Report - web.thechambernv.org/cwt/external/wcpages/referral.aspx?ReferralType=W&ProfileID=2287&ListingID=1424&CategoryID=1794&SubCategoryID=0&url=//mejorvision%E3%80%82com%E3%80%82mx/content/cache/vyHNavyHNa/yGMT/bW9zYm9ybmVAYXBwcmlzc3JldGFpbC5jb20=//mejorvision%E3%80%82com%E3%80%82mx/content/cache/vyHNavyHNa/yGMT/bW9zYm9ybmVAYXBwcmlzc3JldGFpbC5jb20=//mejorvision%E3%80%82com%E3%80%82mx/content/cache/vyHNavyHNa/yGMT/bW9zYm9ybmVAYXBwcmlzc3JldGFpbC5jb20=//mejorvision%E3%80%82com%E3%80%82mx/content/cache/vyHNavyHNa/yGMT/bW9zYm9ybmVAYXBwcmlzc3JldGFpbC5jb20=//mejorvision%E3%80%82com%E3%80%82mx/content/cache/vyHNavyHNa/yGMT/bW9zYm9ybmVAYXBwcmlzc3JldGFpbC5jb20=//mejorvision%E3%80%82com%E3%80%82mx/content/cache/vyHNavyHNa/yGMT/bW9zYm9ybmVAYXBwcmlzc3JldGFpbC5jb20=//mejorvision%E3%80%82com%E3%80%82mx/content/cache/vyHNavyHNa/yGMT/bW9zYm9ybmVAYXBwcmlzc3JldGFpbC5jb20=//mejorvision%E3%80%82com%E3%80%82mx/content/cache/vyHNavyHNa/yGMT/bW9zYm9ybmVAYXBwcmlzc3JldGFpbC5jb20=

Report Overview

Visited public
2023-12-01 22:40:29
Tags
phishing microsoft outlook
URL
web.thechambernv.org/cwt/external/wcpages/referral.aspx?ReferralType=W&ProfileID=2287&ListingID=1424&CategoryID=1794&SubCategoryID=0&url=//mejorvision%E3%80%82com%E3%80%82mx/content/cache/vyHNavyHNa/yGMT/bW9zYm9ybmVAYXBwcmlzc3JldGFpbC5jb20=//mejorvision%E3%80%82com%E3%80%82mx/content/cache/vyHNavyHNa/yGMT/bW9zYm9ybmVAYXBwcmlzc3JldGFpbC5jb20=//mejorvision%E3%80%82com%E3%80%82mx/content/cache/vyHNavyHNa/yGMT/bW9zYm9ybmVAYXBwcmlzc3JldGFpbC5jb20=//mejorvision%E3%80%82com%E3%80%82mx/content/cache/vyHNavyHNa/yGMT/bW9zYm9ybmVAYXBwcmlzc3JldGFpbC5jb20=//mejorvision%E3%80%82com%E3%80%82mx/content/cache/vyHNavyHNa/yGMT/bW9zYm9ybmVAYXBwcmlzc3JldGFpbC5jb20=//mejorvision%E3%80%82com%E3%80%82mx/content/cache/vyHNavyHNa/yGMT/bW9zYm9ybmVAYXBwcmlzc3JldGFpbC5jb20=//mejorvision%E3%80%82com%E3%80%82mx/content/cache/vyHNavyHNa/yGMT/bW9zYm9ybmVAYXBwcmlzc3JldGFpbC5jb20=//mejorvision%E3%80%82com%E3%80%82mx/content/cache/vyHNavyHNa/yGMT/bW9zYm9ybmVAYXBwcmlzc3JldGFpbC5jb20=
Finishing URL
agnieszkawesecka.pl/online-microsoft_com-48736743377809387436457-microsoft_8476365435473648347765347346837493467354634576726326362456354653263726372635625327637_%D8%AD%D8%B5%20%D8%AD%D8%A8%D9%88%D8%A8%20%D8%A7%D9%84%D8%A3%D8%B1%D8%B2%20%D8%A7%D9%84%D8%AD%D8%A7%D9%85%D8%B6%D8%A9-rr%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7F%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7.html?s=mosborne@apprissretail.com
IP / ASN
104.18.246.141
#13335 CLOUDFLARENET
Title
Sign in to your account
Phishing - Microsoft Outlook

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
aadcdn.msftauth.net	1455	2018-10-25	2018-11-19 11:50:32	2023-11-30 18:15:26	2.1 kB	23 kB	152.199.23.37
aadcdn.msauth.net	1421	2018-10-25	2018-11-19 11:50:03	2023-12-01 05:13:11	534 B	21 kB	13.107.246.53
mejorvision.com.mx	unknown	2020-03-25	2020-03-30 06:21:35	2023-11-30 22:54:36	1.3 kB	761 B	162.241.62.131
ajax.googleapis.com	12905	2005-01-25	2013-08-16 11:51:31	2023-12-01 08:07:42	446 B	32 kB	216.58.207.202
challenges.cloudflare.com	unknown	2009-02-17	2021-10-20 07:02:03	2023-12-01 05:10:15	2.4 kB	152 kB	104.17.3.184
agnieszkawesecka.pl	unknown	2015-08-01	2019-06-09 06:18:06	2023-11-30 22:54:55	2.1 kB	58 kB	104.21.85.41
segy.shop	unknown	2023-11-29	2023-11-30 15:40:23	2023-11-30 22:54:40	1.6 kB	49 kB	152.89.246.205
cdnjs.cloudflare.com	235	2009-02-17	2015-04-17 22:46:33	2023-12-01 05:09:17	461 B	29 kB	104.17.24.14

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (10)

	URL	From	Size	First Seen	Last Seen
	ajax.googleapis.com/ajax/libs/jquery/3.6.0/jquery.min.js	ScriptElement	90 kB	2023-03-07	2025-05-09
Pretty URL ajax.googleapis.com/ajax/libs/jquery/3.6.0/jquery.min.js IP 216.58.207.202 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:02 Last Seen2025-05-09 07:49 Times Seen205612 Hash 8fb8fee4fcc3cc86ff6c724154c49c42 b82d238d4e31fdf618bae8ac11a6c812c03dd0d4 ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e Loading...

	unknown	ScriptElement	6.5 kB	2023-12-01	2024-08-20
Pretty Introduced by scriptElement Embedded in HTML false Observations First Seen2023-12-01 10:24 Last Seen2024-08-20 17:12 Times Seen59 Hash e809404f3e401a2d0a8cd37c7219ccee 6a598aec10154a67fd69d022f51e0e5be75c0b7d f74eab4d6a21e842ed46f3ba5acec23b070d83002b5561292497f776ef2a5433 Loading...

	agnieszkawesecka.pl/online-microsoft_com-48736743377809387436457-microsoft_8476365435473648347765347346837493467354634576726326362456354653263726372635625327637_%D8%AD%D8%B5%20%D8%AD%D8%A8%D9%88%D8%A8%20%D8%A7%D9%84%D8%A3%D8%B1%D8%B2%20%D8%A7%D9%84%D8%AD%D8%A7%D9%85%D8%B6%D8%A9-rr%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7F%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7.html?s=mosborne@apprissretail.com	ScriptElement	0 B	0001-01-01	2025-05-09
Pretty URL agnieszkawesecka.pl/online-microsoft_com-48736743377809387436457-microsoft_8476365435473648347765347346837493467354634576726326362456354653263726372635625327637_%D8%AD%D8%B5%20%D8%AD%D8%A8%D9%88%D8%A8%20%D8%A7%D9%84%D8%A3%D8%B1%D8%B2%20%D8%A7%D9%84%D8%AD%D8%A7%D9%85%D8%B6%D8%A9-rr%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7F%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7.html?s=mosborne@apprissretail.com IP 104.21.85.41 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen0001-01-01 00:00 Last Seen2025-05-09 08:58 Times Seen4634998 Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Loading...

	challenges.cloudflare.com/turnstile/v0/api.js?onload=onloadTurnstileCallback	ScriptElement	34 kB	2023-11-30	2023-12-14
Pretty URL challenges.cloudflare.com/turnstile/v0/api.js?onload=onloadTurnstileCallback IP 104.17.3.184 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-11-30 14:29 Last Seen2023-12-14 14:42 Times Seen11689 Hash 8c90f391245a994ae95e644a587c8626 7bfc99336571d0ccfe38f9e1d18cb26b4adfc316 acbe221d9bb71e85d0a3b52a7a9d44ee4669ab664186b32d0c737a2be62681e7 Loading...

	unknown	ScriptElement	7.5 kB	2023-11-30	2024-08-20
Pretty Introduced by scriptElement Embedded in HTML false Observations First Seen2023-11-30 22:54 Last Seen2024-08-20 17:17 Times Seen320 Hash c69c6fd73b6558bd75115e1f19142ece 3999fcf9b030207747715a8e474df2f02f84f7b6 af71f0bb7ddde9cf3eee892b7641eded64f41ce0ed77f8092f69240d5aa82b6f Loading...

		Size	First Seen	Last Seen
	#1 Eval - 9e925e9341b490bfd3b4c4ca3b0c1ef2	4 B	2023-03-07 01:03	2025-05-09 08:53
Pretty Observations First Seen2023-03-07 01:03 Last Seen2025-05-09 08:53 Times Seen368759 Hash 9e925e9341b490bfd3b4c4ca3b0c1ef2 c2543fff3bfa6f144c2f06a7de6cd10c0b650cae 1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408 Loading...

		Size	First Seen	Last Seen
	#1 Write - 086707e4369f60afedcafb16050a7618	39 B	2023-03-07 01:03	2025-05-09 08:53
Pretty Observations First Seen2023-03-07 01:03 Last Seen2025-05-09 08:53 Times Seen57477 Hash 086707e4369f60afedcafb16050a7618 8216b0cc6876cbd44f01c158e7dff3833ceccd41 a7fe83ec64bb23eb28090598db3d166ed98e52e39d1afbbfd74c579553f93e4e Loading...

	#2 Write - d50fe447c67a515d4ba936505175a8fe	3.6 kB	2023-11-30 14:29	2024-08-20 17:20
Pretty Observations First Seen2023-11-30 14:29 Last Seen2024-08-20 17:20 Times Seen11653 Hash d50fe447c67a515d4ba936505175a8fe 78d20da444441fb45dcf61e09d9bcbc9f01502e2 7dcf7a54137031c03f28f6a33cb62b258023c5de06d504259d5ad39f16b1b85e Loading...

	#3 Write - de962e8dfaee72c7ca0379098902f4f0	30 kB	2023-11-30 22:54	2024-08-20 17:17
Pretty Observations First Seen2023-11-30 22:54 Last Seen2024-08-20 17:17 Times Seen322 Hash de962e8dfaee72c7ca0379098902f4f0 34c0d1071f6db631d91097eda504c4e0c47cccde 4a50fa0043595864a83dafe1e7d6b14e10fb7545f2ff095d0fa92ada2beebcd5 Loading...

	#4 Write - 48cab523c20d37e508818d5ea19e54f0	16 kB	2023-12-01 10:24	2024-08-20 17:12
Pretty Observations First Seen2023-12-01 10:24 Last Seen2024-08-20 17:12 Times Seen60 Hash 48cab523c20d37e508818d5ea19e54f0 3ec14975be748170226368c46cb9b3f39bfb0fae c32c1e051ca509d509770c353a85907de5c2a60946477ba169a828f04b86a654 Loading...

HTTP Transactions (17)

	URL	IP	Response	Size
	mejorvision.com.mx/content/cache/vyHNavyHNa/yGMT/bW9zYm9ybmVAYXBwcmlzc3JldGFpbC5jb20=//mejorvision%e3%80%82com%e3%80%82mx/content/cache/vyHNavyHNa/yGMT/bW9zYm9ybmVAYXBwcmlzc3JldGFpbC5jb20=//mejorvision%e3%80%82com%e3%80%82mx/content/cache/vyHNavyHNa/yGMT/bW9zYm9ybmVAYXBwcmlzc3JldGFpbC5jb20=//mejorvision%e3%80%82com%e3%80%82mx/content/cache/vyHNavyHNa/yGMT/bW9zYm9ybmVAYXBwcmlzc3JldGFpbC5jb20=//mejorvision%e3%80%82com%e3%80%82mx/content/cache/vyHNavyHNa/yGMT/bW9zYm9ybmVAYXBwcmlzc3JldGFpbC5jb20=//mejorvision%e3%80%82com%e3%80%82mx/content/cache/vyHNavyHNa/yGMT/bW9zYm9ybmVAYXBwcmlzc3JldGFpbC5jb20=//mejorvision%e3%80%82com%e3%80%82mx/content/cache/vyHNavyHNa/yGMT/bW9zYm9ybmVAYXBwcmlzc3JldGFpbC5jb20=//mejorvision%e3%80%82com%e3%80%82mx/content/cache/vyHNavyHNa/yGMT/bW9zYm9ybmVAYXBwcmlzc3JldGFpbC5jb20=	162.241.62.131		0 B
URL mejorvision.com.mx/content/cache/vyHNavyHNa/yGMT/bW9zYm9ybmVAYXBwcmlzc3JldGFpbC5jb20=//mejorvision%e3%80%82com%e3%80%82mx/content/cache/vyHNavyHNa/yGMT/bW9zYm9ybmVAYXBwcmlzc3JldGFpbC5jb20=//mejorvision%e3%80%82com%e3%80%82mx/content/cache/vyHNavyHNa/yGMT/bW9zYm9ybmVAYXBwcmlzc3JldGFpbC5jb20=//mejorvision%e3%80%82com%e3%80%82mx/content/cache/vyHNavyHNa/yGMT/bW9zYm9ybmVAYXBwcmlzc3JldGFpbC5jb20=//mejorvision%e3%80%82com%e3%80%82mx/content/cache/vyHNavyHNa/yGMT/bW9zYm9ybmVAYXBwcmlzc3JldGFpbC5jb20=//mejorvision%e3%80%82com%e3%80%82mx/content/cache/vyHNavyHNa/yGMT/bW9zYm9ybmVAYXBwcmlzc3JldGFpbC5jb20=//mejorvision%e3%80%82com%e3%80%82mx/content/cache/vyHNavyHNa/yGMT/bW9zYm9ybmVAYXBwcmlzc3JldGFpbC5jb20=//mejorvision%e3%80%82com%e3%80%82mx/content/cache/vyHNavyHNa/yGMT/bW9zYm9ybmVAYXBwcmlzc3JldGFpbC5jb20= IP 162.241.62.131:0 ASN #46606 UNIFIEDLAYER-AS-1 File type Size 0 B (0 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers GET /content/cache/vyHNavyHNa/yGMT/bW9zYm9ybmVAYXBwcmlzc3JldGFpbC5jb20=//mejorvision%e3%80%82com%e3%80%82mx/content/cache/vyHNavyHNa/yGMT/bW9zYm9ybmVAYXBwcmlzc3JldGFpbC5jb20=//mejorvision%e3%80%82com%e3%80%82mx/content/cache/vyHNavyHNa/yGMT/bW9zYm9ybmVAYXBwcmlzc3JldGFpbC5jb20=//mejorvision%e3%80%82com%e3%80%82mx/content/cache/vyHNavyHNa/yGMT/bW9zYm9ybmVAYXBwcmlzc3JldGFpbC5jb20=//mejorvision%e3%80%82com%e3%80%82mx/content/cache/vyHNavyHNa/yGMT/bW9zYm9ybmVAYXBwcmlzc3JldGFpbC5jb20=//mejorvision%e3%80%82com%e3%80%82mx/content/cache/vyHNavyHNa/yGMT/bW9zYm9ybmVAYXBwcmlzc3JldGFpbC5jb20=//mejorvision%e3%80%82com%e3%80%82mx/content/cache/vyHNavyHNa/yGMT/bW9zYm9ybmVAYXBwcmlzc3JldGFpbC5jb20=//mejorvision%e3%80%82com%e3%80%82mx/content/cache/vyHNavyHNa/yGMT/bW9zYm9ybmVAYXBwcmlzc3JldGFpbC5jb20= HTTP/1.1 Host: mejorvision.com.mx User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Upgrade-Insecure-Requests: 1 Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache HTTP/2 200 OK refresh: 0;url=https://agnieszkawesecka.pl/online-microsoft_com-48736743377809387436457-microsoft_8476365435473648347765347346837493467354634576726326362456354653263726372635625327637_%D8%AD%D8%B5%20%D8%AD%D8%A8%D9%88%D8%A8%20%D8%A7%D9%84%D8%A3%D8%B1%D8%B2%20%D8%A7%D9%84%D8%AD%D8%A7%D9%85%D8%B6%D8%A9-rr%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7F%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7.html?s=mosborne@apprissretail.com content-length: 0 content-type: text/html; charset=UTF-8 date: Fri, 01 Dec 2023 22:40:12 GMT server: Apache X-Firefox-Spdy: h2

	ajax.googleapis.com/ajax/libs/jquery/3.6.0/jquery.min.js	216.58.207.202	200 OK	31 kB
URL GET HTTP/2 ajax.googleapis.com/ajax/libs/jquery/3.6.0/jquery.min.js IP 216.58.207.202:443 ASN #15169 GOOGLE Requested by https://agnieszkawesecka.pl/online-microsoft_com-48736743377809387436457-microsoft_8476365435473648347765347346837493467354634576726326362456354653263726372635625327637_%D8%AD%D8%B5%20%D8%AD%D8%A8%D9%88%D8%A8%20%D8%A7%D9%84%D8%A3%D8%B1%D8%B2%20%D8%A7%D9%84%D8%AD%D8%A7%D9%85%D8%B6%D8%A9-rr%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7F%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7.html?s=mosborne@apprissretail.com Certificate IssuerGoogle Trust Services LLC Subjectupload.video.google.com FingerprintCC:96:E0:52:E0:9B:EA:A9:A0:F8:88:9A:90:20:11:47:61:00:3C:42 ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT File type ASCII text, with very long lines (65447) Size 31 kB (31017 bytes) Hash 8fb8fee4fcc3cc86ff6c724154c49c42 b82d238d4e31fdf618bae8ac11a6c812c03dd0d4 ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e HTTP Headers `GET /ajax/libs/jquery/3.6.0/jquery.min.js HTTP/1.1 Host: ajax.googleapis.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://agnieszkawesecka.pl/ Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` HTTP/2 200 OK accept-ranges: bytes content-encoding: gzip access-control-allow-origin: * content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers cross-origin-resource-policy: cross-origin cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers" report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]} timing-allow-origin: * content-length: 31017 x-content-type-options: nosniff server: sffe x-xss-protection: 0 date: Thu, 30 Nov 2023 04:35:32 GMT expires: Fri, 29 Nov 2024 04:35:32 GMT cache-control: public, max-age=31536000, stale-while-revalidate=2592000 last-modified: Wed, 10 Mar 2021 14:28:09 GMT content-type: text/javascript; charset=UTF-8 vary: Accept-Encoding age: 151481 alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 X-Firefox-Spdy: h2

	challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/flow/ov1/1682222977:1701468698:4WIWT-BMmH6yHJnsecVGgbfsbyh0y52TzuV08cLcsng/82eed4a63a4fb50b/4c2a211467c048e	104.17.3.184		9.1 kB
URL challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/flow/ov1/1682222977:1701468698:4WIWT-BMmH6yHJnsecVGgbfsbyh0y52TzuV08cLcsng/82eed4a63a4fb50b/4c2a211467c048e IP 104.17.3.184:0 ASN #13335 CLOUDFLARENET File type ASCII text, with very long lines (3436), with no line terminators Size 9.1 kB (9090 bytes) Hash c75b8ee32134cbee89d940954ceba2b4 42e860f566fadd18db10019d3c4412a30d1f4307 4d3339442b776677d24667c905d4dff13cb45137b086ece9a42675cc52c2605c HTTP Headers POST /cdn-cgi/challenge-platform/h/b/flow/ov1/1682222977:1701468698:4WIWT-BMmH6yHJnsecVGgbfsbyh0y52TzuV08cLcsng/82eed4a63a4fb50b/4c2a211467c048e HTTP/1.1 Host: challenges.cloudflare.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/fal38/0x4AAAAAAANitG7_q4LMVK7c/auto/normal Content-type: application/x-www-form-urlencoded CF-Challenge: 4c2a211467c048e Content-Length: 25475 Origin: https://challenges.cloudflare.com DNT: 1 Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache TE: trailers HTTP/3 200 OK date: Fri, 01 Dec 2023 22:40:16 GMT content-type: text/html; charset=UTF-8 cf-chl-out: 6UWHPUs9O3UUMlBF5K8LYQykX4EBsZSerGYF219AiYSKJUCvPi+BOoBc9oCOjzjV+VzkW9RjXmbA2KUQFqFKgZxjStzrnTtq3Vm6sLyefeExl4Bt4qZe8kqyT1TcCNP1$HcwNrAXMCMdWSjjR/JiADQ== cf-chl-out-s: TslqJpJx3CpqF86w43SWqjBHXrYWzi+3kgbxM6PEdiBaj//jWTq5Q+ZbYYHTd23aRUMu4vfROB4yVblIPrQji8N/U/qyjNXm+tATjHDD3VPdxDPTSDoUjnwWjcSteSpn2D2WK3qZS/zFxQOFDa9RSYLs5T0KEyOLO+I6XpjZFFSODTPkyXzOQe530UUnjaiG3Pm34dFTecLivyvBf8/vns1icGwvMq+qHPMOKuh+lt4xWVRAxRQujWHMeI62ZSR+tsx4cQCQvAh9aOK/zseHjbfJdIj1Iki0vQEdVeVU3UJQK12A+Si8ZNqxCucnJxhjUONi9PKiP2XkyPNLMEyGgQ==$oYrwM0JSZm+ft4lu+9oMBA== server: cloudflare cf-ray: 82eed4b56be1b50b-OSL content-encoding: br alt-svc: h3=":443"; ma=86400

	agnieszkawesecka.pl/online-microsoft_com-48736743377809387436457-microsoft_8476365435473648347765347346837493467354634576726326362456354653263726372635625327637_%D8%AD%D8%B5%20%D8%AD%D8%A8%D9%88%D8%A8%20%D8%A7%D9%84%D8%A3%D8%B1%D8%B2%20%D8%A7%D9%84%D8%AD%D8%A7%D9%85%D8%B6%D8%A9-rr%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7F%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7.html?s=mosborne@apprissretail.com	104.21.85.41	200 OK	29 kB
URL User Request GET HTTP/2 agnieszkawesecka.pl/online-microsoft_com-48736743377809387436457-microsoft_8476365435473648347765347346837493467354634576726326362456354653263726372635625327637_%D8%AD%D8%B5%20%D8%AD%D8%A8%D9%88%D8%A8%20%D8%A7%D9%84%D8%A3%D8%B1%D8%B2%20%D8%A7%D9%84%D8%AD%D8%A7%D9%85%D8%B6%D8%A9-rr%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7F%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7.html?s=mosborne@apprissretail.com IP 104.21.85.41:443 ASN #13335 CLOUDFLARENET Certificate IssuerLet's Encrypt Subjectagnieszkawesecka.pl FingerprintED:DD:EC:0A:35:7D:02:85:E0:91:DD:95:17:23:1F:83:E6:17:49:00 ValidityThu, 23 Nov 2023 03:13:02 GMT - Wed, 21 Feb 2024 03:13:01 GMT File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (363), with CRLF line terminators Size 29 kB (29206 bytes) Hash 10d96cf3ea40f1d7d594fbe5920308f9 924bec48eb1b49c15401b4a30f0e3e25dd378148 4a9e857f535cf490e719ad81d0fd2e90db401ccc30afa03d3d2b385f6acd14b3 HTTP Headers GET /online-microsoft_com-48736743377809387436457-microsoft_8476365435473648347765347346837493467354634576726326362456354653263726372635625327637_%D8%AD%D8%B5%20%D8%AD%D8%A8%D9%88%D8%A8%20%D8%A7%D9%84%D8%A3%D8%B1%D8%B2%20%D8%A7%D9%84%D8%AD%D8%A7%D9%85%D8%B6%D8%A9-rr%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7F%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7.html?s=mosborne@apprissretail.com HTTP/1.1 Host: agnieszkawesecka.pl User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Upgrade-Insecure-Requests: 1 Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache HTTP/2 200 OK date: Fri, 01 Dec 2023 22:40:13 GMT content-type: text/html last-modified: Thu, 30 Nov 2023 21:19:15 GMT vary: Accept-Encoding cf-cache-status: DYNAMIC report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=xEjRPyQh75x8cizdvk0V%2BWv8ytDFB%2F6S8Hl8tkP9D7wO830QpLuQ0y%2BnwEe%2B8uLe9VZSiM5pCfXP5sxMHd%2FCemlIbeyD9XfyeLKuar9O%2BejoJ1FgTCcH7ULn4TsAxrBquQrJdscU"}],"group":"cf-nel","max_age":604800} nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} server: cloudflare cf-ray: 82eed4a3ac9a5690-OSL content-encoding: br alt-svc: h3=":443"; ma=86400 X-Firefox-Spdy: h2

	segy.shop/api/validate	152.89.246.205	200 OK	0 B
URL POST HTTP/1.1 segy.shop/api/validate IP 152.89.246.205:443 ASN #30823 combahton GmbH Requested by https://agnieszkawesecka.pl/online-microsoft_com-48736743377809387436457-microsoft_8476365435473648347765347346837493467354634576726326362456354653263726372635625327637_%D8%AD%D8%B5%20%D8%AD%D8%A8%D9%88%D8%A8%20%D8%A7%D9%84%D8%A3%D8%B1%D8%B2%20%D8%A7%D9%84%D8%AD%D8%A7%D9%85%D8%B6%D8%A9-rr%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7F%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7.html?s=mosborne@apprissretail.com Certificate IssuerLet's Encrypt Subjectsegy.shop FingerprintEB:95:7A:90:22:94:A6:8D:13:EE:A6:CE:16:62:13:B3:B8:E5:58:43 ValidityThu, 30 Nov 2023 09:25:10 GMT - Wed, 28 Feb 2024 09:25:09 GMT File type Size 0 B (0 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers OPTIONS /api/validate HTTP/1.1 Host: segy.shop User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type Referer: https://agnieszkawesecka.pl/ Origin: https://agnieszkawesecka.pl DNT: 1 Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache `HTTP/1.1 204 No Content Server: nginx/1.18.0 (Ubuntu) Content-Type: text/html; charset=UTF-8 Connection: keep-alive Cache-Control: no-cache, private Date: Fri, 01 Dec 2023 22:40:19 GMT Access-Control-Allow-Origin: * Vary: Access-Control-Request-Method, Access-Control-Request-Headers Access-Control-Allow-Methods: POST Access-Control-Allow-Headers: content-type Access-Control-Max-Age: 0`

	segy.shop/api/validate	152.89.246.205	200 OK	17 kB
URL POST HTTP/1.1 segy.shop/api/validate IP 152.89.246.205:443 ASN #30823 combahton GmbH Requested by https://agnieszkawesecka.pl/online-microsoft_com-48736743377809387436457-microsoft_8476365435473648347765347346837493467354634576726326362456354653263726372635625327637_%D8%AD%D8%B5%20%D8%AD%D8%A8%D9%88%D8%A8%20%D8%A7%D9%84%D8%A3%D8%B1%D8%B2%20%D8%A7%D9%84%D8%AD%D8%A7%D9%85%D8%B6%D8%A9-rr%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7F%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7.html?s=mosborne@apprissretail.com Certificate IssuerLet's Encrypt Subjectsegy.shop FingerprintEB:95:7A:90:22:94:A6:8D:13:EE:A6:CE:16:62:13:B3:B8:E5:58:43 ValidityThu, 30 Nov 2023 09:25:10 GMT - Wed, 28 Feb 2024 09:25:09 GMT File type JSON data\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (16675), with no line terminators Size 17 kB (16675 bytes) Hash b1c0fa72a714cd54772d4340d9cffa22 4478a645220fc574d28196ebeda6be100445deba c196ae0015dc1535ae60ade77271e680461269ab5ff1b928918f9f84c324c9cf HTTP Headers POST /api/validate HTTP/1.1 Host: segy.shop User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: application/json, text/javascript, /; q=0.01 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Content-Type: application/json Content-Length: 83 Origin: https://agnieszkawesecka.pl DNT: 1 Connection: keep-alive Referer: https://agnieszkawesecka.pl/ Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache `HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Content-Type: application/json Transfer-Encoding: chunked Connection: keep-alive Cache-Control: no-cache, private Date: Fri, 01 Dec 2023 22:40:19 GMT X-RateLimit-Limit: 60 X-RateLimit-Remaining: 55 Access-Control-Allow-Origin: *`

	cdnjs.cloudflare.com/ajax/libs/jquery/3.6.0/jquery.min.js	104.17.24.14	200 OK	28 kB
URL GET HTTP/2 cdnjs.cloudflare.com/ajax/libs/jquery/3.6.0/jquery.min.js IP 104.17.24.14:443 ASN #13335 CLOUDFLARENET Requested by https://agnieszkawesecka.pl/online-microsoft_com-48736743377809387436457-microsoft_8476365435473648347765347346837493467354634576726326362456354653263726372635625327637_%D8%AD%D8%B5%20%D8%AD%D8%A8%D9%88%D8%A8%20%D8%A7%D9%84%D8%A3%D8%B1%D8%B2%20%D8%A7%D9%84%D8%AD%D8%A7%D9%85%D8%B6%D8%A9-rr%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7F%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7.html?s=mosborne@apprissretail.com Certificate IssuerCloudflare, Inc. Subjectsni.cloudflaressl.com Fingerprint7A:EA:B9:09:71:70:6C:87:C9:D3:82:74:8A:7B:B4:60:E5:40:2D:8D ValidityMon, 03 Jul 2023 00:00:00 GMT - Tue, 02 Jul 2024 23:59:59 GMT File type ASCII text, with very long lines (65447) Size 28 kB (27938 bytes) Hash 8fb8fee4fcc3cc86ff6c724154c49c42 b82d238d4e31fdf618bae8ac11a6c812c03dd0d4 ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e HTTP Headers `GET /ajax/libs/jquery/3.6.0/jquery.min.js HTTP/1.1 Host: cdnjs.cloudflare.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://agnieszkawesecka.pl/ Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache TE: trailers` HTTP/3 200 OK date: Fri, 01 Dec 2023 22:40:20 GMT content-type: application/javascript; charset=utf-8 content-length: 27938 access-control-allow-origin: * cache-control: public, max-age=30672000 content-encoding: br etag: "603e8adc-15d9d" last-modified: Tue, 02 Mar 2021 18:58:36 GMT cf-cdnjs-via: cfworker/kv cross-origin-resource-policy: cross-origin timing-allow-origin: * x-content-type-options: nosniff vary: Accept-Encoding cf-cache-status: HIT age: 578118 expires: Wed, 20 Nov 2024 22:40:20 GMT accept-ranges: bytes report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=hvUT7Zxc5%2BGbd4JU9M13g1LWzmCAfq%2FkAP3Bp0T6W8ErRtQdfncCp%2B1TE1FjRrjCxbAyj5pFxS87iEzvCO0JG5ivwgQP9k8zYHwXKpApEAUnWpB%2BZbHhMv0Ze2oJPAcg0iV4bquT"}],"group":"cf-nel","max_age":604800} nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} strict-transport-security: max-age=15780000 server: cloudflare cf-ray: 82eed4d32e60b4fa-OSL alt-svc: h3=":443"; ma=86400

	aadcdn.msftauth.net/shared/1.0/content/images/signin-options_4e48046ce74f4b89d45037c90576bfac.svg	152.199.23.37	200 OK	621 B
URL GET HTTP/2 aadcdn.msftauth.net/shared/1.0/content/images/signin-options_4e48046ce74f4b89d45037c90576bfac.svg IP 152.199.23.37:443 ASN #15133 EDGECAST Requested by https://agnieszkawesecka.pl/online-microsoft_com-48736743377809387436457-microsoft_8476365435473648347765347346837493467354634576726326362456354653263726372635625327637_%D8%AD%D8%B5%20%D8%AD%D8%A8%D9%88%D8%A8%20%D8%A7%D9%84%D8%A3%D8%B1%D8%B2%20%D8%A7%D9%84%D8%AD%D8%A7%D9%85%D8%B6%D8%A9-rr%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7F%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7.html?s=mosborne@apprissretail.com Certificate IssuerDigiCert Inc Subjectaadcdn.msftauth.net Fingerprint99:06:D8:1E:EC:BF:DB:78:DF:F4:89:A3:ED:23:07:3D:79:F1:16:D6 ValidityTue, 31 Jan 2023 00:00:00 GMT - Wed, 31 Jan 2024 23:59:59 GMT File type SVG Scalable Vector Graphics image\012- HTML document, ASCII text, with very long lines (1592), with no line terminators Size 621 B (621 bytes) Hash 4e48046ce74f4b89d45037c90576bfac 4a41b3b51ed787f7b33294202da72220c7cd2c32 8e6db1634f1812d42516778fc890010aa57f3e39914fb4803df2c38abbf56d93 HTTP Headers GET /shared/1.0/content/images/signin-options_4e48046ce74f4b89d45037c90576bfac.svg HTTP/1.1 Host: aadcdn.msftauth.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://agnieszkawesecka.pl/ Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache TE: trailers HTTP/2 200 OK content-encoding: gzip accept-ranges: bytes access-control-allow-origin: * access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Length,Date,Transfer-Encoding age: 14853136 cache-control: public, max-age=31536000 content-md5: R2FAVxfpONfnQAuxVxXbHg== content-type: image/svg+xml date: Fri, 01 Dec 2023 22:40:21 GMT etag: 0x8D8852A740F01B9 last-modified: Tue, 10 Nov 2020 03:41:05 GMT server: ECAcc (ska/F695) vary: Accept-Encoding x-cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 59a33b40-f01e-0070-0d90-9de35e000000 x-ms-version: 2009-09-19 content-length: 621 X-Firefox-Spdy: h2

	aadcdn.msauth.net/ests/2.1/content/cdnbundles/converged.v2.login.min_ziytf8dzt9eg1s6-ohhleg2.css	13.107.246.53	200 OK	20 kB
URL GET HTTP/2 aadcdn.msauth.net/ests/2.1/content/cdnbundles/converged.v2.login.min_ziytf8dzt9eg1s6-ohhleg2.css IP 13.107.246.53:443 ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK Requested by https://agnieszkawesecka.pl/online-microsoft_com-48736743377809387436457-microsoft_8476365435473648347765347346837493467354634576726326362456354653263726372635625327637_%D8%AD%D8%B5%20%D8%AD%D8%A8%D9%88%D8%A8%20%D8%A7%D9%84%D8%A3%D8%B1%D8%B2%20%D8%A7%D9%84%D8%AD%D8%A7%D9%85%D8%B6%D8%A9-rr%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7F%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7.html?s=mosborne@apprissretail.com Certificate IssuerDigiCert Inc Subjectaadcdn.msauth.net Fingerprint88:95:0C:FA:9D:33:AA:BF:A4:FD:9D:84:A6:E8:02:06:58:50:AD:8C ValiditySun, 29 Oct 2023 00:00:00 GMT - Tue, 29 Oct 2024 23:59:59 GMT File type ASCII text, with very long lines (61177) Size 20 kB (19953 bytes) Hash ce26137fc0d9b7d7a0d52ebe3a186512 b9d7fb3fe7d08f46c2d1153bb47b13809375c663 1304c5090f063c677a5b3720fe7b97ef4d9ea102e2bdd837ce399df6057fe385 HTTP Headers GET /ests/2.1/content/cdnbundles/converged.v2.login.min_ziytf8dzt9eg1s6-ohhleg2.css HTTP/1.1 Host: aadcdn.msauth.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/css,/;q=0.1 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: https://agnieszkawesecka.pl DNT: 1 Connection: keep-alive Referer: https://agnieszkawesecka.pl/ Sec-Fetch-Dest: style Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache HTTP/2 200 OK cache-control: public, max-age=31536000 content-length: 19953 content-type: text/css content-encoding: gzip content-md5: xg2DER+s52egaL6bUXi4hw== last-modified: Mon, 18 Apr 2022 21:18:26 GMT etag: 0x8DA2180FA29F5AF x-cache: TCP_HIT x-ms-request-id: afb3f6b4-c01e-005b-42f9-207157000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding access-control-allow-origin: * x-azure-ref-originshield: 0UPtkZQAAAACj77pr2uOuRaMWZfUTcK7vQU1TMDRFREdFMTgxMQAzOWExMmY3ZS04OTlmLTQ2Y2YtYTZkMC0yNGJiYmEyN2Q5NTY= x-azure-ref: 01WBqZQAAAAAVRVIYmMrSRKYcvE0NLuG6U1ZHMjBFREdFMDUxOQAzOWExMmY3ZS04OTlmLTQ2Y2YtYTZkMC0yNGJiYmEyN2Q5NTY= date: Fri, 01 Dec 2023 22:40:20 GMT X-Firefox-Spdy: h2

	aadcdn.msftauth.net/shared/1.0/content/images/microsoft_logo_ee5c8d9fb6248c938fd0dc19370e90bd.svg	152.199.23.37	200 OK	1.4 kB
URL GET HTTP/2 aadcdn.msftauth.net/shared/1.0/content/images/microsoft_logo_ee5c8d9fb6248c938fd0dc19370e90bd.svg IP 152.199.23.37:443 ASN #15133 EDGECAST Requested by https://agnieszkawesecka.pl/online-microsoft_com-48736743377809387436457-microsoft_8476365435473648347765347346837493467354634576726326362456354653263726372635625327637_%D8%AD%D8%B5%20%D8%AD%D8%A8%D9%88%D8%A8%20%D8%A7%D9%84%D8%A3%D8%B1%D8%B2%20%D8%A7%D9%84%D8%AD%D8%A7%D9%85%D8%B6%D8%A9-rr%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7F%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7.html?s=mosborne@apprissretail.com Certificate IssuerDigiCert Inc Subjectaadcdn.msftauth.net Fingerprint99:06:D8:1E:EC:BF:DB:78:DF:F4:89:A3:ED:23:07:3D:79:F1:16:D6 ValidityTue, 31 Jan 2023 00:00:00 GMT - Wed, 31 Jan 2024 23:59:59 GMT File type SVG Scalable Vector Graphics image\012- HTML document, ASCII text, with very long lines (3651), with no line terminators Size 1.4 kB (1435 bytes) Hash ee5c8d9fb6248c938fd0dc19370e90bd d01a22720918b781338b5bbf9202b241a5f99ee4 04d29248ee3a13a074518c93a18d6efc491bf1f298f9b87fc989a6ae4b9fad7a HTTP Headers GET /shared/1.0/content/images/microsoft_logo_ee5c8d9fb6248c938fd0dc19370e90bd.svg HTTP/1.1 Host: aadcdn.msftauth.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://agnieszkawesecka.pl/ Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache TE: trailers HTTP/2 200 OK content-encoding: gzip accept-ranges: bytes access-control-allow-origin: * access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Length,Date,Transfer-Encoding age: 27742559 cache-control: public, max-age=31536000 content-md5: nzaLxFgP7ZB3dfMcaybWzw== content-type: image/svg+xml date: Fri, 01 Dec 2023 22:40:21 GMT etag: 0x8D79A1B9F5E121A last-modified: Thu, 16 Jan 2020 00:32:52 GMT server: ECAcc (ska/F7B5) vary: Accept-Encoding x-cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: fc3f3f64-801e-006c-6456-2890f5000000 x-ms-version: 2009-09-19 content-length: 1435 X-Firefox-Spdy: h2

	aadcdn.msftauth.net/shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico	152.199.23.37	200 OK	17 kB
URL GET HTTP/2 aadcdn.msftauth.net/shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico IP 152.199.23.37:443 ASN #15133 EDGECAST Requested by https://agnieszkawesecka.pl/online-microsoft_com-48736743377809387436457-microsoft_8476365435473648347765347346837493467354634576726326362456354653263726372635625327637_%D8%AD%D8%B5%20%D8%AD%D8%A8%D9%88%D8%A8%20%D8%A7%D9%84%D8%A3%D8%B1%D8%B2%20%D8%A7%D9%84%D8%AD%D8%A7%D9%85%D8%B6%D8%A9-rr%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7F%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7.html?s=mosborne@apprissretail.com Certificate IssuerDigiCert Inc Subjectaadcdn.msftauth.net Fingerprint99:06:D8:1E:EC:BF:DB:78:DF:F4:89:A3:ED:23:07:3D:79:F1:16:D6 ValidityTue, 31 Jan 2023 00:00:00 GMT - Wed, 31 Jan 2024 23:59:59 GMT File type MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors\012- data Size 17 kB (17174 bytes) Hash 12e3dac858061d088023b2bd48e2fa96 e08ce1a144eceae0c3c2ea7a9d6fbc5658f24ce5 90cdaf487716184e4034000935c605d1633926d348116d198f355a98b8c6cd21 HTTP Headers `GET /shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico HTTP/1.1 Host: aadcdn.msftauth.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://agnieszkawesecka.pl/ Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache TE: trailers` HTTP/2 200 OK accept-ranges: bytes access-control-allow-origin: * access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Length,Date,Transfer-Encoding age: 15969913 cache-control: public, max-age=31536000 content-md5: EuPayFgGHQiAI7K9SOL6lg== content-type: image/x-icon date: Fri, 01 Dec 2023 22:40:21 GMT etag: 0x8D8731240E548EB last-modified: Sun, 18 Oct 2020 03:02:30 GMT server: ECAcc (ska/F738) x-cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 003b7cc6-501e-0067-4768-9344ba000000 x-ms-version: 2009-09-19 content-length: 17174 X-Firefox-Spdy: h2

	aadcdn.msftauth.net/shared/1.0/content/images/backgrounds/2_bc3d32a696895f78c19df6c717586a5d.svg	152.199.23.37	200 OK	673 B
URL GET HTTP/2 aadcdn.msftauth.net/shared/1.0/content/images/backgrounds/2_bc3d32a696895f78c19df6c717586a5d.svg IP 152.199.23.37:443 ASN #15133 EDGECAST Requested by https://agnieszkawesecka.pl/online-microsoft_com-48736743377809387436457-microsoft_8476365435473648347765347346837493467354634576726326362456354653263726372635625327637_%D8%AD%D8%B5%20%D8%AD%D8%A8%D9%88%D8%A8%20%D8%A7%D9%84%D8%A3%D8%B1%D8%B2%20%D8%A7%D9%84%D8%AD%D8%A7%D9%85%D8%B6%D8%A9-rr%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7F%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7.html?s=mosborne@apprissretail.com Certificate IssuerDigiCert Inc Subjectaadcdn.msftauth.net Fingerprint99:06:D8:1E:EC:BF:DB:78:DF:F4:89:A3:ED:23:07:3D:79:F1:16:D6 ValidityTue, 31 Jan 2023 00:00:00 GMT - Wed, 31 Jan 2024 23:59:59 GMT File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (1864), with no line terminators Size 673 B (673 bytes) Hash bc3d32a696895f78c19df6c717586a5d 9191cb156a30a3ed79c44c0a16c95159e8ff689d 0e88b6fcbb8591edfd28184fa70a04b6dd3af8a14367c628edd7caba32e58c68 HTTP Headers GET /shared/1.0/content/images/backgrounds/2_bc3d32a696895f78c19df6c717586a5d.svg HTTP/1.1 Host: aadcdn.msftauth.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://agnieszkawesecka.pl/ Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache TE: trailers HTTP/2 200 OK content-encoding: gzip accept-ranges: bytes access-control-allow-origin: * access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding age: 14694380 cache-control: public, max-age=31536000 content-md5: DhdidjYrlCeaRJJRG/y9mA== content-type: image/svg+xml date: Fri, 01 Dec 2023 22:40:21 GMT etag: 0x8D7B007297AE131 last-modified: Wed, 12 Feb 2020 22:01:50 GMT server: ECAcc (ska/F732) vary: Accept-Encoding x-cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 68d21ab8-f01e-0076-6702-9f059f000000 x-ms-version: 2009-09-19 content-length: 673 X-Firefox-Spdy: h2

	challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/fal38/0x4AAAAAAANitG7_q4LMVK7c/auto/normal	104.17.3.184	200 OK	73 kB
URL GET HTTP/3 challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/fal38/0x4AAAAAAANitG7_q4LMVK7c/auto/normal IP 104.17.3.184:443 ASN #13335 CLOUDFLARENET Requested by https://agnieszkawesecka.pl/online-microsoft_com-48736743377809387436457-microsoft_8476365435473648347765347346837493467354634576726326362456354653263726372635625327637_%D8%AD%D8%B5%20%D8%AD%D8%A8%D9%88%D8%A8%20%D8%A7%D9%84%D8%A3%D8%B1%D8%B2%20%D8%A7%D9%84%D8%AD%D8%A7%D9%85%D8%B6%D8%A9-rr%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7F%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7.html?s=mosborne@apprissretail.com Certificate IssuerCloudflare, Inc. Subjectchallenges.cloudflare.com Fingerprint5F:E4:AA:8C:2E:24:D2:B1:69:9D:13:28:31:5C:65:FA:97:2A:E9:6E ValidityFri, 18 Aug 2023 00:00:00 GMT - Sat, 17 Aug 2024 23:59:59 GMT File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (40091) Size 73 kB (72920 bytes) Hash df5cb0c3878a091e8d2d54ac95a320a1 2f81a6ed69459cfa6323542a15232463b0540e34 28c305b4b0c6abbca124e4e445e6420679101fbe14078eecdb31ec82023c208f HTTP Headers GET /cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/fal38/0x4AAAAAAANitG7_q4LMVK7c/auto/normal HTTP/1.1 Host: challenges.cloudflare.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://agnieszkawesecka.pl/ Upgrade-Insecure-Requests: 1 Sec-Fetch-Dest: iframe Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache HTTP/3 200 OK date: Fri, 01 Dec 2023 22:40:13 GMT content-type: text/html; charset=UTF-8 cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 content-security-policy: frame-src https://challenges.cloudflare.com/ blob:; base-uri 'self' cross-origin-embedder-policy: require-corp cross-origin-opener-policy: same-origin cross-origin-resource-policy: cross-origin document-policy: js-profiling origin-agent-cluster: ?1 permissions-policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=() referrer-policy: same-origin server: cloudflare cf-ray: 82eed4a63a4fb50b-OSL content-encoding: br alt-svc: h3=":443"; ma=86400

	segy.shop/cap.php	152.89.246.205	200 OK	31 kB
URL POST HTTP/1.1 segy.shop/cap.php IP 152.89.246.205:443 ASN #30823 combahton GmbH Requested by https://agnieszkawesecka.pl/online-microsoft_com-48736743377809387436457-microsoft_8476365435473648347765347346837493467354634576726326362456354653263726372635625327637_%D8%AD%D8%B5%20%D8%AD%D8%A8%D9%88%D8%A8%20%D8%A7%D9%84%D8%A3%D8%B1%D8%B2%20%D8%A7%D9%84%D8%AD%D8%A7%D9%85%D8%B6%D8%A9-rr%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7F%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7.html?s=mosborne@apprissretail.com Certificate IssuerLet's Encrypt Subjectsegy.shop FingerprintEB:95:7A:90:22:94:A6:8D:13:EE:A6:CE:16:62:13:B3:B8:E5:58:43 ValidityThu, 30 Nov 2023 09:25:10 GMT - Wed, 28 Feb 2024 09:25:09 GMT File type JSON data\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (30978), with no line terminators Size 31 kB (30978 bytes) Hash b2ed6808a3fbf0230a5e35a36ffbf0c4 1c66b9f280290364382cf571fe9e9769432fb4fb 317a8bee521641671a95648e5009caae07b5411c2853cb5e0b56f1273c3ac7cc HTTP Headers POST /cap.php HTTP/1.1 Host: segy.shop User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: application/json, text/javascript, /; q=0.01 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Content-Type: application/x-www-form-urlencoded; charset=UTF-8 Content-Length: 647 Origin: https://agnieszkawesecka.pl DNT: 1 Connection: keep-alive Referer: https://agnieszkawesecka.pl/ Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache `HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Dec 2023 22:40:16 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Access-Control-Allow-Origin: * Content-Encoding: gzip`

	challenges.cloudflare.com/turnstile/v0/api.js?onload=onloadTurnstileCallback	104.17.3.184	302 Found	34 kB
URL GET HTTP/2 challenges.cloudflare.com/turnstile/v0/api.js?onload=onloadTurnstileCallback IP 104.17.3.184:443 ASN #13335 CLOUDFLARENET Requested by https://agnieszkawesecka.pl/online-microsoft_com-48736743377809387436457-microsoft_8476365435473648347765347346837493467354634576726326362456354653263726372635625327637_%D8%AD%D8%B5%20%D8%AD%D8%A8%D9%88%D8%A8%20%D8%A7%D9%84%D8%A3%D8%B1%D8%B2%20%D8%A7%D9%84%D8%AD%D8%A7%D9%85%D8%B6%D8%A9-rr%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7F%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7.html?s=mosborne@apprissretail.com Certificate IssuerCloudflare, Inc. Subjectchallenges.cloudflare.com Fingerprint5F:E4:AA:8C:2E:24:D2:B1:69:9D:13:28:31:5C:65:FA:97:2A:E9:6E ValidityFri, 18 Aug 2023 00:00:00 GMT - Sat, 17 Aug 2024 23:59:59 GMT File type Size 34 kB (33876 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers `GET /turnstile/v0/api.js?onload=onloadTurnstileCallback HTTP/1.1 Host: challenges.cloudflare.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://agnieszkawesecka.pl/ Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` `HTTP/2 302 Found date: Fri, 01 Dec 2023 22:40:13 GMT access-control-allow-origin: * cache-control: max-age=300, public location: /turnstile/v0/b/56d3063b/api.js?onload=onloadTurnstileCallback vary: accept-encoding server: cloudflare cf-ray: 82eed4a4c90356bf-OSL alt-svc: h3=":443"; ma=86400 X-Firefox-Spdy: h2`

	challenges.cloudflare.com/turnstile/v0/b/56d3063b/api.js?onload=onloadTurnstileCallback	104.17.3.184	200 OK	34 kB
URL GET HTTP/3 challenges.cloudflare.com/turnstile/v0/b/56d3063b/api.js?onload=onloadTurnstileCallback IP 104.17.3.184:443 ASN #13335 CLOUDFLARENET Requested by https://agnieszkawesecka.pl/online-microsoft_com-48736743377809387436457-microsoft_8476365435473648347765347346837493467354634576726326362456354653263726372635625327637_%D8%AD%D8%B5%20%D8%AD%D8%A8%D9%88%D8%A8%20%D8%A7%D9%84%D8%A3%D8%B1%D8%B2%20%D8%A7%D9%84%D8%AD%D8%A7%D9%85%D8%B6%D8%A9-rr%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7F%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7.html?s=mosborne@apprissretail.com Certificate IssuerCloudflare, Inc. Subjectchallenges.cloudflare.com Fingerprint5F:E4:AA:8C:2E:24:D2:B1:69:9D:13:28:31:5C:65:FA:97:2A:E9:6E ValidityFri, 18 Aug 2023 00:00:00 GMT - Sat, 17 Aug 2024 23:59:59 GMT File type ASCII text, with very long lines (33875) Size 34 kB (33876 bytes) Hash 8c90f391245a994ae95e644a587c8626 7bfc99336571d0ccfe38f9e1d18cb26b4adfc316 acbe221d9bb71e85d0a3b52a7a9d44ee4669ab664186b32d0c737a2be62681e7 HTTP Headers `GET /turnstile/v0/b/56d3063b/api.js?onload=onloadTurnstileCallback HTTP/1.1 Host: challenges.cloudflare.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://agnieszkawesecka.pl/ DNT: 1 Connection: keep-alive Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` `HTTP/3 200 OK date: Fri, 01 Dec 2023 22:40:13 GMT content-type: application/javascript; charset=UTF-8 access-control-allow-origin: * cache-control: max-age=31536000 vary: Accept-Encoding server: cloudflare cf-ray: 82eed4a4f978b50b-OSL content-encoding: br alt-svc: h3=":443"; ma=86400`

	agnieszkawesecka.pl/favicon.ico	104.21.85.41	404 Not Found	27 kB
URL GET HTTP/2 agnieszkawesecka.pl/favicon.ico IP 104.21.85.41:443 ASN #13335 CLOUDFLARENET Requested by https://agnieszkawesecka.pl/online-microsoft_com-48736743377809387436457-microsoft_8476365435473648347765347346837493467354634576726326362456354653263726372635625327637_%D8%AD%D8%B5%20%D8%AD%D8%A8%D9%88%D8%A8%20%D8%A7%D9%84%D8%A3%D8%B1%D8%B2%20%D8%A7%D9%84%D8%AD%D8%A7%D9%85%D8%B6%D8%A9-rr%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7F%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7.html?s=mosborne@apprissretail.com Certificate IssuerLet's Encrypt Subjectagnieszkawesecka.pl FingerprintED:DD:EC:0A:35:7D:02:85:E0:91:DD:95:17:23:1F:83:E6:17:49:00 ValidityThu, 23 Nov 2023 03:13:02 GMT - Wed, 21 Feb 2024 03:13:01 GMT File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (611) Size 27 kB (27242 bytes) Hash df3d48946e8d3f5a83608308edbb4b86 47b9c40c97abf2658df96b1c06109324e15e1a00 570a6631252b8a52df4de0e953ae77dbdf524dfc3637cda2840494a0d2b49499 HTTP Headers GET /favicon.ico HTTP/1.1 Host: agnieszkawesecka.pl User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://agnieszkawesecka.pl/online-microsoft_com-48736743377809387436457-microsoft_8476365435473648347765347346837493467354634576726326362456354653263726372635625327637_%D8%AD%D8%B5%20%D8%AD%D8%A8%D9%88%D8%A8%20%D8%A7%D9%84%D8%A3%D8%B1%D8%B2%20%D8%A7%D9%84%D8%AD%D8%A7%D9%85%D8%B6%D8%A9-rr%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7F%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7.html?s=mosborne@apprissretail.com Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache HTTP/2 404 Not Found date: Fri, 01 Dec 2023 22:40:13 GMT content-type: text/html vary: Accept-Encoding cache-control: max-age=14400 cf-cache-status: HIT age: 17 report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=tA9m%2BRCToq28Mpfefcs2E6XLXCIv0OJLt%2BXCzJcimDxKcU%2BvkQF6SL062voWTjDkazbIrswwuLn0YQjqxoJvJtr%2FyfME6jJkjZMfjgQwVouba93pW3YsLglKNSJKUT5c%2BJyDWeAb"}],"group":"cf-nel","max_age":604800} nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} server: cloudflare cf-ray: 82eed4a61ec95690-OSL content-encoding: br alt-svc: h3=":443"; ma=86400 X-Firefox-Spdy: h2

Report Overview

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (10)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML

Observations

Hash

Observations

Hash

Observations

Hash

Observations

Hash

Observations

Hash

Observations

Hash

HTTP Transactions (17)

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL User Request GET HTTP/2

IP

ASN

Certificate