{"report_id":"d6119dec-b5e2-47be-8254-c2e6b4fc01c2","version":6,"status":"done","tags":["phishing","microsoft","outlook"],"date":"2023-11-21T07:44:16Z","url":{"schema":"http","addr":"elhamadsteel.com/wp-admin/js/auth/esmjL/YWxiZXJ0b0BlbHphYnVydS5lcw==","fqdn":"elhamadsteel.com","domain":"elhamadsteel.com","tld":"com"},"ip":{"addr":"192.185.88.231","port":0,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"osnrafbtea.oneswittla.ru/kswqjl/#alberto@elzaburu.es","fqdn":"osnrafbtea.oneswittla.ru","domain":"oneswittla.ru","tld":"ru"},"title":"Sign in to your Microsoft account"},"submit":{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":""},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-10-26T12:14:57Z","useragent":"Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0","referer":"","cookies":null,"exit_node":"default"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"aadcdn.msftauth.net","ip":{"addr":"152.199.23.37","port":443,"asn":15133,"as":"EDGECAST","country":"United States","country_code":"US"},"domain_registered":"2018-10-25","domain_rank":1455,"first_seen":"2018-11-19 11:50:32","last_seen":"2023-11-21 05:09:23","alert_count":0,"request_count":3,"received_data":6112,"sent_data":1524,"comment":"","tags":null,"fingerprints":null},{"fqdn":"code.jquery.com","ip":{"addr":"151.101.194.137","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2005-12-10","domain_rank":634,"first_seen":"2012-05-21 19:28:02","last_seen":"2023-11-21 05:09:18","alert_count":0,"request_count":1,"received_data":90090,"sent_data":422,"comment":"","tags":null,"fingerprints":null},{"fqdn":"aadcdn.msauth.net","ip":{"addr":"13.107.246.53","port":443,"asn":8068,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"domain_registered":"2018-10-25","domain_rank":1421,"first_seen":"2018-11-19 11:50:03","last_seen":"2023-11-21 05:09:23","alert_count":0,"request_count":1,"received_data":1616,"sent_data":500,"comment":"","tags":null,"fingerprints":null},{"fqdn":"adfs.heart.org","ip":{"addr":"69.152.183.140","port":443,"asn":7018,"as":"ATT-INTERNET4","country":"United States","country_code":"US"},"domain_registered":"1995-01-12","domain_rank":0,"first_seen":"2016-10-10 20:42:57","last_seen":"2023-11-20 03:49:53","alert_count":0,"request_count":1,"received_data":6905,"sent_data":446,"comment":"","tags":null,"fingerprints":null},{"fqdn":"httpbin.org","ip":{"addr":"3.226.223.40","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"domain_registered":"2011-06-12","domain_rank":352975,"first_seen":"2013-07-23 00:01:27","last_seen":"2023-11-21 05:09:25","alert_count":0,"request_count":1,"received_data":283,"sent_data":480,"comment":"","tags":null,"fingerprints":null},{"fqdn":"challenges.cloudflare.com","ip":{"addr":"104.17.2.184","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":0,"first_seen":"2021-10-20 07:02:03","last_seen":"2023-11-21 05:09:18","alert_count":0,"request_count":3,"received_data":142930,"sent_data":1534,"comment":"","tags":null,"fingerprints":null},{"fqdn":"cdn.socket.io","ip":{"addr":"143.204.55.40","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2010-04-18","domain_rank":62068,"first_seen":"2015-03-23 23:14:03","last_seen":"2023-11-19 19:45:11","alert_count":0,"request_count":1,"received_data":46488,"sent_data":423,"comment":"","tags":null,"fingerprints":null},{"fqdn":"elhamadsteel.com","ip":{"addr":"192.185.88.231","port":0,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"domain_registered":"2019-11-14","domain_rank":0,"first_seen":"2020-01-28 21:15:48","last_seen":"2023-11-19 20:58:49","alert_count":1,"request_count":1,"received_data":245,"sent_data":524,"comment":"","tags":null,"fingerprints":null},{"fqdn":"osnrafbtea.oneswittla.ru","ip":{"addr":"172.67.218.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"domain_registered":"2023-11-01","domain_rank":0,"first_seen":"2023-11-03 14:57:42","last_seen":"2023-11-20 18:15:31","alert_count":1,"request_count":29,"received_data":740456,"sent_data":23500,"comment":"","tags":null,"fingerprints":null},{"fqdn":"logincdn.msauth.net","ip":{"addr":"192.229.221.185","port":443,"asn":15133,"as":"EDGECAST","country":"United States","country_code":"US"},"domain_registered":"2018-10-25","domain_rank":2330,"first_seen":"2019-04-23 03:13:28","last_seen":"2023-11-20 05:31:50","alert_count":0,"request_count":1,"received_data":992,"sent_data":508,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":[{"sensor_name":"infosec_yara","type":"yara","description":"Public InfoSec YARA rules","link":"","alerts":null},{"sensor_name":"openphish","type":"url","description":"OpenPhish","link":"","alerts":null},{"sensor_name":"phishtank","type":"url","description":"PhishTank","link":"","alerts":null},{"sensor_name":"mnemonic_dns","type":"domain","description":"mnemonic secure dns","link":"","alerts":null},{"sensor_name":"quad9","type":"domain","description":"Quad9 DNS","link":"","alerts":null},{"sensor_name":"threatfox","type":"url","description":"ThreatFox","link":"","alerts":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Microsoft Outlook","verdict":"phishing","severity":"medium","comment":"","tags":["phishing","microsoft","outlook"],"meta":null}]},"javascript":{"script":[{"url":{"schema":"https","addr":"cdn.socket.io/4.6.0/socket.io.min.js","fqdn":"cdn.socket.io","domain":"socket.io","tld":"io"},"ip":{"addr":"143.204.55.40","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"80f5b8c6a9eeac15de93e5a112036a06","sha1":"f7174635137d37581b11937fc90e9cb325077bce","sha256":"0401de33701f1cad16ecf952899d23990b6437d0a5b7335524edf6bdfb932542","sha512":"b976a5f02202439d94c6817d037c813fa1945c6bb93762284d97ff61718c5b833402f372562034663a467fdbaa46990de24cb1e356392340e64d034e4ba1b4e4","ssdeep":"384:1ZS0CCnasl8gRR/PoPez+iCMN0Fkiw2Jh4RWdRGhAjbp2ChPL8cYRGv5MRUK6np9:/CCnVl7tUkBxkdRGOfDiY5C5MAn5GY2","tlshash":"1423a488f2a1b06187e37165443f110ba27a746964c9c18cf639d9f19eb8ece7123f79","size":45806,"data":"","first_seen":"2023-04-05T03:09:50Z","last_seen":"2026-05-20T10:24:40.220607Z","times_seen":39679,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"29d0c84b9d1d8da446a6062c6a840ad9","sha1":"6d6b3a6065667c7c50d92f3889c85ed65a9ad784","sha256":"3c3cbdb71d0d2c22f504f4d63d8a6ffe8d250cde7e58300619be35b6bbab26a1","sha512":"52cfcbf2f7c3521c5a6c6120099ee6822d16e04ffbc04720da925a11242c8c2050f9cfc8d864a6d39a0036ac599f701080195a29a7c5e8d3e9308b91f9f0390f","ssdeep":"","tlshash":"679004dd3d51d000433350f04c17d4d5f0340c3030541d00750dd4475c7111c4135c7c","size":37,"data":"","first_seen":"2023-04-11T21:31:25Z","last_seen":"2026-05-20T16:56:19.415916Z","times_seen":663406,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/turnstile/v0/api.js?render=explicit","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.2.184","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6142a5f5c66e2c1be52ee9506a565962","sha1":"c3b39e8352efd1e0619b6dd62af8b2a917622868","sha256":"51cd12da61a7401c73472b2ac77067adfa30e9fc0545b4b7c240e9154e011fc7","sha512":"3de194e4c8f32703cfee9e2a48230d21301e28a39beefb36dcb2b8df26b962b3a508e7fd8fe55aca2f619293e293cdf64459bf5d91526cbceda770396765d5e2","ssdeep":"768:3YpyCIUTKuBT1ytljuXeMDKLFn76p+B5nLZ73akHgMO4B4oq0HVi:30nKuBT1Yj7MDCKp","tlshash":"9ff229993187343187ee41e0207b67877339ba3ae58cc840d85bc97539bcd8ad137ba9","size":34254,"data":"","first_seen":"2023-11-07T13:44:12Z","last_seen":"2023-11-30T20:53:42Z","times_seen":32842,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"aa049e2749b8531cb8f233c2f64fc2b2","sha1":"b611a5a62c1813ae5b4763378b3a4a565556530a","sha256":"e52e51d5897d7a179089ddcf8f5de7aeb3ef4f27b054b63e937cf308b685c9e2","sha512":"fa951f3911de780608d6235a597758320388dff58cf18dd584a6941ac88cc36cac7d52caa72b678ee6f4dff47ee23955ab282714d03e713ae2bed4cb73a3c14e","ssdeep":"","tlshash":"afa012c87a99f408423260f04c3b808de0352c20348c544069098c556c711098336d1c","size":79,"data":"","first_seen":"2023-04-11T21:38:58Z","last_seen":"2026-05-20T16:57:12.638162Z","times_seen":220183,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"osnrafbtea.oneswittla.ru/kswqjl/myscr558155.js","fqdn":"osnrafbtea.oneswittla.ru","domain":"oneswittla.ru","tld":"ru"},"ip":{"addr":"172.67.218.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"5e599bb61a003dee7c1d98c60d7b58f2","sha1":"6531b529c505015f7baf8f6cc71da6aa08d467ce","sha256":"2cf2c32a1e9c9aab13a8f042dd989be980cbf14c3e7bce0a8e177cc5095d17f4","sha512":"96a332b81c05e082ffb955edb98c032918774ef7b79c1a49c549cfb34dffbb9ad9445f14ec0c4c2dec9b86ca0f1c2e1c0cad63ab7518edbccbe674dde93c2afe","ssdeep":"384:b3r54VKvlTxQQIkqZ/Ya39g4ZBBXa/8iW72sJFW32F5I2FMB2hPSL:b754VKo39HxQGJ8tlVL","tlshash":"a1c2db180e04efb092bf078385919e885924eb9bfbd8ec5d41935ad3f6193a7c6d7c48","size":27865,"data":"","first_seen":"2023-11-08T19:12:35Z","last_seen":"2023-11-28T00:09:45Z","times_seen":1519,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"8b110d3226adfd145b228f0c04fb42e6","sha1":"f60b1e8f666c66666b27db9936e442169fb4f4cb","sha256":"35d68a5bed2368594a9ee3b4b5c70dc8a51a028ba5060a57a25a406a6ba17d22","sha512":"3ed5dd7ec522f3ee7c0e84945bbeda27c3cbdc67ac96922d316c0b1936ffde8f8546863080ca1fc773ff603519cc6fc2ffcc366ade1c49455f889f6445d9d328","ssdeep":"","tlshash":"fbe068202d7382501c1a916e767be2943ca100033002f0ab368fab380f21fc684f59f4","size":373,"data":"","first_seen":"2023-11-08T19:12:35Z","last_seen":"2024-08-20T20:23:02.172573Z","times_seen":1519,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"osnrafbtea.oneswittla.ru/web1/assets/js/pages-head-top-web.min.js?cb=1700552640702","fqdn":"osnrafbtea.oneswittla.ru","domain":"oneswittla.ru","tld":"ru"},"ip":{"addr":"172.67.218.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"5587d13a8f284b6b792c72a3d569c7ae","sha1":"2ad2b05b75fa15e7f15fdea3ed4771b166f5f41e","sha256":"de59ea88654c99cb8b905042b552d9a960be17031538c7a2e65950b8f99089cd","sha512":"d29828c19c9f0881e413064d61c34f60fedda46ffb23f91d1787c3e68c8dce54a2259245385117e6732c560c77d25cf74200cf0a4936b7f89201cda83c611589","ssdeep":"","tlshash":"ee41e2103015476d4a7f238ef4715868bdd583263525b890c0afb89cb4b2fd605a6f77","size":2394,"data":"","first_seen":"2023-10-23T01:34:22Z","last_seen":"2024-08-21T03:48:31.202964Z","times_seen":3776,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"osnrafbtea.oneswittla.ru/web1/assets/js/pages-head-web.min.js?cb=1700552641731","fqdn":"osnrafbtea.oneswittla.ru","domain":"oneswittla.ru","tld":"ru"},"ip":{"addr":"172.67.218.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"701637cf7b3c9588cdf84dbb449ba48e","sha1":"a3fd0695db073372cbb52345cb18cd4f8186edeb","sha256":"fe2ea5cd48f2ca8001c5283ee74d2b41305644374b0c1e7b90b9cb6b5bb73a94","sha512":"c164a8263f80e6d51fb5fca897fdd481f13072726dab7674a8d2291db6bdd178015c60d1396b505488d610c690fb7d20e3247a14b9a41f93cf1a74b58df022dd","ssdeep":"384:VJS8baODLnsyoufnuP7k8ZGEWtMaAJyAdX220BQfwxuGKcKpFHU4PxS1eD:TSzODrsyoufnuP7kHE5aAJyAdX2pBQf1","tlshash":"415272857af46dd5075326bbb337b4e8f0663c983490a89bf214bc84b8f0642f5e19b4","size":13626,"data":"","first_seen":"2023-10-22T15:28:58Z","last_seen":"2023-12-13T02:19:04Z","times_seen":13891,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"osnrafbtea.oneswittla.ru/web1/assets/js/pages.min.js?cb=1700552641731","fqdn":"osnrafbtea.oneswittla.ru","domain":"oneswittla.ru","tld":"ru"},"ip":{"addr":"172.67.218.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"16d4296fd1c5e8424d0d1ac72bd24267","sha1":"2cecad8640c7bbd71f5c4a1e63b0744ccea4919a","sha256":"c51aa4190d40abba316825083c097b1d27b8299ba86082af950e17f2d372b7f5","sha512":"7787b00cc7e2f4c164711a56e835efb228bf81a6f1c5930ca98cea5e760937ff095493021f2c5149a5fbef23376c5b773da9c723b78bd04c3b180b879756b46e","ssdeep":"1536:5B5V5D6BRozHR8qah7otG5DYg5ML/oEDg5Mv9oJ4NjTQsw3KDNo4jkrBKam+Qx2s:5BEmzxP4sUJ42sw3KP6uNz","tlshash":"f19363037e50da9e335b4eba313379e4f466055979c19e8ae05cec2196d9b23fae1c30","size":92383,"data":"","first_seen":"2023-11-01T21:13:14Z","last_seen":"2024-08-20T21:28:05.646882Z","times_seen":6471,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/jquery-3.6.0.min.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.194.137","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"8fb8fee4fcc3cc86ff6c724154c49c42","sha1":"b82d238d4e31fdf618bae8ac11a6c812c03dd0d4","sha256":"ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e","sha512":"f3de1813a4160f9239f4781938645e1589b876759cd50b7936dbd849a35c38ffaed53f6a61dbdd8a1cf43cf4a28aa9fffbfddeec9a3811a1bb4ee6df58652b31","ssdeep":"1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn","tlshash":"069309ddb2c6702257a720ba007f510bf236199d6c4d8450f169d8eabc78a4e827bf7d","size":89501,"data":"","first_seen":"2023-03-07T01:02:13Z","last_seen":"2026-05-20T16:48:19.221913Z","times_seen":471498,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":[{"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-05-20T16:55:42.298667Z","times_seen":712804,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"c76baa01dd70215163561b37aea7db87","sha1":"c7856fc643ce923384266b97c10b9ab4e2de3c6e","sha256":"d1bd71111a73f2d379ffde1e50d8c0dc04e089c4205986003b4351942caee84a","sha512":"627b4cf62c44657d45eb3518762b557837c56a534c663572ccbf1e7d6b8502cabfe1fd0e5feab6b6652cc7945811590ed0e83648c8198dc0cba35956a57b7e23","ssdeep":"","tlshash":"f2c02bc6f32809032e18180f3c9c80232810127ac984c8e7833e344708cc5c001b9248","size":144,"data":"","first_seen":"2023-11-07T13:07:13Z","last_seen":"2024-08-20T20:33:21.263817Z","times_seen":12294,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"30ed70eb0bac57f2a54a7cf4d5dd7d45","sha1":"c9451528a1708294d26d346e159a1716e2027dff","sha256":"adf0d278fc8741383ce61ed9ea6049547620d23617b7ab27a84db19240728ff8","sha512":"324d2ade1bf736cc57533239d4334305ebb5dc2ad8833e6f22a17e703d308ea5b4d54b6424f51b094b063b708ca55c76d40ad5dbb8f72cf797786ff41a0f5228","ssdeep":"","tlshash":"dbf00e8ec08333847f9e7bed31093d980aad1bc35568ec1c750564f01fd976110ce505","size":632,"data":"","first_seen":"2024-08-20T18:31:14.551345Z","last_seen":"2024-08-20T18:31:14.551345Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"write":[{"md5":"e6551f525460f84f747d63ef38ee439b","sha1":"31a3af3df980c8f2a340080fa4940f608d37d2d6","sha256":"d7435a733ece9ff76f6c20b0319e53de588a20594095eb707d81512f9b1fcdb9","sha512":"9b85813712784c61219d52f6a838725d2113c5fdef72f89add156cdff71755322f554c0ad6845ee9d2fcdc55814c8a7f921dffb953625eed5c416e663b03e1cf","ssdeep":"96:rCxrYlLCC3HZr5k9ZBDZU4coP9uhYWWNuCuDf56ywZvKg:jY+HSxPQhYSDsYg","tlshash":"26a13262a5b29765ed7240b223a29bf4f8454003b706887676d7630f5ff6bf1c482be4","size":4765,"data":"","first_seen":"2023-11-08T19:12:35Z","last_seen":"2024-08-20T20:23:02.176342Z","times_seen":1519,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"a27c88365ce7cd8f68390c4c024e29e1","sha1":"1d15a8d192608f93096ef8d9aa623c360dbb7351","sha256":"0ca2b3df8f04565300bafcd6c929a1d310d2a761ff9f8dda200f3f6cffab50ce","sha512":"1ce1d149845e13e3f312f848dcbd973d241a0815da5aa7202a2db68160a84a21e9585bc115a3020ffc995139a8a25f44c0f28f51e5f9a9099753708e937d6584","ssdeep":"","tlshash":"e671c264acf3509185cbd30cbbe0ed861be0b1a3919a5656bb4c874ec7857ec8957f02","size":3574,"data":"","first_seen":"2023-11-07T13:07:13Z","last_seen":"2024-08-20T20:33:21.268002Z","times_seen":72071,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"086707e4369f60afedcafb16050a7618","sha1":"8216b0cc6876cbd44f01c158e7dff3833ceccd41","sha256":"a7fe83ec64bb23eb28090598db3d166ed98e52e39d1afbbfd74c579553f93e4e","sha512":"aade21843813e2cab329b99185c6f61db7907a556ea974e0315dcf3ad967cab20fee66d4f10db0d0ec43a71e086ce6d700d5524103deaefa3ce5f6be74ba5737","ssdeep":"","tlshash":"6a9000fee0a2000efc303bc00cc2238a0c28c3a830028e002ac038b8c80822bcc032c8","size":39,"data":"","first_seen":"2023-03-07T01:03:24Z","last_seen":"2026-05-20T16:56:10.665769Z","times_seen":942634,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"console":null},"http":[{"url":{"schema":"http","addr":"elhamadsteel.com/wp-admin/js/auth/esmjL/YWxiZXJ0b0BlbHphYnVydS5lcw==","fqdn":"elhamadsteel.com","domain":"elhamadsteel.com","tld":"com"},"ip":{"addr":"192.185.88.231","port":0,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2023-11-21T07:43:59.748977766Z","timestamp":1700552639749,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /wp-admin/js/auth/esmjL/YWxiZXJ0b0BlbHphYnVydS5lcw== HTTP/1.1\r\nHost: elhamadsteel.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/2 200 OK\r\nrefresh: 0;url=https://osnrafbtea.oneswittla.ru/kswqjl/#alberto@elzaburu.es\r\naccept-ranges: none\r\ncontent-length: 0\r\ncontent-type: text/html; charset=UTF-8\r\ndate: Tue, 21 Nov 2023 07:43:57 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-20T16:56:15.989935Z","times_seen":15496273,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Microsoft Outlook","verdict":"phishing","severity":"medium","comment":"","tags":["phishing","microsoft","outlook"],"meta":null}]}},{"url":{"schema":"https","addr":"osnrafbtea.oneswittla.ru/kswqjl/myscr558155.js","fqdn":"osnrafbtea.oneswittla.ru","domain":"oneswittla.ru","tld":"ru"},"ip":{"addr":"172.67.218.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://osnrafbtea.oneswittla.ru/kswqjl/#alberto@elzaburu.es","date":"2023-11-21T07:44:00.509Z","timestamp":1700552640509,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oneswittla.ru","organization":""},"issuer":{"commonName":"GTS CA 1P5","organization":"Google Trust Services LLC"},"validity":{"start":"Wed, 01 Nov 2023 16:29:11 GMT","end":"Tue, 30 Jan 2024 16:29:10 GMT"},"fingerprint":{"sha1":"42:11:11:15:F6:40:D4:B8:81:C3:A5:90:8E:27:09:05:06:2B:51:36","sha256":"70:20:9A:17:36:07:97:75:00:A2:85:E8:C1:BF:E0:1C:66:91:FA:6C:AE:86:F0:B7:3F:3A:BB:16:1E:F7:2C:B3"}}},"request":{"raw":"GET /kswqjl/myscr558155.js HTTP/1.1\r\nHost: osnrafbtea.oneswittla.ru\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://osnrafbtea.oneswittla.ru/kswqjl/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 21 Nov 2023 07:43:58 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 02 Nov 2023 14:13:15 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nage: 14\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=%2FDEJCYY9gsGXLZ2T01nAtsTPgLbCkXUPHXtP1uPw01Z7UZ6WJ2MzOFuI6wdxwdNJ5pMeGxEMLiWivqc3oyNAtkc6CshfvIs%2BNU6GRVULJoVqr%2FuJYJCyU4j%2F%2FQPsj0z7Y5XweALQx9BYG8Y%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 82974e073aa256be-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":38604,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text","md5":"5e599bb61a003dee7c1d98c60d7b58f2","sha1":"6531b529c505015f7baf8f6cc71da6aa08d467ce","sha256":"2cf2c32a1e9c9aab13a8f042dd989be980cbf14c3e7bce0a8e177cc5095d17f4","sha512":"96a332b81c05e082ffb955edb98c032918774ef7b79c1a49c549cfb34dffbb9ad9445f14ec0c4c2dec9b86ca0f1c2e1c0cad63ab7518edbccbe674dde93c2afe","ssdeep":"384:b3r54VKvlTxQQIkqZ/Ya39g4ZBBXa/8iW72sJFW32F5I2FMB2hPSL:b754VKo39HxQGJ8tlVL","tlshash":"a1c2db180e04efb092bf078385919e885924eb9bfbd8ec5d41935ad3f6193a7c6d7c48","first_seen":"2023-11-08T19:12:35Z","last_seen":"2023-11-28T00:09:45Z","times_seen":1519,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"osnrafbtea.oneswittla.ru/web1/assets/fonts/GDSherpa-bold.woff2","fqdn":"osnrafbtea.oneswittla.ru","domain":"oneswittla.ru","tld":"ru"},"ip":{"addr":"172.67.218.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://osnrafbtea.oneswittla.ru/kswqjl/#alberto@elzaburu.es","date":"2023-11-21T07:44:01.768Z","timestamp":1700552641768,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oneswittla.ru","organization":""},"issuer":{"commonName":"GTS CA 1P5","organization":"Google Trust Services LLC"},"validity":{"start":"Wed, 01 Nov 2023 16:29:11 GMT","end":"Tue, 30 Jan 2024 16:29:10 GMT"},"fingerprint":{"sha1":"42:11:11:15:F6:40:D4:B8:81:C3:A5:90:8E:27:09:05:06:2B:51:36","sha256":"70:20:9A:17:36:07:97:75:00:A2:85:E8:C1:BF:E0:1C:66:91:FA:6C:AE:86:F0:B7:3F:3A:BB:16:1E:F7:2C:B3"}}},"request":{"raw":"GET /web1/assets/fonts/GDSherpa-bold.woff2 HTTP/1.1\r\nHost: osnrafbtea.oneswittla.ru\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://osnrafbtea.oneswittla.ru/kswqjl/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 21 Nov 2023 07:43:59 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 28000\r\nlast-modified: Fri, 25 Aug 2023 04:00:16 GMT\r\netag: \"6d60-603b761e42cdb\"\r\naccess-control-allow-origin: *\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: DENY\r\ncontent-security-policy: frame-ancestors 'none'\r\ncache-control: max-age=14400\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=bMOruuk17gDzXZubUK50X%2Fva2nmrV7opkZ5jTkoOaGHv81tkl1d3g36%2FlnHqiHFnTK0F43t6Q28XSg2mpB0ufRCyINChjqKKRaRqEfJVWNJG4FjzaW%2Fx2ueXy7ozsJ5cKl2mCujh\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: HIT\r\nage: 13\r\naccept-ranges: bytes\r\nserver: cloudflare\r\ncf-ray: 82974e0f087d56be-OSL\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":28000,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 28000, version 1.66\\012- data","md5":"a4bca6c95fed0d0c5cc46cf07710dcec","sha1":"73b56e33b82b42921db8702a33efd0f2b2ec9794","sha256":"5a51d246af54d903f67f07f2bd820ce77736f8d08c5f1602db07469d96dbf77f","sha512":"60a058b20fcb4f63d02e89225a49226ccd7758c21d9162d1b2f4b53bba951b1c51d3d74c562029f417d97f1fca93f25fdd2bc0501f215e3c1ef076810b54dd06","ssdeep":"768:NDT1rKvlJOE1AgLlnGj8H58AJUcl5I17ML7FfNHubNIphqb:NDtKvyAhjHeACcl21YL7KNW+","tlshash":"cfc2f1878fd02879a72dfeb80252903197d00de93fea42318d99b70fe683987515e272","first_seen":"2023-04-09T13:59:19Z","last_seen":"2026-05-20T08:28:36.250147Z","times_seen":95131,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"osnrafbtea.oneswittla.ru/web1/assets/fonts/GDSherpa-bold.woff","fqdn":"osnrafbtea.oneswittla.ru","domain":"oneswittla.ru","tld":"ru"},"ip":{"addr":"172.67.218.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://osnrafbtea.oneswittla.ru/kswqjl/#alberto@elzaburu.es","date":"2023-11-21T07:44:01.770Z","timestamp":1700552641770,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oneswittla.ru","organization":""},"issuer":{"commonName":"GTS CA 1P5","organization":"Google Trust Services LLC"},"validity":{"start":"Wed, 01 Nov 2023 16:29:11 GMT","end":"Tue, 30 Jan 2024 16:29:10 GMT"},"fingerprint":{"sha1":"42:11:11:15:F6:40:D4:B8:81:C3:A5:90:8E:27:09:05:06:2B:51:36","sha256":"70:20:9A:17:36:07:97:75:00:A2:85:E8:C1:BF:E0:1C:66:91:FA:6C:AE:86:F0:B7:3F:3A:BB:16:1E:F7:2C:B3"}}},"request":{"raw":"GET /web1/assets/fonts/GDSherpa-bold.woff HTTP/1.1\r\nHost: osnrafbtea.oneswittla.ru\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://osnrafbtea.oneswittla.ru/kswqjl/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 21 Nov 2023 07:43:59 GMT\r\ncontent-type: font/woff\r\ncontent-length: 35970\r\nlast-modified: Fri, 25 Aug 2023 04:00:22 GMT\r\netag: \"8c82-603b7623b006b\"\r\naccess-control-allow-origin: *\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: DENY\r\ncontent-security-policy: frame-ancestors 'none'\r\ncache-control: max-age=14400\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=Su%2F333HG3HJyj36fLheFvHMmII5atcEaBhpwaW9JZM89ClsyZABln6kAWdD9s%2BaD4lJhovnJxGUbdh%2BKYzsj54qH9M%2BYPOi8RoBNfdGEI%2FOjuhuO7zJXpKwBAhaJDF9u4ySfps62\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: HIT\r\nage: 14\r\naccept-ranges: bytes\r\nserver: cloudflare\r\ncf-ray: 82974e0f087f56be-OSL\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":35970,"size_decoded":0,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 35970, version 1.0\\012- data","md5":"496b7bbde91c7dc7cf9bbabbb3921da8","sha1":"2bd3c406a715ab52dad84c803c55bf4a6e66a924","sha256":"ae40a04f95df12b0c364f26ab691dc0c391d394a28bcdb4aeacfaca325d0a798","sha512":"e02b40fea8f77292b379d7d792d9142b32dfcb887655a2d1781441227dd968589bfc5c00691b92e824f7edb47d11eba325ade67ad08a4af31a3b0ddf4bb8b967","ssdeep":"768:GJiLCleIZlcBvahjeheOQKskmCp9sE9gBkGgvU+7aAXDqWOtU:GJo9IgMKsQzJ9gBkZbuAXDqWV","tlshash":"a4f2d09831594c2aacbd58232b71d9df21e38f61ba42029ba193e4cd9c4714dbb1e47f","first_seen":"2023-05-09T17:48:02Z","last_seen":"2026-05-19T20:53:12.056314Z","times_seen":90500,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"osnrafbtea.oneswittla.ru/web1/assets/fonts/GDSherpa-regular.woff2","fqdn":"osnrafbtea.oneswittla.ru","domain":"oneswittla.ru","tld":"ru"},"ip":{"addr":"172.67.218.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://osnrafbtea.oneswittla.ru/kswqjl/#alberto@elzaburu.es","date":"2023-11-21T07:44:01.811Z","timestamp":1700552641811,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oneswittla.ru","organization":""},"issuer":{"commonName":"GTS CA 1P5","organization":"Google Trust Services LLC"},"validity":{"start":"Wed, 01 Nov 2023 16:29:11 GMT","end":"Tue, 30 Jan 2024 16:29:10 GMT"},"fingerprint":{"sha1":"42:11:11:15:F6:40:D4:B8:81:C3:A5:90:8E:27:09:05:06:2B:51:36","sha256":"70:20:9A:17:36:07:97:75:00:A2:85:E8:C1:BF:E0:1C:66:91:FA:6C:AE:86:F0:B7:3F:3A:BB:16:1E:F7:2C:B3"}}},"request":{"raw":"GET /web1/assets/fonts/GDSherpa-regular.woff2 HTTP/1.1\r\nHost: osnrafbtea.oneswittla.ru\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://osnrafbtea.oneswittla.ru/kswqjl/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 21 Nov 2023 07:43:59 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 28584\r\nlast-modified: Fri, 25 Aug 2023 04:00:25 GMT\r\netag: \"6fa8-603b76269b664\"\r\naccess-control-allow-origin: *\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: DENY\r\ncontent-security-policy: frame-ancestors 'none'\r\ncache-control: max-age=14400\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=kl%2F8HOTe7Evl3h5klLnB%2B1oBjC4FeypMiZi9tcUYN5R8mQ%2F44nD%2B3Rr6tq0f5R39b8rAVKuKB7UdBqZo%2FtXDrfKox2gq7tYsIU1nPMwXMxGvz0NrpUTg4gCCLVXC7pDZq5h2BP1p\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: HIT\r\nage: 13\r\naccept-ranges: bytes\r\nserver: cloudflare\r\ncf-ray: 82974e0f088a56be-OSL\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":28584,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 28584, version 1.66\\012- data","md5":"17081510f3a6f2f619ec8c6f244523c7","sha1":"87f34b2a1532c50f2a424c345d03fe028db35635","sha256":"2c7292014e2ef00374aeb63691d9f23159a010455784ee0b274ba7db2bcca956","sha512":"e27976f77797ad93160af35714d733fd9e729a9981d8a6f555807981d08d8175e02692aa5ea6e59cebd33895f5f6a3575692565fdd75667630dab158627a1005","ssdeep":"768:8n53CNftp4NM/2qxGvtAG9fvpWYSTvlj6OIqrd1xUseRc:85SNfQS2ntfxvpWYSTcfMERc","tlshash":"b4d2e0ed44d2c62988f7638902690111f27898ffe52d7db3c19da0b27245d7ea3a8b09","first_seen":"2023-04-09T18:51:15Z","last_seen":"2026-05-20T16:38:20.044611Z","times_seen":105775,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"osnrafbtea.oneswittla.ru/web1/assets/fonts/GDSherpa-regular.woff","fqdn":"osnrafbtea.oneswittla.ru","domain":"oneswittla.ru","tld":"ru"},"ip":{"addr":"172.67.218.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://osnrafbtea.oneswittla.ru/kswqjl/#alberto@elzaburu.es","date":"2023-11-21T07:44:01.813Z","timestamp":1700552641813,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oneswittla.ru","organization":""},"issuer":{"commonName":"GTS CA 1P5","organization":"Google Trust Services LLC"},"validity":{"start":"Wed, 01 Nov 2023 16:29:11 GMT","end":"Tue, 30 Jan 2024 16:29:10 GMT"},"fingerprint":{"sha1":"42:11:11:15:F6:40:D4:B8:81:C3:A5:90:8E:27:09:05:06:2B:51:36","sha256":"70:20:9A:17:36:07:97:75:00:A2:85:E8:C1:BF:E0:1C:66:91:FA:6C:AE:86:F0:B7:3F:3A:BB:16:1E:F7:2C:B3"}}},"request":{"raw":"GET /web1/assets/fonts/GDSherpa-regular.woff HTTP/1.1\r\nHost: osnrafbtea.oneswittla.ru\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://osnrafbtea.oneswittla.ru/kswqjl/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 21 Nov 2023 07:43:59 GMT\r\ncontent-type: font/woff\r\ncontent-length: 36696\r\nlast-modified: Fri, 25 Aug 2023 04:00:28 GMT\r\netag: \"8f58-603b762947b93\"\r\naccess-control-allow-origin: *\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: DENY\r\ncontent-security-policy: frame-ancestors 'none'\r\ncache-control: max-age=14400\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=h%2BP8v7azUUWWFqKAGQLD3SHkudKYyQuQpK5xnP5Xnz6S06KgxQj54QeoyRtCZsFy7AVf6IVvSMIoVpDvz7Dx9cyzAQIIqobHN2b7PqvJoN0QeuxXjfy5kBRQHSxQaD0Ulqtk08A9\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: HIT\r\nage: 13\r\naccept-ranges: bytes\r\nserver: cloudflare\r\ncf-ray: 82974e0f189556be-OSL\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":36696,"size_decoded":0,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 36696, version 1.0\\012- data","md5":"a69e9ab8afdd7486ec0749c551051ff2","sha1":"c34e6aa327b536fb48d1fe03577a47c7ee2231b8","sha256":"fd78a1913db912221b8ead1e62fad47d1ff0a9fa6cd88d3b128a721ad91d2faf","sha512":"9a0e4297282542b8813f9cc85b2ccb09663ce281f64503f9a5284631881da9aacf7649553bf1423d941f01b97e6bc3ba50ab13e55e4b7b61c5aa0a4adf4d390f","ssdeep":"768:lvJo4KciQZYjebVq19lKPtHAQ/l4rj2bqkiHShpeSUOR4OqWOgaU:lhH3rVq1PKP432tSSh4SUORHqWcU","tlshash":"31f2f15d76443e8cf06a245836ad2dd6a423171247138f8709de72bbd14f120f65aaff","first_seen":"2023-05-09T17:48:02Z","last_seen":"2026-05-19T20:53:12.203532Z","times_seen":90429,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"osnrafbtea.oneswittla.ru/web1/assets/fonts/GDSherpa-vf.woff2","fqdn":"osnrafbtea.oneswittla.ru","domain":"oneswittla.ru","tld":"ru"},"ip":{"addr":"172.67.218.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://osnrafbtea.oneswittla.ru/kswqjl/#alberto@elzaburu.es","date":"2023-11-21T07:44:01.819Z","timestamp":1700552641819,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oneswittla.ru","organization":""},"issuer":{"commonName":"GTS CA 1P5","organization":"Google Trust Services LLC"},"validity":{"start":"Wed, 01 Nov 2023 16:29:11 GMT","end":"Tue, 30 Jan 2024 16:29:10 GMT"},"fingerprint":{"sha1":"42:11:11:15:F6:40:D4:B8:81:C3:A5:90:8E:27:09:05:06:2B:51:36","sha256":"70:20:9A:17:36:07:97:75:00:A2:85:E8:C1:BF:E0:1C:66:91:FA:6C:AE:86:F0:B7:3F:3A:BB:16:1E:F7:2C:B3"}}},"request":{"raw":"GET /web1/assets/fonts/GDSherpa-vf.woff2 HTTP/1.1\r\nHost: osnrafbtea.oneswittla.ru\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://osnrafbtea.oneswittla.ru/kswqjl/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 21 Nov 2023 07:43:59 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 43596\r\nlast-modified: Fri, 25 Aug 2023 04:00:36 GMT\r\netag: \"aa4c-603b7631474f7\"\r\naccess-control-allow-origin: *\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: DENY\r\ncontent-security-policy: frame-ancestors 'none'\r\ncache-control: max-age=14400\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=fY6W8Z%2FU8eXS9QKM4ScQOU2VA2UOA85SFW%2BI1YUmSyfHLYmAYGNdeVkmM5JodjMKkJVvyV65%2B35oKcBIucCHl51i%2Fb%2BsK1AS7fk0Fgv60HxzMS2IanYZJGqRFUDEbFk9u41vL3LN\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: HIT\r\nage: 13\r\naccept-ranges: bytes\r\nserver: cloudflare\r\ncf-ray: 82974e0f18a956be-OSL\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":43596,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 43596, version 1.0\\012- data","md5":"2a05e9e5572abc320b2b7ea38a70dcc1","sha1":"d5fa2a856d5632c2469e42436159375117ef3c35","sha256":"3efcb941aaddaf4aea08dab3fb97d3e904aa1b83264e64b4d5bda53bc7c798ec","sha512":"785ab5585b8a9ed762d70578bf13a6a69342441e679698fd946e3616ef5688485f099f3dc472975ef5d9248afaad6da6779813b88aa1db60abe2cc065f47eb5f","ssdeep":"768:b0nfc/3Osy1fo0tBBFF/GGXfN2ZHKTBUwL+BR49qCow3Z3HuvJ5+xXtTgXHk6/:b0fU3OdhFF/xNOoZc49ow3Z3HO+xX1mf","tlshash":"e2130258592578a9eb43bd49f00c6e64c296b3d8f5832b62334a04f0bff651620fe797","first_seen":"2023-04-18T03:10:28Z","last_seen":"2026-05-19T20:53:12.134221Z","times_seen":91895,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"osnrafbtea.oneswittla.ru/web1/assets/fonts/GDSherpa-vf2.woff2","fqdn":"osnrafbtea.oneswittla.ru","domain":"oneswittla.ru","tld":"ru"},"ip":{"addr":"172.67.218.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://osnrafbtea.oneswittla.ru/kswqjl/#alberto@elzaburu.es","date":"2023-11-21T07:44:01.821Z","timestamp":1700552641821,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oneswittla.ru","organization":""},"issuer":{"commonName":"GTS CA 1P5","organization":"Google Trust Services LLC"},"validity":{"start":"Wed, 01 Nov 2023 16:29:11 GMT","end":"Tue, 30 Jan 2024 16:29:10 GMT"},"fingerprint":{"sha1":"42:11:11:15:F6:40:D4:B8:81:C3:A5:90:8E:27:09:05:06:2B:51:36","sha256":"70:20:9A:17:36:07:97:75:00:A2:85:E8:C1:BF:E0:1C:66:91:FA:6C:AE:86:F0:B7:3F:3A:BB:16:1E:F7:2C:B3"}}},"request":{"raw":"GET /web1/assets/fonts/GDSherpa-vf2.woff2 HTTP/1.1\r\nHost: osnrafbtea.oneswittla.ru\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://osnrafbtea.oneswittla.ru/kswqjl/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 21 Nov 2023 07:43:59 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 93276\r\nlast-modified: Fri, 25 Aug 2023 04:00:32 GMT\r\netag: \"16c5c-603b762dd727e\"\r\naccess-control-allow-origin: *\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: DENY\r\ncontent-security-policy: frame-ancestors 'none'\r\ncache-control: max-age=14400\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=DHE3o9QveX4xo4ol1TBlU0kqeqIT%2BvD4nHdfiQH4N612ODhpqnxHwaV6jeZCog0moH1IpR3fEU3mxbDXGPI6qJZGkWO1v2MGiCJT2P03CpHaw0iB%2FsFlAit15yFlyzd6iA4vVbg4\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: HIT\r\nage: 13\r\naccept-ranges: bytes\r\nserver: cloudflare\r\ncf-ray: 82974e0f18aa56be-OSL\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":93276,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 93276, version 1.0\\012- data","md5":"bcd7983ea5aa57c55f6758b4977983cb","sha1":"ef3a009e205229e07fb0ec8569e669b11c378ef1","sha256":"6528a0bf9a836a53dfd8536e1786ba6831c9d1faa74967126fddf5b2081b858c","sha512":"e868a2702ca3b99e1abbcbd40b1c90b42a9d26086a434f1cbae79dfc072216f2f990fec6265a801bc4f96db0431e8f0b99eb0129b2ee7505b3fdfd9bb9bafe90","ssdeep":"1536:Dy7KSLv+MMqDeeIgDFSxpuQP7ObnKSWBO61LlRzSSAT6YmkSzOu7Be0OB53jIH4I:Dy7JD+net+puI7ObKHVhTSSlYmk4OuWa","tlshash":"d293029c71ec79c19e00616e94c92535f89fdab0f049d3fa9a4ed85b927c369e343b10","first_seen":"2023-05-01T02:20:29Z","last_seen":"2026-05-19T20:53:12.270974Z","times_seen":91731,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"osnrafbtea.oneswittla.ru/web1/assets/css/pages-okta.css?cb=1700552641731","fqdn":"osnrafbtea.oneswittla.ru","domain":"oneswittla.ru","tld":"ru"},"ip":{"addr":"172.67.218.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://osnrafbtea.oneswittla.ru/kswqjl/#alberto@elzaburu.es","date":"2023-11-21T07:44:01.762Z","timestamp":1700552641762,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oneswittla.ru","organization":""},"issuer":{"commonName":"GTS CA 1P5","organization":"Google Trust Services LLC"},"validity":{"start":"Wed, 01 Nov 2023 16:29:11 GMT","end":"Tue, 30 Jan 2024 16:29:10 GMT"},"fingerprint":{"sha1":"42:11:11:15:F6:40:D4:B8:81:C3:A5:90:8E:27:09:05:06:2B:51:36","sha256":"70:20:9A:17:36:07:97:75:00:A2:85:E8:C1:BF:E0:1C:66:91:FA:6C:AE:86:F0:B7:3F:3A:BB:16:1E:F7:2C:B3"}}},"request":{"raw":"GET /web1/assets/css/pages-okta.css?cb=1700552641731 HTTP/1.1\r\nHost: osnrafbtea.oneswittla.ru\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://osnrafbtea.oneswittla.ru/kswqjl/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 21 Nov 2023 07:44:00 GMT\r\ncontent-type: text/css\r\ncontent-length: 0\r\nlast-modified: Thu, 24 Aug 2023 12:07:13 GMT\r\netag: \"0-603aa11867866\"\r\naccess-control-allow-origin: *\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: DENY\r\ncontent-security-policy: frame-ancestors 'none'\r\ncache-control: max-age=14400\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=5dNscB9qlgie%2BqUh21vsZz4%2B12I8pQ0YdBlKin9OHbFbiY08sIaCiYQC0fKGSJ3yyjTCLcBlTPCdAw8znsr7P5d7xH01yKCGN9r7c8aePFwojKCrqSHh5iomBmmaf6tn4lHzuu5t\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: MISS\r\naccept-ranges: bytes\r\nserver: cloudflare\r\ncf-ray: 82974e0ef87456be-OSL\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-20T16:56:15.989935Z","times_seen":15496273,"resource_available":true,"data":null}},"time_used":983,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":983,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"osnrafbtea.oneswittla.ru/web1/validatecaptcha","fqdn":"osnrafbtea.oneswittla.ru","domain":"oneswittla.ru","tld":"ru"},"ip":{"addr":"172.67.218.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://osnrafbtea.oneswittla.ru/kswqjl/#alberto@elzaburu.es","date":"2023-11-21T07:44:04.928Z","timestamp":1700552644928,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oneswittla.ru","organization":""},"issuer":{"commonName":"GTS CA 1P5","organization":"Google Trust Services LLC"},"validity":{"start":"Wed, 01 Nov 2023 16:29:11 GMT","end":"Tue, 30 Jan 2024 16:29:10 GMT"},"fingerprint":{"sha1":"42:11:11:15:F6:40:D4:B8:81:C3:A5:90:8E:27:09:05:06:2B:51:36","sha256":"70:20:9A:17:36:07:97:75:00:A2:85:E8:C1:BF:E0:1C:66:91:FA:6C:AE:86:F0:B7:3F:3A:BB:16:1E:F7:2C:B3"}}},"request":{"raw":"POST /web1/validatecaptcha HTTP/1.1\r\nHost: osnrafbtea.oneswittla.ru\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 562\r\nOrigin: https://osnrafbtea.oneswittla.ru\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://osnrafbtea.oneswittla.ru/kswqjl/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 21 Nov 2023 07:44:04 GMT\r\ncontent-type: application/json\r\nx-powered-by: PHP/8.1.10\r\ncache-control: no-cache, private\r\naccess-control-allow-origin: *\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: DENY\r\ncontent-security-policy: frame-ancestors 'none'\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=%2BPua%2Bt5jKN7YbcvMDOBedZi4XPk7HiiJ9uxQFxmW6gGUJsjpzG71Z9TZIGzeaeoaXv10ZAyxLWt2k3z2g%2Fxw0QUUTb7J%2BfBpEXzN2Ra5sFm%2BmbAOjq3nvBSMhjXRbUWJshtho4yC\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nset-cookie: XSRF-TOKEN=eyJpdiI6IlFVVXRySHcycG9KV0Viem9Fc1lYWGc9PSIsInZhbHVlIjoick5WcTBFdW05ZVRHUmFBWHVVMHpLUDlJK0R0OC9QS2lhUmJIMnoyVFdHRHNmTzhjYXA1WG9yNUJiZDJRaWxicXQvZmxVYkZJRWNURk85OUF1NjF5c2JTRFFJUXdrZHQ0aWxrY2kzblBtakFwbXU5ZnAvUStOa3RqRFNkbUJRYVgiLCJtYWMiOiI2YWU5MzExY2U4MWJkNTk0YWY5ZDBmMmY0Mzc4ZDZjZDdiZmUzNTNlN2JiZWVjNTQ5OGQ5Zjg0MDYwMDBjNGUwIiwidGFnIjoiIn0%3D; expires=Tue, 21-Nov-2023 09:44:04 GMT; Max-Age=7200; path=/; samesite=lax\nlaravel_session=eyJpdiI6InhGT2hGSER2YlZwa2hVdllUZk9KMGc9PSIsInZhbHVlIjoiVE1wYXdTcWYzMU5SL0QvSkUzMGVuVC9HTVpGVlBtK0pGblBpOEVld3RzS0NXN0pEYVVPczJsUkdJZ2dBZkkxbXFDMWpJblZSV2trZmJ5N2t3bGJoZ3A2ZlBnbzhxREIvNGdpOEVXWnhHRTk5NDVZUTBMZkdZQ1JrYkxOVnVkWlEiLCJtYWMiOiIyYzI4MWU3YjNiYjJjYmEwZTZmNDY0OGFmZjRiMTJlZTMzNGZmZWE5YjU2MzJiMGZjYTcwYTcwMzQ0ZjEyMGJkIiwidGFnIjoiIn0%3D; expires=Tue, 21-Nov-2023 09:44:04 GMT; Max-Age=7200; path=/; httponly; samesite=lax\r\nserver: cloudflare\r\ncf-ray: 82974e22d9e556be-OSL\r\ncontent-encoding: br\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":255,"size_decoded":0,"mime_type":"application/json","magic":"JSON data\\012- , ASCII text, with no line terminators","md5":"5820854f62a6eb3d38ba7ba0d1b3ea75","sha1":"639df0b84fe699b4a290a713fd6b9a94bd4deb95","sha256":"912d0c07da7bdb22cdae025b96da26d01523aaab7362edb28544e3949deb369d","sha512":"4452c0a26fa81357f95bf6160c3f5d35ff39f62e03d5faa1e69eb9dfdcb2c83eda4235463ee4065dceb534cc497891a05535467337ad84693e5fa48c317dbbbb","ssdeep":"","tlshash":"f67000020000208008803c0000000a203ae00aa0822a00c0802c00288e08088f08a000","first_seen":"2023-03-13T15:21:35Z","last_seen":"2026-05-20T16:44:35.576567Z","times_seen":90888,"resource_available":true,"data":null}},"time_used":1678,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1677,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"osnrafbtea.oneswittla.ru/web1/info","fqdn":"osnrafbtea.oneswittla.ru","domain":"oneswittla.ru","tld":"ru"},"ip":{"addr":"172.67.218.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://osnrafbtea.oneswittla.ru/kswqjl/#alberto@elzaburu.es","date":"2023-11-21T07:44:06.613Z","timestamp":1700552646613,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oneswittla.ru","organization":""},"issuer":{"commonName":"GTS CA 1P5","organization":"Google Trust Services LLC"},"validity":{"start":"Wed, 01 Nov 2023 16:29:11 GMT","end":"Tue, 30 Jan 2024 16:29:10 GMT"},"fingerprint":{"sha1":"42:11:11:15:F6:40:D4:B8:81:C3:A5:90:8E:27:09:05:06:2B:51:36","sha256":"70:20:9A:17:36:07:97:75:00:A2:85:E8:C1:BF:E0:1C:66:91:FA:6C:AE:86:F0:B7:3F:3A:BB:16:1E:F7:2C:B3"}}},"request":{"raw":"POST /web1/info HTTP/1.1\r\nHost: osnrafbtea.oneswittla.ru\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 23\r\nOrigin: https://osnrafbtea.oneswittla.ru\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://osnrafbtea.oneswittla.ru/kswqjl/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlFVVXRySHcycG9KV0Viem9Fc1lYWGc9PSIsInZhbHVlIjoick5WcTBFdW05ZVRHUmFBWHVVMHpLUDlJK0R0OC9QS2lhUmJIMnoyVFdHRHNmTzhjYXA1WG9yNUJiZDJRaWxicXQvZmxVYkZJRWNURk85OUF1NjF5c2JTRFFJUXdrZHQ0aWxrY2kzblBtakFwbXU5ZnAvUStOa3RqRFNkbUJRYVgiLCJtYWMiOiI2YWU5MzExY2U4MWJkNTk0YWY5ZDBmMmY0Mzc4ZDZjZDdiZmUzNTNlN2JiZWVjNTQ5OGQ5Zjg0MDYwMDBjNGUwIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InhGT2hGSER2YlZwa2hVdllUZk9KMGc9PSIsInZhbHVlIjoiVE1wYXdTcWYzMU5SL0QvSkUzMGVuVC9HTVpGVlBtK0pGblBpOEVld3RzS0NXN0pEYVVPczJsUkdJZ2dBZkkxbXFDMWpJblZSV2trZmJ5N2t3bGJoZ3A2ZlBnbzhxREIvNGdpOEVXWnhHRTk5NDVZUTBMZkdZQ1JrYkxOVnVkWlEiLCJtYWMiOiIyYzI4MWU3YjNiYjJjYmEwZTZmNDY0OGFmZjRiMTJlZTMzNGZmZWE5YjU2MzJiMGZjYTcwYTcwMzQ0ZjEyMGJkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 21 Nov 2023 07:44:05 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nx-powered-by: PHP/8.1.10\r\ncache-control: no-cache, private\r\naccess-control-allow-origin: *\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: DENY\r\ncontent-security-policy: frame-ancestors 'none'\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=gO9JgtcEo5nhB7RsJRrBMPd6V8Bvo%2BDtIH4Qo8ASD1gPgZScRqxHWwi0rP7iSTrqfulvWbp56zZ9%2BK114HdRu0FiKxVBVjFSrFe50m3DxlkLVdyc%2BuzvwZzgrcsLsJAZKyIDP7tX\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nset-cookie: XSRF-TOKEN=eyJpdiI6InRDaU05S2VJemVkR3FtYlVnVWZvd1E9PSIsInZhbHVlIjoiOGhsVE9FYytnYSs4TFpJM0lhaEM2TEFQTTB2Z0QxendEb25lWW9hQXhtajBnc0t1ZDZxNCtnOWNWVlhXRlM4eXA3dk9wSzgzSFB2dWVmcElzcm1BUlJZb1J1cHFrQitPTzNjc3ZjTldaSTZUTlcwaWl1REFuZUJac28rY0x1NjUiLCJtYWMiOiIzZjU3ZmJjNjg1NzM1NThhNGY1OTUzNDZlYTRhZGUxYWJhODdiOTg0M2IxNmQ3MWM0ZmU0MGMxMjI4YTNjY2U3IiwidGFnIjoiIn0%3D; expires=Tue, 21-Nov-2023 09:44:05 GMT; Max-Age=7200; path=/; samesite=lax\nlaravel_session=eyJpdiI6IitsajZaTkZtNVFHVzFNYmRrd0VkclE9PSIsInZhbHVlIjoickp5Z0FiYnU0aGNsbnhMSVB4cHl2SVVETGNFeGw5QTdjYjF0WnlxMnpRZk5Hanc0bkp1QXJ2ZUJmZlRqNFcrY2hHaWxhcVpLQUs3V1UzeXE2QkI5VHFGRFpFeHJ0VjhoUjBzcnliZkNxSkwwQm9Qc2E2V0ZLcklxb0oxR3FubFEiLCJtYWMiOiJmNDZmOGI0Y2FhMzFiMDMwNGFkODIyNmIwNDcwMjIyY2M1ZTIwNzkwNWYwYTVlMjQwZTdkYzYxNDgyNzJmZDUxIiwidGFnIjoiIn0%3D; expires=Tue, 21-Nov-2023 09:44:05 GMT; Max-Age=7200; path=/; httponly; samesite=lax\r\nserver: cloudflare\r\ncf-ray: 82974e2d69b356be-OSL\r\ncontent-encoding: br\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":6862,"size_decoded":0,"mime_type":"application/json","magic":"HTML document text\\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (309), with CRLF line terminators","md5":"9b5362a64b108bbc4172a352db706a9d","sha1":"bd42bc4589d20a62f637b1e9aac439278d3adcea","sha256":"4f562fd7936fccf7801cffca3bcbe09249b46c5369958cd67ce8a262d741b959","sha512":"61a94634a9d070ea61c0e181d30b903609e87acf0f83896766dad767a0ffd55a2fed47051a72fe3efb79b12362183588cc41fde1f43fd04c0d335e9a93c4de5b","ssdeep":"384:/uDHTm/IGGeuYUN4Wxr22m3/3SLeszGSQZU:2LTm/IGGwo4a2NGesN","tlshash":"7bf23f6150d4242b42b381e6ad711b8efda2824bcb4b964632fc9bdb1ff7c0acd47561","first_seen":"2023-11-01T19:35:47Z","last_seen":"2023-11-23T20:11:20Z","times_seen":1124,"resource_available":false,"data":null}},"time_used":643,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":642,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"osnrafbtea.oneswittla.ru/web1/assets/godaddy-logo.png","fqdn":"osnrafbtea.oneswittla.ru","domain":"oneswittla.ru","tld":"ru"},"ip":{"addr":"172.67.218.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://osnrafbtea.oneswittla.ru/kswqjl/#alberto@elzaburu.es","date":"2023-11-21T07:44:08.122Z","timestamp":1700552648122,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oneswittla.ru","organization":""},"issuer":{"commonName":"GTS CA 1P5","organization":"Google Trust Services LLC"},"validity":{"start":"Wed, 01 Nov 2023 16:29:11 GMT","end":"Tue, 30 Jan 2024 16:29:10 GMT"},"fingerprint":{"sha1":"42:11:11:15:F6:40:D4:B8:81:C3:A5:90:8E:27:09:05:06:2B:51:36","sha256":"70:20:9A:17:36:07:97:75:00:A2:85:E8:C1:BF:E0:1C:66:91:FA:6C:AE:86:F0:B7:3F:3A:BB:16:1E:F7:2C:B3"}}},"request":{"raw":"GET /web1/assets/godaddy-logo.png HTTP/1.1\r\nHost: osnrafbtea.oneswittla.ru\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://osnrafbtea.oneswittla.ru/kswqjl/\r\nCookie: XSRF-TOKEN=eyJpdiI6InRDaU05S2VJemVkR3FtYlVnVWZvd1E9PSIsInZhbHVlIjoiOGhsVE9FYytnYSs4TFpJM0lhaEM2TEFQTTB2Z0QxendEb25lWW9hQXhtajBnc0t1ZDZxNCtnOWNWVlhXRlM4eXA3dk9wSzgzSFB2dWVmcElzcm1BUlJZb1J1cHFrQitPTzNjc3ZjTldaSTZUTlcwaWl1REFuZUJac28rY0x1NjUiLCJtYWMiOiIzZjU3ZmJjNjg1NzM1NThhNGY1OTUzNDZlYTRhZGUxYWJhODdiOTg0M2IxNmQ3MWM0ZmU0MGMxMjI4YTNjY2U3IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IitsajZaTkZtNVFHVzFNYmRrd0VkclE9PSIsInZhbHVlIjoickp5Z0FiYnU0aGNsbnhMSVB4cHl2SVVETGNFeGw5QTdjYjF0WnlxMnpRZk5Hanc0bkp1QXJ2ZUJmZlRqNFcrY2hHaWxhcVpLQUs3V1UzeXE2QkI5VHFGRFpFeHJ0VjhoUjBzcnliZkNxSkwwQm9Qc2E2V0ZLcklxb0oxR3FubFEiLCJtYWMiOiJmNDZmOGI0Y2FhMzFiMDMwNGFkODIyNmIwNDcwMjIyY2M1ZTIwNzkwNWYwYTVlMjQwZTdkYzYxNDgyNzJmZDUxIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 21 Nov 2023 07:44:06 GMT\r\ncontent-type: image/png\r\ncontent-length: 49602\r\nlast-modified: Thu, 24 Aug 2023 13:40:53 GMT\r\netag: \"c1c2-603ab607e0f57\"\r\naccess-control-allow-origin: *\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: DENY\r\ncontent-security-policy: frame-ancestors 'none'\r\ncache-control: max-age=14400\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=rUwj1Rg3DXyGQcLcWMpNbniwgfgfMI4UZM7v90GMewmsNql8A1%2BFMPhl0dLGqrcL0jHn1Bs%2B49uinMbSPXDt1p765DUG8HqGA0eV0sWwj%2BkYPMhEMQVgsjO2UnOmFbTGdXXLBO37\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: HIT\r\nage: 14\r\naccept-ranges: bytes\r\nserver: cloudflare\r\ncf-ray: 82974e36b92956be-OSL\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":49602,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 2160 x 443, 8-bit/color RGBA, non-interlaced\\012- data","md5":"db783743cd246ff4d77f4a3694285989","sha1":"b9466716904457641b7831868b47162d8d378d41","sha256":"5913b1ec0fc58ab2bec576804b9e9b566a584ea3d21a1bf74a7b40051a447fdc","sha512":"e6f36c52996b6bf8b07c7a102def2d555a1d35fa12f1a2016edd8f3c86c33dd3545513b436ab6b4ef1d1cad8a5ca5d352ba587eee605638640b258c3976d9033","ssdeep":"768:eKE36up1D3cLJg7zmjprNBQqJCoklwCeFrpKZ00PIwoftXEsQsV1kZ8IHml446Xe:KqupJ9+aqyqCz+0ALcmDIHnjL2p","tlshash":"3723f111ed16c8604810199e8c72a9f7b9fa7036daed4df4070d866b00d3e1958be9f6","first_seen":"2023-08-31T15:31:22Z","last_seen":"2024-09-19T22:48:49.40105Z","times_seen":19259,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"osnrafbtea.oneswittla.ru/web1/assets/godaddy-left.png","fqdn":"osnrafbtea.oneswittla.ru","domain":"oneswittla.ru","tld":"ru"},"ip":{"addr":"172.67.218.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://osnrafbtea.oneswittla.ru/kswqjl/#alberto@elzaburu.es","date":"2023-11-21T07:44:08.124Z","timestamp":1700552648124,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oneswittla.ru","organization":""},"issuer":{"commonName":"GTS CA 1P5","organization":"Google Trust Services LLC"},"validity":{"start":"Wed, 01 Nov 2023 16:29:11 GMT","end":"Tue, 30 Jan 2024 16:29:10 GMT"},"fingerprint":{"sha1":"42:11:11:15:F6:40:D4:B8:81:C3:A5:90:8E:27:09:05:06:2B:51:36","sha256":"70:20:9A:17:36:07:97:75:00:A2:85:E8:C1:BF:E0:1C:66:91:FA:6C:AE:86:F0:B7:3F:3A:BB:16:1E:F7:2C:B3"}}},"request":{"raw":"GET /web1/assets/godaddy-left.png HTTP/1.1\r\nHost: osnrafbtea.oneswittla.ru\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://osnrafbtea.oneswittla.ru/kswqjl/\r\nCookie: XSRF-TOKEN=eyJpdiI6InRDaU05S2VJemVkR3FtYlVnVWZvd1E9PSIsInZhbHVlIjoiOGhsVE9FYytnYSs4TFpJM0lhaEM2TEFQTTB2Z0QxendEb25lWW9hQXhtajBnc0t1ZDZxNCtnOWNWVlhXRlM4eXA3dk9wSzgzSFB2dWVmcElzcm1BUlJZb1J1cHFrQitPTzNjc3ZjTldaSTZUTlcwaWl1REFuZUJac28rY0x1NjUiLCJtYWMiOiIzZjU3ZmJjNjg1NzM1NThhNGY1OTUzNDZlYTRhZGUxYWJhODdiOTg0M2IxNmQ3MWM0ZmU0MGMxMjI4YTNjY2U3IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IitsajZaTkZtNVFHVzFNYmRrd0VkclE9PSIsInZhbHVlIjoickp5Z0FiYnU0aGNsbnhMSVB4cHl2SVVETGNFeGw5QTdjYjF0WnlxMnpRZk5Hanc0bkp1QXJ2ZUJmZlRqNFcrY2hHaWxhcVpLQUs3V1UzeXE2QkI5VHFGRFpFeHJ0VjhoUjBzcnliZkNxSkwwQm9Qc2E2V0ZLcklxb0oxR3FubFEiLCJtYWMiOiJmNDZmOGI0Y2FhMzFiMDMwNGFkODIyNmIwNDcwMjIyY2M1ZTIwNzkwNWYwYTVlMjQwZTdkYzYxNDgyNzJmZDUxIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 21 Nov 2023 07:44:06 GMT\r\ncontent-type: image/png\r\ncontent-length: 29796\r\nlast-modified: Thu, 24 Aug 2023 14:10:07 GMT\r\netag: \"7464-603abc9079d32\"\r\naccess-control-allow-origin: *\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: DENY\r\ncontent-security-policy: frame-ancestors 'none'\r\ncache-control: max-age=14400\r\nage: 14\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=Q4ZRX%2Bc3Pa11sWIqHcPbHW5HSofQUJRjKUxkjbDU8C1OUEj9R3YVNNlK80mv9i0jdZLKqcnSBSFLslZitVua2e9tDW6WYVdJUtADm9yR5vUhehJFaFwHmTqc8PwLkiCbDlnC3ZjZ\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\ncf-ray: 82974e36b92a56be-OSL\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":29796,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 506 x 303, 8-bit/color RGBA, non-interlaced\\012- data","md5":"210433a8774859368f3a7b86d125a2a7","sha1":"408bacddc39f12cad285579c102fe4a629862d88","sha256":"9c6addfc339ce1c1d262290ab4cc2de8d38d4b54b11a8e85afd44fbb0acc2561","sha512":"6cbf6492bba0734ece1b595743b7a251d3c98425a36d5bf87ebfad17be979a23adee556fb074ef6d284052f6412aceda4e179fb7dfa0ba1103610cc01113a1a3","ssdeep":"768:uEV6Q9wDBC1MNazNsMYCUPwRGMSU6Ub1W:uKpiOZ7YCpRRXk","tlshash":"5ed2f15b83d84025e529abd165032d22c383fd70329224625e75f9b4f2fe4dcc7e5b25","first_seen":"2023-08-31T15:31:22Z","last_seen":"2025-02-06T19:33:12.284439Z","times_seen":22277,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"osnrafbtea.oneswittla.ru/web1/assets/godaddy-microsoftlogo.png","fqdn":"osnrafbtea.oneswittla.ru","domain":"oneswittla.ru","tld":"ru"},"ip":{"addr":"172.67.218.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://osnrafbtea.oneswittla.ru/kswqjl/#alberto@elzaburu.es","date":"2023-11-21T07:44:08.126Z","timestamp":1700552648126,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oneswittla.ru","organization":""},"issuer":{"commonName":"GTS CA 1P5","organization":"Google Trust Services LLC"},"validity":{"start":"Wed, 01 Nov 2023 16:29:11 GMT","end":"Tue, 30 Jan 2024 16:29:10 GMT"},"fingerprint":{"sha1":"42:11:11:15:F6:40:D4:B8:81:C3:A5:90:8E:27:09:05:06:2B:51:36","sha256":"70:20:9A:17:36:07:97:75:00:A2:85:E8:C1:BF:E0:1C:66:91:FA:6C:AE:86:F0:B7:3F:3A:BB:16:1E:F7:2C:B3"}}},"request":{"raw":"GET /web1/assets/godaddy-microsoftlogo.png HTTP/1.1\r\nHost: osnrafbtea.oneswittla.ru\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://osnrafbtea.oneswittla.ru/kswqjl/\r\nCookie: XSRF-TOKEN=eyJpdiI6InRDaU05S2VJemVkR3FtYlVnVWZvd1E9PSIsInZhbHVlIjoiOGhsVE9FYytnYSs4TFpJM0lhaEM2TEFQTTB2Z0QxendEb25lWW9hQXhtajBnc0t1ZDZxNCtnOWNWVlhXRlM4eXA3dk9wSzgzSFB2dWVmcElzcm1BUlJZb1J1cHFrQitPTzNjc3ZjTldaSTZUTlcwaWl1REFuZUJac28rY0x1NjUiLCJtYWMiOiIzZjU3ZmJjNjg1NzM1NThhNGY1OTUzNDZlYTRhZGUxYWJhODdiOTg0M2IxNmQ3MWM0ZmU0MGMxMjI4YTNjY2U3IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IitsajZaTkZtNVFHVzFNYmRrd0VkclE9PSIsInZhbHVlIjoickp5Z0FiYnU0aGNsbnhMSVB4cHl2SVVETGNFeGw5QTdjYjF0WnlxMnpRZk5Hanc0bkp1QXJ2ZUJmZlRqNFcrY2hHaWxhcVpLQUs3V1UzeXE2QkI5VHFGRFpFeHJ0VjhoUjBzcnliZkNxSkwwQm9Qc2E2V0ZLcklxb0oxR3FubFEiLCJtYWMiOiJmNDZmOGI0Y2FhMzFiMDMwNGFkODIyNmIwNDcwMjIyY2M1ZTIwNzkwNWYwYTVlMjQwZTdkYzYxNDgyNzJmZDUxIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 21 Nov 2023 07:44:06 GMT\r\ncontent-type: image/png\r\ncontent-length: 70712\r\nlast-modified: Thu, 24 Aug 2023 12:58:17 GMT\r\netag: \"11438-603aac821e121\"\r\naccess-control-allow-origin: *\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: DENY\r\ncontent-security-policy: frame-ancestors 'none'\r\ncache-control: max-age=14400\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=yG5mK5WLWCET4awUnE8nCb4ij82GCCvF9IJfNGvoYGJKvIKIkxnF5pT23qvOSDThXL%2FIr643sq08KgseYHRk3UspsxHH8BYfGBZ6U8dD3M3rJjwXsRXHWhmTep0AMfgbyOnqavox\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: HIT\r\nage: 14\r\naccept-ranges: bytes\r\nserver: cloudflare\r\ncf-ray: 82974e36b92b56be-OSL\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":70712,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 2446 x 899, 8-bit/color RGBA, non-interlaced\\012- data","md5":"f70ff06d19498d80b130ec78176fd3ff","sha1":"9d8a3b74c5164ff7ae2c7930b6d7b14707b404fc","sha256":"df6dbab5251e56b405e48aaf57d3cd4188f073ffba71131fa6cd26e6742923ae","sha512":"543151693c3751a7e6b1b6a9ea77b83cfd049bc320ee75b666514076f4c0218e9dc23da5e6c932b2b8670aa1be1d4e9a91a889f5c6f0d7b9f9c9fe6694609b31","ssdeep":"768:lBgPNoDCQcgEBtp8Y/fYous0+W/+hVNpTrP19NhgtJ+6qcHaDCzGoSRug:lBgC+Qoju/szW/SNDaJ+6qc6DESR5","tlshash":"fa636faae3705033b0ec262530275b4b41151cbb35aaec4880d3b86f576bfba3d35d66","first_seen":"2023-08-31T15:31:22Z","last_seen":"2026-05-20T11:53:35.266695Z","times_seen":19389,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"osnrafbtea.oneswittla.ru/web1/assets/officelogo.png","fqdn":"osnrafbtea.oneswittla.ru","domain":"oneswittla.ru","tld":"ru"},"ip":{"addr":"172.67.218.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://osnrafbtea.oneswittla.ru/kswqjl/#alberto@elzaburu.es","date":"2023-11-21T07:44:08.173Z","timestamp":1700552648173,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oneswittla.ru","organization":""},"issuer":{"commonName":"GTS CA 1P5","organization":"Google Trust Services LLC"},"validity":{"start":"Wed, 01 Nov 2023 16:29:11 GMT","end":"Tue, 30 Jan 2024 16:29:10 GMT"},"fingerprint":{"sha1":"42:11:11:15:F6:40:D4:B8:81:C3:A5:90:8E:27:09:05:06:2B:51:36","sha256":"70:20:9A:17:36:07:97:75:00:A2:85:E8:C1:BF:E0:1C:66:91:FA:6C:AE:86:F0:B7:3F:3A:BB:16:1E:F7:2C:B3"}}},"request":{"raw":"GET /web1/assets/officelogo.png HTTP/1.1\r\nHost: osnrafbtea.oneswittla.ru\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://osnrafbtea.oneswittla.ru/web1/assets/pages/104gf8.css?cb=1700552641731\r\nCookie: XSRF-TOKEN=eyJpdiI6InRDaU05S2VJemVkR3FtYlVnVWZvd1E9PSIsInZhbHVlIjoiOGhsVE9FYytnYSs4TFpJM0lhaEM2TEFQTTB2Z0QxendEb25lWW9hQXhtajBnc0t1ZDZxNCtnOWNWVlhXRlM4eXA3dk9wSzgzSFB2dWVmcElzcm1BUlJZb1J1cHFrQitPTzNjc3ZjTldaSTZUTlcwaWl1REFuZUJac28rY0x1NjUiLCJtYWMiOiIzZjU3ZmJjNjg1NzM1NThhNGY1OTUzNDZlYTRhZGUxYWJhODdiOTg0M2IxNmQ3MWM0ZmU0MGMxMjI4YTNjY2U3IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IitsajZaTkZtNVFHVzFNYmRrd0VkclE9PSIsInZhbHVlIjoickp5Z0FiYnU0aGNsbnhMSVB4cHl2SVVETGNFeGw5QTdjYjF0WnlxMnpRZk5Hanc0bkp1QXJ2ZUJmZlRqNFcrY2hHaWxhcVpLQUs3V1UzeXE2QkI5VHFGRFpFeHJ0VjhoUjBzcnliZkNxSkwwQm9Qc2E2V0ZLcklxb0oxR3FubFEiLCJtYWMiOiJmNDZmOGI0Y2FhMzFiMDMwNGFkODIyNmIwNDcwMjIyY2M1ZTIwNzkwNWYwYTVlMjQwZTdkYzYxNDgyNzJmZDUxIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 21 Nov 2023 07:44:06 GMT\r\ncontent-type: image/png\r\ncontent-length: 1400\r\nlast-modified: Sun, 19 Mar 2023 15:20:17 GMT\r\netag: \"578-5f7425905ae40\"\r\naccess-control-allow-origin: *\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: DENY\r\ncontent-security-policy: frame-ancestors 'none'\r\ncache-control: max-age=14400\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=cxBfPVpAqEW7DMLbRdKEWL4vreVBhaeuLbTu8S0OHZrxbGNzSzO4kVU5%2Fn%2BWkR09OSAQ7HmGPFVDMfk2AIZkZwapnJXMdrzmBK5pGj%2BQlpZxKg6FvCPNoRyutiSXeSdZtn8r1H1C\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: HIT\r\nage: 14\r\naccept-ranges: bytes\r\nserver: cloudflare\r\ncf-ray: 82974e36f96256be-OSL\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1400,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 108 x 24, 8-bit/color RGBA, non-interlaced\\012- data","md5":"333ee830e5ab72c41dd9126a27b4d878","sha1":"12d8d66ebb3076f3d6069e133c3212f97c8774e1","sha256":"8702292cbc365e9f0488143e2b309b85efe09c61fd2e0a2e21c53735a309313c","sha512":"3413ed624241877c1d44fee23fd37745cb214c12ae73facfafa07b47fa1cb9e5daa3cb7f542564e04075ffe8ba744c962fbdd78f08a643a90c0ec1118c05bbf8","ssdeep":"","tlshash":"7521e964bab8a520130e30a09d305d1ad47f42ec99189e4e71c4e00a334ca094b5d83b","first_seen":"2023-07-01T14:36:17Z","last_seen":"2026-05-12T14:51:58.726633Z","times_seen":17831,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aadcdn.msftauth.net/shared/1.0/content/images/close_790189870c9543725dc3f5a15fb25e46.svg","fqdn":"aadcdn.msftauth.net","domain":"msftauth.net","tld":"net"},"ip":{"addr":"152.199.23.37","port":443,"asn":15133,"as":"EDGECAST","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://osnrafbtea.oneswittla.ru/kswqjl/#alberto@elzaburu.es","date":"2023-11-21T07:44:08.113Z","timestamp":1700552648113,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aadcdn.msftauth.net","organization":"Microsoft Corporation"},"issuer":{"commonName":"DigiCert SHA2 Secure Server CA","organization":"DigiCert Inc"},"validity":{"start":"Tue, 31 Jan 2023 00:00:00 GMT","end":"Wed, 31 Jan 2024 23:59:59 GMT"},"fingerprint":{"sha1":"99:06:D8:1E:EC:BF:DB:78:DF:F4:89:A3:ED:23:07:3D:79:F1:16:D6","sha256":"F7:B6:66:B3:86:91:AD:10:60:9A:D7:48:01:B8:27:C3:F4:47:7A:7C:B7:FF:C5:3F:77:26:B0:B3:08:24:D9:EE"}}},"request":{"raw":"GET /shared/1.0/content/images/close_790189870c9543725dc3f5a15fb25e46.svg HTTP/1.1\r\nHost: aadcdn.msftauth.net\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://osnrafbtea.oneswittla.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-encoding: gzip\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding\r\nage: 14946879\r\ncache-control: public, max-age=31536000\r\ncontent-md5: rp+/fadJKxLUo+jgFmYTeQ==\r\ncontent-type: image/svg+xml\r\ndate: Tue, 21 Nov 2023 07:44:06 GMT\r\netag: 0x8DB5C3F4721247A\r\nlast-modified: Wed, 24 May 2023 10:11:44 GMT\r\nserver: ECAcc (ska/F697)\r\nvary: Accept-Encoding\r\nx-cache: HIT\r\nx-ms-blob-type: BlockBlob\r\nx-ms-lease-status: unlocked\r\nx-ms-request-id: cf4cbdca-101e-0042-0c5d-942f4a000000\r\nx-ms-version: 2009-09-19\r\ncontent-length: 190\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":190,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image\\012- HTML document, ASCII text, with no line terminators","md5":"40eb39126300b56bf66c20ee75b54093","sha1":"83678d94097257eb474713dec49e8094f49d2e2a","sha256":"765709425a5b9209e875dccf2217d3161429d2d48159fc1df7b253b77c1574f4","sha512":"9c9cd1752a404e71772003469550d3b4eff8346a4e47be131bb2b9cb8dd46dbef4863c52a63a9c63989f9abee775cb63c111add7afa9d4dfc7a4d95ae30f9c6e","ssdeep":"","tlshash":"10d05b765358f94cd108859505d4355111d7b08479df4029f7861529b4067d7fd34b5e","first_seen":"2023-04-29T00:14:17Z","last_seen":"2026-05-20T15:45:59.900032Z","times_seen":43988,"resource_available":false,"data":null}},"time_used":97,"timings":{"blocked":39,"dns":1,"connect":9,"send":0,"wait":9,"receive":0,"ssl":32},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aadcdn.msftauth.net/shared/1.0/content/images/picker_verify_call_c2616792e1950f83fdef6e72dab97293.svg","fqdn":"aadcdn.msftauth.net","domain":"msftauth.net","tld":"net"},"ip":{"addr":"152.199.23.37","port":443,"asn":15133,"as":"EDGECAST","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://osnrafbtea.oneswittla.ru/kswqjl/#alberto@elzaburu.es","date":"2023-11-21T07:44:08.118Z","timestamp":1700552648118,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aadcdn.msftauth.net","organization":"Microsoft Corporation"},"issuer":{"commonName":"DigiCert SHA2 Secure Server CA","organization":"DigiCert Inc"},"validity":{"start":"Tue, 31 Jan 2023 00:00:00 GMT","end":"Wed, 31 Jan 2024 23:59:59 GMT"},"fingerprint":{"sha1":"99:06:D8:1E:EC:BF:DB:78:DF:F4:89:A3:ED:23:07:3D:79:F1:16:D6","sha256":"F7:B6:66:B3:86:91:AD:10:60:9A:D7:48:01:B8:27:C3:F4:47:7A:7C:B7:FF:C5:3F:77:26:B0:B3:08:24:D9:EE"}}},"request":{"raw":"GET /shared/1.0/content/images/picker_verify_call_c2616792e1950f83fdef6e72dab97293.svg HTTP/1.1\r\nHost: aadcdn.msftauth.net\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://osnrafbtea.oneswittla.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-encoding: gzip\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding\r\nage: 14384538\r\ncache-control: public, max-age=31536000\r\ncontent-md5: XHrPYKKsqlxUvysuxtSE2A==\r\ncontent-type: image/svg+xml\r\ndate: Tue, 21 Nov 2023 07:44:06 GMT\r\netag: 0x8DB5C3F4A98E9BB\r\nlast-modified: Wed, 24 May 2023 10:11:50 GMT\r\nserver: ECAcc (ska/F6F3)\r\nvary: Accept-Encoding\r\nx-cache: HIT\r\nx-ms-blob-type: BlockBlob\r\nx-ms-lease-status: unlocked\r\nx-ms-request-id: 3afb7c4b-e01e-0039-1e7a-99c6de000000\r\nx-ms-version: 2009-09-19\r\ncontent-length: 1173\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1173,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image\\012- HTML document, ASCII text, with very long lines (2905), with no line terminators","md5":"fe87496cc7a44412f7893a72099c120a","sha1":"a0c1458c08a815df63d3cb0406d60be6607ca699","sha256":"55ce3b0ce5bc71339308107982cd7671f96014256ded0be36dc8062e64c847f1","sha512":"e527c6cd2a3d79ca828a9126e8ff7009a540aa764082750d4fa8207c2b8439ca1fdc4459e935d708dc59dcffe55fe45188eb5e266d1b745fca7588501bc0117d","ssdeep":"","tlshash":"3451db770328eede9190e7881b65b20eb7f4896474bb81d08f879c46ec06bb7913cd60","first_seen":"2023-05-04T15:09:09Z","last_seen":"2026-05-20T14:48:20.076439Z","times_seen":90230,"resource_available":false,"data":null}},"time_used":101,"timings":{"blocked":39,"dns":1,"connect":8,"send":0,"wait":9,"receive":0,"ssl":32},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aadcdn.msftauth.net/shared/1.0/content/images/picker_verify_fluent_authenticator_59892f1e05e3adf9fd2f71b42d92a27f.svg","fqdn":"aadcdn.msftauth.net","domain":"msftauth.net","tld":"net"},"ip":{"addr":"152.199.23.37","port":443,"asn":15133,"as":"EDGECAST","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://osnrafbtea.oneswittla.ru/kswqjl/#alberto@elzaburu.es","date":"2023-11-21T07:44:08.115Z","timestamp":1700552648115,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aadcdn.msftauth.net","organization":"Microsoft Corporation"},"issuer":{"commonName":"DigiCert SHA2 Secure Server CA","organization":"DigiCert Inc"},"validity":{"start":"Tue, 31 Jan 2023 00:00:00 GMT","end":"Wed, 31 Jan 2024 23:59:59 GMT"},"fingerprint":{"sha1":"99:06:D8:1E:EC:BF:DB:78:DF:F4:89:A3:ED:23:07:3D:79:F1:16:D6","sha256":"F7:B6:66:B3:86:91:AD:10:60:9A:D7:48:01:B8:27:C3:F4:47:7A:7C:B7:FF:C5:3F:77:26:B0:B3:08:24:D9:EE"}}},"request":{"raw":"GET /shared/1.0/content/images/picker_verify_fluent_authenticator_59892f1e05e3adf9fd2f71b42d92a27f.svg HTTP/1.1\r\nHost: aadcdn.msftauth.net\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://osnrafbtea.oneswittla.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-encoding: gzip\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding\r\nage: 14953343\r\ncache-control: public, max-age=31536000\r\ncontent-md5: nTculR1Fom7eLci0F6rk+A==\r\ncontent-type: image/svg+xml\r\ndate: Tue, 21 Nov 2023 07:44:06 GMT\r\netag: 0x8DB5C3F4ADC079A\r\nlast-modified: Wed, 24 May 2023 10:11:51 GMT\r\nserver: ECAcc (ska/F7B6)\r\nvary: Accept-Encoding\r\nx-cache: HIT\r\nx-ms-blob-type: BlockBlob\r\nx-ms-lease-status: unlocked\r\nx-ms-request-id: 9d35d246-701e-009b-604e-944da7000000\r\nx-ms-version: 2009-09-19\r\ncontent-length: 2407\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2407,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image\\012- , ASCII text, with very long lines (4714), with CRLF line terminators","md5":"b59c16ca9bf156438a8a96d45e33db64","sha1":"4e51b7d3477414b220f688adabd76d3ae6472ee3","sha256":"a7ee799dd5b6f6dbb70b043b766362a6724e71458f9839306c995f06b218c2f8","sha512":"2c7095e4b819bc5caa06811a55c0dae6706970f981806dcf7fd41f744c1dc6a955657a8e57829b39b376b892e8173e8a41f683d329cfbbd0ec4d4019b10e52ff","ssdeep":"192:cdEMK4RwidEMK4Rwbwm6xiD7x9m9t6EQ3FabrItDWOO6DcA:cdEMVwidEMVwbwtxiDHmP6lFeItDWOOc","tlshash":"66e178d532f9e1d85482bbfd6681f1bc3e533dfaaa32d99083d55c19cc8a00c45ad8a2","first_seen":"2023-04-19T22:15:10Z","last_seen":"2026-05-20T14:48:20.066226Z","times_seen":104040,"resource_available":false,"data":null}},"time_used":104,"timings":{"blocked":43,"dns":1,"connect":17,"send":0,"wait":9,"receive":0,"ssl":21},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"logincdn.msauth.net/shared/1.0/content/images/picker_verify_email_958962caa7cf6b75cd412e9e3b687b22.svg","fqdn":"logincdn.msauth.net","domain":"msauth.net","tld":"net"},"ip":{"addr":"192.229.221.185","port":443,"asn":15133,"as":"EDGECAST","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://osnrafbtea.oneswittla.ru/kswqjl/#alberto@elzaburu.es","date":"2023-11-21T07:44:08.121Z","timestamp":1700552648121,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"identitycdn.msauth.net","organization":"Microsoft Corporation"},"issuer":{"commonName":"Microsoft Azure RSA TLS Issuing CA 03","organization":"Microsoft Corporation"},"validity":{"start":"Thu, 02 Nov 2023 23:14:23 GMT","end":"Sun, 27 Oct 2024 23:14:23 GMT"},"fingerprint":{"sha1":"AF:EB:E8:D6:8A:D6:D5:DF:17:8C:0E:CB:4E:EA:B9:23:51:37:24:F6","sha256":"9C:20:09:0A:83:F5:D6:8B:08:FE:74:8F:92:DB:E8:12:67:F6:7F:7A:C2:B0:7E:9C:26:1D:CA:7F:DC:94:CD:5A"}}},"request":{"raw":"GET /shared/1.0/content/images/picker_verify_email_958962caa7cf6b75cd412e9e3b687b22.svg HTTP/1.1\r\nHost: logincdn.msauth.net\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://osnrafbtea.oneswittla.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-encoding: gzip\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding\r\nage: 14388072\r\ncache-control: public, max-age=31536000\r\ncontent-md5: pFQUXilUkzYtIbvSwGgVBQ==\r\ncontent-type: image/svg+xml\r\ndate: Tue, 21 Nov 2023 07:44:06 GMT\r\netag: 0x8DB5C409F549E50\r\nlast-modified: Wed, 24 May 2023 10:21:22 GMT\r\nserver: ECAcc (ska/F7AD)\r\nvary: Accept-Encoding\r\nx-cache: HIT\r\nx-ms-blob-type: BlockBlob\r\nx-ms-lease-status: unlocked\r\nx-ms-request-id: e6e3cc87-601e-0079-1c72-993a7c000000\r\nx-ms-version: 2009-09-19\r\ncontent-length: 212\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":212,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image\\012- HTML document, ASCII text, with no line terminators","md5":"59759b80e24a89c8cd029b14700e646d","sha1":"651b1921c99e143d3c242de3faacfb9ad51dbb53","sha256":"b02b5df3ecd59d6cd90c60878683477532cbfc24660028657f290bdc7bc774b5","sha512":"0812da742877dd00a2466911a64458b15b4910b648a5e98a4acf1d99e1220e1f821aaf18bde145df185d5f72f5a4b2114ea264f906135f3d353440f343d52d2e","ssdeep":"","tlshash":"f6d02bf0c2b8f40c8304d61513f874e025fa74c8819d091cf5c0361668449e7bcb93be","first_seen":"2023-08-10T00:42:40Z","last_seen":"2026-05-20T14:48:20.077183Z","times_seen":40992,"resource_available":false,"data":null}},"time_used":105,"timings":{"blocked":38,"dns":2,"connect":27,"send":0,"wait":14,"receive":0,"ssl":15},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aadcdn.msauth.net/shared/1.0/content/images/backgrounds/2_11d9e3bcdfede9ce5ce5ace2d129f1c4.svg","fqdn":"aadcdn.msauth.net","domain":"msauth.net","tld":"net"},"ip":{"addr":"13.107.246.53","port":443,"asn":8068,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://osnrafbtea.oneswittla.ru/kswqjl/#alberto@elzaburu.es","date":"2023-11-21T07:44:08.136Z","timestamp":1700552648136,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"aadcdn.msauth.net","organization":"Microsoft Corporation"},"issuer":{"commonName":"DigiCert SHA2 Secure Server CA","organization":"DigiCert Inc"},"validity":{"start":"Sun, 29 Oct 2023 00:00:00 GMT","end":"Tue, 29 Oct 2024 23:59:59 GMT"},"fingerprint":{"sha1":"88:95:0C:FA:9D:33:AA:BF:A4:FD:9D:84:A6:E8:02:06:58:50:AD:8C","sha256":"09:32:99:C8:74:C7:C3:CF:73:1C:DD:DA:92:7C:22:1B:DD:53:9C:51:21:D5:10:61:C4:4D:CC:52:56:13:C6:DC"}}},"request":{"raw":"GET /shared/1.0/content/images/backgrounds/2_11d9e3bcdfede9ce5ce5ace2d129f1c4.svg HTTP/1.1\r\nHost: aadcdn.msauth.net\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://osnrafbtea.oneswittla.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=31536000\r\ncontent-length: 673\r\ncontent-type: image/svg+xml\r\ncontent-encoding: gzip\r\ncontent-md5: DhdidjYrlCeaRJJRG/y9mA==\r\nlast-modified: Wed, 24 May 2023 10:11:46 GMT\r\netag: 0x8DB5C3F47E260FD\r\nx-cache: TCP_HIT\r\nx-ms-request-id: 17509178-201e-0069-5d7c-190642000000\r\nx-ms-version: 2009-09-19\r\nx-ms-lease-status: unlocked\r\nx-ms-blob-type: BlockBlob\r\naccess-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding\r\naccess-control-allow-origin: *\r\nx-azure-ref-originshield: 0PUtaZQAAAADzVd1XQgMOT5+aJm+OjSr5QU1TMDRFREdFMTkwOAAzOWExMmY3ZS04OTlmLTQ2Y2YtYTZkMC0yNGJiYmEyN2Q5NTY=\r\nx-azure-ref: 0xl9cZQAAAACl1aXNKiUCR4V7GAyc27AfU1ZHMjBFREdFMDUwOQAzOWExMmY3ZS04OTlmLTQ2Y2YtYTZkMC0yNGJiYmEyN2Q5NTY=\r\ndate: Tue, 21 Nov 2023 07:44:05 GMT\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":673,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image\\012- , ASCII text, with very long lines (1864), with no line terminators","md5":"bc3d32a696895f78c19df6c717586a5d","sha1":"9191cb156a30a3ed79c44c0a16c95159e8ff689d","sha256":"0e88b6fcbb8591edfd28184fa70a04b6dd3af8a14367c628edd7caba32e58c68","sha512":"8d4f38907f3423a86d90575772b292680f7970527d2090fc005f9b096cc81d3f279d59ad76eafca30c3d4bbaf2276bbaa753e2a46a149424cf6f1c319ded5a64","ssdeep":"","tlshash":"4e310059c51d3566ec04c3aceae1d468315e71efa8a581c961849b3f95b0dce0eccb70","first_seen":"2023-04-12T23:20:27Z","last_seen":"2026-05-20T16:56:29.761431Z","times_seen":103384,"resource_available":false,"data":null}},"time_used":257,"timings":{"blocked":111,"dns":95,"connect":9,"send":0,"wait":11,"receive":0,"ssl":28},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"adfs.heart.org/adfs/portal/logo/logo.png","fqdn":"adfs.heart.org","domain":"heart.org","tld":"org"},"ip":{"addr":"69.152.183.140","port":443,"asn":7018,"as":"ATT-INTERNET4","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://osnrafbtea.oneswittla.ru/kswqjl/#alberto@elzaburu.es","date":"2023-11-21T07:44:08.132Z","timestamp":1700552648132,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"adfs.heart.org","organization":"American Heart Association, Inc"},"issuer":{"commonName":"Sectigo RSA Organization Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 16 May 2023 00:00:00 GMT","end":"Wed, 15 May 2024 23:59:59 GMT"},"fingerprint":{"sha1":"11:D1:74:EB:5A:DF:CB:58:DE:8A:EE:06:70:FD:78:6D:A5:F4:22:58","sha256":"60:A8:80:14:75:76:75:09:29:1B:F8:61:40:FF:99:51:43:06:B3:A2:29:F2:71:AE:41:53:0A:CC:48:D6:81:BD"}}},"request":{"raw":"GET /adfs/portal/logo/logo.png HTTP/1.1\r\nHost: adfs.heart.org\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://osnrafbtea.oneswittla.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Length: 6428\r\nContent-Type: image/png\r\nExpires: Thu, 21 Dec 2023 07:44:06 GMT\r\nETag: 3A5EEEA11E1041DB96B81498AB69C050DD045D9E56C69E19BD98430BA752165F\r\nServer: Microsoft-HTTPAPI/2.0 Microsoft-HTTPAPI/2.0\r\nStrict-Transport-Security: max-age = 31536000\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\nContent-Security-Policy: default-src 'self' 'unsafe-inline' 'unsafe-eval'; img-src 'self' data:;\r\nDate: Tue, 21 Nov 2023 07:44:06 GMT\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":6428,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 260 x 32, 8-bit/color RGBA, non-interlaced\\012- data","md5":"d3f69be16baf7acef2e7f4dd03729866","sha1":"e11aa0084b93253a24dd3ed57ddde66d27c84d2b","sha256":"3a5eeea11e1041db96b81498ab69c050dd045d9e56c69e19bd98430ba752165f","sha512":"f48f413b3f64f55d17ba538f7000ab233e6c7e6a6390d38810ca4af809ed3643209f0ff2952c466e7d9265f8a9b9d90dc39e946fa6dd8ba9243ec33ea6545de1","ssdeep":"96:yknmWaKUh5wRHLDw0Rch6YKKTlz5AgcYbWpGx2mhRnmU3KHHVSmLPmlPOglLVBvl:yknr/HRchvLl9ArYKpGx2GmvHVrqtbdl","tlshash":"05d13b44afc180015137f50e57d4988bef6371e96a8c998a7c8c8e774f701f18e67176","first_seen":"2023-08-31T15:31:22Z","last_seen":"2024-08-21T07:41:51.655243Z","times_seen":17474,"resource_available":false,"data":null}},"time_used":1018,"timings":{"blocked":429,"dns":38,"connect":133,"send":0,"wait":137,"receive":1,"ssl":278},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"osnrafbtea.oneswittla.ru//web1socket/socket.io/?type=User\u0026EIO=4\u0026transport=websocket","fqdn":"osnrafbtea.oneswittla.ru","domain":"oneswittla.ru","tld":"ru"},"ip":{"addr":"172.67.218.22","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2023-11-21T07:44:10.47936926Z","timestamp":1700552650479,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oneswittla.ru","organization":""},"issuer":{"commonName":"GTS CA 1P5","organization":"Google Trust Services LLC"},"validity":{"start":"Wed, 01 Nov 2023 16:29:11 GMT","end":"Tue, 30 Jan 2024 16:29:10 GMT"},"fingerprint":{"sha1":"42:11:11:15:F6:40:D4:B8:81:C3:A5:90:8E:27:09:05:06:2B:51:36","sha256":"70:20:9A:17:36:07:97:75:00:A2:85:E8:C1:BF:E0:1C:66:91:FA:6C:AE:86:F0:B7:3F:3A:BB:16:1E:F7:2C:B3"}}},"request":{"raw":"GET //web1socket/socket.io/?type=User\u0026EIO=4\u0026transport=websocket HTTP/1.1\r\nHost: osnrafbtea.oneswittla.ru\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://osnrafbtea.oneswittla.ru\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: T8StDyZdL7jrVqaS1KiE4w==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nCookie: XSRF-TOKEN=eyJpdiI6InRDaU05S2VJemVkR3FtYlVnVWZvd1E9PSIsInZhbHVlIjoiOGhsVE9FYytnYSs4TFpJM0lhaEM2TEFQTTB2Z0QxendEb25lWW9hQXhtajBnc0t1ZDZxNCtnOWNWVlhXRlM4eXA3dk9wSzgzSFB2dWVmcElzcm1BUlJZb1J1cHFrQitPTzNjc3ZjTldaSTZUTlcwaWl1REFuZUJac28rY0x1NjUiLCJtYWMiOiIzZjU3ZmJjNjg1NzM1NThhNGY1OTUzNDZlYTRhZGUxYWJhODdiOTg0M2IxNmQ3MWM0ZmU0MGMxMjI4YTNjY2U3IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IitsajZaTkZtNVFHVzFNYmRrd0VkclE9PSIsInZhbHVlIjoickp5Z0FiYnU0aGNsbnhMSVB4cHl2SVVETGNFeGw5QTdjYjF0WnlxMnpRZk5Hanc0bkp1QXJ2ZUJmZlRqNFcrY2hHaWxhcVpLQUs3V1UzeXE2QkI5VHFGRFpFeHJ0VjhoUjBzcnliZkNxSkwwQm9Qc2E2V0ZLcklxb0oxR3FubFEiLCJtYWMiOiJmNDZmOGI0Y2FhMzFiMDMwNGFkODIyNmIwNDcwMjIyY2M1ZTIwNzkwNWYwYTVlMjQwZTdkYzYxNDgyNzJmZDUxIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nDate: Tue, 21 Nov 2023 07:44:08 GMT\r\nConnection: upgrade\r\nSec-WebSocket-Accept: cALehDqyCw0E5pmRZvNkBlHi7aM=\r\nUpgrade: websocket\r\nCF-Cache-Status: DYNAMIC\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=CDP%2FTzcoWmwU8CMRB%2FIF1b%2BEe3atiVSXddehqhaOYEuwnW2j5c026%2Fo8m2IrKaRUYx%2FN1R%2FOZhi0Df5D%2FNtrp3ptvlxKoupcqbs1LEynfkNpm96jcD1jAJfLpCJ5KCk9RoYq97NQcFnTX9M%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nNEL: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nServer: cloudflare\r\nCF-RAY: 82974e40d97eb505-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-20T16:56:15.989935Z","times_seen":15496273,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"httpbin.org/ip","fqdn":"httpbin.org","domain":"httpbin.org","tld":"org"},"ip":{"addr":"3.226.223.40","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://osnrafbtea.oneswittla.ru/kswqjl/#alberto@elzaburu.es","date":"2023-11-21T07:44:10.716Z","timestamp":1700552650716,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"httpbin.org","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M02","organization":"Amazon"},"validity":{"start":"Thu, 21 Sep 2023 00:00:00 GMT","end":"Fri, 18 Oct 2024 23:59:59 GMT"},"fingerprint":{"sha1":"14:0C:C7:A8:EC:FA:7F:9C:9D:D2:B8:7E:C9:B8:93:3A:A1:11:F6:01","sha256":"31:A3:45:E8:53:CE:C8:DA:48:78:03:01:A1:EE:EB:0B:B6:A8:CE:0C:BA:96:95:EA:94:BC:2B:68:42:EA:7F:B5"}}},"request":{"raw":"GET /ip HTTP/1.1\r\nHost: httpbin.org\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: application/json, text/javascript, */*; q=0.01\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://osnrafbtea.oneswittla.ru\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://osnrafbtea.oneswittla.ru/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 21 Nov 2023 07:44:09 GMT\r\ncontent-type: application/json\r\ncontent-length: 31\r\nserver: gunicorn/19.9.0\r\naccess-control-allow-origin: https://osnrafbtea.oneswittla.ru\r\naccess-control-allow-credentials: true\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":31,"size_decoded":0,"mime_type":"application/json","magic":"JSON data\\012- , ASCII text","md5":"421fbb31f37428f936586985bd35b7ef","sha1":"df617524b5cf0200e58b7ed3ce98c102fb952ca4","sha256":"f0c09e029405dd8f7f6574163ea5018413c7e621b7a69e6fb2ee223efdc32ddf","sha512":"bfa2aa2f01642f720055b5f031c882bd6098b61f579aa4f0825dc585405209bb868848886f780793c3d008cffaad43a9cca275144a05e8c9d2475fef9f7f4fe8","ssdeep":"","tlshash":"218004150700041144cc415dc305d70117c00c1dc507d0514d7137454514f340500135","first_seen":"2023-04-19T23:45:40Z","last_seen":"2026-05-19T16:48:40.991877Z","times_seen":14078,"resource_available":true,"data":null}},"time_used":745,"timings":{"blocked":320,"dns":2,"connect":103,"send":0,"wait":105,"receive":0,"ssl":212},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"osnrafbtea.oneswittla.ru//web1socket/socket.io/?type=User\u0026EIO=4\u0026transport=websocket","fqdn":"osnrafbtea.oneswittla.ru","domain":"oneswittla.ru","tld":"ru"},"ip":{"addr":"104.21.17.6","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2023-11-21T07:44:14.936290915Z","timestamp":1700552654936,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oneswittla.ru","organization":""},"issuer":{"commonName":"GTS CA 1P5","organization":"Google Trust Services LLC"},"validity":{"start":"Wed, 01 Nov 2023 16:29:11 GMT","end":"Tue, 30 Jan 2024 16:29:10 GMT"},"fingerprint":{"sha1":"42:11:11:15:F6:40:D4:B8:81:C3:A5:90:8E:27:09:05:06:2B:51:36","sha256":"70:20:9A:17:36:07:97:75:00:A2:85:E8:C1:BF:E0:1C:66:91:FA:6C:AE:86:F0:B7:3F:3A:BB:16:1E:F7:2C:B3"}}},"request":{"raw":"GET //web1socket/socket.io/?type=User\u0026EIO=4\u0026transport=websocket HTTP/1.1\r\nHost: osnrafbtea.oneswittla.ru\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://osnrafbtea.oneswittla.ru\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: T2TqpZfCC+0roZFB80KLSQ==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nCookie: XSRF-TOKEN=eyJpdiI6Ii9wWXlGYmFhblhlNzZzclJHbE5uYmc9PSIsInZhbHVlIjoiZDhRRmhHcFNMRmFUR0ZkQXYxRmRCaERYTWlHN1VzY3QxeCs2UzJvaFNsbkc3V3VTQW1PMk4rOHZnRjZrZk9GcDhlWXR2U3dqYy9kQ3BRd1pmWjJPTFpnSitDdEF1L1FzaXdrSUtnSGt4SFVtalRlQk9KN3BZaWFhamR1bG85VDYiLCJtYWMiOiJmMTYzOTBkYjNmZGYzNGNjYTc0YzE1N2IxZWQ3Yjc0OTg5NjExZWE5NzcyZjljZWIzY2ZmZmJlOTUzMWQ5NDE4IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkMxWjg3ZzlTMGRtZHN4UW5IYkhUTXc9PSIsInZhbHVlIjoiNTltdHhSdnVVcGhVOEFhQUZqaHZ2STVKZlZPOXN4bUloOFhPWGJkTUxSYmZHWGdqTmV2WXYwWitRcFdYeFMwYm4vZVM5UFBvbTdvd3FzNDdvS2JKZXFCeFV1a2p5Qnp3YlJtOUZGejI3Ni9wZVJKUDNzT3RVKzhZUjQ0SXBHNVIiLCJtYWMiOiIxOWIzOTc3NTY3MjJkNmVkNzlmYjhiM2ZmZWEwMWRlYjNhNzEyNjYxZTBkOTFhMWEyZWIzN2QwNzRkMDg4NzZjIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nDate: Tue, 21 Nov 2023 07:44:13 GMT\r\nConnection: upgrade\r\nSec-WebSocket-Accept: YiozQnP80p+PGiIuaHg/itj+AyY=\r\nUpgrade: websocket\r\nCF-Cache-Status: DYNAMIC\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=gdDTq3fX5RvLhs2tiWYRlkWxOzOMC7wh1%2FpVUnGjH%2F0OQ%2FrLonuQPesp4d0L7NCNJUu21QfS9Za%2BFwMhlgu7vY%2FOnyR0j1hZ4ZYGLm8xX34ve45SUx1QRH6Xgwvo%2BlJ%2BZ3kDPsdp5rX76DM%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nNEL: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nServer: cloudflare\r\nCF-RAY: 82974e5ccbc80b55-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-20T16:56:15.989935Z","times_seen":15496273,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"osnrafbtea.oneswittla.ru/web1/assets/pages/104gf8.css?cb=1700552641731","fqdn":"osnrafbtea.oneswittla.ru","domain":"oneswittla.ru","tld":"ru"},"ip":{"addr":"172.67.218.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://osnrafbtea.oneswittla.ru/kswqjl/#alberto@elzaburu.es","date":"2023-11-21T07:44:01.742Z","timestamp":1700552641742,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oneswittla.ru","organization":""},"issuer":{"commonName":"GTS CA 1P5","organization":"Google Trust Services LLC"},"validity":{"start":"Wed, 01 Nov 2023 16:29:11 GMT","end":"Tue, 30 Jan 2024 16:29:10 GMT"},"fingerprint":{"sha1":"42:11:11:15:F6:40:D4:B8:81:C3:A5:90:8E:27:09:05:06:2B:51:36","sha256":"70:20:9A:17:36:07:97:75:00:A2:85:E8:C1:BF:E0:1C:66:91:FA:6C:AE:86:F0:B7:3F:3A:BB:16:1E:F7:2C:B3"}}},"request":{"raw":"GET /web1/assets/pages/104gf8.css?cb=1700552641731 HTTP/1.1\r\nHost: osnrafbtea.oneswittla.ru\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://osnrafbtea.oneswittla.ru/kswqjl/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 21 Nov 2023 07:44:00 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 16 Nov 2023 05:10:33 GMT\r\netag: W/\"461-60a3e0a12d5ad\"\r\naccess-control-allow-origin: *\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: DENY\r\ncontent-security-policy: frame-ancestors 'none'\r\ncache-control: max-age=14400\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=BeLRI%2FR%2Bt3hpjgHTEv9lFjO9ErW%2Fb0K8MBYYJeR%2FU1LuXbfTY9XjeQroa0FHnYSy2CIdsXcLQ%2BdlhQEgk326KEzaFKdRznKcHlssu0L4fhTtjzTqc6NlYS05bpF%2BYr5TTMoLV5se\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\ncf-ray: 82974e0ee86a56be-OSL\r\ncontent-encoding: br\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1121,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1164), with no line terminators","md5":"1d425fb9c0a48323d58155b61ac338d8","sha1":"755d9cf7e096cd1f590b408f1921f78dba97d5c9","sha256":"da5bb4dcce3afee4e8b582d18c202dd7f2ec4e9485986f18f1c8ff9271235adf","sha512":"02edacb95c51c6fae9631be5b9227c735ebfb4932881cd5ada7b742354184e7a56b959c8004fdf540c075f1a7c7fcbde48427bf48904b2113cfb0eeaac2f55d6","ssdeep":"","tlshash":"57210f69e6966cbf751b9fa92bf52780132db040c0258b3c3b3e71f3638909490773a6","first_seen":"2023-09-28T13:43:04Z","last_seen":"2023-11-29T20:08:08Z","times_seen":3378,"resource_available":false,"data":null}},"time_used":959,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":958,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"osnrafbtea.oneswittla.ru/web1/assets/cloudfavicon.ico","fqdn":"osnrafbtea.oneswittla.ru","domain":"oneswittla.ru","tld":"ru"},"ip":{"addr":"172.67.218.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://osnrafbtea.oneswittla.ru/kswqjl/#alberto@elzaburu.es","date":"2023-11-21T07:44:02.354Z","timestamp":1700552642354,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oneswittla.ru","organization":""},"issuer":{"commonName":"GTS CA 1P5","organization":"Google Trust Services LLC"},"validity":{"start":"Wed, 01 Nov 2023 16:29:11 GMT","end":"Tue, 30 Jan 2024 16:29:10 GMT"},"fingerprint":{"sha1":"42:11:11:15:F6:40:D4:B8:81:C3:A5:90:8E:27:09:05:06:2B:51:36","sha256":"70:20:9A:17:36:07:97:75:00:A2:85:E8:C1:BF:E0:1C:66:91:FA:6C:AE:86:F0:B7:3F:3A:BB:16:1E:F7:2C:B3"}}},"request":{"raw":"GET /web1/assets/cloudfavicon.ico HTTP/1.1\r\nHost: osnrafbtea.oneswittla.ru\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://osnrafbtea.oneswittla.ru/kswqjl/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 21 Nov 2023 07:44:00 GMT\r\ncontent-type: image/x-icon\r\nlast-modified: Wed, 16 Aug 2023 15:22:46 GMT\r\netag: W/\"86be-6030bde212b57\"\r\naccess-control-allow-origin: *\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: DENY\r\ncontent-security-policy: frame-ancestors 'none'\r\ncache-control: max-age=14400\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=JNZKHQg2AhWlFJs8Mr7Bu2%2FMOdQK2C2t0kB13bd2lHl0juH30gc6b%2F3zQZfDmyWE%2FhmgWJWAas1fI4o%2BQl8ww%2B42M2qsFPA6N2kZ1MMlKhu2UwPZBTAJutQ9LolUR%2FsJmgK%2Buvae\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: HIT\r\nage: 15\r\nserver: cloudflare\r\ncf-ray: 82974e12cbef56be-OSL\r\ncontent-encoding: br\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":34494,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 5 icons, 16x16, 32 bits/pixel, 24x24, 32 bits/pixel\\012- data","md5":"88415acda09a4cbd9d87543c3ba78180","sha1":"2dec4705e9ab399efdc6eef36e079aa31d1df8d9","sha256":"20cccc47c1bac9d2ef36b6a1c58af58c5c169ad5ca084080f0392b86f949641c","sha512":"77d0d7e0c85a1cad6a22372f2d3904c0842628ce7f1adac9a2a0cbf3b566ce8148527b0e7ede2bb068f5d005917b3f95c2a25d031d0d4d7a6a5a117cefa83b24","ssdeep":"96:4KOr5hOo0Qhk2fAewTq/iwa2R7Qz8pz4DopTPGFsbN:qbl626uRg8pvF","tlshash":"e3f2e7886a03cca8b5877be0cd3795fd031f6c2ad86418df216b7d49bb79f12a055e12","first_seen":"2023-05-08T14:11:31Z","last_seen":"2026-05-18T10:40:53.387086Z","times_seen":39991,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"osnrafbtea.oneswittla.ru/kswqjl/","fqdn":"osnrafbtea.oneswittla.ru","domain":"oneswittla.ru","tld":"ru"},"ip":{"addr":"172.67.218.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2023-11-21T07:44:00.003Z","timestamp":1700552640003,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oneswittla.ru","organization":""},"issuer":{"commonName":"GTS CA 1P5","organization":"Google Trust Services LLC"},"validity":{"start":"Wed, 01 Nov 2023 16:29:11 GMT","end":"Tue, 30 Jan 2024 16:29:10 GMT"},"fingerprint":{"sha1":"42:11:11:15:F6:40:D4:B8:81:C3:A5:90:8E:27:09:05:06:2B:51:36","sha256":"70:20:9A:17:36:07:97:75:00:A2:85:E8:C1:BF:E0:1C:66:91:FA:6C:AE:86:F0:B7:3F:3A:BB:16:1E:F7:2C:B3"}}},"request":{"raw":"GET /kswqjl/ HTTP/1.1\r\nHost: osnrafbtea.oneswittla.ru\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 21 Nov 2023 07:43:58 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=FnEplMHW0XnvtOuJIvlV3t71JM9By88Bp1jQGoTl7Ljfc8D3%2FA1ih9bBlLo4Gqjl%2Bhd30nJlsO4iKwmO8ohk6xF6C7bupUiKqfP9sLN2qYDRjK3GGGm4UUPWRaAmhfTEwnpprGq%2BwT0OIaA%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 82974e041b100b31-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":115,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document text\\012- HTML document, ASCII text, with no line terminators","md5":"8cb55a284d091db5ee30a030d47e66ac","sha1":"be30e9cbabde529410546578bcf2349a2e251f8b","sha256":"f6333720fa0b5149559a5b45e94c00a9c86743a0be0cbcf58e111cade6de5675","sha512":"7de05c43c4e24f73ed62ec0001ae763201a212473179ef461d6fba5c23f07e0d88df919a98484836169c2e76d962f62289a2e29cbb7bb19195c726e7bcecff66","ssdeep":"","tlshash":"10b092eb1da2c0982c0a6dd06abff9289996a0280e71f955e1e0283888223f40c53b40","first_seen":"2023-11-08T19:12:36Z","last_seen":"2023-11-28T00:09:45Z","times_seen":1471,"resource_available":false,"data":null}},"time_used":394,"timings":{"blocked":9,"dns":1,"connect":1,"send":0,"wait":370,"receive":0,"ssl":10},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Microsoft Outlook","verdict":"phishing","severity":"medium","comment":"","tags":["phishing","microsoft","outlook"],"meta":null}]}},{"url":{"schema":"https","addr":"osnrafbtea.oneswittla.ru/web1/assets/js/pages-head-web.min.js?cb=1700552641731","fqdn":"osnrafbtea.oneswittla.ru","domain":"oneswittla.ru","tld":"ru"},"ip":{"addr":"172.67.218.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://osnrafbtea.oneswittla.ru/kswqjl/#alberto@elzaburu.es","date":"2023-11-21T07:44:01.766Z","timestamp":1700552641766,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oneswittla.ru","organization":""},"issuer":{"commonName":"GTS CA 1P5","organization":"Google Trust Services LLC"},"validity":{"start":"Wed, 01 Nov 2023 16:29:11 GMT","end":"Tue, 30 Jan 2024 16:29:10 GMT"},"fingerprint":{"sha1":"42:11:11:15:F6:40:D4:B8:81:C3:A5:90:8E:27:09:05:06:2B:51:36","sha256":"70:20:9A:17:36:07:97:75:00:A2:85:E8:C1:BF:E0:1C:66:91:FA:6C:AE:86:F0:B7:3F:3A:BB:16:1E:F7:2C:B3"}}},"request":{"raw":"GET /web1/assets/js/pages-head-web.min.js?cb=1700552641731 HTTP/1.1\r\nHost: osnrafbtea.oneswittla.ru\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://osnrafbtea.oneswittla.ru/kswqjl/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 21 Nov 2023 07:44:00 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 22 Oct 2023 12:15:47 GMT\r\netag: W/\"353a-6084d10c51e3d\"\r\naccess-control-allow-origin: *\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: DENY\r\ncontent-security-policy: frame-ancestors 'none'\r\ncache-control: max-age=14400\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=juJw%2B9i2xemLoox0hC18SN4lrOB5zP4Fsa%2FB%2F48S8wREJpAktzpFcTUDBzevx0xIcmiUaCCLdrlJvqG4i0aS4h2eJd14zlpYoNSFp5N6olgrWPpYaEKu%2Fm3lUF6tVBU3890doi64\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\ncf-ray: 82974e0f087a56be-OSL\r\ncontent-encoding: br\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":13626,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (13626), with no line terminators","md5":"701637cf7b3c9588cdf84dbb449ba48e","sha1":"a3fd0695db073372cbb52345cb18cd4f8186edeb","sha256":"fe2ea5cd48f2ca8001c5283ee74d2b41305644374b0c1e7b90b9cb6b5bb73a94","sha512":"c164a8263f80e6d51fb5fca897fdd481f13072726dab7674a8d2291db6bdd178015c60d1396b505488d610c690fb7d20e3247a14b9a41f93cf1a74b58df022dd","ssdeep":"384:VJS8baODLnsyoufnuP7k8ZGEWtMaAJyAdX220BQfwxuGKcKpFHU4PxS1eD:TSzODrsyoufnuP7kHE5aAJyAdX2pBQf1","tlshash":"415272857af46dd5075326bbb337b4e8f0663c983490a89bf214bc84b8f0642f5e19b4","first_seen":"2023-10-22T15:28:58Z","last_seen":"2023-12-13T02:19:04Z","times_seen":13891,"resource_available":true,"data":null}},"time_used":956,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":956,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/turnstile/v0/api.js?render=explicit","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.2.184","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://osnrafbtea.oneswittla.ru/kswqjl/#alberto@elzaburu.es","date":"2023-11-21T07:44:00.547Z","timestamp":1700552640547,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"challenges.cloudflare.com","organization":"Cloudflare, Inc."},"issuer":{"commonName":"Cloudflare Inc ECC CA-3","organization":"Cloudflare, Inc."},"validity":{"start":"Fri, 18 Aug 2023 00:00:00 GMT","end":"Sat, 17 Aug 2024 23:59:59 GMT"},"fingerprint":{"sha1":"5F:E4:AA:8C:2E:24:D2:B1:69:9D:13:28:31:5C:65:FA:97:2A:E9:6E","sha256":"A2:A8:37:E9:57:D0:F0:FE:3B:6F:A8:23:58:80:DA:61:DD:F9:50:CF:F0:2D:27:D5:00:AA:21:A7:B4:75:80:AD"}}},"request":{"raw":"GET /turnstile/v0/api.js?render=explicit HTTP/1.1\r\nHost: challenges.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://osnrafbtea.oneswittla.ru/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ndate: Tue, 21 Nov 2023 07:43:58 GMT\r\naccess-control-allow-origin: *\r\nlocation: /turnstile/v0/g/9914b343/api.js?render=explicit\r\ncache-control: max-age=300, public\r\nvary: accept-encoding\r\nserver: cloudflare\r\ncf-ray: 82974e078b07712d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":null,"data":{"size":34254,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-20T16:56:15.989935Z","times_seen":15496273,"resource_available":true,"data":null}},"time_used":32,"timings":{"blocked":12,"dns":1,"connect":1,"send":0,"wait":6,"receive":0,"ssl":10},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"osnrafbtea.oneswittla.ru//web1socket/socket.io/?type=User\u0026EIO=4\u0026transport=websocket","fqdn":"osnrafbtea.oneswittla.ru","domain":"oneswittla.ru","tld":"ru"},"ip":{"addr":"172.67.218.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://osnrafbtea.oneswittla.ru/kswqjl/#alberto@elzaburu.es","date":"2023-11-21T07:44:09.708Z","timestamp":1700552649708,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oneswittla.ru","organization":""},"issuer":{"commonName":"GTS CA 1P5","organization":"Google Trust Services LLC"},"validity":{"start":"Wed, 01 Nov 2023 16:29:11 GMT","end":"Tue, 30 Jan 2024 16:29:10 GMT"},"fingerprint":{"sha1":"42:11:11:15:F6:40:D4:B8:81:C3:A5:90:8E:27:09:05:06:2B:51:36","sha256":"70:20:9A:17:36:07:97:75:00:A2:85:E8:C1:BF:E0:1C:66:91:FA:6C:AE:86:F0:B7:3F:3A:BB:16:1E:F7:2C:B3"}}},"request":{"raw":"GET //web1socket/socket.io/?type=User\u0026EIO=4\u0026transport=websocket HTTP/1.1\r\nHost: osnrafbtea.oneswittla.ru\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://osnrafbtea.oneswittla.ru\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: T8StDyZdL7jrVqaS1KiE4w==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nCookie: XSRF-TOKEN=eyJpdiI6InRDaU05S2VJemVkR3FtYlVnVWZvd1E9PSIsInZhbHVlIjoiOGhsVE9FYytnYSs4TFpJM0lhaEM2TEFQTTB2Z0QxendEb25lWW9hQXhtajBnc0t1ZDZxNCtnOWNWVlhXRlM4eXA3dk9wSzgzSFB2dWVmcElzcm1BUlJZb1J1cHFrQitPTzNjc3ZjTldaSTZUTlcwaWl1REFuZUJac28rY0x1NjUiLCJtYWMiOiIzZjU3ZmJjNjg1NzM1NThhNGY1OTUzNDZlYTRhZGUxYWJhODdiOTg0M2IxNmQ3MWM0ZmU0MGMxMjI4YTNjY2U3IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IitsajZaTkZtNVFHVzFNYmRrd0VkclE9PSIsInZhbHVlIjoickp5Z0FiYnU0aGNsbnhMSVB4cHl2SVVETGNFeGw5QTdjYjF0WnlxMnpRZk5Hanc0bkp1QXJ2ZUJmZlRqNFcrY2hHaWxhcVpLQUs3V1UzeXE2QkI5VHFGRFpFeHJ0VjhoUjBzcnliZkNxSkwwQm9Qc2E2V0ZLcklxb0oxR3FubFEiLCJtYWMiOiJmNDZmOGI0Y2FhMzFiMDMwNGFkODIyNmIwNDcwMjIyY2M1ZTIwNzkwNWYwYTVlMjQwZTdkYzYxNDgyNzJmZDUxIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nDate: Tue, 21 Nov 2023 07:44:08 GMT\r\nConnection: upgrade\r\nSec-WebSocket-Accept: cALehDqyCw0E5pmRZvNkBlHi7aM=\r\nUpgrade: websocket\r\nCF-Cache-Status: DYNAMIC\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=CDP%2FTzcoWmwU8CMRB%2FIF1b%2BEe3atiVSXddehqhaOYEuwnW2j5c026%2Fo8m2IrKaRUYx%2FN1R%2FOZhi0Df5D%2FNtrp3ptvlxKoupcqbs1LEynfkNpm96jcD1jAJfLpCJ5KCk9RoYq97NQcFnTX9M%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nNEL: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nServer: cloudflare\r\nCF-RAY: 82974e40d97eb505-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-20T16:56:15.989935Z","times_seen":15496273,"resource_available":true,"data":null}},"time_used":784,"timings":{"blocked":0,"dns":13,"connect":13,"send":0,"wait":748,"receive":0,"ssl":22},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"osnrafbtea.oneswittla.ru/web1/assets/js/pages-head-top-web.min.js?cb=1700552640702","fqdn":"osnrafbtea.oneswittla.ru","domain":"oneswittla.ru","tld":"ru"},"ip":{"addr":"172.67.218.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://osnrafbtea.oneswittla.ru/kswqjl/#alberto@elzaburu.es","date":"2023-11-21T07:44:00.736Z","timestamp":1700552640736,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oneswittla.ru","organization":""},"issuer":{"commonName":"GTS CA 1P5","organization":"Google Trust Services LLC"},"validity":{"start":"Wed, 01 Nov 2023 16:29:11 GMT","end":"Tue, 30 Jan 2024 16:29:10 GMT"},"fingerprint":{"sha1":"42:11:11:15:F6:40:D4:B8:81:C3:A5:90:8E:27:09:05:06:2B:51:36","sha256":"70:20:9A:17:36:07:97:75:00:A2:85:E8:C1:BF:E0:1C:66:91:FA:6C:AE:86:F0:B7:3F:3A:BB:16:1E:F7:2C:B3"}}},"request":{"raw":"GET /web1/assets/js/pages-head-top-web.min.js?cb=1700552640702 HTTP/1.1\r\nHost: osnrafbtea.oneswittla.ru\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://osnrafbtea.oneswittla.ru/kswqjl/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 21 Nov 2023 07:43:59 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 21 Oct 2023 21:35:46 GMT\r\netag: W/\"95a-60840c594e1e3\"\r\naccess-control-allow-origin: *\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: DENY\r\ncontent-security-policy: frame-ancestors 'none'\r\ncache-control: max-age=14400\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=KSn3FqugLitsjJvdXjNiTwVF65ZkFGS%2FCmcDRC9OjknIf6UG8myQ9z0NjK1KMud9uCX4hWLVs%2FZ7xqGx9IDFZqArGkoamczl7Srj34uAFE%2BGJIVFECdL%2BO0U5Ij3PwbCp49MMRz8\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\ncf-ray: 82974e08ab9556be-OSL\r\ncontent-encoding: br\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2394,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (2572), with no line terminators","md5":"207127ad0286515cd05c7197ca4839af","sha1":"da5130cf88e4a758b49ce84f1ff0483ee26f29b9","sha256":"23794b050f43c5f461200b5c71ea38f75a03fb964f10b91f23ae903fc16894fb","sha512":"b5db2b88a04aaee107c173207de44b56cf53b412ad458248a78a2681183542962be7f41965cd92e287d71ff0c72708192f28d01fc535460d42f40d3be76a460e","ssdeep":"","tlshash":"2351ca093055ba184d6e764ab071aa7cbcc5733b2511a420c0dfacacc4f6fd62869fb7","first_seen":"2023-10-23T01:34:22Z","last_seen":"2023-11-29T20:08:08Z","times_seen":3139,"resource_available":false,"data":null}},"time_used":990,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":989,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"osnrafbtea.oneswittla.ru/web1/assets/key.png","fqdn":"osnrafbtea.oneswittla.ru","domain":"oneswittla.ru","tld":"ru"},"ip":{"addr":"172.67.218.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://osnrafbtea.oneswittla.ru/kswqjl/#alberto@elzaburu.es","date":"2023-11-21T07:44:08.111Z","timestamp":1700552648111,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oneswittla.ru","organization":""},"issuer":{"commonName":"GTS CA 1P5","organization":"Google Trust Services LLC"},"validity":{"start":"Wed, 01 Nov 2023 16:29:11 GMT","end":"Tue, 30 Jan 2024 16:29:10 GMT"},"fingerprint":{"sha1":"42:11:11:15:F6:40:D4:B8:81:C3:A5:90:8E:27:09:05:06:2B:51:36","sha256":"70:20:9A:17:36:07:97:75:00:A2:85:E8:C1:BF:E0:1C:66:91:FA:6C:AE:86:F0:B7:3F:3A:BB:16:1E:F7:2C:B3"}}},"request":{"raw":"GET /web1/assets/key.png HTTP/1.1\r\nHost: osnrafbtea.oneswittla.ru\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://osnrafbtea.oneswittla.ru/kswqjl/\r\nCookie: XSRF-TOKEN=eyJpdiI6InRDaU05S2VJemVkR3FtYlVnVWZvd1E9PSIsInZhbHVlIjoiOGhsVE9FYytnYSs4TFpJM0lhaEM2TEFQTTB2Z0QxendEb25lWW9hQXhtajBnc0t1ZDZxNCtnOWNWVlhXRlM4eXA3dk9wSzgzSFB2dWVmcElzcm1BUlJZb1J1cHFrQitPTzNjc3ZjTldaSTZUTlcwaWl1REFuZUJac28rY0x1NjUiLCJtYWMiOiIzZjU3ZmJjNjg1NzM1NThhNGY1OTUzNDZlYTRhZGUxYWJhODdiOTg0M2IxNmQ3MWM0ZmU0MGMxMjI4YTNjY2U3IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IitsajZaTkZtNVFHVzFNYmRrd0VkclE9PSIsInZhbHVlIjoickp5Z0FiYnU0aGNsbnhMSVB4cHl2SVVETGNFeGw5QTdjYjF0WnlxMnpRZk5Hanc0bkp1QXJ2ZUJmZlRqNFcrY2hHaWxhcVpLQUs3V1UzeXE2QkI5VHFGRFpFeHJ0VjhoUjBzcnliZkNxSkwwQm9Qc2E2V0ZLcklxb0oxR3FubFEiLCJtYWMiOiJmNDZmOGI0Y2FhMzFiMDMwNGFkODIyNmIwNDcwMjIyY2M1ZTIwNzkwNWYwYTVlMjQwZTdkYzYxNDgyNzJmZDUxIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 21 Nov 2023 07:44:06 GMT\r\ncontent-type: image/png\r\ncontent-length: 727\r\nlast-modified: Sun, 19 Mar 2023 15:20:17 GMT\r\netag: \"2d7-5f7425905ae40\"\r\naccess-control-allow-origin: *\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: DENY\r\ncontent-security-policy: frame-ancestors 'none'\r\ncache-control: max-age=14400\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=gg9pyVM%2ByQw8%2FVt%2FOCy91XkklanVG0oT2AC5JmXHwJn6gWnaIz2lty0N7NpRwps1HX5sqbbfL4URiUDVkWY6Hu6EknKQ3JeFySm8oOs8xYYYMO2MGg6pmJDZWs8EA3eYWNk%2FU%2FJI\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: HIT\r\nage: 14\r\naccept-ranges: bytes\r\nserver: cloudflare\r\ncf-ray: 82974e36b92356be-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":727,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced\\012- data","md5":"839cb0f55c3d2d5c2f740bda95cb2878","sha1":"93f6fa3a2da8b7184d4b5c5f2065872793370c2e","sha256":"40ecb8832f6a9a8aaa0cc6e1287e867a4fca38433d091d86c6cab1f28fbab652","sha512":"ecbca8ab21bf3302c88f933cfd248cff5553afe152a170f554c27fd67bdc3e7d8ce79e202561fd0658e41820681eb90f74e38fd09390c517afb34d2c1b65a096","ssdeep":"","tlshash":"860115c7471c28edd8791de1d9964a07463df431406923122e26937445375899f756f0","first_seen":"2023-07-01T14:36:17Z","last_seen":"2026-05-12T14:51:58.724361Z","times_seen":19534,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"osnrafbtea.oneswittla.ru/web1/assets/back.png","fqdn":"osnrafbtea.oneswittla.ru","domain":"oneswittla.ru","tld":"ru"},"ip":{"addr":"172.67.218.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://osnrafbtea.oneswittla.ru/kswqjl/#alberto@elzaburu.es","date":"2023-11-21T07:44:08.109Z","timestamp":1700552648109,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oneswittla.ru","organization":""},"issuer":{"commonName":"GTS CA 1P5","organization":"Google Trust Services LLC"},"validity":{"start":"Wed, 01 Nov 2023 16:29:11 GMT","end":"Tue, 30 Jan 2024 16:29:10 GMT"},"fingerprint":{"sha1":"42:11:11:15:F6:40:D4:B8:81:C3:A5:90:8E:27:09:05:06:2B:51:36","sha256":"70:20:9A:17:36:07:97:75:00:A2:85:E8:C1:BF:E0:1C:66:91:FA:6C:AE:86:F0:B7:3F:3A:BB:16:1E:F7:2C:B3"}}},"request":{"raw":"GET /web1/assets/back.png HTTP/1.1\r\nHost: osnrafbtea.oneswittla.ru\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://osnrafbtea.oneswittla.ru/kswqjl/\r\nCookie: XSRF-TOKEN=eyJpdiI6InRDaU05S2VJemVkR3FtYlVnVWZvd1E9PSIsInZhbHVlIjoiOGhsVE9FYytnYSs4TFpJM0lhaEM2TEFQTTB2Z0QxendEb25lWW9hQXhtajBnc0t1ZDZxNCtnOWNWVlhXRlM4eXA3dk9wSzgzSFB2dWVmcElzcm1BUlJZb1J1cHFrQitPTzNjc3ZjTldaSTZUTlcwaWl1REFuZUJac28rY0x1NjUiLCJtYWMiOiIzZjU3ZmJjNjg1NzM1NThhNGY1OTUzNDZlYTRhZGUxYWJhODdiOTg0M2IxNmQ3MWM0ZmU0MGMxMjI4YTNjY2U3IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IitsajZaTkZtNVFHVzFNYmRrd0VkclE9PSIsInZhbHVlIjoickp5Z0FiYnU0aGNsbnhMSVB4cHl2SVVETGNFeGw5QTdjYjF0WnlxMnpRZk5Hanc0bkp1QXJ2ZUJmZlRqNFcrY2hHaWxhcVpLQUs3V1UzeXE2QkI5VHFGRFpFeHJ0VjhoUjBzcnliZkNxSkwwQm9Qc2E2V0ZLcklxb0oxR3FubFEiLCJtYWMiOiJmNDZmOGI0Y2FhMzFiMDMwNGFkODIyNmIwNDcwMjIyY2M1ZTIwNzkwNWYwYTVlMjQwZTdkYzYxNDgyNzJmZDUxIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 21 Nov 2023 07:44:06 GMT\r\ncontent-type: image/png\r\ncontent-length: 231\r\nlast-modified: Sun, 19 Mar 2023 15:20:17 GMT\r\netag: \"e7-5f7425905ae40\"\r\naccess-control-allow-origin: *\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: DENY\r\ncontent-security-policy: frame-ancestors 'none'\r\ncache-control: max-age=14400\r\nage: 14\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=C1klVl66JwJRfv39Ux0HItOZ9fW0eYEgSslmreRYgKT1gaZREP%2By1HwwfVVIy8cLQQpz7alY%2FA0BmAS9jYYXQZ1eWDdi0Ycjq0ZphMJUP4rjXvruzwtcfMCD60GPHQ5TTL90MqtJ\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\ncf-ray: 82974e36b92256be-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":231,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced\\012- data","md5":"547988bac5584b4608466d761e16f370","sha1":"c11bb71049702528402a31027f200184910a7e23","sha256":"70e32b2db3f079bb0295a85a0db15ed9e5926294dd947938d6cfa595f5ab18b4","sha512":"c4a76f6e94982d1cc02c2b67523a334e76bfde525c1014d32db9e7eca0fa39a06f291ecfa94c8c6a49d488ea3acf9c10ddf3cad9515562010440863d0f08fba3","ssdeep":"","tlshash":"0cd097e26a88297fc39f223b29051a21ec8a7131a020f10c3812c238a501a285082ee2","first_seen":"2023-07-01T14:36:17Z","last_seen":"2026-05-12T14:51:58.725062Z","times_seen":19438,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/jquery-3.6.0.min.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.194.137","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://osnrafbtea.oneswittla.ru/kswqjl/#alberto@elzaburu.es","date":"2023-11-21T07:44:00.541Z","timestamp":1700552640541,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jquery.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 11 Jul 2023 00:00:00 GMT","end":"Sun, 14 Jul 2024 23:59:59 GMT"},"fingerprint":{"sha1":"D2:19:0A:AD:CE:BB:9C:61:17:5D:29:4B:A2:54:E8:C6:91:B8:F9:8D","sha256":"B1:CA:3A:23:BA:70:1D:18:3F:EC:99:D7:BE:6D:B2:FD:66:5F:5C:A7:7D:7F:C1:FC:16:D1:FD:89:4B:CC:15:34"}}},"request":{"raw":"GET /jquery-3.6.0.min.js HTTP/1.1\r\nHost: code.jquery.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://osnrafbtea.oneswittla.ru/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 18 Oct 1991 12:00:00 GMT\r\netag: W/\"28feccc0-15d9d\"\r\ncache-control: public, max-age=31536000, stale-while-revalidate=604800\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Tue, 21 Nov 2023 07:43:58 GMT\r\nage: 5314538\r\nx-served-by: cache-lga21931-LGA, cache-bma1640-BMA\r\nx-cache: HIT, HIT\r\nx-cache-hits: 30, 641142\r\nx-timer: S1700552639.671239,VS0,VE0\r\nvary: Accept-Encoding\r\ncontent-length: 30875\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":89501,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (65447)","md5":"8fb8fee4fcc3cc86ff6c724154c49c42","sha1":"b82d238d4e31fdf618bae8ac11a6c812c03dd0d4","sha256":"ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e","sha512":"f3de1813a4160f9239f4781938645e1589b876759cd50b7936dbd849a35c38ffaed53f6a61dbdd8a1cf43cf4a28aa9fffbfddeec9a3811a1bb4ee6df58652b31","ssdeep":"1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn","tlshash":"069309ddb2c6702257a720ba007f510bf236199d6c4d8450f169d8eabc78a4e827bf7d","first_seen":"2023-03-07T01:02:13Z","last_seen":"2026-05-20T16:48:19.221913Z","times_seen":471498,"resource_available":true,"data":null}},"time_used":91,"timings":{"blocked":39,"dns":1,"connect":8,"send":0,"wait":8,"receive":4,"ssl":28},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"osnrafbtea.oneswittla.ru/web1/assets/css/pages-godaddy.css?cb=1700552641731","fqdn":"osnrafbtea.oneswittla.ru","domain":"oneswittla.ru","tld":"ru"},"ip":{"addr":"172.67.218.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://osnrafbtea.oneswittla.ru/kswqjl/#alberto@elzaburu.es","date":"2023-11-21T07:44:01.756Z","timestamp":1700552641756,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oneswittla.ru","organization":""},"issuer":{"commonName":"GTS CA 1P5","organization":"Google Trust Services LLC"},"validity":{"start":"Wed, 01 Nov 2023 16:29:11 GMT","end":"Tue, 30 Jan 2024 16:29:10 GMT"},"fingerprint":{"sha1":"42:11:11:15:F6:40:D4:B8:81:C3:A5:90:8E:27:09:05:06:2B:51:36","sha256":"70:20:9A:17:36:07:97:75:00:A2:85:E8:C1:BF:E0:1C:66:91:FA:6C:AE:86:F0:B7:3F:3A:BB:16:1E:F7:2C:B3"}}},"request":{"raw":"GET /web1/assets/css/pages-godaddy.css?cb=1700552641731 HTTP/1.1\r\nHost: osnrafbtea.oneswittla.ru\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://osnrafbtea.oneswittla.ru/kswqjl/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 21 Nov 2023 07:44:00 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 09 Oct 2023 21:28:17 GMT\r\netag: W/\"954d-6074f44c310a2\"\r\naccess-control-allow-origin: *\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: DENY\r\ncontent-security-policy: frame-ancestors 'none'\r\ncache-control: max-age=14400\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=wO%2FnkifgAeEl8aTq5au9WgSnnh0YaPOYBXXD0eM6zJSsPplkRfZt8vEsKjPhrRkPjrfIWxBPy6wLfGJr7igZpcHZJUchPeOvu1PWatEcKRFwQ6CS88TF3epih7dGafzyfbkWe2tA\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\ncf-ray: 82974e0ef86e56be-OSL\r\ncontent-encoding: br\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":38221,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1437), with CRLF line terminators","md5":"5732ce20ba6fd490b9732cfd3cb8ba04","sha1":"50d032727014bccd0f319138a2424d2e9bb17aeb","sha256":"0abd0eb456f4f3d9ac24b04778f49a4405baa2ea161bfb744803aefeda7cac73","sha512":"157c814c07df14070e4ee00ff825c14bc230e3fe8309640a6533ce29e4c4bfacd035e73cd0144b6f006eff4b6dae8ad9a44e19ca8ea924bd589f04805495810b","ssdeep":"192:yoogIexLQ5WKTCFBwCIZtJ8FtX2+UBRkfeWcrScuH9Ye3YdersR8Q5oqWjfvogxp:nDKAaZtJs5odwvhx5P6mqjDggJkLLn","tlshash":"0303cf86155062385f36277bf3bb00aceb6d827356961664b4bcb444cff86e410e1eaf","first_seen":"2023-10-11T10:26:07Z","last_seen":"2023-11-29T20:08:08Z","times_seen":3957,"resource_available":false,"data":null}},"time_used":1105,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1105,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"osnrafbtea.oneswittla.ru/web1/assets/cloudfavicon.ico","fqdn":"osnrafbtea.oneswittla.ru","domain":"oneswittla.ru","tld":"ru"},"ip":{"addr":"172.67.218.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://osnrafbtea.oneswittla.ru/kswqjl/#alberto@elzaburu.es","date":"2023-11-21T07:44:00.843Z","timestamp":1700552640843,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oneswittla.ru","organization":""},"issuer":{"commonName":"GTS CA 1P5","organization":"Google Trust Services LLC"},"validity":{"start":"Wed, 01 Nov 2023 16:29:11 GMT","end":"Tue, 30 Jan 2024 16:29:10 GMT"},"fingerprint":{"sha1":"42:11:11:15:F6:40:D4:B8:81:C3:A5:90:8E:27:09:05:06:2B:51:36","sha256":"70:20:9A:17:36:07:97:75:00:A2:85:E8:C1:BF:E0:1C:66:91:FA:6C:AE:86:F0:B7:3F:3A:BB:16:1E:F7:2C:B3"}}},"request":{"raw":"GET /web1/assets/cloudfavicon.ico HTTP/1.1\r\nHost: osnrafbtea.oneswittla.ru\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://osnrafbtea.oneswittla.ru/kswqjl/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 21 Nov 2023 07:43:58 GMT\r\ncontent-type: image/x-icon\r\nlast-modified: Wed, 16 Aug 2023 15:22:46 GMT\r\netag: W/\"86be-6030bde212b57\"\r\naccess-control-allow-origin: *\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: DENY\r\ncontent-security-policy: frame-ancestors 'none'\r\ncache-control: max-age=14400\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=JNZKHQg2AhWlFJs8Mr7Bu2%2FMOdQK2C2t0kB13bd2lHl0juH30gc6b%2F3zQZfDmyWE%2FhmgWJWAas1fI4o%2BQl8ww%2B42M2qsFPA6N2kZ1MMlKhu2UwPZBTAJutQ9LolUR%2FsJmgK%2Buvae\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: HIT\r\nage: 13\r\nserver: cloudflare\r\ncf-ray: 82974e095c1856be-OSL\r\ncontent-encoding: br\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":34494,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 5 icons, 16x16, 32 bits/pixel, 24x24, 32 bits/pixel\\012- data","md5":"88415acda09a4cbd9d87543c3ba78180","sha1":"2dec4705e9ab399efdc6eef36e079aa31d1df8d9","sha256":"20cccc47c1bac9d2ef36b6a1c58af58c5c169ad5ca084080f0392b86f949641c","sha512":"77d0d7e0c85a1cad6a22372f2d3904c0842628ce7f1adac9a2a0cbf3b566ce8148527b0e7ede2bb068f5d005917b3f95c2a25d031d0d4d7a6a5a117cefa83b24","ssdeep":"96:4KOr5hOo0Qhk2fAewTq/iwa2R7Qz8pz4DopTPGFsbN:qbl626uRg8pvF","tlshash":"e3f2e7886a03cca8b5877be0cd3795fd031f6c2ad86418df216b7d49bb79f12a055e12","first_seen":"2023-05-08T14:11:31Z","last_seen":"2026-05-18T10:40:53.387086Z","times_seen":39991,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":11,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"osnrafbtea.oneswittla.ru/web1/assets/microsoftfavicon.ico","fqdn":"osnrafbtea.oneswittla.ru","domain":"oneswittla.ru","tld":"ru"},"ip":{"addr":"172.67.218.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://osnrafbtea.oneswittla.ru/kswqjl/#alberto@elzaburu.es","date":"2023-11-21T07:44:08.585Z","timestamp":1700552648585,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oneswittla.ru","organization":""},"issuer":{"commonName":"GTS CA 1P5","organization":"Google Trust Services LLC"},"validity":{"start":"Wed, 01 Nov 2023 16:29:11 GMT","end":"Tue, 30 Jan 2024 16:29:10 GMT"},"fingerprint":{"sha1":"42:11:11:15:F6:40:D4:B8:81:C3:A5:90:8E:27:09:05:06:2B:51:36","sha256":"70:20:9A:17:36:07:97:75:00:A2:85:E8:C1:BF:E0:1C:66:91:FA:6C:AE:86:F0:B7:3F:3A:BB:16:1E:F7:2C:B3"}}},"request":{"raw":"GET /web1/assets/microsoftfavicon.ico HTTP/1.1\r\nHost: osnrafbtea.oneswittla.ru\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://osnrafbtea.oneswittla.ru/kswqjl/\r\nCookie: XSRF-TOKEN=eyJpdiI6InRDaU05S2VJemVkR3FtYlVnVWZvd1E9PSIsInZhbHVlIjoiOGhsVE9FYytnYSs4TFpJM0lhaEM2TEFQTTB2Z0QxendEb25lWW9hQXhtajBnc0t1ZDZxNCtnOWNWVlhXRlM4eXA3dk9wSzgzSFB2dWVmcElzcm1BUlJZb1J1cHFrQitPTzNjc3ZjTldaSTZUTlcwaWl1REFuZUJac28rY0x1NjUiLCJtYWMiOiIzZjU3ZmJjNjg1NzM1NThhNGY1OTUzNDZlYTRhZGUxYWJhODdiOTg0M2IxNmQ3MWM0ZmU0MGMxMjI4YTNjY2U3IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IitsajZaTkZtNVFHVzFNYmRrd0VkclE9PSIsInZhbHVlIjoickp5Z0FiYnU0aGNsbnhMSVB4cHl2SVVETGNFeGw5QTdjYjF0WnlxMnpRZk5Hanc0bkp1QXJ2ZUJmZlRqNFcrY2hHaWxhcVpLQUs3V1UzeXE2QkI5VHFGRFpFeHJ0VjhoUjBzcnliZkNxSkwwQm9Qc2E2V0ZLcklxb0oxR3FubFEiLCJtYWMiOiJmNDZmOGI0Y2FhMzFiMDMwNGFkODIyNmIwNDcwMjIyY2M1ZTIwNzkwNWYwYTVlMjQwZTdkYzYxNDgyNzJmZDUxIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 21 Nov 2023 07:44:06 GMT\r\ncontent-type: image/x-icon\r\nlast-modified: Sun, 19 Mar 2023 15:20:17 GMT\r\netag: W/\"4316-5f7425905ae40\"\r\naccess-control-allow-origin: *\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: DENY\r\ncontent-security-policy: frame-ancestors 'none'\r\ncache-control: max-age=14400\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=%2B9z0V%2FNJvkcetZwaBmtDxPwbyg6FY1S66M6NXYdUlQZ9i5RBf6yZjIvF0IOa%2BkKxfMCzFEOxEvC8vOInwOwrfUfk51rZTUqaIkxSDyQ%2FeQmfpanTihxvncpCU%2Bc%2FXCq0i%2BlbHn7V\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: HIT\r\nage: 13\r\nserver: cloudflare\r\ncf-ray: 82974e39bb8c56be-OSL\r\ncontent-encoding: br\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":17174,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors\\012- data","md5":"12e3dac858061d088023b2bd48e2fa96","sha1":"e08ce1a144eceae0c3c2ea7a9d6fbc5658f24ce5","sha256":"90cdaf487716184e4034000935c605d1633926d348116d198f355a98b8c6cd21","sha512":"c5030c55a855e7a9e20e22f4c70bf1e0f3c558a9b7d501cfab6992ac2656ae5e41b050ccac541efa55f9603e0d349b247eb4912ee169d44044271789c719cd01","ssdeep":"24:QSNTmTFxg4lyyyyyyyyyyyyyio7eeeeeeeeekzgsLsLsLsLsLsQZp:nfgyyyyyyyyyyyyynzQQQQQO","tlshash":"b772e35b1f5f4981ec4b0db80b125e80c5e49c973854dffbdb76b62888b0364ab845eb","first_seen":"2023-04-05T03:19:57Z","last_seen":"2026-05-20T16:14:18.778853Z","times_seen":165144,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"osnrafbtea.oneswittla.ru/web1/assets/css/pages.min.css?cb=1700552641731","fqdn":"osnrafbtea.oneswittla.ru","domain":"oneswittla.ru","tld":"ru"},"ip":{"addr":"172.67.218.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://osnrafbtea.oneswittla.ru/kswqjl/#alberto@elzaburu.es","date":"2023-11-21T07:44:01.751Z","timestamp":1700552641751,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oneswittla.ru","organization":""},"issuer":{"commonName":"GTS CA 1P5","organization":"Google Trust Services LLC"},"validity":{"start":"Wed, 01 Nov 2023 16:29:11 GMT","end":"Tue, 30 Jan 2024 16:29:10 GMT"},"fingerprint":{"sha1":"42:11:11:15:F6:40:D4:B8:81:C3:A5:90:8E:27:09:05:06:2B:51:36","sha256":"70:20:9A:17:36:07:97:75:00:A2:85:E8:C1:BF:E0:1C:66:91:FA:6C:AE:86:F0:B7:3F:3A:BB:16:1E:F7:2C:B3"}}},"request":{"raw":"GET /web1/assets/css/pages.min.css?cb=1700552641731 HTTP/1.1\r\nHost: osnrafbtea.oneswittla.ru\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://osnrafbtea.oneswittla.ru/kswqjl/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 21 Nov 2023 07:44:00 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 01 Nov 2023 13:29:30 GMT\r\netag: W/\"4276-6091742db8c68\"\r\naccess-control-allow-origin: *\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: DENY\r\ncontent-security-policy: frame-ancestors 'none'\r\ncache-control: max-age=14400\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=pTuBIJqVgN%2FURnac%2BRyXfi4YraS1PDN7%2F%2FNuVF4ma4wi%2F5ApqIPE9cKM2o8y0WOhIdXP%2BCG6sOcnY561eOHWwNBsK34wO8z1JhjecvCWIuqrLuiyLukmM8%2BnVCh%2F9ohUDvnXjrZS\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\ncf-ray: 82974e0ee86d56be-OSL\r\ncontent-encoding: br\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":17014,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (17014), with no line terminators","md5":"4d38e2ffc538c11f0dca9cb2ad6ca08a","sha1":"400ca5c484a88f9a91a1d1439e5f51a621ad3eaa","sha256":"6b14e6f4239ef85c9180a099263a041df2b82bd65a245e72cca365cbd5e88fa8","sha512":"2c1c64502508146e23f45c2d398db7a2283fdf0ee7f3757565e648a2e08cbbfbde2c32dd3ee4c764ea0c8162f0eabc4e456e2338f4e36aaf7a8e1afdaa4ff74b","ssdeep":"192:S3PiHSaXZfdY8xbXUfCkDAm0vHXIYECacgAx8K1MbJK2EKPMq/vHID/gPnqBvMmU:mtaVdY8xbXn54YE80tk0Sgfn","tlshash":"6672aaa1a2103229e177c13721d2fac922355652f57b5eb9bc7671f4cf891c32b3354a","first_seen":"2023-11-01T19:35:47Z","last_seen":"2024-08-20T21:28:38.768471Z","times_seen":25049,"resource_available":false,"data":null}},"time_used":956,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":956,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/sikn0/0x4AAAAAAAMj9eiEWzeCaLNQ/auto/normal","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.2.184","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://osnrafbtea.oneswittla.ru/kswqjl/#alberto@elzaburu.es","date":"2023-11-21T07:44:02.738Z","timestamp":1700552642738,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"challenges.cloudflare.com","organization":"Cloudflare, Inc."},"issuer":{"commonName":"Cloudflare Inc ECC CA-3","organization":"Cloudflare, Inc."},"validity":{"start":"Fri, 18 Aug 2023 00:00:00 GMT","end":"Sat, 17 Aug 2024 23:59:59 GMT"},"fingerprint":{"sha1":"5F:E4:AA:8C:2E:24:D2:B1:69:9D:13:28:31:5C:65:FA:97:2A:E9:6E","sha256":"A2:A8:37:E9:57:D0:F0:FE:3B:6F:A8:23:58:80:DA:61:DD:F9:50:CF:F0:2D:27:D5:00:AA:21:A7:B4:75:80:AD"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/sikn0/0x4AAAAAAAMj9eiEWzeCaLNQ/auto/normal HTTP/1.1\r\nHost: challenges.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://osnrafbtea.oneswittla.ru/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 21 Nov 2023 07:44:00 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\ncontent-security-policy: frame-src https://challenges.cloudflare.com/ blob:; base-uri 'self'\r\ncross-origin-embedder-policy: require-corp\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: cross-origin\r\ndocument-policy: js-profiling\r\norigin-agent-cluster: ?1\r\npermissions-policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()\r\nreferrer-policy: same-origin\r\nserver: cloudflare\r\ncf-ray: 82974e152c3ab527-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":72904,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document text\\012- HTML document text\\012- HTML document text\\012- HTML document text\\012- HTML document text\\012- exported SGML document, ASCII text, with very long lines (40091)","md5":"717bfc582f7f5190a5de5383a137dddf","sha1":"8b435508ff652eb6ec05983cc8fc48494ceb5324","sha256":"51ac9e4299bd4ed88f3318fa13054fd99fd1da6777bb1a1d773a84241943cda2","sha512":"67d8168ad6211cd4233fd0577b126b7729ec641340f0972ece2748487d43c2fd5f901918f89cc625cc9bcd005426cc9ba9d55995029d9987290d9b342787184e","ssdeep":"1536:XaTfc9IJbBeceIedkeO5gwyc99Kh0afdU6/jPNXhzNmU77JuI15fJRjDbY1GvIj9:4foTV/Pws9/j1hd77Jv5fJRjDbYMvIj9","tlshash":"5063f6d98ebc7c29ab029a29b0ce51e3732d53471551e198b8dca190cfec04e26f1f79","first_seen":"2023-11-21T08:44:17Z","last_seen":"2023-11-21T08:44:17Z","times_seen":1,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":14,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/turnstile/v0/g/9914b343/api.js?render=explicit","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.2.184","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://osnrafbtea.oneswittla.ru/kswqjl/#alberto@elzaburu.es","date":"2023-11-21T07:44:00.572Z","timestamp":1700552640572,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"challenges.cloudflare.com","organization":"Cloudflare, Inc."},"issuer":{"commonName":"Cloudflare Inc ECC CA-3","organization":"Cloudflare, Inc."},"validity":{"start":"Fri, 18 Aug 2023 00:00:00 GMT","end":"Sat, 17 Aug 2024 23:59:59 GMT"},"fingerprint":{"sha1":"5F:E4:AA:8C:2E:24:D2:B1:69:9D:13:28:31:5C:65:FA:97:2A:E9:6E","sha256":"A2:A8:37:E9:57:D0:F0:FE:3B:6F:A8:23:58:80:DA:61:DD:F9:50:CF:F0:2D:27:D5:00:AA:21:A7:B4:75:80:AD"}}},"request":{"raw":"GET /turnstile/v0/g/9914b343/api.js?render=explicit HTTP/1.1\r\nHost: challenges.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://osnrafbtea.oneswittla.ru/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 21 Nov 2023 07:43:58 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\ncache-control: max-age=31536000\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 82974e07ab0e712d-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":34254,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (34253)","md5":"6142a5f5c66e2c1be52ee9506a565962","sha1":"c3b39e8352efd1e0619b6dd62af8b2a917622868","sha256":"51cd12da61a7401c73472b2ac77067adfa30e9fc0545b4b7c240e9154e011fc7","sha512":"3de194e4c8f32703cfee9e2a48230d21301e28a39beefb36dcb2b8df26b962b3a508e7fd8fe55aca2f619293e293cdf64459bf5d91526cbceda770396765d5e2","ssdeep":"768:3YpyCIUTKuBT1ytljuXeMDKLFn76p+B5nLZ73akHgMO4B4oq0HVi:30nKuBT1Yj7MDCKp","tlshash":"9ff229993187343187ee41e0207b67877339ba3ae58cc840d85bc97539bcd8ad137ba9","first_seen":"2023-11-07T13:44:12Z","last_seen":"2023-11-30T20:53:42Z","times_seen":32842,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"osnrafbtea.oneswittla.ru/web1/assets/js/pages.min.js?cb=1700552641731","fqdn":"osnrafbtea.oneswittla.ru","domain":"oneswittla.ru","tld":"ru"},"ip":{"addr":"172.67.218.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://osnrafbtea.oneswittla.ru/kswqjl/#alberto@elzaburu.es","date":"2023-11-21T07:44:08.134Z","timestamp":1700552648134,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oneswittla.ru","organization":""},"issuer":{"commonName":"GTS CA 1P5","organization":"Google Trust Services LLC"},"validity":{"start":"Wed, 01 Nov 2023 16:29:11 GMT","end":"Tue, 30 Jan 2024 16:29:10 GMT"},"fingerprint":{"sha1":"42:11:11:15:F6:40:D4:B8:81:C3:A5:90:8E:27:09:05:06:2B:51:36","sha256":"70:20:9A:17:36:07:97:75:00:A2:85:E8:C1:BF:E0:1C:66:91:FA:6C:AE:86:F0:B7:3F:3A:BB:16:1E:F7:2C:B3"}}},"request":{"raw":"GET /web1/assets/js/pages.min.js?cb=1700552641731 HTTP/1.1\r\nHost: osnrafbtea.oneswittla.ru\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://osnrafbtea.oneswittla.ru/kswqjl/\r\nCookie: XSRF-TOKEN=eyJpdiI6InRDaU05S2VJemVkR3FtYlVnVWZvd1E9PSIsInZhbHVlIjoiOGhsVE9FYytnYSs4TFpJM0lhaEM2TEFQTTB2Z0QxendEb25lWW9hQXhtajBnc0t1ZDZxNCtnOWNWVlhXRlM4eXA3dk9wSzgzSFB2dWVmcElzcm1BUlJZb1J1cHFrQitPTzNjc3ZjTldaSTZUTlcwaWl1REFuZUJac28rY0x1NjUiLCJtYWMiOiIzZjU3ZmJjNjg1NzM1NThhNGY1OTUzNDZlYTRhZGUxYWJhODdiOTg0M2IxNmQ3MWM0ZmU0MGMxMjI4YTNjY2U3IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IitsajZaTkZtNVFHVzFNYmRrd0VkclE9PSIsInZhbHVlIjoickp5Z0FiYnU0aGNsbnhMSVB4cHl2SVVETGNFeGw5QTdjYjF0WnlxMnpRZk5Hanc0bkp1QXJ2ZUJmZlRqNFcrY2hHaWxhcVpLQUs3V1UzeXE2QkI5VHFGRFpFeHJ0VjhoUjBzcnliZkNxSkwwQm9Qc2E2V0ZLcklxb0oxR3FubFEiLCJtYWMiOiJmNDZmOGI0Y2FhMzFiMDMwNGFkODIyNmIwNDcwMjIyY2M1ZTIwNzkwNWYwYTVlMjQwZTdkYzYxNDgyNzJmZDUxIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 21 Nov 2023 07:44:07 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 01 Nov 2023 20:01:40 GMT\r\netag: W/\"168df-6091cbd4f670c\"\r\naccess-control-allow-origin: *\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: DENY\r\ncontent-security-policy: frame-ancestors 'none'\r\ncache-control: max-age=14400\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=n3s6bRiRSHhD44pJUZg932HwcF3eu5knC4QBZHUIrUiWZ8uSqOGzJvVW5wXfexX2yEx8d3yiRraQHYCIC%2BnKxo0lZzzSMrji7ksvyjuoSd1P41j1aD6jSIqZlbOoUVaDRHkdWlaJ\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\ncf-ray: 82974e36b92e56be-OSL\r\ncontent-encoding: br\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":92383,"size_decoded":0,"mime_type":"application/javascript","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-20T16:56:15.989935Z","times_seen":15496273,"resource_available":true,"data":null}},"time_used":1577,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1577,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.socket.io/4.6.0/socket.io.min.js","fqdn":"cdn.socket.io","domain":"socket.io","tld":"io"},"ip":{"addr":"143.204.55.40","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://osnrafbtea.oneswittla.ru/kswqjl/#alberto@elzaburu.es","date":"2023-11-21T07:44:01.748Z","timestamp":1700552641748,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.socket.io","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M03","organization":"Amazon"},"validity":{"start":"Sun, 22 Oct 2023 00:00:00 GMT","end":"Sun, 17 Nov 2024 23:59:59 GMT"},"fingerprint":{"sha1":"BB:7D:4E:26:70:F6:06:2A:12:E9:92:A8:F1:9F:CD:82:0B:BF:48:ED","sha256":"C6:1C:9F:99:92:94:22:B4:CA:16:AD:70:73:8C:CF:16:98:BB:6F:5E:9B:8A:EE:32:C3:D5:13:F3:CF:69:F4:51"}}},"request":{"raw":"GET /4.6.0/socket.io.min.js HTTP/1.1\r\nHost: cdn.socket.io\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://osnrafbtea.oneswittla.ru/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-disposition: inline; filename=\"socket.io.min.js\"\r\ncontent-encoding: gzip\r\ndate: Fri, 27 Oct 2023 10:49:06 GMT\r\netag: W/\"80f5b8c6a9eeac15de93e5a112036a06\"\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: fra1::bqgb5-1698403746025-0e8d119dc2bf\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 e49f22f18c16784c0f42291e768d1daa.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-C1\r\nx-amz-cf-id: iHKNu1b9dEtoGuRxnusPVSDCT9BqtqwNzul05OOz2V1zQ-BIXvXaXg==\r\nage: 2538361\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":45806,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (45667)","md5":"80f5b8c6a9eeac15de93e5a112036a06","sha1":"f7174635137d37581b11937fc90e9cb325077bce","sha256":"0401de33701f1cad16ecf952899d23990b6437d0a5b7335524edf6bdfb932542","sha512":"b976a5f02202439d94c6817d037c813fa1945c6bb93762284d97ff61718c5b833402f372562034663a467fdbaa46990de24cb1e356392340e64d034e4ba1b4e4","ssdeep":"384:1ZS0CCnasl8gRR/PoPez+iCMN0Fkiw2Jh4RWdRGhAjbp2ChPL8cYRGv5MRUK6np9:/CCnVl7tUkBxkdRGOfDiY5C5MAn5GY2","tlshash":"1423a488f2a1b06187e37165443f110ba27a746964c9c18cf639d9f19eb8ece7123f79","first_seen":"2023-04-05T03:09:50Z","last_seen":"2026-05-20T10:24:40.220607Z","times_seen":39679,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":8,"dns":2,"connect":1,"send":0,"wait":2,"receive":0,"ssl":10},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}