{"report_id":"9dd03d24-6324-4093-a6fb-eaedc3f03178","version":6,"status":"done","tags":["phishing","microsoft","outlook"],"date":"2023-11-21T07:44:01Z","url":{"schema":"http","addr":"bmwag-rt-prod2-t.campaign.adobe.com/r/?id=h2ccc12b,8d23fb3,492093b\u0026p1=elhamadsteel.com/wp-admin/js/auth/esmjL/YWxiZXJ0b0BlbHphYnVydS5lcw==","fqdn":"bmwag-rt-prod2-t.campaign.adobe.com","domain":"adobe.com","tld":"com"},"ip":{"addr":"34.254.109.246","port":0,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"final":{"url":{"schema":"https","addr":"osnrafbtea.oneswittla.ru/kswqjl/#alberto@elzaburu.es","fqdn":"osnrafbtea.oneswittla.ru","domain":"oneswittla.ru","tld":"ru"},"title":"Sign in to your Microsoft account"},"submit":{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":""},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-10-26T12:14:57Z","useragent":"Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0","referer":"","cookies":null,"exit_node":"default"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"code.jquery.com","ip":{"addr":"151.101.66.137","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2005-12-10","domain_rank":634,"first_seen":"2012-05-21 19:28:02","last_seen":"2023-11-21 05:09:18","alert_count":0,"request_count":1,"received_data":31462,"sent_data":420,"comment":"","tags":null,"fingerprints":null},{"fqdn":"osnrafbtea.oneswittla.ru","ip":{"addr":"104.21.17.6","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2023-11-01","domain_rank":0,"first_seen":"2023-11-03 14:57:42","last_seen":"2023-11-20 18:15:31","alert_count":1,"request_count":31,"received_data":745517,"sent_data":26086,"comment":"","tags":null,"fingerprints":null},{"fqdn":"aadcdn.msftauth.net","ip":{"addr":"152.199.23.37","port":443,"asn":15133,"as":"EDGECAST","country":"United States","country_code":"US"},"domain_registered":"2018-10-25","domain_rank":1455,"first_seen":"2018-11-19 11:50:32","last_seen":"2023-11-21 05:09:23","alert_count":0,"request_count":3,"received_data":11097,"sent_data":1526,"comment":"","tags":null,"fingerprints":null},{"fqdn":"adfs.heart.org","ip":{"addr":"69.152.183.140","port":443,"asn":7018,"as":"ATT-INTERNET4","country":"United States","country_code":"US"},"domain_registered":"1995-01-12","domain_rank":0,"first_seen":"2016-10-10 20:42:57","last_seen":"2023-11-20 03:49:53","alert_count":0,"request_count":1,"received_data":6905,"sent_data":446,"comment":"","tags":null,"fingerprints":null},{"fqdn":"httpbin.org","ip":{"addr":"52.20.41.59","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"domain_registered":"2011-06-12","domain_rank":352975,"first_seen":"2013-07-23 00:01:27","last_seen":"2023-11-20 07:00:03","alert_count":0,"request_count":1,"received_data":283,"sent_data":480,"comment":"","tags":null,"fingerprints":null},{"fqdn":"cdn.socket.io","ip":{"addr":"143.204.55.40","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2010-04-18","domain_rank":62068,"first_seen":"2015-03-23 23:14:03","last_seen":"2023-11-19 19:45:11","alert_count":0,"request_count":1,"received_data":46488,"sent_data":423,"comment":"","tags":null,"fingerprints":null},{"fqdn":"elhamadsteel.com","ip":{"addr":"192.185.88.231","port":0,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"domain_registered":"2019-11-14","domain_rank":0,"first_seen":"2020-01-28 21:15:48","last_seen":"2023-11-19 20:58:49","alert_count":1,"request_count":1,"received_data":245,"sent_data":524,"comment":"","tags":null,"fingerprints":null},{"fqdn":"challenges.cloudflare.com","ip":{"addr":"104.17.3.184","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":0,"first_seen":"2021-10-20 07:02:03","last_seen":"2023-11-21 05:09:18","alert_count":0,"request_count":4,"received_data":147506,"sent_data":2160,"comment":"","tags":null,"fingerprints":null},{"fqdn":"aadcdn.msauth.net","ip":{"addr":"13.107.246.53","port":443,"asn":8068,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"domain_registered":"2018-10-25","domain_rank":1421,"first_seen":"2018-11-19 11:50:03","last_seen":"2023-11-21 05:09:23","alert_count":0,"request_count":1,"received_data":1616,"sent_data":500,"comment":"","tags":null,"fingerprints":null},{"fqdn":"logincdn.msauth.net","ip":{"addr":"192.229.221.185","port":443,"asn":15133,"as":"EDGECAST","country":"United States","country_code":"US"},"domain_registered":"2018-10-25","domain_rank":2330,"first_seen":"2019-04-23 03:13:28","last_seen":"2023-11-20 05:31:50","alert_count":0,"request_count":1,"received_data":1050,"sent_data":510,"comment":"","tags":null,"fingerprints":null},{"fqdn":"bmwag-rt-prod2-t.campaign.adobe.com","ip":{"addr":"52.215.148.88","port":0,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"domain_registered":"1986-11-17","domain_rank":0,"first_seen":"2020-10-06 11:33:48","last_seen":"2023-11-20 05:41:55","alert_count":0,"request_count":1,"received_data":943,"sent_data":594,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":[{"sensor_name":"infosec_yara","type":"yara","description":"Public InfoSec YARA rules","link":"","alerts":null},{"sensor_name":"openphish","type":"url","description":"OpenPhish","link":"","alerts":null},{"sensor_name":"phishtank","type":"url","description":"PhishTank","link":"","alerts":null},{"sensor_name":"mnemonic_dns","type":"domain","description":"mnemonic secure dns","link":"","alerts":null},{"sensor_name":"quad9","type":"domain","description":"Quad9 DNS","link":"","alerts":null},{"sensor_name":"threatfox","type":"url","description":"ThreatFox","link":"","alerts":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Microsoft Outlook","verdict":"phishing","severity":"medium","comment":"","tags":["phishing","microsoft","outlook"],"meta":null}]},"javascript":{"script":[{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"8b110d3226adfd145b228f0c04fb42e6","sha1":"f60b1e8f666c66666b27db9936e442169fb4f4cb","sha256":"35d68a5bed2368594a9ee3b4b5c70dc8a51a028ba5060a57a25a406a6ba17d22","sha512":"3ed5dd7ec522f3ee7c0e84945bbeda27c3cbdc67ac96922d316c0b1936ffde8f8546863080ca1fc773ff603519cc6fc2ffcc366ade1c49455f889f6445d9d328","ssdeep":"","tlshash":"fbe068202d7382501c1a916e767be2943ca100033002f0ab368fab380f21fc684f59f4","size":373,"data":"","first_seen":"2023-11-08T19:12:35Z","last_seen":"2024-08-20T20:23:02.172573Z","times_seen":1519,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"aa049e2749b8531cb8f233c2f64fc2b2","sha1":"b611a5a62c1813ae5b4763378b3a4a565556530a","sha256":"e52e51d5897d7a179089ddcf8f5de7aeb3ef4f27b054b63e937cf308b685c9e2","sha512":"fa951f3911de780608d6235a597758320388dff58cf18dd584a6941ac88cc36cac7d52caa72b678ee6f4dff47ee23955ab282714d03e713ae2bed4cb73a3c14e","ssdeep":"","tlshash":"afa012c87a99f408423260f04c3b808de0352c20348c544069098c556c711098336d1c","size":79,"data":"","first_seen":"2023-04-11T21:38:58Z","last_seen":"2026-05-30T02:59:47.399148Z","times_seen":226192,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"osnrafbtea.oneswittla.ru/web1/assets/js/pages.min.js?cb=1700552627311","fqdn":"osnrafbtea.oneswittla.ru","domain":"oneswittla.ru","tld":"ru"},"ip":{"addr":"104.21.17.6","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"16d4296fd1c5e8424d0d1ac72bd24267","sha1":"2cecad8640c7bbd71f5c4a1e63b0744ccea4919a","sha256":"c51aa4190d40abba316825083c097b1d27b8299ba86082af950e17f2d372b7f5","sha512":"7787b00cc7e2f4c164711a56e835efb228bf81a6f1c5930ca98cea5e760937ff095493021f2c5149a5fbef23376c5b773da9c723b78bd04c3b180b879756b46e","ssdeep":"1536:5B5V5D6BRozHR8qah7otG5DYg5ML/oEDg5Mv9oJ4NjTQsw3KDNo4jkrBKam+Qx2s:5BEmzxP4sUJ42sw3KP6uNz","tlshash":"f19363037e50da9e335b4eba313379e4f466055979c19e8ae05cec2196d9b23fae1c30","size":92383,"data":"","first_seen":"2023-11-01T21:13:14Z","last_seen":"2024-08-20T21:28:05.646882Z","times_seen":6471,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"osnrafbtea.oneswittla.ru/kswqjl/myscr558155.js","fqdn":"osnrafbtea.oneswittla.ru","domain":"oneswittla.ru","tld":"ru"},"ip":{"addr":"104.21.17.6","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"5e599bb61a003dee7c1d98c60d7b58f2","sha1":"6531b529c505015f7baf8f6cc71da6aa08d467ce","sha256":"2cf2c32a1e9c9aab13a8f042dd989be980cbf14c3e7bce0a8e177cc5095d17f4","sha512":"96a332b81c05e082ffb955edb98c032918774ef7b79c1a49c549cfb34dffbb9ad9445f14ec0c4c2dec9b86ca0f1c2e1c0cad63ab7518edbccbe674dde93c2afe","ssdeep":"384:b3r54VKvlTxQQIkqZ/Ya39g4ZBBXa/8iW72sJFW32F5I2FMB2hPSL:b754VKo39HxQGJ8tlVL","tlshash":"a1c2db180e04efb092bf078385919e885924eb9bfbd8ec5d41935ad3f6193a7c6d7c48","size":27865,"data":"","first_seen":"2023-11-08T19:12:35Z","last_seen":"2023-11-28T00:09:45Z","times_seen":1519,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/turnstile/v0/api.js?render=explicit","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.3.184","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6142a5f5c66e2c1be52ee9506a565962","sha1":"c3b39e8352efd1e0619b6dd62af8b2a917622868","sha256":"51cd12da61a7401c73472b2ac77067adfa30e9fc0545b4b7c240e9154e011fc7","sha512":"3de194e4c8f32703cfee9e2a48230d21301e28a39beefb36dcb2b8df26b962b3a508e7fd8fe55aca2f619293e293cdf64459bf5d91526cbceda770396765d5e2","ssdeep":"768:3YpyCIUTKuBT1ytljuXeMDKLFn76p+B5nLZ73akHgMO4B4oq0HVi:30nKuBT1Yj7MDCKp","tlshash":"9ff229993187343187ee41e0207b67877339ba3ae58cc840d85bc97539bcd8ad137ba9","size":34254,"data":"","first_seen":"2023-11-07T13:44:12Z","last_seen":"2023-11-30T20:53:42Z","times_seen":32842,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"osnrafbtea.oneswittla.ru/web1/assets/js/pages-head-top-web.min.js?cb=1700552626312","fqdn":"osnrafbtea.oneswittla.ru","domain":"oneswittla.ru","tld":"ru"},"ip":{"addr":"104.21.17.6","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"5587d13a8f284b6b792c72a3d569c7ae","sha1":"2ad2b05b75fa15e7f15fdea3ed4771b166f5f41e","sha256":"de59ea88654c99cb8b905042b552d9a960be17031538c7a2e65950b8f99089cd","sha512":"d29828c19c9f0881e413064d61c34f60fedda46ffb23f91d1787c3e68c8dce54a2259245385117e6732c560c77d25cf74200cf0a4936b7f89201cda83c611589","ssdeep":"","tlshash":"ee41e2103015476d4a7f238ef4715868bdd583263525b890c0afb89cb4b2fd605a6f77","size":2394,"data":"","first_seen":"2023-10-23T01:34:22Z","last_seen":"2024-08-21T03:48:31.202964Z","times_seen":3776,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.socket.io/4.6.0/socket.io.min.js","fqdn":"cdn.socket.io","domain":"socket.io","tld":"io"},"ip":{"addr":"143.204.55.40","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"80f5b8c6a9eeac15de93e5a112036a06","sha1":"f7174635137d37581b11937fc90e9cb325077bce","sha256":"0401de33701f1cad16ecf952899d23990b6437d0a5b7335524edf6bdfb932542","sha512":"b976a5f02202439d94c6817d037c813fa1945c6bb93762284d97ff61718c5b833402f372562034663a467fdbaa46990de24cb1e356392340e64d034e4ba1b4e4","ssdeep":"384:1ZS0CCnasl8gRR/PoPez+iCMN0Fkiw2Jh4RWdRGhAjbp2ChPL8cYRGv5MRUK6np9:/CCnVl7tUkBxkdRGOfDiY5C5MAn5GY2","tlshash":"1423a488f2a1b06187e37165443f110ba27a746964c9c18cf639d9f19eb8ece7123f79","size":45806,"data":"","first_seen":"2023-04-05T03:09:50Z","last_seen":"2026-05-29T10:30:33.644611Z","times_seen":39692,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"osnrafbtea.oneswittla.ru/web1/assets/js/pages-head-web.min.js?cb=1700552627311","fqdn":"osnrafbtea.oneswittla.ru","domain":"oneswittla.ru","tld":"ru"},"ip":{"addr":"104.21.17.6","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"701637cf7b3c9588cdf84dbb449ba48e","sha1":"a3fd0695db073372cbb52345cb18cd4f8186edeb","sha256":"fe2ea5cd48f2ca8001c5283ee74d2b41305644374b0c1e7b90b9cb6b5bb73a94","sha512":"c164a8263f80e6d51fb5fca897fdd481f13072726dab7674a8d2291db6bdd178015c60d1396b505488d610c690fb7d20e3247a14b9a41f93cf1a74b58df022dd","ssdeep":"384:VJS8baODLnsyoufnuP7k8ZGEWtMaAJyAdX220BQfwxuGKcKpFHU4PxS1eD:TSzODrsyoufnuP7kHE5aAJyAdX2pBQf1","tlshash":"415272857af46dd5075326bbb337b4e8f0663c983490a89bf214bc84b8f0642f5e19b4","size":13626,"data":"","first_seen":"2023-10-22T15:28:58Z","last_seen":"2023-12-13T02:19:04Z","times_seen":13891,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/jquery-3.6.0.min.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.66.137","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"8fb8fee4fcc3cc86ff6c724154c49c42","sha1":"b82d238d4e31fdf618bae8ac11a6c812c03dd0d4","sha256":"ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e","sha512":"f3de1813a4160f9239f4781938645e1589b876759cd50b7936dbd849a35c38ffaed53f6a61dbdd8a1cf43cf4a28aa9fffbfddeec9a3811a1bb4ee6df58652b31","ssdeep":"1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn","tlshash":"069309ddb2c6702257a720ba007f510bf236199d6c4d8450f169d8eabc78a4e827bf7d","size":89501,"data":"","first_seen":"2023-03-07T01:02:13Z","last_seen":"2026-05-30T03:01:27.35022Z","times_seen":475294,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"29d0c84b9d1d8da446a6062c6a840ad9","sha1":"6d6b3a6065667c7c50d92f3889c85ed65a9ad784","sha256":"3c3cbdb71d0d2c22f504f4d63d8a6ffe8d250cde7e58300619be35b6bbab26a1","sha512":"52cfcbf2f7c3521c5a6c6120099ee6822d16e04ffbc04720da925a11242c8c2050f9cfc8d864a6d39a0036ac599f701080195a29a7c5e8d3e9308b91f9f0390f","ssdeep":"","tlshash":"679004dd3d51d000433350f04c17d4d5f0340c3030541d00750dd4475c7111c4135c7c","size":37,"data":"","first_seen":"2023-04-11T21:31:25Z","last_seen":"2026-05-30T03:00:31.107087Z","times_seen":676526,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":[{"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-05-30T03:03:03.466135Z","times_seen":721562,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"write":[{"md5":"e6551f525460f84f747d63ef38ee439b","sha1":"31a3af3df980c8f2a340080fa4940f608d37d2d6","sha256":"d7435a733ece9ff76f6c20b0319e53de588a20594095eb707d81512f9b1fcdb9","sha512":"9b85813712784c61219d52f6a838725d2113c5fdef72f89add156cdff71755322f554c0ad6845ee9d2fcdc55814c8a7f921dffb953625eed5c416e663b03e1cf","ssdeep":"96:rCxrYlLCC3HZr5k9ZBDZU4coP9uhYWWNuCuDf56ywZvKg:jY+HSxPQhYSDsYg","tlshash":"26a13262a5b29765ed7240b223a29bf4f8454003b706887676d7630f5ff6bf1c482be4","size":4765,"data":"","first_seen":"2023-11-08T19:12:35Z","last_seen":"2024-08-20T20:23:02.176342Z","times_seen":1519,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"a27c88365ce7cd8f68390c4c024e29e1","sha1":"1d15a8d192608f93096ef8d9aa623c360dbb7351","sha256":"0ca2b3df8f04565300bafcd6c929a1d310d2a761ff9f8dda200f3f6cffab50ce","sha512":"1ce1d149845e13e3f312f848dcbd973d241a0815da5aa7202a2db68160a84a21e9585bc115a3020ffc995139a8a25f44c0f28f51e5f9a9099753708e937d6584","ssdeep":"","tlshash":"e671c264acf3509185cbd30cbbe0ed861be0b1a3919a5656bb4c874ec7857ec8957f02","size":3574,"data":"","first_seen":"2023-11-07T13:07:13Z","last_seen":"2024-08-20T20:33:21.268002Z","times_seen":72071,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"console":null},"http":[{"url":{"schema":"http","addr":"bmwag-rt-prod2-t.campaign.adobe.com/r/?id=h2ccc12b,8d23fb3,492093b\u0026p1=elhamadsteel.com/wp-admin/js/auth/esmjL/YWxiZXJ0b0BlbHphYnVydS5lcw==","fqdn":"bmwag-rt-prod2-t.campaign.adobe.com","domain":"adobe.com","tld":"com"},"ip":{"addr":"52.215.148.88","port":0,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2023-11-21T07:43:44.505303129Z","timestamp":1700552624505,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /r/?id=h2ccc12b,8d23fb3,492093b\u0026p1=elhamadsteel.com/wp-admin/js/auth/esmjL/YWxiZXJ0b0BlbHphYnVydS5lcw== HTTP/1.1\r\nHost: bmwag-rt-prod2-t.campaign.adobe.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 302 Found\r\nContent-Type: text/plain; charset=utf-8\r\nDate: Tue, 21 Nov 2023 07:43:42 GMT\r\nLocation: https://elhamadsteel.com/wp-admin/js/auth/esmjL/YWxiZXJ0b0BlbHphYnVydS5lcw==\r\nP3P: CP=\"CAO DSP COR CURa DEVa TAIa OUR BUS IND UNI COM NAV\"\r\nPermissions-Policy: geolocation=(),midi=(),sync-xhr=(),microphone=(),camera=(),magnetometer=(),gyroscope=(),fullscreen=(self),payment=()\r\nReferrer-Policy: strict-origin\r\nServer: Apache\r\nSet-Cookie: AMCV_B52D1CFE5330949C0A490D45%40AdobeOrg=MCMID%7C24471346514294210553510264500299235327; Domain=adobe.com; Path=/; Expires=Sun, 15-Dec-2024 07:43:42 GMT\nnlid=2ccc12b|8d23fb3; Domain=adobe.com; Path=/\nnllastdelid=8d23fb3; Domain=adobe.com; Path=/; Expires=Sun, 15-Dec-2024 07:43:42 GMT\r\nStrict-Transport-Security: max-age=63072000; includeSubdomains;\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: SAMEORIGIN\r\nX-Robots-Tag: noindex\r\nContent-Length: 17\r\nConnection: keep-alive\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":17,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"edf537e37d4549950774190c58f93b76","sha1":"4e2078632eccec8993f151be9338bbcb88ce6f58","sha256":"afff9c63cfeacd26e5d4000edf576f1386d6729dca783eb45004f484a73a3514","sha512":"086b7b7a07f837f40038d0ba0724240ee66c0319524baaa9cde4405db6712a0a129ab3f40ad4886fdb77cad78503697af8945b82dbeebdc13ff71a7c3ac5361b","ssdeep":"","tlshash":"786000020000082020832802280008020000008808b0020800282b2002882223000202","first_seen":"2023-04-11T15:33:14Z","last_seen":"2025-02-27T15:25:40.670806Z","times_seen":16650,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"elhamadsteel.com/wp-admin/js/auth/esmjL/YWxiZXJ0b0BlbHphYnVydS5lcw==","fqdn":"elhamadsteel.com","domain":"elhamadsteel.com","tld":"com"},"ip":{"addr":"192.185.88.231","port":0,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2023-11-21T07:43:44.965846882Z","timestamp":1700552624965,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /wp-admin/js/auth/esmjL/YWxiZXJ0b0BlbHphYnVydS5lcw== HTTP/1.1\r\nHost: elhamadsteel.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/2 200 OK\r\nrefresh: 0;url=https://osnrafbtea.oneswittla.ru/kswqjl/#alberto@elzaburu.es\r\naccept-ranges: none\r\ncontent-length: 0\r\ncontent-type: text/html; charset=UTF-8\r\ndate: Tue, 21 Nov 2023 07:43:42 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-30T03:03:15.73771Z","times_seen":15897774,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Microsoft Outlook","verdict":"phishing","severity":"medium","comment":"","tags":["phishing","microsoft","outlook"],"meta":null}]}},{"url":{"schema":"https","addr":"code.jquery.com/jquery-3.6.0.min.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.66.137","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://osnrafbtea.oneswittla.ru/kswqjl/#alberto@elzaburu.es","date":"2023-11-21T07:43:46.122Z","timestamp":1700552626122,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jquery.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 11 Jul 2023 00:00:00 GMT","end":"Sun, 14 Jul 2024 23:59:59 GMT"},"fingerprint":{"sha1":"D2:19:0A:AD:CE:BB:9C:61:17:5D:29:4B:A2:54:E8:C6:91:B8:F9:8D","sha256":"B1:CA:3A:23:BA:70:1D:18:3F:EC:99:D7:BE:6D:B2:FD:66:5F:5C:A7:7D:7F:C1:FC:16:D1:FD:89:4B:CC:15:34"}}},"request":{"raw":"GET /jquery-3.6.0.min.js HTTP/1.1\r\nHost: code.jquery.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://osnrafbtea.oneswittla.ru/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 18 Oct 1991 12:00:00 GMT\r\netag: W/\"28feccc0-15d9d\"\r\ncache-control: public, max-age=31536000, stale-while-revalidate=604800\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Tue, 21 Nov 2023 07:43:44 GMT\r\nage: 5314524\r\nx-served-by: cache-lga21931-LGA, cache-bma1626-BMA\r\nx-cache: HIT, HIT\r\nx-cache-hits: 30, 164353\r\nx-timer: S1700552624.264444,VS0,VE0\r\nvary: Accept-Encoding\r\ncontent-length: 30875\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":30875,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (65447)","md5":"8fb8fee4fcc3cc86ff6c724154c49c42","sha1":"b82d238d4e31fdf618bae8ac11a6c812c03dd0d4","sha256":"ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e","sha512":"f3de1813a4160f9239f4781938645e1589b876759cd50b7936dbd849a35c38ffaed53f6a61dbdd8a1cf43cf4a28aa9fffbfddeec9a3811a1bb4ee6df58652b31","ssdeep":"1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn","tlshash":"069309ddb2c6702257a720ba007f510bf236199d6c4d8450f169d8eabc78a4e827bf7d","first_seen":"2023-03-07T01:02:13Z","last_seen":"2026-05-30T03:01:27.35022Z","times_seen":475294,"resource_available":true,"data":null}},"time_used":115,"timings":{"blocked":51,"dns":27,"connect":8,"send":0,"wait":8,"receive":4,"ssl":15},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"osnrafbtea.oneswittla.ru/web1/assets/fonts/GDSherpa-bold.woff","fqdn":"osnrafbtea.oneswittla.ru","domain":"oneswittla.ru","tld":"ru"},"ip":{"addr":"104.21.17.6","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://osnrafbtea.oneswittla.ru/kswqjl/#alberto@elzaburu.es","date":"2023-11-21T07:43:47.345Z","timestamp":1700552627345,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oneswittla.ru","organization":""},"issuer":{"commonName":"GTS CA 1P5","organization":"Google Trust Services LLC"},"validity":{"start":"Wed, 01 Nov 2023 16:29:11 GMT","end":"Tue, 30 Jan 2024 16:29:10 GMT"},"fingerprint":{"sha1":"42:11:11:15:F6:40:D4:B8:81:C3:A5:90:8E:27:09:05:06:2B:51:36","sha256":"70:20:9A:17:36:07:97:75:00:A2:85:E8:C1:BF:E0:1C:66:91:FA:6C:AE:86:F0:B7:3F:3A:BB:16:1E:F7:2C:B3"}}},"request":{"raw":"GET /web1/assets/fonts/GDSherpa-bold.woff HTTP/1.1\r\nHost: osnrafbtea.oneswittla.ru\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://osnrafbtea.oneswittla.ru/kswqjl/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 21 Nov 2023 07:43:45 GMT\r\ncontent-type: font/woff\r\ncontent-length: 35970\r\nlast-modified: Fri, 25 Aug 2023 04:00:22 GMT\r\netag: \"8c82-603b7623b006b\"\r\naccess-control-allow-origin: *\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: DENY\r\ncontent-security-policy: frame-ancestors 'none'\r\ncache-control: max-age=14400\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=Su%2F333HG3HJyj36fLheFvHMmII5atcEaBhpwaW9JZM89ClsyZABln6kAWdD9s%2BaD4lJhovnJxGUbdh%2BKYzsj54qH9M%2BYPOi8RoBNfdGEI%2FOjuhuO7zJXpKwBAhaJDF9u4ySfps62\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: REVALIDATED\r\naccept-ranges: bytes\r\nserver: cloudflare\r\ncf-ray: 82974db4efb30b3d-OSL\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":35970,"size_decoded":0,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 35970, version 1.0\\012- data","md5":"496b7bbde91c7dc7cf9bbabbb3921da8","sha1":"2bd3c406a715ab52dad84c803c55bf4a6e66a924","sha256":"ae40a04f95df12b0c364f26ab691dc0c391d394a28bcdb4aeacfaca325d0a798","sha512":"e02b40fea8f77292b379d7d792d9142b32dfcb887655a2d1781441227dd968589bfc5c00691b92e824f7edb47d11eba325ade67ad08a4af31a3b0ddf4bb8b967","ssdeep":"768:GJiLCleIZlcBvahjeheOQKskmCp9sE9gBkGgvU+7aAXDqWOtU:GJo9IgMKsQzJ9gBkZbuAXDqWV","tlshash":"a4f2d09831594c2aacbd58232b71d9df21e38f61ba42029ba193e4cd9c4714dbb1e47f","first_seen":"2023-05-09T17:48:02Z","last_seen":"2026-05-28T17:38:34.583252Z","times_seen":90507,"resource_available":false,"data":null}},"time_used":419,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":416,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"osnrafbtea.oneswittla.ru/web1/assets/fonts/GDSherpa-regular.woff","fqdn":"osnrafbtea.oneswittla.ru","domain":"oneswittla.ru","tld":"ru"},"ip":{"addr":"104.21.17.6","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://osnrafbtea.oneswittla.ru/kswqjl/#alberto@elzaburu.es","date":"2023-11-21T07:43:47.348Z","timestamp":1700552627348,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oneswittla.ru","organization":""},"issuer":{"commonName":"GTS CA 1P5","organization":"Google Trust Services LLC"},"validity":{"start":"Wed, 01 Nov 2023 16:29:11 GMT","end":"Tue, 30 Jan 2024 16:29:10 GMT"},"fingerprint":{"sha1":"42:11:11:15:F6:40:D4:B8:81:C3:A5:90:8E:27:09:05:06:2B:51:36","sha256":"70:20:9A:17:36:07:97:75:00:A2:85:E8:C1:BF:E0:1C:66:91:FA:6C:AE:86:F0:B7:3F:3A:BB:16:1E:F7:2C:B3"}}},"request":{"raw":"GET /web1/assets/fonts/GDSherpa-regular.woff HTTP/1.1\r\nHost: osnrafbtea.oneswittla.ru\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://osnrafbtea.oneswittla.ru/kswqjl/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 21 Nov 2023 07:43:46 GMT\r\ncontent-type: font/woff\r\ncontent-length: 36696\r\nlast-modified: Fri, 25 Aug 2023 04:00:28 GMT\r\netag: \"8f58-603b762947b93\"\r\naccess-control-allow-origin: *\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: DENY\r\ncontent-security-policy: frame-ancestors 'none'\r\ncache-control: max-age=14400\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=h%2BP8v7azUUWWFqKAGQLD3SHkudKYyQuQpK5xnP5Xnz6S06KgxQj54QeoyRtCZsFy7AVf6IVvSMIoVpDvz7Dx9cyzAQIIqobHN2b7PqvJoN0QeuxXjfy5kBRQHSxQaD0Ulqtk08A9\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: REVALIDATED\r\naccept-ranges: bytes\r\nserver: cloudflare\r\ncf-ray: 82974db4efb60b3d-OSL\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":36696,"size_decoded":0,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 36696, version 1.0\\012- data","md5":"a69e9ab8afdd7486ec0749c551051ff2","sha1":"c34e6aa327b536fb48d1fe03577a47c7ee2231b8","sha256":"fd78a1913db912221b8ead1e62fad47d1ff0a9fa6cd88d3b128a721ad91d2faf","sha512":"9a0e4297282542b8813f9cc85b2ccb09663ce281f64503f9a5284631881da9aacf7649553bf1423d941f01b97e6bc3ba50ab13e55e4b7b61c5aa0a4adf4d390f","ssdeep":"768:lvJo4KciQZYjebVq19lKPtHAQ/l4rj2bqkiHShpeSUOR4OqWOgaU:lhH3rVq1PKP432tSSh4SUORHqWcU","tlshash":"31f2f15d76443e8cf06a245836ad2dd6a423171247138f8709de72bbd14f120f65aaff","first_seen":"2023-05-09T17:48:02Z","last_seen":"2026-05-28T17:38:34.607818Z","times_seen":90436,"resource_available":false,"data":null}},"time_used":944,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":943,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"osnrafbtea.oneswittla.ru/web1/assets/fonts/GDSherpa-bold.woff2","fqdn":"osnrafbtea.oneswittla.ru","domain":"oneswittla.ru","tld":"ru"},"ip":{"addr":"104.21.17.6","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://osnrafbtea.oneswittla.ru/kswqjl/#alberto@elzaburu.es","date":"2023-11-21T07:43:47.342Z","timestamp":1700552627342,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oneswittla.ru","organization":""},"issuer":{"commonName":"GTS CA 1P5","organization":"Google Trust Services LLC"},"validity":{"start":"Wed, 01 Nov 2023 16:29:11 GMT","end":"Tue, 30 Jan 2024 16:29:10 GMT"},"fingerprint":{"sha1":"42:11:11:15:F6:40:D4:B8:81:C3:A5:90:8E:27:09:05:06:2B:51:36","sha256":"70:20:9A:17:36:07:97:75:00:A2:85:E8:C1:BF:E0:1C:66:91:FA:6C:AE:86:F0:B7:3F:3A:BB:16:1E:F7:2C:B3"}}},"request":{"raw":"GET /web1/assets/fonts/GDSherpa-bold.woff2 HTTP/1.1\r\nHost: osnrafbtea.oneswittla.ru\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://osnrafbtea.oneswittla.ru/kswqjl/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 21 Nov 2023 07:43:46 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 28000\r\nlast-modified: Fri, 25 Aug 2023 04:00:16 GMT\r\netag: \"6d60-603b761e42cdb\"\r\naccess-control-allow-origin: *\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: DENY\r\ncontent-security-policy: frame-ancestors 'none'\r\ncache-control: max-age=14400\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=bMOruuk17gDzXZubUK50X%2Fva2nmrV7opkZ5jTkoOaGHv81tkl1d3g36%2FlnHqiHFnTK0F43t6Q28XSg2mpB0ufRCyINChjqKKRaRqEfJVWNJG4FjzaW%2Fx2ueXy7ozsJ5cKl2mCujh\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: REVALIDATED\r\naccept-ranges: bytes\r\nserver: cloudflare\r\ncf-ray: 82974db4efb10b3d-OSL\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":28000,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 28000, version 1.66\\012- data","md5":"a4bca6c95fed0d0c5cc46cf07710dcec","sha1":"73b56e33b82b42921db8702a33efd0f2b2ec9794","sha256":"5a51d246af54d903f67f07f2bd820ce77736f8d08c5f1602db07469d96dbf77f","sha512":"60a058b20fcb4f63d02e89225a49226ccd7758c21d9162d1b2f4b53bba951b1c51d3d74c562029f417d97f1fca93f25fdd2bc0501f215e3c1ef076810b54dd06","ssdeep":"768:NDT1rKvlJOE1AgLlnGj8H58AJUcl5I17ML7FfNHubNIphqb:NDtKvyAhjHeACcl21YL7KNW+","tlshash":"cfc2f1878fd02879a72dfeb80252903197d00de93fea42318d99b70fe683987515e272","first_seen":"2023-04-09T13:59:19Z","last_seen":"2026-05-30T01:43:40.422996Z","times_seen":95205,"resource_available":false,"data":null}},"time_used":1004,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1003,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"osnrafbtea.oneswittla.ru/web1/assets/fonts/GDSherpa-regular.woff2","fqdn":"osnrafbtea.oneswittla.ru","domain":"oneswittla.ru","tld":"ru"},"ip":{"addr":"104.21.17.6","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://osnrafbtea.oneswittla.ru/kswqjl/#alberto@elzaburu.es","date":"2023-11-21T07:43:47.346Z","timestamp":1700552627346,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oneswittla.ru","organization":""},"issuer":{"commonName":"GTS CA 1P5","organization":"Google Trust Services LLC"},"validity":{"start":"Wed, 01 Nov 2023 16:29:11 GMT","end":"Tue, 30 Jan 2024 16:29:10 GMT"},"fingerprint":{"sha1":"42:11:11:15:F6:40:D4:B8:81:C3:A5:90:8E:27:09:05:06:2B:51:36","sha256":"70:20:9A:17:36:07:97:75:00:A2:85:E8:C1:BF:E0:1C:66:91:FA:6C:AE:86:F0:B7:3F:3A:BB:16:1E:F7:2C:B3"}}},"request":{"raw":"GET /web1/assets/fonts/GDSherpa-regular.woff2 HTTP/1.1\r\nHost: osnrafbtea.oneswittla.ru\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://osnrafbtea.oneswittla.ru/kswqjl/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 21 Nov 2023 07:43:46 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 28584\r\nlast-modified: Fri, 25 Aug 2023 04:00:25 GMT\r\netag: \"6fa8-603b76269b664\"\r\naccess-control-allow-origin: *\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: DENY\r\ncontent-security-policy: frame-ancestors 'none'\r\ncache-control: max-age=14400\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=kl%2F8HOTe7Evl3h5klLnB%2B1oBjC4FeypMiZi9tcUYN5R8mQ%2F44nD%2B3Rr6tq0f5R39b8rAVKuKB7UdBqZo%2FtXDrfKox2gq7tYsIU1nPMwXMxGvz0NrpUTg4gCCLVXC7pDZq5h2BP1p\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: REVALIDATED\r\naccept-ranges: bytes\r\nserver: cloudflare\r\ncf-ray: 82974db4efb50b3d-OSL\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":28584,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 28584, version 1.66\\012- data","md5":"17081510f3a6f2f619ec8c6f244523c7","sha1":"87f34b2a1532c50f2a424c345d03fe028db35635","sha256":"2c7292014e2ef00374aeb63691d9f23159a010455784ee0b274ba7db2bcca956","sha512":"e27976f77797ad93160af35714d733fd9e729a9981d8a6f555807981d08d8175e02692aa5ea6e59cebd33895f5f6a3575692565fdd75667630dab158627a1005","ssdeep":"768:8n53CNftp4NM/2qxGvtAG9fvpWYSTvlj6OIqrd1xUseRc:85SNfQS2ntfxvpWYSTcfMERc","tlshash":"b4d2e0ed44d2c62988f7638902690111f27898ffe52d7db3c19da0b27245d7ea3a8b09","first_seen":"2023-04-09T18:51:15Z","last_seen":"2026-05-30T01:43:53.334574Z","times_seen":106462,"resource_available":false,"data":null}},"time_used":1009,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1003,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"osnrafbtea.oneswittla.ru/web1/assets/css/pages-okta.css?cb=1700552627311","fqdn":"osnrafbtea.oneswittla.ru","domain":"oneswittla.ru","tld":"ru"},"ip":{"addr":"104.21.17.6","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://osnrafbtea.oneswittla.ru/kswqjl/#alberto@elzaburu.es","date":"2023-11-21T07:43:47.338Z","timestamp":1700552627338,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oneswittla.ru","organization":""},"issuer":{"commonName":"GTS CA 1P5","organization":"Google Trust Services LLC"},"validity":{"start":"Wed, 01 Nov 2023 16:29:11 GMT","end":"Tue, 30 Jan 2024 16:29:10 GMT"},"fingerprint":{"sha1":"42:11:11:15:F6:40:D4:B8:81:C3:A5:90:8E:27:09:05:06:2B:51:36","sha256":"70:20:9A:17:36:07:97:75:00:A2:85:E8:C1:BF:E0:1C:66:91:FA:6C:AE:86:F0:B7:3F:3A:BB:16:1E:F7:2C:B3"}}},"request":{"raw":"GET /web1/assets/css/pages-okta.css?cb=1700552627311 HTTP/1.1\r\nHost: osnrafbtea.oneswittla.ru\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://osnrafbtea.oneswittla.ru/kswqjl/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 21 Nov 2023 07:43:46 GMT\r\ncontent-type: text/css\r\ncontent-length: 0\r\nlast-modified: Thu, 24 Aug 2023 12:07:13 GMT\r\netag: \"0-603aa11867866\"\r\naccess-control-allow-origin: *\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: DENY\r\ncontent-security-policy: frame-ancestors 'none'\r\ncache-control: max-age=14400\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=hPnH9fJpr4sILLlU0pewWjlroMo9vGNVbdvDe69SrI0S0dv0puO3xWjfPW9DOTxEAut2zSsiMmMEDPV%2F4D8WjiT%2F9U%2FpId6TkkjNGWBXgBocKI7H39CUL6UATsgaLEGLC1AVJbUE\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: MISS\r\naccept-ranges: bytes\r\nserver: cloudflare\r\ncf-ray: 82974db4dfae0b3d-OSL\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-30T03:03:15.73771Z","times_seen":15897774,"resource_available":true,"data":null}},"time_used":1023,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1023,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"osnrafbtea.oneswittla.ru/web1/assets/fonts/GDSherpa-vf2.woff2","fqdn":"osnrafbtea.oneswittla.ru","domain":"oneswittla.ru","tld":"ru"},"ip":{"addr":"104.21.17.6","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://osnrafbtea.oneswittla.ru/kswqjl/#alberto@elzaburu.es","date":"2023-11-21T07:43:47.350Z","timestamp":1700552627350,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oneswittla.ru","organization":""},"issuer":{"commonName":"GTS CA 1P5","organization":"Google Trust Services LLC"},"validity":{"start":"Wed, 01 Nov 2023 16:29:11 GMT","end":"Tue, 30 Jan 2024 16:29:10 GMT"},"fingerprint":{"sha1":"42:11:11:15:F6:40:D4:B8:81:C3:A5:90:8E:27:09:05:06:2B:51:36","sha256":"70:20:9A:17:36:07:97:75:00:A2:85:E8:C1:BF:E0:1C:66:91:FA:6C:AE:86:F0:B7:3F:3A:BB:16:1E:F7:2C:B3"}}},"request":{"raw":"GET /web1/assets/fonts/GDSherpa-vf2.woff2 HTTP/1.1\r\nHost: osnrafbtea.oneswittla.ru\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://osnrafbtea.oneswittla.ru/kswqjl/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 21 Nov 2023 07:43:46 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 93276\r\nlast-modified: Fri, 25 Aug 2023 04:00:32 GMT\r\netag: \"16c5c-603b762dd727e\"\r\naccess-control-allow-origin: *\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: DENY\r\ncontent-security-policy: frame-ancestors 'none'\r\ncache-control: max-age=14400\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=DHE3o9QveX4xo4ol1TBlU0kqeqIT%2BvD4nHdfiQH4N612ODhpqnxHwaV6jeZCog0moH1IpR3fEU3mxbDXGPI6qJZGkWO1v2MGiCJT2P03CpHaw0iB%2FsFlAit15yFlyzd6iA4vVbg4\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: REVALIDATED\r\naccept-ranges: bytes\r\nserver: cloudflare\r\ncf-ray: 82974db4efb80b3d-OSL\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":93276,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 93276, version 1.0\\012- data","md5":"bcd7983ea5aa57c55f6758b4977983cb","sha1":"ef3a009e205229e07fb0ec8569e669b11c378ef1","sha256":"6528a0bf9a836a53dfd8536e1786ba6831c9d1faa74967126fddf5b2081b858c","sha512":"e868a2702ca3b99e1abbcbd40b1c90b42a9d26086a434f1cbae79dfc072216f2f990fec6265a801bc4f96db0431e8f0b99eb0129b2ee7505b3fdfd9bb9bafe90","ssdeep":"1536:Dy7KSLv+MMqDeeIgDFSxpuQP7ObnKSWBO61LlRzSSAT6YmkSzOu7Be0OB53jIH4I:Dy7JD+net+puI7ObKHVhTSSlYmk4OuWa","tlshash":"d293029c71ec79c19e00616e94c92535f89fdab0f049d3fa9a4ed85b927c369e343b10","first_seen":"2023-05-01T02:20:29Z","last_seen":"2026-05-28T17:38:34.569394Z","times_seen":91738,"resource_available":false,"data":null}},"time_used":1012,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1006,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"osnrafbtea.oneswittla.ru/web1/assets/fonts/GDSherpa-vf.woff2","fqdn":"osnrafbtea.oneswittla.ru","domain":"oneswittla.ru","tld":"ru"},"ip":{"addr":"104.21.17.6","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://osnrafbtea.oneswittla.ru/kswqjl/#alberto@elzaburu.es","date":"2023-11-21T07:43:47.349Z","timestamp":1700552627349,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oneswittla.ru","organization":""},"issuer":{"commonName":"GTS CA 1P5","organization":"Google Trust Services LLC"},"validity":{"start":"Wed, 01 Nov 2023 16:29:11 GMT","end":"Tue, 30 Jan 2024 16:29:10 GMT"},"fingerprint":{"sha1":"42:11:11:15:F6:40:D4:B8:81:C3:A5:90:8E:27:09:05:06:2B:51:36","sha256":"70:20:9A:17:36:07:97:75:00:A2:85:E8:C1:BF:E0:1C:66:91:FA:6C:AE:86:F0:B7:3F:3A:BB:16:1E:F7:2C:B3"}}},"request":{"raw":"GET /web1/assets/fonts/GDSherpa-vf.woff2 HTTP/1.1\r\nHost: osnrafbtea.oneswittla.ru\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://osnrafbtea.oneswittla.ru/kswqjl/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 21 Nov 2023 07:43:46 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 43596\r\nlast-modified: Fri, 25 Aug 2023 04:00:36 GMT\r\netag: \"aa4c-603b7631474f7\"\r\naccess-control-allow-origin: *\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: DENY\r\ncontent-security-policy: frame-ancestors 'none'\r\ncache-control: max-age=14400\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=fY6W8Z%2FU8eXS9QKM4ScQOU2VA2UOA85SFW%2BI1YUmSyfHLYmAYGNdeVkmM5JodjMKkJVvyV65%2B35oKcBIucCHl51i%2Fb%2BsK1AS7fk0Fgv60HxzMS2IanYZJGqRFUDEbFk9u41vL3LN\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: REVALIDATED\r\naccept-ranges: bytes\r\nserver: cloudflare\r\ncf-ray: 82974db4efb70b3d-OSL\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":43596,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 43596, version 1.0\\012- data","md5":"2a05e9e5572abc320b2b7ea38a70dcc1","sha1":"d5fa2a856d5632c2469e42436159375117ef3c35","sha256":"3efcb941aaddaf4aea08dab3fb97d3e904aa1b83264e64b4d5bda53bc7c798ec","sha512":"785ab5585b8a9ed762d70578bf13a6a69342441e679698fd946e3616ef5688485f099f3dc472975ef5d9248afaad6da6779813b88aa1db60abe2cc065f47eb5f","ssdeep":"768:b0nfc/3Osy1fo0tBBFF/GGXfN2ZHKTBUwL+BR49qCow3Z3HuvJ5+xXtTgXHk6/:b0fU3OdhFF/xNOoZc49ow3Z3HO+xX1mf","tlshash":"e2130258592578a9eb43bd49f00c6e64c296b3d8f5832b62334a04f0bff651620fe797","first_seen":"2023-04-18T03:10:28Z","last_seen":"2026-05-28T17:38:34.608455Z","times_seen":91902,"resource_available":false,"data":null}},"time_used":1020,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1016,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aadcdn.msftauth.net/shared/1.0/content/images/picker_verify_call_c2616792e1950f83fdef6e72dab97293.svg","fqdn":"aadcdn.msftauth.net","domain":"msftauth.net","tld":"net"},"ip":{"addr":"152.199.23.37","port":443,"asn":15133,"as":"EDGECAST","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://osnrafbtea.oneswittla.ru/kswqjl/#alberto@elzaburu.es","date":"2023-11-21T07:43:53.816Z","timestamp":1700552633816,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aadcdn.msftauth.net","organization":"Microsoft Corporation"},"issuer":{"commonName":"DigiCert SHA2 Secure Server CA","organization":"DigiCert Inc"},"validity":{"start":"Tue, 31 Jan 2023 00:00:00 GMT","end":"Wed, 31 Jan 2024 23:59:59 GMT"},"fingerprint":{"sha1":"99:06:D8:1E:EC:BF:DB:78:DF:F4:89:A3:ED:23:07:3D:79:F1:16:D6","sha256":"F7:B6:66:B3:86:91:AD:10:60:9A:D7:48:01:B8:27:C3:F4:47:7A:7C:B7:FF:C5:3F:77:26:B0:B3:08:24:D9:EE"}}},"request":{"raw":"GET /shared/1.0/content/images/picker_verify_call_c2616792e1950f83fdef6e72dab97293.svg HTTP/1.1\r\nHost: aadcdn.msftauth.net\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://osnrafbtea.oneswittla.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-encoding: gzip\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding\r\nage: 14384523\r\ncache-control: public, max-age=31536000\r\ncontent-md5: XHrPYKKsqlxUvysuxtSE2A==\r\ncontent-type: image/svg+xml\r\ndate: Tue, 21 Nov 2023 07:43:51 GMT\r\netag: 0x8DB5C3F4A98E9BB\r\nlast-modified: Wed, 24 May 2023 10:11:50 GMT\r\nserver: ECAcc (ska/F6F3)\r\nvary: Accept-Encoding\r\nx-cache: HIT\r\nx-ms-blob-type: BlockBlob\r\nx-ms-lease-status: unlocked\r\nx-ms-request-id: 3afb7c4b-e01e-0039-1e7a-99c6de000000\r\nx-ms-version: 2009-09-19\r\ncontent-length: 1173\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1173,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image\\012- HTML document, ASCII text, with very long lines (2905), with no line terminators","md5":"fe87496cc7a44412f7893a72099c120a","sha1":"a0c1458c08a815df63d3cb0406d60be6607ca699","sha256":"55ce3b0ce5bc71339308107982cd7671f96014256ded0be36dc8062e64c847f1","sha512":"e527c6cd2a3d79ca828a9126e8ff7009a540aa764082750d4fa8207c2b8439ca1fdc4459e935d708dc59dcffe55fe45188eb5e266d1b745fca7588501bc0117d","ssdeep":"","tlshash":"3451db770328eede9190e7881b65b20eb7f4896474bb81d08f879c46ec06bb7913cd60","first_seen":"2023-05-04T15:09:09Z","last_seen":"2026-05-29T18:09:44.959671Z","times_seen":90287,"resource_available":false,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":16,"connect":7,"send":0,"wait":8,"receive":1,"ssl":21},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aadcdn.msftauth.net/shared/1.0/content/images/close_790189870c9543725dc3f5a15fb25e46.svg","fqdn":"aadcdn.msftauth.net","domain":"msftauth.net","tld":"net"},"ip":{"addr":"152.199.23.37","port":443,"asn":15133,"as":"EDGECAST","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://osnrafbtea.oneswittla.ru/kswqjl/#alberto@elzaburu.es","date":"2023-11-21T07:43:53.810Z","timestamp":1700552633810,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aadcdn.msftauth.net","organization":"Microsoft Corporation"},"issuer":{"commonName":"DigiCert SHA2 Secure Server CA","organization":"DigiCert Inc"},"validity":{"start":"Tue, 31 Jan 2023 00:00:00 GMT","end":"Wed, 31 Jan 2024 23:59:59 GMT"},"fingerprint":{"sha1":"99:06:D8:1E:EC:BF:DB:78:DF:F4:89:A3:ED:23:07:3D:79:F1:16:D6","sha256":"F7:B6:66:B3:86:91:AD:10:60:9A:D7:48:01:B8:27:C3:F4:47:7A:7C:B7:FF:C5:3F:77:26:B0:B3:08:24:D9:EE"}}},"request":{"raw":"GET /shared/1.0/content/images/close_790189870c9543725dc3f5a15fb25e46.svg HTTP/1.1\r\nHost: aadcdn.msftauth.net\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://osnrafbtea.oneswittla.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-encoding: gzip\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding\r\nage: 14946864\r\ncache-control: public, max-age=31536000\r\ncontent-md5: rp+/fadJKxLUo+jgFmYTeQ==\r\ncontent-type: image/svg+xml\r\ndate: Tue, 21 Nov 2023 07:43:51 GMT\r\netag: 0x8DB5C3F4721247A\r\nlast-modified: Wed, 24 May 2023 10:11:44 GMT\r\nserver: ECAcc (ska/F697)\r\nvary: Accept-Encoding\r\nx-cache: HIT\r\nx-ms-blob-type: BlockBlob\r\nx-ms-lease-status: unlocked\r\nx-ms-request-id: cf4cbdca-101e-0042-0c5d-942f4a000000\r\nx-ms-version: 2009-09-19\r\ncontent-length: 190\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":190,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image\\012- HTML document, ASCII text, with no line terminators","md5":"40eb39126300b56bf66c20ee75b54093","sha1":"83678d94097257eb474713dec49e8094f49d2e2a","sha256":"765709425a5b9209e875dccf2217d3161429d2d48159fc1df7b253b77c1574f4","sha512":"9c9cd1752a404e71772003469550d3b4eff8346a4e47be131bb2b9cb8dd46dbef4863c52a63a9c63989f9abee775cb63c111add7afa9d4dfc7a4d95ae30f9c6e","ssdeep":"","tlshash":"10d05b765358f94cd108859505d4355111d7b08479df4029f7861529b4067d7fd34b5e","first_seen":"2023-04-29T00:14:17Z","last_seen":"2026-05-30T01:31:16.652869Z","times_seen":44068,"resource_available":false,"data":null}},"time_used":66,"timings":{"blocked":1,"dns":18,"connect":7,"send":0,"wait":9,"receive":0,"ssl":24},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/i/82974dbb6cc10b65/1700552626831/eljqDvuj3lRu93U","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.3.184","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2023-11-21T07:43:53.836682502Z","timestamp":1700552633836,"http_version":"","security_state":"secure","security_info":null,"request":{"raw":"GET /cdn-cgi/challenge-platform/h/g/i/82974dbb6cc10b65/1700552626831/eljqDvuj3lRu93U HTTP/1.1\r\nHost: challenges.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/8i7ga/0x4AAAAAAAMj9eiEWzeCaLNQ/auto/normal\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 21 Nov 2023 07:43:47 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\ncf-ray: 82974dc278110b65-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":8530,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 37 x 92, 8-bit/color RGB, non-interlaced\\012- data","md5":"79c91428abaacbdf59ceb5818feef32b","sha1":"2d8c63ed3deacb7e45b099e31b5717875b734bac","sha256":"e7e6dc6aaeb97ef723783cb2662a623063451e4308fcba70715b1f7418083be6","sha512":"b5861c18f93a0a3cd53f019991788fbebf1c81aba1a7ae95740814375d5b0b4ca034d951cbccd0563079075d57eefb75d5f498aa64f914ebb22ae1606656ac8e","ssdeep":"192:Su3VXmVyrtCgVZXAdJu8fcff0MoKZJ1M+1:phmV6VxqJvfc/53","tlshash":"7202b03a1e686d26ca4483681757853157e2b451b17d7631b22136d4ecdec30aff1bb3","first_seen":"2023-11-21T08:44:02Z","last_seen":"2023-11-21T08:44:02Z","times_seen":1,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aadcdn.msauth.net/shared/1.0/content/images/backgrounds/2_11d9e3bcdfede9ce5ce5ace2d129f1c4.svg","fqdn":"aadcdn.msauth.net","domain":"msauth.net","tld":"net"},"ip":{"addr":"13.107.246.53","port":443,"asn":8068,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://osnrafbtea.oneswittla.ru/kswqjl/#alberto@elzaburu.es","date":"2023-11-21T07:43:53.840Z","timestamp":1700552633840,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"aadcdn.msauth.net","organization":"Microsoft Corporation"},"issuer":{"commonName":"DigiCert SHA2 Secure Server CA","organization":"DigiCert Inc"},"validity":{"start":"Sun, 29 Oct 2023 00:00:00 GMT","end":"Tue, 29 Oct 2024 23:59:59 GMT"},"fingerprint":{"sha1":"88:95:0C:FA:9D:33:AA:BF:A4:FD:9D:84:A6:E8:02:06:58:50:AD:8C","sha256":"09:32:99:C8:74:C7:C3:CF:73:1C:DD:DA:92:7C:22:1B:DD:53:9C:51:21:D5:10:61:C4:4D:CC:52:56:13:C6:DC"}}},"request":{"raw":"GET /shared/1.0/content/images/backgrounds/2_11d9e3bcdfede9ce5ce5ace2d129f1c4.svg HTTP/1.1\r\nHost: aadcdn.msauth.net\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://osnrafbtea.oneswittla.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=31536000\r\ncontent-length: 673\r\ncontent-type: image/svg+xml\r\ncontent-encoding: gzip\r\ncontent-md5: DhdidjYrlCeaRJJRG/y9mA==\r\nlast-modified: Wed, 24 May 2023 10:11:46 GMT\r\netag: 0x8DB5C3F47E260FD\r\nx-cache: TCP_HIT\r\nx-ms-request-id: 17509178-201e-0069-5d7c-190642000000\r\nx-ms-version: 2009-09-19\r\nx-ms-lease-status: unlocked\r\nx-ms-blob-type: BlockBlob\r\naccess-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding\r\naccess-control-allow-origin: *\r\nx-azure-ref-originshield: 0PUtaZQAAAADzVd1XQgMOT5+aJm+OjSr5QU1TMDRFREdFMTkwOAAzOWExMmY3ZS04OTlmLTQ2Y2YtYTZkMC0yNGJiYmEyN2Q5NTY=\r\nx-azure-ref: 0t19cZQAAAABq3AWQ6+auRK4w4vJq+/iNU1ZHMjBFREdFMDUyMQAzOWExMmY3ZS04OTlmLTQ2Y2YtYTZkMC0yNGJiYmEyN2Q5NTY=\r\ndate: Tue, 21 Nov 2023 07:43:51 GMT\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":673,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image\\012- , ASCII text, with very long lines (1864), with no line terminators","md5":"bc3d32a696895f78c19df6c717586a5d","sha1":"9191cb156a30a3ed79c44c0a16c95159e8ff689d","sha256":"0e88b6fcbb8591edfd28184fa70a04b6dd3af8a14367c628edd7caba32e58c68","sha512":"8d4f38907f3423a86d90575772b292680f7970527d2090fc005f9b096cc81d3f279d59ad76eafca30c3d4bbaf2276bbaa753e2a46a149424cf6f1c319ded5a64","ssdeep":"","tlshash":"4e310059c51d3566ec04c3aceae1d468315e71efa8a581c961849b3f95b0dce0eccb70","first_seen":"2023-04-12T23:20:27Z","last_seen":"2026-05-29T15:17:55.96436Z","times_seen":103418,"resource_available":false,"data":null}},"time_used":139,"timings":{"blocked":48,"dns":39,"connect":9,"send":0,"wait":10,"receive":0,"ssl":30},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"osnrafbtea.oneswittla.ru/web1/assets/js/pages-head-web.min.js?cb=1700552627311","fqdn":"osnrafbtea.oneswittla.ru","domain":"oneswittla.ru","tld":"ru"},"ip":{"addr":"104.21.17.6","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://osnrafbtea.oneswittla.ru/kswqjl/#alberto@elzaburu.es","date":"2023-11-21T07:43:47.341Z","timestamp":1700552627341,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oneswittla.ru","organization":""},"issuer":{"commonName":"GTS CA 1P5","organization":"Google Trust Services LLC"},"validity":{"start":"Wed, 01 Nov 2023 16:29:11 GMT","end":"Tue, 30 Jan 2024 16:29:10 GMT"},"fingerprint":{"sha1":"42:11:11:15:F6:40:D4:B8:81:C3:A5:90:8E:27:09:05:06:2B:51:36","sha256":"70:20:9A:17:36:07:97:75:00:A2:85:E8:C1:BF:E0:1C:66:91:FA:6C:AE:86:F0:B7:3F:3A:BB:16:1E:F7:2C:B3"}}},"request":{"raw":"GET /web1/assets/js/pages-head-web.min.js?cb=1700552627311 HTTP/1.1\r\nHost: osnrafbtea.oneswittla.ru\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://osnrafbtea.oneswittla.ru/kswqjl/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 21 Nov 2023 07:43:46 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 22 Oct 2023 12:15:47 GMT\r\netag: W/\"353a-6084d10c51e3d\"\r\naccess-control-allow-origin: *\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: DENY\r\ncontent-security-policy: frame-ancestors 'none'\r\ncache-control: max-age=14400\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=HR9BD3fqw9KvVEJ7yVCKi1VZOlg8lyKH7MLbmn4%2FJS%2Fgx%2Ff7c5kREYspmIMFaDB%2FNFRN6VZg6sx%2Bvea4CY%2FVIPqFUAZzCQahYFgQCgxOX96Fiu0SIOjTrjM%2By6jByiqbNVVew2%2Bo\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\ncf-ray: 82974db4efb00b3d-OSL\r\ncontent-encoding: br\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":11192,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (13626), with no line terminators","md5":"701637cf7b3c9588cdf84dbb449ba48e","sha1":"a3fd0695db073372cbb52345cb18cd4f8186edeb","sha256":"fe2ea5cd48f2ca8001c5283ee74d2b41305644374b0c1e7b90b9cb6b5bb73a94","sha512":"c164a8263f80e6d51fb5fca897fdd481f13072726dab7674a8d2291db6bdd178015c60d1396b505488d610c690fb7d20e3247a14b9a41f93cf1a74b58df022dd","ssdeep":"384:VJS8baODLnsyoufnuP7k8ZGEWtMaAJyAdX220BQfwxuGKcKpFHU4PxS1eD:TSzODrsyoufnuP7kHE5aAJyAdX2pBQf1","tlshash":"415272857af46dd5075326bbb337b4e8f0663c983490a89bf214bc84b8f0642f5e19b4","first_seen":"2023-10-22T15:28:58Z","last_seen":"2023-12-13T02:19:04Z","times_seen":13891,"resource_available":true,"data":null}},"time_used":1005,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1005,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"osnrafbtea.oneswittla.ru/web1/validatecaptcha","fqdn":"osnrafbtea.oneswittla.ru","domain":"oneswittla.ru","tld":"ru"},"ip":{"addr":"104.21.17.6","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://osnrafbtea.oneswittla.ru/kswqjl/#alberto@elzaburu.es","date":"2023-11-21T07:43:50.307Z","timestamp":1700552630307,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oneswittla.ru","organization":""},"issuer":{"commonName":"GTS CA 1P5","organization":"Google Trust Services LLC"},"validity":{"start":"Wed, 01 Nov 2023 16:29:11 GMT","end":"Tue, 30 Jan 2024 16:29:10 GMT"},"fingerprint":{"sha1":"42:11:11:15:F6:40:D4:B8:81:C3:A5:90:8E:27:09:05:06:2B:51:36","sha256":"70:20:9A:17:36:07:97:75:00:A2:85:E8:C1:BF:E0:1C:66:91:FA:6C:AE:86:F0:B7:3F:3A:BB:16:1E:F7:2C:B3"}}},"request":{"raw":"POST /web1/validatecaptcha HTTP/1.1\r\nHost: osnrafbtea.oneswittla.ru\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 562\r\nOrigin: https://osnrafbtea.oneswittla.ru\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://osnrafbtea.oneswittla.ru/kswqjl/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 21 Nov 2023 07:43:50 GMT\r\ncontent-type: application/json\r\nx-powered-by: PHP/8.1.10\r\ncache-control: no-cache, private\r\naccess-control-allow-origin: *\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: DENY\r\ncontent-security-policy: frame-ancestors 'none'\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=%2BCm8qufSn8%2FcTJsSH0FW7r1mCRs7PVWJF5p62ILJ6dipaZEliyhXHhy%2BJq5wSwSBXvf5BgU3lCgU8fVq%2BSDzLlEbLCa5jhgxPArwKYqtQ7MbRMy38yfeGgqlSVImf7fhXc%2FWR2gx\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nset-cookie: XSRF-TOKEN=eyJpdiI6IlpKUTAvOTBkVk9iQmtEaWFTVVhqWHc9PSIsInZhbHVlIjoiUktxZVhnY2JERU5UVUo4Ujl5N3RSdjZwc1ZHc0JxVGhidzlXKzBzaE1ENTdHMmRkZW1qcFBXcWFXQmo2YUZiTVo4YTZ4RXFnZ0R3YXVpTGRPSUFBY2JQajNBVnZnRnRPUno3WDlabFRwT2FSbnlkYVFtb08ySmdYRkp3dmE4RnUiLCJtYWMiOiI5NGY5Y2E5MzVkOTc4ZTVmMzI1NmFjMTUzMTQzMjRmMjhlNjZjNjE2MmU3ZGIxMDQwMzVhODU3OGFjYzA3OWIzIiwidGFnIjoiIn0%3D; expires=Tue, 21-Nov-2023 09:43:50 GMT; Max-Age=7200; path=/; samesite=lax\nlaravel_session=eyJpdiI6IlNtOWZqQmVrUFY1akRvSThMSjNvOUE9PSIsInZhbHVlIjoiK3UzamxPdzVCcEpubE9vWGtoOEdhRk05Snk1ZXNjOXltbTVhZ0p4VHRneGdubm5FRE1DZjRGUUZDZ0JaR3lXcVZ2ZXM4RXZ1cFFlN1dHSVNBbCswUU9VK2ZWSC8wUWdQdVhJTUlJZVZYVURySTJ5MzArN3Avcm1pNERzaDIxYjYiLCJtYWMiOiJlYWFhNWI3YTJmMzRhZDU0YzA0MzU0MWE5MDNmODYxODRjOGYxNWIwZjE0ZjRkNTdiMjA3YTYzM2Y0ZWZiZGNjIiwidGFnIjoiIn0%3D; expires=Tue, 21-Nov-2023 09:43:50 GMT; Max-Age=7200; path=/; httponly; samesite=lax\r\nserver: cloudflare\r\ncf-ray: 82974dc77f750b3d-OSL\r\ncontent-encoding: br\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":751,"size_decoded":0,"mime_type":"application/json","magic":"JSON data\\012- , ASCII text, with no line terminators","md5":"5820854f62a6eb3d38ba7ba0d1b3ea75","sha1":"639df0b84fe699b4a290a713fd6b9a94bd4deb95","sha256":"912d0c07da7bdb22cdae025b96da26d01523aaab7362edb28544e3949deb369d","sha512":"4452c0a26fa81357f95bf6160c3f5d35ff39f62e03d5faa1e69eb9dfdcb2c83eda4235463ee4065dceb534cc497891a05535467337ad84693e5fa48c317dbbbb","ssdeep":"","tlshash":"f67000020000208008803c0000000a203ae00aa0822a00c0802c00288e08088f08a000","first_seen":"2023-03-13T15:21:35Z","last_seen":"2026-05-30T02:46:13.760643Z","times_seen":91162,"resource_available":true,"data":null}},"time_used":2000,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":2000,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"osnrafbtea.oneswittla.ru/web1/assets/godaddy-left.png","fqdn":"osnrafbtea.oneswittla.ru","domain":"oneswittla.ru","tld":"ru"},"ip":{"addr":"104.21.17.6","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://osnrafbtea.oneswittla.ru/kswqjl/#alberto@elzaburu.es","date":"2023-11-21T07:43:53.826Z","timestamp":1700552633826,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oneswittla.ru","organization":""},"issuer":{"commonName":"GTS CA 1P5","organization":"Google Trust Services LLC"},"validity":{"start":"Wed, 01 Nov 2023 16:29:11 GMT","end":"Tue, 30 Jan 2024 16:29:10 GMT"},"fingerprint":{"sha1":"42:11:11:15:F6:40:D4:B8:81:C3:A5:90:8E:27:09:05:06:2B:51:36","sha256":"70:20:9A:17:36:07:97:75:00:A2:85:E8:C1:BF:E0:1C:66:91:FA:6C:AE:86:F0:B7:3F:3A:BB:16:1E:F7:2C:B3"}}},"request":{"raw":"GET /web1/assets/godaddy-left.png HTTP/1.1\r\nHost: osnrafbtea.oneswittla.ru\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://osnrafbtea.oneswittla.ru/kswqjl/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ii90Q1p6c2hjVEhPOGFyTmxTNkp6SVE9PSIsInZhbHVlIjoiZEo4ZGlCRjN3ZDlTNjMrNWZnTzE5Z1Z2UE9UT3N4Mjd4bW44aFhyQVdSNTR6SW4rM0NpSjE4QW94eWc5T09kQkZvRjZzTHJaVVRvMTZ1WTNreWdtNHIwd01BZlhxUWdsdktEWEJkUENlNTlQNEdPS3BWVS84RFdGMnN4N1VDTTgiLCJtYWMiOiIyOTVkMTZhMTg2Zjk4ZTcxZmNlMDZhMTRmYjQ1MzBkYjBlYWNkMzc5NzllNjYyYWY1YTIwMmYwZjg1NGUzYjY0IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImtUQlBseDNRSE1ValRIZnVKOUFaL2c9PSIsInZhbHVlIjoiQ2Rmbm9sNWNWWHBNWmZkeVUyM1dhLytuQk5MSDB5aHBzWW5zMlRYcXE5d0RiZG9SNldtL09GR1JUK2djWWVHNlV4eVF4MDZBZHkrK0gydEUySGVCdGdnb2xBN1cySmVxYVVLb3RKUEhROUxWRVJYY2drNlFkNUEvcndpZVBOZSsiLCJtYWMiOiJkOTRhZGY1OTNmNDJmMjAwMDFkNDU1NzBjMGI0YWJjNDY5NGRlMDJkMmU2OTY4NWZkZTg2YTY1Y2RmNmI5M2RlIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 21 Nov 2023 07:43:52 GMT\r\ncontent-type: image/png\r\ncontent-length: 29796\r\nlast-modified: Thu, 24 Aug 2023 14:10:07 GMT\r\netag: \"7464-603abc9079d32\"\r\naccess-control-allow-origin: *\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: DENY\r\ncontent-security-policy: frame-ancestors 'none'\r\ncache-control: max-age=14400\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=Q4ZRX%2Bc3Pa11sWIqHcPbHW5HSofQUJRjKUxkjbDU8C1OUEj9R3YVNNlK80mv9i0jdZLKqcnSBSFLslZitVua2e9tDW6WYVdJUtADm9yR5vUhehJFaFwHmTqc8PwLkiCbDlnC3ZjZ\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: REVALIDATED\r\naccept-ranges: bytes\r\nserver: cloudflare\r\ncf-ray: 82974ddd38330b3d-OSL\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":29796,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 506 x 303, 8-bit/color RGBA, non-interlaced\\012- data","md5":"210433a8774859368f3a7b86d125a2a7","sha1":"408bacddc39f12cad285579c102fe4a629862d88","sha256":"9c6addfc339ce1c1d262290ab4cc2de8d38d4b54b11a8e85afd44fbb0acc2561","sha512":"6cbf6492bba0734ece1b595743b7a251d3c98425a36d5bf87ebfad17be979a23adee556fb074ef6d284052f6412aceda4e179fb7dfa0ba1103610cc01113a1a3","ssdeep":"768:uEV6Q9wDBC1MNazNsMYCUPwRGMSU6Ub1W:uKpiOZ7YCpRRXk","tlshash":"5ed2f15b83d84025e529abd165032d22c383fd70329224625e75f9b4f2fe4dcc7e5b25","first_seen":"2023-08-31T15:31:22Z","last_seen":"2025-02-06T19:33:12.284439Z","times_seen":22277,"resource_available":false,"data":null}},"time_used":398,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":396,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"osnrafbtea.oneswittla.ru/web1/assets/godaddy-microsoftlogo.png","fqdn":"osnrafbtea.oneswittla.ru","domain":"oneswittla.ru","tld":"ru"},"ip":{"addr":"104.21.17.6","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://osnrafbtea.oneswittla.ru/kswqjl/#alberto@elzaburu.es","date":"2023-11-21T07:43:53.830Z","timestamp":1700552633830,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oneswittla.ru","organization":""},"issuer":{"commonName":"GTS CA 1P5","organization":"Google Trust Services LLC"},"validity":{"start":"Wed, 01 Nov 2023 16:29:11 GMT","end":"Tue, 30 Jan 2024 16:29:10 GMT"},"fingerprint":{"sha1":"42:11:11:15:F6:40:D4:B8:81:C3:A5:90:8E:27:09:05:06:2B:51:36","sha256":"70:20:9A:17:36:07:97:75:00:A2:85:E8:C1:BF:E0:1C:66:91:FA:6C:AE:86:F0:B7:3F:3A:BB:16:1E:F7:2C:B3"}}},"request":{"raw":"GET /web1/assets/godaddy-microsoftlogo.png HTTP/1.1\r\nHost: osnrafbtea.oneswittla.ru\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://osnrafbtea.oneswittla.ru/kswqjl/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ii90Q1p6c2hjVEhPOGFyTmxTNkp6SVE9PSIsInZhbHVlIjoiZEo4ZGlCRjN3ZDlTNjMrNWZnTzE5Z1Z2UE9UT3N4Mjd4bW44aFhyQVdSNTR6SW4rM0NpSjE4QW94eWc5T09kQkZvRjZzTHJaVVRvMTZ1WTNreWdtNHIwd01BZlhxUWdsdktEWEJkUENlNTlQNEdPS3BWVS84RFdGMnN4N1VDTTgiLCJtYWMiOiIyOTVkMTZhMTg2Zjk4ZTcxZmNlMDZhMTRmYjQ1MzBkYjBlYWNkMzc5NzllNjYyYWY1YTIwMmYwZjg1NGUzYjY0IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImtUQlBseDNRSE1ValRIZnVKOUFaL2c9PSIsInZhbHVlIjoiQ2Rmbm9sNWNWWHBNWmZkeVUyM1dhLytuQk5MSDB5aHBzWW5zMlRYcXE5d0RiZG9SNldtL09GR1JUK2djWWVHNlV4eVF4MDZBZHkrK0gydEUySGVCdGdnb2xBN1cySmVxYVVLb3RKUEhROUxWRVJYY2drNlFkNUEvcndpZVBOZSsiLCJtYWMiOiJkOTRhZGY1OTNmNDJmMjAwMDFkNDU1NzBjMGI0YWJjNDY5NGRlMDJkMmU2OTY4NWZkZTg2YTY1Y2RmNmI5M2RlIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 21 Nov 2023 07:43:52 GMT\r\ncontent-type: image/png\r\ncontent-length: 70712\r\nlast-modified: Thu, 24 Aug 2023 12:58:17 GMT\r\netag: \"11438-603aac821e121\"\r\naccess-control-allow-origin: *\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: DENY\r\ncontent-security-policy: frame-ancestors 'none'\r\ncache-control: max-age=14400\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=yG5mK5WLWCET4awUnE8nCb4ij82GCCvF9IJfNGvoYGJKvIKIkxnF5pT23qvOSDThXL%2FIr643sq08KgseYHRk3UspsxHH8BYfGBZ6U8dD3M3rJjwXsRXHWhmTep0AMfgbyOnqavox\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: REVALIDATED\r\naccept-ranges: bytes\r\nserver: cloudflare\r\ncf-ray: 82974ddd583c0b3d-OSL\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":70712,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 2446 x 899, 8-bit/color RGBA, non-interlaced\\012- data","md5":"f70ff06d19498d80b130ec78176fd3ff","sha1":"9d8a3b74c5164ff7ae2c7930b6d7b14707b404fc","sha256":"df6dbab5251e56b405e48aaf57d3cd4188f073ffba71131fa6cd26e6742923ae","sha512":"543151693c3751a7e6b1b6a9ea77b83cfd049bc320ee75b666514076f4c0218e9dc23da5e6c932b2b8670aa1be1d4e9a91a889f5c6f0d7b9f9c9fe6694609b31","ssdeep":"768:lBgPNoDCQcgEBtp8Y/fYous0+W/+hVNpTrP19NhgtJ+6qcHaDCzGoSRug:lBgC+Qoju/szW/SNDaJ+6qc6DESR5","tlshash":"fa636faae3705033b0ec262530275b4b41151cbb35aaec4880d3b86f576bfba3d35d66","first_seen":"2023-08-31T15:31:22Z","last_seen":"2026-05-23T18:17:01.201016Z","times_seen":19391,"resource_available":false,"data":null}},"time_used":398,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":395,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"osnrafbtea.oneswittla.ru/web1/assets/officelogo.png","fqdn":"osnrafbtea.oneswittla.ru","domain":"oneswittla.ru","tld":"ru"},"ip":{"addr":"104.21.17.6","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://osnrafbtea.oneswittla.ru/kswqjl/#alberto@elzaburu.es","date":"2023-11-21T07:43:53.841Z","timestamp":1700552633841,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oneswittla.ru","organization":""},"issuer":{"commonName":"GTS CA 1P5","organization":"Google Trust Services LLC"},"validity":{"start":"Wed, 01 Nov 2023 16:29:11 GMT","end":"Tue, 30 Jan 2024 16:29:10 GMT"},"fingerprint":{"sha1":"42:11:11:15:F6:40:D4:B8:81:C3:A5:90:8E:27:09:05:06:2B:51:36","sha256":"70:20:9A:17:36:07:97:75:00:A2:85:E8:C1:BF:E0:1C:66:91:FA:6C:AE:86:F0:B7:3F:3A:BB:16:1E:F7:2C:B3"}}},"request":{"raw":"GET /web1/assets/officelogo.png HTTP/1.1\r\nHost: osnrafbtea.oneswittla.ru\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://osnrafbtea.oneswittla.ru/web1/assets/pages/104gf8.css?cb=1700552627311\r\nCookie: XSRF-TOKEN=eyJpdiI6Ii90Q1p6c2hjVEhPOGFyTmxTNkp6SVE9PSIsInZhbHVlIjoiZEo4ZGlCRjN3ZDlTNjMrNWZnTzE5Z1Z2UE9UT3N4Mjd4bW44aFhyQVdSNTR6SW4rM0NpSjE4QW94eWc5T09kQkZvRjZzTHJaVVRvMTZ1WTNreWdtNHIwd01BZlhxUWdsdktEWEJkUENlNTlQNEdPS3BWVS84RFdGMnN4N1VDTTgiLCJtYWMiOiIyOTVkMTZhMTg2Zjk4ZTcxZmNlMDZhMTRmYjQ1MzBkYjBlYWNkMzc5NzllNjYyYWY1YTIwMmYwZjg1NGUzYjY0IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImtUQlBseDNRSE1ValRIZnVKOUFaL2c9PSIsInZhbHVlIjoiQ2Rmbm9sNWNWWHBNWmZkeVUyM1dhLytuQk5MSDB5aHBzWW5zMlRYcXE5d0RiZG9SNldtL09GR1JUK2djWWVHNlV4eVF4MDZBZHkrK0gydEUySGVCdGdnb2xBN1cySmVxYVVLb3RKUEhROUxWRVJYY2drNlFkNUEvcndpZVBOZSsiLCJtYWMiOiJkOTRhZGY1OTNmNDJmMjAwMDFkNDU1NzBjMGI0YWJjNDY5NGRlMDJkMmU2OTY4NWZkZTg2YTY1Y2RmNmI5M2RlIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 21 Nov 2023 07:43:52 GMT\r\ncontent-type: image/png\r\ncontent-length: 1400\r\nlast-modified: Sun, 19 Mar 2023 15:20:17 GMT\r\netag: \"578-5f7425905ae40\"\r\naccess-control-allow-origin: *\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: DENY\r\ncontent-security-policy: frame-ancestors 'none'\r\ncache-control: max-age=14400\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=cxBfPVpAqEW7DMLbRdKEWL4vreVBhaeuLbTu8S0OHZrxbGNzSzO4kVU5%2Fn%2BWkR09OSAQ7HmGPFVDMfk2AIZkZwapnJXMdrzmBK5pGj%2BQlpZxKg6FvCPNoRyutiSXeSdZtn8r1H1C\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: REVALIDATED\r\naccept-ranges: bytes\r\nserver: cloudflare\r\ncf-ray: 82974ddd68430b3d-OSL\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1400,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 108 x 24, 8-bit/color RGBA, non-interlaced\\012- data","md5":"333ee830e5ab72c41dd9126a27b4d878","sha1":"12d8d66ebb3076f3d6069e133c3212f97c8774e1","sha256":"8702292cbc365e9f0488143e2b309b85efe09c61fd2e0a2e21c53735a309313c","sha512":"3413ed624241877c1d44fee23fd37745cb214c12ae73facfafa07b47fa1cb9e5daa3cb7f542564e04075ffe8ba744c962fbdd78f08a643a90c0ec1118c05bbf8","ssdeep":"","tlshash":"7521e964bab8a520130e30a09d305d1ad47f42ec99189e4e71c4e00a334ca094b5d83b","first_seen":"2023-07-01T14:36:17Z","last_seen":"2026-05-29T12:54:17.766813Z","times_seen":17834,"resource_available":false,"data":null}},"time_used":391,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":390,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"adfs.heart.org/adfs/portal/logo/logo.png","fqdn":"adfs.heart.org","domain":"heart.org","tld":"org"},"ip":{"addr":"69.152.183.140","port":443,"asn":7018,"as":"ATT-INTERNET4","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://osnrafbtea.oneswittla.ru/kswqjl/#alberto@elzaburu.es","date":"2023-11-21T07:43:53.833Z","timestamp":1700552633833,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"adfs.heart.org","organization":"American Heart Association, Inc"},"issuer":{"commonName":"Sectigo RSA Organization Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 16 May 2023 00:00:00 GMT","end":"Wed, 15 May 2024 23:59:59 GMT"},"fingerprint":{"sha1":"11:D1:74:EB:5A:DF:CB:58:DE:8A:EE:06:70:FD:78:6D:A5:F4:22:58","sha256":"60:A8:80:14:75:76:75:09:29:1B:F8:61:40:FF:99:51:43:06:B3:A2:29:F2:71:AE:41:53:0A:CC:48:D6:81:BD"}}},"request":{"raw":"GET /adfs/portal/logo/logo.png HTTP/1.1\r\nHost: adfs.heart.org\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://osnrafbtea.oneswittla.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Length: 6428\r\nContent-Type: image/png\r\nExpires: Thu, 21 Dec 2023 07:43:52 GMT\r\nETag: 3A5EEEA11E1041DB96B81498AB69C050DD045D9E56C69E19BD98430BA752165F\r\nServer: Microsoft-HTTPAPI/2.0 Microsoft-HTTPAPI/2.0\r\nStrict-Transport-Security: max-age = 31536000\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\nContent-Security-Policy: default-src 'self' 'unsafe-inline' 'unsafe-eval'; img-src 'self' data:;\r\nDate: Tue, 21 Nov 2023 07:43:52 GMT\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":6428,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 260 x 32, 8-bit/color RGBA, non-interlaced\\012- data","md5":"d3f69be16baf7acef2e7f4dd03729866","sha1":"e11aa0084b93253a24dd3ed57ddde66d27c84d2b","sha256":"3a5eeea11e1041db96b81498ab69c050dd045d9e56c69e19bd98430ba752165f","sha512":"f48f413b3f64f55d17ba538f7000ab233e6c7e6a6390d38810ca4af809ed3643209f0ff2952c466e7d9265f8a9b9d90dc39e946fa6dd8ba9243ec33ea6545de1","ssdeep":"96:yknmWaKUh5wRHLDw0Rch6YKKTlz5AgcYbWpGx2mhRnmU3KHHVSmLPmlPOglLVBvl:yknr/HRchvLl9ArYKpGx2GmvHVrqtbdl","tlshash":"05d13b44afc180015137f50e57d4988bef6371e96a8c998a7c8c8e774f701f18e67176","first_seen":"2023-08-31T15:31:22Z","last_seen":"2024-08-21T07:41:51.655243Z","times_seen":17474,"resource_available":false,"data":null}},"time_used":1233,"timings":{"blocked":532,"dns":140,"connect":134,"send":0,"wait":139,"receive":1,"ssl":284},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/turnstile/v0/api.js?render=explicit","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.3.184","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://osnrafbtea.oneswittla.ru/kswqjl/#alberto@elzaburu.es","date":"2023-11-21T07:43:46.128Z","timestamp":1700552626128,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"challenges.cloudflare.com","organization":"Cloudflare, Inc."},"issuer":{"commonName":"Cloudflare Inc ECC CA-3","organization":"Cloudflare, Inc."},"validity":{"start":"Fri, 18 Aug 2023 00:00:00 GMT","end":"Sat, 17 Aug 2024 23:59:59 GMT"},"fingerprint":{"sha1":"5F:E4:AA:8C:2E:24:D2:B1:69:9D:13:28:31:5C:65:FA:97:2A:E9:6E","sha256":"A2:A8:37:E9:57:D0:F0:FE:3B:6F:A8:23:58:80:DA:61:DD:F9:50:CF:F0:2D:27:D5:00:AA:21:A7:B4:75:80:AD"}}},"request":{"raw":"GET /turnstile/v0/api.js?render=explicit HTTP/1.1\r\nHost: challenges.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://osnrafbtea.oneswittla.ru/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ndate: Tue, 21 Nov 2023 07:43:44 GMT\r\ncache-control: max-age=300, public\r\naccess-control-allow-origin: *\r\nvary: accept-encoding\r\nlocation: /turnstile/v0/g/9914b343/api.js?render=explicit\r\nserver: cloudflare\r\ncf-ray: 82974dad6f53712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":null,"data":{"size":30145,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"data","md5":"4336076d38d2a7b243f4114a2607d408","sha1":"9fa3dc81262d31998489d87d627b6ec53578601e","sha256":"45b71e782497d605497ec00ded2f4d24416f9bff917034f48c081867410040a5","sha512":"b2ed749c2c3647e5304b0423456fe9a5654fe2cc9e014a6e8c00c58de4f18ea6f723baa8a8bb4429350b5e1a7cbf677a0fdfc26d3822159774c30118482afc99","ssdeep":"768:MEWeLAW9D+ET/WQzCc1cYMvnmlkFiSTSkoFu+ejw8G:MH6J9DNO+dMvn1FiSekoFu+0wN","tlshash":"cfd2e0fcb8adba3cf3e0c74c8976263be235404d9b0ae254f797557162388989a5c550","first_seen":"2023-11-21T08:44:02Z","last_seen":"2023-11-21T08:44:02Z","times_seen":1,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":9,"dns":0,"connect":1,"send":0,"wait":7,"receive":0,"ssl":11},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"osnrafbtea.oneswittla.ru/web1/assets/godaddy-logo.png","fqdn":"osnrafbtea.oneswittla.ru","domain":"oneswittla.ru","tld":"ru"},"ip":{"addr":"104.21.17.6","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://osnrafbtea.oneswittla.ru/kswqjl/#alberto@elzaburu.es","date":"2023-11-21T07:43:53.824Z","timestamp":1700552633824,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oneswittla.ru","organization":""},"issuer":{"commonName":"GTS CA 1P5","organization":"Google Trust Services LLC"},"validity":{"start":"Wed, 01 Nov 2023 16:29:11 GMT","end":"Tue, 30 Jan 2024 16:29:10 GMT"},"fingerprint":{"sha1":"42:11:11:15:F6:40:D4:B8:81:C3:A5:90:8E:27:09:05:06:2B:51:36","sha256":"70:20:9A:17:36:07:97:75:00:A2:85:E8:C1:BF:E0:1C:66:91:FA:6C:AE:86:F0:B7:3F:3A:BB:16:1E:F7:2C:B3"}}},"request":{"raw":"GET /web1/assets/godaddy-logo.png HTTP/1.1\r\nHost: osnrafbtea.oneswittla.ru\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://osnrafbtea.oneswittla.ru/kswqjl/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ii90Q1p6c2hjVEhPOGFyTmxTNkp6SVE9PSIsInZhbHVlIjoiZEo4ZGlCRjN3ZDlTNjMrNWZnTzE5Z1Z2UE9UT3N4Mjd4bW44aFhyQVdSNTR6SW4rM0NpSjE4QW94eWc5T09kQkZvRjZzTHJaVVRvMTZ1WTNreWdtNHIwd01BZlhxUWdsdktEWEJkUENlNTlQNEdPS3BWVS84RFdGMnN4N1VDTTgiLCJtYWMiOiIyOTVkMTZhMTg2Zjk4ZTcxZmNlMDZhMTRmYjQ1MzBkYjBlYWNkMzc5NzllNjYyYWY1YTIwMmYwZjg1NGUzYjY0IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImtUQlBseDNRSE1ValRIZnVKOUFaL2c9PSIsInZhbHVlIjoiQ2Rmbm9sNWNWWHBNWmZkeVUyM1dhLytuQk5MSDB5aHBzWW5zMlRYcXE5d0RiZG9SNldtL09GR1JUK2djWWVHNlV4eVF4MDZBZHkrK0gydEUySGVCdGdnb2xBN1cySmVxYVVLb3RKUEhROUxWRVJYY2drNlFkNUEvcndpZVBOZSsiLCJtYWMiOiJkOTRhZGY1OTNmNDJmMjAwMDFkNDU1NzBjMGI0YWJjNDY5NGRlMDJkMmU2OTY4NWZkZTg2YTY1Y2RmNmI5M2RlIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 21 Nov 2023 07:43:52 GMT\r\ncontent-type: image/png\r\ncontent-length: 49602\r\nlast-modified: Thu, 24 Aug 2023 13:40:53 GMT\r\netag: \"c1c2-603ab607e0f57\"\r\naccess-control-allow-origin: *\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: DENY\r\ncontent-security-policy: frame-ancestors 'none'\r\ncache-control: max-age=14400\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=rUwj1Rg3DXyGQcLcWMpNbniwgfgfMI4UZM7v90GMewmsNql8A1%2BFMPhl0dLGqrcL0jHn1Bs%2B49uinMbSPXDt1p765DUG8HqGA0eV0sWwj%2BkYPMhEMQVgsjO2UnOmFbTGdXXLBO37\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: REVALIDATED\r\naccept-ranges: bytes\r\nserver: cloudflare\r\ncf-ray: 82974ddd38320b3d-OSL\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":49602,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 2160 x 443, 8-bit/color RGBA, non-interlaced\\012- data","md5":"db783743cd246ff4d77f4a3694285989","sha1":"b9466716904457641b7831868b47162d8d378d41","sha256":"5913b1ec0fc58ab2bec576804b9e9b566a584ea3d21a1bf74a7b40051a447fdc","sha512":"e6f36c52996b6bf8b07c7a102def2d555a1d35fa12f1a2016edd8f3c86c33dd3545513b436ab6b4ef1d1cad8a5ca5d352ba587eee605638640b258c3976d9033","ssdeep":"768:eKE36up1D3cLJg7zmjprNBQqJCoklwCeFrpKZ00PIwoftXEsQsV1kZ8IHml446Xe:KqupJ9+aqyqCz+0ALcmDIHnjL2p","tlshash":"3723f111ed16c8604810199e8c72a9f7b9fa7036daed4df4070d866b00d3e1958be9f6","first_seen":"2023-08-31T15:31:22Z","last_seen":"2024-09-19T22:48:49.40105Z","times_seen":19259,"resource_available":false,"data":null}},"time_used":995,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":992,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"osnrafbtea.oneswittla.ru//web1socket/socket.io/?type=User\u0026EIO=4\u0026transport=websocket","fqdn":"osnrafbtea.oneswittla.ru","domain":"oneswittla.ru","tld":"ru"},"ip":{"addr":"104.21.17.6","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2023-11-21T07:43:55.565371822Z","timestamp":1700552635565,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oneswittla.ru","organization":""},"issuer":{"commonName":"GTS CA 1P5","organization":"Google Trust Services LLC"},"validity":{"start":"Wed, 01 Nov 2023 16:29:11 GMT","end":"Tue, 30 Jan 2024 16:29:10 GMT"},"fingerprint":{"sha1":"42:11:11:15:F6:40:D4:B8:81:C3:A5:90:8E:27:09:05:06:2B:51:36","sha256":"70:20:9A:17:36:07:97:75:00:A2:85:E8:C1:BF:E0:1C:66:91:FA:6C:AE:86:F0:B7:3F:3A:BB:16:1E:F7:2C:B3"}}},"request":{"raw":"GET //web1socket/socket.io/?type=User\u0026EIO=4\u0026transport=websocket HTTP/1.1\r\nHost: osnrafbtea.oneswittla.ru\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://osnrafbtea.oneswittla.ru\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: voSiTOKDsE23ejt31EnOTA==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nCookie: XSRF-TOKEN=eyJpdiI6Ii90Q1p6c2hjVEhPOGFyTmxTNkp6SVE9PSIsInZhbHVlIjoiZEo4ZGlCRjN3ZDlTNjMrNWZnTzE5Z1Z2UE9UT3N4Mjd4bW44aFhyQVdSNTR6SW4rM0NpSjE4QW94eWc5T09kQkZvRjZzTHJaVVRvMTZ1WTNreWdtNHIwd01BZlhxUWdsdktEWEJkUENlNTlQNEdPS3BWVS84RFdGMnN4N1VDTTgiLCJtYWMiOiIyOTVkMTZhMTg2Zjk4ZTcxZmNlMDZhMTRmYjQ1MzBkYjBlYWNkMzc5NzllNjYyYWY1YTIwMmYwZjg1NGUzYjY0IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImtUQlBseDNRSE1ValRIZnVKOUFaL2c9PSIsInZhbHVlIjoiQ2Rmbm9sNWNWWHBNWmZkeVUyM1dhLytuQk5MSDB5aHBzWW5zMlRYcXE5d0RiZG9SNldtL09GR1JUK2djWWVHNlV4eVF4MDZBZHkrK0gydEUySGVCdGdnb2xBN1cySmVxYVVLb3RKUEhROUxWRVJYY2drNlFkNUEvcndpZVBOZSsiLCJtYWMiOiJkOTRhZGY1OTNmNDJmMjAwMDFkNDU1NzBjMGI0YWJjNDY5NGRlMDJkMmU2OTY4NWZkZTg2YTY1Y2RmNmI5M2RlIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nDate: Tue, 21 Nov 2023 07:43:53 GMT\r\nConnection: upgrade\r\nSec-WebSocket-Accept: z2G1cNpBO1gEVQ5sbValYRWFMKY=\r\nUpgrade: websocket\r\nCF-Cache-Status: DYNAMIC\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=CxeD%2B6aKmU2RLwZ8dBtAPHW%2FKeGZ6NVkKslfMUFaADkKrSFf5tyLEFTN8%2BE4o8ASEtrTswN4yV2gLJobyJIhTCHkOl%2BZa3zj5VzukGInbNGjxbZxyOOu1O4D6O5q6j%2BBTNHkWpz2sAl4gdM%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nNEL: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nServer: cloudflare\r\nCF-RAY: 82974de3aa970b49-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-30T03:03:15.73771Z","times_seen":15897774,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"osnrafbtea.oneswittla.ru/web1/assets/microsoftfavicon.ico","fqdn":"osnrafbtea.oneswittla.ru","domain":"oneswittla.ru","tld":"ru"},"ip":{"addr":"104.21.17.6","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://osnrafbtea.oneswittla.ru/kswqjl/#alberto@elzaburu.es","date":"2023-11-21T07:43:54.789Z","timestamp":1700552634789,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oneswittla.ru","organization":""},"issuer":{"commonName":"GTS CA 1P5","organization":"Google Trust Services LLC"},"validity":{"start":"Wed, 01 Nov 2023 16:29:11 GMT","end":"Tue, 30 Jan 2024 16:29:10 GMT"},"fingerprint":{"sha1":"42:11:11:15:F6:40:D4:B8:81:C3:A5:90:8E:27:09:05:06:2B:51:36","sha256":"70:20:9A:17:36:07:97:75:00:A2:85:E8:C1:BF:E0:1C:66:91:FA:6C:AE:86:F0:B7:3F:3A:BB:16:1E:F7:2C:B3"}}},"request":{"raw":"GET /web1/assets/microsoftfavicon.ico HTTP/1.1\r\nHost: osnrafbtea.oneswittla.ru\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://osnrafbtea.oneswittla.ru/kswqjl/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ii90Q1p6c2hjVEhPOGFyTmxTNkp6SVE9PSIsInZhbHVlIjoiZEo4ZGlCRjN3ZDlTNjMrNWZnTzE5Z1Z2UE9UT3N4Mjd4bW44aFhyQVdSNTR6SW4rM0NpSjE4QW94eWc5T09kQkZvRjZzTHJaVVRvMTZ1WTNreWdtNHIwd01BZlhxUWdsdktEWEJkUENlNTlQNEdPS3BWVS84RFdGMnN4N1VDTTgiLCJtYWMiOiIyOTVkMTZhMTg2Zjk4ZTcxZmNlMDZhMTRmYjQ1MzBkYjBlYWNkMzc5NzllNjYyYWY1YTIwMmYwZjg1NGUzYjY0IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImtUQlBseDNRSE1ValRIZnVKOUFaL2c9PSIsInZhbHVlIjoiQ2Rmbm9sNWNWWHBNWmZkeVUyM1dhLytuQk5MSDB5aHBzWW5zMlRYcXE5d0RiZG9SNldtL09GR1JUK2djWWVHNlV4eVF4MDZBZHkrK0gydEUySGVCdGdnb2xBN1cySmVxYVVLb3RKUEhROUxWRVJYY2drNlFkNUEvcndpZVBOZSsiLCJtYWMiOiJkOTRhZGY1OTNmNDJmMjAwMDFkNDU1NzBjMGI0YWJjNDY5NGRlMDJkMmU2OTY4NWZkZTg2YTY1Y2RmNmI5M2RlIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 21 Nov 2023 07:43:53 GMT\r\ncontent-type: image/x-icon\r\nlast-modified: Sun, 19 Mar 2023 15:20:17 GMT\r\netag: W/\"4316-5f7425905ae40\"\r\naccess-control-allow-origin: *\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: DENY\r\ncontent-security-policy: frame-ancestors 'none'\r\ncache-control: max-age=14400\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=%2B9z0V%2FNJvkcetZwaBmtDxPwbyg6FY1S66M6NXYdUlQZ9i5RBf6yZjIvF0IOa%2BkKxfMCzFEOxEvC8vOInwOwrfUfk51rZTUqaIkxSDyQ%2FeQmfpanTihxvncpCU%2Bc%2FXCq0i%2BlbHn7V\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: REVALIDATED\r\nserver: cloudflare\r\ncf-ray: 82974de37a5f0b3d-OSL\r\ncontent-encoding: br\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":919,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors\\012- data","md5":"12e3dac858061d088023b2bd48e2fa96","sha1":"e08ce1a144eceae0c3c2ea7a9d6fbc5658f24ce5","sha256":"90cdaf487716184e4034000935c605d1633926d348116d198f355a98b8c6cd21","sha512":"c5030c55a855e7a9e20e22f4c70bf1e0f3c558a9b7d501cfab6992ac2656ae5e41b050ccac541efa55f9603e0d349b247eb4912ee169d44044271789c719cd01","ssdeep":"24:QSNTmTFxg4lyyyyyyyyyyyyyio7eeeeeeeeekzgsLsLsLsLsLsQZp:nfgyyyyyyyyyyyyynzQQQQQO","tlshash":"b772e35b1f5f4981ec4b0db80b125e80c5e49c973854dffbdb76b62888b0364ab845eb","first_seen":"2023-04-05T03:19:57Z","last_seen":"2026-05-30T01:15:18.19255Z","times_seen":165409,"resource_available":false,"data":null}},"time_used":395,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":395,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"httpbin.org/ip","fqdn":"httpbin.org","domain":"httpbin.org","tld":"org"},"ip":{"addr":"52.20.41.59","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://osnrafbtea.oneswittla.ru/kswqjl/#alberto@elzaburu.es","date":"2023-11-21T07:43:56.798Z","timestamp":1700552636798,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"httpbin.org","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M02","organization":"Amazon"},"validity":{"start":"Thu, 21 Sep 2023 00:00:00 GMT","end":"Fri, 18 Oct 2024 23:59:59 GMT"},"fingerprint":{"sha1":"14:0C:C7:A8:EC:FA:7F:9C:9D:D2:B8:7E:C9:B8:93:3A:A1:11:F6:01","sha256":"31:A3:45:E8:53:CE:C8:DA:48:78:03:01:A1:EE:EB:0B:B6:A8:CE:0C:BA:96:95:EA:94:BC:2B:68:42:EA:7F:B5"}}},"request":{"raw":"GET /ip HTTP/1.1\r\nHost: httpbin.org\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: application/json, text/javascript, */*; q=0.01\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://osnrafbtea.oneswittla.ru\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://osnrafbtea.oneswittla.ru/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 21 Nov 2023 07:43:55 GMT\r\ncontent-type: application/json\r\ncontent-length: 31\r\nserver: gunicorn/19.9.0\r\naccess-control-allow-origin: https://osnrafbtea.oneswittla.ru\r\naccess-control-allow-credentials: true\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":31,"size_decoded":0,"mime_type":"application/json","magic":"JSON data\\012- , ASCII text","md5":"421fbb31f37428f936586985bd35b7ef","sha1":"df617524b5cf0200e58b7ed3ce98c102fb952ca4","sha256":"f0c09e029405dd8f7f6574163ea5018413c7e621b7a69e6fb2ee223efdc32ddf","sha512":"bfa2aa2f01642f720055b5f031c882bd6098b61f579aa4f0825dc585405209bb868848886f780793c3d008cffaad43a9cca275144a05e8c9d2475fef9f7f4fe8","ssdeep":"","tlshash":"218004150700041144cc415dc305d70117c00c1dc507d0514d7137454514f340500135","first_seen":"2023-04-19T23:45:40Z","last_seen":"2026-05-29T12:09:38.422552Z","times_seen":14084,"resource_available":true,"data":null}},"time_used":791,"timings":{"blocked":343,"dns":18,"connect":104,"send":0,"wait":105,"receive":0,"ssl":218},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.socket.io/4.6.0/socket.io.min.js","fqdn":"cdn.socket.io","domain":"socket.io","tld":"io"},"ip":{"addr":"143.204.55.40","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://osnrafbtea.oneswittla.ru/kswqjl/#alberto@elzaburu.es","date":"2023-11-21T07:43:47.332Z","timestamp":1700552627332,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.socket.io","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M03","organization":"Amazon"},"validity":{"start":"Sun, 22 Oct 2023 00:00:00 GMT","end":"Sun, 17 Nov 2024 23:59:59 GMT"},"fingerprint":{"sha1":"BB:7D:4E:26:70:F6:06:2A:12:E9:92:A8:F1:9F:CD:82:0B:BF:48:ED","sha256":"C6:1C:9F:99:92:94:22:B4:CA:16:AD:70:73:8C:CF:16:98:BB:6F:5E:9B:8A:EE:32:C3:D5:13:F3:CF:69:F4:51"}}},"request":{"raw":"GET /4.6.0/socket.io.min.js HTTP/1.1\r\nHost: cdn.socket.io\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://osnrafbtea.oneswittla.ru/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-disposition: inline; filename=\"socket.io.min.js\"\r\ncontent-encoding: gzip\r\ndate: Fri, 27 Oct 2023 10:49:06 GMT\r\netag: W/\"80f5b8c6a9eeac15de93e5a112036a06\"\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: fra1::bqgb5-1698403746025-0e8d119dc2bf\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 b9f0050ca4d212d7c855e005be54b1ac.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-C1\r\nx-amz-cf-id: yS4iQOdY_sspqlz9552cncdtvZBb6rspC6vrPHkPwctOIvps_QKJGg==\r\nage: 2538347\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":45806,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (45667)","md5":"80f5b8c6a9eeac15de93e5a112036a06","sha1":"f7174635137d37581b11937fc90e9cb325077bce","sha256":"0401de33701f1cad16ecf952899d23990b6437d0a5b7335524edf6bdfb932542","sha512":"b976a5f02202439d94c6817d037c813fa1945c6bb93762284d97ff61718c5b833402f372562034663a467fdbaa46990de24cb1e356392340e64d034e4ba1b4e4","ssdeep":"384:1ZS0CCnasl8gRR/PoPez+iCMN0Fkiw2Jh4RWdRGhAjbp2ChPL8cYRGv5MRUK6np9:/CCnVl7tUkBxkdRGOfDiY5C5MAn5GY2","tlshash":"1423a488f2a1b06187e37165443f110ba27a746964c9c18cf639d9f19eb8ece7123f79","first_seen":"2023-04-05T03:09:50Z","last_seen":"2026-05-29T10:30:33.644611Z","times_seen":39692,"resource_available":true,"data":null}},"time_used":144,"timings":{"blocked":65,"dns":62,"connect":1,"send":0,"wait":4,"receive":0,"ssl":10},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aadcdn.msftauth.net/shared/1.0/content/images/picker_verify_fluent_authenticator_59892f1e05e3adf9fd2f71b42d92a27f.svg","fqdn":"aadcdn.msftauth.net","domain":"msftauth.net","tld":"net"},"ip":{"addr":"152.199.23.37","port":443,"asn":15133,"as":"EDGECAST","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://osnrafbtea.oneswittla.ru/kswqjl/#alberto@elzaburu.es","date":"2023-11-21T07:43:53.812Z","timestamp":1700552633812,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aadcdn.msftauth.net","organization":"Microsoft Corporation"},"issuer":{"commonName":"DigiCert SHA2 Secure Server CA","organization":"DigiCert Inc"},"validity":{"start":"Tue, 31 Jan 2023 00:00:00 GMT","end":"Wed, 31 Jan 2024 23:59:59 GMT"},"fingerprint":{"sha1":"99:06:D8:1E:EC:BF:DB:78:DF:F4:89:A3:ED:23:07:3D:79:F1:16:D6","sha256":"F7:B6:66:B3:86:91:AD:10:60:9A:D7:48:01:B8:27:C3:F4:47:7A:7C:B7:FF:C5:3F:77:26:B0:B3:08:24:D9:EE"}}},"request":{"raw":"GET /shared/1.0/content/images/picker_verify_fluent_authenticator_59892f1e05e3adf9fd2f71b42d92a27f.svg HTTP/1.1\r\nHost: aadcdn.msftauth.net\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://osnrafbtea.oneswittla.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-encoding: gzip\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding\r\nage: 14953328\r\ncache-control: public, max-age=31536000\r\ncontent-md5: nTculR1Fom7eLci0F6rk+A==\r\ncontent-type: image/svg+xml\r\ndate: Tue, 21 Nov 2023 07:43:51 GMT\r\netag: 0x8DB5C3F4ADC079A\r\nlast-modified: Wed, 24 May 2023 10:11:51 GMT\r\nserver: ECAcc (ska/F7B6)\r\nvary: Accept-Encoding\r\nx-cache: HIT\r\nx-ms-blob-type: BlockBlob\r\nx-ms-lease-status: unlocked\r\nx-ms-request-id: 9d35d246-701e-009b-604e-944da7000000\r\nx-ms-version: 2009-09-19\r\ncontent-length: 2407\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7390,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image\\012- , ASCII text, with very long lines (7438), with no line terminators","md5":"bca9b46fee32162356ba5b4783e614dc","sha1":"cc09ee862df9bf86e545f9dfdf2fbd4facfa71f5","sha256":"fb48e7087def752683bc9a9fe4035acf2419cebbe8b17a16e5c81699a06f6fec","sha512":"ae7f8bc5b83d440a727e230138a3a633b7d5a73c123ae0db661081a7f4f13fb4155bc55aaac65ca7dfb0d76c619cf21e99e1a56e876253d67fe8a59c2d0a15ec","ssdeep":"192:8dEMK4RwdEdEMK4RwIwm6xiD7x9m9t6EQ3FabrItDWOO6Dcy:8dEMVwudEMVwIwtxiDHmP6lFeItDWOOe","tlshash":"dbe187d532f9e1e85482bbfd6681f17c3e1339fa7a32d99083d65c18dc8a00c45adca2","first_seen":"2023-05-10T21:54:10Z","last_seen":"2025-04-06T10:50:06.515793Z","times_seen":21752,"resource_available":false,"data":null}},"time_used":58,"timings":{"blocked":7,"dns":5,"connect":12,"send":0,"wait":8,"receive":7,"ssl":15},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"osnrafbtea.oneswittla.ru/web1/assets/css/pages-godaddy.css?cb=1700552627311","fqdn":"osnrafbtea.oneswittla.ru","domain":"oneswittla.ru","tld":"ru"},"ip":{"addr":"104.21.17.6","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://osnrafbtea.oneswittla.ru/kswqjl/#alberto@elzaburu.es","date":"2023-11-21T07:43:47.336Z","timestamp":1700552627336,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oneswittla.ru","organization":""},"issuer":{"commonName":"GTS CA 1P5","organization":"Google Trust Services LLC"},"validity":{"start":"Wed, 01 Nov 2023 16:29:11 GMT","end":"Tue, 30 Jan 2024 16:29:10 GMT"},"fingerprint":{"sha1":"42:11:11:15:F6:40:D4:B8:81:C3:A5:90:8E:27:09:05:06:2B:51:36","sha256":"70:20:9A:17:36:07:97:75:00:A2:85:E8:C1:BF:E0:1C:66:91:FA:6C:AE:86:F0:B7:3F:3A:BB:16:1E:F7:2C:B3"}}},"request":{"raw":"GET /web1/assets/css/pages-godaddy.css?cb=1700552627311 HTTP/1.1\r\nHost: osnrafbtea.oneswittla.ru\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://osnrafbtea.oneswittla.ru/kswqjl/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 21 Nov 2023 07:43:46 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 09 Oct 2023 21:28:17 GMT\r\netag: W/\"954d-6074f44c310a2\"\r\naccess-control-allow-origin: *\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: DENY\r\ncontent-security-policy: frame-ancestors 'none'\r\ncache-control: max-age=14400\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=z7VWt4LBTu1vIC2fxaNars2xmCfYxKxg9ycabVG62lQRs4puOMZckuwKkHqu1GgcjI5bfa7plzxt3b3MeUKjLTZ%2BKM%2FXn%2B5I4oewe0eHgXmkpAjGPyXcRktK9dYB0pevECIk0WXX\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\ncf-ray: 82974db4dfad0b3d-OSL\r\ncontent-encoding: br\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":38221,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1437), with CRLF line terminators","md5":"5732ce20ba6fd490b9732cfd3cb8ba04","sha1":"50d032727014bccd0f319138a2424d2e9bb17aeb","sha256":"0abd0eb456f4f3d9ac24b04778f49a4405baa2ea161bfb744803aefeda7cac73","sha512":"157c814c07df14070e4ee00ff825c14bc230e3fe8309640a6533ce29e4c4bfacd035e73cd0144b6f006eff4b6dae8ad9a44e19ca8ea924bd589f04805495810b","ssdeep":"192:yoogIexLQ5WKTCFBwCIZtJ8FtX2+UBRkfeWcrScuH9Ye3YdersR8Q5oqWjfvogxp:nDKAaZtJs5odwvhx5P6mqjDggJkLLn","tlshash":"0303cf86155062385f36277bf3bb00aceb6d827356961664b4bcb444cff86e410e1eaf","first_seen":"2023-10-11T10:26:07Z","last_seen":"2023-11-29T20:08:08Z","times_seen":3957,"resource_available":false,"data":null}},"time_used":1127,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1127,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/8i7ga/0x4AAAAAAAMj9eiEWzeCaLNQ/auto/normal","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.3.184","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://osnrafbtea.oneswittla.ru/kswqjl/#alberto@elzaburu.es","date":"2023-11-21T07:43:48.380Z","timestamp":1700552628380,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"challenges.cloudflare.com","organization":"Cloudflare, Inc."},"issuer":{"commonName":"Cloudflare Inc ECC CA-3","organization":"Cloudflare, Inc."},"validity":{"start":"Fri, 18 Aug 2023 00:00:00 GMT","end":"Sat, 17 Aug 2024 23:59:59 GMT"},"fingerprint":{"sha1":"5F:E4:AA:8C:2E:24:D2:B1:69:9D:13:28:31:5C:65:FA:97:2A:E9:6E","sha256":"A2:A8:37:E9:57:D0:F0:FE:3B:6F:A8:23:58:80:DA:61:DD:F9:50:CF:F0:2D:27:D5:00:AA:21:A7:B4:75:80:AD"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/8i7ga/0x4AAAAAAAMj9eiEWzeCaLNQ/auto/normal HTTP/1.1\r\nHost: challenges.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://osnrafbtea.oneswittla.ru/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 21 Nov 2023 07:43:46 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\ncontent-security-policy: frame-src https://challenges.cloudflare.com/ blob:; base-uri 'self'\r\ncross-origin-embedder-policy: require-corp\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: cross-origin\r\ndocument-policy: js-profiling\r\norigin-agent-cluster: ?1\r\npermissions-policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()\r\nreferrer-policy: same-origin\r\nserver: cloudflare\r\ncf-ray: 82974dbb6cc10b65-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":72904,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document text\\012- HTML document text\\012- HTML document text\\012- HTML document text\\012- HTML document text\\012- exported SGML document, ASCII text, with very long lines (40091)","md5":"ee3f6a873defbe512e7473946b42d2ad","sha1":"b5981ea6a148d750ee056f370f1129c30867032b","sha256":"69e4add29888e261e667f20a264394a2201f213e1303f18bf558091f748be57f","sha512":"1e50fd1dd6ecffa40ec7b859abc6298e6e10de3064ad457a8e80fab7923496114872ee8b7575b0fdc6fe8d6abec789b2310857c1e3266388833d7609c21ecf37","ssdeep":"1536:XaTfc9IJbBeceIedkeO5gwyc99Kh0afdU6/jPNXhzNmU77JuI15fJRjDbY1GvIjo:4foTV/Pws9/j1hd77Jv5fJRjDbYMvIjo","tlshash":"1b63e6d9cebc7c29ab029a29b0ce51e3632d53471551e199b8dca190cfec04e26f1f79","first_seen":"2023-11-21T08:44:02Z","last_seen":"2023-11-21T08:44:02Z","times_seen":1,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"osnrafbtea.oneswittla.ru/web1/info","fqdn":"osnrafbtea.oneswittla.ru","domain":"oneswittla.ru","tld":"ru"},"ip":{"addr":"104.21.17.6","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://osnrafbtea.oneswittla.ru/kswqjl/#alberto@elzaburu.es","date":"2023-11-21T07:43:52.319Z","timestamp":1700552632319,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oneswittla.ru","organization":""},"issuer":{"commonName":"GTS CA 1P5","organization":"Google Trust Services LLC"},"validity":{"start":"Wed, 01 Nov 2023 16:29:11 GMT","end":"Tue, 30 Jan 2024 16:29:10 GMT"},"fingerprint":{"sha1":"42:11:11:15:F6:40:D4:B8:81:C3:A5:90:8E:27:09:05:06:2B:51:36","sha256":"70:20:9A:17:36:07:97:75:00:A2:85:E8:C1:BF:E0:1C:66:91:FA:6C:AE:86:F0:B7:3F:3A:BB:16:1E:F7:2C:B3"}}},"request":{"raw":"POST /web1/info HTTP/1.1\r\nHost: osnrafbtea.oneswittla.ru\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 23\r\nOrigin: https://osnrafbtea.oneswittla.ru\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://osnrafbtea.oneswittla.ru/kswqjl/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlpKUTAvOTBkVk9iQmtEaWFTVVhqWHc9PSIsInZhbHVlIjoiUktxZVhnY2JERU5UVUo4Ujl5N3RSdjZwc1ZHc0JxVGhidzlXKzBzaE1ENTdHMmRkZW1qcFBXcWFXQmo2YUZiTVo4YTZ4RXFnZ0R3YXVpTGRPSUFBY2JQajNBVnZnRnRPUno3WDlabFRwT2FSbnlkYVFtb08ySmdYRkp3dmE4RnUiLCJtYWMiOiI5NGY5Y2E5MzVkOTc4ZTVmMzI1NmFjMTUzMTQzMjRmMjhlNjZjNjE2MmU3ZGIxMDQwMzVhODU3OGFjYzA3OWIzIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlNtOWZqQmVrUFY1akRvSThMSjNvOUE9PSIsInZhbHVlIjoiK3UzamxPdzVCcEpubE9vWGtoOEdhRk05Snk1ZXNjOXltbTVhZ0p4VHRneGdubm5FRE1DZjRGUUZDZ0JaR3lXcVZ2ZXM4RXZ1cFFlN1dHSVNBbCswUU9VK2ZWSC8wUWdQdVhJTUlJZVZYVURySTJ5MzArN3Avcm1pNERzaDIxYjYiLCJtYWMiOiJlYWFhNWI3YTJmMzRhZDU0YzA0MzU0MWE5MDNmODYxODRjOGYxNWIwZjE0ZjRkNTdiMjA3YTYzM2Y0ZWZiZGNjIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 21 Nov 2023 07:43:51 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nx-powered-by: PHP/8.1.10\r\ncache-control: no-cache, private\r\naccess-control-allow-origin: *\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: DENY\r\ncontent-security-policy: frame-ancestors 'none'\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=n3lu8Q0IXjiQzAnTaqgukzNpq7t8zclMSFqvz8SpIfJoW0nijGSoK7W6nzsDLaRM0uYUZtoiMRkI6K6D%2FfegvaRjOcrgO9ZBYxiTeg9JUxRzWMQNVvInLtOfeoP1BR7NzUwU9IsX\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nset-cookie: XSRF-TOKEN=eyJpdiI6Ii90Q1p6c2hjVEhPOGFyTmxTNkp6SVE9PSIsInZhbHVlIjoiZEo4ZGlCRjN3ZDlTNjMrNWZnTzE5Z1Z2UE9UT3N4Mjd4bW44aFhyQVdSNTR6SW4rM0NpSjE4QW94eWc5T09kQkZvRjZzTHJaVVRvMTZ1WTNreWdtNHIwd01BZlhxUWdsdktEWEJkUENlNTlQNEdPS3BWVS84RFdGMnN4N1VDTTgiLCJtYWMiOiIyOTVkMTZhMTg2Zjk4ZTcxZmNlMDZhMTRmYjQ1MzBkYjBlYWNkMzc5NzllNjYyYWY1YTIwMmYwZjg1NGUzYjY0IiwidGFnIjoiIn0%3D; expires=Tue, 21-Nov-2023 09:43:51 GMT; Max-Age=7200; path=/; samesite=lax\nlaravel_session=eyJpdiI6ImtUQlBseDNRSE1ValRIZnVKOUFaL2c9PSIsInZhbHVlIjoiQ2Rmbm9sNWNWWHBNWmZkeVUyM1dhLytuQk5MSDB5aHBzWW5zMlRYcXE5d0RiZG9SNldtL09GR1JUK2djWWVHNlV4eVF4MDZBZHkrK0gydEUySGVCdGdnb2xBN1cySmVxYVVLb3RKUEhROUxWRVJYY2drNlFkNUEvcndpZVBOZSsiLCJtYWMiOiJkOTRhZGY1OTNmNDJmMjAwMDFkNDU1NzBjMGI0YWJjNDY5NGRlMDJkMmU2OTY4NWZkZTg2YTY1Y2RmNmI5M2RlIiwidGFnIjoiIn0%3D; expires=Tue, 21-Nov-2023 09:43:51 GMT; Max-Age=7200; path=/; httponly; samesite=lax\r\nserver: cloudflare\r\ncf-ray: 82974dd40cfd0b3d-OSL\r\ncontent-encoding: br\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":36403,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-30T03:03:15.73771Z","times_seen":15897774,"resource_available":true,"data":null}},"time_used":1321,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1144,"receive":177,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/turnstile/v0/g/9914b343/api.js?render=explicit","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.3.184","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://osnrafbtea.oneswittla.ru/kswqjl/#alberto@elzaburu.es","date":"2023-11-21T07:43:46.154Z","timestamp":1700552626154,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"challenges.cloudflare.com","organization":"Cloudflare, Inc."},"issuer":{"commonName":"Cloudflare Inc ECC CA-3","organization":"Cloudflare, Inc."},"validity":{"start":"Fri, 18 Aug 2023 00:00:00 GMT","end":"Sat, 17 Aug 2024 23:59:59 GMT"},"fingerprint":{"sha1":"5F:E4:AA:8C:2E:24:D2:B1:69:9D:13:28:31:5C:65:FA:97:2A:E9:6E","sha256":"A2:A8:37:E9:57:D0:F0:FE:3B:6F:A8:23:58:80:DA:61:DD:F9:50:CF:F0:2D:27:D5:00:AA:21:A7:B4:75:80:AD"}}},"request":{"raw":"GET /turnstile/v0/g/9914b343/api.js?render=explicit HTTP/1.1\r\nHost: challenges.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://osnrafbtea.oneswittla.ru/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 21 Nov 2023 07:43:44 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\ncache-control: max-age=31536000\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 82974dad8f62712a-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":34254,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (34253)","md5":"6142a5f5c66e2c1be52ee9506a565962","sha1":"c3b39e8352efd1e0619b6dd62af8b2a917622868","sha256":"51cd12da61a7401c73472b2ac77067adfa30e9fc0545b4b7c240e9154e011fc7","sha512":"3de194e4c8f32703cfee9e2a48230d21301e28a39beefb36dcb2b8df26b962b3a508e7fd8fe55aca2f619293e293cdf64459bf5d91526cbceda770396765d5e2","ssdeep":"768:3YpyCIUTKuBT1ytljuXeMDKLFn76p+B5nLZ73akHgMO4B4oq0HVi:30nKuBT1Yj7MDCKp","tlshash":"9ff229993187343187ee41e0207b67877339ba3ae58cc840d85bc97539bcd8ad137ba9","first_seen":"2023-11-07T13:44:12Z","last_seen":"2023-11-30T20:53:42Z","times_seen":32842,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"osnrafbtea.oneswittla.ru/web1/assets/pages/104gf8.css?cb=1700552627311","fqdn":"osnrafbtea.oneswittla.ru","domain":"oneswittla.ru","tld":"ru"},"ip":{"addr":"104.21.17.6","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://osnrafbtea.oneswittla.ru/kswqjl/#alberto@elzaburu.es","date":"2023-11-21T07:43:47.326Z","timestamp":1700552627326,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oneswittla.ru","organization":""},"issuer":{"commonName":"GTS CA 1P5","organization":"Google Trust Services LLC"},"validity":{"start":"Wed, 01 Nov 2023 16:29:11 GMT","end":"Tue, 30 Jan 2024 16:29:10 GMT"},"fingerprint":{"sha1":"42:11:11:15:F6:40:D4:B8:81:C3:A5:90:8E:27:09:05:06:2B:51:36","sha256":"70:20:9A:17:36:07:97:75:00:A2:85:E8:C1:BF:E0:1C:66:91:FA:6C:AE:86:F0:B7:3F:3A:BB:16:1E:F7:2C:B3"}}},"request":{"raw":"GET /web1/assets/pages/104gf8.css?cb=1700552627311 HTTP/1.1\r\nHost: osnrafbtea.oneswittla.ru\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://osnrafbtea.oneswittla.ru/kswqjl/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 21 Nov 2023 07:43:46 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 16 Nov 2023 05:10:33 GMT\r\netag: W/\"461-60a3e0a12d5ad\"\r\naccess-control-allow-origin: *\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: DENY\r\ncontent-security-policy: frame-ancestors 'none'\r\ncache-control: max-age=14400\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=nxPzdz2g2aC1mOikk6dXHrrpewsnXZlruzD74Voxg9ygiXi7fTsvQjbZL2nnH6NahJPm4x87t8JzOZ1BHhoBUwdpa44Mfy5Y%2BzXGcke5XYLC5UmiMSHpLfz0CI7ylaRRuS7Rugfs\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\ncf-ray: 82974db4dfaa0b3d-OSL\r\ncontent-encoding: br\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1121,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1164), with no line terminators","md5":"1d425fb9c0a48323d58155b61ac338d8","sha1":"755d9cf7e096cd1f590b408f1921f78dba97d5c9","sha256":"da5bb4dcce3afee4e8b582d18c202dd7f2ec4e9485986f18f1c8ff9271235adf","sha512":"02edacb95c51c6fae9631be5b9227c735ebfb4932881cd5ada7b742354184e7a56b959c8004fdf540c075f1a7c7fcbde48427bf48904b2113cfb0eeaac2f55d6","ssdeep":"","tlshash":"57210f69e6966cbf751b9fa92bf52780132db040c0258b3c3b3e71f3638909490773a6","first_seen":"2023-09-28T13:43:04Z","last_seen":"2023-11-29T20:08:08Z","times_seen":3378,"resource_available":false,"data":null}},"time_used":1001,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1001,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"osnrafbtea.oneswittla.ru/web1/assets/cloudfavicon.ico","fqdn":"osnrafbtea.oneswittla.ru","domain":"oneswittla.ru","tld":"ru"},"ip":{"addr":"104.21.17.6","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://osnrafbtea.oneswittla.ru/kswqjl/#alberto@elzaburu.es","date":"2023-11-21T07:43:48.458Z","timestamp":1700552628458,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oneswittla.ru","organization":""},"issuer":{"commonName":"GTS CA 1P5","organization":"Google Trust Services LLC"},"validity":{"start":"Wed, 01 Nov 2023 16:29:11 GMT","end":"Tue, 30 Jan 2024 16:29:10 GMT"},"fingerprint":{"sha1":"42:11:11:15:F6:40:D4:B8:81:C3:A5:90:8E:27:09:05:06:2B:51:36","sha256":"70:20:9A:17:36:07:97:75:00:A2:85:E8:C1:BF:E0:1C:66:91:FA:6C:AE:86:F0:B7:3F:3A:BB:16:1E:F7:2C:B3"}}},"request":{"raw":"GET /web1/assets/cloudfavicon.ico HTTP/1.1\r\nHost: osnrafbtea.oneswittla.ru\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://osnrafbtea.oneswittla.ru/kswqjl/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 21 Nov 2023 07:43:46 GMT\r\ncontent-type: image/x-icon\r\nlast-modified: Wed, 16 Aug 2023 15:22:46 GMT\r\netag: W/\"86be-6030bde212b57\"\r\naccess-control-allow-origin: *\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: DENY\r\ncontent-security-policy: frame-ancestors 'none'\r\ncache-control: max-age=14400\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=JNZKHQg2AhWlFJs8Mr7Bu2%2FMOdQK2C2t0kB13bd2lHl0juH30gc6b%2F3zQZfDmyWE%2FhmgWJWAas1fI4o%2BQl8ww%2B42M2qsFPA6N2kZ1MMlKhu2UwPZBTAJutQ9LolUR%2FsJmgK%2Buvae\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: HIT\r\nage: 1\r\nserver: cloudflare\r\ncf-ray: 82974dbbeae80b3d-OSL\r\ncontent-encoding: br\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":34494,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 5 icons, 16x16, 32 bits/pixel, 24x24, 32 bits/pixel\\012- data","md5":"88415acda09a4cbd9d87543c3ba78180","sha1":"2dec4705e9ab399efdc6eef36e079aa31d1df8d9","sha256":"20cccc47c1bac9d2ef36b6a1c58af58c5c169ad5ca084080f0392b86f949641c","sha512":"77d0d7e0c85a1cad6a22372f2d3904c0842628ce7f1adac9a2a0cbf3b566ce8148527b0e7ede2bb068f5d005917b3f95c2a25d031d0d4d7a6a5a117cefa83b24","ssdeep":"96:4KOr5hOo0Qhk2fAewTq/iwa2R7Qz8pz4DopTPGFsbN:qbl626uRg8pvF","tlshash":"e3f2e7886a03cca8b5877be0cd3795fd031f6c2ad86418df216b7d49bb79f12a055e12","first_seen":"2023-05-08T14:11:31Z","last_seen":"2026-05-27T23:26:42.458733Z","times_seen":39993,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"osnrafbtea.oneswittla.ru/web1/info","fqdn":"osnrafbtea.oneswittla.ru","domain":"oneswittla.ru","tld":"ru"},"ip":{"addr":"104.21.17.6","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://osnrafbtea.oneswittla.ru/kswqjl/#alberto@elzaburu.es","date":"2023-11-21T07:43:52.316Z","timestamp":1700552632316,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oneswittla.ru","organization":""},"issuer":{"commonName":"GTS CA 1P5","organization":"Google Trust Services LLC"},"validity":{"start":"Wed, 01 Nov 2023 16:29:11 GMT","end":"Tue, 30 Jan 2024 16:29:10 GMT"},"fingerprint":{"sha1":"42:11:11:15:F6:40:D4:B8:81:C3:A5:90:8E:27:09:05:06:2B:51:36","sha256":"70:20:9A:17:36:07:97:75:00:A2:85:E8:C1:BF:E0:1C:66:91:FA:6C:AE:86:F0:B7:3F:3A:BB:16:1E:F7:2C:B3"}}},"request":{"raw":"POST /web1/info HTTP/1.1\r\nHost: osnrafbtea.oneswittla.ru\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 22\r\nOrigin: https://osnrafbtea.oneswittla.ru\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://osnrafbtea.oneswittla.ru/kswqjl/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlpKUTAvOTBkVk9iQmtEaWFTVVhqWHc9PSIsInZhbHVlIjoiUktxZVhnY2JERU5UVUo4Ujl5N3RSdjZwc1ZHc0JxVGhidzlXKzBzaE1ENTdHMmRkZW1qcFBXcWFXQmo2YUZiTVo4YTZ4RXFnZ0R3YXVpTGRPSUFBY2JQajNBVnZnRnRPUno3WDlabFRwT2FSbnlkYVFtb08ySmdYRkp3dmE4RnUiLCJtYWMiOiI5NGY5Y2E5MzVkOTc4ZTVmMzI1NmFjMTUzMTQzMjRmMjhlNjZjNjE2MmU3ZGIxMDQwMzVhODU3OGFjYzA3OWIzIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlNtOWZqQmVrUFY1akRvSThMSjNvOUE9PSIsInZhbHVlIjoiK3UzamxPdzVCcEpubE9vWGtoOEdhRk05Snk1ZXNjOXltbTVhZ0p4VHRneGdubm5FRE1DZjRGUUZDZ0JaR3lXcVZ2ZXM4RXZ1cFFlN1dHSVNBbCswUU9VK2ZWSC8wUWdQdVhJTUlJZVZYVURySTJ5MzArN3Avcm1pNERzaDIxYjYiLCJtYWMiOiJlYWFhNWI3YTJmMzRhZDU0YzA0MzU0MWE5MDNmODYxODRjOGYxNWIwZjE0ZjRkNTdiMjA3YTYzM2Y0ZWZiZGNjIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 21 Nov 2023 07:43:51 GMT\r\ncontent-type: application/json\r\nx-powered-by: PHP/8.1.10\r\ncache-control: no-cache, private\r\naccess-control-allow-origin: *\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: DENY\r\ncontent-security-policy: frame-ancestors 'none'\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=Ah7t9yFOnf70mcltHgA4OmRcwoVQCtH8puN4AcPEr1Ok%2B46MrqJrowI5%2F4bsvkF%2Bmi2PbgxrepRd9aRktpdy%2BUZMrrn9%2Bnbkv2jZbEI08QHFMVbtbQHug90v%2BK1cv26GhkMWyK%2FH\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nset-cookie: XSRF-TOKEN=eyJpdiI6ImpDSGxsNWNvZktnUENzcUc4ZnhZekE9PSIsInZhbHVlIjoiZ0V6ZnZPYmkzelg3aWpsbW96bmtWcU5VYXBBZVV2MFo5cjlCRStUbzBycCtMMDF4MzkrcXBRTVV3b2phU1piZUZXNDQ5RHF3SHphVm5IRGpsaDBUV0VCRk9Jam9hNjExa3F6NVQyRTJRa0JFN29OcGVsK21yeHF4YTBFbzhIbjAiLCJtYWMiOiI2ZDQ4Zjk0ZTZkZTE1OGVjMTIxNDAxNjFiMDUxMjI2MmQ2ODAwMWExYmI2ZGM0YmRiNjU5N2YyYjA5MzMwOGRlIiwidGFnIjoiIn0%3D; expires=Tue, 21-Nov-2023 09:43:50 GMT; Max-Age=7200; path=/; samesite=lax\nlaravel_session=eyJpdiI6ImFJcEg3NFpuWGM5Q3p2NGIzV0prRWc9PSIsInZhbHVlIjoieDNreG9zeFNIRzdHN2dreS9kaHBaTXhKbzBVb1pZa1Q5aTZnblNxb05KWmMzUHZReGE4QVFZUFlwaTN0emMyWnU3VC80RkdCUTBycGdqYno3R1lpeEt5a2lwbkFHVm1NTlNqQ3FoVUY3MDc1ak95cXhpRi9QOEpTT0g3aU55SnYiLCJtYWMiOiJmNGRiMDc5MjU1NWU5ZjZlOWIxMTRiY2VjODQ0MzcyY2I3ZmIwODBjMDM1YzFjNzY1OTI0YmE0ZWM5YjQwNjU3IiwidGFnIjoiIn0%3D; expires=Tue, 21-Nov-2023 09:43:50 GMT; Max-Age=7200; path=/; httponly; samesite=lax\r\nserver: cloudflare\r\ncf-ray: 82974dd40cfb0b3d-OSL\r\ncontent-encoding: br\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":91,"size_decoded":0,"mime_type":"application/json","magic":"troff or preprocessor input, ASCII text, with no line terminators","md5":"348478242d981ddc47795f90e6f89d2a","sha1":"8f862536625baf2d0eb45d44acc9802c71df79e1","sha256":"99691950fad5cb4b6df0bab904cc60d404840fe839c3614ffb841898ecdb3ddb","sha512":"4909d1a95f6bedb52fda4b2df5559341142a5889687e61b4cd24cedf6499d865bef09f7b8c7a3f7d45ee27ecbf04965cd6a7f3a0d984a9db9775de2f54dcfb0a","ssdeep":"","tlshash":"2ab012e690de1043a19702ad13f0692cf15d178b0d1bccadc5b4b2201ed22af103701d","first_seen":"2023-10-23T01:13:53Z","last_seen":"2025-01-29T02:26:08.615495Z","times_seen":6347,"resource_available":false,"data":null}},"time_used":602,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":601,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"osnrafbtea.oneswittla.ru/web1/info","fqdn":"osnrafbtea.oneswittla.ru","domain":"oneswittla.ru","tld":"ru"},"ip":{"addr":"104.21.17.6","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://osnrafbtea.oneswittla.ru/kswqjl/#alberto@elzaburu.es","date":"2023-11-21T07:43:56.795Z","timestamp":1700552636795,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oneswittla.ru","organization":""},"issuer":{"commonName":"GTS CA 1P5","organization":"Google Trust Services LLC"},"validity":{"start":"Wed, 01 Nov 2023 16:29:11 GMT","end":"Tue, 30 Jan 2024 16:29:10 GMT"},"fingerprint":{"sha1":"42:11:11:15:F6:40:D4:B8:81:C3:A5:90:8E:27:09:05:06:2B:51:36","sha256":"70:20:9A:17:36:07:97:75:00:A2:85:E8:C1:BF:E0:1C:66:91:FA:6C:AE:86:F0:B7:3F:3A:BB:16:1E:F7:2C:B3"}}},"request":{"raw":"POST /web1/info HTTP/1.1\r\nHost: osnrafbtea.oneswittla.ru\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 22\r\nOrigin: https://osnrafbtea.oneswittla.ru\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://osnrafbtea.oneswittla.ru/kswqjl/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ii90Q1p6c2hjVEhPOGFyTmxTNkp6SVE9PSIsInZhbHVlIjoiZEo4ZGlCRjN3ZDlTNjMrNWZnTzE5Z1Z2UE9UT3N4Mjd4bW44aFhyQVdSNTR6SW4rM0NpSjE4QW94eWc5T09kQkZvRjZzTHJaVVRvMTZ1WTNreWdtNHIwd01BZlhxUWdsdktEWEJkUENlNTlQNEdPS3BWVS84RFdGMnN4N1VDTTgiLCJtYWMiOiIyOTVkMTZhMTg2Zjk4ZTcxZmNlMDZhMTRmYjQ1MzBkYjBlYWNkMzc5NzllNjYyYWY1YTIwMmYwZjg1NGUzYjY0IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImtUQlBseDNRSE1ValRIZnVKOUFaL2c9PSIsInZhbHVlIjoiQ2Rmbm9sNWNWWHBNWmZkeVUyM1dhLytuQk5MSDB5aHBzWW5zMlRYcXE5d0RiZG9SNldtL09GR1JUK2djWWVHNlV4eVF4MDZBZHkrK0gydEUySGVCdGdnb2xBN1cySmVxYVVLb3RKUEhROUxWRVJYY2drNlFkNUEvcndpZVBOZSsiLCJtYWMiOiJkOTRhZGY1OTNmNDJmMjAwMDFkNDU1NzBjMGI0YWJjNDY5NGRlMDJkMmU2OTY4NWZkZTg2YTY1Y2RmNmI5M2RlIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 21 Nov 2023 07:43:55 GMT\r\ncontent-type: application/json\r\nx-powered-by: PHP/8.1.10\r\ncache-control: no-cache, private\r\naccess-control-allow-origin: *\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: DENY\r\ncontent-security-policy: frame-ancestors 'none'\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=fPUw0bghjNp7gZWzTYAEvPrhK1w9Vvfb1imQXMQNK7alxa8az6mbLrUdLbYID9A6h53Yd9hjyG1aNLaauBaL1njXUrghf9BlbP0fCaj0yMn6zpPn2B2WXzN8k%2F2G54TtlNa3xZUS\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nset-cookie: XSRF-TOKEN=eyJpdiI6ImhhOXFiTW92S2NNNWtJUUt1aXJpQ0E9PSIsInZhbHVlIjoiWllIWExlOCtXYkFzM2o1UWhiNzF0N3VoV0NyRzdOdWM2aThpK1FmRkRGeEd1bjZDL2gxQ1pMNSs1MW82RzFLeXZaUHpobllmdzRIbWJ4R3ZRNE9LTDMxS3dBU1Ruelg5YnpFNWxlTmFRa3dQM05ZVEVMTWVSb29rdHFVS3pKaEUiLCJtYWMiOiI3MGMxNzllNzYxNTliMWJjYWM2M2Y4ZjEwNDNhYWE4OGRjOTNiNDhiZGUzYTFkMTk1NGZhZGQyNWVkZmIxOGEzIiwidGFnIjoiIn0%3D; expires=Tue, 21-Nov-2023 09:43:55 GMT; Max-Age=7200; path=/; samesite=lax\nlaravel_session=eyJpdiI6IjhpQ0VkYzI4NFRocHJRME9LNHdsbEE9PSIsInZhbHVlIjoiR05sUlRVa21jbmRNc3NENzhMcWNBY0o5bXN3dzRlMkliaFhnVkQ2NjlXSnpjci9obFJhYlB4VWttRlFNWW0vUHo5QytWcnluemExc2plMGJYK01HK1dHTE93cDNVZ1dxQ3hKb1V5cHlaRTl2azNSUjBTU3pWallpNnJIL1BxZkciLCJtYWMiOiJhNGJlM2FkNjcwZDMyMjZhZDNkNmUxMTdkMmQwZGI0N2Y2YWQ0ZGQwNDk3MjNjZjQ1YjI4MWMwOWQ5M2RjNzdiIiwidGFnIjoiIn0%3D; expires=Tue, 21-Nov-2023 09:43:55 GMT; Max-Age=7200; path=/; httponly; samesite=lax\r\nserver: cloudflare\r\ncf-ray: 82974df00f250b3d-OSL\r\ncontent-encoding: br\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":20,"size_decoded":0,"mime_type":"application/json","magic":"troff or preprocessor input, ASCII text, with no line terminators","md5":"0b35866f4a3aa4d34ce5dda2d14c2cd8","sha1":"d2b80911f09c3106fdf0df9920f983945d644083","sha256":"493851374626d927bfe1c7d084fa977a0e636c03f163fda258ab6b638edc2f0d","sha512":"323300597a34fcbc1973fff56a643331f6dd9851d80feafe1c7691589bc9577100319688b3f19787d2e49342f0a3c25b18f7f82b14e7ea7e1c7720f9794b7061","ssdeep":"","tlshash":"9670000a280280c2a883a08000220c30a8080800802a028882080028ca088a0a8ca000","first_seen":"2023-04-05T14:51:23Z","last_seen":"2025-04-06T22:37:18.338685Z","times_seen":31862,"resource_available":false,"data":null}},"time_used":1048,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1047,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"osnrafbtea.oneswittla.ru/web1/assets/back.png","fqdn":"osnrafbtea.oneswittla.ru","domain":"oneswittla.ru","tld":"ru"},"ip":{"addr":"104.21.17.6","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://osnrafbtea.oneswittla.ru/kswqjl/#alberto@elzaburu.es","date":"2023-11-21T07:43:53.803Z","timestamp":1700552633803,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oneswittla.ru","organization":""},"issuer":{"commonName":"GTS CA 1P5","organization":"Google Trust Services LLC"},"validity":{"start":"Wed, 01 Nov 2023 16:29:11 GMT","end":"Tue, 30 Jan 2024 16:29:10 GMT"},"fingerprint":{"sha1":"42:11:11:15:F6:40:D4:B8:81:C3:A5:90:8E:27:09:05:06:2B:51:36","sha256":"70:20:9A:17:36:07:97:75:00:A2:85:E8:C1:BF:E0:1C:66:91:FA:6C:AE:86:F0:B7:3F:3A:BB:16:1E:F7:2C:B3"}}},"request":{"raw":"GET /web1/assets/back.png HTTP/1.1\r\nHost: osnrafbtea.oneswittla.ru\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://osnrafbtea.oneswittla.ru/kswqjl/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ii90Q1p6c2hjVEhPOGFyTmxTNkp6SVE9PSIsInZhbHVlIjoiZEo4ZGlCRjN3ZDlTNjMrNWZnTzE5Z1Z2UE9UT3N4Mjd4bW44aFhyQVdSNTR6SW4rM0NpSjE4QW94eWc5T09kQkZvRjZzTHJaVVRvMTZ1WTNreWdtNHIwd01BZlhxUWdsdktEWEJkUENlNTlQNEdPS3BWVS84RFdGMnN4N1VDTTgiLCJtYWMiOiIyOTVkMTZhMTg2Zjk4ZTcxZmNlMDZhMTRmYjQ1MzBkYjBlYWNkMzc5NzllNjYyYWY1YTIwMmYwZjg1NGUzYjY0IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImtUQlBseDNRSE1ValRIZnVKOUFaL2c9PSIsInZhbHVlIjoiQ2Rmbm9sNWNWWHBNWmZkeVUyM1dhLytuQk5MSDB5aHBzWW5zMlRYcXE5d0RiZG9SNldtL09GR1JUK2djWWVHNlV4eVF4MDZBZHkrK0gydEUySGVCdGdnb2xBN1cySmVxYVVLb3RKUEhROUxWRVJYY2drNlFkNUEvcndpZVBOZSsiLCJtYWMiOiJkOTRhZGY1OTNmNDJmMjAwMDFkNDU1NzBjMGI0YWJjNDY5NGRlMDJkMmU2OTY4NWZkZTg2YTY1Y2RmNmI5M2RlIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 21 Nov 2023 07:43:52 GMT\r\ncontent-type: image/png\r\ncontent-length: 231\r\nlast-modified: Sun, 19 Mar 2023 15:20:17 GMT\r\netag: \"e7-5f7425905ae40\"\r\naccess-control-allow-origin: *\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: DENY\r\ncontent-security-policy: frame-ancestors 'none'\r\ncache-control: max-age=14400\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=C1klVl66JwJRfv39Ux0HItOZ9fW0eYEgSslmreRYgKT1gaZREP%2By1HwwfVVIy8cLQQpz7alY%2FA0BmAS9jYYXQZ1eWDdi0Ycjq0ZphMJUP4rjXvruzwtcfMCD60GPHQ5TTL90MqtJ\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: REVALIDATED\r\naccept-ranges: bytes\r\nserver: cloudflare\r\ncf-ray: 82974ddd08150b3d-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":231,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced\\012- data","md5":"547988bac5584b4608466d761e16f370","sha1":"c11bb71049702528402a31027f200184910a7e23","sha256":"70e32b2db3f079bb0295a85a0db15ed9e5926294dd947938d6cfa595f5ab18b4","sha512":"c4a76f6e94982d1cc02c2b67523a334e76bfde525c1014d32db9e7eca0fa39a06f291ecfa94c8c6a49d488ea3acf9c10ddf3cad9515562010440863d0f08fba3","ssdeep":"","tlshash":"0cd097e26a88297fc39f223b29051a21ec8a7131a020f10c3812c238a501a285082ee2","first_seen":"2023-07-01T14:36:17Z","last_seen":"2026-05-29T12:54:17.767587Z","times_seen":19441,"resource_available":false,"data":null}},"time_used":970,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":969,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"osnrafbtea.oneswittla.ru/web1/assets/cloudfavicon.ico","fqdn":"osnrafbtea.oneswittla.ru","domain":"oneswittla.ru","tld":"ru"},"ip":{"addr":"104.21.17.6","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://osnrafbtea.oneswittla.ru/kswqjl/#alberto@elzaburu.es","date":"2023-11-21T07:43:46.423Z","timestamp":1700552626423,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oneswittla.ru","organization":""},"issuer":{"commonName":"GTS CA 1P5","organization":"Google Trust Services LLC"},"validity":{"start":"Wed, 01 Nov 2023 16:29:11 GMT","end":"Tue, 30 Jan 2024 16:29:10 GMT"},"fingerprint":{"sha1":"42:11:11:15:F6:40:D4:B8:81:C3:A5:90:8E:27:09:05:06:2B:51:36","sha256":"70:20:9A:17:36:07:97:75:00:A2:85:E8:C1:BF:E0:1C:66:91:FA:6C:AE:86:F0:B7:3F:3A:BB:16:1E:F7:2C:B3"}}},"request":{"raw":"GET /web1/assets/cloudfavicon.ico HTTP/1.1\r\nHost: osnrafbtea.oneswittla.ru\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://osnrafbtea.oneswittla.ru/kswqjl/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 21 Nov 2023 07:43:45 GMT\r\ncontent-type: image/x-icon\r\nlast-modified: Wed, 16 Aug 2023 15:22:46 GMT\r\netag: W/\"86be-6030bde212b57\"\r\naccess-control-allow-origin: *\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: DENY\r\ncontent-security-policy: frame-ancestors 'none'\r\ncache-control: max-age=14400\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=JNZKHQg2AhWlFJs8Mr7Bu2%2FMOdQK2C2t0kB13bd2lHl0juH30gc6b%2F3zQZfDmyWE%2FhmgWJWAas1fI4o%2BQl8ww%2B42M2qsFPA6N2kZ1MMlKhu2UwPZBTAJutQ9LolUR%2FsJmgK%2Buvae\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: REVALIDATED\r\nserver: cloudflare\r\ncf-ray: 82974daf3dd40b3d-OSL\r\ncontent-encoding: br\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":34494,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 5 icons, 16x16, 32 bits/pixel, 24x24, 32 bits/pixel\\012- data","md5":"88415acda09a4cbd9d87543c3ba78180","sha1":"2dec4705e9ab399efdc6eef36e079aa31d1df8d9","sha256":"20cccc47c1bac9d2ef36b6a1c58af58c5c169ad5ca084080f0392b86f949641c","sha512":"77d0d7e0c85a1cad6a22372f2d3904c0842628ce7f1adac9a2a0cbf3b566ce8148527b0e7ede2bb068f5d005917b3f95c2a25d031d0d4d7a6a5a117cefa83b24","ssdeep":"96:4KOr5hOo0Qhk2fAewTq/iwa2R7Qz8pz4DopTPGFsbN:qbl626uRg8pvF","tlshash":"e3f2e7886a03cca8b5877be0cd3795fd031f6c2ad86418df216b7d49bb79f12a055e12","first_seen":"2023-05-08T14:11:31Z","last_seen":"2026-05-27T23:26:42.458733Z","times_seen":39993,"resource_available":false,"data":null}},"time_used":948,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":948,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"logincdn.msauth.net/shared/1.0/content/images/picker_verify_email_958962caa7cf6b75cd412e9e3b687b22.svg","fqdn":"logincdn.msauth.net","domain":"msauth.net","tld":"net"},"ip":{"addr":"192.229.221.185","port":443,"asn":15133,"as":"EDGECAST","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://osnrafbtea.oneswittla.ru/kswqjl/#alberto@elzaburu.es","date":"2023-11-21T07:43:53.822Z","timestamp":1700552633822,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"identitycdn.msauth.net","organization":"Microsoft Corporation"},"issuer":{"commonName":"Microsoft Azure RSA TLS Issuing CA 03","organization":"Microsoft Corporation"},"validity":{"start":"Thu, 02 Nov 2023 23:14:23 GMT","end":"Sun, 27 Oct 2024 23:14:23 GMT"},"fingerprint":{"sha1":"AF:EB:E8:D6:8A:D6:D5:DF:17:8C:0E:CB:4E:EA:B9:23:51:37:24:F6","sha256":"9C:20:09:0A:83:F5:D6:8B:08:FE:74:8F:92:DB:E8:12:67:F6:7F:7A:C2:B0:7E:9C:26:1D:CA:7F:DC:94:CD:5A"}}},"request":{"raw":"GET /shared/1.0/content/images/picker_verify_email_958962caa7cf6b75cd412e9e3b687b22.svg HTTP/1.1\r\nHost: logincdn.msauth.net\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://osnrafbtea.oneswittla.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-encoding: gzip\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding\r\nage: 14388058\r\ncache-control: public, max-age=31536000\r\ncontent-md5: pFQUXilUkzYtIbvSwGgVBQ==\r\ncontent-type: image/svg+xml\r\ndate: Tue, 21 Nov 2023 07:43:52 GMT\r\netag: 0x8DB5C409F549E50\r\nlast-modified: Wed, 24 May 2023 10:21:22 GMT\r\nserver: ECAcc (ska/F7AD)\r\nvary: Accept-Encoding\r\nx-cache: HIT\r\nx-ms-blob-type: BlockBlob\r\nx-ms-lease-status: unlocked\r\nx-ms-request-id: e6e3cc87-601e-0079-1c72-993a7c000000\r\nx-ms-version: 2009-09-19\r\ncontent-length: 212\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":268,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image\\012- HTML document, ASCII text, with no line terminators","md5":"1318aafc1fb9ded0c623e5b9a557e6df","sha1":"0917cdd7633cd1642b02b2b785416ec7e5106dcc","sha256":"d86660a84daa211b121ec9fe0df83d6b945f61b888384391eabc7d6b4e941dc4","sha512":"a81f1cfdc923effa9e7afe6899bbe1114bbc25b197db0a282d366f409507714ecbf7c5ead82c86f62115953f11b80ea96da244e42bfb063b7e5c23e538395d2a","ssdeep":"","tlshash":"","first_seen":"2023-09-01T07:29:56Z","last_seen":"2025-04-05T02:13:18.209121Z","times_seen":19072,"resource_available":false,"data":null}},"time_used":309,"timings":{"blocked":131,"dns":143,"connect":7,"send":0,"wait":9,"receive":1,"ssl":14},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"osnrafbtea.oneswittla.ru/kswqjl/","fqdn":"osnrafbtea.oneswittla.ru","domain":"oneswittla.ru","tld":"ru"},"ip":{"addr":"104.21.17.6","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2023-11-21T07:43:45.197Z","timestamp":1700552625197,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oneswittla.ru","organization":""},"issuer":{"commonName":"GTS CA 1P5","organization":"Google Trust Services LLC"},"validity":{"start":"Wed, 01 Nov 2023 16:29:11 GMT","end":"Tue, 30 Jan 2024 16:29:10 GMT"},"fingerprint":{"sha1":"42:11:11:15:F6:40:D4:B8:81:C3:A5:90:8E:27:09:05:06:2B:51:36","sha256":"70:20:9A:17:36:07:97:75:00:A2:85:E8:C1:BF:E0:1C:66:91:FA:6C:AE:86:F0:B7:3F:3A:BB:16:1E:F7:2C:B3"}}},"request":{"raw":"GET /kswqjl/ HTTP/1.1\r\nHost: osnrafbtea.oneswittla.ru\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 21 Nov 2023 07:43:43 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=UH8U%2F2bZQgd7Nl%2BpugVVKs%2B25hfslcF%2FmdNwT9Efk4oXkeV77KCiX9HB8lbbjJJBdCfbqkyzSciysaaEjiSgXLZ7SkqTX7ym5If7EVSL1D4igv9cSzTRY04YrRpgeC8OpOKp7D%2BPeoS4VQA%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 82974da7ffc35689-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":115,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document text\\012- HTML document, ASCII text, with no line terminators","md5":"8cb55a284d091db5ee30a030d47e66ac","sha1":"be30e9cbabde529410546578bcf2349a2e251f8b","sha256":"f6333720fa0b5149559a5b45e94c00a9c86743a0be0cbcf58e111cade6de5675","sha512":"7de05c43c4e24f73ed62ec0001ae763201a212473179ef461d6fba5c23f07e0d88df919a98484836169c2e76d962f62289a2e29cbb7bb19195c726e7bcecff66","ssdeep":"","tlshash":"10b092eb1da2c0982c0a6dd06abff9289996a0280e71f955e1e0283888223f40c53b40","first_seen":"2023-11-08T19:12:36Z","last_seen":"2023-11-28T00:09:45Z","times_seen":1471,"resource_available":false,"data":null}},"time_used":510,"timings":{"blocked":72,"dns":63,"connect":1,"send":0,"wait":364,"receive":0,"ssl":8},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Microsoft Outlook","verdict":"phishing","severity":"medium","comment":"","tags":["phishing","microsoft","outlook"],"meta":null}]}},{"url":{"schema":"https","addr":"osnrafbtea.oneswittla.ru/web1/assets/key.png","fqdn":"osnrafbtea.oneswittla.ru","domain":"oneswittla.ru","tld":"ru"},"ip":{"addr":"104.21.17.6","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://osnrafbtea.oneswittla.ru/kswqjl/#alberto@elzaburu.es","date":"2023-11-21T07:43:53.807Z","timestamp":1700552633807,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oneswittla.ru","organization":""},"issuer":{"commonName":"GTS CA 1P5","organization":"Google Trust Services LLC"},"validity":{"start":"Wed, 01 Nov 2023 16:29:11 GMT","end":"Tue, 30 Jan 2024 16:29:10 GMT"},"fingerprint":{"sha1":"42:11:11:15:F6:40:D4:B8:81:C3:A5:90:8E:27:09:05:06:2B:51:36","sha256":"70:20:9A:17:36:07:97:75:00:A2:85:E8:C1:BF:E0:1C:66:91:FA:6C:AE:86:F0:B7:3F:3A:BB:16:1E:F7:2C:B3"}}},"request":{"raw":"GET /web1/assets/key.png HTTP/1.1\r\nHost: osnrafbtea.oneswittla.ru\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://osnrafbtea.oneswittla.ru/kswqjl/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ii90Q1p6c2hjVEhPOGFyTmxTNkp6SVE9PSIsInZhbHVlIjoiZEo4ZGlCRjN3ZDlTNjMrNWZnTzE5Z1Z2UE9UT3N4Mjd4bW44aFhyQVdSNTR6SW4rM0NpSjE4QW94eWc5T09kQkZvRjZzTHJaVVRvMTZ1WTNreWdtNHIwd01BZlhxUWdsdktEWEJkUENlNTlQNEdPS3BWVS84RFdGMnN4N1VDTTgiLCJtYWMiOiIyOTVkMTZhMTg2Zjk4ZTcxZmNlMDZhMTRmYjQ1MzBkYjBlYWNkMzc5NzllNjYyYWY1YTIwMmYwZjg1NGUzYjY0IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImtUQlBseDNRSE1ValRIZnVKOUFaL2c9PSIsInZhbHVlIjoiQ2Rmbm9sNWNWWHBNWmZkeVUyM1dhLytuQk5MSDB5aHBzWW5zMlRYcXE5d0RiZG9SNldtL09GR1JUK2djWWVHNlV4eVF4MDZBZHkrK0gydEUySGVCdGdnb2xBN1cySmVxYVVLb3RKUEhROUxWRVJYY2drNlFkNUEvcndpZVBOZSsiLCJtYWMiOiJkOTRhZGY1OTNmNDJmMjAwMDFkNDU1NzBjMGI0YWJjNDY5NGRlMDJkMmU2OTY4NWZkZTg2YTY1Y2RmNmI5M2RlIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 21 Nov 2023 07:43:52 GMT\r\ncontent-type: image/png\r\ncontent-length: 727\r\nlast-modified: Sun, 19 Mar 2023 15:20:17 GMT\r\netag: \"2d7-5f7425905ae40\"\r\naccess-control-allow-origin: *\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: DENY\r\ncontent-security-policy: frame-ancestors 'none'\r\ncache-control: max-age=14400\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=gg9pyVM%2ByQw8%2FVt%2FOCy91XkklanVG0oT2AC5JmXHwJn6gWnaIz2lty0N7NpRwps1HX5sqbbfL4URiUDVkWY6Hu6EknKQ3JeFySm8oOs8xYYYMO2MGg6pmJDZWs8EA3eYWNk%2FU%2FJI\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: REVALIDATED\r\naccept-ranges: bytes\r\nserver: cloudflare\r\ncf-ray: 82974ddd08160b3d-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":727,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced\\012- data","md5":"839cb0f55c3d2d5c2f740bda95cb2878","sha1":"93f6fa3a2da8b7184d4b5c5f2065872793370c2e","sha256":"40ecb8832f6a9a8aaa0cc6e1287e867a4fca38433d091d86c6cab1f28fbab652","sha512":"ecbca8ab21bf3302c88f933cfd248cff5553afe152a170f554c27fd67bdc3e7d8ce79e202561fd0658e41820681eb90f74e38fd09390c517afb34d2c1b65a096","ssdeep":"","tlshash":"860115c7471c28edd8791de1d9964a07463df431406923122e26937445375899f756f0","first_seen":"2023-07-01T14:36:17Z","last_seen":"2026-05-29T12:54:17.737548Z","times_seen":19537,"resource_available":false,"data":null}},"time_used":404,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":404,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"osnrafbtea.oneswittla.ru//web1socket/socket.io/?type=User\u0026EIO=4\u0026transport=websocket","fqdn":"osnrafbtea.oneswittla.ru","domain":"oneswittla.ru","tld":"ru"},"ip":{"addr":"104.21.17.6","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://osnrafbtea.oneswittla.ru/kswqjl/#alberto@elzaburu.es","date":"2023-11-21T07:43:54.794Z","timestamp":1700552634794,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oneswittla.ru","organization":""},"issuer":{"commonName":"GTS CA 1P5","organization":"Google Trust Services LLC"},"validity":{"start":"Wed, 01 Nov 2023 16:29:11 GMT","end":"Tue, 30 Jan 2024 16:29:10 GMT"},"fingerprint":{"sha1":"42:11:11:15:F6:40:D4:B8:81:C3:A5:90:8E:27:09:05:06:2B:51:36","sha256":"70:20:9A:17:36:07:97:75:00:A2:85:E8:C1:BF:E0:1C:66:91:FA:6C:AE:86:F0:B7:3F:3A:BB:16:1E:F7:2C:B3"}}},"request":{"raw":"GET //web1socket/socket.io/?type=User\u0026EIO=4\u0026transport=websocket HTTP/1.1\r\nHost: osnrafbtea.oneswittla.ru\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://osnrafbtea.oneswittla.ru\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: voSiTOKDsE23ejt31EnOTA==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nCookie: XSRF-TOKEN=eyJpdiI6Ii90Q1p6c2hjVEhPOGFyTmxTNkp6SVE9PSIsInZhbHVlIjoiZEo4ZGlCRjN3ZDlTNjMrNWZnTzE5Z1Z2UE9UT3N4Mjd4bW44aFhyQVdSNTR6SW4rM0NpSjE4QW94eWc5T09kQkZvRjZzTHJaVVRvMTZ1WTNreWdtNHIwd01BZlhxUWdsdktEWEJkUENlNTlQNEdPS3BWVS84RFdGMnN4N1VDTTgiLCJtYWMiOiIyOTVkMTZhMTg2Zjk4ZTcxZmNlMDZhMTRmYjQ1MzBkYjBlYWNkMzc5NzllNjYyYWY1YTIwMmYwZjg1NGUzYjY0IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImtUQlBseDNRSE1ValRIZnVKOUFaL2c9PSIsInZhbHVlIjoiQ2Rmbm9sNWNWWHBNWmZkeVUyM1dhLytuQk5MSDB5aHBzWW5zMlRYcXE5d0RiZG9SNldtL09GR1JUK2djWWVHNlV4eVF4MDZBZHkrK0gydEUySGVCdGdnb2xBN1cySmVxYVVLb3RKUEhROUxWRVJYY2drNlFkNUEvcndpZVBOZSsiLCJtYWMiOiJkOTRhZGY1OTNmNDJmMjAwMDFkNDU1NzBjMGI0YWJjNDY5NGRlMDJkMmU2OTY4NWZkZTg2YTY1Y2RmNmI5M2RlIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nDate: Tue, 21 Nov 2023 07:43:53 GMT\r\nConnection: upgrade\r\nSec-WebSocket-Accept: z2G1cNpBO1gEVQ5sbValYRWFMKY=\r\nUpgrade: websocket\r\nCF-Cache-Status: DYNAMIC\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=CxeD%2B6aKmU2RLwZ8dBtAPHW%2FKeGZ6NVkKslfMUFaADkKrSFf5tyLEFTN8%2BE4o8ASEtrTswN4yV2gLJobyJIhTCHkOl%2BZa3zj5VzukGInbNGjxbZxyOOu1O4D6O5q6j%2BBTNHkWpz2sAl4gdM%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nNEL: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nServer: cloudflare\r\nCF-RAY: 82974de3aa970b49-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-30T03:03:15.73771Z","times_seen":15897774,"resource_available":true,"data":null}},"time_used":784,"timings":{"blocked":0,"dns":14,"connect":14,"send":0,"wait":744,"receive":1,"ssl":25},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"osnrafbtea.oneswittla.ru/web1/info","fqdn":"osnrafbtea.oneswittla.ru","domain":"oneswittla.ru","tld":"ru"},"ip":{"addr":"104.21.17.6","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://osnrafbtea.oneswittla.ru/kswqjl/#alberto@elzaburu.es","date":"2023-11-21T07:43:57.324Z","timestamp":1700552637324,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oneswittla.ru","organization":""},"issuer":{"commonName":"GTS CA 1P5","organization":"Google Trust Services LLC"},"validity":{"start":"Wed, 01 Nov 2023 16:29:11 GMT","end":"Tue, 30 Jan 2024 16:29:10 GMT"},"fingerprint":{"sha1":"42:11:11:15:F6:40:D4:B8:81:C3:A5:90:8E:27:09:05:06:2B:51:36","sha256":"70:20:9A:17:36:07:97:75:00:A2:85:E8:C1:BF:E0:1C:66:91:FA:6C:AE:86:F0:B7:3F:3A:BB:16:1E:F7:2C:B3"}}},"request":{"raw":"POST /web1/info HTTP/1.1\r\nHost: osnrafbtea.oneswittla.ru\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 131\r\nOrigin: https://osnrafbtea.oneswittla.ru\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://osnrafbtea.oneswittla.ru/kswqjl/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ii90Q1p6c2hjVEhPOGFyTmxTNkp6SVE9PSIsInZhbHVlIjoiZEo4ZGlCRjN3ZDlTNjMrNWZnTzE5Z1Z2UE9UT3N4Mjd4bW44aFhyQVdSNTR6SW4rM0NpSjE4QW94eWc5T09kQkZvRjZzTHJaVVRvMTZ1WTNreWdtNHIwd01BZlhxUWdsdktEWEJkUENlNTlQNEdPS3BWVS84RFdGMnN4N1VDTTgiLCJtYWMiOiIyOTVkMTZhMTg2Zjk4ZTcxZmNlMDZhMTRmYjQ1MzBkYjBlYWNkMzc5NzllNjYyYWY1YTIwMmYwZjg1NGUzYjY0IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImtUQlBseDNRSE1ValRIZnVKOUFaL2c9PSIsInZhbHVlIjoiQ2Rmbm9sNWNWWHBNWmZkeVUyM1dhLytuQk5MSDB5aHBzWW5zMlRYcXE5d0RiZG9SNldtL09GR1JUK2djWWVHNlV4eVF4MDZBZHkrK0gydEUySGVCdGdnb2xBN1cySmVxYVVLb3RKUEhROUxWRVJYY2drNlFkNUEvcndpZVBOZSsiLCJtYWMiOiJkOTRhZGY1OTNmNDJmMjAwMDFkNDU1NzBjMGI0YWJjNDY5NGRlMDJkMmU2OTY4NWZkZTg2YTY1Y2RmNmI5M2RlIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 21 Nov 2023 07:43:56 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nx-powered-by: PHP/8.1.10\r\ncache-control: no-cache, private\r\naccess-control-allow-origin: *\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: DENY\r\ncontent-security-policy: frame-ancestors 'none'\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=8iuwpjHs71kMZH6wAn%2BQAWgFOknnOaxyMpz%2B5nt24e0ZbDu5zrxnzZH8KyN9reEIiJBK8AXfVUP0Ej5FUMma1hHMikSCrIaBNkBubK1p1NWKfqlDAx15OnJlrM92gFSz7YKzUtRm\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nset-cookie: XSRF-TOKEN=eyJpdiI6Ik1DMklUM1k3Ri9FQWRISGR1aW9FM3c9PSIsInZhbHVlIjoiZVpWSUpuTmQ4RW5HeDJTZ0RsTFRoa0hjWmRqZUUrd24vU3pJaEVFTG8rbW12d096QWhGaWo0aXJwd3BmcFFyb09uRUhpSWZ3RWR3cEhyTVF3eW5Wa2RFSGRIK2FZTDN6dzE4ZUduc3B6K0tORlhOeXpZblNRU0lTV3ZrNmlkcW4iLCJtYWMiOiI3N2FlYjhiMmUxMzU5ZmNmMDMyMDJiNTllNmVmYjhhYzkwZjVjZjVlYjI4MTA1ZjZkNzg4YmU1YjI0OWI0OWJmIiwidGFnIjoiIn0%3D; expires=Tue, 21-Nov-2023 09:43:55 GMT; Max-Age=7200; path=/; samesite=lax\nlaravel_session=eyJpdiI6IldGL1FFWWxCQlVldGRpeUFoblE0dVE9PSIsInZhbHVlIjoiQWxoUkYva0picG1UMzFmZmhlMkY3eVNTMk9aVzhtSjdZVnd6MW1WVDVocGxOK2Vqa0pDY1ArUzJ1cFpyd1hRM1BxNlRLQVU3WVFVNVFnajRkVElPTjd6czdSTkNLbEhwcU93MDFGd1NkT3ZTenc5Z2pkL1RkNHhLbWIzaVlteDEiLCJtYWMiOiIzMjI5YTZkY2I2OGEyNmE3OTYxNThiYWIxYWVkMDViZTM4OTIyOWUzNmNiN2QxMjMzZGY1OWVmZGM3OTY2YjYyIiwidGFnIjoiIn0%3D; expires=Tue, 21-Nov-2023 09:43:55 GMT; Max-Age=7200; path=/; httponly; samesite=lax\r\nserver: cloudflare\r\ncf-ray: 82974df3585a0b3d-OSL\r\ncontent-encoding: br\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"very short file (no magic)","md5":"c4ca4238a0b923820dcc509a6f75849b","sha1":"356a192b7913b04c54574d18c28d46e6395428ab","sha256":"6b86b273ff34fce19d6b804eff5a3f5747ada4eaa22f1d49c01e52ddb7875b4b","sha512":"4dff4ea340f0a823f15d3f4f01ab62eae0e5da579ccb851f8db9dfe84c58b2b37b89903a740e1ee172da793a6e79d560e5f7f9bd058a12a280433ed6fa46510a","ssdeep":"","tlshash":"c70000000c000000c00000300000000000000000000000000000000000000000000030","first_seen":"2023-03-07T01:10:09Z","last_seen":"2026-05-30T02:38:59.483464Z","times_seen":112659,"resource_available":true,"data":null}},"time_used":626,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":626,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"osnrafbtea.oneswittla.ru/kswqjl/myscr558155.js","fqdn":"osnrafbtea.oneswittla.ru","domain":"oneswittla.ru","tld":"ru"},"ip":{"addr":"104.21.17.6","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://osnrafbtea.oneswittla.ru/kswqjl/#alberto@elzaburu.es","date":"2023-11-21T07:43:45.727Z","timestamp":1700552625727,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oneswittla.ru","organization":""},"issuer":{"commonName":"GTS CA 1P5","organization":"Google Trust Services LLC"},"validity":{"start":"Wed, 01 Nov 2023 16:29:11 GMT","end":"Tue, 30 Jan 2024 16:29:10 GMT"},"fingerprint":{"sha1":"42:11:11:15:F6:40:D4:B8:81:C3:A5:90:8E:27:09:05:06:2B:51:36","sha256":"70:20:9A:17:36:07:97:75:00:A2:85:E8:C1:BF:E0:1C:66:91:FA:6C:AE:86:F0:B7:3F:3A:BB:16:1E:F7:2C:B3"}}},"request":{"raw":"GET /kswqjl/myscr558155.js HTTP/1.1\r\nHost: osnrafbtea.oneswittla.ru\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://osnrafbtea.oneswittla.ru/kswqjl/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 21 Nov 2023 07:43:44 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 02 Nov 2023 14:13:15 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=Cq0%2FKQ7U%2FQjWT6cOaHwdyJ4VGy9mH6tLH4eFvaQYQG4dBv6hsI6EnfTpDDqdr9Lg8QtiJSgwzjTwd6iBMrJIN4gf40FqxvIma33E9B48DTLTH7OY40l49hUyHpUqqTAV1adq6YIE5LWfRKo%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 82974daadc690b3d-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":27865,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text","md5":"5e599bb61a003dee7c1d98c60d7b58f2","sha1":"6531b529c505015f7baf8f6cc71da6aa08d467ce","sha256":"2cf2c32a1e9c9aab13a8f042dd989be980cbf14c3e7bce0a8e177cc5095d17f4","sha512":"96a332b81c05e082ffb955edb98c032918774ef7b79c1a49c549cfb34dffbb9ad9445f14ec0c4c2dec9b86ca0f1c2e1c0cad63ab7518edbccbe674dde93c2afe","ssdeep":"384:b3r54VKvlTxQQIkqZ/Ya39g4ZBBXa/8iW72sJFW32F5I2FMB2hPSL:b754VKo39HxQGJ8tlVL","tlshash":"a1c2db180e04efb092bf078385919e885924eb9bfbd8ec5d41935ad3f6193a7c6d7c48","first_seen":"2023-11-08T19:12:35Z","last_seen":"2023-11-28T00:09:45Z","times_seen":1519,"resource_available":true,"data":null}},"time_used":367,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":365,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"osnrafbtea.oneswittla.ru/web1/assets/css/pages.min.css?cb=1700552627311","fqdn":"osnrafbtea.oneswittla.ru","domain":"oneswittla.ru","tld":"ru"},"ip":{"addr":"104.21.17.6","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://osnrafbtea.oneswittla.ru/kswqjl/#alberto@elzaburu.es","date":"2023-11-21T07:43:47.334Z","timestamp":1700552627334,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oneswittla.ru","organization":""},"issuer":{"commonName":"GTS CA 1P5","organization":"Google Trust Services LLC"},"validity":{"start":"Wed, 01 Nov 2023 16:29:11 GMT","end":"Tue, 30 Jan 2024 16:29:10 GMT"},"fingerprint":{"sha1":"42:11:11:15:F6:40:D4:B8:81:C3:A5:90:8E:27:09:05:06:2B:51:36","sha256":"70:20:9A:17:36:07:97:75:00:A2:85:E8:C1:BF:E0:1C:66:91:FA:6C:AE:86:F0:B7:3F:3A:BB:16:1E:F7:2C:B3"}}},"request":{"raw":"GET /web1/assets/css/pages.min.css?cb=1700552627311 HTTP/1.1\r\nHost: osnrafbtea.oneswittla.ru\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://osnrafbtea.oneswittla.ru/kswqjl/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 21 Nov 2023 07:43:46 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 01 Nov 2023 13:29:30 GMT\r\netag: W/\"4276-6091742db8c68\"\r\naccess-control-allow-origin: *\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: DENY\r\ncontent-security-policy: frame-ancestors 'none'\r\ncache-control: max-age=14400\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=hXE3Uza9vdKersQmniBz9Yp%2FjDWm%2FZkpzq7xJhDoFhCO9O9waHhFqnM2t4gSx8h87zM8AvR%2FqItN40oR2XfFOw4dx4Y0D9GoL7HARYc%2B6n8tiUdwBXVKbNrsK9LzcikCix1XIPXP\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\ncf-ray: 82974db4dfab0b3d-OSL\r\ncontent-encoding: br\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":17014,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (17014), with no line terminators","md5":"4d38e2ffc538c11f0dca9cb2ad6ca08a","sha1":"400ca5c484a88f9a91a1d1439e5f51a621ad3eaa","sha256":"6b14e6f4239ef85c9180a099263a041df2b82bd65a245e72cca365cbd5e88fa8","sha512":"2c1c64502508146e23f45c2d398db7a2283fdf0ee7f3757565e648a2e08cbbfbde2c32dd3ee4c764ea0c8162f0eabc4e456e2338f4e36aaf7a8e1afdaa4ff74b","ssdeep":"192:S3PiHSaXZfdY8xbXUfCkDAm0vHXIYECacgAx8K1MbJK2EKPMq/vHID/gPnqBvMmU:mtaVdY8xbXn54YE80tk0Sgfn","tlshash":"6672aaa1a2103229e177c13721d2fac922355652f57b5eb9bc7671f4cf891c32b3354a","first_seen":"2023-11-01T19:35:47Z","last_seen":"2024-08-20T21:28:38.768471Z","times_seen":25049,"resource_available":false,"data":null}},"time_used":959,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":959,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"osnrafbtea.oneswittla.ru/web1/assets/js/pages-head-top-web.min.js?cb=1700552626312","fqdn":"osnrafbtea.oneswittla.ru","domain":"oneswittla.ru","tld":"ru"},"ip":{"addr":"104.21.17.6","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://osnrafbtea.oneswittla.ru/kswqjl/#alberto@elzaburu.es","date":"2023-11-21T07:43:46.314Z","timestamp":1700552626314,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oneswittla.ru","organization":""},"issuer":{"commonName":"GTS CA 1P5","organization":"Google Trust Services LLC"},"validity":{"start":"Wed, 01 Nov 2023 16:29:11 GMT","end":"Tue, 30 Jan 2024 16:29:10 GMT"},"fingerprint":{"sha1":"42:11:11:15:F6:40:D4:B8:81:C3:A5:90:8E:27:09:05:06:2B:51:36","sha256":"70:20:9A:17:36:07:97:75:00:A2:85:E8:C1:BF:E0:1C:66:91:FA:6C:AE:86:F0:B7:3F:3A:BB:16:1E:F7:2C:B3"}}},"request":{"raw":"GET /web1/assets/js/pages-head-top-web.min.js?cb=1700552626312 HTTP/1.1\r\nHost: osnrafbtea.oneswittla.ru\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://osnrafbtea.oneswittla.ru/kswqjl/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 21 Nov 2023 07:43:45 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 21 Oct 2023 21:35:46 GMT\r\netag: W/\"95a-60840c594e1e3\"\r\naccess-control-allow-origin: *\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: DENY\r\ncontent-security-policy: frame-ancestors 'none'\r\ncache-control: max-age=14400\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=fgrSDyIyRaSGsOTjhPzFl4bOir%2Fbe%2BjTXGjsCWTarSzieX9rBl5v%2BTYlVBW5UFNvlSbw7T55Z5OpH%2FQT0wQS79QGiNvNkMocD1zs%2BOUxkzaHdFM%2BRdOYRkECaMgIYj0aIYoxijr7\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\ncf-ray: 82974dae8d8b0b3d-OSL\r\ncontent-encoding: br\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2394,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (2572), with no line terminators","md5":"207127ad0286515cd05c7197ca4839af","sha1":"da5130cf88e4a758b49ce84f1ff0483ee26f29b9","sha256":"23794b050f43c5f461200b5c71ea38f75a03fb964f10b91f23ae903fc16894fb","sha512":"b5db2b88a04aaee107c173207de44b56cf53b412ad458248a78a2681183542962be7f41965cd92e287d71ff0c72708192f28d01fc535460d42f40d3be76a460e","ssdeep":"","tlshash":"2351ca093055ba184d6e764ab071aa7cbcc5733b2511a420c0dfacacc4f6fd62869fb7","first_seen":"2023-10-23T01:34:22Z","last_seen":"2023-11-29T20:08:08Z","times_seen":3139,"resource_available":false,"data":null}},"time_used":993,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":993,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"osnrafbtea.oneswittla.ru/web1/assets/js/pages.min.js?cb=1700552627311","fqdn":"osnrafbtea.oneswittla.ru","domain":"oneswittla.ru","tld":"ru"},"ip":{"addr":"104.21.17.6","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://osnrafbtea.oneswittla.ru/kswqjl/#alberto@elzaburu.es","date":"2023-11-21T07:43:53.837Z","timestamp":1700552633837,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oneswittla.ru","organization":""},"issuer":{"commonName":"GTS CA 1P5","organization":"Google Trust Services LLC"},"validity":{"start":"Wed, 01 Nov 2023 16:29:11 GMT","end":"Tue, 30 Jan 2024 16:29:10 GMT"},"fingerprint":{"sha1":"42:11:11:15:F6:40:D4:B8:81:C3:A5:90:8E:27:09:05:06:2B:51:36","sha256":"70:20:9A:17:36:07:97:75:00:A2:85:E8:C1:BF:E0:1C:66:91:FA:6C:AE:86:F0:B7:3F:3A:BB:16:1E:F7:2C:B3"}}},"request":{"raw":"GET /web1/assets/js/pages.min.js?cb=1700552627311 HTTP/1.1\r\nHost: osnrafbtea.oneswittla.ru\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://osnrafbtea.oneswittla.ru/kswqjl/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ii90Q1p6c2hjVEhPOGFyTmxTNkp6SVE9PSIsInZhbHVlIjoiZEo4ZGlCRjN3ZDlTNjMrNWZnTzE5Z1Z2UE9UT3N4Mjd4bW44aFhyQVdSNTR6SW4rM0NpSjE4QW94eWc5T09kQkZvRjZzTHJaVVRvMTZ1WTNreWdtNHIwd01BZlhxUWdsdktEWEJkUENlNTlQNEdPS3BWVS84RFdGMnN4N1VDTTgiLCJtYWMiOiIyOTVkMTZhMTg2Zjk4ZTcxZmNlMDZhMTRmYjQ1MzBkYjBlYWNkMzc5NzllNjYyYWY1YTIwMmYwZjg1NGUzYjY0IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImtUQlBseDNRSE1ValRIZnVKOUFaL2c9PSIsInZhbHVlIjoiQ2Rmbm9sNWNWWHBNWmZkeVUyM1dhLytuQk5MSDB5aHBzWW5zMlRYcXE5d0RiZG9SNldtL09GR1JUK2djWWVHNlV4eVF4MDZBZHkrK0gydEUySGVCdGdnb2xBN1cySmVxYVVLb3RKUEhROUxWRVJYY2drNlFkNUEvcndpZVBOZSsiLCJtYWMiOiJkOTRhZGY1OTNmNDJmMjAwMDFkNDU1NzBjMGI0YWJjNDY5NGRlMDJkMmU2OTY4NWZkZTg2YTY1Y2RmNmI5M2RlIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 21 Nov 2023 07:43:52 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 01 Nov 2023 20:01:40 GMT\r\netag: W/\"168df-6091cbd4f670c\"\r\naccess-control-allow-origin: *\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: DENY\r\ncontent-security-policy: frame-ancestors 'none'\r\ncache-control: max-age=14400\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=lZUoIdNNqu2W9Ql3XpSRF76L5jI%2BTEtE7vIbBzM1kHzjzg8tknu3erwPFT%2FCPfN9iW35DLtB8SV4EGPpTZUTv9uyLhPIWlDwgR3YRUpzctzhcSS%2BZ5l3v8eIixvVb23lPL1Vx3Dw\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\ncf-ray: 82974ddd583d0b3d-OSL\r\ncontent-encoding: br\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":92383,"size_decoded":0,"mime_type":"application/javascript","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-30T03:03:15.73771Z","times_seen":15897774,"resource_available":true,"data":null}},"time_used":962,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":962,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}