Report - tracker.club-os.com/campaign/click?msgId=&test=true&target=https://coastalbodies.com.au/new/auth/x8k281/Ymtpbm5leUBub3J0aGJyaWRnZW1hc3Mub3Jn

Report Overview

Visited public
2023-10-03 14:02:02
Tags
phishing microsoft outlook
URL
tracker.club-os.com/campaign/click?msgId=&test=true&target=https://coastalbodies.com.au/new/auth/x8k281/Ymtpbm5leUBub3J0aGJyaWRnZW1hc3Mub3Jn
Finishing URL
lajg05z8w9s48y1.glfbreak.ru/updonp4w44n#bkinney@northbridgemass.org
IP / ASN
44.205.176.146
#14618 AMAZON-AES
Title
Sign in to your Microsoft account
Phishing - Microsoft Outlook

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
ocsp.r2m02.amazontrust.com	unknown	2007-05-11	2022-10-12 16:01:39	2023-10-02 21:02:57	680 B	1.9 kB	143.204.48.16
tracker.club-os.com	870552	2011-01-10	2014-02-20 17:57:15	2023-10-03 05:10:25	596 B	237 B	18.211.55.231
challenges.cloudflare.com	unknown	2009-02-17	2021-10-20 07:02:03	2023-10-02 18:15:59	2.9 kB	133 kB	104.17.3.184
httpbin.org	352975	2011-06-12	2013-07-23 00:01:27	2023-10-02 08:00:01	488 B	288 B	34.236.85.82
code.jquery.com	634	2005-12-10	2012-05-21 19:28:02	2023-10-02 21:21:18	425 B	90 kB	151.101.2.137
coastalbodies.com.au	unknown	unknown	2014-10-28 08:38:52	2023-09-21 20:26:29	529 B	464 B	203.98.95.166
lajg05z8w9s48y1.glfbreak.ru	unknown	2023-09-07	2023-09-16 14:11:04	2023-10-03 13:22:11	27 kB	1.2 MB	172.67.196.133
aadcdn.msftauth.net	1455	2018-10-25	2018-11-19 11:50:32	2023-10-03 05:17:16	1.5 kB	6.2 kB	152.199.23.37
logincdn.msauth.net	2330	2018-10-25	2019-04-23 03:13:28	2023-10-02 18:33:06	511 B	992 B	192.229.221.185
adfs.heart.org	unknown	1995-01-12	2016-10-10 20:42:57	2023-10-03 05:17:16	449 B	6.9 kB	69.152.183.140

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (12)

	URL	From	Size	First Seen	Last Seen
	lajg05z8w9s48y1.glfbreak.ru/myscr185725.js	ScriptElement	26 kB	2023-10-03	2023-10-13
Pretty URL lajg05z8w9s48y1.glfbreak.ru/myscr185725.js IP 172.67.196.133 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-10-03 15:31 Last Seen2023-10-13 18:05 Times Seen168 Hash 975c7c1a745d565c7671a1e9234fc029 b1a3d79ccc0729e0c259bb89449c22ad08e83dc9 7c4703d839cb0682cb1bb7f38b1390c5f65c2ec3950b685b39363d0f6ae5b0c6 Loading...

	code.jquery.com/jquery-3.6.0.min.js	ScriptElement	90 kB	2023-03-07	2025-05-11
Pretty URL code.jquery.com/jquery-3.6.0.min.js IP 151.101.2.137 ASN #54113 FASTLY Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:02 Last Seen2025-05-11 20:38 Times Seen205911 Hash 8fb8fee4fcc3cc86ff6c724154c49c42 b82d238d4e31fdf618bae8ac11a6c812c03dd0d4 ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e Loading...

	challenges.cloudflare.com/turnstile/v0/api.js?render=explicit	ScriptElement	34 kB	2023-09-22	2023-11-27
Pretty URL challenges.cloudflare.com/turnstile/v0/api.js?render=explicit IP 104.17.3.184 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-09-22 02:43 Last Seen2023-11-27 19:36 Times Seen13990 Hash cc3e43876d80dbb4f1bff1e8b15a9c60 3b43cbd347df372f7c1daf463b1229e4a8849195 06d063d7e58bade3ae244489087afa82f9f7c59276cdd7dcfbb2a9b5b600c5da Loading...

	unknown	ScriptElement	320 B	2023-10-03	2024-08-21
Pretty Introduced by scriptElement Embedded in HTML false Observations First Seen2023-10-03 15:31 Last Seen2024-08-21 05:18 Times Seen168 Hash 6993c6e4f808f875af2c6f79c6c510f3 7193fe706a9b568d6ab39ec5fd9ae4e2e3cc35ad 564b3063df9c7f8ec600b09749ab9464cdaca6e050666b7e83ea8c80852432a6 Loading...

	lajg05z8w9s48y1.glfbreak.ru/web1/assets/js/pages-head-top-web.min.js?cb=1696341706733	ScriptElement	2.2 kB	2023-09-28	2023-10-20
Pretty URL lajg05z8w9s48y1.glfbreak.ru/web1/assets/js/pages-head-top-web.min.js?cb=1696341706733 IP 172.67.196.133 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-09-28 13:43 Last Seen2023-10-20 16:08 Times Seen619 Hash e42b0b9254061811676a22578e4d055d fd459de096e2b18300811fd1f8fda9019497ea31 dc271387f5db4616829bfa389052d86f8b6a04ac2059cca774c434535a66f9e5 Loading...

	lajg05z8w9s48y1.glfbreak.ru/web1/assets/js/pages-head-web.min.js?cb=1696341707400	ScriptElement	10 kB	2023-09-27	2023-10-14
Pretty URL lajg05z8w9s48y1.glfbreak.ru/web1/assets/js/pages-head-web.min.js?cb=1696341707400 IP 172.67.196.133 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-09-27 21:30 Last Seen2023-10-14 14:45 Times Seen2812 Hash 91ca724283fd63e0366176adac255a3c 1657c9af872393e385b399d72471dd7c8b476d03 8e7b8fe78eb8a61b0d77628fe1a02c9569fcd0ef4c44ee1b1d06069b8a2787e7 Loading...

	lajg05z8w9s48y1.glfbreak.ru/web1/assets/js/pages.js?cb=1696341707400	ScriptElement	81 kB	2023-09-27	2024-08-21
Pretty URL lajg05z8w9s48y1.glfbreak.ru/web1/assets/js/pages.js?cb=1696341707400 IP 172.67.196.133 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-09-27 21:42 Last Seen2024-08-21 05:39 Times Seen3172 Hash 218f006287340a5c13cc18e43123292c e29a4767c1731f4f3ec266abe1ce800a48605894 72a12d7ce5530539f1f3d2b6865bc856d9b8853871ea165beec2acbd92e71ab6 Loading...

		Size	First Seen	Last Seen
	#1 Eval - 9e925e9341b490bfd3b4c4ca3b0c1ef2	4 B	2023-03-07 01:03	2025-05-11 20:20
Pretty Observations First Seen2023-03-07 01:03 Last Seen2025-05-11 20:20 Times Seen369113 Hash 9e925e9341b490bfd3b4c4ca3b0c1ef2 c2543fff3bfa6f144c2f06a7de6cd10c0b650cae 1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408 Loading...

	#2 Eval - 6e53b6fc2cc555ca7f42003001f6db89	144 B	2023-09-22 02:34	2024-08-21 06:07
Pretty Observations First Seen2023-09-22 02:34 Last Seen2024-08-21 06:07 Times Seen7111 Hash 6e53b6fc2cc555ca7f42003001f6db89 bd7cad7207e1ec91648ae1fb6e932aa96b5bdf73 148122c10b23eddadc73ec6e866a0072677e63c5f5068d3377355b4bdde8f865 Loading...

		Size	First Seen	Last Seen
	#1 Write - a32daf90fd984fc8698dbd11e3b4605e	4.5 kB	2023-10-03 15:31	2024-08-21 05:18
Pretty Observations First Seen2023-10-03 15:31 Last Seen2024-08-21 05:18 Times Seen168 Hash a32daf90fd984fc8698dbd11e3b4605e 00cdbad909fe4b1df6d3b407417bc6e6f1a83f94 fc91f601015f6fa2e1a56a1d4a79bc02b1a85c0bfbe8dc62a013d0fa588d1385 Loading...

	#2 Write - 086707e4369f60afedcafb16050a7618	39 B	2023-03-07 01:03	2025-05-11 20:31
Pretty Observations First Seen2023-03-07 01:03 Last Seen2025-05-11 20:31 Times Seen57835 Hash 086707e4369f60afedcafb16050a7618 8216b0cc6876cbd44f01c158e7dff3833ceccd41 a7fe83ec64bb23eb28090598db3d166ed98e52e39d1afbbfd74c579553f93e4e Loading...

	#3 Write - adfb1bc5b6ba91ec5ab5c54ddc225a7a	3.6 kB	2023-09-22 02:30	2024-08-21 06:07
Pretty Observations First Seen2023-09-22 02:30 Last Seen2024-08-21 06:07 Times Seen41377 Hash adfb1bc5b6ba91ec5ab5c54ddc225a7a 16d4d2247f8f343811417dce829fe7595e73995c ca2d1c64f76c12b39444ddb57fb6a2def9521e9d0d29df80eb309ac34ed23b80 Loading...

HTTP Transactions (48)

URL IP Response Size

ocsp.r2m02.amazontrust.com/

143.204.48.16

471 B

URL
ocsp.r2m02.amazontrust.com/
IP
143.204.48.16:0
ASN
#16509 AMAZON-02

File type
data
Size
471 B (471 bytes)
Hash
623f3305858c8414306dabbb45a90931
0e6d9965066eef6f38873e7fb81bd6ccd863820c
034ca23944f599ab3262bcfd72b89742d374e5ddcacda57e2d5245c619ae28a7

HTTP Headers

POST / HTTP/1.1
Host: ocsp.r2m02.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=7200
Date: Tue, 03 Oct 2023 14:01:43 GMT
Last-Modified: Tue, 03 Oct 2023 12:59:16 GMT
Server: ECAcc (ska/F749)
X-Cache: Miss from cloudfront
Via: 1.1 76c917e0bb0ba45eb834d25d76ee125e.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: Dltupk1HHyrQeHEgwrl4AIWg0NlfzJB_t1gO43qUOlVdMebOOdjbAw==
Age: 3748

tracker.club-os.com/campaign/click?msgId=&test=true&target=https://coastalbodies.com.au/new/auth/x8k281/Ymtpbm5leUBub3J0aGJyaWRnZW1hc3Mub3Jn

18.211.55.231

0 B

URL
tracker.club-os.com/campaign/click?msgId=&test=true&target=https://coastalbodies.com.au/new/auth/x8k281/Ymtpbm5leUBub3J0aGJyaWRnZW1hc3Mub3Jn
IP
18.211.55.231:0
ASN
#14618 AMAZON-AES

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /campaign/click?msgId=&test=true&target=https://coastalbodies.com.au/new/auth/x8k281/Ymtpbm5leUBub3J0aGJyaWRnZW1hc3Mub3Jn HTTP/1.1
Host: tracker.club-os.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 303 See Other
date: Tue, 03 Oct 2023 14:01:43 GMT
content-length: 0
location: https://coastalbodies.com.au/new/auth/x8k281/Ymtpbm5leUBub3J0aGJyaWRnZW1hc3Mub3Jn
server: Apache/2.4.57 () OpenSSL/1.0.2k-fips
X-Firefox-Spdy: h2

coastalbodies.com.au/new/auth/x8k281/Ymtpbm5leUBub3J0aGJyaWRnZW1hc3Mub3Jn

203.98.95.166

0 B

URL
coastalbodies.com.au/new/auth/x8k281/Ymtpbm5leUBub3J0aGJyaWRnZW1hc3Mub3Jn
IP
203.98.95.166:0
ASN
#55803 Hostopia Australia Web Pty Ltd

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Microsoft Outlook

HTTP Headers

GET /new/auth/x8k281/Ymtpbm5leUBub3J0aGJyaWRnZW1hc3Mub3Jn HTTP/1.1
Host: coastalbodies.com.au
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
x-powered-by: PHP/7.4.33
refresh: 0;url=https://lajg05z8w9s48y1.glfbreak.ru/updonp4w44n#bkinney@northbridgemass.org
content-type: text/html; charset=UTF-8
content-length: 0
date: Tue, 03 Oct 2023 14:01:45 GMT
server: LiteSpeed
vary: User-Agent
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2

lajg05z8w9s48y1.glfbreak.ru/myscr185725.js

172.67.196.133

200 OK

38 kB

URL GET HTTP/3
lajg05z8w9s48y1.glfbreak.ru/myscr185725.js
IP
172.67.196.133:443
ASN
#13335 CLOUDFLARENET

Requested by
https://lajg05z8w9s48y1.glfbreak.ru/updonp4w44n#bkinney@northbridgemass.org
Certificate
IssuerGoogle Trust Services LLC
Subject*.glfbreak.ru
FingerprintFE:09:67:09:64:85:14:9F:26:37:8F:9A:B6:BA:D0:EC:CA:3B:8D:C8
ValidityThu, 07 Sep 2023 12:26:20 GMT - Wed, 06 Dec 2023 12:26:19 GMT

File type
ASCII text
Size
38 kB (38281 bytes)
Hash
975c7c1a745d565c7671a1e9234fc029
b1a3d79ccc0729e0c259bb89449c22ad08e83dc9
7c4703d839cb0682cb1bb7f38b1390c5f65c2ec3950b685b39363d0f6ae5b0c6

HTTP Headers

GET /myscr185725.js HTTP/1.1
Host: lajg05z8w9s48y1.glfbreak.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lajg05z8w9s48y1.glfbreak.ru/updonp4w44n
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Tue, 03 Oct 2023 14:01:45 GMT
content-type: application/javascript
last-modified: Tue, 03 Oct 2023 12:02:01 GMT
cache-control: max-age=14400
cf-cache-status: HIT
age: 7031
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ly3Ll3LfhrlEU9Y8eD2LNs%2Fumt5wWJ%2FFCLJF4i1%2FuMqT4uO8XHHbJFad1SXC1gRl%2FXRD4eVKLttZ57sL0LHAuHBAZpVXoYlpSGi5cZLXS6L1CFNq%2FHQGsoKfHeR6LhE0LsnLDSwrYRouib63Oh4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8105b80e28c5569f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

challenges.cloudflare.com/turnstile/v0/g/dffb14d6/api.js?render=explicit

104.17.3.184

200 OK

40 kB

URL GET HTTP/2
challenges.cloudflare.com/turnstile/v0/g/dffb14d6/api.js?render=explicit
IP
104.17.3.184:443
ASN
#13335 CLOUDFLARENET

Requested by
https://lajg05z8w9s48y1.glfbreak.ru/updonp4w44n#bkinney@northbridgemass.org
Certificate
IssuerCloudflare, Inc.
Subjectchallenges.cloudflare.com
Fingerprint5F:E4:AA:8C:2E:24:D2:B1:69:9D:13:28:31:5C:65:FA:97:2A:E9:6E
ValidityFri, 18 Aug 2023 00:00:00 GMT - Sat, 17 Aug 2024 23:59:59 GMT

File type
ASCII text, with very long lines (33998)
Size
40 kB (39456 bytes)
Hash
cc3e43876d80dbb4f1bff1e8b15a9c60
3b43cbd347df372f7c1daf463b1229e4a8849195
06d063d7e58bade3ae244489087afa82f9f7c59276cdd7dcfbb2a9b5b600c5da

HTTP Headers

GET /turnstile/v0/g/dffb14d6/api.js?render=explicit HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://lajg05z8w9s48y1.glfbreak.ru/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Tue, 03 Oct 2023 14:01:46 GMT
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
cache-control: max-age=31536000
vary: Accept-Encoding
server: cloudflare
cf-ray: 8105b80f4b995694-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

lajg05z8w9s48y1.glfbreak.ru/web1/assets/fonts/GDSherpa-bold.woff

172.67.196.133

200 OK

36 kB

URL GET HTTP/3
lajg05z8w9s48y1.glfbreak.ru/web1/assets/fonts/GDSherpa-bold.woff
IP
172.67.196.133:443
ASN
#13335 CLOUDFLARENET

Requested by
https://lajg05z8w9s48y1.glfbreak.ru/updonp4w44n#bkinney@northbridgemass.org
Certificate
IssuerGoogle Trust Services LLC
Subject*.glfbreak.ru
FingerprintFE:09:67:09:64:85:14:9F:26:37:8F:9A:B6:BA:D0:EC:CA:3B:8D:C8
ValidityThu, 07 Sep 2023 12:26:20 GMT - Wed, 06 Dec 2023 12:26:19 GMT

File type
Web Open Font Format, TrueType, length 35970, version 1.0\012- data
Size
36 kB (35970 bytes)
Hash
496b7bbde91c7dc7cf9bbabbb3921da8
2bd3c406a715ab52dad84c803c55bf4a6e66a924
ae40a04f95df12b0c364f26ab691dc0c391d394a28bcdb4aeacfaca325d0a798

HTTP Headers

GET /web1/assets/fonts/GDSherpa-bold.woff HTTP/1.1
Host: lajg05z8w9s48y1.glfbreak.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://lajg05z8w9s48y1.glfbreak.ru/updonp4w44n
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Tue, 03 Oct 2023 14:01:47 GMT
content-type: font/woff
content-length: 35970
last-modified: Fri, 25 Aug 2023 04:00:22 GMT
etag: "8c82-603b7623b006b"
access-control-allow-origin: *
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
cache-control: max-age=14400
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Aqud7ZSDgDZUj70LX6nqUjs6Mtucr2Lht2vF39aYA66oRvkeV5JxK1WL%2BdD5F1S61%2Bm3zwNpkcRod1%2FrkYlYctOupt6S25nUnN0v69h%2FUtysZRzApK%2B8pQHlRnHaHybBUZ01djA%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
cf-cache-status: HIT
age: 7032
accept-ranges: bytes
server: cloudflare
cf-ray: 8105b814e896569f-OSL

lajg05z8w9s48y1.glfbreak.ru/web1/assets/fonts/GDSherpa-regular.woff2

172.67.196.133

200 OK

29 kB

URL GET HTTP/3
lajg05z8w9s48y1.glfbreak.ru/web1/assets/fonts/GDSherpa-regular.woff2
IP
172.67.196.133:443
ASN
#13335 CLOUDFLARENET

Requested by
https://lajg05z8w9s48y1.glfbreak.ru/updonp4w44n#bkinney@northbridgemass.org
Certificate
IssuerGoogle Trust Services LLC
Subject*.glfbreak.ru
FingerprintFE:09:67:09:64:85:14:9F:26:37:8F:9A:B6:BA:D0:EC:CA:3B:8D:C8
ValidityThu, 07 Sep 2023 12:26:20 GMT - Wed, 06 Dec 2023 12:26:19 GMT

File type
Web Open Font Format (Version 2), TrueType, length 28584, version 1.66\012- data
Size
29 kB (28584 bytes)
Hash
17081510f3a6f2f619ec8c6f244523c7
87f34b2a1532c50f2a424c345d03fe028db35635
2c7292014e2ef00374aeb63691d9f23159a010455784ee0b274ba7db2bcca956

HTTP Headers

GET /web1/assets/fonts/GDSherpa-regular.woff2 HTTP/1.1
Host: lajg05z8w9s48y1.glfbreak.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://lajg05z8w9s48y1.glfbreak.ru/updonp4w44n
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Tue, 03 Oct 2023 14:01:47 GMT
content-type: font/woff2
content-length: 28584
last-modified: Fri, 25 Aug 2023 04:00:25 GMT
etag: "6fa8-603b76269b664"
access-control-allow-origin: *
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
cache-control: max-age=14400
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=3Q8bKhrpG1HIMxY2EUCVH%2BAqedq2K5eSAKIRUO1t8P2eb1wLzKjNKTnf2z9gkhaowJmaPcDPGvBgHbrCm7YBs6oBnDV8uGzp7HnnHJNrpgZVuZVMiTEqSf9Q71W2d2O5dCC0KN8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
cf-cache-status: HIT
age: 7032
accept-ranges: bytes
server: cloudflare
cf-ray: 8105b814f897569f-OSL

lajg05z8w9s48y1.glfbreak.ru/web1/assets/fonts/GDSherpa-regular.woff

172.67.196.133

200 OK

37 kB

URL GET HTTP/3
lajg05z8w9s48y1.glfbreak.ru/web1/assets/fonts/GDSherpa-regular.woff
IP
172.67.196.133:443
ASN
#13335 CLOUDFLARENET

Requested by
https://lajg05z8w9s48y1.glfbreak.ru/updonp4w44n#bkinney@northbridgemass.org
Certificate
IssuerGoogle Trust Services LLC
Subject*.glfbreak.ru
FingerprintFE:09:67:09:64:85:14:9F:26:37:8F:9A:B6:BA:D0:EC:CA:3B:8D:C8
ValidityThu, 07 Sep 2023 12:26:20 GMT - Wed, 06 Dec 2023 12:26:19 GMT

File type
Web Open Font Format, TrueType, length 36696, version 1.0\012- data
Size
37 kB (36696 bytes)
Hash
a69e9ab8afdd7486ec0749c551051ff2
c34e6aa327b536fb48d1fe03577a47c7ee2231b8
fd78a1913db912221b8ead1e62fad47d1ff0a9fa6cd88d3b128a721ad91d2faf

HTTP Headers

GET /web1/assets/fonts/GDSherpa-regular.woff HTTP/1.1
Host: lajg05z8w9s48y1.glfbreak.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://lajg05z8w9s48y1.glfbreak.ru/updonp4w44n
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Tue, 03 Oct 2023 14:01:47 GMT
content-type: font/woff
content-length: 36696
last-modified: Fri, 25 Aug 2023 04:00:28 GMT
etag: "8f58-603b762947b93"
access-control-allow-origin: *
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
cache-control: max-age=14400
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Pp6xVfoJlsEqshLesgjORMBhGZ2a0mu6YbwMZfONbjmTpN3BLWOLRpEjSMNj25cd50LmpaVIvaKU8wr0147iU24BtL7VHCdL%2FnIJ%2FA7dEnNc6rnynclUq6gjnUeGgjTY%2BskwWOU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
cf-cache-status: HIT
age: 7031
accept-ranges: bytes
server: cloudflare
cf-ray: 8105b814f8a4569f-OSL

lajg05z8w9s48y1.glfbreak.ru/web1/assets/fonts/GDSherpa-vf.woff2

172.67.196.133

200 OK

44 kB

URL GET HTTP/3
lajg05z8w9s48y1.glfbreak.ru/web1/assets/fonts/GDSherpa-vf.woff2
IP
172.67.196.133:443
ASN
#13335 CLOUDFLARENET

Requested by
https://lajg05z8w9s48y1.glfbreak.ru/updonp4w44n#bkinney@northbridgemass.org
Certificate
IssuerGoogle Trust Services LLC
Subject*.glfbreak.ru
FingerprintFE:09:67:09:64:85:14:9F:26:37:8F:9A:B6:BA:D0:EC:CA:3B:8D:C8
ValidityThu, 07 Sep 2023 12:26:20 GMT - Wed, 06 Dec 2023 12:26:19 GMT

File type
Web Open Font Format (Version 2), TrueType, length 43596, version 1.0\012- data
Size
44 kB (43596 bytes)
Hash
2a05e9e5572abc320b2b7ea38a70dcc1
d5fa2a856d5632c2469e42436159375117ef3c35
3efcb941aaddaf4aea08dab3fb97d3e904aa1b83264e64b4d5bda53bc7c798ec

HTTP Headers

GET /web1/assets/fonts/GDSherpa-vf.woff2 HTTP/1.1
Host: lajg05z8w9s48y1.glfbreak.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://lajg05z8w9s48y1.glfbreak.ru/updonp4w44n
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Tue, 03 Oct 2023 14:01:47 GMT
content-type: font/woff2
content-length: 43596
last-modified: Fri, 25 Aug 2023 04:00:36 GMT
etag: "aa4c-603b7631474f7"
access-control-allow-origin: *
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
cache-control: max-age=14400
age: 7032
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=GvKc0mAYuC4JWIqRAl2dfquxxD9nTAx0e7LfUKB3fYouFAoxrOEb4SBiGMyF%2BbugPBB9nPp2LN4J2yoYXsLtjBtgMqilyIrAFkSxYaZoaJeAWbOj7nIe9a00hSmlmKuc2BDLwM0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
cf-cache-status: HIT
accept-ranges: bytes
server: cloudflare
cf-ray: 8105b81518d3569f-OSL

lajg05z8w9s48y1.glfbreak.ru/web1/assets/fonts/GDSherpa-vf2.woff2

172.67.196.133

200 OK

93 kB

URL GET HTTP/3
lajg05z8w9s48y1.glfbreak.ru/web1/assets/fonts/GDSherpa-vf2.woff2
IP
172.67.196.133:443
ASN
#13335 CLOUDFLARENET

Requested by
https://lajg05z8w9s48y1.glfbreak.ru/updonp4w44n#bkinney@northbridgemass.org
Certificate
IssuerGoogle Trust Services LLC
Subject*.glfbreak.ru
FingerprintFE:09:67:09:64:85:14:9F:26:37:8F:9A:B6:BA:D0:EC:CA:3B:8D:C8
ValidityThu, 07 Sep 2023 12:26:20 GMT - Wed, 06 Dec 2023 12:26:19 GMT

File type
Web Open Font Format (Version 2), TrueType, length 93276, version 1.0\012- data
Size
93 kB (93276 bytes)
Hash
bcd7983ea5aa57c55f6758b4977983cb
ef3a009e205229e07fb0ec8569e669b11c378ef1
6528a0bf9a836a53dfd8536e1786ba6831c9d1faa74967126fddf5b2081b858c

HTTP Headers

GET /web1/assets/fonts/GDSherpa-vf2.woff2 HTTP/1.1
Host: lajg05z8w9s48y1.glfbreak.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://lajg05z8w9s48y1.glfbreak.ru/updonp4w44n
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Tue, 03 Oct 2023 14:01:47 GMT
content-type: font/woff2
content-length: 93276
last-modified: Fri, 25 Aug 2023 04:00:32 GMT
etag: "16c5c-603b762dd727e"
access-control-allow-origin: *
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
cache-control: max-age=14400
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=BFH1pUblvA7qUJOWpXoXc9h0F5YfM0JUh5IHU5Oyy6P3qGalgztOhCaSEWCYuYJQNkyqUWnfmx3jk23Js5lDImZ1De0BwUHWvxR4ptm3LUdOi1FdiJXlwH6h8M%2FyeABLWCiraH0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
cf-cache-status: HIT
age: 7032
accept-ranges: bytes
server: cloudflare
cf-ray: 8105b81518d5569f-OSL

lajg05z8w9s48y1.glfbreak.ru/web1/assets/css/pages-okta.css?cb=1696341707400

172.67.196.133

200 OK

0 B

URL GET HTTP/3
lajg05z8w9s48y1.glfbreak.ru/web1/assets/css/pages-okta.css?cb=1696341707400
IP
172.67.196.133:443
ASN
#13335 CLOUDFLARENET

Requested by
https://lajg05z8w9s48y1.glfbreak.ru/updonp4w44n#bkinney@northbridgemass.org
Certificate
IssuerGoogle Trust Services LLC
Subject*.glfbreak.ru
FingerprintFE:09:67:09:64:85:14:9F:26:37:8F:9A:B6:BA:D0:EC:CA:3B:8D:C8
ValidityThu, 07 Sep 2023 12:26:20 GMT - Wed, 06 Dec 2023 12:26:19 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /web1/assets/css/pages-okta.css?cb=1696341707400 HTTP/1.1
Host: lajg05z8w9s48y1.glfbreak.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lajg05z8w9s48y1.glfbreak.ru/updonp4w44n
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Tue, 03 Oct 2023 14:01:47 GMT
content-type: text/css
content-length: 0
last-modified: Thu, 24 Aug 2023 12:07:13 GMT
etag: "0-603aa11867866"
access-control-allow-origin: *
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
cache-control: max-age=14400
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Eriban8OtZ9oZnOylngovK4JJODa1VicS1Oj0VBDdr6dGV0hDuqSE6e0bpLmBeFoF713dJDjXFXOZJASWsZEceLxLQniQUACuOCk3NcADL3OevUrLv0iZDZneLUP2EIK5oXYS7Q%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
cf-cache-status: MISS
accept-ranges: bytes
server: cloudflare
cf-ray: 8105b814c860569f-OSL

lajg05z8w9s48y1.glfbreak.ru/web1/assets/back.png

172.67.196.133

200 OK

231 B

URL GET HTTP/3
lajg05z8w9s48y1.glfbreak.ru/web1/assets/back.png
IP
172.67.196.133:443
ASN
#13335 CLOUDFLARENET

Requested by
https://lajg05z8w9s48y1.glfbreak.ru/updonp4w44n#bkinney@northbridgemass.org
Certificate
IssuerGoogle Trust Services LLC
Subject*.glfbreak.ru
FingerprintFE:09:67:09:64:85:14:9F:26:37:8F:9A:B6:BA:D0:EC:CA:3B:8D:C8
ValidityThu, 07 Sep 2023 12:26:20 GMT - Wed, 06 Dec 2023 12:26:19 GMT

File type
PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced\012- data
Size
231 B (231 bytes)
Hash
547988bac5584b4608466d761e16f370
c11bb71049702528402a31027f200184910a7e23
70e32b2db3f079bb0295a85a0db15ed9e5926294dd947938d6cfa595f5ab18b4

HTTP Headers

GET /web1/assets/back.png HTTP/1.1
Host: lajg05z8w9s48y1.glfbreak.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lajg05z8w9s48y1.glfbreak.ru/updonp4w44n
Cookie: XSRF-TOKEN=eyJpdiI6IkJ5ZUZZalpXUUF5QTFTeFprN3d2eVE9PSIsInZhbHVlIjoiWE43S3FWSzZESzNYVG1NS21IMlN0WUJBOGlPQUpaam5WcWwrRkVhcU9LaUc2aWVHZWFxb0J3dW5ndG94MVFCNWIwN3hsRXZuQlR1cnhkY01tYW82aXE0K0tDNGhKbFJrcXdnYXhmTmtPWTA5SGlPYkcyZy91YUtVU01jY0JPNU4iLCJtYWMiOiI0NjhiZmNkMDZkZTI2YjI2YjU0YzMzYjQ1NmNmOTlkN2E3YTlkOWYzNjk1YTJlZmU4NTQzYThmZDlmMGUyZDlmIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImtyZXk3NDlqRTE2T2NSMHFzRHoxYmc9PSIsInZhbHVlIjoiakN3RU14UE5Dem5Nc3kyOGVpeFpwMGkrSHNTcUxQNnJydVBqMURDdkRnTXBIZFB6V1l5bXFKQXorOVFWU1JNOWs3ZFJhZitPWjM0aUFJSUNLMytBU3ZrMXZSa0NiU2FQS2plNUk1SmtRa0lWUy9nUXZLeFJOUGNNaTdGRExzeEkiLCJtYWMiOiJhYTJmOTFmOGUwNzUwNzAwMWYyYmIyN2RiYTI4NTg1NTg3ODY2YTMxNTY3MTc2YmI2YWUxNGRjNWZjMGEyODcyIiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Tue, 03 Oct 2023 14:01:53 GMT
content-type: image/png
content-length: 231
last-modified: Sun, 19 Mar 2023 15:20:17 GMT
etag: "e7-5f7425905ae40"
access-control-allow-origin: *
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
cache-control: max-age=14400
age: 7031
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=lyndZhP32IBeFNQFxtkRE3ItbNj9009xT%2FGxL9jrhC%2BNBI04CozvOtUUNniUOiOKdysO8R8%2F4wGc1ldgSELTD8%2FLwMy2drGCdoWXrUEHpjPXshws49ZJ8As2wl3s3jCklcH0oSc%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
cf-cache-status: HIT
accept-ranges: bytes
server: cloudflare
cf-ray: 8105b83b5d72569f-OSL

lajg05z8w9s48y1.glfbreak.ru/web1/assets/key.png

172.67.196.133

200 OK

727 B

URL GET HTTP/3
lajg05z8w9s48y1.glfbreak.ru/web1/assets/key.png
IP
172.67.196.133:443
ASN
#13335 CLOUDFLARENET

Requested by
https://lajg05z8w9s48y1.glfbreak.ru/updonp4w44n#bkinney@northbridgemass.org
Certificate
IssuerGoogle Trust Services LLC
Subject*.glfbreak.ru
FingerprintFE:09:67:09:64:85:14:9F:26:37:8F:9A:B6:BA:D0:EC:CA:3B:8D:C8
ValidityThu, 07 Sep 2023 12:26:20 GMT - Wed, 06 Dec 2023 12:26:19 GMT

File type
PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced\012- data
Size
727 B (727 bytes)
Hash
839cb0f55c3d2d5c2f740bda95cb2878
93f6fa3a2da8b7184d4b5c5f2065872793370c2e
40ecb8832f6a9a8aaa0cc6e1287e867a4fca38433d091d86c6cab1f28fbab652

HTTP Headers

GET /web1/assets/key.png HTTP/1.1
Host: lajg05z8w9s48y1.glfbreak.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lajg05z8w9s48y1.glfbreak.ru/updonp4w44n
Cookie: XSRF-TOKEN=eyJpdiI6IkJ5ZUZZalpXUUF5QTFTeFprN3d2eVE9PSIsInZhbHVlIjoiWE43S3FWSzZESzNYVG1NS21IMlN0WUJBOGlPQUpaam5WcWwrRkVhcU9LaUc2aWVHZWFxb0J3dW5ndG94MVFCNWIwN3hsRXZuQlR1cnhkY01tYW82aXE0K0tDNGhKbFJrcXdnYXhmTmtPWTA5SGlPYkcyZy91YUtVU01jY0JPNU4iLCJtYWMiOiI0NjhiZmNkMDZkZTI2YjI2YjU0YzMzYjQ1NmNmOTlkN2E3YTlkOWYzNjk1YTJlZmU4NTQzYThmZDlmMGUyZDlmIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImtyZXk3NDlqRTE2T2NSMHFzRHoxYmc9PSIsInZhbHVlIjoiakN3RU14UE5Dem5Nc3kyOGVpeFpwMGkrSHNTcUxQNnJydVBqMURDdkRnTXBIZFB6V1l5bXFKQXorOVFWU1JNOWs3ZFJhZitPWjM0aUFJSUNLMytBU3ZrMXZSa0NiU2FQS2plNUk1SmtRa0lWUy9nUXZLeFJOUGNNaTdGRExzeEkiLCJtYWMiOiJhYTJmOTFmOGUwNzUwNzAwMWYyYmIyN2RiYTI4NTg1NTg3ODY2YTMxNTY3MTc2YmI2YWUxNGRjNWZjMGEyODcyIiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Tue, 03 Oct 2023 14:01:53 GMT
content-type: image/png
content-length: 727
last-modified: Sun, 19 Mar 2023 15:20:17 GMT
etag: "2d7-5f7425905ae40"
access-control-allow-origin: *
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
cache-control: max-age=14400
age: 7031
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=8HVwpREOSgBURCubT8EM1LSpsDw3oHBBDwY7pawxapqtGZWR8fsGoYXZUNTUatInmjpLycBSO5cDyE%2FyWJzZmMEqQ5C0rT89l7kRfslhpOAXCeftehCzJl6M6vpCYXWeTVC72Kc%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
cf-cache-status: HIT
accept-ranges: bytes
server: cloudflare
cf-ray: 8105b83b6d7c569f-OSL

lajg05z8w9s48y1.glfbreak.ru/web1/validatecaptcha

172.67.196.133

200 OK

55 kB

URL POST HTTP/3
lajg05z8w9s48y1.glfbreak.ru/web1/validatecaptcha
IP
172.67.196.133:443
ASN
#13335 CLOUDFLARENET

Requested by
https://lajg05z8w9s48y1.glfbreak.ru/updonp4w44n#bkinney@northbridgemass.org
Certificate
IssuerGoogle Trust Services LLC
Subject*.glfbreak.ru
FingerprintFE:09:67:09:64:85:14:9F:26:37:8F:9A:B6:BA:D0:EC:CA:3B:8D:C8
ValidityThu, 07 Sep 2023 12:26:20 GMT - Wed, 06 Dec 2023 12:26:19 GMT

File type
JSON data\012- , ASCII text, with no line terminators
Size
55 kB (55339 bytes)
Hash
5820854f62a6eb3d38ba7ba0d1b3ea75
639df0b84fe699b4a290a713fd6b9a94bd4deb95
912d0c07da7bdb22cdae025b96da26d01523aaab7362edb28544e3949deb369d

HTTP Headers

POST /web1/validatecaptcha HTTP/1.1
Host: lajg05z8w9s48y1.glfbreak.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 567
Origin: https://lajg05z8w9s48y1.glfbreak.ru
DNT: 1
Connection: keep-alive
Referer: https://lajg05z8w9s48y1.glfbreak.ru/updonp4w44n
Cookie: XSRF-TOKEN=eyJpdiI6Ikp2Y3NtbDFGdlpaMXNxSlY3aUQvQlE9PSIsInZhbHVlIjoiZzYyZFQrZ1dwcGwzeDR1aUw3dVQxc0FLcDJJTUZOcitaRmkwZUdTNUNYZTEwb21GeFNySkNtWVg2cHhrT3BrWkorRFMzZ3BoTUxheXllV0g5YkhIYnErL1R1N0lSZ1lGcmlkRzFtUm5QZjMvc05maDVXV0UycEJWK1hZOW5UanEiLCJtYWMiOiIxNTFhYjA4ZDUxM2I0NjEzNDFhMjY1MDA5MzljMmMxOTBhNDYzN2RlZDViZjI0NDI1MGFlM2E2Y2Y2MDU1MzczIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkRZRXJ6Y0prT0lNYXR6R2pFbnNKbEE9PSIsInZhbHVlIjoiOVN6dlpSV2pMbUtNVDVmOXEvaXROeFJTTng0U09HRDVYQVpaVkpjL0VVZE5kaFVxMnpwN2RlYlE4QS9Kb2lyUnBnb01GTGlPYmtEMWh4bmNkbmdLM2djU29ldHd2dEVpeVEvazNqeVgxSG8xSmxTMDE3N2IzbnZuQnZvYWpTU2ciLCJtYWMiOiIyY2RmNzY4MmQ3NjE1NDI1NGU4ZGM3M2QyNjBmODY4ZmQ0MTFmNTRiMjNmNTRjZDE5OTNlNzcxMGYzN2ZjOTk3IiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Tue, 03 Oct 2023 14:01:52 GMT
content-type: application/json
x-powered-by: PHP/8.1.10
cache-control: no-cache, private
access-control-allow-origin: *
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=LsofyDclk7aTsirumRgBZHt5DmI8majiSayJEe98rI9Mhrc8GnQznB0NVnhlgRyLhX83AbYhbwzixWzuXEJ0Q%2FTdsPIaax9GnZhTwNYb8mTSNhnnq41fOGrlFtsRC2K40t%2FXGj8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
set-cookie: XSRF-TOKEN=eyJpdiI6IndFTFYwNmpGRXFRSGFYSjVKdGFkalE9PSIsInZhbHVlIjoiTldnbDNyU1NYUFNRTWp1akFKd1MxU3BxcXB5alUwdjllYnJLcUlMV0xoZVROV3VLVVFieWZvTFFsTTJxMk5tbkRGNjR1YjJLeFZyZkg4VGpjaUQ5K1F1aU1rOVE0WThiNjNqZ24wRmlETUpzZEJyNFA1VUlzSGtIdms4RTJlOHIiLCJtYWMiOiI5OTBkYmMwMDcyMDg1MzcxN2U2YzE2YWVkNTJlMGVjY2ExZTJlMzJiMjlhMDgyNmIwZjQ3YmQyY2IxNWQxNzg4IiwidGFnIjoiIn0%3D; expires=Tue, 03-Oct-2023 16:01:52 GMT; Max-Age=7200; path=/; samesite=lax
laravel_session=eyJpdiI6Imd2KzgweEhWYmFTL2FkSU9ROFpBM0E9PSIsInZhbHVlIjoiSkUrV1BydVMwdG9BNFVYQmViU0xnY2JmSEo2MlVWdUN6V1UramRIclE2QTBMeGJFdVZvWjNvUEFLM1VoNU5LYXhwb2xtQkROalFGYjVBbERVdmdhVkRoeGlmMzFsaDBQZWYxY20yRFRUNkdFYlVHNUxIQ0J2MGJIa3Rtc0ZvWWEiLCJtYWMiOiI4OGVhMWJkNWYzMDk2NTQzOTU3YTk3OTg0M2NiNDdjYjIyMDNiNDRhZDYyZGFkNDdiM2UyMWVhYThjNTYzYzk2IiwidGFnIjoiIn0%3D; expires=Tue, 03-Oct-2023 16:01:52 GMT; Max-Age=7200; path=/; httponly; samesite=lax
server: cloudflare
cf-ray: 8105b82fc8c1569f-OSL
content-encoding: br

lajg05z8w9s48y1.glfbreak.ru/web1/assets/godaddy-left.png

172.67.196.133

200 OK

30 kB

URL GET HTTP/3
lajg05z8w9s48y1.glfbreak.ru/web1/assets/godaddy-left.png
IP
172.67.196.133:443
ASN
#13335 CLOUDFLARENET

Requested by
https://lajg05z8w9s48y1.glfbreak.ru/updonp4w44n#bkinney@northbridgemass.org
Certificate
IssuerGoogle Trust Services LLC
Subject*.glfbreak.ru
FingerprintFE:09:67:09:64:85:14:9F:26:37:8F:9A:B6:BA:D0:EC:CA:3B:8D:C8
ValidityThu, 07 Sep 2023 12:26:20 GMT - Wed, 06 Dec 2023 12:26:19 GMT

File type
PNG image data, 506 x 303, 8-bit/color RGBA, non-interlaced\012- data
Size
30 kB (29796 bytes)
Hash
210433a8774859368f3a7b86d125a2a7
408bacddc39f12cad285579c102fe4a629862d88
9c6addfc339ce1c1d262290ab4cc2de8d38d4b54b11a8e85afd44fbb0acc2561

HTTP Headers

GET /web1/assets/godaddy-left.png HTTP/1.1
Host: lajg05z8w9s48y1.glfbreak.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lajg05z8w9s48y1.glfbreak.ru/updonp4w44n
Cookie: XSRF-TOKEN=eyJpdiI6IkJ5ZUZZalpXUUF5QTFTeFprN3d2eVE9PSIsInZhbHVlIjoiWE43S3FWSzZESzNYVG1NS21IMlN0WUJBOGlPQUpaam5WcWwrRkVhcU9LaUc2aWVHZWFxb0J3dW5ndG94MVFCNWIwN3hsRXZuQlR1cnhkY01tYW82aXE0K0tDNGhKbFJrcXdnYXhmTmtPWTA5SGlPYkcyZy91YUtVU01jY0JPNU4iLCJtYWMiOiI0NjhiZmNkMDZkZTI2YjI2YjU0YzMzYjQ1NmNmOTlkN2E3YTlkOWYzNjk1YTJlZmU4NTQzYThmZDlmMGUyZDlmIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImtyZXk3NDlqRTE2T2NSMHFzRHoxYmc9PSIsInZhbHVlIjoiakN3RU14UE5Dem5Nc3kyOGVpeFpwMGkrSHNTcUxQNnJydVBqMURDdkRnTXBIZFB6V1l5bXFKQXorOVFWU1JNOWs3ZFJhZitPWjM0aUFJSUNLMytBU3ZrMXZSa0NiU2FQS2plNUk1SmtRa0lWUy9nUXZLeFJOUGNNaTdGRExzeEkiLCJtYWMiOiJhYTJmOTFmOGUwNzUwNzAwMWYyYmIyN2RiYTI4NTg1NTg3ODY2YTMxNTY3MTc2YmI2YWUxNGRjNWZjMGEyODcyIiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Tue, 03 Oct 2023 14:01:53 GMT
content-type: image/png
content-length: 29796
last-modified: Thu, 24 Aug 2023 14:10:07 GMT
etag: "7464-603abc9079d32"
access-control-allow-origin: *
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
cache-control: max-age=14400
age: 7031
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=VLd%2FdBcfafSUL5UCnQjH%2Ff0SsbPD4aUFkl8Y0OS1q0hR8obJjw01ZqNrZqQoYywL7SkgYakQeE4LOkFgyVRWOF6BpBaZjEW%2BX3AKel7XLo6QhxbQg0kcBuDdd0smhx10H%2FdcCMk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
cf-cache-status: HIT
accept-ranges: bytes
server: cloudflare
cf-ray: 8105b83b6d88569f-OSL

challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/i/8105b81d38b456c0/1696341708857/5QMXLxkV2CyJz9c

104.17.3.184

30 kB

URL
challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/i/8105b81d38b456c0/1696341708857/5QMXLxkV2CyJz9c
IP
104.17.3.184:0
ASN
#13335 CLOUDFLARENET

Certificate
IssuerCloudflare, Inc.
Subjectchallenges.cloudflare.com
Fingerprint5F:E4:AA:8C:2E:24:D2:B1:69:9D:13:28:31:5C:65:FA:97:2A:E9:6E
ValidityFri, 18 Aug 2023 00:00:00 GMT - Sat, 17 Aug 2024 23:59:59 GMT

File type
PNG image data, 38 x 93, 8-bit/color RGB, non-interlaced\012- data
Size
30 kB (29460 bytes)
Hash
2d88e5675860a203feae1f0f31cd6240
fb93528fd5241bc86826960cb4c2d1dc4c6503a8
5bcf7baa88c19a4f35244ac08413a68251a4d3b2ccd8e92dce94eba33959f02e

HTTP Headers

GET /cdn-cgi/challenge-platform/h/g/i/8105b81d38b456c0/1696341708857/5QMXLxkV2CyJz9c HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/2oxc8/0x4AAAAAAAJ1zx-MJxCL7z8m/auto/normal
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Tue, 03 Oct 2023 14:01:50 GMT
content-type: image/png
server: cloudflare
cf-ray: 8105b828dc2456c0-OSL
alt-svc: h3=":443"; ma=86400

lajg05z8w9s48y1.glfbreak.ru/web1/assets/godaddy-microsoftlogo.png

172.67.196.133

200 OK

71 kB

URL GET HTTP/3
lajg05z8w9s48y1.glfbreak.ru/web1/assets/godaddy-microsoftlogo.png
IP
172.67.196.133:443
ASN
#13335 CLOUDFLARENET

Requested by
https://lajg05z8w9s48y1.glfbreak.ru/updonp4w44n#bkinney@northbridgemass.org
Certificate
IssuerGoogle Trust Services LLC
Subject*.glfbreak.ru
FingerprintFE:09:67:09:64:85:14:9F:26:37:8F:9A:B6:BA:D0:EC:CA:3B:8D:C8
ValidityThu, 07 Sep 2023 12:26:20 GMT - Wed, 06 Dec 2023 12:26:19 GMT

File type
PNG image data, 2446 x 899, 8-bit/color RGBA, non-interlaced\012- data
Size
71 kB (70712 bytes)
Hash
f70ff06d19498d80b130ec78176fd3ff
9d8a3b74c5164ff7ae2c7930b6d7b14707b404fc
df6dbab5251e56b405e48aaf57d3cd4188f073ffba71131fa6cd26e6742923ae

HTTP Headers

GET /web1/assets/godaddy-microsoftlogo.png HTTP/1.1
Host: lajg05z8w9s48y1.glfbreak.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lajg05z8w9s48y1.glfbreak.ru/updonp4w44n
Cookie: XSRF-TOKEN=eyJpdiI6IkJ5ZUZZalpXUUF5QTFTeFprN3d2eVE9PSIsInZhbHVlIjoiWE43S3FWSzZESzNYVG1NS21IMlN0WUJBOGlPQUpaam5WcWwrRkVhcU9LaUc2aWVHZWFxb0J3dW5ndG94MVFCNWIwN3hsRXZuQlR1cnhkY01tYW82aXE0K0tDNGhKbFJrcXdnYXhmTmtPWTA5SGlPYkcyZy91YUtVU01jY0JPNU4iLCJtYWMiOiI0NjhiZmNkMDZkZTI2YjI2YjU0YzMzYjQ1NmNmOTlkN2E3YTlkOWYzNjk1YTJlZmU4NTQzYThmZDlmMGUyZDlmIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImtyZXk3NDlqRTE2T2NSMHFzRHoxYmc9PSIsInZhbHVlIjoiakN3RU14UE5Dem5Nc3kyOGVpeFpwMGkrSHNTcUxQNnJydVBqMURDdkRnTXBIZFB6V1l5bXFKQXorOVFWU1JNOWs3ZFJhZitPWjM0aUFJSUNLMytBU3ZrMXZSa0NiU2FQS2plNUk1SmtRa0lWUy9nUXZLeFJOUGNNaTdGRExzeEkiLCJtYWMiOiJhYTJmOTFmOGUwNzUwNzAwMWYyYmIyN2RiYTI4NTg1NTg3ODY2YTMxNTY3MTc2YmI2YWUxNGRjNWZjMGEyODcyIiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Tue, 03 Oct 2023 14:01:53 GMT
content-type: image/png
content-length: 70712
last-modified: Thu, 24 Aug 2023 12:58:17 GMT
etag: "11438-603aac821e121"
access-control-allow-origin: *
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
cache-control: max-age=14400
age: 7031
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=UsxF10MJq%2FMaCnfqM9lQkTgFe0NMNpHw%2F1YRH49Yi52ZbwyfBPMAFBcqOkg91ax56LNoi7AZFTYvNfaukyVL9FDBNUfbIUDyGfk%2FVpFboqQrN66XfD7YfwsrCb5aoGyTqmJT3Tk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
cf-cache-status: HIT
accept-ranges: bytes
server: cloudflare
cf-ray: 8105b83bcde1569f-OSL

lajg05z8w9s48y1.glfbreak.ru/web1/assets/365background.png

172.67.196.133

200 OK

326 kB

URL GET HTTP/3
lajg05z8w9s48y1.glfbreak.ru/web1/assets/365background.png
IP
172.67.196.133:443
ASN
#13335 CLOUDFLARENET

Requested by
https://lajg05z8w9s48y1.glfbreak.ru/updonp4w44n#bkinney@northbridgemass.org
Certificate
IssuerGoogle Trust Services LLC
Subject*.glfbreak.ru
FingerprintFE:09:67:09:64:85:14:9F:26:37:8F:9A:B6:BA:D0:EC:CA:3B:8D:C8
ValidityThu, 07 Sep 2023 12:26:20 GMT - Wed, 06 Dec 2023 12:26:19 GMT

File type
PNG image data, 914 x 469, 8-bit/color RGBA, non-interlaced\012- data
Size
326 kB (326065 bytes)
Hash
0b882e24f250e42375a5688107b17241
f27d6076ee98c5df3e7c77a241fa7585f05aea6b
5b32845a56e326ae3ea16d90d2142d7e43e990a356eabe8990f4af921488efa9

HTTP Headers

GET /web1/assets/365background.png HTTP/1.1
Host: lajg05z8w9s48y1.glfbreak.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lajg05z8w9s48y1.glfbreak.ru/web1/assets/pages/ul8ez297rtg.css?cb=1696341707400
Cookie: XSRF-TOKEN=eyJpdiI6IkJ5ZUZZalpXUUF5QTFTeFprN3d2eVE9PSIsInZhbHVlIjoiWE43S3FWSzZESzNYVG1NS21IMlN0WUJBOGlPQUpaam5WcWwrRkVhcU9LaUc2aWVHZWFxb0J3dW5ndG94MVFCNWIwN3hsRXZuQlR1cnhkY01tYW82aXE0K0tDNGhKbFJrcXdnYXhmTmtPWTA5SGlPYkcyZy91YUtVU01jY0JPNU4iLCJtYWMiOiI0NjhiZmNkMDZkZTI2YjI2YjU0YzMzYjQ1NmNmOTlkN2E3YTlkOWYzNjk1YTJlZmU4NTQzYThmZDlmMGUyZDlmIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImtyZXk3NDlqRTE2T2NSMHFzRHoxYmc9PSIsInZhbHVlIjoiakN3RU14UE5Dem5Nc3kyOGVpeFpwMGkrSHNTcUxQNnJydVBqMURDdkRnTXBIZFB6V1l5bXFKQXorOVFWU1JNOWs3ZFJhZitPWjM0aUFJSUNLMytBU3ZrMXZSa0NiU2FQS2plNUk1SmtRa0lWUy9nUXZLeFJOUGNNaTdGRExzeEkiLCJtYWMiOiJhYTJmOTFmOGUwNzUwNzAwMWYyYmIyN2RiYTI4NTg1NTg3ODY2YTMxNTY3MTc2YmI2YWUxNGRjNWZjMGEyODcyIiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Tue, 03 Oct 2023 14:01:53 GMT
content-type: image/png
content-length: 326065
last-modified: Tue, 08 Aug 2023 13:37:54 GMT
etag: "4f9b1-60269785e9266"
access-control-allow-origin: *
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
cache-control: max-age=14400
age: 4614
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Qi8Y223IDtKuvVWx3ZJ%2BtDtKQ7Qtcc4agfz3fiZeESa3%2FX14HMqfp6z3l3qsDxGj3H64DmkdH39bvoA1wHMYbLQ89A8kSr0Ptz8MaLla%2BPnWAG1Ymi%2BqhHUn8BYQcrEnI4TK9eA%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
cf-cache-status: HIT
accept-ranges: bytes
server: cloudflare
cf-ray: 8105b83bcde3569f-OSL

aadcdn.msftauth.net/shared/1.0/content/images/picker_verify_call_c2616792e1950f83fdef6e72dab97293.svg

152.199.23.37

200 OK

1.2 kB

URL GET HTTP/2
aadcdn.msftauth.net/shared/1.0/content/images/picker_verify_call_c2616792e1950f83fdef6e72dab97293.svg
IP
152.199.23.37:443
ASN
#15133 EDGECAST

Requested by
https://lajg05z8w9s48y1.glfbreak.ru/updonp4w44n#bkinney@northbridgemass.org
Certificate
IssuerDigiCert Inc
Subjectaadcdn.msftauth.net
Fingerprint99:06:D8:1E:EC:BF:DB:78:DF:F4:89:A3:ED:23:07:3D:79:F1:16:D6
ValidityTue, 31 Jan 2023 00:00:00 GMT - Wed, 31 Jan 2024 23:59:59 GMT

File type
SVG Scalable Vector Graphics image\012- HTML document, ASCII text, with very long lines (2905), with no line terminators
Size
1.2 kB (1173 bytes)
Hash
fe87496cc7a44412f7893a72099c120a
a0c1458c08a815df63d3cb0406d60be6607ca699
55ce3b0ce5bc71339308107982cd7671f96014256ded0be36dc8062e64c847f1

HTTP Headers

GET /shared/1.0/content/images/picker_verify_call_c2616792e1950f83fdef6e72dab97293.svg HTTP/1.1
Host: aadcdn.msftauth.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lajg05z8w9s48y1.glfbreak.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-encoding: gzip
accept-ranges: bytes
access-control-allow-origin: *
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
age: 10173605
cache-control: public, max-age=31536000
content-md5: XHrPYKKsqlxUvysuxtSE2A==
content-type: image/svg+xml
date: Tue, 03 Oct 2023 14:01:53 GMT
etag: 0x8DB5C3F4A98E9BB
last-modified: Wed, 24 May 2023 10:11:50 GMT
server: ECAcc (ska/F6F3)
vary: Accept-Encoding
x-cache: HIT
x-ms-blob-type: BlockBlob
x-ms-lease-status: unlocked
x-ms-request-id: 3afb7c4b-e01e-0039-1e7a-99c6de000000
x-ms-version: 2009-09-19
content-length: 1173
X-Firefox-Spdy: h2

lajg05z8w9s48y1.glfbreak.ru/updonp4w44n

172.67.196.133

267 B

URL
lajg05z8w9s48y1.glfbreak.ru/updonp4w44n
IP
172.67.196.133:0
ASN
#13335 CLOUDFLARENET

Certificate
IssuerGoogle Trust Services LLC
Subject*.glfbreak.ru
FingerprintFE:09:67:09:64:85:14:9F:26:37:8F:9A:B6:BA:D0:EC:CA:3B:8D:C8
ValidityThu, 07 Sep 2023 12:26:20 GMT - Wed, 06 Dec 2023 12:26:19 GMT

File type
HTML document text\012- HTML document, ASCII text
Size
267 B (267 bytes)
Hash
b36797f85cf1cc9155d90a5cd3660a6c
e6e597713d4512a4b21068e1738594fb2becb35a
b58e747c6e303ad30de9fd0558f0464fc7a2d91e5502d883e4d71d1b43b272ce

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Microsoft Outlook

HTTP Headers

GET /updonp4w44n HTTP/1.1
Host: lajg05z8w9s48y1.glfbreak.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Tue, 03 Oct 2023 14:01:45 GMT
content-type: text/html; charset=UTF-8
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=MQ1zi70s2gyz1Z%2F2kuQb%2B6NtdpqoSSU4O6bpMv9bx3jw9R4YIeezNV%2BFksPDnd0e6KNDShpmSVfqQqJSTIdqyuRgVPthx5Z8nlHBtw6ItvcXNE1eTPnG4ih6dfBulqAc34Fuv%2Bgcoq5Fp51t8Ig%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8105b80bad6756be-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

aadcdn.msftauth.net/shared/1.0/content/images/picker_verify_fluent_authenticator_59892f1e05e3adf9fd2f71b42d92a27f.svg

152.199.23.37

200 OK

2.4 kB

URL GET HTTP/2
aadcdn.msftauth.net/shared/1.0/content/images/picker_verify_fluent_authenticator_59892f1e05e3adf9fd2f71b42d92a27f.svg
IP
152.199.23.37:443
ASN
#15133 EDGECAST

Requested by
https://lajg05z8w9s48y1.glfbreak.ru/updonp4w44n#bkinney@northbridgemass.org
Certificate
IssuerDigiCert Inc
Subjectaadcdn.msftauth.net
Fingerprint99:06:D8:1E:EC:BF:DB:78:DF:F4:89:A3:ED:23:07:3D:79:F1:16:D6
ValidityTue, 31 Jan 2023 00:00:00 GMT - Wed, 31 Jan 2024 23:59:59 GMT

File type
SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (4714), with CRLF line terminators
Size
2.4 kB (2407 bytes)
Hash
b59c16ca9bf156438a8a96d45e33db64
4e51b7d3477414b220f688adabd76d3ae6472ee3
a7ee799dd5b6f6dbb70b043b766362a6724e71458f9839306c995f06b218c2f8

HTTP Headers

GET /shared/1.0/content/images/picker_verify_fluent_authenticator_59892f1e05e3adf9fd2f71b42d92a27f.svg HTTP/1.1
Host: aadcdn.msftauth.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lajg05z8w9s48y1.glfbreak.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-encoding: gzip
accept-ranges: bytes
access-control-allow-origin: *
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
age: 10742410
cache-control: public, max-age=31536000
content-md5: nTculR1Fom7eLci0F6rk+A==
content-type: image/svg+xml
date: Tue, 03 Oct 2023 14:01:53 GMT
etag: 0x8DB5C3F4ADC079A
last-modified: Wed, 24 May 2023 10:11:51 GMT
server: ECAcc (ska/F7B6)
vary: Accept-Encoding
x-cache: HIT
x-ms-blob-type: BlockBlob
x-ms-lease-status: unlocked
x-ms-request-id: 9d35d246-701e-009b-604e-944da7000000
x-ms-version: 2009-09-19
content-length: 2407
X-Firefox-Spdy: h2

logincdn.msauth.net/shared/1.0/content/images/picker_verify_email_958962caa7cf6b75cd412e9e3b687b22.svg

192.229.221.185

200 OK

212 B

URL GET HTTP/2
logincdn.msauth.net/shared/1.0/content/images/picker_verify_email_958962caa7cf6b75cd412e9e3b687b22.svg
IP
192.229.221.185:443
ASN
#15133 EDGECAST

Requested by
https://lajg05z8w9s48y1.glfbreak.ru/updonp4w44n#bkinney@northbridgemass.org
Certificate
IssuerMicrosoft Corporation
Subjectidentitycdn.msauth.net
Fingerprint7E:49:E0:7F:53:0A:55:E1:C7:51:9E:26:2E:16:15:30:F1:F6:FB:0A
ValidityThu, 10 Aug 2023 19:09:28 GMT - Thu, 27 Jun 2024 23:59:59 GMT

File type
SVG Scalable Vector Graphics image\012- HTML document, ASCII text, with no line terminators
Size
212 B (212 bytes)
Hash
59759b80e24a89c8cd029b14700e646d
651b1921c99e143d3c242de3faacfb9ad51dbb53
b02b5df3ecd59d6cd90c60878683477532cbfc24660028657f290bdc7bc774b5

HTTP Headers

GET /shared/1.0/content/images/picker_verify_email_958962caa7cf6b75cd412e9e3b687b22.svg HTTP/1.1
Host: logincdn.msauth.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lajg05z8w9s48y1.glfbreak.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-encoding: gzip
accept-ranges: bytes
access-control-allow-origin: *
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
age: 10177139
cache-control: public, max-age=31536000
content-md5: pFQUXilUkzYtIbvSwGgVBQ==
content-type: image/svg+xml
date: Tue, 03 Oct 2023 14:01:53 GMT
etag: 0x8DB5C409F549E50
last-modified: Wed, 24 May 2023 10:21:22 GMT
server: ECAcc (ska/F7AD)
vary: Accept-Encoding
x-cache: HIT
x-ms-blob-type: BlockBlob
x-ms-lease-status: unlocked
x-ms-request-id: e6e3cc87-601e-0079-1c72-993a7c000000
x-ms-version: 2009-09-19
content-length: 212
X-Firefox-Spdy: h2

adfs.heart.org/adfs/portal/logo/logo.png

69.152.183.140

200 OK

6.4 kB

URL GET HTTP/1.1
adfs.heart.org/adfs/portal/logo/logo.png
IP
69.152.183.140:443
ASN
#7018 ATT-INTERNET4

Requested by
https://lajg05z8w9s48y1.glfbreak.ru/updonp4w44n#bkinney@northbridgemass.org
Certificate
IssuerSectigo Limited
Subjectadfs.heart.org
Fingerprint11:D1:74:EB:5A:DF:CB:58:DE:8A:EE:06:70:FD:78:6D:A5:F4:22:58
ValidityTue, 16 May 2023 00:00:00 GMT - Wed, 15 May 2024 23:59:59 GMT

File type
PNG image data, 260 x 32, 8-bit/color RGBA, non-interlaced\012- data
Size
6.4 kB (6428 bytes)
Hash
d3f69be16baf7acef2e7f4dd03729866
e11aa0084b93253a24dd3ed57ddde66d27c84d2b
3a5eeea11e1041db96b81498ab69c050dd045d9e56c69e19bd98430ba752165f

HTTP Headers

GET /adfs/portal/logo/logo.png HTTP/1.1
Host: adfs.heart.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lajg05z8w9s48y1.glfbreak.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Length: 6428
Content-Type: image/png
Expires: Thu, 02 Nov 2023 14:01:53 GMT
ETag: 3A5EEEA11E1041DB96B81498AB69C050DD045D9E56C69E19BD98430BA752165F
Server: Microsoft-HTTPAPI/2.0 Microsoft-HTTPAPI/2.0
Strict-Transport-Security: max-age = 31536000
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Content-Security-Policy: default-src 'self' 'unsafe-inline' 'unsafe-eval'; img-src 'self' data:;
Date: Tue, 03 Oct 2023 14:01:53 GMT

ocsp.r2m02.amazontrust.com/

143.204.48.16

471 B

URL
ocsp.r2m02.amazontrust.com/
IP
143.204.48.16:0
ASN
#16509 AMAZON-02

File type
data
Size
471 B (471 bytes)
Hash
a7ddb2db2f1de23f7a6fc64b19de2f61
5aefbc40e408a311a6797bdcc7d94d2e96fc8a45
4631ed72391d6480637d1d1dd7e02669ccf49a6a8e1e03e6a8191957daad81f3

HTTP Headers

POST / HTTP/1.1
Host: ocsp.r2m02.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=7200
Date: Tue, 03 Oct 2023 14:01:56 GMT
Last-Modified: Tue, 03 Oct 2023 12:20:25 GMT
Server: ECAcc (ska/F6A0)
X-Cache: Miss from cloudfront
Via: 1.1 76c917e0bb0ba45eb834d25d76ee125e.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: SOX5xy3z_5mPe0ydvaVug0YjWKtty3ZFdr_clkcQADmmDyvJwZJQ6w==
Age: 6091

challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/pat/8105b81d38b456c0/1696341708856/5ece5dc3530e2455295bf5755d885982cf0791c134568f1817044f69dcc28c62/9Mne27Sw2QSpVXc

104.17.3.184

32 B

URL
challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/pat/8105b81d38b456c0/1696341708856/5ece5dc3530e2455295bf5755d885982cf0791c134568f1817044f69dcc28c62/9Mne27Sw2QSpVXc
IP
104.17.3.184:0
ASN
#13335 CLOUDFLARENET

Certificate
IssuerCloudflare, Inc.
Subjectchallenges.cloudflare.com
Fingerprint5F:E4:AA:8C:2E:24:D2:B1:69:9D:13:28:31:5C:65:FA:97:2A:E9:6E
ValidityFri, 18 Aug 2023 00:00:00 GMT - Sat, 17 Aug 2024 23:59:59 GMT

File type
ASCII text
Size
32 B (32 bytes)
Hash
263989fec10cc4141f974a0d8a1bc25e
41ac0c4e26ba9a9548c497d367023821c66a7f86
aff927de3d5abaab3473f23901b9aa1e4ebee3a77a403c1655b658a4264428ae

HTTP Headers

GET /cdn-cgi/challenge-platform/h/g/pat/8105b81d38b456c0/1696341708856/5ece5dc3530e2455295bf5755d885982cf0791c134568f1817044f69dcc28c62/9Mne27Sw2QSpVXc HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/2oxc8/0x4AAAAAAAJ1zx-MJxCL7z8m/auto/normal
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 401 Unauthorized
date: Tue, 03 Oct 2023 14:01:49 GMT
content-type: text/plain; charset=UTF-8
www-authenticate: PrivateToken challenge=AAIAGXBhdC1pc3N1ZXIuY2xvdWRmbGFyZS5jb20gXs5dw1MOJFUpW_V1XYhZgs8HkcE0Vo8YFwRPadzCjGIAGWNoYWxsZW5nZXMuY2xvdWRmbGFyZS5jb20=, token-key=MIIBUjA9BgkqhkiG9w0BAQowMKANMAsGCWCGSAFlAwQCAqEaMBgGCSqGSIb3DQEBCDALBglghkgBZQMEAgKiAwIBMAOCAQ8AMIIBCgKCAQEAmwecnC9kG_Fj0JIwT3ZpvO_cMGClNgn70CbP_OAQtwOOEcI1r2Po8y80NqJxALuKmNWFbryz6_VdAlXOZboOVMLHCEbOy5q8d_6d0jdvr4gWOR2YS8ZTEnOkoT2a55wMVFQXjZEnncYNLIkkVvnJf6yMVipGTtubyCfc5cpfJd_D1ZgRw1IBDxoldOFSszBBZ4ZnflsRf89fe_8GxaiKG0TJLywsU6KjsU5o26MKfvTBAlpza3foWvE1uvJJ35QHhx3ypQQq1C4t0Px9W2E3TsW4ctYpIkmfm2ZZDRiMVSwZCR_gh44wnfOqUXvRHSKr1-YGAawfDrdFrPembkdRQQIDAQAB, max-age=20
server: cloudflare
cf-ray: 8105b826aa0656c0-OSL
alt-svc: h3=":443"; ma=86400

lajg05z8w9s48y1.glfbreak.ru/web1/assets/godaddy-logo.png

172.67.196.133

200 OK

50 kB

URL GET HTTP/3
lajg05z8w9s48y1.glfbreak.ru/web1/assets/godaddy-logo.png
IP
172.67.196.133:443
ASN
#13335 CLOUDFLARENET

Requested by
https://lajg05z8w9s48y1.glfbreak.ru/updonp4w44n#bkinney@northbridgemass.org
Certificate
IssuerGoogle Trust Services LLC
Subject*.glfbreak.ru
FingerprintFE:09:67:09:64:85:14:9F:26:37:8F:9A:B6:BA:D0:EC:CA:3B:8D:C8
ValidityThu, 07 Sep 2023 12:26:20 GMT - Wed, 06 Dec 2023 12:26:19 GMT

File type
PNG image data, 2160 x 443, 8-bit/color RGBA, non-interlaced\012- data
Size
50 kB (49602 bytes)
Hash
db783743cd246ff4d77f4a3694285989
b9466716904457641b7831868b47162d8d378d41
5913b1ec0fc58ab2bec576804b9e9b566a584ea3d21a1bf74a7b40051a447fdc

HTTP Headers

GET /web1/assets/godaddy-logo.png HTTP/1.1
Host: lajg05z8w9s48y1.glfbreak.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lajg05z8w9s48y1.glfbreak.ru/updonp4w44n
Cookie: XSRF-TOKEN=eyJpdiI6IkJ5ZUZZalpXUUF5QTFTeFprN3d2eVE9PSIsInZhbHVlIjoiWE43S3FWSzZESzNYVG1NS21IMlN0WUJBOGlPQUpaam5WcWwrRkVhcU9LaUc2aWVHZWFxb0J3dW5ndG94MVFCNWIwN3hsRXZuQlR1cnhkY01tYW82aXE0K0tDNGhKbFJrcXdnYXhmTmtPWTA5SGlPYkcyZy91YUtVU01jY0JPNU4iLCJtYWMiOiI0NjhiZmNkMDZkZTI2YjI2YjU0YzMzYjQ1NmNmOTlkN2E3YTlkOWYzNjk1YTJlZmU4NTQzYThmZDlmMGUyZDlmIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImtyZXk3NDlqRTE2T2NSMHFzRHoxYmc9PSIsInZhbHVlIjoiakN3RU14UE5Dem5Nc3kyOGVpeFpwMGkrSHNTcUxQNnJydVBqMURDdkRnTXBIZFB6V1l5bXFKQXorOVFWU1JNOWs3ZFJhZitPWjM0aUFJSUNLMytBU3ZrMXZSa0NiU2FQS2plNUk1SmtRa0lWUy9nUXZLeFJOUGNNaTdGRExzeEkiLCJtYWMiOiJhYTJmOTFmOGUwNzUwNzAwMWYyYmIyN2RiYTI4NTg1NTg3ODY2YTMxNTY3MTc2YmI2YWUxNGRjNWZjMGEyODcyIiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Tue, 03 Oct 2023 14:01:53 GMT
content-type: image/png
content-length: 49602
last-modified: Thu, 24 Aug 2023 13:40:53 GMT
etag: "c1c2-603ab607e0f57"
access-control-allow-origin: *
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
cache-control: max-age=14400
age: 7031
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=NKeGxaAmqVYSo7RfC4EPreW4S%2Bas1VlEEMBld2QPl5MrFnh1mKszPIBi%2BXa1T4x4afXUGyEhqwR6cltaw8qH7vR7tgxOgeB0SRBSKx%2BgZWmciKCSuqRpP0oCIiszJo6CuZBCF3o%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
cf-cache-status: HIT
accept-ranges: bytes
server: cloudflare
cf-ray: 8105b83b6d86569f-OSL

lajg05z8w9s48y1.glfbreak.ru/web1/assets/js/pages.js?cb=1696341707400

172.67.196.133

200 OK

81 kB

URL GET HTTP/3
lajg05z8w9s48y1.glfbreak.ru/web1/assets/js/pages.js?cb=1696341707400
IP
172.67.196.133:443
ASN
#13335 CLOUDFLARENET

Requested by
https://lajg05z8w9s48y1.glfbreak.ru/updonp4w44n#bkinney@northbridgemass.org
Certificate
IssuerGoogle Trust Services LLC
Subject*.glfbreak.ru
FingerprintFE:09:67:09:64:85:14:9F:26:37:8F:9A:B6:BA:D0:EC:CA:3B:8D:C8
ValidityThu, 07 Sep 2023 12:26:20 GMT - Wed, 06 Dec 2023 12:26:19 GMT

File type

Size
81 kB (80770 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /web1/assets/js/pages.js?cb=1696341707400 HTTP/1.1
Host: lajg05z8w9s48y1.glfbreak.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lajg05z8w9s48y1.glfbreak.ru/updonp4w44n
Cookie: XSRF-TOKEN=eyJpdiI6IkJ5ZUZZalpXUUF5QTFTeFprN3d2eVE9PSIsInZhbHVlIjoiWE43S3FWSzZESzNYVG1NS21IMlN0WUJBOGlPQUpaam5WcWwrRkVhcU9LaUc2aWVHZWFxb0J3dW5ndG94MVFCNWIwN3hsRXZuQlR1cnhkY01tYW82aXE0K0tDNGhKbFJrcXdnYXhmTmtPWTA5SGlPYkcyZy91YUtVU01jY0JPNU4iLCJtYWMiOiI0NjhiZmNkMDZkZTI2YjI2YjU0YzMzYjQ1NmNmOTlkN2E3YTlkOWYzNjk1YTJlZmU4NTQzYThmZDlmMGUyZDlmIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImtyZXk3NDlqRTE2T2NSMHFzRHoxYmc9PSIsInZhbHVlIjoiakN3RU14UE5Dem5Nc3kyOGVpeFpwMGkrSHNTcUxQNnJydVBqMURDdkRnTXBIZFB6V1l5bXFKQXorOVFWU1JNOWs3ZFJhZitPWjM0aUFJSUNLMytBU3ZrMXZSa0NiU2FQS2plNUk1SmtRa0lWUy9nUXZLeFJOUGNNaTdGRExzeEkiLCJtYWMiOiJhYTJmOTFmOGUwNzUwNzAwMWYyYmIyN2RiYTI4NTg1NTg3ODY2YTMxNTY3MTc2YmI2YWUxNGRjNWZjMGEyODcyIiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Tue, 03 Oct 2023 14:01:54 GMT
content-type: application/javascript
last-modified: Mon, 25 Sep 2023 20:22:34 GMT
etag: W/"13b82-60634b7f30722"
access-control-allow-origin: *
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
cache-control: max-age=14400
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=gVzmnHk5v3SFro4wy9aG5CW0PSCy6HRHjGZ77xfKp%2F1s5I4tzY1mWvVoXSwbH64pUC69iBQ3roceKnTrm4Z7NHF0SEnVudUTGG7Kp73pI9%2BB3EHahjH8W%2FCoi9fxhDc6%2FN2Tjns%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
cf-cache-status: MISS
server: cloudflare
cf-ray: 8105b83bcde2569f-OSL
content-encoding: br

httpbin.org/ip

34.236.85.82

200 OK

31 B

URL GET HTTP/2
httpbin.org/ip
IP
34.236.85.82:443
ASN
#14618 AMAZON-AES

Requested by
https://lajg05z8w9s48y1.glfbreak.ru/updonp4w44n#bkinney@northbridgemass.org
Certificate
IssuerAmazon
Subjecthttpbin.org
Fingerprint14:0C:C7:A8:EC:FA:7F:9C:9D:D2:B8:7E:C9:B8:93:3A:A1:11:F6:01
ValidityThu, 21 Sep 2023 00:00:00 GMT - Fri, 18 Oct 2024 23:59:59 GMT

File type
ASCII text, with no line terminators
Size
31 B (31 bytes)
Hash
b90b7b460267d7067015fd46f3cd1a1e
3c164e9136c246dffb5fb4ef3927dda99d880121
885fd87e71d0651d917c1483aaf061a95e9c52371afb3970abf85c50caa8dfbf

HTTP Headers

GET /ip HTTP/1.1
Host: httpbin.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://lajg05z8w9s48y1.glfbreak.ru
DNT: 1
Connection: keep-alive
Referer: https://lajg05z8w9s48y1.glfbreak.ru/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Tue, 03 Oct 2023 14:01:56 GMT
content-type: application/json
content-length: 31
server: gunicorn/19.9.0
access-control-allow-origin: https://lajg05z8w9s48y1.glfbreak.ru
access-control-allow-credentials: true
X-Firefox-Spdy: h2

lajg05z8w9s48y1.glfbreak.ru/web1/assets/css/pages.min.css?cb=1696341707400

172.67.196.133

200 OK

17 kB

URL GET HTTP/3
lajg05z8w9s48y1.glfbreak.ru/web1/assets/css/pages.min.css?cb=1696341707400
IP
172.67.196.133:443
ASN
#13335 CLOUDFLARENET

Requested by
https://lajg05z8w9s48y1.glfbreak.ru/updonp4w44n#bkinney@northbridgemass.org
Certificate
IssuerGoogle Trust Services LLC
Subject*.glfbreak.ru
FingerprintFE:09:67:09:64:85:14:9F:26:37:8F:9A:B6:BA:D0:EC:CA:3B:8D:C8
ValidityThu, 07 Sep 2023 12:26:20 GMT - Wed, 06 Dec 2023 12:26:19 GMT

File type
ASCII text, with very long lines (17002), with no line terminators
Size
17 kB (17002 bytes)
Hash
68dd1bcccde5656be56122a5370bbb98
18d1618561916e13668295570a157c32acd9e1f5
bd5a242e3cd9e703a92c7d2667e8f78a3ba2c97cbd04237665782034e4760ed3

HTTP Headers

GET /web1/assets/css/pages.min.css?cb=1696341707400 HTTP/1.1
Host: lajg05z8w9s48y1.glfbreak.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lajg05z8w9s48y1.glfbreak.ru/updonp4w44n
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Tue, 03 Oct 2023 14:01:47 GMT
content-type: text/css
last-modified: Thu, 21 Sep 2023 16:09:25 GMT
etag: W/"426a-605e0b73dd2ad"
access-control-allow-origin: *
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
cache-control: max-age=14400
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=kfIWNJGEAa43q9Rp%2B63BuprDm1A2Tt9ebhDpyM0XAUql1oFp4Ebmiji%2BpaSwR3kYgm%2B%2Bu%2FIF4EByQxOerWqN8rHvVUsC8w29KvScPdu2caYREJi%2FIyxJ7%2F%2FrtL9mQFUGgCMHt1o%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
cf-cache-status: MISS
server: cloudflare
cf-ray: 8105b814b840569f-OSL
content-encoding: br

lajg05z8w9s48y1.glfbreak.ru/web1/assets/cloudfavicon.ico

172.67.196.133

200 OK

34 kB

URL GET HTTP/3
lajg05z8w9s48y1.glfbreak.ru/web1/assets/cloudfavicon.ico
IP
172.67.196.133:443
ASN
#13335 CLOUDFLARENET

Requested by
https://lajg05z8w9s48y1.glfbreak.ru/updonp4w44n#bkinney@northbridgemass.org
Certificate
IssuerGoogle Trust Services LLC
Subject*.glfbreak.ru
FingerprintFE:09:67:09:64:85:14:9F:26:37:8F:9A:B6:BA:D0:EC:CA:3B:8D:C8
ValidityThu, 07 Sep 2023 12:26:20 GMT - Wed, 06 Dec 2023 12:26:19 GMT

File type
MS Windows icon resource - 5 icons, 16x16, 32 bits/pixel, 24x24, 32 bits/pixel\012- data
Size
34 kB (34494 bytes)
Hash
88415acda09a4cbd9d87543c3ba78180
2dec4705e9ab399efdc6eef36e079aa31d1df8d9
20cccc47c1bac9d2ef36b6a1c58af58c5c169ad5ca084080f0392b86f949641c

HTTP Headers

GET /web1/assets/cloudfavicon.ico HTTP/1.1
Host: lajg05z8w9s48y1.glfbreak.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lajg05z8w9s48y1.glfbreak.ru/updonp4w44n
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Tue, 03 Oct 2023 14:01:47 GMT
content-type: image/x-icon
last-modified: Wed, 16 Aug 2023 15:22:46 GMT
etag: W/"86be-6030bde212b57"
access-control-allow-origin: *
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
cache-control: max-age=14400
age: 7032
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=se%2B8k5qHoeNrPyhih9NUa55PkN7eFqBIY3sjaTIMAWpMyuwzzJm0CqvZLruiBKinGz9V4iMZ0%2BMn6j%2FcxspkIvQwblv21LatX5ia4MJExO9hfbbaXWkhYvTCZgf1j5bpHYtDApg%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
cf-cache-status: HIT
server: cloudflare
cf-ray: 8105b818ee5d569f-OSL
content-encoding: br

aadcdn.msftauth.net/shared/1.0/content/images/close_790189870c9543725dc3f5a15fb25e46.svg

152.199.23.37

200 OK

270 B

URL GET HTTP/2
aadcdn.msftauth.net/shared/1.0/content/images/close_790189870c9543725dc3f5a15fb25e46.svg
IP
152.199.23.37:443
ASN
#15133 EDGECAST

Requested by
https://lajg05z8w9s48y1.glfbreak.ru/updonp4w44n#bkinney@northbridgemass.org
Certificate
IssuerDigiCert Inc
Subjectaadcdn.msftauth.net
Fingerprint99:06:D8:1E:EC:BF:DB:78:DF:F4:89:A3:ED:23:07:3D:79:F1:16:D6
ValidityTue, 31 Jan 2023 00:00:00 GMT - Wed, 31 Jan 2024 23:59:59 GMT

File type
SVG Scalable Vector Graphics image\012- HTML document, ASCII text, with no line terminators
Size
270 B (270 bytes)
Hash
0c09c5ea7c28d6feb4d124957dde0a0d
1b9efde2d8f0e2a3d9d5315117e597c2d622fc5e
b3c39d2c15327b7ae68940502a2d7bf457fe521e075e6e671d0340edc58bcb3a

HTTP Headers

GET /shared/1.0/content/images/close_790189870c9543725dc3f5a15fb25e46.svg HTTP/1.1
Host: aadcdn.msftauth.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lajg05z8w9s48y1.glfbreak.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-encoding: gzip
accept-ranges: bytes
access-control-allow-origin: *
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
age: 10735946
cache-control: public, max-age=31536000
content-md5: rp+/fadJKxLUo+jgFmYTeQ==
content-type: image/svg+xml
date: Tue, 03 Oct 2023 14:01:53 GMT
etag: 0x8DB5C3F4721247A
last-modified: Wed, 24 May 2023 10:11:44 GMT
server: ECAcc (ska/F697)
vary: Accept-Encoding
x-cache: HIT
x-ms-blob-type: BlockBlob
x-ms-lease-status: unlocked
x-ms-request-id: cf4cbdca-101e-0042-0c5d-942f4a000000
x-ms-version: 2009-09-19
content-length: 190
X-Firefox-Spdy: h2

lajg05z8w9s48y1.glfbreak.ru/web1/assets/js/pages-head-top-web.min.js?cb=1696341706733

172.67.196.133

200 OK

2.2 kB

URL GET HTTP/3
lajg05z8w9s48y1.glfbreak.ru/web1/assets/js/pages-head-top-web.min.js?cb=1696341706733
IP
172.67.196.133:443
ASN
#13335 CLOUDFLARENET

Requested by
https://lajg05z8w9s48y1.glfbreak.ru/updonp4w44n#bkinney@northbridgemass.org
Certificate
IssuerGoogle Trust Services LLC
Subject*.glfbreak.ru
FingerprintFE:09:67:09:64:85:14:9F:26:37:8F:9A:B6:BA:D0:EC:CA:3B:8D:C8
ValidityThu, 07 Sep 2023 12:26:20 GMT - Wed, 06 Dec 2023 12:26:19 GMT

File type
ASCII text, with very long lines (2377), with no line terminators
Size
2.2 kB (2209 bytes)
Hash
0f2e26038b2d0d2114e7abc2290e680d
ddd6bcce2bfcebdd49a781316cb74f49c00da143
4f0ba78178d3349808ddb2fb8d4d775bd3914ac66557c8aeba189e7b49d72517

HTTP Headers

GET /web1/assets/js/pages-head-top-web.min.js?cb=1696341706733 HTTP/1.1
Host: lajg05z8w9s48y1.glfbreak.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lajg05z8w9s48y1.glfbreak.ru/updonp4w44n
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Tue, 03 Oct 2023 14:01:46 GMT
content-type: application/javascript
last-modified: Sat, 23 Sep 2023 01:00:14 GMT
etag: W/"8a1-605fc3f69c290"
access-control-allow-origin: *
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
cache-control: max-age=14400
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=yUUSId8IlQ5Q2OOrsqE6Zb40MGoB4Q7Oyx%2FwdvD00xALBztpmylicnppkJeuUnO3ExogCSTzuK874RudLjfcs9NxwmRZ3S4cECyLWP2ogaxOG9971dEbaho7fPCFpG7uxUIowtw%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
cf-cache-status: MISS
server: cloudflare
cf-ray: 8105b810bbba569f-OSL
content-encoding: br

lajg05z8w9s48y1.glfbreak.ru/web1/assets/cloudfavicon.ico

172.67.196.133

200 OK

34 kB

URL GET HTTP/3
lajg05z8w9s48y1.glfbreak.ru/web1/assets/cloudfavicon.ico
IP
172.67.196.133:443
ASN
#13335 CLOUDFLARENET

Requested by
https://lajg05z8w9s48y1.glfbreak.ru/updonp4w44n#bkinney@northbridgemass.org
Certificate
IssuerGoogle Trust Services LLC
Subject*.glfbreak.ru
FingerprintFE:09:67:09:64:85:14:9F:26:37:8F:9A:B6:BA:D0:EC:CA:3B:8D:C8
ValidityThu, 07 Sep 2023 12:26:20 GMT - Wed, 06 Dec 2023 12:26:19 GMT

File type
MS Windows icon resource - 5 icons, 16x16, 32 bits/pixel, 24x24, 32 bits/pixel\012- data
Size
34 kB (34494 bytes)
Hash
88415acda09a4cbd9d87543c3ba78180
2dec4705e9ab399efdc6eef36e079aa31d1df8d9
20cccc47c1bac9d2ef36b6a1c58af58c5c169ad5ca084080f0392b86f949641c

HTTP Headers

GET /web1/assets/cloudfavicon.ico HTTP/1.1
Host: lajg05z8w9s48y1.glfbreak.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lajg05z8w9s48y1.glfbreak.ru/updonp4w44n
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Tue, 03 Oct 2023 14:01:46 GMT
content-type: image/x-icon
last-modified: Wed, 16 Aug 2023 15:22:46 GMT
etag: W/"86be-6030bde212b57"
access-control-allow-origin: *
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
cache-control: max-age=14400
age: 7031
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=se%2B8k5qHoeNrPyhih9NUa55PkN7eFqBIY3sjaTIMAWpMyuwzzJm0CqvZLruiBKinGz9V4iMZ0%2BMn6j%2FcxspkIvQwblv21LatX5ia4MJExO9hfbbaXWkhYvTCZgf1j5bpHYtDApg%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
cf-cache-status: HIT
server: cloudflare
cf-ray: 8105b8123d1a569f-OSL
content-encoding: br

lajg05z8w9s48y1.glfbreak.ru/web1/assets/microsoftfavicon.ico

172.67.196.133

200 OK

17 kB

URL GET HTTP/3
lajg05z8w9s48y1.glfbreak.ru/web1/assets/microsoftfavicon.ico
IP
172.67.196.133:443
ASN
#13335 CLOUDFLARENET

Requested by
https://lajg05z8w9s48y1.glfbreak.ru/updonp4w44n#bkinney@northbridgemass.org
Certificate
IssuerGoogle Trust Services LLC
Subject*.glfbreak.ru
FingerprintFE:09:67:09:64:85:14:9F:26:37:8F:9A:B6:BA:D0:EC:CA:3B:8D:C8
ValidityThu, 07 Sep 2023 12:26:20 GMT - Wed, 06 Dec 2023 12:26:19 GMT

File type
MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors\012- data
Size
17 kB (17174 bytes)
Hash
12e3dac858061d088023b2bd48e2fa96
e08ce1a144eceae0c3c2ea7a9d6fbc5658f24ce5
90cdaf487716184e4034000935c605d1633926d348116d198f355a98b8c6cd21

HTTP Headers

GET /web1/assets/microsoftfavicon.ico HTTP/1.1
Host: lajg05z8w9s48y1.glfbreak.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lajg05z8w9s48y1.glfbreak.ru/updonp4w44n
Cookie: XSRF-TOKEN=eyJpdiI6IkJ5ZUZZalpXUUF5QTFTeFprN3d2eVE9PSIsInZhbHVlIjoiWE43S3FWSzZESzNYVG1NS21IMlN0WUJBOGlPQUpaam5WcWwrRkVhcU9LaUc2aWVHZWFxb0J3dW5ndG94MVFCNWIwN3hsRXZuQlR1cnhkY01tYW82aXE0K0tDNGhKbFJrcXdnYXhmTmtPWTA5SGlPYkcyZy91YUtVU01jY0JPNU4iLCJtYWMiOiI0NjhiZmNkMDZkZTI2YjI2YjU0YzMzYjQ1NmNmOTlkN2E3YTlkOWYzNjk1YTJlZmU4NTQzYThmZDlmMGUyZDlmIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImtyZXk3NDlqRTE2T2NSMHFzRHoxYmc9PSIsInZhbHVlIjoiakN3RU14UE5Dem5Nc3kyOGVpeFpwMGkrSHNTcUxQNnJydVBqMURDdkRnTXBIZFB6V1l5bXFKQXorOVFWU1JNOWs3ZFJhZitPWjM0aUFJSUNLMytBU3ZrMXZSa0NiU2FQS2plNUk1SmtRa0lWUy9nUXZLeFJOUGNNaTdGRExzeEkiLCJtYWMiOiJhYTJmOTFmOGUwNzUwNzAwMWYyYmIyN2RiYTI4NTg1NTg3ODY2YTMxNTY3MTc2YmI2YWUxNGRjNWZjMGEyODcyIiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Tue, 03 Oct 2023 14:01:54 GMT
content-type: image/x-icon
last-modified: Sun, 19 Mar 2023 15:20:17 GMT
etag: W/"4316-5f7425905ae40"
access-control-allow-origin: *
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
cache-control: max-age=14400
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=4cHtDc289pypqKEpdITXlRr9InozZIblA9d4oEs5YPKTh1qLN7TaNQAjGRHnC6kdkJYu801E45l26xagK9WAGzQie%2BpN73p5tJJYk9WSGbWn08Q4aKXkq6wpA5vJIDhXJ6uqbfk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
cf-cache-status: HIT
age: 7031
server: cloudflare
cf-ray: 8105b840cb03569f-OSL
content-encoding: br

lajg05z8w9s48y1.glfbreak.ru/web1/call

0.0.0.0

0 B

URL POST
lajg05z8w9s48y1.glfbreak.ru/web1/call
IP
0.0.0.0:0
ASN
#0

Requested by
https://lajg05z8w9s48y1.glfbreak.ru/updonp4w44n#bkinney@northbridgemass.org
Certificate
IssuerGoogle Trust Services LLC
Subject*.glfbreak.ru
FingerprintFE:09:67:09:64:85:14:9F:26:37:8F:9A:B6:BA:D0:EC:CA:3B:8D:C8
ValidityThu, 07 Sep 2023 12:26:20 GMT - Wed, 06 Dec 2023 12:26:19 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

POST /web1/call HTTP/1.1
Host: lajg05z8w9s48y1.glfbreak.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 113
Origin: https://lajg05z8w9s48y1.glfbreak.ru
DNT: 1
Connection: keep-alive
Referer: https://lajg05z8w9s48y1.glfbreak.ru/updonp4w44n
Cookie: XSRF-TOKEN=eyJpdiI6Imc1TFQvUnBRc2hUbDZ1Y0tLWWtVT1E9PSIsInZhbHVlIjoiaGhta1RmcjhiQitBanlYR09tUkJWVUtQVjdTZ1I1YXlIdmlCZjJBWjJrRkpJY2I2N3VWcEdmV0hobkFRQ1RYWS9kdWhhNHJhbjRQVVEzUVp0VnJnNVB1VDJ2Zk9iRUk0TXRWT2hEVEg1REhzek1CWkxGc2VTSjlrWXFtcCtZaUoiLCJtYWMiOiJkNzRjYjRmM2JjOTBhYTJhNjY5MzY0MDgwMTczYjU4OTBmMWFiMWNhNGYwODQ5MjhkODI4NTFhMTIyODM4MzRkIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImRCYnFzekxUNmU5Mnl0VEVGTU9aQkE9PSIsInZhbHVlIjoiS0Nrc0I3YzNrdnA5QURtN3BRR2cybENRTTFGQ3VWYTVoNEJEU0FoMFhFT3lXdElMbmtSakRBbUtyNUZ4SkdVcTBiWHJ0cXFCMmVVdENmamhBNnZEZVdLd1kwZ2JxK3FXK1gwQm5BQm9leHUyQWllZ2dtV29BTWhxWWxmZ3RRZk4iLCJtYWMiOiI1NDYzYWU4NDMyOTRjZjgzODZmOWI0N2RjY2EyZWZkZTgyZGIzMmU0MDgyMGI3MGM2MGRhYzdmM2Q0YzE2N2QxIiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

lajg05z8w9s48y1.glfbreak.ru/web1/assets/365logo.png

172.67.196.133

200 OK

29 kB

URL GET HTTP/3
lajg05z8w9s48y1.glfbreak.ru/web1/assets/365logo.png
IP
172.67.196.133:443
ASN
#13335 CLOUDFLARENET

Requested by
https://lajg05z8w9s48y1.glfbreak.ru/updonp4w44n#bkinney@northbridgemass.org
Certificate
IssuerGoogle Trust Services LLC
Subject*.glfbreak.ru
FingerprintFE:09:67:09:64:85:14:9F:26:37:8F:9A:B6:BA:D0:EC:CA:3B:8D:C8
ValidityThu, 07 Sep 2023 12:26:20 GMT - Wed, 06 Dec 2023 12:26:19 GMT

File type
PNG image data, 1172 x 264, 8-bit/color RGBA, non-interlaced\012- data
Size
29 kB (29399 bytes)
Hash
9e1e850547d90314a73ec1ff2cdf04a3
81b46404c8859f997da090a6b57dfb00ca539b83
f27766e5d5667af5eefb552aee52c24b59d19a5717a212de86c31bdcf47b1f37

HTTP Headers

GET /web1/assets/365logo.png HTTP/1.1
Host: lajg05z8w9s48y1.glfbreak.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lajg05z8w9s48y1.glfbreak.ru/web1/assets/pages/ul8ez297rtg.css?cb=1696341707400
Cookie: XSRF-TOKEN=eyJpdiI6IkJ5ZUZZalpXUUF5QTFTeFprN3d2eVE9PSIsInZhbHVlIjoiWE43S3FWSzZESzNYVG1NS21IMlN0WUJBOGlPQUpaam5WcWwrRkVhcU9LaUc2aWVHZWFxb0J3dW5ndG94MVFCNWIwN3hsRXZuQlR1cnhkY01tYW82aXE0K0tDNGhKbFJrcXdnYXhmTmtPWTA5SGlPYkcyZy91YUtVU01jY0JPNU4iLCJtYWMiOiI0NjhiZmNkMDZkZTI2YjI2YjU0YzMzYjQ1NmNmOTlkN2E3YTlkOWYzNjk1YTJlZmU4NTQzYThmZDlmMGUyZDlmIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImtyZXk3NDlqRTE2T2NSMHFzRHoxYmc9PSIsInZhbHVlIjoiakN3RU14UE5Dem5Nc3kyOGVpeFpwMGkrSHNTcUxQNnJydVBqMURDdkRnTXBIZFB6V1l5bXFKQXorOVFWU1JNOWs3ZFJhZitPWjM0aUFJSUNLMytBU3ZrMXZSa0NiU2FQS2plNUk1SmtRa0lWUy9nUXZLeFJOUGNNaTdGRExzeEkiLCJtYWMiOiJhYTJmOTFmOGUwNzUwNzAwMWYyYmIyN2RiYTI4NTg1NTg3ODY2YTMxNTY3MTc2YmI2YWUxNGRjNWZjMGEyODcyIiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Tue, 03 Oct 2023 14:01:53 GMT
content-type: image/png
content-length: 29399
last-modified: Tue, 08 Aug 2023 13:39:17 GMT
etag: "72d7-602697d4ebe02"
access-control-allow-origin: *
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
cache-control: max-age=14400
age: 4614
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=pSsvP%2FzpFzGwMA0R7oCC306JFz8BrxXqJ82nZN1NwPQKm2p3L2Fa1KT3LbFwYUSwy41lpEs8McawyNDqT6J2YQblMHkzkcgvBmLkJau6UnjGSkPt1klHQslpp%2ByuCZMbDZ8gauc%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
cf-cache-status: HIT
accept-ranges: bytes
server: cloudflare
cf-ray: 8105b83bcde4569f-OSL

challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/2oxc8/0x4AAAAAAAJ1zx-MJxCL7z8m/auto/normal

104.17.3.184

200 OK

27 kB

URL GET HTTP/3
challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/2oxc8/0x4AAAAAAAJ1zx-MJxCL7z8m/auto/normal
IP
104.17.3.184:443
ASN
#13335 CLOUDFLARENET

Requested by
https://lajg05z8w9s48y1.glfbreak.ru/updonp4w44n#bkinney@northbridgemass.org
Certificate
IssuerCloudflare, Inc.
Subjectchallenges.cloudflare.com
Fingerprint5F:E4:AA:8C:2E:24:D2:B1:69:9D:13:28:31:5C:65:FA:97:2A:E9:6E
ValidityFri, 18 Aug 2023 00:00:00 GMT - Sat, 17 Aug 2024 23:59:59 GMT

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (14577)
Size
27 kB (27300 bytes)
Hash
e5bb5bd306b31be2494e738100e4ee21
1a02420d470a1261399615ca61d40ebbd76b5d89
5a1d6d19816fe9502a961e3b814f6a5461eb7d4b5fd88afdc10b0448d57d659b

HTTP Headers

GET /cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/2oxc8/0x4AAAAAAAJ1zx-MJxCL7z8m/auto/normal HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lajg05z8w9s48y1.glfbreak.ru/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Tue, 03 Oct 2023 14:01:48 GMT
content-type: text/html; charset=UTF-8
cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
content-security-policy: frame-src https://challenges.cloudflare.com/; base-uri 'self'
cross-origin-embedder-policy: require-corp
cross-origin-opener-policy: same-origin
cross-origin-resource-policy: cross-origin
document-policy: js-profiling
origin-agent-cluster: ?1
permissions-policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()
referrer-policy: same-origin
server: cloudflare
cf-ray: 8105b81d38b456c0-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

lajg05z8w9s48y1.glfbreak.ru/web1/assets/pages/ul8ez297rtg.css?cb=1696341707400

172.67.196.133

200 OK

1.0 kB

URL GET HTTP/3
lajg05z8w9s48y1.glfbreak.ru/web1/assets/pages/ul8ez297rtg.css?cb=1696341707400
IP
172.67.196.133:443
ASN
#13335 CLOUDFLARENET

Requested by
https://lajg05z8w9s48y1.glfbreak.ru/updonp4w44n#bkinney@northbridgemass.org
Certificate
IssuerGoogle Trust Services LLC
Subject*.glfbreak.ru
FingerprintFE:09:67:09:64:85:14:9F:26:37:8F:9A:B6:BA:D0:EC:CA:3B:8D:C8
ValidityThu, 07 Sep 2023 12:26:20 GMT - Wed, 06 Dec 2023 12:26:19 GMT

File type
ASCII text, with very long lines (1090), with no line terminators
Size
1.0 kB (1047 bytes)
Hash
8724eafd89ef122222e5d0e054fe9bc7
7074bd4cd9c2a0c3836c5a1d4494371a2916ec53
48a4199b291b585d42bc7bc1d4803f165cb5b5f418e39dda93fa6a552ed711ff

HTTP Headers

GET /web1/assets/pages/ul8ez297rtg.css?cb=1696341707400 HTTP/1.1
Host: lajg05z8w9s48y1.glfbreak.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lajg05z8w9s48y1.glfbreak.ru/updonp4w44n
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Tue, 03 Oct 2023 14:01:47 GMT
content-type: text/css
last-modified: Tue, 03 Oct 2023 12:16:33 GMT
etag: W/"417-606cedc897b85"
access-control-allow-origin: *
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
cache-control: max-age=14400
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=hd5HJ%2F7H7Vn%2B14gRWNA%2B%2FkF5rpc8%2Fk2qAwVMHsmpFuLUTYEv6WAvZ7OBwvKJsCUlIINWwClfKh%2F26LoqRml%2FvkG%2FgOt5P7uqoqsprcbm0pf14mfWewPoonfyAI2mDIfXkinrI8o%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
cf-cache-status: MISS
server: cloudflare
cf-ray: 8105b814b83a569f-OSL
content-encoding: br

lajg05z8w9s48y1.glfbreak.ru/web1/assets/js/pages-head-web.min.js?cb=1696341707400

172.67.196.133

200 OK

10 kB

URL GET HTTP/3
lajg05z8w9s48y1.glfbreak.ru/web1/assets/js/pages-head-web.min.js?cb=1696341707400
IP
172.67.196.133:443
ASN
#13335 CLOUDFLARENET

Requested by
https://lajg05z8w9s48y1.glfbreak.ru/updonp4w44n#bkinney@northbridgemass.org
Certificate
IssuerGoogle Trust Services LLC
Subject*.glfbreak.ru
FingerprintFE:09:67:09:64:85:14:9F:26:37:8F:9A:B6:BA:D0:EC:CA:3B:8D:C8
ValidityThu, 07 Sep 2023 12:26:20 GMT - Wed, 06 Dec 2023 12:26:19 GMT

File type
ASCII text, with very long lines (10179), with no line terminators
Size
10 kB (10179 bytes)
Hash
91ca724283fd63e0366176adac255a3c
1657c9af872393e385b399d72471dd7c8b476d03
8e7b8fe78eb8a61b0d77628fe1a02c9569fcd0ef4c44ee1b1d06069b8a2787e7

HTTP Headers

GET /web1/assets/js/pages-head-web.min.js?cb=1696341707400 HTTP/1.1
Host: lajg05z8w9s48y1.glfbreak.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lajg05z8w9s48y1.glfbreak.ru/updonp4w44n
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Tue, 03 Oct 2023 14:01:47 GMT
content-type: application/javascript
last-modified: Mon, 25 Sep 2023 19:33:09 GMT
etag: W/"27c3-6063407397648"
access-control-allow-origin: *
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
cache-control: max-age=14400
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=p1%2F%2BFmeYULJJ3nwftUiZlAIxrJDdKbCQk5yHwq9pVaonDvbLxiR9LaeG7VcJ8zTmv3IByqNVd0obFSkxN%2BzrsSC9%2FdOvZsSbHziTnUkK6dOQwRq522LErbVm%2FVvk0ApRyOe%2BS5M%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
cf-cache-status: MISS
server: cloudflare
cf-ray: 8105b814d864569f-OSL
content-encoding: br

lajg05z8w9s48y1.glfbreak.ru/web1/assets/fonts/GDSherpa-bold.woff2

172.67.196.133

200 OK

28 kB

URL GET HTTP/3
lajg05z8w9s48y1.glfbreak.ru/web1/assets/fonts/GDSherpa-bold.woff2
IP
172.67.196.133:443
ASN
#13335 CLOUDFLARENET

Requested by
https://lajg05z8w9s48y1.glfbreak.ru/updonp4w44n#bkinney@northbridgemass.org
Certificate
IssuerGoogle Trust Services LLC
Subject*.glfbreak.ru
FingerprintFE:09:67:09:64:85:14:9F:26:37:8F:9A:B6:BA:D0:EC:CA:3B:8D:C8
ValidityThu, 07 Sep 2023 12:26:20 GMT - Wed, 06 Dec 2023 12:26:19 GMT

File type
Web Open Font Format (Version 2), TrueType, length 28000, version 1.66\012- data
Size
28 kB (28000 bytes)
Hash
a4bca6c95fed0d0c5cc46cf07710dcec
73b56e33b82b42921db8702a33efd0f2b2ec9794
5a51d246af54d903f67f07f2bd820ce77736f8d08c5f1602db07469d96dbf77f

HTTP Headers

GET /web1/assets/fonts/GDSherpa-bold.woff2 HTTP/1.1
Host: lajg05z8w9s48y1.glfbreak.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://lajg05z8w9s48y1.glfbreak.ru/updonp4w44n
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Tue, 03 Oct 2023 14:01:47 GMT
content-type: font/woff2
content-length: 28000
last-modified: Fri, 25 Aug 2023 04:00:16 GMT
etag: "6d60-603b761e42cdb"
access-control-allow-origin: *
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
cache-control: max-age=14400
age: 7032
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=6WYDiT5G9jFLbVnJO9CSq%2BxP8SRDMup35WET24MsraUCjEG5aKtZ60pISSZMlKHd%2B0bVY3XveFKTZYnZyGAnC8LsTn8ag4kQMmxbZL4OULwovUF3nMlfP9xO6uVblyVJOuoxprs%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
cf-cache-status: HIT
accept-ranges: bytes
server: cloudflare
cf-ray: 8105b814e88e569f-OSL

lajg05z8w9s48y1.glfbreak.ru/web1/info

0.0.0.0

1 B

URL POST
lajg05z8w9s48y1.glfbreak.ru/web1/info
IP
0.0.0.0:0
ASN
#0

Requested by
https://lajg05z8w9s48y1.glfbreak.ru/updonp4w44n#bkinney@northbridgemass.org
Certificate
IssuerGoogle Trust Services LLC
Subject*.glfbreak.ru
FingerprintFE:09:67:09:64:85:14:9F:26:37:8F:9A:B6:BA:D0:EC:CA:3B:8D:C8
ValidityThu, 07 Sep 2023 12:26:20 GMT - Wed, 06 Dec 2023 12:26:19 GMT

File type
very short file (no magic)
Size
1 B (1 bytes)
Hash
c4ca4238a0b923820dcc509a6f75849b
356a192b7913b04c54574d18c28d46e6395428ab
6b86b273ff34fce19d6b804eff5a3f5747ada4eaa22f1d49c01e52ddb7875b4b

HTTP Headers

POST /web1/info HTTP/1.1
Host: lajg05z8w9s48y1.glfbreak.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 136
Origin: https://lajg05z8w9s48y1.glfbreak.ru
DNT: 1
Connection: keep-alive
Referer: https://lajg05z8w9s48y1.glfbreak.ru/updonp4w44n
Cookie: XSRF-TOKEN=eyJpdiI6Imc1TFQvUnBRc2hUbDZ1Y0tLWWtVT1E9PSIsInZhbHVlIjoiaGhta1RmcjhiQitBanlYR09tUkJWVUtQVjdTZ1I1YXlIdmlCZjJBWjJrRkpJY2I2N3VWcEdmV0hobkFRQ1RYWS9kdWhhNHJhbjRQVVEzUVp0VnJnNVB1VDJ2Zk9iRUk0TXRWT2hEVEg1REhzek1CWkxGc2VTSjlrWXFtcCtZaUoiLCJtYWMiOiJkNzRjYjRmM2JjOTBhYTJhNjY5MzY0MDgwMTczYjU4OTBmMWFiMWNhNGYwODQ5MjhkODI4NTFhMTIyODM4MzRkIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImRCYnFzekxUNmU5Mnl0VEVGTU9aQkE9PSIsInZhbHVlIjoiS0Nrc0I3YzNrdnA5QURtN3BRR2cybENRTTFGQ3VWYTVoNEJEU0FoMFhFT3lXdElMbmtSakRBbUtyNUZ4SkdVcTBiWHJ0cXFCMmVVdENmamhBNnZEZVdLd1kwZ2JxK3FXK1gwQm5BQm9leHUyQWllZ2dtV29BTWhxWWxmZ3RRZk4iLCJtYWMiOiI1NDYzYWU4NDMyOTRjZjgzODZmOWI0N2RjY2EyZWZkZTgyZGIzMmU0MDgyMGI3MGM2MGRhYzdmM2Q0YzE2N2QxIiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Tue, 03 Oct 2023 14:01:56 GMT
content-type: text/html; charset=UTF-8
x-powered-by: PHP/8.1.10
cache-control: no-cache, private
access-control-allow-origin: *
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=7suMDU5ducZflM79VKSXeJcYm66NB1EbY0yRMNs6sMTdSjvpVJl53e66co17sDD3sCk66jrFPwrdElnElkXa6NZ1r1MyK9lHP9vtPsYr8uUyd8zqvikisFZP7Hdyd8VlxJjgSOY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
set-cookie: XSRF-TOKEN=eyJpdiI6IkRPaVJiRTY5SnRucjlCbUdzRm1KT2c9PSIsInZhbHVlIjoiMThpNWVsVkFDSmsxMG9WR3hXcU54TmYrVjFiYnl6anVQTVY3dXNYWjlBVDFjYmRHQUhOdGZraXIxTWRHMDl4emx3cVZwNzNMYldRc2xUazZjQ1JpWTB6a1h2UWpCSUUxSGEvZS90RmRRSkQrNTgvdjRBSW9Ed3NQamcrdm45NVIiLCJtYWMiOiJjMGZjOTYwM2IyMzdiMTg1MjcwZjI0MzEwZWNlMmNmZWU4MmFiYTViMGI2NzQ5NGE4YTI0NjY5ZGM0NDQ3ZDNiIiwidGFnIjoiIn0%3D; expires=Tue, 03-Oct-2023 16:01:56 GMT; Max-Age=7200; path=/; samesite=lax
laravel_session=eyJpdiI6Ing5OGtMZk4wM0pVV1AvcFZZb01oYWc9PSIsInZhbHVlIjoicCt4MHA2RFVLbStDbTFNaTZDOXk5Zk5XSlVDS21FZVNlQUJuVzl3aEltVEY5ckp3dkl1c2k4b2xvMUZRSHdYSDF6a2doMXZITXpFZC9JbGNNYmhyMHFDMjFvVlhLL001VzFjTGdFN0VhZ1NBTGlHTC96bXJiMDhwczZBVlNXZTQiLCJtYWMiOiI5NDY3ODM5OTc1NDJmZDNiOTM5MjRkZjhhNGEyZGEzMWJlYjRjMzIyMDgwN2E1YWRiMzYxYTE5ZDBiZjE4ODAxIiwidGFnIjoiIn0%3D; expires=Tue, 03-Oct-2023 16:01:56 GMT; Max-Age=7200; path=/; httponly; samesite=lax
server: cloudflare
cf-ray: 8105b84efff4569f-OSL
content-encoding: br

lajg05z8w9s48y1.glfbreak.ru/updonp4w44n

172.67.196.133

200 OK

111 B

URL User Request GET HTTP/2
lajg05z8w9s48y1.glfbreak.ru/updonp4w44n
IP
172.67.196.133:443
ASN
#13335 CLOUDFLARENET

Certificate
IssuerGoogle Trust Services LLC
Subject*.glfbreak.ru
FingerprintFE:09:67:09:64:85:14:9F:26:37:8F:9A:B6:BA:D0:EC:CA:3B:8D:C8
ValidityThu, 07 Sep 2023 12:26:20 GMT - Wed, 06 Dec 2023 12:26:19 GMT

File type
HTML document text\012- HTML document, ASCII text, with no line terminators
Size
111 B (111 bytes)
Hash
101582db1e6308eb1f6053d4208191a7
43a6096dc780f98a5d3b9b7fb908e342e91b5133
da724a8ef3986a489698138b03a1e6bdc2e0b25196fcf558db46af0d8442d5c8

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Microsoft Outlook

HTTP Headers

GET /updonp4w44n HTTP/1.1
Host: lajg05z8w9s48y1.glfbreak.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Tue, 03 Oct 2023 14:01:45 GMT
content-type: text/html; charset=UTF-8
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=MQ1zi70s2gyz1Z%2F2kuQb%2B6NtdpqoSSU4O6bpMv9bx3jw9R4YIeezNV%2BFksPDnd0e6KNDShpmSVfqQqJSTIdqyuRgVPthx5Z8nlHBtw6ItvcXNE1eTPnG4ih6dfBulqAc34Fuv%2Bgcoq5Fp51t8Ig%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8105b80bad6756be-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

lajg05z8w9s48y1.glfbreak.ru/web1/assets/css/pages-godaddy.css?cb=1696341707400

172.67.196.133

200 OK

39 kB

URL GET HTTP/3
lajg05z8w9s48y1.glfbreak.ru/web1/assets/css/pages-godaddy.css?cb=1696341707400
IP
172.67.196.133:443
ASN
#13335 CLOUDFLARENET

Requested by
https://lajg05z8w9s48y1.glfbreak.ru/updonp4w44n#bkinney@northbridgemass.org
Certificate
IssuerGoogle Trust Services LLC
Subject*.glfbreak.ru
FingerprintFE:09:67:09:64:85:14:9F:26:37:8F:9A:B6:BA:D0:EC:CA:3B:8D:C8
ValidityThu, 07 Sep 2023 12:26:20 GMT - Wed, 06 Dec 2023 12:26:19 GMT

File type
ASCII text, with very long lines (1723), with CRLF line terminators
Size
39 kB (38683 bytes)
Hash
d3fd47cb9314b9d1c6916e4179076329
babecdeb0a31fae079c8401d945563d91e3dc65a
b6b8147ef345a398d599d894f543d58ea9899af8fca1d050d8ecd6efa7fb211a

HTTP Headers

GET /web1/assets/css/pages-godaddy.css?cb=1696341707400 HTTP/1.1
Host: lajg05z8w9s48y1.glfbreak.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lajg05z8w9s48y1.glfbreak.ru/updonp4w44n
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Tue, 03 Oct 2023 14:01:47 GMT
content-type: text/css
last-modified: Fri, 25 Aug 2023 04:39:37 GMT
etag: W/"971b-603b7ee9e50a8"
access-control-allow-origin: *
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
cache-control: max-age=14400
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=qJn5LMl70NyuE1JgaB5RL4yq5jeF5DGkREB7I%2BJGKEa6soWk%2FVKKxKnYhW%2FWP0HTKuG8K7%2BbQ7K4WnaJoM9uxsT8O7ugK%2BjC2S1rqLF3hw1VoBH2OQJYSVED1AmMMoqolqubZeI%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
cf-cache-status: MISS
server: cloudflare
cf-ray: 8105b814c85b569f-OSL
content-encoding: br

challenges.cloudflare.com/turnstile/v0/api.js?render=explicit

104.17.3.184

302 Found

34 kB

URL GET HTTP/2
challenges.cloudflare.com/turnstile/v0/api.js?render=explicit
IP
104.17.3.184:443
ASN
#13335 CLOUDFLARENET

Requested by
https://lajg05z8w9s48y1.glfbreak.ru/updonp4w44n#bkinney@northbridgemass.org
Certificate
IssuerCloudflare, Inc.
Subjectchallenges.cloudflare.com
Fingerprint5F:E4:AA:8C:2E:24:D2:B1:69:9D:13:28:31:5C:65:FA:97:2A:E9:6E
ValidityFri, 18 Aug 2023 00:00:00 GMT - Sat, 17 Aug 2024 23:59:59 GMT

File type

Size
34 kB (33999 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /turnstile/v0/api.js?render=explicit HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lajg05z8w9s48y1.glfbreak.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 302 Found
date: Tue, 03 Oct 2023 14:01:46 GMT
cache-control: max-age=300, public
location: /turnstile/v0/g/dffb14d6/api.js?render=explicit
access-control-allow-origin: *
vary: accept-encoding
server: cloudflare
cf-ray: 8105b80efb5b5694-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

lajg05z8w9s48y1.glfbreak.ru/web1/info

172.67.196.133

200 OK

153 B

URL POST HTTP/3
lajg05z8w9s48y1.glfbreak.ru/web1/info
IP
172.67.196.133:443
ASN
#13335 CLOUDFLARENET

Requested by
https://lajg05z8w9s48y1.glfbreak.ru/updonp4w44n#bkinney@northbridgemass.org
Certificate
IssuerGoogle Trust Services LLC
Subject*.glfbreak.ru
FingerprintFE:09:67:09:64:85:14:9F:26:37:8F:9A:B6:BA:D0:EC:CA:3B:8D:C8
ValidityThu, 07 Sep 2023 12:26:20 GMT - Wed, 06 Dec 2023 12:26:19 GMT

File type
troff or preprocessor input, ASCII text, with no line terminators
Size
153 B (153 bytes)
Hash
192c6e632b1e03ea12151f0dee7cd7f2
0539cbafa3d0fc559441f3a8c3b0cf0c6a6cd9ab
0300e39137793f68789fed3ce44cdc73d97fac4803fd8be9748fb6ea9cd2c3ae

HTTP Headers

POST /web1/info HTTP/1.1
Host: lajg05z8w9s48y1.glfbreak.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 27
Origin: https://lajg05z8w9s48y1.glfbreak.ru
DNT: 1
Connection: keep-alive
Referer: https://lajg05z8w9s48y1.glfbreak.ru/updonp4w44n
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Tue, 03 Oct 2023 14:01:48 GMT
content-type: application/json
x-powered-by: PHP/8.1.10
cache-control: no-cache, private
access-control-allow-origin: *
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=im%2BE4tKqCpJ7IhIABHmN3FYB78uRPm8Q%2FKepu3xMGffNk0beBpcSmDz1ZBWJFQx7wIN8cb2mTbGUuuvoITyu0DC0rq8JE29MtXXD%2BvtgdV3CQYRvmYVmg1VfhhdGhBOyOh7oOI4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
set-cookie: XSRF-TOKEN=eyJpdiI6Ikp2Y3NtbDFGdlpaMXNxSlY3aUQvQlE9PSIsInZhbHVlIjoiZzYyZFQrZ1dwcGwzeDR1aUw3dVQxc0FLcDJJTUZOcitaRmkwZUdTNUNYZTEwb21GeFNySkNtWVg2cHhrT3BrWkorRFMzZ3BoTUxheXllV0g5YkhIYnErL1R1N0lSZ1lGcmlkRzFtUm5QZjMvc05maDVXV0UycEJWK1hZOW5UanEiLCJtYWMiOiIxNTFhYjA4ZDUxM2I0NjEzNDFhMjY1MDA5MzljMmMxOTBhNDYzN2RlZDViZjI0NDI1MGFlM2E2Y2Y2MDU1MzczIiwidGFnIjoiIn0%3D; expires=Tue, 03-Oct-2023 16:01:48 GMT; Max-Age=7200; path=/; samesite=lax
laravel_session=eyJpdiI6IkRZRXJ6Y0prT0lNYXR6R2pFbnNKbEE9PSIsInZhbHVlIjoiOVN6dlpSV2pMbUtNVDVmOXEvaXROeFJTTng0U09HRDVYQVpaVkpjL0VVZE5kaFVxMnpwN2RlYlE4QS9Kb2lyUnBnb01GTGlPYmtEMWh4bmNkbmdLM2djU29ldHd2dEVpeVEvazNqeVgxSG8xSmxTMDE3N2IzbnZuQnZvYWpTU2ciLCJtYWMiOiIyY2RmNzY4MmQ3NjE1NDI1NGU4ZGM3M2QyNjBmODY4ZmQ0MTFmNTRiMjNmNTRjZDE5OTNlNzcxMGYzN2ZjOTk3IiwidGFnIjoiIn0%3D; expires=Tue, 03-Oct-2023 16:01:48 GMT; Max-Age=7200; path=/; httponly; samesite=lax
server: cloudflare
cf-ray: 8105b818fe68569f-OSL
content-encoding: br

lajg05z8w9s48y1.glfbreak.ru/web1/info

172.67.196.133

200 OK

33 kB

URL POST HTTP/3
lajg05z8w9s48y1.glfbreak.ru/web1/info
IP
172.67.196.133:443
ASN
#13335 CLOUDFLARENET

Requested by
https://lajg05z8w9s48y1.glfbreak.ru/updonp4w44n#bkinney@northbridgemass.org
Certificate
IssuerGoogle Trust Services LLC
Subject*.glfbreak.ru
FingerprintFE:09:67:09:64:85:14:9F:26:37:8F:9A:B6:BA:D0:EC:CA:3B:8D:C8
ValidityThu, 07 Sep 2023 12:26:20 GMT - Wed, 06 Dec 2023 12:26:19 GMT

File type

Size
33 kB (33141 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

POST /web1/info HTTP/1.1
Host: lajg05z8w9s48y1.glfbreak.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 28
Origin: https://lajg05z8w9s48y1.glfbreak.ru
DNT: 1
Connection: keep-alive
Referer: https://lajg05z8w9s48y1.glfbreak.ru/updonp4w44n
Cookie: XSRF-TOKEN=eyJpdiI6IndFTFYwNmpGRXFRSGFYSjVKdGFkalE9PSIsInZhbHVlIjoiTldnbDNyU1NYUFNRTWp1akFKd1MxU3BxcXB5alUwdjllYnJLcUlMV0xoZVROV3VLVVFieWZvTFFsTTJxMk5tbkRGNjR1YjJLeFZyZkg4VGpjaUQ5K1F1aU1rOVE0WThiNjNqZ24wRmlETUpzZEJyNFA1VUlzSGtIdms4RTJlOHIiLCJtYWMiOiI5OTBkYmMwMDcyMDg1MzcxN2U2YzE2YWVkNTJlMGVjY2ExZTJlMzJiMjlhMDgyNmIwZjQ3YmQyY2IxNWQxNzg4IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Imd2KzgweEhWYmFTL2FkSU9ROFpBM0E9PSIsInZhbHVlIjoiSkUrV1BydVMwdG9BNFVYQmViU0xnY2JmSEo2MlVWdUN6V1UramRIclE2QTBMeGJFdVZvWjNvUEFLM1VoNU5LYXhwb2xtQkROalFGYjVBbERVdmdhVkRoeGlmMzFsaDBQZWYxY20yRFRUNkdFYlVHNUxIQ0J2MGJIa3Rtc0ZvWWEiLCJtYWMiOiI4OGVhMWJkNWYzMDk2NTQzOTU3YTk3OTg0M2NiNDdjYjIyMDNiNDRhZDYyZGFkNDdiM2UyMWVhYThjNTYzYzk2IiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Tue, 03 Oct 2023 14:01:52 GMT
content-type: text/html; charset=UTF-8
x-powered-by: PHP/8.1.10
cache-control: no-cache, private
access-control-allow-origin: *
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2FyjvEJGfam20pYjaPPX8RClXV1pVnroM6zy7LIKYP6ikycMXG2u5j3geBYV6%2FzrCXBLgpWxwDrSlOOQFLAIpPgn82rMXAxQL6mVtypFrtQYbYDMDFYKzDOoDX3Brwk7U8sxceHs%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
set-cookie: XSRF-TOKEN=eyJpdiI6IkJ5ZUZZalpXUUF5QTFTeFprN3d2eVE9PSIsInZhbHVlIjoiWE43S3FWSzZESzNYVG1NS21IMlN0WUJBOGlPQUpaam5WcWwrRkVhcU9LaUc2aWVHZWFxb0J3dW5ndG94MVFCNWIwN3hsRXZuQlR1cnhkY01tYW82aXE0K0tDNGhKbFJrcXdnYXhmTmtPWTA5SGlPYkcyZy91YUtVU01jY0JPNU4iLCJtYWMiOiI0NjhiZmNkMDZkZTI2YjI2YjU0YzMzYjQ1NmNmOTlkN2E3YTlkOWYzNjk1YTJlZmU4NTQzYThmZDlmMGUyZDlmIiwidGFnIjoiIn0%3D; expires=Tue, 03-Oct-2023 16:01:52 GMT; Max-Age=7200; path=/; samesite=lax
laravel_session=eyJpdiI6ImtyZXk3NDlqRTE2T2NSMHFzRHoxYmc9PSIsInZhbHVlIjoiakN3RU14UE5Dem5Nc3kyOGVpeFpwMGkrSHNTcUxQNnJydVBqMURDdkRnTXBIZFB6V1l5bXFKQXorOVFWU1JNOWs3ZFJhZitPWjM0aUFJSUNLMytBU3ZrMXZSa0NiU2FQS2plNUk1SmtRa0lWUy9nUXZLeFJOUGNNaTdGRExzeEkiLCJtYWMiOiJhYTJmOTFmOGUwNzUwNzAwMWYyYmIyN2RiYTI4NTg1NTg3ODY2YTMxNTY3MTc2YmI2YWUxNGRjNWZjMGEyODcyIiwidGFnIjoiIn0%3D; expires=Tue, 03-Oct-2023 16:01:52 GMT; Max-Age=7200; path=/; httponly; samesite=lax
server: cloudflare
cf-ray: 8105b8363f8c569f-OSL
content-encoding: br

lajg05z8w9s48y1.glfbreak.ru/web1/info

172.67.196.133

200 OK

16 B

URL POST HTTP/3
lajg05z8w9s48y1.glfbreak.ru/web1/info
IP
172.67.196.133:443
ASN
#13335 CLOUDFLARENET

Requested by
https://lajg05z8w9s48y1.glfbreak.ru/updonp4w44n#bkinney@northbridgemass.org
Certificate
IssuerGoogle Trust Services LLC
Subject*.glfbreak.ru
FingerprintFE:09:67:09:64:85:14:9F:26:37:8F:9A:B6:BA:D0:EC:CA:3B:8D:C8
ValidityThu, 07 Sep 2023 12:26:20 GMT - Wed, 06 Dec 2023 12:26:19 GMT

File type
troff or preprocessor input, ASCII text, with no line terminators
Size
16 B (16 bytes)
Hash
41315f86474c960058827555b54392e8
dc6961e48bbad403dcbd868f7fdc28f618c1b492
074e3acd64528f14761d99ba5d8d5ece6c3c82f5fc983eda2b9a7edf5d680a07

HTTP Headers

POST /web1/info HTTP/1.1
Host: lajg05z8w9s48y1.glfbreak.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 27
Origin: https://lajg05z8w9s48y1.glfbreak.ru
DNT: 1
Connection: keep-alive
Referer: https://lajg05z8w9s48y1.glfbreak.ru/updonp4w44n
Cookie: XSRF-TOKEN=eyJpdiI6IkJ5ZUZZalpXUUF5QTFTeFprN3d2eVE9PSIsInZhbHVlIjoiWE43S3FWSzZESzNYVG1NS21IMlN0WUJBOGlPQUpaam5WcWwrRkVhcU9LaUc2aWVHZWFxb0J3dW5ndG94MVFCNWIwN3hsRXZuQlR1cnhkY01tYW82aXE0K0tDNGhKbFJrcXdnYXhmTmtPWTA5SGlPYkcyZy91YUtVU01jY0JPNU4iLCJtYWMiOiI0NjhiZmNkMDZkZTI2YjI2YjU0YzMzYjQ1NmNmOTlkN2E3YTlkOWYzNjk1YTJlZmU4NTQzYThmZDlmMGUyZDlmIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImtyZXk3NDlqRTE2T2NSMHFzRHoxYmc9PSIsInZhbHVlIjoiakN3RU14UE5Dem5Nc3kyOGVpeFpwMGkrSHNTcUxQNnJydVBqMURDdkRnTXBIZFB6V1l5bXFKQXorOVFWU1JNOWs3ZFJhZitPWjM0aUFJSUNLMytBU3ZrMXZSa0NiU2FQS2plNUk1SmtRa0lWUy9nUXZLeFJOUGNNaTdGRExzeEkiLCJtYWMiOiJhYTJmOTFmOGUwNzUwNzAwMWYyYmIyN2RiYTI4NTg1NTg3ODY2YTMxNTY3MTc2YmI2YWUxNGRjNWZjMGEyODcyIiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Tue, 03 Oct 2023 14:01:55 GMT
content-type: application/json
x-powered-by: PHP/8.1.10
cache-control: no-cache, private
access-control-allow-origin: *
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=tGfYBzfbkHMTSMkZyH2rIlwOe95YcKoLIz2pQJof1WGuUyRzCMBOM88SJCHvxXOOPKx0cwPxJVtfPScbTulmywHG2mV4uK58ysQBTdZScXUR7JKboEGph0WmFiabgTySxsYopjo%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
set-cookie: XSRF-TOKEN=eyJpdiI6Imc1TFQvUnBRc2hUbDZ1Y0tLWWtVT1E9PSIsInZhbHVlIjoiaGhta1RmcjhiQitBanlYR09tUkJWVUtQVjdTZ1I1YXlIdmlCZjJBWjJrRkpJY2I2N3VWcEdmV0hobkFRQ1RYWS9kdWhhNHJhbjRQVVEzUVp0VnJnNVB1VDJ2Zk9iRUk0TXRWT2hEVEg1REhzek1CWkxGc2VTSjlrWXFtcCtZaUoiLCJtYWMiOiJkNzRjYjRmM2JjOTBhYTJhNjY5MzY0MDgwMTczYjU4OTBmMWFiMWNhNGYwODQ5MjhkODI4NTFhMTIyODM4MzRkIiwidGFnIjoiIn0%3D; expires=Tue, 03-Oct-2023 16:01:55 GMT; Max-Age=7200; path=/; samesite=lax
laravel_session=eyJpdiI6ImRCYnFzekxUNmU5Mnl0VEVGTU9aQkE9PSIsInZhbHVlIjoiS0Nrc0I3YzNrdnA5QURtN3BRR2cybENRTTFGQ3VWYTVoNEJEU0FoMFhFT3lXdElMbmtSakRBbUtyNUZ4SkdVcTBiWHJ0cXFCMmVVdENmamhBNnZEZVdLd1kwZ2JxK3FXK1gwQm5BQm9leHUyQWllZ2dtV29BTWhxWWxmZ3RRZk4iLCJtYWMiOiI1NDYzYWU4NDMyOTRjZjgzODZmOWI0N2RjY2EyZWZkZTgyZGIzMmU0MDgyMGI3MGM2MGRhYzdmM2Q0YzE2N2QxIiwidGFnIjoiIn0%3D; expires=Tue, 03-Oct-2023 16:01:55 GMT; Max-Age=7200; path=/; httponly; samesite=lax
server: cloudflare
cf-ray: 8105b847a952569f-OSL
content-encoding: br

code.jquery.com/jquery-3.6.0.min.js

151.101.2.137

200 OK

90 kB

URL GET HTTP/2
code.jquery.com/jquery-3.6.0.min.js
IP
151.101.2.137:443
ASN
#54113 FASTLY

Requested by
https://lajg05z8w9s48y1.glfbreak.ru/updonp4w44n#bkinney@northbridgemass.org
Certificate
IssuerSectigo Limited
Subject*.jquery.com
FingerprintD2:19:0A:AD:CE:BB:9C:61:17:5D:29:4B:A2:54:E8:C6:91:B8:F9:8D
ValidityTue, 11 Jul 2023 00:00:00 GMT - Sun, 14 Jul 2024 23:59:59 GMT

File type
ASCII text, with very long lines (65447)
Size
90 kB (89501 bytes)
Hash
8fb8fee4fcc3cc86ff6c724154c49c42
b82d238d4e31fdf618bae8ac11a6c812c03dd0d4
ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e

HTTP Headers

GET /jquery-3.6.0.min.js HTTP/1.1
Host: code.jquery.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lajg05z8w9s48y1.glfbreak.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Fri, 18 Oct 1991 12:00:00 GMT
etag: W/"28feccc0-15d9d"
cache-control: public, max-age=31536000, stale-while-revalidate=604800
access-control-allow-origin: *
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Tue, 03 Oct 2023 14:01:46 GMT
age: 1103606
x-served-by: cache-lga21931-LGA, cache-bma1667-BMA
x-cache: HIT, HIT
x-cache-hits: 30, 298473
x-timer: S1696341706.107800,VS0,VE0
vary: Accept-Encoding
content-length: 30875
X-Firefox-Spdy: h2

Report Overview

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (12)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

Observations

Hash

Observations

Hash

Observations

Hash

Observations

Hash

Observations

Hash

HTTP Transactions (48)

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL

IP

ASN