195.216.243.23301 Moved Permanently 1.1 kB URL User Request GET HTTP/1.1 IP 195.216.243.23:80
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text
Hash e79c1cea52873736e8670850d1149453
d8100707cfc467efb1e7da75425a92a1f3211b55
6d61e544c5debbe618d8dd7b3c297983c4fdfe4368ead7e0a925ec335a8b953b
Analyzer Verdict Alert fortinet Phishing
GET /_ld/3/ HTTP/1.1
Host: gta-funs.at.ua
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 403 Forbidden
Server: nginx
Date: Mon, 22 May 2023 06:36:04 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=15
Content-Encoding: gzip
195.216.243.23301 Moved Permanently 178 B URL User Request GET HTTP/1.1 IP 195.216.243.23:80
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash cd2e0e43980a00fb6a2742d3afd803b8
81ffbd1712afe8cdf138b570c0fc9934742c33c1
bd9df047d51943acc4bc6cf55d88edb5b6785a53337ee2a0f74dd521aedde87d
Analyzer Verdict Alert fortinet Phishing
GET /_ld/3/ HTTP/1.1
Host: gta-funs.at.ua
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Mon, 22 May 2023 06:36:05 GMT
Content-Type: text/html
Content-Length: 178
Connection: keep-alive
Keep-Alive: timeout=15
Location: https://gta-funs.at.ua/_ld/3/
X-Frame-Options: SAMEORIGIN
195.216.243.23301 Moved Permanently 1.1 kB URL User Request GET HTTP/1.1 IP 195.216.243.23:80
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text
Hash e79c1cea52873736e8670850d1149453
d8100707cfc467efb1e7da75425a92a1f3211b55
6d61e544c5debbe618d8dd7b3c297983c4fdfe4368ead7e0a925ec335a8b953b
Analyzer Verdict Alert fortinet Phishing
GET /_ld/3/ HTTP/1.1
Host: gta-funs.at.ua
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 403 Forbidden
Server: nginx
Date: Mon, 22 May 2023 06:36:05 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=15
Content-Encoding: gzip
gta-funs.at.ua/.serr/css/style.css
195.216.243.23200 OK 4.3 kB URL GET HTTP/1.1 gta-funs.at.ua/.serr/css/style.css
IP 195.216.243.23:443
Requested by https://gta-funs.at.ua/_ld/3/
Certificate IssuerDigiCert Inc
Subject*.at.ua
Fingerprint53:87:0B:5B:1D:E6:85:B9:80:14:0B:9A:26:E5:CF:B4:C3:FB:0F:7D
ValidityFri, 17 Jun 2022 00:00:00 GMT - Thu, 29 Jun 2023 23:59:59 GMT
File type ASCII text, with CRLF line terminators
Hash 98a90bc50f0b53842d1863fec51697fa
2e39243745ccb62e77a2fa92357f703619aba6d8
6fcbe05fd7251ea2506caecbb12812dc2273ceb231a3182aeee4124b0165d9ef
GET /.serr/css/style.css HTTP/1.1
Host: gta-funs.at.ua
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://gta-funs.at.ua/_ld/3/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 22 May 2023 06:36:05 GMT
Content-Type: text/css
Last-Modified: Wed, 10 May 2023 12:56:00 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=15
ETag: W/"645b9460-4c25"
X-Frame-Options: SAMEORIGIN
Content-Encoding: gzip
gta-funs.at.ua/.serr/js/core.js
195.216.243.23200 OK 234 B URL GET HTTP/1.1 gta-funs.at.ua/.serr/js/core.js
IP 195.216.243.23:443
Requested by https://gta-funs.at.ua/_ld/3/
Certificate IssuerDigiCert Inc
Subject*.at.ua
Fingerprint53:87:0B:5B:1D:E6:85:B9:80:14:0B:9A:26:E5:CF:B4:C3:FB:0F:7D
ValidityFri, 17 Jun 2022 00:00:00 GMT - Thu, 29 Jun 2023 23:59:59 GMT
File type ASCII text, with very long lines (414), with no line terminators
Hash 5701bc484b705ef62821a39f29742cba
2da3dc6a488db5812f1911bf96888a4c7aaf436f
80053729721b15fe8667def4e6270e156043789e01f7ec35defae93933274493
Analyzer Verdict Alert fortinet Phishing
GET /.serr/js/core.js HTTP/1.1
Host: gta-funs.at.ua
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://gta-funs.at.ua/_ld/3/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 22 May 2023 06:36:05 GMT
Content-Type: text/javascript
Last-Modified: Wed, 10 May 2023 12:56:00 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=15
ETag: W/"645b9460-19e"
X-Frame-Options: SAMEORIGIN
Content-Encoding: gzip
ocsp.pki.goog/gts1c3
142.250.74.131 472 B IP 142.250.74.131:0
Hash 8d1ffc63ece540992319c6f7637db168
b84a5580317750f11fea9fb0ca41710c88e66d38
905441c3ec5505f8196be1b4c4123cd1862bc6f03ce2bc5cf5fe37b21e07c907
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 22 May 2023 06:36:03 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ajax.googleapis.com/ajax/libs/jquery/1.10.2/jquery.min.js
142.250.74.10 33 kB URL ajax.googleapis.com/ajax/libs/jquery/1.10.2/jquery.min.js
IP 142.250.74.10:0
File type ASCII text, with very long lines (32072)
Hash e0e0559014b222245deb26b6ae8bd940
e2f3603e23711f6446f278a411d905623d65201e
89a15e9c40bc6b14809f236ee8cd3ed1ea42393c1f6ca55c7855cd779b3f922e
GET /ajax/libs/jquery/1.10.2/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://gta-funs.at.ua/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 32954
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 20 May 2023 19:05:50 GMT
expires: Sun, 19 May 2024 19:05:50 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
last-modified: Tue, 03 Mar 2020 19:15:00 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
age: 127813
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131 472 B IP 142.250.74.131:0
Hash 3b91f01d5207d1641bcdd0ee53561353
4ef7d6092b868eb8b500e8729efb4301e1d1f4be
b36bd6756866f8c7ebebee886314ac7ee381615d365b7509c008df8f57ecf655
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 22 May 2023 06:36:03 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
gta-funs.at.ua/.serr/img/ulogo.svg
195.216.243.23200 OK 4.2 kB URL GET HTTP/1.1 gta-funs.at.ua/.serr/img/ulogo.svg
IP 195.216.243.23:443
Requested by https://gta-funs.at.ua/_ld/3/
Certificate IssuerDigiCert Inc
Subject*.at.ua
Fingerprint53:87:0B:5B:1D:E6:85:B9:80:14:0B:9A:26:E5:CF:B4:C3:FB:0F:7D
ValidityFri, 17 Jun 2022 00:00:00 GMT - Thu, 29 Jun 2023 23:59:59 GMT
File type SVG Scalable Vector Graphics image\012- SVG XML document\012- XML 1.0 document text\012- SVG XML document\012- XML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with CRLF line terminators
Hash 993299552bfd263cd4a75ad398e75b58
3fc9ad991516b8ad0c6553a05de4a8c9759c5020
c660064588748948fcadc6a86b73dcb981d124c370b0ba764fe8a210854f6cd5
Analyzer Verdict Alert fortinet Phishing
GET /.serr/img/ulogo.svg HTTP/1.1
Host: gta-funs.at.ua
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://gta-funs.at.ua/.serr/css/style.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 22 May 2023 06:36:05 GMT
Content-Type: image/svg+xml
Content-Length: 4235
Last-Modified: Wed, 10 May 2023 12:56:00 GMT
Connection: keep-alive
Keep-Alive: timeout=15
ETag: "645b9460-108b"
X-Frame-Options: SAMEORIGIN
Accept-Ranges: bytes
gta-funs.at.ua/.serr/img/favicon.ico
195.216.243.23404 Not Found 2.7 kB URL GET HTTP/1.1 gta-funs.at.ua/.serr/img/favicon.ico
IP 195.216.243.23:443
Requested by https://gta-funs.at.ua/_ld/3/
Certificate IssuerDigiCert Inc
Subject*.at.ua
Fingerprint53:87:0B:5B:1D:E6:85:B9:80:14:0B:9A:26:E5:CF:B4:C3:FB:0F:7D
ValidityFri, 17 Jun 2022 00:00:00 GMT - Thu, 29 Jun 2023 23:59:59 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (348)
Hash 5c75256ff15177fadac5c895c962b733
e90e0c7a8be93e60dc3410157c38d7d3f732b88f
62f1c6afca91811f41c42ddb85464a4ddf0787793a079a68587c1a0f0b53c5d3
GET /.serr/img/favicon.ico HTTP/1.1
Host: gta-funs.at.ua
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://gta-funs.at.ua/_ld/3/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Server: nginx
Date: Mon, 22 May 2023 06:36:05 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=15
Content-Encoding: gzip
gta-funs.at.ua/.serr/img/permission.png
195.216.243.23200 OK 57 kB URL GET HTTP/1.1 gta-funs.at.ua/.serr/img/permission.png
IP 195.216.243.23:443
Requested by https://gta-funs.at.ua/_ld/3/
Certificate IssuerDigiCert Inc
Subject*.at.ua
Fingerprint53:87:0B:5B:1D:E6:85:B9:80:14:0B:9A:26:E5:CF:B4:C3:FB:0F:7D
ValidityFri, 17 Jun 2022 00:00:00 GMT - Thu, 29 Jun 2023 23:59:59 GMT
File type PNG image data, 290 x 343, 8-bit/color RGBA, non-interlaced\012- data
Hash e2920dd1c2415512bae8f8a14cc2e6ce
37a64753c87c0697251c39846f56ae8940e76a34
9e05947c753727bf2f39f344befd4f5bb006c1dd2f66ec5a65fad41d411a1bf1
GET /.serr/img/permission.png HTTP/1.1
Host: gta-funs.at.ua
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://gta-funs.at.ua/.serr/css/style.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 22 May 2023 06:36:05 GMT
Content-Type: image/png
Content-Length: 56622
Last-Modified: Wed, 10 May 2023 12:56:00 GMT
Connection: keep-alive
Keep-Alive: timeout=15
ETag: "645b9460-dd2e"
X-Frame-Options: SAMEORIGIN
Accept-Ranges: bytes