www.pinkoi.com/proxy?url=//cetrit.co/wp-includes/ID3/ink/ZMdgZMdg/ZMdgZMdg/ZmF1c3RpbmEubWFya2F1c2thaXRlQHlhcmEuY29t//cetrit.co/wp-includes/ID3/ink/ZMdgZMdg/ZMdgZMdg/ZmF1c3RpbmEubWFya2F1c2thaXRlQHlhcmEuY29t//cetrit.co/wp-includes/ID3/ink/ZMdgZMdg/ZMdgZMdg/ZmF1c3RpbmEubWFya2F1c2thaXRlQHlhcmEuY29t//cetrit.co/wp-includes/ID3/ink/ZMdgZMdg/ZMdgZMdg/ZmF1c3RpbmEubWFya2F1c2thaXRlQHlhcmEuY29t//cetrit.co/wp-includes/ID3/ink/ZMdgZMdg/ZMdgZMdg/ZmF1c3RpbmEubWFya2F1c2thaXRlQHlhcmEuY29t//cetrit.co/wp-includes/ID3/ink/ZMdgZMdg/ZMdgZMdg/ZmF1c3RpbmEubWFya2F1c2thaXRlQHlhcmEuY29t//cetrit.co/wp-includes/ID3/ink/ZMdgZMdg/ZMdgZMdg/ZmF1c3RpbmEubWFya2F1c2thaXRlQHlhcmEuY29t//cetrit.co/wp-includes/ID3/ink/ZMdgZMdg/ZMdgZMdg/ZmF1c3RpbmEubWFya2F1c2thaXRlQHlhcmEuY29t
52.76.207.25 0 B URL www.pinkoi.com/proxy?url=//cetrit.co/wp-includes/ID3/ink/ZMdgZMdg/ZMdgZMdg/ZmF1c3RpbmEubWFya2F1c2thaXRlQHlhcmEuY29t//cetrit.co/wp-includes/ID3/ink/ZMdgZMdg/ZMdgZMdg/ZmF1c3RpbmEubWFya2F1c2thaXRlQHlhcmEuY29t//cetrit.co/wp-includes/ID3/ink/ZMdgZMdg/ZMdgZMdg/ZmF1c3RpbmEubWFya2F1c2thaXRlQHlhcmEuY29t//cetrit.co/wp-includes/ID3/ink/ZMdgZMdg/ZMdgZMdg/ZmF1c3RpbmEubWFya2F1c2thaXRlQHlhcmEuY29t//cetrit.co/wp-includes/ID3/ink/ZMdgZMdg/ZMdgZMdg/ZmF1c3RpbmEubWFya2F1c2thaXRlQHlhcmEuY29t//cetrit.co/wp-includes/ID3/ink/ZMdgZMdg/ZMdgZMdg/ZmF1c3RpbmEubWFya2F1c2thaXRlQHlhcmEuY29t//cetrit.co/wp-includes/ID3/ink/ZMdgZMdg/ZMdgZMdg/ZmF1c3RpbmEubWFya2F1c2thaXRlQHlhcmEuY29t//cetrit.co/wp-includes/ID3/ink/ZMdgZMdg/ZMdgZMdg/ZmF1c3RpbmEubWFya2F1c2thaXRlQHlhcmEuY29t
IP 52.76.207.25:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /proxy?url=//cetrit.co/wp-includes/ID3/ink/ZMdgZMdg/ZMdgZMdg/ZmF1c3RpbmEubWFya2F1c2thaXRlQHlhcmEuY29t//cetrit.co/wp-includes/ID3/ink/ZMdgZMdg/ZMdgZMdg/ZmF1c3RpbmEubWFya2F1c2thaXRlQHlhcmEuY29t//cetrit.co/wp-includes/ID3/ink/ZMdgZMdg/ZMdgZMdg/ZmF1c3RpbmEubWFya2F1c2thaXRlQHlhcmEuY29t//cetrit.co/wp-includes/ID3/ink/ZMdgZMdg/ZMdgZMdg/ZmF1c3RpbmEubWFya2F1c2thaXRlQHlhcmEuY29t//cetrit.co/wp-includes/ID3/ink/ZMdgZMdg/ZMdgZMdg/ZmF1c3RpbmEubWFya2F1c2thaXRlQHlhcmEuY29t//cetrit.co/wp-includes/ID3/ink/ZMdgZMdg/ZMdgZMdg/ZmF1c3RpbmEubWFya2F1c2thaXRlQHlhcmEuY29t//cetrit.co/wp-includes/ID3/ink/ZMdgZMdg/ZMdgZMdg/ZmF1c3RpbmEubWFya2F1c2thaXRlQHlhcmEuY29t//cetrit.co/wp-includes/ID3/ink/ZMdgZMdg/ZMdgZMdg/ZmF1c3RpbmEubWFya2F1c2thaXRlQHlhcmEuY29t HTTP/1.1
Host: www.pinkoi.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
date: Mon, 27 Nov 2023 14:36:58 GMT
content-type: text/html; charset=utf-8
content-length: 0
content-language: zh_TW
content-security-policy: frame-ancestors *.pinkoi.com
location: //cetrit.co/wp-includes/ID3/ink/ZMdgZMdg/ZMdgZMdg/ZmF1c3RpbmEubWFya2F1c2thaXRlQHlhcmEuY29t//cetrit.co/wp-includes/ID3/ink/ZMdgZMdg/ZMdgZMdg/ZmF1c3RpbmEubWFya2F1c2thaXRlQHlhcmEuY29t//cetrit.co/wp-includes/ID3/ink/ZMdgZMdg/ZMdgZMdg/ZmF1c3RpbmEubWFya2F1c2thaXRlQHlhcmEuY29t//cetrit.co/wp-includes/ID3/ink/ZMdgZMdg/ZMdgZMdg/ZmF1c3RpbmEubWFya2F1c2thaXRlQHlhcmEuY29t//cetrit.co/wp-includes/ID3/ink/ZMdgZMdg/ZMdgZMdg/ZmF1c3RpbmEubWFya2F1c2thaXRlQHlhcmEuY29t//cetrit.co/wp-includes/ID3/ink/ZMdgZMdg/ZMdgZMdg/ZmF1c3RpbmEubWFya2F1c2thaXRlQHlhcmEuY29t//cetrit.co/wp-includes/ID3/ink/ZMdgZMdg/ZMdgZMdg/ZmF1c3RpbmEubWFya2F1c2thaXRlQHlhcmEuY29t//cetrit.co/wp-includes/ID3/ink/ZMdgZMdg/ZMdgZMdg/ZmF1c3RpbmEubWFya2F1c2thaXRlQHlhcmEuY29t
server: nginx
set-cookie: slocale=1; Domain=.pinkoi.com; expires=Tue, 26 Nov 2024 14:36:58 GMT; Max-Age=31536000; Path=/
ad=0; Domain=.pinkoi.com; expires=Mon, 27 Nov 2023 15:06:58 GMT; Max-Age=1800; Path=/
lang=zh_TW; Domain=.pinkoi.com; expires=Tue, 26 Nov 2024 14:36:58 GMT; Max-Age=31536000; Path=/
geo=NO; Domain=.pinkoi.com; expires=Mon, 27 Nov 2023 15:06:58 GMT; Max-Age=1800; Path=/
ci=03; Domain=.pinkoi.com; expires=Mon, 27 Nov 2023 15:06:58 GMT; Max-Age=1800; Path=/
tz="Europe/Oslo"; Domain=.pinkoi.com; expires=Mon, 27 Nov 2023 15:06:58 GMT; Max-Age=1800; Path=/
c=USD; Domain=.pinkoi.com; expires=Mon, 27 Nov 2023 15:06:58 GMT; Max-Age=1800; Path=/
country_code=NO; Domain=.pinkoi.com; expires=Mon, 27 Nov 2023 15:06:58 GMT; Max-Age=1800; Path=/
b=20231127yZW485fQik; Domain=.pinkoi.com; expires=Thu, 24 Nov 2033 14:36:58 GMT; Max-Age=315360000; Path=/; SameSite=none; Secure
vary: Accept-Language, Cookie
X-Firefox-Spdy: h2
ajax.googleapis.com/ajax/libs/jquery/3.6.0/jquery.min.js
142.250.74.74200 OK 31 kB URL GET HTTP/2 ajax.googleapis.com/ajax/libs/jquery/3.6.0/jquery.min.js
IP 142.250.74.74:443
Requested by https://agnieszkawesecka.pl/online-microsoft_com-48736743377809387436457-microsoft_8476365435473648347765347346837493467354634576726326362456354653263726372635625327637_%D8%AD%D8%B5%20%D8%AD%D8%A8%D9%88%D8%A8%20%D8%A7%D9%84%D8%A3%D8%B1%D8%B2%20%D8%A7%D9%84%D8%AD%D8%A7%D9%85%D8%B6%D8%A9-rr%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7F%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7.html?s=faustina.markauskaite@yara.com
Certificate IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
FingerprintCC:96:E0:52:E0:9B:EA:A9:A0:F8:88:9A:90:20:11:47:61:00:3C:42
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type ASCII text, with very long lines (65447)
Hash 8fb8fee4fcc3cc86ff6c724154c49c42
b82d238d4e31fdf618bae8ac11a6c812c03dd0d4
ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e
GET /ajax/libs/jquery/3.6.0/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://agnieszkawesecka.pl/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 31017
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sun, 26 Nov 2023 06:31:24 GMT
expires: Mon, 25 Nov 2024 06:31:24 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
last-modified: Wed, 10 Mar 2021 14:28:09 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
age: 115535
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/i/82cb1b495bb0b509/1701095820515/Mb5rXN5mI3hpRCK
104.17.2.184 564 B URL challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/i/82cb1b495bb0b509/1701095820515/Mb5rXN5mI3hpRCK
IP 104.17.2.184:0
File type PNG image data, 28 x 3, 8-bit/color RGB, non-interlaced\012- data
Hash 0ca389d7a71f48990815e54fda704460
2b1128ba659a7d83659e30a4f201149e889a9638
ef8693a56660f6e61481d789cd13a0664db0fd6f27d135b7b6d8c2d1b35acece
GET /cdn-cgi/challenge-platform/h/g/i/82cb1b495bb0b509/1701095820515/Mb5rXN5mI3hpRCK HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/f1w4g/0x4AAAAAAANitG7_q4LMVK7c/auto/normal
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 27 Nov 2023 14:37:01 GMT
content-type: image/png
server: cloudflare
cf-ray: 82cb1b523f86b509-OSL
alt-svc: h3=":443"; ma=86400
agnieszkawesecka.pl/online-microsoft_com-48736743377809387436457-microsoft_8476365435473648347765347346837493467354634576726326362456354653263726372635625327637_%D8%AD%D8%B5%20%D8%AD%D8%A8%D9%88%D8%A8%20%D8%A7%D9%84%D8%A3%D8%B1%D8%B2%20%D8%A7%D9%84%D8%AD%D8%A7%D9%85%D8%B6%D8%A9-rr%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7F%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7.html?s=faustina.markauskaite@yara.com
188.114.96.1200 OK 10 kB URL User Request GET HTTP/2 agnieszkawesecka.pl/online-microsoft_com-48736743377809387436457-microsoft_8476365435473648347765347346837493467354634576726326362456354653263726372635625327637_%D8%AD%D8%B5%20%D8%AD%D8%A8%D9%88%D8%A8%20%D8%A7%D9%84%D8%A3%D8%B1%D8%B2%20%D8%A7%D9%84%D8%AD%D8%A7%D9%85%D8%B6%D8%A9-rr%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7F%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7.html?s=faustina.markauskaite@yara.com
IP 188.114.96.1:443
Certificate IssuerLet's Encrypt
Subjectagnieszkawesecka.pl
FingerprintED:DD:EC:0A:35:7D:02:85:E0:91:DD:95:17:23:1F:83:E6:17:49:00
ValidityThu, 23 Nov 2023 03:13:02 GMT - Wed, 21 Feb 2024 03:13:01 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (362), with CRLF line terminators
Hash b0e65d663afe6d285dbb6e1bf8deabfb
077fa771d3771a083b88b211e2ac683b2df62fca
84a994c10b23e7a93ddf79cbcb5677c5eec63635922cca63d2bb39c239da3073
Analyzer Verdict Alert urlquery phishing Phishing - Microsoft Outlook
GET /online-microsoft_com-48736743377809387436457-microsoft_8476365435473648347765347346837493467354634576726326362456354653263726372635625327637_%D8%AD%D8%B5%20%D8%AD%D8%A8%D9%88%D8%A8%20%D8%A7%D9%84%D8%A3%D8%B1%D8%B2%20%D8%A7%D9%84%D8%AD%D8%A7%D9%85%D8%B6%D8%A9-rr%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7F%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7.html?s=faustina.markauskaite@yara.com HTTP/1.1
Host: agnieszkawesecka.pl
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 27 Nov 2023 14:36:59 GMT
content-type: text/html
last-modified: Thu, 23 Nov 2023 04:12:01 GMT
vary: Accept-Encoding
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=zrzVhqhGYDkE%2BkptSYDA37rF%2BmXpMoEtMxPtn%2Baf8lz783YWvLPXpX%2BKuefnntDASp5PQTC2qz7Xi%2B5%2FECZ2bZxj7TjkVlqKud%2F9DgbgLllQhhM9bSAYKdhtxk0j77eeuzrxLToG"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 82cb1b45e987b4eb-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
cdnjs.cloudflare.com/ajax/libs/jquery/3.6.0/jquery.min.js
104.17.24.14200 OK 28 kB URL GET HTTP/3 cdnjs.cloudflare.com/ajax/libs/jquery/3.6.0/jquery.min.js
IP 104.17.24.14:443
Requested by https://agnieszkawesecka.pl/online-microsoft_com-48736743377809387436457-microsoft_8476365435473648347765347346837493467354634576726326362456354653263726372635625327637_%D8%AD%D8%B5%20%D8%AD%D8%A8%D9%88%D8%A8%20%D8%A7%D9%84%D8%A3%D8%B1%D8%B2%20%D8%A7%D9%84%D8%AD%D8%A7%D9%85%D8%B6%D8%A9-rr%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7F%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7.html?s=faustina.markauskaite@yara.com
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint7A:EA:B9:09:71:70:6C:87:C9:D3:82:74:8A:7B:B4:60:E5:40:2D:8D
ValidityMon, 03 Jul 2023 00:00:00 GMT - Tue, 02 Jul 2024 23:59:59 GMT
File type ASCII text, with very long lines (65447)
Hash 8fb8fee4fcc3cc86ff6c724154c49c42
b82d238d4e31fdf618bae8ac11a6c812c03dd0d4
ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e
GET /ajax/libs/jquery/3.6.0/jquery.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://agnieszkawesecka.pl/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 27 Nov 2023 14:37:04 GMT
content-type: application/javascript; charset=utf-8
content-length: 27938
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "603e8adc-15d9d"
last-modified: Tue, 02 Mar 2021 18:58:36 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 203522
expires: Sat, 16 Nov 2024 14:37:04 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=sgjpnR0TWq6TTJ5V%2FOnRs1PgV0%2FPyujUmxYB%2BxZ5AYe4Dup9tOd%2FpKXkrCpTO1VI77%2F4jBm1hP7G7f6xsjIY4RVs25ban5UEv6H2%2FRicDOMJfNvD5Yt9pzfbSFNQ1x2BVn1YEG2m"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 82cb1b68fdc3b51b-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
segy.xyz/api/validate
152.89.246.205204 No Content 0 B IP 152.89.246.205:443
Requested by https://agnieszkawesecka.pl/online-microsoft_com-48736743377809387436457-microsoft_8476365435473648347765347346837493467354634576726326362456354653263726372635625327637_%D8%AD%D8%B5%20%D8%AD%D8%A8%D9%88%D8%A8%20%D8%A7%D9%84%D8%A3%D8%B1%D8%B2%20%D8%A7%D9%84%D8%AD%D8%A7%D9%85%D8%B6%D8%A9-rr%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7F%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7.html?s=faustina.markauskaite@yara.com
Certificate IssuerLet's Encrypt
Subjectsegy.xyz
Fingerprint6F:DF:90:EC:AE:D6:E0:13:C7:5C:47:EA:1A:C8:4F:0D:C0:F5:86:74
ValiditySun, 05 Nov 2023 07:19:49 GMT - Sat, 03 Feb 2024 07:19:48 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /api/validate HTTP/1.1
Host: segy.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://agnieszkawesecka.pl/
Origin: https://agnieszkawesecka.pl
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 204 No Content
Server: nginx/1.18.0 (Ubuntu)
Content-Type: text/html; charset=UTF-8
Connection: keep-alive
Cache-Control: no-cache, private
Date: Mon, 27 Nov 2023 14:37:07 GMT
Access-Control-Allow-Origin: *
Vary: Access-Control-Request-Method, Access-Control-Request-Headers
Access-Control-Allow-Methods: POST
Access-Control-Allow-Headers: content-type
Access-Control-Max-Age: 0
segy.xyz/api/validate
152.89.246.205204 No Content 16 kB IP 152.89.246.205:443
Requested by https://agnieszkawesecka.pl/online-microsoft_com-48736743377809387436457-microsoft_8476365435473648347765347346837493467354634576726326362456354653263726372635625327637_%D8%AD%D8%B5%20%D8%AD%D8%A8%D9%88%D8%A8%20%D8%A7%D9%84%D8%A3%D8%B1%D8%B2%20%D8%A7%D9%84%D8%AD%D8%A7%D9%85%D8%B6%D8%A9-rr%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7F%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7.html?s=faustina.markauskaite@yara.com
Certificate IssuerLet's Encrypt
Subjectsegy.xyz
Fingerprint6F:DF:90:EC:AE:D6:E0:13:C7:5C:47:EA:1A:C8:4F:0D:C0:F5:86:74
ValiditySun, 05 Nov 2023 07:19:49 GMT - Sat, 03 Feb 2024 07:19:48 GMT
File type JSON data\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (15802), with no line terminators
Hash e1484ad34b42d021451c1672cbbf78a8
a369f2065201c5236eb46a078bf5fe2953603ac6
413a052fc606174aa623561a9581295dfbdcd5341f6f7e0f0b43a82fb704bfb0
POST /api/validate HTTP/1.1
Host: segy.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 87
Origin: https://agnieszkawesecka.pl
DNT: 1
Connection: keep-alive
Referer: https://agnieszkawesecka.pl/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Content-Type: application/json
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: no-cache, private
Date: Mon, 27 Nov 2023 14:37:08 GMT
X-RateLimit-Limit: 60
X-RateLimit-Remaining: 54
Access-Control-Allow-Origin: *
cdnjs.cloudflare.com/ajax/libs/jquery/3.6.0/jquery.min.js
104.17.24.14200 OK 28 kB URL GET HTTP/3 cdnjs.cloudflare.com/ajax/libs/jquery/3.6.0/jquery.min.js
IP 104.17.24.14:443
Requested by https://agnieszkawesecka.pl/online-microsoft_com-48736743377809387436457-microsoft_8476365435473648347765347346837493467354634576726326362456354653263726372635625327637_%D8%AD%D8%B5%20%D8%AD%D8%A8%D9%88%D8%A8%20%D8%A7%D9%84%D8%A3%D8%B1%D8%B2%20%D8%A7%D9%84%D8%AD%D8%A7%D9%85%D8%B6%D8%A9-rr%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7F%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7.html?s=faustina.markauskaite@yara.com
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint7A:EA:B9:09:71:70:6C:87:C9:D3:82:74:8A:7B:B4:60:E5:40:2D:8D
ValidityMon, 03 Jul 2023 00:00:00 GMT - Tue, 02 Jul 2024 23:59:59 GMT
File type ASCII text, with very long lines (65447)
Hash 8fb8fee4fcc3cc86ff6c724154c49c42
b82d238d4e31fdf618bae8ac11a6c812c03dd0d4
ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e
GET /ajax/libs/jquery/3.6.0/jquery.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://agnieszkawesecka.pl/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 27 Nov 2023 14:37:09 GMT
content-type: application/javascript; charset=utf-8
content-length: 27938
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "603e8adc-15d9d"
last-modified: Tue, 02 Mar 2021 18:58:36 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 203527
expires: Sat, 16 Nov 2024 14:37:09 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=VWVTyh4e%2FfoL4hUW5vJhshbyGfuWLo8LOEKPXBkdgSg79VvzPHHn%2BllLZm2qq1LxGTUfnEHevVRI4BaMDX%2BaIdua1uST6Yad9qRD9vTBmvAbFByZQK1PBiHgSh0beZi7v9S9LjLi"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 82cb1b8769cbb523-OSL
alt-svc: h3=":443"; ma=86400
aadcdn.msauth.net/ests/2.1/content/cdnbundles/converged.v2.login.min_ziytf8dzt9eg1s6-ohhleg2.css
13.107.213.53200 OK 20 kB URL GET HTTP/2 aadcdn.msauth.net/ests/2.1/content/cdnbundles/converged.v2.login.min_ziytf8dzt9eg1s6-ohhleg2.css
IP 13.107.213.53:443
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://agnieszkawesecka.pl/online-microsoft_com-48736743377809387436457-microsoft_8476365435473648347765347346837493467354634576726326362456354653263726372635625327637_%D8%AD%D8%B5%20%D8%AD%D8%A8%D9%88%D8%A8%20%D8%A7%D9%84%D8%A3%D8%B1%D8%B2%20%D8%A7%D9%84%D8%AD%D8%A7%D9%85%D8%B6%D8%A9-rr%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7F%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7.html?s=faustina.markauskaite@yara.com
Certificate IssuerDigiCert Inc
Subjectaadcdn.msauth.net
Fingerprint88:95:0C:FA:9D:33:AA:BF:A4:FD:9D:84:A6:E8:02:06:58:50:AD:8C
ValiditySun, 29 Oct 2023 00:00:00 GMT - Tue, 29 Oct 2024 23:59:59 GMT
File type ASCII text, with very long lines (61177)
Hash ce26137fc0d9b7d7a0d52ebe3a186512
b9d7fb3fe7d08f46c2d1153bb47b13809375c663
1304c5090f063c677a5b3720fe7b97ef4d9ea102e2bdd837ce399df6057fe385
GET /ests/2.1/content/cdnbundles/converged.v2.login.min_ziytf8dzt9eg1s6-ohhleg2.css HTTP/1.1
Host: aadcdn.msauth.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://agnieszkawesecka.pl
DNT: 1
Connection: keep-alive
Referer: https://agnieszkawesecka.pl/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
cache-control: public, max-age=31536000
content-length: 19953
content-type: text/css
content-encoding: gzip
content-md5: xg2DER+s52egaL6bUXi4hw==
last-modified: Mon, 18 Apr 2022 21:18:26 GMT
etag: 0x8DA2180FA29F5AF
x-cache: TCP_HIT
x-ms-request-id: df0c21fe-e01e-0021-5f94-1e8d42000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
access-control-allow-origin: *
x-azure-ref-originshield: 0LbJgZQAAAAAxWb2J3o6iSLh6iNS2SdrUQU1TMDRFREdFMTkyMgAzOWExMmY3ZS04OTlmLTQ2Y2YtYTZkMC0yNGJiYmEyN2Q5NTY=
x-azure-ref: 0lalkZQAAAABw7ciV5dv3TLKwwtaMXoqzU1ZHMjBFREdFMDUwNgAzOWExMmY3ZS04OTlmLTQ2Y2YtYTZkMC0yNGJiYmEyN2Q5NTY=
date: Mon, 27 Nov 2023 14:37:09 GMT
X-Firefox-Spdy: h2
aadcdn.msauthimages.net/c1c6b6c8-5pehlxr4v81ciafrbapmi9datmgee3rrmioswekxqgs/logintenantbranding/0/bannerlogo?ts=636095438067013877
152.199.23.72200 OK 4.2 kB URL GET HTTP/2 aadcdn.msauthimages.net/c1c6b6c8-5pehlxr4v81ciafrbapmi9datmgee3rrmioswekxqgs/logintenantbranding/0/bannerlogo?ts=636095438067013877
IP 152.199.23.72:443
Requested by https://agnieszkawesecka.pl/online-microsoft_com-48736743377809387436457-microsoft_8476365435473648347765347346837493467354634576726326362456354653263726372635625327637_%D8%AD%D8%B5%20%D8%AD%D8%A8%D9%88%D8%A8%20%D8%A7%D9%84%D8%A3%D8%B1%D8%B2%20%D8%A7%D9%84%D8%AD%D8%A7%D9%85%D8%B6%D8%A9-rr%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7F%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7.html?s=faustina.markauskaite@yara.com
Certificate IssuerMicrosoft Corporation
Subjectaadcdn.msauthimages.net
Fingerprint6B:EB:AC:06:FC:06:82:11:17:1C:6B:72:7D:B5:95:2D:CF:E7:A3:5D
ValidityWed, 08 Mar 2023 11:16:34 GMT - Sat, 02 Mar 2024 11:16:34 GMT
File type PNG image data, 200 x 50, 8-bit/color RGBA, non-interlaced\012- data
Hash b084724ca5118f70e550226f5834f392
8cc82e3b18acc5aaf6b83ba793702a1f13102c9d
bd0e96d63b16401edb81097b627f61c7b109a171ab3ac9eb0b314739c1fa941b
GET /c1c6b6c8-5pehlxr4v81ciafrbapmi9datmgee3rrmioswekxqgs/logintenantbranding/0/bannerlogo?ts=636095438067013877 HTTP/1.1
Host: aadcdn.msauthimages.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://agnieszkawesecka.pl/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Length,Date,Transfer-Encoding
age: 37669
cache-control: public, max-age=86400
content-md5: sIRyTKURj3DlUCJvWDTzkg==
content-type: image/png
date: Mon, 27 Nov 2023 14:37:09 GMT
etag: 0x8D3DD6E453E1C88
last-modified: Thu, 15 Sep 2016 13:43:26 GMT
server: ECAcc (ska/F6CD)
x-cache: HIT
x-ms-blob-type: BlockBlob
x-ms-lease-status: unlocked
x-ms-request-id: 0c622866-401e-0047-5fe7-20f359000000
x-ms-version: 2009-09-19
content-length: 4173
X-Firefox-Spdy: h2
cetrit.co/wp-includes/ID3/ink/ZMdgZMdg/ZMdgZMdg/ZmF1c3RpbmEubWFya2F1c2thaXRlQHlhcmEuY29t//cetrit.co/wp-includes/ID3/ink/ZMdgZMdg/ZMdgZMdg/ZmF1c3RpbmEubWFya2F1c2thaXRlQHlhcmEuY29t//cetrit.co/wp-includes/ID3/ink/ZMdgZMdg/ZMdgZMdg/ZmF1c3RpbmEubWFya2F1c2thaXRlQHlhcmEuY29t//cetrit.co/wp-includes/ID3/ink/ZMdgZMdg/ZMdgZMdg/ZmF1c3RpbmEubWFya2F1c2thaXRlQHlhcmEuY29t//cetrit.co/wp-includes/ID3/ink/ZMdgZMdg/ZMdgZMdg/ZmF1c3RpbmEubWFya2F1c2thaXRlQHlhcmEuY29t//cetrit.co/wp-includes/ID3/ink/ZMdgZMdg/ZMdgZMdg/ZmF1c3RpbmEubWFya2F1c2thaXRlQHlhcmEuY29t//cetrit.co/wp-includes/ID3/ink/ZMdgZMdg/ZMdgZMdg/ZmF1c3RpbmEubWFya2F1c2thaXRlQHlhcmEuY29t//cetrit.co/wp-includes/ID3/ink/ZMdgZMdg/ZMdgZMdg/ZmF1c3RpbmEubWFya2F1c2thaXRlQHlhcmEuY29t
108.167.149.240 296 B URL cetrit.co/wp-includes/ID3/ink/ZMdgZMdg/ZMdgZMdg/ZmF1c3RpbmEubWFya2F1c2thaXRlQHlhcmEuY29t//cetrit.co/wp-includes/ID3/ink/ZMdgZMdg/ZMdgZMdg/ZmF1c3RpbmEubWFya2F1c2thaXRlQHlhcmEuY29t//cetrit.co/wp-includes/ID3/ink/ZMdgZMdg/ZMdgZMdg/ZmF1c3RpbmEubWFya2F1c2thaXRlQHlhcmEuY29t//cetrit.co/wp-includes/ID3/ink/ZMdgZMdg/ZMdgZMdg/ZmF1c3RpbmEubWFya2F1c2thaXRlQHlhcmEuY29t//cetrit.co/wp-includes/ID3/ink/ZMdgZMdg/ZMdgZMdg/ZmF1c3RpbmEubWFya2F1c2thaXRlQHlhcmEuY29t//cetrit.co/wp-includes/ID3/ink/ZMdgZMdg/ZMdgZMdg/ZmF1c3RpbmEubWFya2F1c2thaXRlQHlhcmEuY29t//cetrit.co/wp-includes/ID3/ink/ZMdgZMdg/ZMdgZMdg/ZmF1c3RpbmEubWFya2F1c2thaXRlQHlhcmEuY29t//cetrit.co/wp-includes/ID3/ink/ZMdgZMdg/ZMdgZMdg/ZmF1c3RpbmEubWFya2F1c2thaXRlQHlhcmEuY29t
IP 108.167.149.240:0
ASN #46606 UNIFIEDLAYER-AS-1
File type SVG Scalable Vector Graphics image\012- HTML document, ASCII text, with very long lines (513), with no line terminators
Hash a9cc2824ef3517b6c4160dcf8ff7d410
8db9aebad84ca6e4225bfdd2458ff3821cc4f064
34f9db946e89f031a80dfca7b16b2b686469c9886441261ae70a44da1dfa2d58
Analyzer Verdict Alert urlquery phishing Phishing - Microsoft Outlook
GET /wp-includes/ID3/ink/ZMdgZMdg/ZMdgZMdg/ZmF1c3RpbmEubWFya2F1c2thaXRlQHlhcmEuY29t//cetrit.co/wp-includes/ID3/ink/ZMdgZMdg/ZMdgZMdg/ZmF1c3RpbmEubWFya2F1c2thaXRlQHlhcmEuY29t//cetrit.co/wp-includes/ID3/ink/ZMdgZMdg/ZMdgZMdg/ZmF1c3RpbmEubWFya2F1c2thaXRlQHlhcmEuY29t//cetrit.co/wp-includes/ID3/ink/ZMdgZMdg/ZMdgZMdg/ZmF1c3RpbmEubWFya2F1c2thaXRlQHlhcmEuY29t//cetrit.co/wp-includes/ID3/ink/ZMdgZMdg/ZMdgZMdg/ZmF1c3RpbmEubWFya2F1c2thaXRlQHlhcmEuY29t//cetrit.co/wp-includes/ID3/ink/ZMdgZMdg/ZMdgZMdg/ZmF1c3RpbmEubWFya2F1c2thaXRlQHlhcmEuY29t//cetrit.co/wp-includes/ID3/ink/ZMdgZMdg/ZMdgZMdg/ZmF1c3RpbmEubWFya2F1c2thaXRlQHlhcmEuY29t//cetrit.co/wp-includes/ID3/ink/ZMdgZMdg/ZMdgZMdg/ZmF1c3RpbmEubWFya2F1c2thaXRlQHlhcmEuY29t HTTP/1.1
Host: cetrit.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
refresh: 0;url=https://agnieszkawesecka.pl/online-microsoft_com-48736743377809387436457-microsoft_8476365435473648347765347346837493467354634576726326362456354653263726372635625327637_%D8%AD%D8%B5%20%D8%AD%D8%A8%D9%88%D8%A8%20%D8%A7%D9%84%D8%A3%D8%B1%D8%B2%20%D8%A7%D9%84%D8%AD%D8%A7%D9%85%D8%B6%D8%A9-rr%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7F%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7.html?s=faustina.markauskaite@yara.com
content-encoding: gzip
vary: Accept-Encoding
content-type: text/html; charset=UTF-8
date: Mon, 27 Nov 2023 14:36:58 GMT
server: Apache
X-Firefox-Spdy: h2
aadcdn.msauthimages.net/c1c6b6c8-5pehlxr4v81ciafrbapmi9datmgee3rrmioswekxqgs/logintenantbranding/0/illustration?ts=638023018256780289
152.199.23.72200 OK 119 kB URL GET HTTP/2 aadcdn.msauthimages.net/c1c6b6c8-5pehlxr4v81ciafrbapmi9datmgee3rrmioswekxqgs/logintenantbranding/0/illustration?ts=638023018256780289
IP 152.199.23.72:443
Requested by https://agnieszkawesecka.pl/online-microsoft_com-48736743377809387436457-microsoft_8476365435473648347765347346837493467354634576726326362456354653263726372635625327637_%D8%AD%D8%B5%20%D8%AD%D8%A8%D9%88%D8%A8%20%D8%A7%D9%84%D8%A3%D8%B1%D8%B2%20%D8%A7%D9%84%D8%AD%D8%A7%D9%85%D8%B6%D8%A9-rr%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7F%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7.html?s=faustina.markauskaite@yara.com
Certificate IssuerMicrosoft Corporation
Subjectaadcdn.msauthimages.net
Fingerprint6B:EB:AC:06:FC:06:82:11:17:1C:6B:72:7D:B5:95:2D:CF:E7:A3:5D
ValidityWed, 08 Mar 2023 11:16:34 GMT - Sat, 02 Mar 2024 11:16:34 GMT
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1920x1080, components 3\012- data
Size 119 kB (119297 bytes)
Hash 4ab6f179d4c6667c97c36e2337732f83
59159f6e4fc8c2c0b36dcbae0f43010ae891d011
83894d8241fcb74dcf3067e6faf0a20d6c7e46c6602dbef3971f5cee39e635cb
GET /c1c6b6c8-5pehlxr4v81ciafrbapmi9datmgee3rrmioswekxqgs/logintenantbranding/0/illustration?ts=638023018256780289 HTTP/1.1
Host: aadcdn.msauthimages.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://agnieszkawesecka.pl/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-credentials: true
access-control-allow-origin: *
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Length,Date,Transfer-Encoding
age: 33645
cache-control: public, max-age=86400
content-md5: SrbxedTGZnyXw24jN3Mvgw==
content-type: image/*
date: Mon, 27 Nov 2023 14:37:09 GMT
etag: 0x8DAB68E01C32281
last-modified: Tue, 25 Oct 2022 13:37:05 GMT
server: ECAcc (ska/F7A2)
x-cache: HIT
x-ms-blob-type: BlockBlob
x-ms-lease-status: unlocked
x-ms-request-id: 660b91c1-b01e-001d-0cf0-20f5d8000000
x-ms-version: 2009-09-19
content-length: 119297
X-Firefox-Spdy: h2
aadcdn.msftauth.net/shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico
152.199.23.37200 OK 17 kB URL GET HTTP/2 aadcdn.msftauth.net/shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico
IP 152.199.23.37:443
Requested by https://agnieszkawesecka.pl/online-microsoft_com-48736743377809387436457-microsoft_8476365435473648347765347346837493467354634576726326362456354653263726372635625327637_%D8%AD%D8%B5%20%D8%AD%D8%A8%D9%88%D8%A8%20%D8%A7%D9%84%D8%A3%D8%B1%D8%B2%20%D8%A7%D9%84%D8%AD%D8%A7%D9%85%D8%B6%D8%A9-rr%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7F%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7.html?s=faustina.markauskaite@yara.com
Certificate IssuerDigiCert Inc
Subjectaadcdn.msftauth.net
Fingerprint99:06:D8:1E:EC:BF:DB:78:DF:F4:89:A3:ED:23:07:3D:79:F1:16:D6
ValidityTue, 31 Jan 2023 00:00:00 GMT - Wed, 31 Jan 2024 23:59:59 GMT
File type MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors\012- data
Hash 12e3dac858061d088023b2bd48e2fa96
e08ce1a144eceae0c3c2ea7a9d6fbc5658f24ce5
90cdaf487716184e4034000935c605d1633926d348116d198f355a98b8c6cd21
GET /shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico HTTP/1.1
Host: aadcdn.msftauth.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://agnieszkawesecka.pl/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Length,Date,Transfer-Encoding
age: 15595321
cache-control: public, max-age=31536000
content-md5: EuPayFgGHQiAI7K9SOL6lg==
content-type: image/x-icon
date: Mon, 27 Nov 2023 14:37:09 GMT
etag: 0x8D8731240E548EB
last-modified: Sun, 18 Oct 2020 03:02:30 GMT
server: ECAcc (ska/F738)
x-cache: HIT
x-ms-blob-type: BlockBlob
x-ms-lease-status: unlocked
x-ms-request-id: 003b7cc6-501e-0067-4768-9344ba000000
x-ms-version: 2009-09-19
content-length: 17174
X-Firefox-Spdy: h2
segy.xyz/cap.php
152.89.246.205200 OK 31 kB IP 152.89.246.205:443
Requested by https://agnieszkawesecka.pl/online-microsoft_com-48736743377809387436457-microsoft_8476365435473648347765347346837493467354634576726326362456354653263726372635625327637_%D8%AD%D8%B5%20%D8%AD%D8%A8%D9%88%D8%A8%20%D8%A7%D9%84%D8%A3%D8%B1%D8%B2%20%D8%A7%D9%84%D8%AD%D8%A7%D9%85%D8%B6%D8%A9-rr%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7F%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7.html?s=faustina.markauskaite@yara.com
Certificate IssuerLet's Encrypt
Subjectsegy.xyz
Fingerprint6F:DF:90:EC:AE:D6:E0:13:C7:5C:47:EA:1A:C8:4F:0D:C0:F5:86:74
ValiditySun, 05 Nov 2023 07:19:49 GMT - Sat, 03 Feb 2024 07:19:48 GMT
File type JSON data\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (30973), with no line terminators
Hash b66f5bbc46bbcff1bb76b3a8362c7de9
ce1b6a1b4079220ca451dad480c9f79aa9fa80b8
6103f0ce68cbfda93b60873c50931d776b75dabaf90b056cc96dd6883f341419
POST /cap.php HTTP/1.1
Host: segy.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
Content-Length: 647
Origin: https://agnieszkawesecka.pl
DNT: 1
Connection: keep-alive
Referer: https://agnieszkawesecka.pl/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Mon, 27 Nov 2023 14:37:03 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin: *
Content-Encoding: gzip
challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/f1w4g/0x4AAAAAAANitG7_q4LMVK7c/auto/normal
104.17.2.184200 OK 73 kB URL GET HTTP/3 challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/f1w4g/0x4AAAAAAANitG7_q4LMVK7c/auto/normal
IP 104.17.2.184:443
Requested by https://agnieszkawesecka.pl/online-microsoft_com-48736743377809387436457-microsoft_8476365435473648347765347346837493467354634576726326362456354653263726372635625327637_%D8%AD%D8%B5%20%D8%AD%D8%A8%D9%88%D8%A8%20%D8%A7%D9%84%D8%A3%D8%B1%D8%B2%20%D8%A7%D9%84%D8%AD%D8%A7%D9%85%D8%B6%D8%A9-rr%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7F%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7.html?s=faustina.markauskaite@yara.com
Certificate IssuerCloudflare, Inc.
Subjectchallenges.cloudflare.com
Fingerprint5F:E4:AA:8C:2E:24:D2:B1:69:9D:13:28:31:5C:65:FA:97:2A:E9:6E
ValidityFri, 18 Aug 2023 00:00:00 GMT - Sat, 17 Aug 2024 23:59:59 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (40091)
Hash c4e4f444ba1a8565e52bbd59d264ba8a
5a5f51278736a02794ebc8f6c91573d66fff7818
656afc917c44c5cf5286ec9781580872b1ff31e7d77a7841530e7efed26db50d
GET /cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/f1w4g/0x4AAAAAAANitG7_q4LMVK7c/auto/normal HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://agnieszkawesecka.pl/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 27 Nov 2023 14:37:00 GMT
content-type: text/html; charset=UTF-8
cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
content-security-policy: frame-src https://challenges.cloudflare.com/ blob:; base-uri 'self'
cross-origin-embedder-policy: require-corp
cross-origin-opener-policy: same-origin
cross-origin-resource-policy: cross-origin
document-policy: js-profiling
origin-agent-cluster: ?1
permissions-policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()
referrer-policy: same-origin
server: cloudflare
cf-ray: 82cb1b495bb0b509-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
agnieszkawesecka.pl/favicon.ico
188.114.96.1404 Not Found 27 kB URL GET HTTP/2 agnieszkawesecka.pl/favicon.ico
IP 188.114.96.1:443
Requested by https://agnieszkawesecka.pl/online-microsoft_com-48736743377809387436457-microsoft_8476365435473648347765347346837493467354634576726326362456354653263726372635625327637_%D8%AD%D8%B5%20%D8%AD%D8%A8%D9%88%D8%A8%20%D8%A7%D9%84%D8%A3%D8%B1%D8%B2%20%D8%A7%D9%84%D8%AD%D8%A7%D9%85%D8%B6%D8%A9-rr%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7F%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7.html?s=faustina.markauskaite@yara.com
Certificate IssuerLet's Encrypt
Subjectagnieszkawesecka.pl
FingerprintED:DD:EC:0A:35:7D:02:85:E0:91:DD:95:17:23:1F:83:E6:17:49:00
ValidityThu, 23 Nov 2023 03:13:02 GMT - Wed, 21 Feb 2024 03:13:01 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (611)
Hash df3d48946e8d3f5a83608308edbb4b86
47b9c40c97abf2658df96b1c06109324e15e1a00
570a6631252b8a52df4de0e953ae77dbdf524dfc3637cda2840494a0d2b49499
GET /favicon.ico HTTP/1.1
Host: agnieszkawesecka.pl
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://agnieszkawesecka.pl/online-microsoft_com-48736743377809387436457-microsoft_8476365435473648347765347346837493467354634576726326362456354653263726372635625327637_%D8%AD%D8%B5%20%D8%AD%D8%A8%D9%88%D8%A8%20%D8%A7%D9%84%D8%A3%D8%B1%D8%B2%20%D8%A7%D9%84%D8%AD%D8%A7%D9%85%D8%B6%D8%A9-rr%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7F%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7.html?s=faustina.markauskaite@yara.com
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 404 Not Found
date: Mon, 27 Nov 2023 14:36:59 GMT
content-type: text/html
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: HIT
age: 19
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=FJVYEN1J%2BHK9rpsXdCY90wATzQ%2FyW3Jd7mzXtXdkF72iBwwBuWSC0Ep9neXej%2FSX48GVQU%2BGLNUxmfI8PxqeGA6BEhMw2UUmdH%2FG9b7tC5kMXEHjNiNN7yc9nsrVuZkbFdr6JYWW"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 82cb1b492e12b4eb-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
challenges.cloudflare.com/turnstile/v0/api.js?onload=onloadTurnstileCallback
104.17.2.184302 Found 34 kB URL GET HTTP/2 challenges.cloudflare.com/turnstile/v0/api.js?onload=onloadTurnstileCallback
IP 104.17.2.184:443
Requested by https://agnieszkawesecka.pl/online-microsoft_com-48736743377809387436457-microsoft_8476365435473648347765347346837493467354634576726326362456354653263726372635625327637_%D8%AD%D8%B5%20%D8%AD%D8%A8%D9%88%D8%A8%20%D8%A7%D9%84%D8%A3%D8%B1%D8%B2%20%D8%A7%D9%84%D8%AD%D8%A7%D9%85%D8%B6%D8%A9-rr%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7F%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7.html?s=faustina.markauskaite@yara.com
Certificate IssuerCloudflare, Inc.
Subjectchallenges.cloudflare.com
Fingerprint5F:E4:AA:8C:2E:24:D2:B1:69:9D:13:28:31:5C:65:FA:97:2A:E9:6E
ValidityFri, 18 Aug 2023 00:00:00 GMT - Sat, 17 Aug 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /turnstile/v0/api.js?onload=onloadTurnstileCallback HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://agnieszkawesecka.pl/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
date: Mon, 27 Nov 2023 14:36:59 GMT
access-control-allow-origin: *
location: /turnstile/v0/g/9914b343/api.js?onload=onloadTurnstileCallback
cache-control: max-age=300, public
vary: accept-encoding
server: cloudflare
cf-ray: 82cb1b47c866568e-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
aadcdn.msauth.net/shared/1.0/content/images/arrow_left_a9cc2824ef3517b6c4160dcf8ff7d410.svg
13.107.213.53200 OK 513 B URL GET HTTP/2 aadcdn.msauth.net/shared/1.0/content/images/arrow_left_a9cc2824ef3517b6c4160dcf8ff7d410.svg
IP 13.107.213.53:443
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://agnieszkawesecka.pl/online-microsoft_com-48736743377809387436457-microsoft_8476365435473648347765347346837493467354634576726326362456354653263726372635625327637_%D8%AD%D8%B5%20%D8%AD%D8%A8%D9%88%D8%A8%20%D8%A7%D9%84%D8%A3%D8%B1%D8%B2%20%D8%A7%D9%84%D8%AD%D8%A7%D9%85%D8%B6%D8%A9-rr%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7F%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7.html?s=faustina.markauskaite@yara.com
Certificate IssuerDigiCert Inc
Subjectaadcdn.msauth.net
Fingerprint88:95:0C:FA:9D:33:AA:BF:A4:FD:9D:84:A6:E8:02:06:58:50:AD:8C
ValiditySun, 29 Oct 2023 00:00:00 GMT - Tue, 29 Oct 2024 23:59:59 GMT
File type SVG Scalable Vector Graphics image\012- HTML document, ASCII text, with very long lines (529), with no line terminators
Hash adc405f5fd089662209870ca5d2106f7
3a8b776df84bf251afc6ddd802cc5bbeddfb0e36
e7bacc97751689afaae192e103fe9851664365c57c7d783560860ad456db7e49
GET /shared/1.0/content/images/arrow_left_a9cc2824ef3517b6c4160dcf8ff7d410.svg HTTP/1.1
Host: aadcdn.msauth.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://agnieszkawesecka.pl/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
cache-control: public, max-age=31536000
content-length: 276
content-type: image/svg+xml
content-encoding: gzip
content-md5: TjUQkZ0p0Y7rbj6LJofS9Q==
last-modified: Fri, 17 Jan 2020 19:28:34 GMT
etag: 0x8D79B8371B97A82
x-cache: TCP_HIT
x-ms-request-id: 4d8ee911-101e-0036-6042-0fec6e000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
access-control-allow-origin: *
x-azure-ref-originshield: 0SpZJZQAAAAAmBLZXYFfTSIPxFEjCT7FDQU1TMDRFREdFMTkxNQAzOWExMmY3ZS04OTlmLTQ2Y2YtYTZkMC0yNGJiYmEyN2Q5NTY=
x-azure-ref: 0lalkZQAAAACHwAHp8WvnSL7JLx8cBZYhU1ZHMjBFREdFMDUxMwAzOWExMmY3ZS04OTlmLTQ2Y2YtYTZkMC0yNGJiYmEyN2Q5NTY=
date: Mon, 27 Nov 2023 14:37:09 GMT
X-Firefox-Spdy: h2
challenges.cloudflare.com/turnstile/v0/g/9914b343/api.js?onload=onloadTurnstileCallback
104.17.2.184200 OK 34 kB URL GET HTTP/2 challenges.cloudflare.com/turnstile/v0/g/9914b343/api.js?onload=onloadTurnstileCallback
IP 104.17.2.184:443
Requested by https://agnieszkawesecka.pl/online-microsoft_com-48736743377809387436457-microsoft_8476365435473648347765347346837493467354634576726326362456354653263726372635625327637_%D8%AD%D8%B5%20%D8%AD%D8%A8%D9%88%D8%A8%20%D8%A7%D9%84%D8%A3%D8%B1%D8%B2%20%D8%A7%D9%84%D8%AD%D8%A7%D9%85%D8%B6%D8%A9-rr%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7F%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7.html?s=faustina.markauskaite@yara.com
Certificate IssuerCloudflare, Inc.
Subjectchallenges.cloudflare.com
Fingerprint5F:E4:AA:8C:2E:24:D2:B1:69:9D:13:28:31:5C:65:FA:97:2A:E9:6E
ValidityFri, 18 Aug 2023 00:00:00 GMT - Sat, 17 Aug 2024 23:59:59 GMT
File type ASCII text, with very long lines (34253)
Hash 6142a5f5c66e2c1be52ee9506a565962
c3b39e8352efd1e0619b6dd62af8b2a917622868
51cd12da61a7401c73472b2ac77067adfa30e9fc0545b4b7c240e9154e011fc7
GET /turnstile/v0/g/9914b343/api.js?onload=onloadTurnstileCallback HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://agnieszkawesecka.pl/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 27 Nov 2023 14:36:59 GMT
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
cache-control: max-age=31536000
vary: Accept-Encoding
server: cloudflare
cf-ray: 82cb1b47e87c568e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2