| www.maultalk.com/url.php?to=https://www.natwaves.com/vFe5sFe5li2Pna_shuBM2anWO3vax0qwWO3WO3dbri2PdgFe5grWO3updy9s3RWO3BM2 |  104.21.2.200 | 302 Found | 0 B |
URL User Request GET HTTP/2www.maultalk.com/url.php?to=https://www.natwaves.com/vFe5sFe5li2Pna_shuBM2anWO3vax0qwWO3WO3dbri2PdgFe5grWO3updy9s3RWO3BM2 IP104.21.2.200:443
CertificateIssuerGoogle Trust Services LLC Subjectmaultalk.com FingerprintEA:F8:9A:3E:03:D1:9A:15:5B:99:0D:5F:5D:8A:68:F0:4E:3E:F4:FF ValidityThu, 18 Apr 2024 23:57:49 GMT - Wed, 17 Jul 2024 23:57:48 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /url.php?to=https://www.natwaves.com/vFe5sFe5li2Pna_shuBM2anWO3vax0qwWO3WO3dbri2PdgFe5grWO3updy9s3RWO3BM2 HTTP/1.1
Host: www.maultalk.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
date: Tue, 23 Apr 2024 13:41:32 GMT
content-type: text/html; charset=cp1251
content-length: 0
location: https://www.natwaves.com/vFe5sFe5li2Pna_shuBM2anWO3vax0qwWO3WO3dbri2PdgFe5grWO3updy9s3RWO3BM2
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=uIsAw6e9hwql%2BBU%2BIuh01SuOfWKtCN96lI5OCAaCZChylZXuUa9m%2Frvcuk%2BB7i1IFoFLwIyOJ4zAhKnfrbEl82YmPGKLQjigbecNc%2B4LyIbDFcFFWQjRPSpS710qbV3jM%2B2Z"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 878e458abb3f56c6-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| www.natwaves.com/vFe5sFe5li2Pna_shuBM2anWO3vax0qwWO3WO3dbri2PdgFe5grWO3updy9s3RWO3BM2 |  177.221.140.242 | 302 Found | 0 B |
URL User Request GET HTTP/1.1www.natwaves.com/vFe5sFe5li2Pna_shuBM2anWO3vax0qwWO3WO3dbri2PdgFe5grWO3updy9s3RWO3BM2 IP177.221.140.242:443 ASN#270014 GRUPO CG LIMITADA
CertificateIssuercPanel, Inc. Subjectnatwaves.com Fingerprint4A:74:DC:AF:00:EE:98:47:F9:7D:FF:48:6B:AE:62:80:7C:9C:43:FC ValiditySun, 03 Mar 2024 00:00:00 GMT - Sat, 01 Jun 2024 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /vFe5sFe5li2Pna_shuBM2anWO3vax0qwWO3WO3dbri2PdgFe5grWO3updy9s3RWO3BM2 HTTP/1.1
Host: www.natwaves.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
Date: Tue, 23 Apr 2024 13:41:32 GMT
Server: Apache
Location: https://sign-eu7-approve.oceaneerning.com/?organisation=woodbridgegroup.com&dse=dmVzZWxpbmFfc2h1bWFub3ZhQHdvb2RicmlkZ2Vncm91cC5jb20=#/common/authorize?document=0.99453122867017-0ff1-0.89605322102832&auth=10.087105980183513-0.63648942980752
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
|
|
| www.maultalk.com/ | 104.21.2.200 | | 178 B |
IP104.21.2.200:0
CertificateIssuerGoogle Trust Services LLC Subjectmaultalk.com FingerprintEA:F8:9A:3E:03:D1:9A:15:5B:99:0D:5F:5D:8A:68:F0:4E:3E:F4:FF ValidityThu, 18 Apr 2024 23:57:49 GMT - Wed, 17 Jul 2024 23:57:48 GMT
File typeHTML document, ASCII text, with CRLF line terminators Hashcd2e0e43980a00fb6a2742d3afd803b8 81ffbd1712afe8cdf138b570c0fc9934742c33c1 bd9df047d51943acc4bc6cf55d88edb5b6785a53337ee2a0f74dd521aedde87d
GET / HTTP/1.1
Host: www.maultalk.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 301 Moved Permanently
Date: Tue, 23 Apr 2024 13:41:34 GMT
Content-Type: text/html
Content-Length: 178
Connection: keep-alive
Location: https://www.maultalk.com/
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=9KpaYkRVFA1D3uXFsePrFK3cMHvdjsiZ9mexQxjFO5gW9kDTM1iGMdwU%2FidS1Hk7SOg8vPJFN3vbqidJwZHcWJEwUaoRhvVYjLzVgOySQcaefdJ%2FcWWl3%2Bt11ZyBZIXrprUY"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 878e459d3b8556a8-OSL
alt-svc: h2=":443"; ma=60
|
|
| www.maultalk.com/ | 104.21.2.200 | | 20 kB |
IP104.21.2.200:0
CertificateIssuerGoogle Trust Services LLC Subjectmaultalk.com FingerprintEA:F8:9A:3E:03:D1:9A:15:5B:99:0D:5F:5D:8A:68:F0:4E:3E:F4:FF ValidityThu, 18 Apr 2024 23:57:49 GMT - Wed, 17 Jul 2024 23:57:48 GMT
File typeHTML document, Non-ISO extended-ASCII text, with very long lines (631), with CRLF, LF, NEL line terminators Hash68e58bea85e151c2d1c6f9ee4a7fe6af 14de7f071a039ce45c03d31ae0653fc957c1dc86 04cac41e2bf94f3dd7624f3ff8e44d0b7a3f633eb3d5ef0fa76193e73b5f5db7
GET / HTTP/1.1
Host: www.maultalk.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 23 Apr 2024 13:41:35 GMT
content-type: text/html; charset=cp1251
set-cookie: PHPSESSID=4mqsprhampnu7qrt4na0m81074; path=/
session_id=6428d456cc348e5efaea87bbb81b6439; path=/; httponly
expires: Thu, 01 Jan 1970 00:00:01 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
last-modified: Tue, 23 Apr 2024 13:41:35GMT
vary: Accept-Encoding
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=F9bliOoERoplg1hgljHR7NtLxVmisNs1oREnM7Mn5Wvmi6z2kmw8rNnPxmirsTFC8sCk5QsxtEIsAYMIsTuYiOjJKBdhbwAHHIQAVg8eutFaJb8kkUYNX1l4H7ACEr9L9I7j"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 878e459dabbdb503-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| adfs.woodbridgegroup.com/adfs/ls/?login_hint=veselina_shumanova%40woodbridgegroup.com&client-request-id=dbb8c8bd-25b1-4dc6-9818-df113c359b6d&username=veselina_shumanova%40woodbridgegroup.com&wa=wsignin1.0&wtrealm=urn%3afederation%3aMicrosoftOnline&wctx=estsredirect%3d2%26estsrequest%3drQQIARAA42Kw0skoKSkottLXL8gvKknM0cvNTC7KL85PK8nPy8nMS9VLzs_Vyy9Kz0wBsYqEuAT2nthxe6PqMd8ZEvcFbUxn565iVCZshP4FRsYXjIyTmNTKUotTgaKJ8cUZpbmJeflliQ7l-fkpSUWZKemp6UX5pQUg9beYBP2L0j1TwovdUlNSixJLMvPzHjETqfkCi8ArFiYDjh8sjItYgS6extr-2pNvq1v_M__JZnfrGU6x6of5B4RFRSalh3oHFGX7G5maJ-VmuZYUlmsnu-S4OJWkuuT7pEcWFqYkWhjYmlgZTmATmsDGdIqN4QMbYwc7wyx2hgOcjAd4GX7wnbk09eDGzzPeeWwQYAAA0 |  52.228.102.24 | | 18 kB |
URL adfs.woodbridgegroup.com/adfs/ls/?login_hint=veselina_shumanova%40woodbridgegroup.com&client-request-id=dbb8c8bd-25b1-4dc6-9818-df113c359b6d&username=veselina_shumanova%40woodbridgegroup.com&wa=wsignin1.0&wtrealm=urn%3afederation%3aMicrosoftOnline&wctx=estsredirect%3d2%26estsrequest%3drQQIARAA42Kw0skoKSkottLXL8gvKknM0cvNTC7KL85PK8nPy8nMS9VLzs_Vyy9Kz0wBsYqEuAT2nthxe6PqMd8ZEvcFbUxn565iVCZshP4FRsYXjIyTmNTKUotTgaKJ8cUZpbmJeflliQ7l-fkpSUWZKemp6UX5pQUg9beYBP2L0j1TwovdUlNSixJLMvPzHjETqfkCi8ArFiYDjh8sjItYgS6extr-2pNvq1v_M__JZnfrGU6x6of5B4RFRSalh3oHFGX7G5maJ-VmuZYUlmsnu-S4OJWkuuT7pEcWFqYkWhjYmlgZTmATmsDGdIqN4QMbYwc7wyx2hgOcjAd4GX7wnbk09eDGzzPeeWwQYAAA0 IP52.228.102.24:0 ASN#8075 MICROSOFT-CORP-MSN-AS-BLOCK
File typeJavaScript source, ASCII text, with very long lines (799), with CRLF line terminators Hash08c96ae132be6f6f160ae51b0e7a5fc1 75e38fac1c04f0934e328b4a4bedd1293d3cf389 afe0656329318a51876299f47c86fa71bf5072fa88e18109e82b83b1a49da56c
GET /adfs/ls/?login_hint=veselina_shumanova%40woodbridgegroup.com&client-request-id=dbb8c8bd-25b1-4dc6-9818-df113c359b6d&username=veselina_shumanova%40woodbridgegroup.com&wa=wsignin1.0&wtrealm=urn%3afederation%3aMicrosoftOnline&wctx=estsredirect%3d2%26estsrequest%3drQQIARAA42Kw0skoKSkottLXL8gvKknM0cvNTC7KL85PK8nPy8nMS9VLzs_Vyy9Kz0wBsYqEuAT2nthxe6PqMd8ZEvcFbUxn565iVCZshP4FRsYXjIyTmNTKUotTgaKJ8cUZpbmJeflliQ7l-fkpSUWZKemp6UX5pQUg9beYBP2L0j1TwovdUlNSixJLMvPzHjETqfkCi8ArFiYDjh8sjItYgS6extr-2pNvq1v_M__JZnfrGU6x6of5B4RFRSalh3oHFGX7G5maJ-VmuZYUlmsnu-S4OJWkuuT7pEcWFqYkWhjYmlgZTmATmsDGdIqN4QMbYwc7wyx2hgOcjAd4GX7wnbk09eDGzzPeeWwQYAAA0 HTTP/1.1
Host: adfs.woodbridgegroup.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: no-cache,no-store
Pragma: no-cache
Content-Length: 18012
Content-Type: text/html; charset=utf-8
Expires: -1
Server: Microsoft-HTTPAPI/2.0 Microsoft-HTTPAPI/2.0
X-Frame-Options: DENY
Date: Tue, 23 Apr 2024 13:41:36 GMT
|
|
| adfs.woodbridgegroup.com/adfs/portal/css/style.css?id=0A13280A86E7DFA6949BD016EA848912FCAFC05E88CBEDF538AC325B27041205 | 52.228.102.24 | 200 OK | 8.1 kB |
URL GET HTTP/1.1adfs.woodbridgegroup.com/adfs/portal/css/style.css?id=0A13280A86E7DFA6949BD016EA848912FCAFC05E88CBEDF538AC325B27041205 IP52.228.102.24:443 ASN#8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested byhttps://adfs.woodbridgegroup.com/adfs/ls/?login_hint=veselina_shumanova%40woodbridgegroup.com&client-request-id=dbb8c8bd-25b1-4dc6-9818-df113c359b6d&username=veselina_shumanova%40woodbridgegroup.com&wa=wsignin1.0&wtrealm=urn%3afederation%3aMicrosoftOnline&wctx=estsredirect%3d2%26estsrequest%3drQQIARAA42Kw0skoKSkottLXL8gvKknM0cvNTC7KL85PK8nPy8nMS9VLzs_Vyy9Kz0wBsYqEuAT2nthxe6PqMd8ZEvcFbUxn565iVCZshP4FRsYXjIyTmNTKUotTgaKJ8cUZpbmJeflliQ7l-fkpSUWZKemp6UX5pQUg9beYBP2L0j1TwovdUlNSixJLMvPzHjETqfkCi8ArFiYDjh8sjItYgS6extr-2pNvq1v_M__JZnfrGU6x6of5B4RFRSalh3oHFGX7G5maJ-VmuZYUlmsnu-S4OJWkuuT7pEcWFqYkWhjYmlgZTmATmsDGdIqN4QMbYwc7wyx2hgOcjAd4GX7wnbk09eDGzzPeeWwQYAAA0# CertificateIssuerDigiCert Inc Subject*.woodbridgegroup.com FingerprintA7:1C:55:8E:60:23:83:B8:02:90:F0:DB:01:F1:76:E7:EF:71:42:05 ValidityThu, 19 Oct 2023 00:00:00 GMT - Sat, 05 Oct 2024 23:59:59 GMT
File typeUnicode text, UTF-8 text, with CRLF line terminators Hash97d3f4a129dab9dbd0a18296f5b833c2 dc72a652e8d9d60e291fcbedae5669a97fe25130 0a13280a86e7dfa6949bd016ea848912fcafc05e88cbedf538ac325b27041205
GET /adfs/portal/css/style.css?id=0A13280A86E7DFA6949BD016EA848912FCAFC05E88CBEDF538AC325B27041205 HTTP/1.1
Host: adfs.woodbridgegroup.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://adfs.woodbridgegroup.com/adfs/ls/?login_hint=veselina_shumanova%40woodbridgegroup.com&client-request-id=dbb8c8bd-25b1-4dc6-9818-df113c359b6d&username=veselina_shumanova%40woodbridgegroup.com&wa=wsignin1.0&wtrealm=urn%3afederation%3aMicrosoftOnline&wctx=estsredirect%3d2%26estsrequest%3drQQIARAA42Kw0skoKSkottLXL8gvKknM0cvNTC7KL85PK8nPy8nMS9VLzs_Vyy9Kz0wBsYqEuAT2nthxe6PqMd8ZEvcFbUxn565iVCZshP4FRsYXjIyTmNTKUotTgaKJ8cUZpbmJeflliQ7l-fkpSUWZKemp6UX5pQUg9beYBP2L0j1TwovdUlNSixJLMvPzHjETqfkCi8ArFiYDjh8sjItYgS6extr-2pNvq1v_M__JZnfrGU6x6of5B4RFRSalh3oHFGX7G5maJ-VmuZYUlmsnu-S4OJWkuuT7pEcWFqYkWhjYmlgZTmATmsDGdIqN4QMbYwc7wyx2hgOcjAd4GX7wnbk09eDGzzPeeWwQYAAA0
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Length: 8144
Content-Type: text/css
Expires: Thu, 23 May 2024 13:41:37 GMT
ETag: 0A13280A86E7DFA6949BD016EA848912FCAFC05E88CBEDF538AC325B27041205
Server: Microsoft-HTTPAPI/2.0 Microsoft-HTTPAPI/2.0
Date: Tue, 23 Apr 2024 13:41:36 GMT
|
|
| adfs.woodbridgegroup.com/adfs/portal/logo/logo.png?id=0D88FDDABC6568033194236A2C23F803D8C156A865F65C2A1553E9FEF467C280 | 52.228.102.24 | 200 OK | 18 kB |
URL GET HTTP/1.1adfs.woodbridgegroup.com/adfs/portal/logo/logo.png?id=0D88FDDABC6568033194236A2C23F803D8C156A865F65C2A1553E9FEF467C280 IP52.228.102.24:443 ASN#8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested byhttps://adfs.woodbridgegroup.com/adfs/ls/?login_hint=veselina_shumanova%40woodbridgegroup.com&client-request-id=dbb8c8bd-25b1-4dc6-9818-df113c359b6d&username=veselina_shumanova%40woodbridgegroup.com&wa=wsignin1.0&wtrealm=urn%3afederation%3aMicrosoftOnline&wctx=estsredirect%3d2%26estsrequest%3drQQIARAA42Kw0skoKSkottLXL8gvKknM0cvNTC7KL85PK8nPy8nMS9VLzs_Vyy9Kz0wBsYqEuAT2nthxe6PqMd8ZEvcFbUxn565iVCZshP4FRsYXjIyTmNTKUotTgaKJ8cUZpbmJeflliQ7l-fkpSUWZKemp6UX5pQUg9beYBP2L0j1TwovdUlNSixJLMvPzHjETqfkCi8ArFiYDjh8sjItYgS6extr-2pNvq1v_M__JZnfrGU6x6of5B4RFRSalh3oHFGX7G5maJ-VmuZYUlmsnu-S4OJWkuuT7pEcWFqYkWhjYmlgZTmATmsDGdIqN4QMbYwc7wyx2hgOcjAd4GX7wnbk09eDGzzPeeWwQYAAA0# CertificateIssuerDigiCert Inc Subject*.woodbridgegroup.com FingerprintA7:1C:55:8E:60:23:83:B8:02:90:F0:DB:01:F1:76:E7:EF:71:42:05 ValidityThu, 19 Oct 2023 00:00:00 GMT - Sat, 05 Oct 2024 23:59:59 GMT
File typePNG image data, 344 x 70, 8-bit/color RGBA, non-interlaced Hash17595f2494d35373174a7c9e24a5c796 88fe069489dfbb476ebbc8e124e1b5048196a56c 0d88fddabc6568033194236a2c23f803d8c156a865f65c2a1553e9fef467c280
GET /adfs/portal/logo/logo.png?id=0D88FDDABC6568033194236A2C23F803D8C156A865F65C2A1553E9FEF467C280 HTTP/1.1
Host: adfs.woodbridgegroup.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://adfs.woodbridgegroup.com/adfs/ls/?login_hint=veselina_shumanova%40woodbridgegroup.com&client-request-id=dbb8c8bd-25b1-4dc6-9818-df113c359b6d&username=veselina_shumanova%40woodbridgegroup.com&wa=wsignin1.0&wtrealm=urn%3afederation%3aMicrosoftOnline&wctx=estsredirect%3d2%26estsrequest%3drQQIARAA42Kw0skoKSkottLXL8gvKknM0cvNTC7KL85PK8nPy8nMS9VLzs_Vyy9Kz0wBsYqEuAT2nthxe6PqMd8ZEvcFbUxn565iVCZshP4FRsYXjIyTmNTKUotTgaKJ8cUZpbmJeflliQ7l-fkpSUWZKemp6UX5pQUg9beYBP2L0j1TwovdUlNSixJLMvPzHjETqfkCi8ArFiYDjh8sjItYgS6extr-2pNvq1v_M__JZnfrGU6x6of5B4RFRSalh3oHFGX7G5maJ-VmuZYUlmsnu-S4OJWkuuT7pEcWFqYkWhjYmlgZTmATmsDGdIqN4QMbYwc7wyx2hgOcjAd4GX7wnbk09eDGzzPeeWwQYAAA0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Length: 17958
Content-Type: image/png
Expires: Thu, 23 May 2024 13:41:37 GMT
ETag: 0D88FDDABC6568033194236A2C23F803D8C156A865F65C2A1553E9FEF467C280
Server: Microsoft-HTTPAPI/2.0 Microsoft-HTTPAPI/2.0
Date: Tue, 23 Apr 2024 13:41:36 GMT
|
|
| adfs.woodbridgegroup.com/favicon.ico | 52.228.102.24 | 404 Not Found | 315 B |
URL GET HTTP/1.1adfs.woodbridgegroup.com/favicon.ico IP52.228.102.24:443 ASN#8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested byhttps://adfs.woodbridgegroup.com/adfs/ls/?login_hint=veselina_shumanova%40woodbridgegroup.com&client-request-id=dbb8c8bd-25b1-4dc6-9818-df113c359b6d&username=veselina_shumanova%40woodbridgegroup.com&wa=wsignin1.0&wtrealm=urn%3afederation%3aMicrosoftOnline&wctx=estsredirect%3d2%26estsrequest%3drQQIARAA42Kw0skoKSkottLXL8gvKknM0cvNTC7KL85PK8nPy8nMS9VLzs_Vyy9Kz0wBsYqEuAT2nthxe6PqMd8ZEvcFbUxn565iVCZshP4FRsYXjIyTmNTKUotTgaKJ8cUZpbmJeflliQ7l-fkpSUWZKemp6UX5pQUg9beYBP2L0j1TwovdUlNSixJLMvPzHjETqfkCi8ArFiYDjh8sjItYgS6extr-2pNvq1v_M__JZnfrGU6x6of5B4RFRSalh3oHFGX7G5maJ-VmuZYUlmsnu-S4OJWkuuT7pEcWFqYkWhjYmlgZTmATmsDGdIqN4QMbYwc7wyx2hgOcjAd4GX7wnbk09eDGzzPeeWwQYAAA0# CertificateIssuerDigiCert Inc Subject*.woodbridgegroup.com FingerprintA7:1C:55:8E:60:23:83:B8:02:90:F0:DB:01:F1:76:E7:EF:71:42:05 ValidityThu, 19 Oct 2023 00:00:00 GMT - Sat, 05 Oct 2024 23:59:59 GMT
File typeHTML document, ASCII text, with CRLF line terminators Hash67932d4b695e1d6b19dfc2e3610761ff a66898b36c94c53766e66c1a7aaeb149447ec083 ce7127c38e30e92a021ed2bd09287713c6a923db9ffdb43f126e8965d777fbf0
GET /favicon.ico HTTP/1.1
Host: adfs.woodbridgegroup.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://adfs.woodbridgegroup.com/adfs/ls/?login_hint=veselina_shumanova%40woodbridgegroup.com&client-request-id=dbb8c8bd-25b1-4dc6-9818-df113c359b6d&username=veselina_shumanova%40woodbridgegroup.com&wa=wsignin1.0&wtrealm=urn%3afederation%3aMicrosoftOnline&wctx=estsredirect%3d2%26estsrequest%3drQQIARAA42Kw0skoKSkottLXL8gvKknM0cvNTC7KL85PK8nPy8nMS9VLzs_Vyy9Kz0wBsYqEuAT2nthxe6PqMd8ZEvcFbUxn565iVCZshP4FRsYXjIyTmNTKUotTgaKJ8cUZpbmJeflliQ7l-fkpSUWZKemp6UX5pQUg9beYBP2L0j1TwovdUlNSixJLMvPzHjETqfkCi8ArFiYDjh8sjItYgS6extr-2pNvq1v_M__JZnfrGU6x6of5B4RFRSalh3oHFGX7G5maJ-VmuZYUlmsnu-S4OJWkuuT7pEcWFqYkWhjYmlgZTmATmsDGdIqN4QMbYwc7wyx2hgOcjAd4GX7wnbk09eDGzzPeeWwQYAAA0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Content-Type: text/html; charset=us-ascii
Server: Microsoft-HTTPAPI/2.0
Date: Tue, 23 Apr 2024 13:41:36 GMT
Connection: close
Content-Length: 315
|
|
| adfs.woodbridgegroup.com/adfs/portal/illustration/illustration.jpg?id=2A8207395B729BD01F9B9AF322135D13B8A66623107CF8ABFFAC5B3775892E36 | 52.228.102.24 | 200 OK | 132 kB |
URL GET HTTP/1.1adfs.woodbridgegroup.com/adfs/portal/illustration/illustration.jpg?id=2A8207395B729BD01F9B9AF322135D13B8A66623107CF8ABFFAC5B3775892E36 IP52.228.102.24:443 ASN#8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested byhttps://adfs.woodbridgegroup.com/adfs/ls/?login_hint=veselina_shumanova%40woodbridgegroup.com&client-request-id=dbb8c8bd-25b1-4dc6-9818-df113c359b6d&username=veselina_shumanova%40woodbridgegroup.com&wa=wsignin1.0&wtrealm=urn%3afederation%3aMicrosoftOnline&wctx=estsredirect%3d2%26estsrequest%3drQQIARAA42Kw0skoKSkottLXL8gvKknM0cvNTC7KL85PK8nPy8nMS9VLzs_Vyy9Kz0wBsYqEuAT2nthxe6PqMd8ZEvcFbUxn565iVCZshP4FRsYXjIyTmNTKUotTgaKJ8cUZpbmJeflliQ7l-fkpSUWZKemp6UX5pQUg9beYBP2L0j1TwovdUlNSixJLMvPzHjETqfkCi8ArFiYDjh8sjItYgS6extr-2pNvq1v_M__JZnfrGU6x6of5B4RFRSalh3oHFGX7G5maJ-VmuZYUlmsnu-S4OJWkuuT7pEcWFqYkWhjYmlgZTmATmsDGdIqN4QMbYwc7wyx2hgOcjAd4GX7wnbk09eDGzzPeeWwQYAAA0# CertificateIssuerDigiCert Inc Subject*.woodbridgegroup.com FingerprintA7:1C:55:8E:60:23:83:B8:02:90:F0:DB:01:F1:76:E7:EF:71:42:05 ValidityThu, 19 Oct 2023 00:00:00 GMT - Sat, 05 Oct 2024 23:59:59 GMT
File typeJPEG image data, Exif standard: [TIFF image data, little-endian, direntries=9, manufacturer=SONY, model=ILCE-7RM2, orientation=upper-left, xresolution=137, yresolution=145, resolutionunit=2, software=Adobe Photoshop CC 2019 (Macintosh), datetime=2020:02:07 12:09:49], baseline, precision 8, 1080x1420, components 3 Size132 kB (132283 bytes) Hash7a7750344540c7836ee476435a93a3b7 e2ab394657baaf957aebfb2ba4b60bf417b6cf46 2a8207395b729bd01f9b9af322135d13b8a66623107cf8abffac5b3775892e36
GET /adfs/portal/illustration/illustration.jpg?id=2A8207395B729BD01F9B9AF322135D13B8A66623107CF8ABFFAC5B3775892E36 HTTP/1.1
Host: adfs.woodbridgegroup.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://adfs.woodbridgegroup.com/adfs/ls/?login_hint=veselina_shumanova%40woodbridgegroup.com&client-request-id=dbb8c8bd-25b1-4dc6-9818-df113c359b6d&username=veselina_shumanova%40woodbridgegroup.com&wa=wsignin1.0&wtrealm=urn%3afederation%3aMicrosoftOnline&wctx=estsredirect%3d2%26estsrequest%3drQQIARAA42Kw0skoKSkottLXL8gvKknM0cvNTC7KL85PK8nPy8nMS9VLzs_Vyy9Kz0wBsYqEuAT2nthxe6PqMd8ZEvcFbUxn565iVCZshP4FRsYXjIyTmNTKUotTgaKJ8cUZpbmJeflliQ7l-fkpSUWZKemp6UX5pQUg9beYBP2L0j1TwovdUlNSixJLMvPzHjETqfkCi8ArFiYDjh8sjItYgS6extr-2pNvq1v_M__JZnfrGU6x6of5B4RFRSalh3oHFGX7G5maJ-VmuZYUlmsnu-S4OJWkuuT7pEcWFqYkWhjYmlgZTmATmsDGdIqN4QMbYwc7wyx2hgOcjAd4GX7wnbk09eDGzzPeeWwQYAAA0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Length: 132283
Content-Type: image/jpg
Expires: Thu, 23 May 2024 13:41:37 GMT
ETag: 2A8207395B729BD01F9B9AF322135D13B8A66623107CF8ABFFAC5B3775892E36
Server: Microsoft-HTTPAPI/2.0 Microsoft-HTTPAPI/2.0
Date: Tue, 23 Apr 2024 13:41:36 GMT
|
|
| login.microsoftonline.com/?organisation=woodbridgegroup.com&username=veselina_shumanova%40woodbridgegroup.com |  20.190.181.3 | 302 Found | 18 kB |
URL User Request GET HTTP/2login.microsoftonline.com/?organisation=woodbridgegroup.com&username=veselina_shumanova%40woodbridgegroup.com IP20.190.181.3:443 ASN#8075 MICROSOFT-CORP-MSN-AS-BLOCK
CertificateIssuerDigiCert Inc Subjectstamp2.login.microsoftonline.com Fingerprint84:2D:29:9C:5B:D1:CB:50:04:C3:0E:28:1F:1C:78:96:64:FA:B8:64 ValiditySat, 16 Mar 2024 00:00:00 GMT - Sun, 16 Mar 2025 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /?organisation=woodbridgegroup.com&username=veselina_shumanova%40woodbridgegroup.com HTTP/1.1
Host: login.microsoftonline.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
cache-control: no-store, no-cache
pragma: no-cache
content-type: text/html; charset=utf-8
content-encoding: gzip
expires: -1
location: https://adfs.woodbridgegroup.com/adfs/ls/?login_hint=veselina_shumanova%40woodbridgegroup.com&client-request-id=dbb8c8bd-25b1-4dc6-9818-df113c359b6d&username=veselina_shumanova%40woodbridgegroup.com&wa=wsignin1.0&wtrealm=urn%3afederation%3aMicrosoftOnline&wctx=estsredirect%3d2%26estsrequest%3drQQIARAA42Kw0skoKSkottLXL8gvKknM0cvNTC7KL85PK8nPy8nMS9VLzs_Vyy9Kz0wBsYqEuAT2nthxe6PqMd8ZEvcFbUxn565iVCZshP4FRsYXjIyTmNTKUotTgaKJ8cUZpbmJeflliQ7l-fkpSUWZKemp6UX5pQUg9beYBP2L0j1TwovdUlNSixJLMvPzHjETqfkCi8ArFiYDjh8sjItYgS6extr-2pNvq1v_M__JZnfrGU6x6of5B4RFRSalh3oHFGX7G5maJ-VmuZYUlmsnu-S4OJWkuuT7pEcWFqYkWhjYmlgZTmATmsDGdIqN4QMbYwc7wyx2hgOcjAd4GX7wnbk09eDGzzPeeWwQYAAA0#
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains
x-content-type-options: nosniff
p3p: CP="DSP CUR OTPi IND OTRi ONL FIN"
x-ms-request-id: eb870596-0e49-46b5-8fe6-4f9336dd7f00
x-ms-ests-server: 2.1.17846.6 - WEULR1 ProdSlices
x-ms-srs: 1.P
referrer-policy: strict-origin-when-cross-origin
x-xss-protection: 0
set-cookie: buid=0.AR8AqzBRR7ViQUKp00fjfJvCFakreHKQRANPjYJWI3DqNWYBAAA.AQABGgEAAADnfolhJpSnRYB1SVj-Hgd8nfatSGtnJC_9ZbBuEgJjdETGy0dKJCOr3g8TdeQQSXzP7ik4f5CQt9VYzvDZKeQOKVuy7fbZ4yxaamKarRMm7eHsykiyD-NIi43yLAet6xwgAA; expires=Thu, 23-May-2024 13:41:35 GMT; path=/; secure; HttpOnly; SameSite=None
fpc=AjrxUbuCSehPtbSP3gKlknq4vjNwAQAAAI-xud0OAAAA; expires=Thu, 23-May-2024 13:41:36 GMT; path=/; secure; HttpOnly; SameSite=None
esctx=PAQABBwEAAADnfolhJpSnRYB1SVj-Hgd8C8Rw4yqA4a9cyAP44JkzlnslQ-wJWY28BPOkNaHw48r-oQhPG6JcLZuFUONarmHIRXZXRthddgteaF41eZgOMFCaDsyjwZQtPz5yvmBJgv3XwY-0VxySRDPUoncLA_TxplOSaGgGwFabFrqDfXkVwiLMIZCQjtS2aJHoFQGT0_EgAA; domain=.login.microsoftonline.com; path=/; secure; HttpOnly; SameSite=None
x-ms-gateway-slice=estsfd; path=/; secure; samesite=none; httponly
stsservicecookie=estsfd; path=/; secure; samesite=none; httponly
date: Tue, 23 Apr 2024 13:41:35 GMT
content-length: 606
X-Firefox-Spdy: h2
|
|
| adfs.woodbridgegroup.com/adfs/ls/?login_hint=veselina_shumanova%40woodbridgegroup.com&client-request-id=dbb8c8bd-25b1-4dc6-9818-df113c359b6d&username=veselina_shumanova%40woodbridgegroup.com&wa=wsignin1.0&wtrealm=urn%3afederation%3aMicrosoftOnline&wctx=estsredirect%3d2%26estsrequest%3drQQIARAA42Kw0skoKSkottLXL8gvKknM0cvNTC7KL85PK8nPy8nMS9VLzs_Vyy9Kz0wBsYqEuAT2nthxe6PqMd8ZEvcFbUxn565iVCZshP4FRsYXjIyTmNTKUotTgaKJ8cUZpbmJeflliQ7l-fkpSUWZKemp6UX5pQUg9beYBP2L0j1TwovdUlNSixJLMvPzHjETqfkCi8ArFiYDjh8sjItYgS6extr-2pNvq1v_M__JZnfrGU6x6of5B4RFRSalh3oHFGX7G5maJ-VmuZYUlmsnu-S4OJWkuuT7pEcWFqYkWhjYmlgZTmATmsDGdIqN4QMbYwc7wyx2hgOcjAd4GX7wnbk09eDGzzPeeWwQYAAA0 | 52.228.102.24 | 200 OK | 18 kB |
URL User Request GET HTTP/1.1adfs.woodbridgegroup.com/adfs/ls/?login_hint=veselina_shumanova%40woodbridgegroup.com&client-request-id=dbb8c8bd-25b1-4dc6-9818-df113c359b6d&username=veselina_shumanova%40woodbridgegroup.com&wa=wsignin1.0&wtrealm=urn%3afederation%3aMicrosoftOnline&wctx=estsredirect%3d2%26estsrequest%3drQQIARAA42Kw0skoKSkottLXL8gvKknM0cvNTC7KL85PK8nPy8nMS9VLzs_Vyy9Kz0wBsYqEuAT2nthxe6PqMd8ZEvcFbUxn565iVCZshP4FRsYXjIyTmNTKUotTgaKJ8cUZpbmJeflliQ7l-fkpSUWZKemp6UX5pQUg9beYBP2L0j1TwovdUlNSixJLMvPzHjETqfkCi8ArFiYDjh8sjItYgS6extr-2pNvq1v_M__JZnfrGU6x6of5B4RFRSalh3oHFGX7G5maJ-VmuZYUlmsnu-S4OJWkuuT7pEcWFqYkWhjYmlgZTmATmsDGdIqN4QMbYwc7wyx2hgOcjAd4GX7wnbk09eDGzzPeeWwQYAAA0 IP52.228.102.24:443 ASN#8075 MICROSOFT-CORP-MSN-AS-BLOCK
CertificateIssuerDigiCert Inc Subject*.woodbridgegroup.com FingerprintA7:1C:55:8E:60:23:83:B8:02:90:F0:DB:01:F1:76:E7:EF:71:42:05 ValidityThu, 19 Oct 2023 00:00:00 GMT - Sat, 05 Oct 2024 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (799), with CRLF line terminators Hash08c96ae132be6f6f160ae51b0e7a5fc1 75e38fac1c04f0934e328b4a4bedd1293d3cf389 afe0656329318a51876299f47c86fa71bf5072fa88e18109e82b83b1a49da56c
GET /adfs/ls/?login_hint=veselina_shumanova%40woodbridgegroup.com&client-request-id=dbb8c8bd-25b1-4dc6-9818-df113c359b6d&username=veselina_shumanova%40woodbridgegroup.com&wa=wsignin1.0&wtrealm=urn%3afederation%3aMicrosoftOnline&wctx=estsredirect%3d2%26estsrequest%3drQQIARAA42Kw0skoKSkottLXL8gvKknM0cvNTC7KL85PK8nPy8nMS9VLzs_Vyy9Kz0wBsYqEuAT2nthxe6PqMd8ZEvcFbUxn565iVCZshP4FRsYXjIyTmNTKUotTgaKJ8cUZpbmJeflliQ7l-fkpSUWZKemp6UX5pQUg9beYBP2L0j1TwovdUlNSixJLMvPzHjETqfkCi8ArFiYDjh8sjItYgS6extr-2pNvq1v_M__JZnfrGU6x6of5B4RFRSalh3oHFGX7G5maJ-VmuZYUlmsnu-S4OJWkuuT7pEcWFqYkWhjYmlgZTmATmsDGdIqN4QMbYwc7wyx2hgOcjAd4GX7wnbk09eDGzzPeeWwQYAAA0 HTTP/1.1
Host: adfs.woodbridgegroup.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: no-cache,no-store
Pragma: no-cache
Content-Length: 18012
Content-Type: text/html; charset=utf-8
Expires: -1
Server: Microsoft-HTTPAPI/2.0 Microsoft-HTTPAPI/2.0
X-Frame-Options: DENY
Date: Tue, 23 Apr 2024 13:41:36 GMT
|
|
| sign-eu7-approve.oceaneerning.com/?organisation=woodbridgegroup.com&dse=dmVzZWxpbmFfc2h1bWFub3ZhQHdvb2RicmlkZ2Vncm91cC5jb20= |  89.187.28.219 | 302 Found | 18 kB |
URL User Request GET HTTP/2sign-eu7-approve.oceaneerning.com/?organisation=woodbridgegroup.com&dse=dmVzZWxpbmFfc2h1bWFub3ZhQHdvb2RicmlkZ2Vncm91cC5jb20= IP89.187.28.219:443
CertificateIssuerLet's Encrypt Subjectoceaneerning.com Fingerprint23:49:1E:B6:F8:18:DC:58:10:0D:5E:6C:F6:48:52:90:E2:5F:F3:F0 ValidityTue, 02 Apr 2024 16:53:40 GMT - Mon, 01 Jul 2024 16:53:39 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /?organisation=woodbridgegroup.com&dse=dmVzZWxpbmFfc2h1bWFub3ZhQHdvb2RicmlkZ2Vncm91cC5jb20= HTTP/1.1
Host: sign-eu7-approve.oceaneerning.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
server: nginx
date: Tue, 23 Apr 2024 13:41:35 GMT
content-type: text/html; charset=utf-8
location: https://login.microsoftonline.com?organisation=woodbridgegroup.com&username=veselina_shumanova%40woodbridgegroup.com
referrer-policy: no-referrer
X-Firefox-Spdy: h2
|
|
0.0.0.0