midasassortments.com/new/css/jqfcjl/bG9yaS5tYWRkb2NrQHVicy5jb20=
162.241.87.113200 OK 0 B URL User Request GET HTTP/1.1 midasassortments.com/new/css/jqfcjl/bG9yaS5tYWRkb2NrQHVicy5jb20=
IP 162.241.87.113:443
ASN #46606 UNIFIEDLAYER-AS-1
Certificate IssuerLet's Encrypt
Subjectwebdisk.midasassortments.com
Fingerprint2D:76:91:33:2F:F2:F5:6B:D7:C0:6C:18:99:A5:A0:C8:A3:80:50:00
ValidityFri, 17 Nov 2023 06:07:28 GMT - Thu, 15 Feb 2024 06:07:27 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert urlquery phishing Phishing - Microsoft Outlook
GET /new/css/jqfcjl/bG9yaS5tYWRkb2NrQHVicy5jb20= HTTP/1.1
Host: midasassortments.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 25 Nov 2023 04:11:31 GMT
Server: Apache
refresh: 0;url=https://ital-rentgen.ru/Mlori.maddock@ubs.com
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
aadcdn.msauthimages.net/c1c6b6c8-3ryhipbfkhxxwptmyqh8tcus4iat4acfnhdjhttbkbi/logintenantbranding/0/bannerlogo?ts=637058688700493492
152.199.23.72200 OK 3.0 kB URL GET HTTP/2 aadcdn.msauthimages.net/c1c6b6c8-3ryhipbfkhxxwptmyqh8tcus4iat4acfnhdjhttbkbi/logintenantbranding/0/bannerlogo?ts=637058688700493492
IP 152.199.23.72:443
Requested by https://ital-rentgen.ru/beebb091955c06fa68b3eb8afc0bae51656173f798a58PASbeebb091955c06fa68b3eb8afc0bae51656173f798a5f
Certificate IssuerMicrosoft Corporation
Subjectaadcdn.msauthimages.net
Fingerprint6B:EB:AC:06:FC:06:82:11:17:1C:6B:72:7D:B5:95:2D:CF:E7:A3:5D
ValidityWed, 08 Mar 2023 11:16:34 GMT - Sat, 02 Mar 2024 11:16:34 GMT
File type PNG image data, 110 x 41, 8-bit/color RGBA, non-interlaced\012- data
Hash ddc9c14a83c5de09eeca7aa930c4d875
755fdd0b2f553051a63f008fc95597af8f787151
1f837abaddb5c3e023bc239d100dbacdd0b4c54ac42856eccfd6843455b54c7e
GET /c1c6b6c8-3ryhipbfkhxxwptmyqh8tcus4iat4acfnhdjhttbkbi/logintenantbranding/0/bannerlogo?ts=637058688700493492 HTTP/1.1
Host: aadcdn.msauthimages.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ital-rentgen.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Length,Date,Transfer-Encoding
age: 30280
cache-control: public, max-age=86400
content-md5: 3cnBSoPF3gnuynqpMMTYdQ==
content-type: image/*
date: Sat, 25 Nov 2023 04:11:37 GMT
etag: 0x8D74980893A6B62
last-modified: Sat, 05 Oct 2019 10:41:10 GMT
server: ECAcc (ska/F68F)
x-cache: HIT
x-ms-blob-type: BlockBlob
x-ms-lease-status: unlocked
x-ms-request-id: c8ae1fb9-a01e-002b-3b0e-1f588a000000
x-ms-version: 2009-09-19
content-length: 2952
X-Firefox-Spdy: h2
aadcdn.msauthimages.net/c1c6b6c8-3ryhipbfkhxxwptmyqh8tcus4iat4acfnhdjhttbkbi/logintenantbranding/0/illustration?ts=637058688689463941
152.199.23.72200 OK 181 kB URL GET HTTP/2 aadcdn.msauthimages.net/c1c6b6c8-3ryhipbfkhxxwptmyqh8tcus4iat4acfnhdjhttbkbi/logintenantbranding/0/illustration?ts=637058688689463941
IP 152.199.23.72:443
Requested by https://ital-rentgen.ru/beebb091955c06fa68b3eb8afc0bae51656173f798a58PASbeebb091955c06fa68b3eb8afc0bae51656173f798a5f
Certificate IssuerMicrosoft Corporation
Subjectaadcdn.msauthimages.net
Fingerprint6B:EB:AC:06:FC:06:82:11:17:1C:6B:72:7D:B5:95:2D:CF:E7:A3:5D
ValidityWed, 08 Mar 2023 11:16:34 GMT - Sat, 02 Mar 2024 11:16:34 GMT
File type PNG image data, 710 x 532, 8-bit colormap, non-interlaced\012- data
Size 181 kB (181357 bytes)
Hash 508967884dd942433f649bc5a886fdb0
198d5f56300995a702ac3ebc7d07363545a34e55
211e89dcc5460b0c293778b55b17083ad9746f6cf6933d2ee6cb3e3e02510f74
GET /c1c6b6c8-3ryhipbfkhxxwptmyqh8tcus4iat4acfnhdjhttbkbi/logintenantbranding/0/illustration?ts=637058688689463941 HTTP/1.1
Host: aadcdn.msauthimages.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ital-rentgen.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Length,Date,Transfer-Encoding
age: 73825
cache-control: public, max-age=86400
content-md5: UIlniE3ZQkM/ZJvFqIb9sA==
content-type: image/*
date: Sat, 25 Nov 2023 04:11:37 GMT
etag: 0x8D7498088AF4773
last-modified: Sat, 05 Oct 2019 10:41:09 GMT
server: ECAcc (ska/F734)
x-cache: HIT
x-ms-blob-type: BlockBlob
x-ms-lease-status: unlocked
x-ms-request-id: a151f495-801e-003c-2ea9-1e98e9000000
x-ms-version: 2009-09-19
content-length: 181357
X-Firefox-Spdy: h2
ital-rentgen.ru/e/2cf22bf628de17365622a141606fe795656173f80c3ee
188.114.97.1200 OK 513 B URL GET HTTP/3 ital-rentgen.ru/e/2cf22bf628de17365622a141606fe795656173f80c3ee
IP 188.114.97.1:443
Requested by https://ital-rentgen.ru/beebb091955c06fa68b3eb8afc0bae51656173f798a58PASbeebb091955c06fa68b3eb8afc0bae51656173f798a5f
Certificate IssuerGoogle Trust Services LLC
Subjectital-rentgen.ru
FingerprintFB:84:B6:21:A8:1B:65:31:EF:87:E2:8C:C4:73:8C:80:F7:09:1C:E7
ValidityWed, 22 Nov 2023 06:28:13 GMT - Tue, 20 Feb 2024 06:28:12 GMT
File type SVG Scalable Vector Graphics image\012- HTML document, ASCII text, with very long lines (529), with no line terminators
Hash adc405f5fd089662209870ca5d2106f7
3a8b776df84bf251afc6ddd802cc5bbeddfb0e36
e7bacc97751689afaae192e103fe9851664365c57c7d783560860ad456db7e49
GET /e/2cf22bf628de17365622a141606fe795656173f80c3ee HTTP/1.1
Host: ital-rentgen.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ital-rentgen.ru/beebb091955c06fa68b3eb8afc0bae51656173f798a58PASbeebb091955c06fa68b3eb8afc0bae51656173f798a5f
Cookie: cf_clearance=YB5lRcxy929pB1IgXkPfu1hw9838DiNX1nSEVn7B08g-1700885491-0-1-69b0ef05.7e78ddc4.3eb1b0e5-160.0.0; PHPSESSID=05859aac57d2d8f36739157416ab1c2d
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 25 Nov 2023 04:11:36 GMT
content-type: image/svg+xml
cache-control: public, max-age=604800
expires: Sat, 02 Dec 2023 04:11:36 GMT
last-modified: Wed, 22 Nov 2023 13:40:14 GMT
vary: Accept-Encoding
x-turbo-charged-by: LiteSpeed
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=3IQhyYm7HhQXJjLWOoErajq65WARQNadLkMu9D6scMq6H%2FNMU6Kfa6QmAsU69ZbUv3iXImjzi5RHszUV6IX69MFbS6aXyVW1NMLH6ZZuukURSazWCcl0fl4bYFvTMH7C3eA%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 82b70c6e9f5556ba-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
ital-rentgen.ru/api-as1f?email=lori.maddock@ubs.com&data=background
188.114.97.1200 OK 176 B URL GET HTTP/3 ital-rentgen.ru/api-as1f?email=lori.maddock@ubs.com&data=background
IP 188.114.97.1:443
Requested by https://ital-rentgen.ru/beebb091955c06fa68b3eb8afc0bae51656173f798a58PASbeebb091955c06fa68b3eb8afc0bae51656173f798a5f
Certificate IssuerGoogle Trust Services LLC
Subjectital-rentgen.ru
FingerprintFB:84:B6:21:A8:1B:65:31:EF:87:E2:8C:C4:73:8C:80:F7:09:1C:E7
ValidityWed, 22 Nov 2023 06:28:13 GMT - Tue, 20 Feb 2024 06:28:12 GMT
File type troff or preprocessor input, ASCII text, with no line terminators
Hash 37350be8d21fd131ef6eb996c7a62a13
ceaffaebeaaa9e5088a5b6cbe4a6add342575c10
dc11ac9cef1797cf979be837ee5bbf2a7d0c169d410ca76425a3b40da33b17a4
GET /api-as1f?email=lori.maddock@ubs.com&data=background HTTP/1.1
Host: ital-rentgen.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ital-rentgen.ru/beebb091955c06fa68b3eb8afc0bae51656173f798a58PASbeebb091955c06fa68b3eb8afc0bae51656173f798a5f
Cookie: cf_clearance=YB5lRcxy929pB1IgXkPfu1hw9838DiNX1nSEVn7B08g-1700885491-0-1-69b0ef05.7e78ddc4.3eb1b0e5-160.0.0; PHPSESSID=05859aac57d2d8f36739157416ab1c2d
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 25 Nov 2023 04:11:37 GMT
content-type: text/html; charset=UTF-8
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
vary: Accept-Encoding
x-turbo-charged-by: LiteSpeed
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=7IPODgXlGCRfx99jpwmgiey0zbaYu%2FkH%2BlaTr6anB2jC7Ksmd%2BfhVD5OfQxoRDGLcI8ZQE%2BMjHoO%2FTbyHYLR3YJYHsZU%2BXaotDAK0kMmZXYCOIrUkcP6cjHvgFfn5U3Ptb8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 82b70c6eaf5956ba-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
ital-rentgen.ru/boot/2cf22bf628de17365622a141606fe795656173f7a8c3e
188.114.97.1200 OK 51 kB URL GET HTTP/3 ital-rentgen.ru/boot/2cf22bf628de17365622a141606fe795656173f7a8c3e
IP 188.114.97.1:443
Requested by https://ital-rentgen.ru/beebb091955c06fa68b3eb8afc0bae51656173f798a58PASbeebb091955c06fa68b3eb8afc0bae51656173f798a5f
Certificate IssuerGoogle Trust Services LLC
Subjectital-rentgen.ru
FingerprintFB:84:B6:21:A8:1B:65:31:EF:87:E2:8C:C4:73:8C:80:F7:09:1C:E7
ValidityWed, 22 Nov 2023 06:28:13 GMT - Tue, 20 Feb 2024 06:28:12 GMT
File type ASCII text, with very long lines (50758)
Hash 67176c242e1bdc20603c878dee836df3
27a71b00383d61ef3c489326b3564d698fc1227c
56c12a125b021d21a69e61d7190cefa168d6c28ce715265cea1b3b0112d169c4
GET /boot/2cf22bf628de17365622a141606fe795656173f7a8c3e HTTP/1.1
Host: ital-rentgen.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ital-rentgen.ru/beebb091955c06fa68b3eb8afc0bae51656173f798a58PASbeebb091955c06fa68b3eb8afc0bae51656173f798a5f
Cookie: cf_clearance=YB5lRcxy929pB1IgXkPfu1hw9838DiNX1nSEVn7B08g-1700885491-0-1-69b0ef05.7e78ddc4.3eb1b0e5-160.0.0; PHPSESSID=05859aac57d2d8f36739157416ab1c2d
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 25 Nov 2023 04:11:35 GMT
content-type: application/javascript
cache-control: public, max-age=604800
expires: Sat, 02 Dec 2023 04:11:35 GMT
last-modified: Wed, 22 Nov 2023 13:40:14 GMT
vary: Accept-Encoding
x-turbo-charged-by: LiteSpeed
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Aq%2FrVA9aJjbsyDtm%2B30UsZfrPpf927bBsPEHobo5s1SK%2BgWGf3r%2BCKKDgSCh9lIiGxnCYggzMnPMNVLvnfZtsDOXhqMjcgyN0oTeYm0WfNgQzH7WBpS4a6TdUttSjzQKMJI%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 82b70c6cde9056ba-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
ital-rentgen.ru/beebb091955c06fa68b3eb8afc0bae51656173f798a58PASbeebb091955c06fa68b3eb8afc0bae51656173f798a5f
188.114.97.1200 OK 5.5 kB URL User Request GET HTTP/3 ital-rentgen.ru/beebb091955c06fa68b3eb8afc0bae51656173f798a58PASbeebb091955c06fa68b3eb8afc0bae51656173f798a5f
IP 188.114.97.1:443
Certificate IssuerGoogle Trust Services LLC
Subjectital-rentgen.ru
FingerprintFB:84:B6:21:A8:1B:65:31:EF:87:E2:8C:C4:73:8C:80:F7:09:1C:E7
ValidityWed, 22 Nov 2023 06:28:13 GMT - Tue, 20 Feb 2024 06:28:12 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (5541), with no line terminators
Hash 06b7371f4931ed5382938f595f3c19b2
aa48ee58d81e756e1f390dbbad46b4a0b92cd0bf
fb1186240a27037a5204745b39fa7cb8ddf78c37e5127f2597c335a84667c03a
GET /beebb091955c06fa68b3eb8afc0bae51656173f798a58PASbeebb091955c06fa68b3eb8afc0bae51656173f798a5f HTTP/1.1
Host: ital-rentgen.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://ital-rentgen.ru/Mlori.maddock@ubs.com?__cf_chl_tk=28FerQuLhaFdOFv1zyiMiO0hevPXt8HPhTFxZxVYwak-1700885491-0-gaNycGzNC-U
DNT: 1
Connection: keep-alive
Cookie: cf_clearance=YB5lRcxy929pB1IgXkPfu1hw9838DiNX1nSEVn7B08g-1700885491-0-1-69b0ef05.7e78ddc4.3eb1b0e5-160.0.0; PHPSESSID=05859aac57d2d8f36739157416ab1c2d
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 25 Nov 2023 04:11:35 GMT
content-type: text/html; charset=UTF-8
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
vary: Accept-Encoding
x-turbo-charged-by: LiteSpeed
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=rRQs2iUEs9STGSBit4hHcWU2iBQ%2BeehwS51NdxmP%2Be1perSR7x7lqvdNSGZ8UP5J%2B4npCsL9Lggqo9q1P9mHQIR%2F%2BLac2HyRHLl1UoexBffnfBI%2BwUaRM4K5RRouGSvWfDY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 82b70c6bee3356ba-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
ital-rentgen.ru/jq/2cf22bf628de17365622a141606fe795656173f7a8c37
188.114.97.1200 OK 86 kB URL GET HTTP/3 ital-rentgen.ru/jq/2cf22bf628de17365622a141606fe795656173f7a8c37
IP 188.114.97.1:443
Requested by https://ital-rentgen.ru/beebb091955c06fa68b3eb8afc0bae51656173f798a58PASbeebb091955c06fa68b3eb8afc0bae51656173f798a5f
Certificate IssuerGoogle Trust Services LLC
Subjectital-rentgen.ru
FingerprintFB:84:B6:21:A8:1B:65:31:EF:87:E2:8C:C4:73:8C:80:F7:09:1C:E7
ValidityWed, 22 Nov 2023 06:28:13 GMT - Tue, 20 Feb 2024 06:28:12 GMT
File type ASCII text, with very long lines (32065)
Hash 2f6b11a7e914718e0290410e85366fe9
69bb69e25ca7d5ef0935317584e6153f3fd9a88c
05b85d96f41fff14d8f608dad03ab71e2c1017c2da0914d7c59291bad7a54f8e
GET /jq/2cf22bf628de17365622a141606fe795656173f7a8c37 HTTP/1.1
Host: ital-rentgen.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ital-rentgen.ru/beebb091955c06fa68b3eb8afc0bae51656173f798a58PASbeebb091955c06fa68b3eb8afc0bae51656173f798a5f
Cookie: cf_clearance=YB5lRcxy929pB1IgXkPfu1hw9838DiNX1nSEVn7B08g-1700885491-0-1-69b0ef05.7e78ddc4.3eb1b0e5-160.0.0; PHPSESSID=05859aac57d2d8f36739157416ab1c2d
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 25 Nov 2023 04:11:35 GMT
content-type: application/javascript
cache-control: public, max-age=604800
expires: Sat, 02 Dec 2023 04:11:35 GMT
last-modified: Wed, 22 Nov 2023 13:40:14 GMT
vary: Accept-Encoding
x-turbo-charged-by: LiteSpeed
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=K0pKVYMq%2Bzu7GDl1sqAtd3foWx8IbQEF5GqwN5cRQfKAJTFnhfJUHmeNFPxXIuq2I%2BI3uzp49NoMUgJtz%2BNp6w1xcV4pdlVS27MgEuGqXGGWFtbIiEOYAsKDcfSF838mMdU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 82b70c6cde8f56ba-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
unpkg.com/axios@1.6.2/dist/axios.min.js
104.16.124.175200 OK 34 kB URL GET HTTP/2 unpkg.com/axios@1.6.2/dist/axios.min.js
IP 104.16.124.175:443
Requested by https://ital-rentgen.ru/beebb091955c06fa68b3eb8afc0bae51656173f798a58PASbeebb091955c06fa68b3eb8afc0bae51656173f798a5f
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintF7:B6:41:CA:15:FD:D1:0C:27:39:55:5D:C5:CE:3F:1C:A6:BB:9D:6F
ValidityTue, 02 May 2023 00:00:00 GMT - Wed, 01 May 2024 23:59:59 GMT
File type ASCII text, with very long lines (33582)
Hash a68c57e04fd79331988c16fc3585405d
413c97b8c8ba0be18c36a65a5be940239c5956c2
550f26d03776c62d33e90b8028c6b4e2e7d1301c6ff769cff94592a93df71c68
GET /axios@1.6.2/dist/axios.min.js HTTP/1.1
Host: unpkg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://ital-rentgen.ru/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 25 Nov 2023 04:11:35 GMT
content-type: application/javascript; charset=utf-8
access-control-allow-origin: *
cache-control: public, max-age=31536000
last-modified: Sat, 26 Oct 1985 08:15:00 GMT
etag: W/"8355-QTyXuMi6C+GMNqZaW+lAI5xZVsI"
via: 1.1 fly.io
fly-request-id: 01HF7RVXXG61JE74MTPHYQMGA9-arn
cf-cache-status: HIT
age: 891226
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 82b70c6d1a765694-OSL
content-encoding: br
X-Firefox-Spdy: h2
ital-rentgen.ru/2
188.114.97.1200 OK 37 kB IP 188.114.97.1:443
Requested by https://ital-rentgen.ru/beebb091955c06fa68b3eb8afc0bae51656173f798a58PASbeebb091955c06fa68b3eb8afc0bae51656173f798a5f
Certificate IssuerGoogle Trust Services LLC
Subjectital-rentgen.ru
FingerprintFB:84:B6:21:A8:1B:65:31:EF:87:E2:8C:C4:73:8C:80:F7:09:1C:E7
ValidityWed, 22 Nov 2023 06:28:13 GMT - Tue, 20 Feb 2024 06:28:12 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /2 HTTP/1.1
Host: ital-rentgen.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ital-rentgen.ru/beebb091955c06fa68b3eb8afc0bae51656173f798a58PASbeebb091955c06fa68b3eb8afc0bae51656173f798a5f
Cookie: cf_clearance=YB5lRcxy929pB1IgXkPfu1hw9838DiNX1nSEVn7B08g-1700885491-0-1-69b0ef05.7e78ddc4.3eb1b0e5-160.0.0; PHPSESSID=05859aac57d2d8f36739157416ab1c2d
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 25 Nov 2023 04:11:36 GMT
content-type: text/html; charset=UTF-8
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
vary: Accept-Encoding
x-turbo-charged-by: LiteSpeed
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=X99lMq5UM3qWSmJKEQMElgNayAISzsqDVUzh8TLci7ySKPjYeqTCGKazn7Rme8m0RaDyDl8AJfX%2FsTn%2FiGYacvHplZ3Zkr6CwnJZJL%2BA4blw1V8nkhq9fTEevCcS2TIQbVg%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 82b70c6e2f1c56ba-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
ital-rentgen.ru/favicon.ico
188.114.97.1404 Not Found 1.2 kB URL GET HTTP/3 ital-rentgen.ru/favicon.ico
IP 188.114.97.1:443
Requested by https://ital-rentgen.ru/beebb091955c06fa68b3eb8afc0bae51656173f798a58PASbeebb091955c06fa68b3eb8afc0bae51656173f798a5f
Certificate IssuerGoogle Trust Services LLC
Subjectital-rentgen.ru
FingerprintFB:84:B6:21:A8:1B:65:31:EF:87:E2:8C:C4:73:8C:80:F7:09:1C:E7
ValidityWed, 22 Nov 2023 06:28:13 GMT - Tue, 20 Feb 2024 06:28:12 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (1276), with no line terminators
Hash 24b426fea67958554911ff4c943fdfe4
b92889146d4c1bbddccabe58ca15c814ea066f72
335fd88e127ff1b19e6c5af3c801186182f064e4c6747b9a76a0b3988553716c
GET /favicon.ico HTTP/1.1
Host: ital-rentgen.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ital-rentgen.ru/beebb091955c06fa68b3eb8afc0bae51656173f798a58PASbeebb091955c06fa68b3eb8afc0bae51656173f798a5f
Cookie: cf_clearance=YB5lRcxy929pB1IgXkPfu1hw9838DiNX1nSEVn7B08g-1700885491-0-1-69b0ef05.7e78ddc4.3eb1b0e5-160.0.0; PHPSESSID=05859aac57d2d8f36739157416ab1c2d
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 404 Not Found
date: Sat, 25 Nov 2023 04:11:36 GMT
content-type: text/html
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
pragma: no-cache
x-turbo-charged-by: LiteSpeed
cf-cache-status: BYPASS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=YSCAqCfJ2ieZVp4dRQ0g8q3v%2BYucGjxfPnpEz%2F100IWYeIIkHGcFfXcilnCrQsarMs5wx2RAQdPje1kdPVr%2FGi5GcEOheOXwGoeHEAOYjAX%2B9yPTayQb78YrMl%2BPeLWS7N4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82b70c6e8f4f56ba-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
ital-rentgen.ru/Mlori.maddock@ubs.com
188.114.97.1302 Found 5.5 kB URL User Request POST HTTP/3 ital-rentgen.ru/Mlori.maddock@ubs.com
IP 188.114.97.1:443
Certificate IssuerGoogle Trust Services LLC
Subjectital-rentgen.ru
FingerprintFB:84:B6:21:A8:1B:65:31:EF:87:E2:8C:C4:73:8C:80:F7:09:1C:E7
ValidityWed, 22 Nov 2023 06:28:13 GMT - Tue, 20 Feb 2024 06:28:12 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert urlquery phishing Phishing - Microsoft Outlook
POST /Mlori.maddock@ubs.com HTTP/1.1
Host: ital-rentgen.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://ital-rentgen.ru/Mlori.maddock@ubs.com?__cf_chl_tk=28FerQuLhaFdOFv1zyiMiO0hevPXt8HPhTFxZxVYwak-1700885491-0-gaNycGzNC-U
Content-Type: application/x-www-form-urlencoded
Content-Length: 3446
Origin: https://ital-rentgen.ru
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 302 Found
date: Sat, 25 Nov 2023 04:11:35 GMT
content-type: text/html; charset=UTF-8
location: ./beebb091955c06fa68b3eb8afc0bae51656173f798a58PASbeebb091955c06fa68b3eb8afc0bae51656173f798a5f
set-cookie: cf_clearance=YB5lRcxy929pB1IgXkPfu1hw9838DiNX1nSEVn7B08g-1700885491-0-1-69b0ef05.7e78ddc4.3eb1b0e5-160.0.0; path=/; expires=Sun, 24-Nov-24 04:11:35 GMT; domain=.ital-rentgen.ru; HttpOnly; Secure; SameSite=None
PHPSESSID=05859aac57d2d8f36739157416ab1c2d; path=/; secure
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-cache, no-store, must-revalidate, max-age=0
pragma: no-cache
x-turbo-charged-by: LiteSpeed
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=p6VYE8D4zcwTn48Hbfzmu6Qemw4uDcdLztKOZq3jOtWbzrk00jT9XKPhb2wynHWSVUHu2fDqUE69U%2B904DfO63pWLLmkMbFARGuiiPxBIifpbratB0jvjsJeryPSv1LgC9U%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 82b70c687c3d56ba-OSL
alt-svc: h3=":443"; ma=86400
ital-rentgen.ru/APP-VC5UYR/2cf22bf628de17365622a141606fe795656173f80c3b3
188.114.97.1200 OK 105 kB URL GET HTTP/3 ital-rentgen.ru/APP-VC5UYR/2cf22bf628de17365622a141606fe795656173f80c3b3
IP 188.114.97.1:443
Requested by https://ital-rentgen.ru/beebb091955c06fa68b3eb8afc0bae51656173f798a58PASbeebb091955c06fa68b3eb8afc0bae51656173f798a5f
Certificate IssuerGoogle Trust Services LLC
Subjectital-rentgen.ru
FingerprintFB:84:B6:21:A8:1B:65:31:EF:87:E2:8C:C4:73:8C:80:F7:09:1C:E7
ValidityWed, 22 Nov 2023 06:28:13 GMT - Tue, 20 Feb 2024 06:28:12 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Size 105 kB (105369 bytes)
Hash 8e6b0f88563f9c33f78bce65cf287df7
ef7765cd2a7d64ed27dd7344702597aff6f8c397
a7057bebfff43e7281ca31da00d40bd88c8d02d1576b9c45891dd56a3853269a
GET /APP-VC5UYR/2cf22bf628de17365622a141606fe795656173f80c3b3 HTTP/1.1
Host: ital-rentgen.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ital-rentgen.ru/beebb091955c06fa68b3eb8afc0bae51656173f798a58PASbeebb091955c06fa68b3eb8afc0bae51656173f798a5f
Cookie: cf_clearance=YB5lRcxy929pB1IgXkPfu1hw9838DiNX1nSEVn7B08g-1700885491-0-1-69b0ef05.7e78ddc4.3eb1b0e5-160.0.0; PHPSESSID=05859aac57d2d8f36739157416ab1c2d
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 25 Nov 2023 04:11:36 GMT
content-type: text/css
cache-control: public, max-age=604800
expires: Sat, 02 Dec 2023 04:11:36 GMT
last-modified: Wed, 22 Nov 2023 13:40:14 GMT
vary: Accept-Encoding
x-turbo-charged-by: LiteSpeed
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=pwi%2BLtaRgbc0AVz33gTJC3%2FbKpz54GWwo%2BWiHzcIu9H76kNa7rOFtiKb44pPcloMQY3pO2my2W3%2FoOZUbVTcZMnTpPAJ5oGmn6fqLnW81yBXvjOXVeT7b7IogSswNaalRt4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 82b70c6eaf5f56ba-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
ital-rentgen.ru/jm/2cf22bf628de17365622a141606fe795656173f7a8c3f
188.114.97.1200 OK 6.4 kB URL GET HTTP/3 ital-rentgen.ru/jm/2cf22bf628de17365622a141606fe795656173f7a8c3f
IP 188.114.97.1:443
Requested by https://ital-rentgen.ru/beebb091955c06fa68b3eb8afc0bae51656173f798a58PASbeebb091955c06fa68b3eb8afc0bae51656173f798a5f
Certificate IssuerGoogle Trust Services LLC
Subjectital-rentgen.ru
FingerprintFB:84:B6:21:A8:1B:65:31:EF:87:E2:8C:C4:73:8C:80:F7:09:1C:E7
ValidityWed, 22 Nov 2023 06:28:13 GMT - Tue, 20 Feb 2024 06:28:12 GMT
File type ASCII text, with very long lines (6376), with no line terminators
Hash 1e07a363eef4b40ab4a38d5e4371da5c
7351be2a378540a016aec380141927221a45f19b
01ba4de80540981fd34be681b5c1fce8b205e341ac6fa73a61817068ff566510
GET /jm/2cf22bf628de17365622a141606fe795656173f7a8c3f HTTP/1.1
Host: ital-rentgen.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ital-rentgen.ru/beebb091955c06fa68b3eb8afc0bae51656173f798a58PASbeebb091955c06fa68b3eb8afc0bae51656173f798a5f
Cookie: cf_clearance=YB5lRcxy929pB1IgXkPfu1hw9838DiNX1nSEVn7B08g-1700885491-0-1-69b0ef05.7e78ddc4.3eb1b0e5-160.0.0; PHPSESSID=05859aac57d2d8f36739157416ab1c2d
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 25 Nov 2023 04:11:35 GMT
content-type: application/javascript
cache-control: public, max-age=604800
expires: Sat, 02 Dec 2023 04:11:35 GMT
last-modified: Wed, 22 Nov 2023 13:40:14 GMT
vary: Accept-Encoding
x-turbo-charged-by: LiteSpeed
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=uzaWiFg12KzUyc6Ex9vk8LdER%2BUPV8nPiIzkrr8L5CPUXtXftZAgddJcLjSyDVQUOgkJkfmIdQ4764Sx4IFc%2BHJxunWX8skdC0LWPLZEDbD%2FYrZ1o%2F0bJQ5oFdT%2FexQKal4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 82b70c6cde9156ba-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
unpkg.com/axios/dist/axios.min.js
104.16.124.175302 Found 34 kB URL GET HTTP/2 unpkg.com/axios/dist/axios.min.js
IP 104.16.124.175:443
Requested by https://ital-rentgen.ru/beebb091955c06fa68b3eb8afc0bae51656173f798a58PASbeebb091955c06fa68b3eb8afc0bae51656173f798a5f
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintF7:B6:41:CA:15:FD:D1:0C:27:39:55:5D:C5:CE:3F:1C:A6:BB:9D:6F
ValidityTue, 02 May 2023 00:00:00 GMT - Wed, 01 May 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /axios/dist/axios.min.js HTTP/1.1
Host: unpkg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ital-rentgen.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
date: Sat, 25 Nov 2023 04:11:35 GMT
content-type: text/plain; charset=utf-8
access-control-allow-origin: *
cache-control: public, s-maxage=600, max-age=60
location: /axios@1.6.2/dist/axios.min.js
vary: Accept, Accept-Encoding
via: 1.1 fly.io
fly-request-id: 01HG2AK5NSMRDGMJVDJTW20ZD7-arn
cf-cache-status: HIT
age: 223
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 82b70c6cfa655694-OSL
X-Firefox-Spdy: h2
ital-rentgen.ru/o/2cf22bf628de17365622a141606fe795656173f80c3e7
188.114.97.1200 OK 3.7 kB URL GET HTTP/3 ital-rentgen.ru/o/2cf22bf628de17365622a141606fe795656173f80c3e7
IP 188.114.97.1:443
Requested by https://ital-rentgen.ru/beebb091955c06fa68b3eb8afc0bae51656173f798a58PASbeebb091955c06fa68b3eb8afc0bae51656173f798a5f
Certificate IssuerGoogle Trust Services LLC
Subjectital-rentgen.ru
FingerprintFB:84:B6:21:A8:1B:65:31:EF:87:E2:8C:C4:73:8C:80:F7:09:1C:E7
ValidityWed, 22 Nov 2023 06:28:13 GMT - Tue, 20 Feb 2024 06:28:12 GMT
File type SVG Scalable Vector Graphics image\012- HTML document, ASCII text, with very long lines (3695), with no line terminators
Hash d633a913e6f3b1f45774b9874dfc85e0
5ba1344048578062c93cfddfdf8458477eaca476
c1fbfbd9a81fc4d9c9539a65bdfb4c6738926b8d4681b0346706196413e92714
GET /o/2cf22bf628de17365622a141606fe795656173f80c3e7 HTTP/1.1
Host: ital-rentgen.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ital-rentgen.ru/beebb091955c06fa68b3eb8afc0bae51656173f798a58PASbeebb091955c06fa68b3eb8afc0bae51656173f798a5f
Cookie: cf_clearance=YB5lRcxy929pB1IgXkPfu1hw9838DiNX1nSEVn7B08g-1700885491-0-1-69b0ef05.7e78ddc4.3eb1b0e5-160.0.0; PHPSESSID=05859aac57d2d8f36739157416ab1c2d
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 25 Nov 2023 04:11:36 GMT
content-type: image/svg+xml
cache-control: public, max-age=604800
expires: Sat, 02 Dec 2023 04:11:36 GMT
last-modified: Wed, 22 Nov 2023 13:40:14 GMT
vary: Accept-Encoding
x-turbo-charged-by: LiteSpeed
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=jfwd1Z0lJQ53GmkO2yUkZGKmohIynjl%2FRiMreVXe0fni1VRtfJc%2FX4F8Ffd4bxZL5ZLhG%2Bvo%2Bazjf6WEmCxPPwI6dMDwagmmai%2BbmdrSK%2FbuwkslE6dt9S7TvjiCmD5Hby0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 82b70c6e9f5456ba-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
ital-rentgen.ru/Mlori.maddock@ubs.com
188.114.97.1403 Forbidden 6.3 kB URL User Request GET HTTP/2 ital-rentgen.ru/Mlori.maddock@ubs.com
IP 188.114.97.1:443
Certificate IssuerGoogle Trust Services LLC
Subjectital-rentgen.ru
FingerprintFB:84:B6:21:A8:1B:65:31:EF:87:E2:8C:C4:73:8C:80:F7:09:1C:E7
ValidityWed, 22 Nov 2023 06:28:13 GMT - Tue, 20 Feb 2024 06:28:12 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (6352), with no line terminators
Hash 50bc26b2b0c74ec22838354b91171798
c0528bf03b583639bbec97280428299b434a23d6
e62c6ddbbe4094d9313d619f87d97883610fc3fbabe158bea1149a4965153336
Analyzer Verdict Alert urlquery phishing Phishing - Microsoft Outlook
GET /Mlori.maddock@ubs.com HTTP/1.1
Host: ital-rentgen.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 403 Forbidden
date: Sat, 25 Nov 2023 04:11:31 GMT
content-type: text/html; charset=UTF-8
cross-origin-embedder-policy: require-corp
cross-origin-opener-policy: same-origin
cross-origin-resource-policy: same-origin
origin-agent-cluster: ?1
permissions-policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()
referrer-policy: same-origin
x-frame-options: SAMEORIGIN
cf-mitigated: challenge
cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
expires: Thu, 01 Jan 1970 00:00:01 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=7qaYHAVPZlOyJjLAPgbrSs1iAVxGlneJgW1LaN%2FqXF71xhDsK8CMbaAR2rwe6osi4NfGRO0OQq%2BNlDRe5eoeiZeSxnx58LhPh%2BO8sjJjVlVAIRWRdzGgtt5ndoEsUpBtjX0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82b70c54ef620b55-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
ital-rentgen.ru/api-as1f?email=lori.maddock@ubs.com&data=logo
188.114.97.1200 OK 168 B URL GET HTTP/3 ital-rentgen.ru/api-as1f?email=lori.maddock@ubs.com&data=logo
IP 188.114.97.1:443
Requested by https://ital-rentgen.ru/beebb091955c06fa68b3eb8afc0bae51656173f798a58PASbeebb091955c06fa68b3eb8afc0bae51656173f798a5f
Certificate IssuerGoogle Trust Services LLC
Subjectital-rentgen.ru
FingerprintFB:84:B6:21:A8:1B:65:31:EF:87:E2:8C:C4:73:8C:80:F7:09:1C:E7
ValidityWed, 22 Nov 2023 06:28:13 GMT - Tue, 20 Feb 2024 06:28:12 GMT
File type troff or preprocessor input, ASCII text, with no line terminators
Hash 44d1a4aefc8752c3d687a25120fbb957
7be53d9f05a60c560c780430f469c7ffe2b5bbcf
7e4f4dac951de36548def7d1a7617518119cc57f8d32780cf281993e18ea2725
GET /api-as1f?email=lori.maddock@ubs.com&data=logo HTTP/1.1
Host: ital-rentgen.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ital-rentgen.ru/beebb091955c06fa68b3eb8afc0bae51656173f798a58PASbeebb091955c06fa68b3eb8afc0bae51656173f798a5f
Cookie: cf_clearance=YB5lRcxy929pB1IgXkPfu1hw9838DiNX1nSEVn7B08g-1700885491-0-1-69b0ef05.7e78ddc4.3eb1b0e5-160.0.0; PHPSESSID=05859aac57d2d8f36739157416ab1c2d
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 25 Nov 2023 04:11:36 GMT
content-type: text/html; charset=UTF-8
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
vary: Accept-Encoding
x-turbo-charged-by: LiteSpeed
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=gzFLBrzla3a5XnUtRg4RJMcxzlCNzXOU8bWt9K5gNbjphlQyUInkNZPcRXBLpy5xlJw5kdhDdIyMiASWfKhK0oCM23hCYeYKkz7uf84XzD7RxZZggAKyN3Ki0sBCrGjC8QE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 82b70c6e9f5756ba-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
ital-rentgen.ru/ic/2cf22bf628de17365622a141606fe795656173f80c3ac
188.114.97.1200 OK 17 kB URL GET HTTP/3 ital-rentgen.ru/ic/2cf22bf628de17365622a141606fe795656173f80c3ac
IP 188.114.97.1:443
Requested by https://ital-rentgen.ru/beebb091955c06fa68b3eb8afc0bae51656173f798a58PASbeebb091955c06fa68b3eb8afc0bae51656173f798a5f
Certificate IssuerGoogle Trust Services LLC
Subjectital-rentgen.ru
FingerprintFB:84:B6:21:A8:1B:65:31:EF:87:E2:8C:C4:73:8C:80:F7:09:1C:E7
ValidityWed, 22 Nov 2023 06:28:13 GMT - Tue, 20 Feb 2024 06:28:12 GMT
File type MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors\012- data
Hash 12e3dac858061d088023b2bd48e2fa96
e08ce1a144eceae0c3c2ea7a9d6fbc5658f24ce5
90cdaf487716184e4034000935c605d1633926d348116d198f355a98b8c6cd21
GET /ic/2cf22bf628de17365622a141606fe795656173f80c3ac HTTP/1.1
Host: ital-rentgen.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ital-rentgen.ru/beebb091955c06fa68b3eb8afc0bae51656173f798a58PASbeebb091955c06fa68b3eb8afc0bae51656173f798a5f
Cookie: cf_clearance=YB5lRcxy929pB1IgXkPfu1hw9838DiNX1nSEVn7B08g-1700885491-0-1-69b0ef05.7e78ddc4.3eb1b0e5-160.0.0; PHPSESSID=05859aac57d2d8f36739157416ab1c2d
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 25 Nov 2023 04:11:36 GMT
content-type: image/x-icon
cache-control: public, max-age=604800
expires: Sat, 02 Dec 2023 04:11:36 GMT
last-modified: Wed, 22 Nov 2023 13:40:14 GMT
vary: Accept-Encoding
x-turbo-charged-by: LiteSpeed
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=uOoS5Ai4I4yjhCH8K6C0rOLHYDx%2B4ci8pus5Exa6iTWbBn7EwIjiu9GjdaeXUdYzYn0dRloz%2B5irDdTON2xw%2BX4DbkYl8kBLiuoRfXjCB6MqOO60fiu8aq1n5QthqtCykok%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 82b70c71486b56ba-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400