pennfosterglobal.com/urm.aspx?source=P052604&url=//logelapierrebrute%E3%80%82org/readme/pdqYCpdqYC/raSn/Y2JpcmRAZWhlLmhlYWx0aA==//logelapierrebrute%E3%80%82org/readme/pdqYCpdqYC/raSn/Y2JpcmRAZWhlLmhlYWx0aA==
104.18.109.50 319 B URL pennfosterglobal.com/urm.aspx?source=P052604&url=//logelapierrebrute%E3%80%82org/readme/pdqYCpdqYC/raSn/Y2JpcmRAZWhlLmhlYWx0aA==//logelapierrebrute%E3%80%82org/readme/pdqYCpdqYC/raSn/Y2JpcmRAZWhlLmhlYWx0aA==
IP 104.18.109.50:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash a34a69cdb0db1a74105d018fd445da76
dc8f9da525f7c4f3a6ad81d7cadbc6798cbba052
de380f43429af6d3bb06d630d697acb390856a0df81063875b89e9878d1e1388
GET /urm.aspx?source=P052604&url=//logelapierrebrute%E3%80%82org/readme/pdqYCpdqYC/raSn/Y2JpcmRAZWhlLmhlYWx0aA==//logelapierrebrute%E3%80%82org/readme/pdqYCpdqYC/raSn/Y2JpcmRAZWhlLmhlYWx0aA== HTTP/1.1
Host: pennfosterglobal.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
Date: Fri, 01 Dec 2023 15:56:55 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: private
Location: //logelapierrebrute%E3%80%82org/readme/pdqYCpdqYC/raSn/Y2JpcmRAZWhlLmhlYWx0aA==//logelapierrebrute%E3%80%82org/readme/pdqYCpdqYC/raSn/Y2JpcmRAZWhlLmhlYWx0aA==
Set-Cookie: mktad=P052604; expires=Sun, 31-Dec-2023 15:56:55 GMT; path=/
X-AspNet-Version: 2.0.50727
X-Powered-By: ASP.NET
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 82ec85da3c0e56c7-OSL
logelapierrebrute.org/readme/pdqYCpdqYC/raSn/Y2JpcmRAZWhlLmhlYWx0aA==//logelapierrebrute%E3%80%82org/readme/pdqYCpdqYC/raSn/Y2JpcmRAZWhlLmhlYWx0aA==
92.205.7.199 1 B URL logelapierrebrute.org/readme/pdqYCpdqYC/raSn/Y2JpcmRAZWhlLmhlYWx0aA==//logelapierrebrute%E3%80%82org/readme/pdqYCpdqYC/raSn/Y2JpcmRAZWhlLmhlYWx0aA==
IP 92.205.7.199:0
ASN #21499 Host Europe GmbH
File type very short file (no magic)
Hash eccbc87e4b5ce2fe28308fd9f2a7baf3
77de68daecd823babbb58edb1c8e14d7106e83bb
4e07408562bedb8b60ce05c1decfe3ad16b72230967de01f640b7e4729b49fce
Analyzer Verdict Alert urlquery phishing Phishing - Microsoft Outlook
GET /readme/pdqYCpdqYC/raSn/Y2JpcmRAZWhlLmhlYWx0aA==//logelapierrebrute%E3%80%82org/readme/pdqYCpdqYC/raSn/Y2JpcmRAZWhlLmhlYWx0aA== HTTP/1.1
Host: logelapierrebrute.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
x-powered-by: PHP/7.4.33
refresh: 0;url=https://agnieszkawesecka.pl/online-microsoft_com-48736743377809387436457-microsoft_8476365435473648347765347346837493467354634576726326362456354653263726372635625327637_%D8%AD%D8%B5%20%D8%AD%D8%A8%D9%88%D8%A8%20%D8%A7%D9%84%D8%A3%D8%B1%D8%B2%20%D8%A7%D9%84%D8%AD%D8%A7%D9%85%D8%B6%D8%A9-rr%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7F%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7.html?s=cbird@ehe.health
vary: Accept-Encoding
content-encoding: br
content-length: 1
content-type: text/html; charset=UTF-8
date: Fri, 01 Dec 2023 15:56:55 GMT
server: Apache
X-Firefox-Spdy: h2
ajax.googleapis.com/ajax/libs/jquery/3.6.0/jquery.min.js
216.58.211.10200 OK 31 kB URL GET HTTP/2 ajax.googleapis.com/ajax/libs/jquery/3.6.0/jquery.min.js
IP 216.58.211.10:443
Requested by https://agnieszkawesecka.pl/online-microsoft_com-48736743377809387436457-microsoft_8476365435473648347765347346837493467354634576726326362456354653263726372635625327637_%D8%AD%D8%B5%20%D8%AD%D8%A8%D9%88%D8%A8%20%D8%A7%D9%84%D8%A3%D8%B1%D8%B2%20%D8%A7%D9%84%D8%AD%D8%A7%D9%85%D8%B6%D8%A9-rr%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7F%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7.html?s=cbird@ehe.health
Certificate IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
FingerprintCC:96:E0:52:E0:9B:EA:A9:A0:F8:88:9A:90:20:11:47:61:00:3C:42
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type ASCII text, with very long lines (65447)
Hash 8fb8fee4fcc3cc86ff6c724154c49c42
b82d238d4e31fdf618bae8ac11a6c812c03dd0d4
ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e
GET /ajax/libs/jquery/3.6.0/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://agnieszkawesecka.pl/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 31017
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 01 Dec 2023 05:46:05 GMT
expires: Sat, 30 Nov 2024 05:46:05 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
last-modified: Wed, 10 Mar 2021 14:28:09 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
age: 36651
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/jln6b/0x4AAAAAAANitG7_q4LMVK7c/auto/normal
104.17.2.184200 OK 24 kB URL GET HTTP/3 challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/jln6b/0x4AAAAAAANitG7_q4LMVK7c/auto/normal
IP 104.17.2.184:443
Requested by https://agnieszkawesecka.pl/online-microsoft_com-48736743377809387436457-microsoft_8476365435473648347765347346837493467354634576726326362456354653263726372635625327637_%D8%AD%D8%B5%20%D8%AD%D8%A8%D9%88%D8%A8%20%D8%A7%D9%84%D8%A3%D8%B1%D8%B2%20%D8%A7%D9%84%D8%AD%D8%A7%D9%85%D8%B6%D8%A9-rr%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7F%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7.html?s=cbird@ehe.health
Certificate IssuerCloudflare, Inc.
Subjectchallenges.cloudflare.com
Fingerprint5F:E4:AA:8C:2E:24:D2:B1:69:9D:13:28:31:5C:65:FA:97:2A:E9:6E
ValidityFri, 18 Aug 2023 00:00:00 GMT - Sat, 17 Aug 2024 23:59:59 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (40091)
Hash 2be13e7dde309f110437830d6b5363e4
b3e45baacf206e58854353da25c030c474641d25
1383d23a9edf55593f053c4105964ecf1ff0e1ae4671ae4229eaaaf6952bf7d4
GET /cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/jln6b/0x4AAAAAAANitG7_q4LMVK7c/auto/normal HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://agnieszkawesecka.pl/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 01 Dec 2023 15:56:56 GMT
content-type: text/html; charset=UTF-8
cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
content-security-policy: frame-src https://challenges.cloudflare.com/ blob:; base-uri 'self'
cross-origin-embedder-policy: require-corp
cross-origin-opener-policy: same-origin
cross-origin-resource-policy: cross-origin
document-policy: js-profiling
origin-agent-cluster: ?1
permissions-policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()
referrer-policy: same-origin
server: cloudflare
cf-ray: 82ec85e44b005696-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/flow/ov1/59092578:1701443338:ogC0wzjMAkkz1SYvN6wXGs9-3BsgzTXvCQOq6gmR-DQ/82ec85e44b005696/8551075e343b335
104.17.2.184 30 kB URL challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/flow/ov1/59092578:1701443338:ogC0wzjMAkkz1SYvN6wXGs9-3BsgzTXvCQOq6gmR-DQ/82ec85e44b005696/8551075e343b335
IP 104.17.2.184:0
Certificate IssuerCloudflare, Inc.
Subjectchallenges.cloudflare.com
Fingerprint5F:E4:AA:8C:2E:24:D2:B1:69:9D:13:28:31:5C:65:FA:97:2A:E9:6E
ValidityFri, 18 Aug 2023 00:00:00 GMT - Sat, 17 Aug 2024 23:59:59 GMT
File type ASCII text, with very long lines (3436), with no line terminators
Hash 3da451cb4cebff39eb202f378b918aea
21a5c31fc03e6ede3898d2da3c08c358a312cd34
a07ab8f0c9ddce3e99d7db96de10542c025b64d3d53772e4b58ae5df40350159
POST /cdn-cgi/challenge-platform/h/b/flow/ov1/59092578:1701443338:ogC0wzjMAkkz1SYvN6wXGs9-3BsgzTXvCQOq6gmR-DQ/82ec85e44b005696/8551075e343b335 HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/jln6b/0x4AAAAAAANitG7_q4LMVK7c/auto/normal
Content-type: application/x-www-form-urlencoded
CF-Challenge: 8551075e343b335
Content-Length: 25219
Origin: https://challenges.cloudflare.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 01 Dec 2023 15:56:58 GMT
content-type: text/html; charset=UTF-8
cf-chl-out: uxps7bOiEefo2eFBAMf7fqg72snQQRZWzPW6ejKoCbpuAcagwR2FZHYBGo/4RLH4gvtx2mU6L1SGkP6cVtltgzyXVnuPvs9Cnhtms4TYulEebh0M0zjJhmEWYp08euAw$58b1wZoY2wQFqSoSmYTXVg==
cf-chl-out-s: Yx2t3wwW5jU0y+Qn3IJJGkkT2duGATyLXhafjlnwULeyG9j6WCrmw4V/qpLVUaYzsaI2CQSCWq7vfFwvnCDlQUPDyIMCiFBn4Iiee5oMMIzN3wFKNoLgw2dyDPAF9+QJ17I6NVUhxefBYebm/bU2IAqYVPtKQg0TApZclW/XkYmAQ/BpuS/A1k79mn+43lvU87Nx7JQ0nk1b41ADUClpZsvs1IwtlemAhY8e4MfxxWExE6g3yapwp2pdRVAVlaNsoSg5bNdIM0nLii2seWx/J52uI6aubJC5I30JoLAOq5Ntxk9xiiPt0AiUBFjetrYs7Xxg0mlRLXsJf2MRUC8u4g==$pGKGIT/z4UMBu/UgT7K1oA==
server: cloudflare
cf-ray: 82ec85f299c05696-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
segy.shop/api/validate
152.89.246.205204 No Content 0 B IP 152.89.246.205:443
Requested by https://agnieszkawesecka.pl/online-microsoft_com-48736743377809387436457-microsoft_8476365435473648347765347346837493467354634576726326362456354653263726372635625327637_%D8%AD%D8%B5%20%D8%AD%D8%A8%D9%88%D8%A8%20%D8%A7%D9%84%D8%A3%D8%B1%D8%B2%20%D8%A7%D9%84%D8%AD%D8%A7%D9%85%D8%B6%D8%A9-rr%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7F%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7.html?s=cbird@ehe.health
Certificate IssuerLet's Encrypt
Subjectsegy.shop
FingerprintEB:95:7A:90:22:94:A6:8D:13:EE:A6:CE:16:62:13:B3:B8:E5:58:43
ValidityThu, 30 Nov 2023 09:25:10 GMT - Wed, 28 Feb 2024 09:25:09 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /api/validate HTTP/1.1
Host: segy.shop
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://agnieszkawesecka.pl/
Origin: https://agnieszkawesecka.pl
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 204 No Content
Server: nginx/1.18.0 (Ubuntu)
Content-Type: text/html; charset=UTF-8
Connection: keep-alive
Cache-Control: no-cache, private
Date: Fri, 01 Dec 2023 15:57:02 GMT
Access-Control-Allow-Origin: *
Vary: Access-Control-Request-Method, Access-Control-Request-Headers
Access-Control-Allow-Methods: POST
Access-Control-Allow-Headers: content-type
Access-Control-Max-Age: 0
segy.shop/api/validate
152.89.246.205204 No Content 16 kB IP 152.89.246.205:443
Requested by https://agnieszkawesecka.pl/online-microsoft_com-48736743377809387436457-microsoft_8476365435473648347765347346837493467354634576726326362456354653263726372635625327637_%D8%AD%D8%B5%20%D8%AD%D8%A8%D9%88%D8%A8%20%D8%A7%D9%84%D8%A3%D8%B1%D8%B2%20%D8%A7%D9%84%D8%AD%D8%A7%D9%85%D8%B6%D8%A9-rr%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7F%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7.html?s=cbird@ehe.health
Certificate IssuerLet's Encrypt
Subjectsegy.shop
FingerprintEB:95:7A:90:22:94:A6:8D:13:EE:A6:CE:16:62:13:B3:B8:E5:58:43
ValidityThu, 30 Nov 2023 09:25:10 GMT - Wed, 28 Feb 2024 09:25:09 GMT
File type JSON data\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (15762), with no line terminators
Hash 74cf89cb3517cbc731bb861aaf6acc80
e5f9181210142c919852a9b4aa05712dfab68aa4
e9cd9e908395618cb51509588c7c5171ca98615ba9d64f1df4dc05a00a01ddde
POST /api/validate HTTP/1.1
Host: segy.shop
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 73
Origin: https://agnieszkawesecka.pl
DNT: 1
Connection: keep-alive
Referer: https://agnieszkawesecka.pl/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Content-Type: application/json
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: no-cache, private
Date: Fri, 01 Dec 2023 15:57:02 GMT
X-RateLimit-Limit: 60
X-RateLimit-Remaining: 55
Access-Control-Allow-Origin: *
cdnjs.cloudflare.com/ajax/libs/jquery/3.6.0/jquery.min.js
104.17.25.14200 OK 28 kB URL GET HTTP/3 cdnjs.cloudflare.com/ajax/libs/jquery/3.6.0/jquery.min.js
IP 104.17.25.14:443
Requested by https://agnieszkawesecka.pl/online-microsoft_com-48736743377809387436457-microsoft_8476365435473648347765347346837493467354634576726326362456354653263726372635625327637_%D8%AD%D8%B5%20%D8%AD%D8%A8%D9%88%D8%A8%20%D8%A7%D9%84%D8%A3%D8%B1%D8%B2%20%D8%A7%D9%84%D8%AD%D8%A7%D9%85%D8%B6%D8%A9-rr%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7F%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7.html?s=cbird@ehe.health
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint7A:EA:B9:09:71:70:6C:87:C9:D3:82:74:8A:7B:B4:60:E5:40:2D:8D
ValidityMon, 03 Jul 2023 00:00:00 GMT - Tue, 02 Jul 2024 23:59:59 GMT
File type ASCII text, with very long lines (65447)
Hash 8fb8fee4fcc3cc86ff6c724154c49c42
b82d238d4e31fdf618bae8ac11a6c812c03dd0d4
ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e
GET /ajax/libs/jquery/3.6.0/jquery.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://agnieszkawesecka.pl/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 01 Dec 2023 15:57:03 GMT
content-type: application/javascript; charset=utf-8
content-length: 27938
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "603e8adc-15d9d"
last-modified: Tue, 02 Mar 2021 18:58:36 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 553921
expires: Wed, 20 Nov 2024 15:57:03 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2BGtGN4Pk13D0yVqRt%2Be%2Fnx6CEHxP%2F6AmdhdisnTRXUtmI39qCgkPVeaABcBjfyxs%2BfZvjBh2kGKbx3ULNckhC9rhaG0wwcjbkJH9jPYTzodbO7fxLylU5HdQQuBwaJpy9oPWTXEf"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 82ec8611b99e5689-OSL
alt-svc: h3=":443"; ma=86400
aadcdn.msauth.net/ests/2.1/content/cdnbundles/converged.v2.login.min_ziytf8dzt9eg1s6-ohhleg2.css
13.107.246.53200 OK 20 kB URL GET HTTP/2 aadcdn.msauth.net/ests/2.1/content/cdnbundles/converged.v2.login.min_ziytf8dzt9eg1s6-ohhleg2.css
IP 13.107.246.53:443
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://agnieszkawesecka.pl/online-microsoft_com-48736743377809387436457-microsoft_8476365435473648347765347346837493467354634576726326362456354653263726372635625327637_%D8%AD%D8%B5%20%D8%AD%D8%A8%D9%88%D8%A8%20%D8%A7%D9%84%D8%A3%D8%B1%D8%B2%20%D8%A7%D9%84%D8%AD%D8%A7%D9%85%D8%B6%D8%A9-rr%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7F%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7.html?s=cbird@ehe.health
Certificate IssuerDigiCert Inc
Subjectaadcdn.msauth.net
Fingerprint88:95:0C:FA:9D:33:AA:BF:A4:FD:9D:84:A6:E8:02:06:58:50:AD:8C
ValiditySun, 29 Oct 2023 00:00:00 GMT - Tue, 29 Oct 2024 23:59:59 GMT
File type ASCII text, with very long lines (61177)
Hash ce26137fc0d9b7d7a0d52ebe3a186512
b9d7fb3fe7d08f46c2d1153bb47b13809375c663
1304c5090f063c677a5b3720fe7b97ef4d9ea102e2bdd837ce399df6057fe385
GET /ests/2.1/content/cdnbundles/converged.v2.login.min_ziytf8dzt9eg1s6-ohhleg2.css HTTP/1.1
Host: aadcdn.msauth.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://agnieszkawesecka.pl
DNT: 1
Connection: keep-alive
Referer: https://agnieszkawesecka.pl/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
cache-control: public, max-age=31536000
content-length: 19953
content-type: text/css
content-encoding: gzip
content-md5: xg2DER+s52egaL6bUXi4hw==
last-modified: Mon, 18 Apr 2022 21:18:26 GMT
etag: 0x8DA2180FA29F5AF
x-cache: TCP_HIT
x-ms-request-id: afb3f6b4-c01e-005b-42f9-207157000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
access-control-allow-origin: *
x-azure-ref-originshield: 0UPtkZQAAAACj77pr2uOuRaMWZfUTcK7vQU1TMDRFREdFMTgxMQAzOWExMmY3ZS04OTlmLTQ2Y2YtYTZkMC0yNGJiYmEyN2Q5NTY=
x-azure-ref: 0TwJqZQAAAABctCJMaMm5SJOZs1VunIcmU1ZHMjBFREdFMDUyMAAzOWExMmY3ZS04OTlmLTQ2Y2YtYTZkMC0yNGJiYmEyN2Q5NTY=
date: Fri, 01 Dec 2023 15:57:02 GMT
X-Firefox-Spdy: h2
aadcdn.msauthimages.net/dbd5a2dd-cnzcazipy2m3ky-7gbfw7pdw42rfkpslhyknicnjcbo/logintenantbranding/0/bannerlogo?ts=637786342983562296
152.199.23.72200 OK 6.2 kB URL GET HTTP/2 aadcdn.msauthimages.net/dbd5a2dd-cnzcazipy2m3ky-7gbfw7pdw42rfkpslhyknicnjcbo/logintenantbranding/0/bannerlogo?ts=637786342983562296
IP 152.199.23.72:443
Requested by https://agnieszkawesecka.pl/online-microsoft_com-48736743377809387436457-microsoft_8476365435473648347765347346837493467354634576726326362456354653263726372635625327637_%D8%AD%D8%B5%20%D8%AD%D8%A8%D9%88%D8%A8%20%D8%A7%D9%84%D8%A3%D8%B1%D8%B2%20%D8%A7%D9%84%D8%AD%D8%A7%D9%85%D8%B6%D8%A9-rr%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7F%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7.html?s=cbird@ehe.health
Certificate IssuerMicrosoft Corporation
Subjectaadcdn.msauthimages.net
Fingerprint6B:EB:AC:06:FC:06:82:11:17:1C:6B:72:7D:B5:95:2D:CF:E7:A3:5D
ValidityWed, 08 Mar 2023 11:16:34 GMT - Sat, 02 Mar 2024 11:16:34 GMT
File type PNG image data, 876 x 210, 8-bit/color RGBA, non-interlaced\012- data
Hash a86c0870521ec2ba774e36dfcc29ea56
b0d343e847c0ac3c8fb9f75846b84ec1cea73df8
901529969f10d2977208340ff687c7df3b17faa6bab84234b4ffd71b0f1f4c77
GET /dbd5a2dd-cnzcazipy2m3ky-7gbfw7pdw42rfkpslhyknicnjcbo/logintenantbranding/0/bannerlogo?ts=637786342983562296 HTTP/1.1
Host: aadcdn.msauthimages.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://agnieszkawesecka.pl/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Length,Date,Transfer-Encoding
age: 21
cache-control: public, max-age=86400
content-md5: qGwIcFIewrp3TjbfzCnqVg==
content-type: image/*
date: Fri, 01 Dec 2023 15:57:03 GMT
etag: 0x8D9DF4CC03CED54
last-modified: Mon, 24 Jan 2022 15:18:18 GMT
server: ECAcc (ska/F6AE)
x-cache: HIT
x-ms-blob-type: BlockBlob
x-ms-lease-status: unlocked
x-ms-request-id: 4c0c94ad-001e-001c-7f6e-241182000000
x-ms-version: 2009-09-19
content-length: 6183
X-Firefox-Spdy: h2
aadcdn.msauth.net/shared/1.0/content/images/arrow_left_a9cc2824ef3517b6c4160dcf8ff7d410.svg
13.107.246.53200 OK 276 B URL GET HTTP/2 aadcdn.msauth.net/shared/1.0/content/images/arrow_left_a9cc2824ef3517b6c4160dcf8ff7d410.svg
IP 13.107.246.53:443
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://agnieszkawesecka.pl/online-microsoft_com-48736743377809387436457-microsoft_8476365435473648347765347346837493467354634576726326362456354653263726372635625327637_%D8%AD%D8%B5%20%D8%AD%D8%A8%D9%88%D8%A8%20%D8%A7%D9%84%D8%A3%D8%B1%D8%B2%20%D8%A7%D9%84%D8%AD%D8%A7%D9%85%D8%B6%D8%A9-rr%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7F%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7.html?s=cbird@ehe.health
Certificate IssuerDigiCert Inc
Subjectaadcdn.msauth.net
Fingerprint88:95:0C:FA:9D:33:AA:BF:A4:FD:9D:84:A6:E8:02:06:58:50:AD:8C
ValiditySun, 29 Oct 2023 00:00:00 GMT - Tue, 29 Oct 2024 23:59:59 GMT
File type SVG Scalable Vector Graphics image\012- HTML document, ASCII text, with very long lines (513), with no line terminators
Hash a9cc2824ef3517b6c4160dcf8ff7d410
8db9aebad84ca6e4225bfdd2458ff3821cc4f064
34f9db946e89f031a80dfca7b16b2b686469c9886441261ae70a44da1dfa2d58
GET /shared/1.0/content/images/arrow_left_a9cc2824ef3517b6c4160dcf8ff7d410.svg HTTP/1.1
Host: aadcdn.msauth.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://agnieszkawesecka.pl/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31536000
content-length: 276
content-type: image/svg+xml
content-encoding: gzip
content-md5: TjUQkZ0p0Y7rbj6LJofS9Q==
last-modified: Fri, 17 Jan 2020 19:28:34 GMT
etag: 0x8D79B8371B97A82
x-cache: TCP_HIT
x-ms-request-id: 4d8ee911-101e-0036-6042-0fec6e000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
access-control-allow-origin: *
x-azure-ref-originshield: 0SpZJZQAAAAAmBLZXYFfTSIPxFEjCT7FDQU1TMDRFREdFMTkxNQAzOWExMmY3ZS04OTlmLTQ2Y2YtYTZkMC0yNGJiYmEyN2Q5NTY=
x-azure-ref: 0TwJqZQAAAAAcs4MNxNPTR5FKg99qEwxRU1ZHMjBFREdFMDUxMgAzOWExMmY3ZS04OTlmLTQ2Y2YtYTZkMC0yNGJiYmEyN2Q5NTY=
date: Fri, 01 Dec 2023 15:57:02 GMT
X-Firefox-Spdy: h2
aadcdn.msauthimages.net/dbd5a2dd-cnzcazipy2m3ky-7gbfw7pdw42rfkpslhyknicnjcbo/logintenantbranding/0/illustration?ts=637786342976062993
152.199.23.72200 OK 18 kB URL GET HTTP/2 aadcdn.msauthimages.net/dbd5a2dd-cnzcazipy2m3ky-7gbfw7pdw42rfkpslhyknicnjcbo/logintenantbranding/0/illustration?ts=637786342976062993
IP 152.199.23.72:443
Requested by https://agnieszkawesecka.pl/online-microsoft_com-48736743377809387436457-microsoft_8476365435473648347765347346837493467354634576726326362456354653263726372635625327637_%D8%AD%D8%B5%20%D8%AD%D8%A8%D9%88%D8%A8%20%D8%A7%D9%84%D8%A3%D8%B1%D8%B2%20%D8%A7%D9%84%D8%AD%D8%A7%D9%85%D8%B6%D8%A9-rr%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7F%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7.html?s=cbird@ehe.health
Certificate IssuerMicrosoft Corporation
Subjectaadcdn.msauthimages.net
Fingerprint6B:EB:AC:06:FC:06:82:11:17:1C:6B:72:7D:B5:95:2D:CF:E7:A3:5D
ValidityWed, 08 Mar 2023 11:16:34 GMT - Sat, 02 Mar 2024 11:16:34 GMT
File type PNG image data, 1426 x 935, 8-bit/color RGBA, non-interlaced\012- data
Hash b22f82af344450329748bbbd4b5820d6
c5fb99496cf765d1e7dcb5734787cbaf70071719
1419504bc720acaf6de13dcfffb693f3ec51550c986bf30410e883e494ef8b6b
GET /dbd5a2dd-cnzcazipy2m3ky-7gbfw7pdw42rfkpslhyknicnjcbo/logintenantbranding/0/illustration?ts=637786342976062993 HTTP/1.1
Host: aadcdn.msauthimages.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://agnieszkawesecka.pl/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
age: 2
cache-control: public, max-age=86400
content-md5: si+CrzREUDKXSLu9S1gg1g==
content-type: image/*
date: Fri, 01 Dec 2023 15:57:03 GMT
etag: 0x8D9DF4CBFC51008
last-modified: Mon, 24 Jan 2022 15:18:17 GMT
server: ECAcc (ska/F6B3)
x-cache: HIT
x-ms-blob-type: BlockBlob
x-ms-lease-status: unlocked
x-ms-request-id: 3250bde1-a01e-0048-256f-245ed5000000
x-ms-version: 2009-09-19
content-length: 18307
X-Firefox-Spdy: h2
aadcdn.msftauth.net/shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico
152.199.23.37200 OK 17 kB URL GET HTTP/2 aadcdn.msftauth.net/shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico
IP 152.199.23.37:443
Requested by https://agnieszkawesecka.pl/online-microsoft_com-48736743377809387436457-microsoft_8476365435473648347765347346837493467354634576726326362456354653263726372635625327637_%D8%AD%D8%B5%20%D8%AD%D8%A8%D9%88%D8%A8%20%D8%A7%D9%84%D8%A3%D8%B1%D8%B2%20%D8%A7%D9%84%D8%AD%D8%A7%D9%85%D8%B6%D8%A9-rr%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7F%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7.html?s=cbird@ehe.health
Certificate IssuerDigiCert Inc
Subjectaadcdn.msftauth.net
Fingerprint99:06:D8:1E:EC:BF:DB:78:DF:F4:89:A3:ED:23:07:3D:79:F1:16:D6
ValidityTue, 31 Jan 2023 00:00:00 GMT - Wed, 31 Jan 2024 23:59:59 GMT
File type MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors\012- data
Hash 12e3dac858061d088023b2bd48e2fa96
e08ce1a144eceae0c3c2ea7a9d6fbc5658f24ce5
90cdaf487716184e4034000935c605d1633926d348116d198f355a98b8c6cd21
GET /shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico HTTP/1.1
Host: aadcdn.msftauth.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://agnieszkawesecka.pl/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Length,Date,Transfer-Encoding
age: 15945715
cache-control: public, max-age=31536000
content-md5: EuPayFgGHQiAI7K9SOL6lg==
content-type: image/x-icon
date: Fri, 01 Dec 2023 15:57:03 GMT
etag: 0x8D8731240E548EB
last-modified: Sun, 18 Oct 2020 03:02:30 GMT
server: ECAcc (ska/F738)
x-cache: HIT
x-ms-blob-type: BlockBlob
x-ms-lease-status: unlocked
x-ms-request-id: 003b7cc6-501e-0067-4768-9344ba000000
x-ms-version: 2009-09-19
content-length: 17174
X-Firefox-Spdy: h2
challenges.cloudflare.com/turnstile/v0/api.js?onload=onloadTurnstileCallback
104.17.2.184302 Found 34 kB URL GET HTTP/2 challenges.cloudflare.com/turnstile/v0/api.js?onload=onloadTurnstileCallback
IP 104.17.2.184:443
Requested by https://agnieszkawesecka.pl/online-microsoft_com-48736743377809387436457-microsoft_8476365435473648347765347346837493467354634576726326362456354653263726372635625327637_%D8%AD%D8%B5%20%D8%AD%D8%A8%D9%88%D8%A8%20%D8%A7%D9%84%D8%A3%D8%B1%D8%B2%20%D8%A7%D9%84%D8%AD%D8%A7%D9%85%D8%B6%D8%A9-rr%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7F%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7.html?s=cbird@ehe.health
Certificate IssuerCloudflare, Inc.
Subjectchallenges.cloudflare.com
Fingerprint5F:E4:AA:8C:2E:24:D2:B1:69:9D:13:28:31:5C:65:FA:97:2A:E9:6E
ValidityFri, 18 Aug 2023 00:00:00 GMT - Sat, 17 Aug 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /turnstile/v0/api.js?onload=onloadTurnstileCallback HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://agnieszkawesecka.pl/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
date: Fri, 01 Dec 2023 15:56:56 GMT
access-control-allow-origin: *
vary: accept-encoding
cache-control: max-age=300, public
location: /turnstile/v0/b/56d3063b/api.js?onload=onloadTurnstileCallback
server: cloudflare
cf-ray: 82ec85e32de30b69-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
challenges.cloudflare.com/turnstile/v0/b/56d3063b/api.js?onload=onloadTurnstileCallback
104.17.2.184200 OK 34 kB URL GET HTTP/2 challenges.cloudflare.com/turnstile/v0/b/56d3063b/api.js?onload=onloadTurnstileCallback
IP 104.17.2.184:443
Requested by https://agnieszkawesecka.pl/online-microsoft_com-48736743377809387436457-microsoft_8476365435473648347765347346837493467354634576726326362456354653263726372635625327637_%D8%AD%D8%B5%20%D8%AD%D8%A8%D9%88%D8%A8%20%D8%A7%D9%84%D8%A3%D8%B1%D8%B2%20%D8%A7%D9%84%D8%AD%D8%A7%D9%85%D8%B6%D8%A9-rr%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7F%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7.html?s=cbird@ehe.health
Certificate IssuerCloudflare, Inc.
Subjectchallenges.cloudflare.com
Fingerprint5F:E4:AA:8C:2E:24:D2:B1:69:9D:13:28:31:5C:65:FA:97:2A:E9:6E
ValidityFri, 18 Aug 2023 00:00:00 GMT - Sat, 17 Aug 2024 23:59:59 GMT
File type ASCII text, with very long lines (33875)
Hash 8c90f391245a994ae95e644a587c8626
7bfc99336571d0ccfe38f9e1d18cb26b4adfc316
acbe221d9bb71e85d0a3b52a7a9d44ee4669ab664186b32d0c737a2be62681e7
GET /turnstile/v0/b/56d3063b/api.js?onload=onloadTurnstileCallback HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://agnieszkawesecka.pl/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 01 Dec 2023 15:56:56 GMT
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
cache-control: max-age=31536000
vary: Accept-Encoding
server: cloudflare
cf-ray: 82ec85e35e080b69-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
segy.shop/cap.php
152.89.246.205200 OK 31 kB IP 152.89.246.205:443
Requested by https://agnieszkawesecka.pl/online-microsoft_com-48736743377809387436457-microsoft_8476365435473648347765347346837493467354634576726326362456354653263726372635625327637_%D8%AD%D8%B5%20%D8%AD%D8%A8%D9%88%D8%A8%20%D8%A7%D9%84%D8%A3%D8%B1%D8%B2%20%D8%A7%D9%84%D8%AD%D8%A7%D9%85%D8%B6%D8%A9-rr%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7F%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7.html?s=cbird@ehe.health
Certificate IssuerLet's Encrypt
Subjectsegy.shop
FingerprintEB:95:7A:90:22:94:A6:8D:13:EE:A6:CE:16:62:13:B3:B8:E5:58:43
ValidityThu, 30 Nov 2023 09:25:10 GMT - Wed, 28 Feb 2024 09:25:09 GMT
File type JSON data\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (30978), with no line terminators
Hash b2ed6808a3fbf0230a5e35a36ffbf0c4
1c66b9f280290364382cf571fe9e9769432fb4fb
317a8bee521641671a95648e5009caae07b5411c2853cb5e0b56f1273c3ac7cc
POST /cap.php HTTP/1.1
Host: segy.shop
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
Content-Length: 647
Origin: https://agnieszkawesecka.pl
DNT: 1
Connection: keep-alive
Referer: https://agnieszkawesecka.pl/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Fri, 01 Dec 2023 15:56:58 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin: *
Content-Encoding: gzip
agnieszkawesecka.pl/online-microsoft_com-48736743377809387436457-microsoft_8476365435473648347765347346837493467354634576726326362456354653263726372635625327637_%D8%AD%D8%B5%20%D8%AD%D8%A8%D9%88%D8%A8%20%D8%A7%D9%84%D8%A3%D8%B1%D8%B2%20%D8%A7%D9%84%D8%AD%D8%A7%D9%85%D8%B6%D8%A9-rr%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7F%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7.html?s=cbird@ehe.health
188.114.96.1200 OK 3.6 kB URL User Request GET HTTP/2 agnieszkawesecka.pl/online-microsoft_com-48736743377809387436457-microsoft_8476365435473648347765347346837493467354634576726326362456354653263726372635625327637_%D8%AD%D8%B5%20%D8%AD%D8%A8%D9%88%D8%A8%20%D8%A7%D9%84%D8%A3%D8%B1%D8%B2%20%D8%A7%D9%84%D8%AD%D8%A7%D9%85%D8%B6%D8%A9-rr%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7F%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7.html?s=cbird@ehe.health
IP 188.114.96.1:443
Certificate IssuerLet's Encrypt
Subjectagnieszkawesecka.pl
FingerprintED:DD:EC:0A:35:7D:02:85:E0:91:DD:95:17:23:1F:83:E6:17:49:00
ValidityThu, 23 Nov 2023 03:13:02 GMT - Wed, 21 Feb 2024 03:13:01 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (3829), with no line terminators
Hash 7efef4e41633eccc6df384582f242076
533b8d65ca4a92018bef0d06513c18397cf51435
153a54ca1be72a8a2508ad7ac2c1060cc94f59617f2b94773e339b852e3f07ca
Analyzer Verdict Alert urlquery phishing Phishing - Microsoft Outlook
GET /online-microsoft_com-48736743377809387436457-microsoft_8476365435473648347765347346837493467354634576726326362456354653263726372635625327637_%D8%AD%D8%B5%20%D8%AD%D8%A8%D9%88%D8%A8%20%D8%A7%D9%84%D8%A3%D8%B1%D8%B2%20%D8%A7%D9%84%D8%AD%D8%A7%D9%85%D8%B6%D8%A9-rr%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7F%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7.html?s=cbird@ehe.health HTTP/1.1
Host: agnieszkawesecka.pl
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 01 Dec 2023 15:56:56 GMT
content-type: text/html
last-modified: Thu, 30 Nov 2023 21:19:15 GMT
vary: Accept-Encoding
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=aIclAOlbhgomSr9xxejkrN0bOUU7iZNJBSNwx4Ho%2BFSQ9XOfsTmROWJTWzIguzItLHfn2FJERJUHT2EtE8LnrdyE%2FovmY53rGFkxuxyejPvUxe95jhVqXqJqfXCi9Lg4irvZm3p6"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 82ec85e1a9ddb500-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
agnieszkawesecka.pl/favicon.ico
188.114.96.1404 Not Found 27 kB URL GET HTTP/2 agnieszkawesecka.pl/favicon.ico
IP 188.114.96.1:443
Requested by https://agnieszkawesecka.pl/online-microsoft_com-48736743377809387436457-microsoft_8476365435473648347765347346837493467354634576726326362456354653263726372635625327637_%D8%AD%D8%B5%20%D8%AD%D8%A8%D9%88%D8%A8%20%D8%A7%D9%84%D8%A3%D8%B1%D8%B2%20%D8%A7%D9%84%D8%AD%D8%A7%D9%85%D8%B6%D8%A9-rr%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7F%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7.html?s=cbird@ehe.health
Certificate IssuerLet's Encrypt
Subjectagnieszkawesecka.pl
FingerprintED:DD:EC:0A:35:7D:02:85:E0:91:DD:95:17:23:1F:83:E6:17:49:00
ValidityThu, 23 Nov 2023 03:13:02 GMT - Wed, 21 Feb 2024 03:13:01 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (611)
Hash df3d48946e8d3f5a83608308edbb4b86
47b9c40c97abf2658df96b1c06109324e15e1a00
570a6631252b8a52df4de0e953ae77dbdf524dfc3637cda2840494a0d2b49499
GET /favicon.ico HTTP/1.1
Host: agnieszkawesecka.pl
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://agnieszkawesecka.pl/online-microsoft_com-48736743377809387436457-microsoft_8476365435473648347765347346837493467354634576726326362456354653263726372635625327637_%D8%AD%D8%B5%20%D8%AD%D8%A8%D9%88%D8%A8%20%D8%A7%D9%84%D8%A3%D8%B1%D8%B2%20%D8%A7%D9%84%D8%AD%D8%A7%D9%85%D8%B6%D8%A9-rr%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7F%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7.html?s=cbird@ehe.health
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 404 Not Found
date: Fri, 01 Dec 2023 15:56:56 GMT
content-type: text/html
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: HIT
age: 22
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=lx1Z1dmzORp32auBFBUeKhIdOFoZoZkteie4T9JjZJJSQVVIxKIXiw41Yq0POD374Xiyo2pXu08RUqxGg54i0tzBZmQNm%2F0RlCLY3gdY0Vkai1zvsibmN3dgjxef8d2wMyaaozE9"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 82ec85e42c9cb500-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2