTTP/2 ka-f.fontawesome.com/releases/v6.4.2/css/free-v4-shims.min.css?token=45b9078c9f
IP
Requested by https://cpv.edu.vn/incoming/incoming/serv/SicursaBanolombia/mua/USER/scis/j6UnVHZsitlYrxStPNFUN4TsSjgEJkN7dlDp6FXSjFxO/3D/no-back-button/
Certificate IssuerGoogle Trust Services LLC
Subjectka-f.fontawesome.com
Fingerprint64:27:AB:CA:DB:24:8C:C9:87:09:13:04:21:49:9C:6A:4E:DD:97:93
ValiditySun, 10 Sep 2023 05:39:32 GMT - Sat, 09 Dec 2023 05:39:31 GMT
File type ASCII text, with very long lines (27377)
Hash da06df503ced6ee507b5fb4fa0999f74
d10d67ffa9c263e24c43b1df7fa3ba8f2dee2c36
236e285339a2a692e9491d356489cdf83513cfb1add049a0620123d644e47554
GET /releases/v6.4.2/css/free-v4-shims.min.css?token=45b9078c9f HTTP/1.1
Host: ka-f.fontawesome.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://cpv.edu.vn/
Origin: https://cpv.edu.vn
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 23 Sep 2023 11:24:51 GMT
content-type: text/css
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-max-age: 3000
last-modified: Tue, 01 Aug 2023 19:07:56 GMT
etag: W/"da06df503ced6ee507b5fb4fa0999f74"
x-amz-server-side-encryption: AES256
cache-control: max-age=31556926
access-control-allow-headers: fa-kit-token
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 d6030d5ab753695c0198f874d4276eb2.cloudfront.net (CloudFront)
x-amz-cf-pop: LHR50-P1
x-amz-cf-id: GlNeJffZ3nfS7fEHlRTAy7h6xKbNICUd4GoewH5K0yBL45U8LNLQVQ==
age: 46974
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=4ZZHZlRLn8OZjsK2y5FVc7W2%2B4CyI0w1%2Bpd0bqYFxFRwlIZ0NOYssPE1NG4MSIyn7o5ldnYw51ZH6Y%2Fjia5WxiM7ASQp0NE99Yo7vKLT8s7gPXhSi3%2FWM87gb8EeFBPMK2hXdWX1lA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 80b26c748b0f35de-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
richinfo.co/richpartners/push/js/rp-cl-ob.js?pubid=883146&siteid=330256&niche=33
200 OK 71 kB URL GET HTTP/2 richinfo.co/richpartners/push/js/rp-cl-ob.js?pubid=883146&siteid=330256&niche=33
IP
Certificate IssuerLet's Encrypt
Subjectrichinfo.co
FingerprintFA:CB:B0:CA:66:A8:66:5E:2C:7C:91:95:87:EC:8C:F7:75:C1:5F:34
ValidityFri, 15 Sep 2023 11:19:20 GMT - Thu, 14 Dec 2023 11:19:19 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Hash 482657d8dc8d45dca5dbd78e2e988097
4d2eae324d0dd95de1c8d7a2c2d5a0f9d46eabf6
95bfb0165ee20b9404f599edcb7f7fee4bfedc1df340dfdce225ad35f3506ff7
GET /richpartners/push/js/rp-cl-ob.js?pubid=883146&siteid=330256&niche=33 HTTP/1.1
Host: richinfo.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://goo.su/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: openresty/1.21.4.1
date: Sat, 23 Sep 2023 11:24:42 GMT
content-type: application/javascript
x-amz-id-2: 8Dr8JPzuJGLzFTvJy4haPWI7xvqvF2oaB/0cSuvwFNibDLW43BXa4BcqE6VFoAElM4RQwwR+4bA=
x-amz-request-id: C3WS8N8NNNGJ2DVE
last-modified: Fri, 15 Sep 2023 13:32:51 GMT
etag: W/"482657d8dc8d45dca5dbd78e2e988097"
x-amz-server-side-encryption: AES256
content-encoding: gzip
X-Firefox-Spdy: h2
ka-f.fontawesome.com/releases/v6.4.2/css/free-v4-font-face.min.css?token=45b9078c9f
200 OK 1.8 kB URL GET HTTP/2 ka-f.fontawesome.com/releases/v6.4.2/css/free-v4-font-face.min.css?token=45b9078c9f
IP
Requested by https://cpv.edu.vn/incoming/incoming/serv/SicursaBanolombia/mua/USER/scis/j6UnVHZsitlYrxStPNFUN4TsSjgEJkN7dlDp6FXSjFxO/3D/no-back-button/
Certificate IssuerGoogle Trust Services LLC
Subjectka-f.fontawesome.com
Fingerprint64:27:AB:CA:DB:24:8C:C9:87:09:13:04:21:49:9C:6A:4E:DD:97:93
ValiditySun, 10 Sep 2023 05:39:32 GMT - Sat, 09 Dec 2023 05:39:31 GMT
File type ASCII text, with very long lines (1803), with no line terminators
Hash e222c7d81e67e7d64f8e1e2c2bf5b558
05f52e4d94bf5f8a4f874589b2c66f3d40b64ce6
35f3c6cee4d181081c6e1c723440924507201b46e4d5aa80a63fe29f7d8c748a
GET /releases/v6.4.2/css/free-v4-font-face.min.css?token=45b9078c9f HTTP/1.1
Host: ka-f.fontawesome.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://cpv.edu.vn/
Origin: https://cpv.edu.vn
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 23 Sep 2023 11:24:51 GMT
content-type: text/css
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-max-age: 3000
last-modified: Tue, 01 Aug 2023 19:07:56 GMT
etag: W/"9b853b50f37dd0ca770ce0f294d427df"
x-amz-server-side-encryption: AES256
cache-control: max-age=31556926
access-control-allow-headers: fa-kit-token
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 ed393405ff603a61a1e63909cf1c1a44.cloudfront.net (CloudFront)
x-amz-cf-pop: LHR50-P1
x-amz-cf-id: Ei2MBMHgv0OQoShOCuMG8KmOYRP9ZQHsT0EOF_Q-3Lg6hv5cKKOIMA==
age: 46974
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=s52PlAYNre5yNnZykBTHa0WydNdxW%2FqgvMGutcb51U6hUJqxv2HtrVt5MSN57BIosE53JMPX7H6c7jR6eDAY%2FtEvv4X6Rn%2BGbGPRjrnNGP5pIuufv0YakV5ICHwKunL8HBbIgUB7Bg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 80b26c748b1235de-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
200 OK 10 kB URL User Request GET HTTP/2 IP
Certificate IssuerGoogle Trust Services LLC
Subjectgoo.su
Fingerprint87:1B:25:96:4F:2E:0E:67:19:86:93:A2:A6:33:2A:8B:A6:61:6B:66
ValidityTue, 08 Aug 2023 22:44:19 GMT - Mon, 06 Nov 2023 22:44:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert OpenPhish phishing Bancolombia
GET /VWGz8X HTTP/1.1
Host: goo.su
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 23 Sep 2023 11:24:42 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
x-powered-by: PHP/8.0.15
cache-control: private, must-revalidate
pragma: no-cache
expires: -1
set-cookie: XSRF-TOKEN=eyJpdiI6IkR5TDZsZW5zeSttbGVrMkVMeWhBRHc9PSIsInZhbHVlIjoidklEWlFsSWp3Tk54VkJIakJ2dlNRc2tmUS9EZW9JWUhJZFA2RmdvdWRiZ01CY3Bpc2VFdFVDUmNucGIza290cjZmRjBkYk5GMDJwMzR2VmlMb3FrRFpGcXBCSFFIVDc5Q1hTd2tFYURaOFRZd2tCRWpWa1I4TmFSdk1IVXpicTIiLCJtYWMiOiI3ODkzYjM1YzJmZTY0YzBmMDVjMTljZGYyZGE4Y2NmNWM4YmJjNDcwZTc0NTcyYzdkZjVhOGM2Zjc4NWM0Zjc5IiwidGFnIjoiIn0%3D; expires=Sun, 24-Sep-2023 06:04:42 GMT; Max-Age=67200; path=/; samesite=lax
goosu_session=eyJpdiI6ImtadklJd0orUWovZGlCQVdUcERHVFE9PSIsInZhbHVlIjoiUUpTSU1hMGhiakZoT05UaDBJZTNiUkt3YzBYamhhZDVoc2dZUWhqLzVmeDBIZFAwYWVmSXA1UmYrMU56Mll0MjNFUWFRdHJITldyZlozMEVNSU91K0IvN3Y4SXQxc1ZUSFltOWVvdWQ4eDhhY0FxUFVOcDFMNThWdUJ1QkQrSW8iLCJtYWMiOiI4ODVjOTUyNTYxYmFjYzA0N2I4OGY1YjY3ZDM5MWVhMzFmNTQxMTRjYTUwMGE5M2I2OTU5NDM2YjMzOTY4ZmJiIiwidGFnIjoiIn0%3D; expires=Sun, 24-Sep-2023 06:04:42 GMT; Max-Age=67200; path=/; httponly; samesite=lax
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ey5%2B4LsG4eu7hbE9qSMR%2BXnAXxk2NLRP2FhHnBjJsx0pFAUp%2BIv%2FVwsRd1P5t3hZQIS6vOFh7S3YjWVchOlBaElyL59bctEOcvmmlrJY4fApnPZDPDq5QLQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 80b26c397909568d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
ka-f.fontawesome.com/releases/v6.4.2/css/free-v5-font-face.min.css?token=45b9078c9f
200 OK 823 B URL GET HTTP/2 ka-f.fontawesome.com/releases/v6.4.2/css/free-v5-font-face.min.css?token=45b9078c9f
IP
Requested by https://cpv.edu.vn/incoming/incoming/serv/SicursaBanolombia/mua/USER/scis/j6UnVHZsitlYrxStPNFUN4TsSjgEJkN7dlDp6FXSjFxO/3D/no-back-button/
Certificate IssuerGoogle Trust Services LLC
Subjectka-f.fontawesome.com
Fingerprint64:27:AB:CA:DB:24:8C:C9:87:09:13:04:21:49:9C:6A:4E:DD:97:93
ValiditySun, 10 Sep 2023 05:39:32 GMT - Sat, 09 Dec 2023 05:39:31 GMT
File type ASCII text, with very long lines (845), with no line terminators
Hash 60f771d70194eee2f6ca53f652629c57
80569fe18344d0c3f526479a886fba91d2de0aca
64d1a9645b5b437137ca6c04f5aa6bedd4fe5d102c592894411232a7121e7b02
GET /releases/v6.4.2/css/free-v5-font-face.min.css?token=45b9078c9f HTTP/1.1
Host: ka-f.fontawesome.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://cpv.edu.vn/
Origin: https://cpv.edu.vn
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 23 Sep 2023 11:24:51 GMT
content-type: text/css
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-max-age: 3000
last-modified: Tue, 01 Aug 2023 19:07:56 GMT
etag: W/"dbf296002d53e56d340b105d9d764940"
x-amz-server-side-encryption: AES256
cache-control: max-age=31556926
access-control-allow-headers: fa-kit-token
x-cache: Hit from cloudfront
via: 1.1 24639548230786af4bba1a9e26c6080e.cloudfront.net (CloudFront)
x-amz-cf-pop: LHR50-P1
x-amz-cf-id: WYXJOz2G5kSj9FmwNp9WkN5v1rCaa9FWqwod7-Ncwtp_sxDcjkfkkQ==
age: 46974
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=4aGv5yflX02y0Plf6Z9fNgexA3b7w0aoKSeHT%2FxlCIySQdlvi2jiVGjgGtttPiwuJ8DWsyeyqkyy7RqQpM8WYsQ7tksqeopTgkqN4IenROUDhuD%2FjvUI4US9piX0TjOLiKuAo%2FhsMg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 80b26c746aee35de-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
goo.su/frontend/js/redirect.js?id=0206716eb65eec68ba60
200 OK 91 kB URL GET HTTP/3 goo.su/frontend/js/redirect.js?id=0206716eb65eec68ba60
IP
Certificate IssuerGoogle Trust Services LLC
Subjectgoo.su
Fingerprint87:1B:25:96:4F:2E:0E:67:19:86:93:A2:A6:33:2A:8B:A6:61:6B:66
ValidityTue, 08 Aug 2023 22:44:19 GMT - Mon, 06 Nov 2023 22:44:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /frontend/js/redirect.js?id=0206716eb65eec68ba60 HTTP/1.1
Host: goo.su
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://goo.su/VWGz8X
Cookie: XSRF-TOKEN=eyJpdiI6IkR5TDZsZW5zeSttbGVrMkVMeWhBRHc9PSIsInZhbHVlIjoidklEWlFsSWp3Tk54VkJIakJ2dlNRc2tmUS9EZW9JWUhJZFA2RmdvdWRiZ01CY3Bpc2VFdFVDUmNucGIza290cjZmRjBkYk5GMDJwMzR2VmlMb3FrRFpGcXBCSFFIVDc5Q1hTd2tFYURaOFRZd2tCRWpWa1I4TmFSdk1IVXpicTIiLCJtYWMiOiI3ODkzYjM1YzJmZTY0YzBmMDVjMTljZGYyZGE4Y2NmNWM4YmJjNDcwZTc0NTcyYzdkZjVhOGM2Zjc4NWM0Zjc5IiwidGFnIjoiIn0%3D; goosu_session=eyJpdiI6ImtadklJd0orUWovZGlCQVdUcERHVFE9PSIsInZhbHVlIjoiUUpTSU1hMGhiakZoT05UaDBJZTNiUkt3YzBYamhhZDVoc2dZUWhqLzVmeDBIZFAwYWVmSXA1UmYrMU56Mll0MjNFUWFRdHJITldyZlozMEVNSU91K0IvN3Y4SXQxc1ZUSFltOWVvdWQ4eDhhY0FxUFVOcDFMNThWdUJ1QkQrSW8iLCJtYWMiOiI4ODVjOTUyNTYxYmFjYzA0N2I4OGY1YjY3ZDM5MWVhMzFmNTQxMTRjYTUwMGE5M2I2OTU5NDM2YjMzOTY4ZmJiIiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 23 Sep 2023 11:24:42 GMT
content-type: application/javascript
cache-control: max-age=604800
cf-bgj: minify
cf-polished: origSize=90593
etag: W/"620befd7-161e1"
expires: Mon, 25 Sep 2023 17:09:53 GMT
last-modified: Tue, 15 Feb 2022 18:24:23 GMT
cf-cache-status: HIT
age: 411289
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=F36VIKa1h0jLTDhNVAN3a6xMJvxLZMDdZsp7WbhCUPWndMZyR1xynNXLSODpxh9bkRpDtuS%2BW6SbrKDKrHHz4rVPMspR7eF1LyNa1%2FHSuJ%2FMmL09En5essY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 80b26c3e4d915694-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
st.top100.ru/top100/top100.js
200 OK 114 kB URL GET HTTP/2 st.top100.ru/top100/top100.js
IP
ASN #24638 Rambler Internet Holding LLC
Certificate IssuerGlobalSign nv-sa
Subject*.top100.ru
Fingerprint69:AD:E6:85:0B:3A:87:2C:3B:C1:7E:CB:EF:53:D7:2E:12:F3:76:6B
ValidityWed, 08 Feb 2023 07:55:45 GMT - Mon, 11 Mar 2024 07:55:44 GMT
Size 114 kB (113669 bytes)
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /top100/top100.js HTTP/1.1
Host: st.top100.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://goo.su/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 23 Sep 2023 11:24:43 GMT
content-type: application/javascript
vary: Accept-Encoding
last-modified: Thu, 21 Sep 2023 09:13:19 GMT
x-rgw-object-type: Normal
etag: W/"bb445385fb4681177f69299be5dd1cff"
x-amz-request-id: tx000000000000046cb93d4-00650ecad6-e8bb14d-default
expires: Sat, 23 Sep 2023 12:24:43 GMT
cache-control: max-age=3600
set-cookie: proto_uid=1CIAAPvKDmWyhhYGAekejwB=; expires=Thu, 31-Dec-37 23:55:55 GMT; domain=.rambler.ru; path=/
p3p: CP="NON DSP NID ADMa DEVa TAIa PSAa PSDa OUR IND UNI COM NAV"
content-encoding: gzip
X-Firefox-Spdy: h2
104.21.38.221
142.250.74.106
23.109.248.183
103.77.162.5
81.19.89.16