Report - www.pinkoi.com/proxy?url=//cetrit.co/wp-includes/ID3/ink/uexEuexE/uexEuexE/YW5uYS5zenlkbG93c2thQGhpdGFjaGllbmVyZ3kuY29t//cetrit.co/wp-includes/ID3/ink/uexEuexE/uexEuexE/YW5uYS5zenlkbG93c2thQGhpdGFjaGllbmVyZ3kuY29t//cetrit.co/wp-includes/ID3/ink/uexEuexE/uexEuexE/YW5uYS5zenlkbG93c2thQGhpdGFjaGllbmVyZ3kuY29t//cetrit.co/wp-includes/ID3/ink/uexEuexE/uexEuexE/YW5uYS5zenlkbG93c2thQGhpdGFjaGllbmVyZ3kuY29t//cetrit.co/wp-includes/ID3/ink/uexEuexE/uexEuexE/YW5uYS5zenlkbG93c2thQGhpdGFjaGllbmVyZ3kuY29t//cetrit.co/wp-includes/ID3/ink/uexEuexE/uexEuexE/YW5uYS5zenlkbG93c2thQGhpdGFjaGllbmVyZ3kuY29t//cetrit.co/wp-includes/ID3/ink/uexEuexE/uexEuexE/YW5uYS5zenlkbG93c2thQGhpdGFjaGllbmVyZ3kuY29t//cetrit.co/wp-includes/ID3/ink/uexEuexE/uexEuexE/YW5uYS5zenlkbG93c2thQGhpdGFjaGllbmVyZ3kuY29t//cetrit.co/wp-includes/ID3/ink/uexEuexE/uexEuexE/YW5uYS5zenlkbG93c2thQGhpdGFjaGllbmVyZ3kuY29t//cetrit.co/wp-includes/ID3/ink/uexEuexE/uexEuexE/YW5uYS5zenlkbG93c2thQGhpdGFjaGllbmVyZ3kuY29t//cetrit.co/wp-includes/ID3/ink/uexEuexE/uexEuexE/YW5uYS5zenlkbG93c2thQGhpdGFjaGllbmVyZ3kuY29t//cetrit.co/wp-includes/ID3/ink/uexEuexE/uexEuexE/YW5uYS5zenlkbG93c2thQGhpdGFjaGllbmVyZ3kuY29t//cetrit.co/wp-includes/ID3/ink/uexEuexE/uexEuexE/YW5uYS5zenlkbG93c2thQGhpdGFjaGllbmVyZ3kuY29t//cetrit.co/wp-includes/ID3/ink/uexEuexE/uexEuexE/YW5uYS5zenlkbG93c2thQGhpdGFjaGllbmVyZ3kuY29t//cetrit.co/wp-includes/ID3/ink/uexEuexE/uexEuexE/YW5uYS5zenlkbG93c2thQGhpdGFjaGllbmVyZ3kuY29t//cetrit.co/wp-includes/ID3/ink/uexEuexE/uexEuexE/YW5uYS5zenlkbG93c2thQGhpdGFjaGllbmVyZ3kuY29t//cetrit.co/wp-includes/ID3/ink/uexEuexE/uexEuexE/YW5uYS5zenlkbG93c2thQGhpdGFjaGllbmVyZ3kuY29t//cetrit.co/wp-includes/ID3/ink/uexEuexE/uexEuexE/YW5uYS5zenlkbG93c2thQGhpdGFjaGllbmVyZ3kuY29t//cetrit.co/wp-includes/ID3/ink/uexEuexE/uexEuexE/YW5uYS5zenlkbG93c2thQGhpdGFjaGllbmVyZ3kuY29t//cetrit.co/wp-includes/ID3/ink/uexEuexE/uexEuexE/YW5uYS5zenlkbG93c2thQGhpdGFjaGllbmVyZ3kuY29t//cetrit.co/wp-includes/ID3/ink/uexEuexE/uexEuexE/YW5uYS5zenlkbG93c2thQGhpdGFjaGllbmVyZ3kuY29t//cetrit.co/wp-includes/ID3/ink/uexEuexE/uexEuexE/YW5uYS5zenlkbG93c2thQGhpdGFjaGllbmVyZ3kuY29t//cetrit.co/wp-includes/ID3/ink/uexEuexE/uexEuexE/YW5uYS5zenlkbG93c2thQGhpdGFjaGllbmVyZ3kuY29t//cetrit.co/wp-includes/ID3/ink/uexEuexE/uexEuexE/YW5uYS5zenlkbG93c2thQGhpdGFjaGllbmVyZ3kuY29t//cetrit.co/wp-includes/ID3/ink/uexEuexE/uexEuexE/YW5uYS5zenlkbG93c2thQGhpdGFjaGllbmVyZ3kuY29t//cetrit.co/wp-includes/ID3/ink/uexEuexE/uexEuexE/YW5uYS5zenlkbG93c2thQGhpdGFjaGllbmVyZ3kuY29t//cetrit.co/wp-includes/ID3/ink/uexEuexE/uexEuexE/YW5uYS5zenlkbG93c2thQGhpdGFjaGllbmVyZ3kuY29t//cetrit.co/wp-includes/ID3/ink/uexEuexE/uexEuexE/YW5uYS5zenlkbG93c2thQGhpdGFjaGllbmVyZ3kuY29t//cetrit.co/wp-includes/ID3/ink/uexEuexE/uexEuexE/YW5uYS5zenlkbG93c2thQGhpdGFjaGllbmVyZ3kuY29t//cetrit.co/wp-includes/ID3/ink/uexEuexE/uexEuexE/YW5uYS5zenlkbG93c2thQGhpdGFjaGllbmVyZ3kuY29t//cetrit.co/wp-includes/ID3/ink/uexEuexE/uexEuexE/YW5uYS5zenlkbG93c2thQGhpdGFjaGllbmVyZ3kuY29t//cetrit.co/wp-includes/ID3/ink/uexEuexE/uexEuexE/YW5uYS5zenlkbG93c2thQGhpdGFjaGllbmVyZ3kuY29t

Report Overview

Visited public
2023-11-27 18:00:56
Tags
phishing microsoft outlook
URL
www.pinkoi.com/proxy?url=//cetrit.co/wp-includes/ID3/ink/uexEuexE/uexEuexE/YW5uYS5zenlkbG93c2thQGhpdGFjaGllbmVyZ3kuY29t//cetrit.co/wp-includes/ID3/ink/uexEuexE/uexEuexE/YW5uYS5zenlkbG93c2thQGhpdGFjaGllbmVyZ3kuY29t//cetrit.co/wp-includes/ID3/ink/uexEuexE/uexEuexE/YW5uYS5zenlkbG93c2thQGhpdGFjaGllbmVyZ3kuY29t//cetrit.co/wp-includes/ID3/ink/uexEuexE/uexEuexE/YW5uYS5zenlkbG93c2thQGhpdGFjaGllbmVyZ3kuY29t//cetrit.co/wp-includes/ID3/ink/uexEuexE/uexEuexE/YW5uYS5zenlkbG93c2thQGhpdGFjaGllbmVyZ3kuY29t//cetrit.co/wp-includes/ID3/ink/uexEuexE/uexEuexE/YW5uYS5zenlkbG93c2thQGhpdGFjaGllbmVyZ3kuY29t//cetrit.co/wp-includes/ID3/ink/uexEuexE/uexEuexE/YW5uYS5zenlkbG93c2thQGhpdGFjaGllbmVyZ3kuY29t//cetrit.co/wp-includes/ID3/ink/uexEuexE/uexEuexE/YW5uYS5zenlkbG93c2thQGhpdGFjaGllbmVyZ3kuY29t//cetrit.co/wp-includes/ID3/ink/uexEuexE/uexEuexE/YW5uYS5zenlkbG93c2thQGhpdGFjaGllbmVyZ3kuY29t//cetrit.co/wp-includes/ID3/ink/uexEuexE/uexEuexE/YW5uYS5zenlkbG93c2thQGhpdGFjaGllbmVyZ3kuY29t//cetrit.co/wp-includes/ID3/ink/uexEuexE/uexEuexE/YW5uYS5zenlkbG93c2thQGhpdGFjaGllbmVyZ3kuY29t//cetrit.co/wp-includes/ID3/ink/uexEuexE/uexEuexE/YW5uYS5zenlkbG93c2thQGhpdGFjaGllbmVyZ3kuY29t//cetrit.co/wp-includes/ID3/ink/uexEuexE/uexEuexE/YW5uYS5zenlkbG93c2thQGhpdGFjaGllbmVyZ3kuY29t//cetrit.co/wp-includes/ID3/ink/uexEuexE/uexEuexE/YW5uYS5zenlkbG93c2thQGhpdGFjaGllbmVyZ3kuY29t//cetrit.co/wp-includes/ID3/ink/uexEuexE/uexEuexE/YW5uYS5zenlkbG93c2thQGhpdGFjaGllbmVyZ3kuY29t//cetrit.co/wp-includes/ID3/ink/uexEuexE/uexEuexE/YW5uYS5zenlkbG93c2thQGhpdGFjaGllbmVyZ3kuY29t//cetrit.co/wp-includes/ID3/ink/uexEuexE/uexEuexE/YW5uYS5zenlkbG93c2thQGhpdGFjaGllbmVyZ3kuY29t//cetrit.co/wp-includes/ID3/ink/uexEuexE/uexEuexE/YW5uYS5zenlkbG93c2thQGhpdGFjaGllbmVyZ3kuY29t//cetrit.co/wp-includes/ID3/ink/uexEuexE/uexEuexE/YW5uYS5zenlkbG93c2thQGhpdGFjaGllbmVyZ3kuY29t//cetrit.co/wp-includes/ID3/ink/uexEuexE/uexEuexE/YW5uYS5zenlkbG93c2thQGhpdGFjaGllbmVyZ3kuY29t//cetrit.co/wp-includes/ID3/ink/uexEuexE/uexEuexE/YW5uYS5zenlkbG93c2thQGhpdGFjaGllbmVyZ3kuY29t//cetrit.co/wp-includes/ID3/ink/uexEuexE/uexEuexE/YW5uYS5zenlkbG93c2thQGhpdGFjaGllbmVyZ3kuY29t//cetrit.co/wp-includes/ID3/ink/uexEuexE/uexEuexE/YW5uYS5zenlkbG93c2thQGhpdGFjaGllbmVyZ3kuY29t//cetrit.co/wp-includes/ID3/ink/uexEuexE/uexEuexE/YW5uYS5zenlkbG93c2thQGhpdGFjaGllbmVyZ3kuY29t//cetrit.co/wp-includes/ID3/ink/uexEuexE/uexEuexE/YW5uYS5zenlkbG93c2thQGhpdGFjaGllbmVyZ3kuY29t//cetrit.co/wp-includes/ID3/ink/uexEuexE/uexEuexE/YW5uYS5zenlkbG93c2thQGhpdGFjaGllbmVyZ3kuY29t//cetrit.co/wp-includes/ID3/ink/uexEuexE/uexEuexE/YW5uYS5zenlkbG93c2thQGhpdGFjaGllbmVyZ3kuY29t//cetrit.co/wp-includes/ID3/ink/uexEuexE/uexEuexE/YW5uYS5zenlkbG93c2thQGhpdGFjaGllbmVyZ3kuY29t//cetrit.co/wp-includes/ID3/ink/uexEuexE/uexEuexE/YW5uYS5zenlkbG93c2thQGhpdGFjaGllbmVyZ3kuY29t//cetrit.co/wp-includes/ID3/ink/uexEuexE/uexEuexE/YW5uYS5zenlkbG93c2thQGhpdGFjaGllbmVyZ3kuY29t//cetrit.co/wp-includes/ID3/ink/uexEuexE/uexEuexE/YW5uYS5zenlkbG93c2thQGhpdGFjaGllbmVyZ3kuY29t//cetrit.co/wp-includes/ID3/ink/uexEuexE/uexEuexE/YW5uYS5zenlkbG93c2thQGhpdGFjaGllbmVyZ3kuY29t
Finishing URL
agnieszkawesecka.pl/online-microsoft_com-48736743377809387436457-microsoft_8476365435473648347765347346837493467354634576726326362456354653263726372635625327637_%D8%AD%D8%B5%20%D8%AD%D8%A8%D9%88%D8%A8%20%D8%A7%D9%84%D8%A3%D8%B1%D8%B2%20%D8%A7%D9%84%D8%AD%D8%A7%D9%85%D8%B6%D8%A9-rr%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7F%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7.html?s=anna.szydlowska@hitachienergy.com
IP / ASN
52.76.207.25
#16509 AMAZON-02
Title
Sign in to your account
Phishing - Microsoft Outlook

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
cdnjs.cloudflare.com	235	2009-02-17	2015-04-17 22:46:33	2023-11-27 07:34:07	908 B	58 kB	104.17.25.14
segy.xyz	unknown	2021-05-04	2021-05-06 22:04:40	2023-11-23 13:15:27	1.6 kB	48 kB	152.89.246.205
cetrit.co	unknown	2013-05-21	2017-01-28 14:31:18	2023-11-07 16:31:49	3.5 kB	18 kB	108.167.149.240
aadcdn.msftauth.net	1455	2018-10-25	2018-11-19 11:50:32	2023-11-26 18:16:21	1.0 kB	19 kB	152.199.23.37
agnieszkawesecka.pl	unknown	2015-08-01	2019-06-09 06:18:06	2023-11-23 17:47:47	2.1 kB	32 kB	188.114.97.1
challenges.cloudflare.com	unknown	2009-02-17	2021-10-20 07:02:03	2023-11-27 07:37:27	2.4 kB	119 kB	104.17.2.184
ajax.googleapis.com	12905	2005-01-25	2013-08-16 11:51:31	2023-11-27 07:45:33	446 B	32 kB	142.250.74.138
aadcdn.msauth.net	1421	2018-10-25	2018-11-19 11:50:03	2023-11-27 10:44:56	1.1 kB	22 kB	13.107.246.53
www.pinkoi.com	522504	2009-05-17	2014-05-01 08:08:53	2023-11-27 12:20:25	3.5 kB	4.2 kB	52.76.207.25
aadcdn.msauthimages.net	4795	2018-11-12	2019-08-14 20:34:06	2023-11-26 19:03:37	556 B	10 kB	152.199.23.72

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (9)

	URL	From	Size	First Seen	Last Seen
	unknown	ScriptElement	7.5 kB	2023-11-17	2024-08-20
Pretty Introduced by scriptElement Embedded in HTML false Observations First Seen2023-11-17 13:10 Last Seen2024-08-20 19:07 Times Seen573 Hash be5bff88880fbdb55fe68b54d43871b0 afb27e3f2a29c015eb673f913fa8a1691bfbaa59 d21d19132bd52f766bd42269fdf795640059fe40600785c9ea48118db2adff92 Loading...

	agnieszkawesecka.pl/online-microsoft_com-48736743377809387436457-microsoft_8476365435473648347765347346837493467354634576726326362456354653263726372635625327637_%D8%AD%D8%B5%20%D8%AD%D8%A8%D9%88%D8%A8%20%D8%A7%D9%84%D8%A3%D8%B1%D8%B2%20%D8%A7%D9%84%D8%AD%D8%A7%D9%85%D8%B6%D8%A9-rr%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7F%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7.html?s=anna.szydlowska@hitachienergy.com	ScriptElement	0 B	0001-01-01	2025-05-11
Pretty URL agnieszkawesecka.pl/online-microsoft_com-48736743377809387436457-microsoft_8476365435473648347765347346837493467354634576726326362456354653263726372635625327637_%D8%AD%D8%B5%20%D8%AD%D8%A8%D9%88%D8%A8%20%D8%A7%D9%84%D8%A3%D8%B1%D8%B2%20%D8%A7%D9%84%D8%AD%D8%A7%D9%85%D8%B6%D8%A9-rr%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7F%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7.html?s=anna.szydlowska@hitachienergy.com IP 188.114.97.1 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen0001-01-01 00:00 Last Seen2025-05-11 11:23 Times Seen4653794 Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Loading...

	challenges.cloudflare.com/turnstile/v0/api.js?onload=onloadTurnstileCallback	ScriptElement	34 kB	2023-11-07	2023-11-30
Pretty URL challenges.cloudflare.com/turnstile/v0/api.js?onload=onloadTurnstileCallback IP 104.17.2.184 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-11-07 13:44 Last Seen2023-11-30 20:53 Times Seen32842 Hash 6142a5f5c66e2c1be52ee9506a565962 c3b39e8352efd1e0619b6dd62af8b2a917622868 51cd12da61a7401c73472b2ac77067adfa30e9fc0545b4b7c240e9154e011fc7 Loading...

	cdnjs.cloudflare.com/ajax/libs/jquery/3.6.0/jquery.min.js	ScriptElement	90 kB	2023-03-07	2025-05-11
Pretty URL cdnjs.cloudflare.com/ajax/libs/jquery/3.6.0/jquery.min.js IP 104.17.25.14 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:02 Last Seen2025-05-11 11:13 Times Seen205869 Hash 8fb8fee4fcc3cc86ff6c724154c49c42 b82d238d4e31fdf618bae8ac11a6c812c03dd0d4 ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e Loading...

	unknown	ScriptElement	6.5 kB	2023-11-17	2024-08-20
Pretty Introduced by scriptElement Embedded in HTML false Observations First Seen2023-11-17 13:10 Last Seen2024-08-20 19:07 Times Seen400 Hash c7281e62eeda88eb58b454f533de3ce3 28fd6af70a9a4801ba06b6409e8347848317c7e6 f565b9fc579a6e69c8ca86e025a8dd3e2efa59408025b0ce43e55d507592c51f Loading...

		Size	First Seen	Last Seen
	#1 Eval - 9e925e9341b490bfd3b4c4ca3b0c1ef2	4 B	2023-03-07 01:03	2025-05-11 11:16
Pretty Observations First Seen2023-03-07 01:03 Last Seen2025-05-11 11:16 Times Seen369056 Hash 9e925e9341b490bfd3b4c4ca3b0c1ef2 c2543fff3bfa6f144c2f06a7de6cd10c0b650cae 1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408 Loading...

		Size	First Seen	Last Seen
	#1 Write - a27c88365ce7cd8f68390c4c024e29e1	3.6 kB	2023-11-07 13:07	2024-08-20 20:33
Pretty Observations First Seen2023-11-07 13:07 Last Seen2024-08-20 20:33 Times Seen72071 Hash a27c88365ce7cd8f68390c4c024e29e1 1d15a8d192608f93096ef8d9aa623c360dbb7351 0ca2b3df8f04565300bafcd6c929a1d310d2a761ff9f8dda200f3f6cffab50ce Loading...

	#2 Write - 38e6363aa9956657daf7a1434e2ca4e9	30 kB	2023-11-17 13:10	2024-08-20 19:07
Pretty Observations First Seen2023-11-17 13:10 Last Seen2024-08-20 19:07 Times Seen574 Hash 38e6363aa9956657daf7a1434e2ca4e9 2e9948690320776f66210a42367d5809ce68866b d68fa27d29a8564b6bb8dd9d0c4eb1be0f55857df5d893e9b3ed600ff79c830a Loading...

	#3 Write - c0c11db090f1602c51ce2076b7ddc8c8	15 kB	2024-08-20 17:42	2024-08-20 17:42
Pretty Observations First Seen2024-08-20 17:42 Last Seen2024-08-20 17:42 Times Seen1 Hash c0c11db090f1602c51ce2076b7ddc8c8 0e31f6f1542fcdb6c6c07c7cf01aebe827f08f42 2e3588097dee4d28674439d1c5921bc271f2d062f6422398255f0128102f1160 Loading...

HTTP Transactions (19)

URL IP Response Size

www.pinkoi.com/proxy?url=//cetrit.co/wp-includes/ID3/ink/uexEuexE/uexEuexE/YW5uYS5zenlkbG93c2thQGhpdGFjaGllbmVyZ3kuY29t//cetrit.co/wp-includes/ID3/ink/uexEuexE/uexEuexE/YW5uYS5zenlkbG93c2thQGhpdGFjaGllbmVyZ3kuY29t//cetrit.co/wp-includes/ID3/ink/uexEuexE/uexEuexE/YW5uYS5zenlkbG93c2thQGhpdGFjaGllbmVyZ3kuY29t//cetrit.co/wp-includes/ID3/ink/uexEuexE/uexEuexE/YW5uYS5zenlkbG93c2thQGhpdGFjaGllbmVyZ3kuY29t//cetrit.co/wp-includes/ID3/ink/uexEuexE/uexEuexE/YW5uYS5zenlkbG93c2thQGhpdGFjaGllbmVyZ3kuY29t//cetrit.co/wp-includes/ID3/ink/uexEuexE/uexEuexE/YW5uYS5zenlkbG93c2thQGhpdGFjaGllbmVyZ3kuY29t//cetrit.co/wp-includes/ID3/ink/uexEuexE/uexEuexE/YW5uYS5zenlkbG93c2thQGhpdGFjaGllbmVyZ3kuY29t//cetrit.co/wp-includes/ID3/ink/uexEuexE/uexEuexE/YW5uYS5zenlkbG93c2thQGhpdGFjaGllbmVyZ3kuY29t//cetrit.co/wp-includes/ID3/ink/uexEuexE/uexEuexE/YW5uYS5zenlkbG93c2thQGhpdGFjaGllbmVyZ3kuY29t//cetrit.co/wp-includes/ID3/ink/uexEuexE/uexEuexE/YW5uYS5zenlkbG93c2thQGhpdGFjaGllbmVyZ3kuY29t//cetrit.co/wp-includes/ID3/ink/uexEuexE/uexEuexE/YW5uYS5zenlkbG93c2thQGhpdGFjaGllbmVyZ3kuY29t//cetrit.co/wp-includes/ID3/ink/uexEuexE/uexEuexE/YW5uYS5zenlkbG93c2thQGhpdGFjaGllbmVyZ3kuY29t//cetrit.co/wp-includes/ID3/ink/uexEuexE/uexEuexE/YW5uYS5zenlkbG93c2thQGhpdGFjaGllbmVyZ3kuY29t//cetrit.co/wp-includes/ID3/ink/uexEuexE/uexEuexE/YW5uYS5zenlkbG93c2thQGhpdGFjaGllbmVyZ3kuY29t//cetrit.co/wp-includes/ID3/ink/uexEuexE/uexEuexE/YW5uYS5zenlkbG93c2thQGhpdGFjaGllbmVyZ3kuY29t//cetrit.co/wp-includes/ID3/ink/uexEuexE/uexEuexE/YW5uYS5zenlkbG93c2thQGhpdGFjaGllbmVyZ3kuY29t//cetrit.co/wp-includes/ID3/ink/uexEuexE/uexEuexE/YW5uYS5zenlkbG93c2thQGhpdGFjaGllbmVyZ3kuY29t//cetrit.co/wp-includes/ID3/ink/uexEuexE/uexEuexE/YW5uYS5zenlkbG93c2thQGhpdGFjaGllbmVyZ3kuY29t//cetrit.co/wp-includes/ID3/ink/uexEuexE/uexEuexE/YW5uYS5zenlkbG93c2thQGhpdGFjaGllbmVyZ3kuY29t//cetrit.co/wp-includes/ID3/ink/uexEuexE/uexEuexE/YW5uYS5zenlkbG93c2thQGhpdGFjaGllbmVyZ3kuY29t//cetrit.co/wp-includes/ID3/ink/uexEuexE/uexEuexE/YW5uYS5zenlkbG93c2thQGhpdGFjaGllbmVyZ3kuY29t//cetrit.co/wp-includes/ID3/ink/uexEuexE/uexEuexE/YW5uYS5zenlkbG93c2thQGhpdGFjaGllbmVyZ3kuY29t//cetrit.co/wp-includes/ID3/ink/uexEuexE/uexEuexE/YW5uYS5zenlkbG93c2thQGhpdGFjaGllbmVyZ3kuY29t//cetrit.co/wp-includes/ID3/ink/uexEuexE/uexEuexE/YW5uYS5zenlkbG93c2thQGhpdGFjaGllbmVyZ3kuY29t//cetrit.co/wp-includes/ID3/ink/uexEuexE/uexEuexE/YW5uYS5zenlkbG93c2thQGhpdGFjaGllbmVyZ3kuY29t//cetrit.co/wp-includes/ID3/ink/uexEuexE/uexEuexE/YW5uYS5zenlkbG93c2thQGhpdGFjaGllbmVyZ3kuY29t//cetrit.co/wp-includes/ID3/ink/uexEuexE/uexEuexE/YW5uYS5zenlkbG93c2thQGhpdGFjaGllbmVyZ3kuY29t//cetrit.co/wp-includes/ID3/ink/uexEuexE/uexEuexE/YW5uYS5zenlkbG93c2thQGhpdGFjaGllbmVyZ3kuY29t//cetrit.co/wp-includes/ID3/ink/uexEuexE/uexEuexE/YW5uYS5zenlkbG93c2thQGhpdGFjaGllbmVyZ3kuY29t//cetrit.co/wp-includes/ID3/ink/uexEuexE/uexEuexE/YW5uYS5zenlkbG93c2thQGhpdGFjaGllbmVyZ3kuY29t//cetrit.co/wp-includes/ID3/ink/uexEuexE/uexEuexE/YW5uYS5zenlkbG93c2thQGhpdGFjaGllbmVyZ3kuY29t//cetrit.co/wp-includes/ID3/ink/uexEuexE/uexEuexE/YW5uYS5zenlkbG93c2thQGhpdGFjaGllbmVyZ3kuY29t

52.76.207.25

0 B

URL
www.pinkoi.com/proxy?url=//cetrit.co/wp-includes/ID3/ink/uexEuexE/uexEuexE/YW5uYS5zenlkbG93c2thQGhpdGFjaGllbmVyZ3kuY29t//cetrit.co/wp-includes/ID3/ink/uexEuexE/uexEuexE/YW5uYS5zenlkbG93c2thQGhpdGFjaGllbmVyZ3kuY29t//cetrit.co/wp-includes/ID3/ink/uexEuexE/uexEuexE/YW5uYS5zenlkbG93c2thQGhpdGFjaGllbmVyZ3kuY29t//cetrit.co/wp-includes/ID3/ink/uexEuexE/uexEuexE/YW5uYS5zenlkbG93c2thQGhpdGFjaGllbmVyZ3kuY29t//cetrit.co/wp-includes/ID3/ink/uexEuexE/uexEuexE/YW5uYS5zenlkbG93c2thQGhpdGFjaGllbmVyZ3kuY29t//cetrit.co/wp-includes/ID3/ink/uexEuexE/uexEuexE/YW5uYS5zenlkbG93c2thQGhpdGFjaGllbmVyZ3kuY29t//cetrit.co/wp-includes/ID3/ink/uexEuexE/uexEuexE/YW5uYS5zenlkbG93c2thQGhpdGFjaGllbmVyZ3kuY29t//cetrit.co/wp-includes/ID3/ink/uexEuexE/uexEuexE/YW5uYS5zenlkbG93c2thQGhpdGFjaGllbmVyZ3kuY29t//cetrit.co/wp-includes/ID3/ink/uexEuexE/uexEuexE/YW5uYS5zenlkbG93c2thQGhpdGFjaGllbmVyZ3kuY29t//cetrit.co/wp-includes/ID3/ink/uexEuexE/uexEuexE/YW5uYS5zenlkbG93c2thQGhpdGFjaGllbmVyZ3kuY29t//cetrit.co/wp-includes/ID3/ink/uexEuexE/uexEuexE/YW5uYS5zenlkbG93c2thQGhpdGFjaGllbmVyZ3kuY29t//cetrit.co/wp-includes/ID3/ink/uexEuexE/uexEuexE/YW5uYS5zenlkbG93c2thQGhpdGFjaGllbmVyZ3kuY29t//cetrit.co/wp-includes/ID3/ink/uexEuexE/uexEuexE/YW5uYS5zenlkbG93c2thQGhpdGFjaGllbmVyZ3kuY29t//cetrit.co/wp-includes/ID3/ink/uexEuexE/uexEuexE/YW5uYS5zenlkbG93c2thQGhpdGFjaGllbmVyZ3kuY29t//cetrit.co/wp-includes/ID3/ink/uexEuexE/uexEuexE/YW5uYS5zenlkbG93c2thQGhpdGFjaGllbmVyZ3kuY29t//cetrit.co/wp-includes/ID3/ink/uexEuexE/uexEuexE/YW5uYS5zenlkbG93c2thQGhpdGFjaGllbmVyZ3kuY29t//cetrit.co/wp-includes/ID3/ink/uexEuexE/uexEuexE/YW5uYS5zenlkbG93c2thQGhpdGFjaGllbmVyZ3kuY29t//cetrit.co/wp-includes/ID3/ink/uexEuexE/uexEuexE/YW5uYS5zenlkbG93c2thQGhpdGFjaGllbmVyZ3kuY29t//cetrit.co/wp-includes/ID3/ink/uexEuexE/uexEuexE/YW5uYS5zenlkbG93c2thQGhpdGFjaGllbmVyZ3kuY29t//cetrit.co/wp-includes/ID3/ink/uexEuexE/uexEuexE/YW5uYS5zenlkbG93c2thQGhpdGFjaGllbmVyZ3kuY29t//cetrit.co/wp-includes/ID3/ink/uexEuexE/uexEuexE/YW5uYS5zenlkbG93c2thQGhpdGFjaGllbmVyZ3kuY29t//cetrit.co/wp-includes/ID3/ink/uexEuexE/uexEuexE/YW5uYS5zenlkbG93c2thQGhpdGFjaGllbmVyZ3kuY29t//cetrit.co/wp-includes/ID3/ink/uexEuexE/uexEuexE/YW5uYS5zenlkbG93c2thQGhpdGFjaGllbmVyZ3kuY29t//cetrit.co/wp-includes/ID3/ink/uexEuexE/uexEuexE/YW5uYS5zenlkbG93c2thQGhpdGFjaGllbmVyZ3kuY29t//cetrit.co/wp-includes/ID3/ink/uexEuexE/uexEuexE/YW5uYS5zenlkbG93c2thQGhpdGFjaGllbmVyZ3kuY29t//cetrit.co/wp-includes/ID3/ink/uexEuexE/uexEuexE/YW5uYS5zenlkbG93c2thQGhpdGFjaGllbmVyZ3kuY29t//cetrit.co/wp-includes/ID3/ink/uexEuexE/uexEuexE/YW5uYS5zenlkbG93c2thQGhpdGFjaGllbmVyZ3kuY29t//cetrit.co/wp-includes/ID3/ink/uexEuexE/uexEuexE/YW5uYS5zenlkbG93c2thQGhpdGFjaGllbmVyZ3kuY29t//cetrit.co/wp-includes/ID3/ink/uexEuexE/uexEuexE/YW5uYS5zenlkbG93c2thQGhpdGFjaGllbmVyZ3kuY29t//cetrit.co/wp-includes/ID3/ink/uexEuexE/uexEuexE/YW5uYS5zenlkbG93c2thQGhpdGFjaGllbmVyZ3kuY29t//cetrit.co/wp-includes/ID3/ink/uexEuexE/uexEuexE/YW5uYS5zenlkbG93c2thQGhpdGFjaGllbmVyZ3kuY29t//cetrit.co/wp-includes/ID3/ink/uexEuexE/uexEuexE/YW5uYS5zenlkbG93c2thQGhpdGFjaGllbmVyZ3kuY29t
IP
52.76.207.25:0
ASN
#16509 AMAZON-02

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /proxy?url=//cetrit.co/wp-includes/ID3/ink/uexEuexE/uexEuexE/YW5uYS5zenlkbG93c2thQGhpdGFjaGllbmVyZ3kuY29t//cetrit.co/wp-includes/ID3/ink/uexEuexE/uexEuexE/YW5uYS5zenlkbG93c2thQGhpdGFjaGllbmVyZ3kuY29t//cetrit.co/wp-includes/ID3/ink/uexEuexE/uexEuexE/YW5uYS5zenlkbG93c2thQGhpdGFjaGllbmVyZ3kuY29t//cetrit.co/wp-includes/ID3/ink/uexEuexE/uexEuexE/YW5uYS5zenlkbG93c2thQGhpdGFjaGllbmVyZ3kuY29t//cetrit.co/wp-includes/ID3/ink/uexEuexE/uexEuexE/YW5uYS5zenlkbG93c2thQGhpdGFjaGllbmVyZ3kuY29t//cetrit.co/wp-includes/ID3/ink/uexEuexE/uexEuexE/YW5uYS5zenlkbG93c2thQGhpdGFjaGllbmVyZ3kuY29t//cetrit.co/wp-includes/ID3/ink/uexEuexE/uexEuexE/YW5uYS5zenlkbG93c2thQGhpdGFjaGllbmVyZ3kuY29t//cetrit.co/wp-includes/ID3/ink/uexEuexE/uexEuexE/YW5uYS5zenlkbG93c2thQGhpdGFjaGllbmVyZ3kuY29t//cetrit.co/wp-includes/ID3/ink/uexEuexE/uexEuexE/YW5uYS5zenlkbG93c2thQGhpdGFjaGllbmVyZ3kuY29t//cetrit.co/wp-includes/ID3/ink/uexEuexE/uexEuexE/YW5uYS5zenlkbG93c2thQGhpdGFjaGllbmVyZ3kuY29t//cetrit.co/wp-includes/ID3/ink/uexEuexE/uexEuexE/YW5uYS5zenlkbG93c2thQGhpdGFjaGllbmVyZ3kuY29t//cetrit.co/wp-includes/ID3/ink/uexEuexE/uexEuexE/YW5uYS5zenlkbG93c2thQGhpdGFjaGllbmVyZ3kuY29t//cetrit.co/wp-includes/ID3/ink/uexEuexE/uexEuexE/YW5uYS5zenlkbG93c2thQGhpdGFjaGllbmVyZ3kuY29t//cetrit.co/wp-includes/ID3/ink/uexEuexE/uexEuexE/YW5uYS5zenlkbG93c2thQGhpdGFjaGllbmVyZ3kuY29t//cetrit.co/wp-includes/ID3/ink/uexEuexE/uexEuexE/YW5uYS5zenlkbG93c2thQGhpdGFjaGllbmVyZ3kuY29t//cetrit.co/wp-includes/ID3/ink/uexEuexE/uexEuexE/YW5uYS5zenlkbG93c2thQGhpdGFjaGllbmVyZ3kuY29t//cetrit.co/wp-includes/ID3/ink/uexEuexE/uexEuexE/YW5uYS5zenlkbG93c2thQGhpdGFjaGllbmVyZ3kuY29t//cetrit.co/wp-includes/ID3/ink/uexEuexE/uexEuexE/YW5uYS5zenlkbG93c2thQGhpdGFjaGllbmVyZ3kuY29t//cetrit.co/wp-includes/ID3/ink/uexEuexE/uexEuexE/YW5uYS5zenlkbG93c2thQGhpdGFjaGllbmVyZ3kuY29t//cetrit.co/wp-includes/ID3/ink/uexEuexE/uexEuexE/YW5uYS5zenlkbG93c2thQGhpdGFjaGllbmVyZ3kuY29t//cetrit.co/wp-includes/ID3/ink/uexEuexE/uexEuexE/YW5uYS5zenlkbG93c2thQGhpdGFjaGllbmVyZ3kuY29t//cetrit.co/wp-includes/ID3/ink/uexEuexE/uexEuexE/YW5uYS5zenlkbG93c2thQGhpdGFjaGllbmVyZ3kuY29t//cetrit.co/wp-includes/ID3/ink/uexEuexE/uexEuexE/YW5uYS5zenlkbG93c2thQGhpdGFjaGllbmVyZ3kuY29t//cetrit.co/wp-includes/ID3/ink/uexEuexE/uexEuexE/YW5uYS5zenlkbG93c2thQGhpdGFjaGllbmVyZ3kuY29t//cetrit.co/wp-includes/ID3/ink/uexEuexE/uexEuexE/YW5uYS5zenlkbG93c2thQGhpdGFjaGllbmVyZ3kuY29t//cetrit.co/wp-includes/ID3/ink/uexEuexE/uexEuexE/YW5uYS5zenlkbG93c2thQGhpdGFjaGllbmVyZ3kuY29t//cetrit.co/wp-includes/ID3/ink/uexEuexE/uexEuexE/YW5uYS5zenlkbG93c2thQGhpdGFjaGllbmVyZ3kuY29t//cetrit.co/wp-includes/ID3/ink/uexEuexE/uexEuexE/YW5uYS5zenlkbG93c2thQGhpdGFjaGllbmVyZ3kuY29t//cetrit.co/wp-includes/ID3/ink/uexEuexE/uexEuexE/YW5uYS5zenlkbG93c2thQGhpdGFjaGllbmVyZ3kuY29t//cetrit.co/wp-includes/ID3/ink/uexEuexE/uexEuexE/YW5uYS5zenlkbG93c2thQGhpdGFjaGllbmVyZ3kuY29t//cetrit.co/wp-includes/ID3/ink/uexEuexE/uexEuexE/YW5uYS5zenlkbG93c2thQGhpdGFjaGllbmVyZ3kuY29t//cetrit.co/wp-includes/ID3/ink/uexEuexE/uexEuexE/YW5uYS5zenlkbG93c2thQGhpdGFjaGllbmVyZ3kuY29t HTTP/1.1
Host: www.pinkoi.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 302 Found
date: Mon, 27 Nov 2023 18:00:39 GMT
content-type: text/html; charset=utf-8
content-length: 0
content-language: zh_TW
content-security-policy: frame-ancestors *.pinkoi.com
location: //cetrit.co/wp-includes/ID3/ink/uexEuexE/uexEuexE/YW5uYS5zenlkbG93c2thQGhpdGFjaGllbmVyZ3kuY29t//cetrit.co/wp-includes/ID3/ink/uexEuexE/uexEuexE/YW5uYS5zenlkbG93c2thQGhpdGFjaGllbmVyZ3kuY29t//cetrit.co/wp-includes/ID3/ink/uexEuexE/uexEuexE/YW5uYS5zenlkbG93c2thQGhpdGFjaGllbmVyZ3kuY29t//cetrit.co/wp-includes/ID3/ink/uexEuexE/uexEuexE/YW5uYS5zenlkbG93c2thQGhpdGFjaGllbmVyZ3kuY29t//cetrit.co/wp-includes/ID3/ink/uexEuexE/uexEuexE/YW5uYS5zenlkbG93c2thQGhpdGFjaGllbmVyZ3kuY29t//cetrit.co/wp-includes/ID3/ink/uexEuexE/uexEuexE/YW5uYS5zenlkbG93c2thQGhpdGFjaGllbmVyZ3kuY29t//cetrit.co/wp-includes/ID3/ink/uexEuexE/uexEuexE/YW5uYS5zenlkbG93c2thQGhpdGFjaGllbmVyZ3kuY29t//cetrit.co/wp-includes/ID3/ink/uexEuexE/uexEuexE/YW5uYS5zenlkbG93c2thQGhpdGFjaGllbmVyZ3kuY29t//cetrit.co/wp-includes/ID3/ink/uexEuexE/uexEuexE/YW5uYS5zenlkbG93c2thQGhpdGFjaGllbmVyZ3kuY29t//cetrit.co/wp-includes/ID3/ink/uexEuexE/uexEuexE/YW5uYS5zenlkbG93c2thQGhpdGFjaGllbmVyZ3kuY29t//cetrit.co/wp-includes/ID3/ink/uexEuexE/uexEuexE/YW5uYS5zenlkbG93c2thQGhpdGFjaGllbmVyZ3kuY29t//cetrit.co/wp-includes/ID3/ink/uexEuexE/uexEuexE/YW5uYS5zenlkbG93c2thQGhpdGFjaGllbmVyZ3kuY29t//cetrit.co/wp-includes/ID3/ink/uexEuexE/uexEuexE/YW5uYS5zenlkbG93c2thQGhpdGFjaGllbmVyZ3kuY29t//cetrit.co/wp-includes/ID3/ink/uexEuexE/uexEuexE/YW5uYS5zenlkbG93c2thQGhpdGFjaGllbmVyZ3kuY29t//cetrit.co/wp-includes/ID3/ink/uexEuexE/uexEuexE/YW5uYS5zenlkbG93c2thQGhpdGFjaGllbmVyZ3kuY29t//cetrit.co/wp-includes/ID3/ink/uexEuexE/uexEuexE/YW5uYS5zenlkbG93c2thQGhpdGFjaGllbmVyZ3kuY29t//cetrit.co/wp-includes/ID3/ink/uexEuexE/uexEuexE/YW5uYS5zenlkbG93c2thQGhpdGFjaGllbmVyZ3kuY29t//cetrit.co/wp-includes/ID3/ink/uexEuexE/uexEuexE/YW5uYS5zenlkbG93c2thQGhpdGFjaGllbmVyZ3kuY29t//cetrit.co/wp-includes/ID3/ink/uexEuexE/uexEuexE/YW5uYS5zenlkbG93c2thQGhpdGFjaGllbmVyZ3kuY29t//cetrit.co/wp-includes/ID3/ink/uexEuexE/uexEuexE/YW5uYS5zenlkbG93c2thQGhpdGFjaGllbmVyZ3kuY29t//cetrit.co/wp-includes/ID3/ink/uexEuexE/uexEuexE/YW5uYS5zenlkbG93c2thQGhpdGFjaGllbmVyZ3kuY29t//cetrit.co/wp-includes/ID3/ink/uexEuexE/uexEuexE/YW5uYS5zenlkbG93c2thQGhpdGFjaGllbmVyZ3kuY29t//cetrit.co/wp-includes/ID3/ink/uexEuexE/uexEuexE/YW5uYS5zenlkbG93c2thQGhpdGFjaGllbmVyZ3kuY29t//cetrit.co/wp-includes/ID3/ink/uexEuexE/uexEuexE/YW5uYS5zenlkbG93c2thQGhpdGFjaGllbmVyZ3kuY29t//cetrit.co/wp-includes/ID3/ink/uexEuexE/uexEuexE/YW5uYS5zenlkbG93c2thQGhpdGFjaGllbmVyZ3kuY29t//cetrit.co/wp-includes/ID3/ink/uexEuexE/uexEuexE/YW5uYS5zenlkbG93c2thQGhpdGFjaGllbmVyZ3kuY29t//cetrit.co/wp-includes/ID3/ink/uexEuexE/uexEuexE/YW5uYS5zenlkbG93c2thQGhpdGFjaGllbmVyZ3kuY29t//cetrit.co/wp-includes/ID3/ink/uexEuexE/uexEuexE/YW5uYS5zenlkbG93c2thQGhpdGFjaGllbmVyZ3kuY29t//cetrit.co/wp-includes/ID3/ink/uexEuexE/uexEuexE/YW5uYS5zenlkbG93c2thQGhpdGFjaGllbmVyZ3kuY29t//cetrit.co/wp-includes/ID3/ink/uexEuexE/uexEuexE/YW5uYS5zenlkbG93c2thQGhpdGFjaGllbmVyZ3kuY29t//cetrit.co/wp-includes/ID3/ink/uexEuexE/uexEuexE/YW5uYS5zenlkbG93c2thQGhpdGFjaGllbmVyZ3kuY29t//cetrit.co/wp-includes/ID3/ink/uexEuexE/uexEuexE/YW5uYS5zenlkbG93c2thQGhpdGFjaGllbmVyZ3kuY29t
server: nginx
set-cookie: slocale=1; Domain=.pinkoi.com; expires=Tue, 26 Nov 2024 18:00:39 GMT; Max-Age=31536000; Path=/
ad=0; Domain=.pinkoi.com; expires=Mon, 27 Nov 2023 18:30:39 GMT; Max-Age=1800; Path=/
lang=zh_TW; Domain=.pinkoi.com; expires=Tue, 26 Nov 2024 18:00:39 GMT; Max-Age=31536000; Path=/
geo=NO; Domain=.pinkoi.com; expires=Mon, 27 Nov 2023 18:30:39 GMT; Max-Age=1800; Path=/
ci=03; Domain=.pinkoi.com; expires=Mon, 27 Nov 2023 18:30:39 GMT; Max-Age=1800; Path=/
tz="Europe/Oslo"; Domain=.pinkoi.com; expires=Mon, 27 Nov 2023 18:30:39 GMT; Max-Age=1800; Path=/
c=USD; Domain=.pinkoi.com; expires=Mon, 27 Nov 2023 18:30:39 GMT; Max-Age=1800; Path=/
country_code=NO; Domain=.pinkoi.com; expires=Mon, 27 Nov 2023 18:30:39 GMT; Max-Age=1800; Path=/
b=20231127fvXvgjrNjW; Domain=.pinkoi.com; expires=Thu, 24 Nov 2033 18:00:39 GMT; Max-Age=315360000; Path=/; SameSite=none; Secure
vary: Accept-Language, Cookie
X-Firefox-Spdy: h2

challenges.cloudflare.com/turnstile/v0/api.js?onload=onloadTurnstileCallback

104.17.2.184

302 Found

472 B

URL GET HTTP/2
challenges.cloudflare.com/turnstile/v0/api.js?onload=onloadTurnstileCallback
IP
104.17.2.184:443
ASN
#13335 CLOUDFLARENET

Requested by
https://agnieszkawesecka.pl/online-microsoft_com-48736743377809387436457-microsoft_8476365435473648347765347346837493467354634576726326362456354653263726372635625327637_%D8%AD%D8%B5%20%D8%AD%D8%A8%D9%88%D8%A8%20%D8%A7%D9%84%D8%A3%D8%B1%D8%B2%20%D8%A7%D9%84%D8%AD%D8%A7%D9%85%D8%B6%D8%A9-rr%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7F%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7.html?s=anna.szydlowska@hitachienergy.com
Certificate
IssuerCloudflare, Inc.
Subjectchallenges.cloudflare.com
Fingerprint5F:E4:AA:8C:2E:24:D2:B1:69:9D:13:28:31:5C:65:FA:97:2A:E9:6E
ValidityFri, 18 Aug 2023 00:00:00 GMT - Sat, 17 Aug 2024 23:59:59 GMT

File type
data
Size
472 B (472 bytes)
Hash
21365b0a67c42169257e3f7bd0563500
2ccab4eec8e978eb77fdbf85f08d52ba726bc9ed
689528e448b1aa42deb81720e5d526cac1a45f8291e0c7964fb45a8819bbf0ac

HTTP Headers

GET /turnstile/v0/api.js?onload=onloadTurnstileCallback HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://agnieszkawesecka.pl/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 302 Found
date: Mon, 27 Nov 2023 18:00:40 GMT
vary: accept-encoding
cache-control: max-age=300, public
location: /turnstile/v0/g/9914b343/api.js?onload=onloadTurnstileCallback
access-control-allow-origin: *
server: cloudflare
cf-ray: 82cc45a4dce2712a-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

ajax.googleapis.com/ajax/libs/jquery/3.6.0/jquery.min.js

142.250.74.138

200 OK

31 kB

URL GET HTTP/2
ajax.googleapis.com/ajax/libs/jquery/3.6.0/jquery.min.js
IP
142.250.74.138:443
ASN
#15169 GOOGLE

Requested by
https://agnieszkawesecka.pl/online-microsoft_com-48736743377809387436457-microsoft_8476365435473648347765347346837493467354634576726326362456354653263726372635625327637_%D8%AD%D8%B5%20%D8%AD%D8%A8%D9%88%D8%A8%20%D8%A7%D9%84%D8%A3%D8%B1%D8%B2%20%D8%A7%D9%84%D8%AD%D8%A7%D9%85%D8%B6%D8%A9-rr%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7F%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7.html?s=anna.szydlowska@hitachienergy.com
Certificate
IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
FingerprintCC:96:E0:52:E0:9B:EA:A9:A0:F8:88:9A:90:20:11:47:61:00:3C:42
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT

File type
ASCII text, with very long lines (65447)
Size
31 kB (31017 bytes)
Hash
8fb8fee4fcc3cc86ff6c724154c49c42
b82d238d4e31fdf618bae8ac11a6c812c03dd0d4
ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e

HTTP Headers

GET /ajax/libs/jquery/3.6.0/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://agnieszkawesecka.pl/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 31017
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sun, 26 Nov 2023 16:17:38 GMT
expires: Mon, 25 Nov 2024 16:17:38 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
last-modified: Wed, 10 Mar 2021 14:28:09 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
age: 92582
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/flow/ov1/266579621:1701106096:7YOyXDFDbXgxtLdXEyrPucUqfl12Qa3Cc03XzlbWjD8/82cc45a69ed056a4/d1b6ce138bd64c4

104.17.2.184

9.1 kB

URL
challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/flow/ov1/266579621:1701106096:7YOyXDFDbXgxtLdXEyrPucUqfl12Qa3Cc03XzlbWjD8/82cc45a69ed056a4/d1b6ce138bd64c4
IP
104.17.2.184:0
ASN
#13335 CLOUDFLARENET

Certificate
IssuerCloudflare, Inc.
Subjectchallenges.cloudflare.com
Fingerprint5F:E4:AA:8C:2E:24:D2:B1:69:9D:13:28:31:5C:65:FA:97:2A:E9:6E
ValidityFri, 18 Aug 2023 00:00:00 GMT - Sat, 17 Aug 2024 23:59:59 GMT

File type
ASCII text, with very long lines (3436), with no line terminators
Size
9.1 kB (9090 bytes)
Hash
b445f716f16fb7c6512540eb3faa31fc
eda853a6a1ae4c342dd202c4fdad4a16dd80eb3b
f8235ec4f390525e5c97213c02cd4a391bb8f0ca83db4f3db01b2382e0360d61

HTTP Headers

POST /cdn-cgi/challenge-platform/h/g/flow/ov1/266579621:1701106096:7YOyXDFDbXgxtLdXEyrPucUqfl12Qa3Cc03XzlbWjD8/82cc45a69ed056a4/d1b6ce138bd64c4 HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/uwizx/0x4AAAAAAANitG7_q4LMVK7c/auto/normal
Content-type: application/x-www-form-urlencoded
CF-Challenge: d1b6ce138bd64c4
Content-Length: 25183
Origin: https://challenges.cloudflare.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Mon, 27 Nov 2023 18:00:43 GMT
content-type: text/html; charset=UTF-8
cf-chl-out: 9CfnuBkQSnSQth2hVfPcCjXPYDcRbtDj3xlZ6BYj0wX+lwAPVlk3vBb3oSy/pxQEiikuJGWkQ3tXDblmTD8JpzRcG3dml06D+MYgJsuuCQqlKr6l4bIrNmWQr/pQsEyW$508VH2Jx8Dzzpfvp7wyylg==
cf-chl-out-s: ku0vy/vTldHnzuGVxbo3tyuTH9xtrAWFF/ZDrenId8mOLIW6+hQRIl2fLhwOd+eEQukss3H4r6eoTCejLa9oqj4Nf+3LbwJKqDJ7WCi7yZoQLu7UF1AtUyar7VCcozTe5fbwFr1lNwqEKYaqspjJcPULVElbTzi8htduRJ7dcYNYOASTfcauRMyXJGiYO8bi3dX2c1X6708fysnMBMFS/m9yVmfK9Wk6pGJXQsy1dNcpjbdM9zOyeuN8a7BdJHdS5KaQjLx3m/pnQgsslq/LPqrzCEtPuUDixox0mbGfwTH8x0C5AJ9Ugw9kicIkgdfG21Pg+hOrPt7EK3w4j5q/0A==$RH+cFq7uBTSknGUb2P2A9w==
server: cloudflare
cf-ray: 82cc45b68a1056a4-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

cdnjs.cloudflare.com/ajax/libs/jquery/3.6.0/jquery.min.js

104.17.25.14

200 OK

28 kB

URL GET HTTP/2
cdnjs.cloudflare.com/ajax/libs/jquery/3.6.0/jquery.min.js
IP
104.17.25.14:443
ASN
#13335 CLOUDFLARENET

Requested by
https://agnieszkawesecka.pl/online-microsoft_com-48736743377809387436457-microsoft_8476365435473648347765347346837493467354634576726326362456354653263726372635625327637_%D8%AD%D8%B5%20%D8%AD%D8%A8%D9%88%D8%A8%20%D8%A7%D9%84%D8%A3%D8%B1%D8%B2%20%D8%A7%D9%84%D8%AD%D8%A7%D9%85%D8%B6%D8%A9-rr%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7F%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7.html?s=anna.szydlowska@hitachienergy.com
Certificate
IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint7A:EA:B9:09:71:70:6C:87:C9:D3:82:74:8A:7B:B4:60:E5:40:2D:8D
ValidityMon, 03 Jul 2023 00:00:00 GMT - Tue, 02 Jul 2024 23:59:59 GMT

File type
ASCII text, with very long lines (65447)
Size
28 kB (27938 bytes)
Hash
8fb8fee4fcc3cc86ff6c724154c49c42
b82d238d4e31fdf618bae8ac11a6c812c03dd0d4
ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e

HTTP Headers

GET /ajax/libs/jquery/3.6.0/jquery.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://agnieszkawesecka.pl/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Mon, 27 Nov 2023 18:00:44 GMT
content-type: application/javascript; charset=utf-8
content-length: 27938
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "603e8adc-15d9d"
last-modified: Tue, 02 Mar 2021 18:58:36 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 215742
expires: Sat, 16 Nov 2024 18:00:44 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=wutnxSYECAAFaqZjMELXh84CedBPXHA0e554Pw%2Fe9fNc69%2FslzPO3Q3A%2B9Au6aZcZsOF1w9KTcgO8idvD2kUkXCqRffqZHjT4VSUWuCuCsdBu8QVy5jWu1tnjYRmJyPqFti7yTi3"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 82cc45bebd4756b9-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

segy.xyz/api/validate

152.89.246.205

204 No Content

0 B

URL OPTIONS HTTP/1.1
segy.xyz/api/validate
IP
152.89.246.205:443
ASN
#30823 combahton GmbH

Requested by
https://agnieszkawesecka.pl/online-microsoft_com-48736743377809387436457-microsoft_8476365435473648347765347346837493467354634576726326362456354653263726372635625327637_%D8%AD%D8%B5%20%D8%AD%D8%A8%D9%88%D8%A8%20%D8%A7%D9%84%D8%A3%D8%B1%D8%B2%20%D8%A7%D9%84%D8%AD%D8%A7%D9%85%D8%B6%D8%A9-rr%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7F%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7.html?s=anna.szydlowska@hitachienergy.com
Certificate
IssuerLet's Encrypt
Subjectsegy.xyz
Fingerprint6F:DF:90:EC:AE:D6:E0:13:C7:5C:47:EA:1A:C8:4F:0D:C0:F5:86:74
ValiditySun, 05 Nov 2023 07:19:49 GMT - Sat, 03 Feb 2024 07:19:48 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

OPTIONS /api/validate HTTP/1.1
Host: segy.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://agnieszkawesecka.pl/
Origin: https://agnieszkawesecka.pl
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 204 No Content
Server: nginx/1.18.0 (Ubuntu)
Content-Type: text/html; charset=UTF-8
Connection: keep-alive
Cache-Control: no-cache, private
Date: Mon, 27 Nov 2023 18:00:46 GMT
Access-Control-Allow-Origin: *
Vary: Access-Control-Request-Method, Access-Control-Request-Headers
Access-Control-Allow-Methods: POST
Access-Control-Allow-Headers: content-type
Access-Control-Max-Age: 0

segy.xyz/api/validate

152.89.246.205

204 No Content

16 kB

URL OPTIONS HTTP/1.1
segy.xyz/api/validate
IP
152.89.246.205:443
ASN
#30823 combahton GmbH

Requested by
https://agnieszkawesecka.pl/online-microsoft_com-48736743377809387436457-microsoft_8476365435473648347765347346837493467354634576726326362456354653263726372635625327637_%D8%AD%D8%B5%20%D8%AD%D8%A8%D9%88%D8%A8%20%D8%A7%D9%84%D8%A3%D8%B1%D8%B2%20%D8%A7%D9%84%D8%AD%D8%A7%D9%85%D8%B6%D8%A9-rr%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7F%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7.html?s=anna.szydlowska@hitachienergy.com
Certificate
IssuerLet's Encrypt
Subjectsegy.xyz
Fingerprint6F:DF:90:EC:AE:D6:E0:13:C7:5C:47:EA:1A:C8:4F:0D:C0:F5:86:74
ValiditySun, 05 Nov 2023 07:19:49 GMT - Sat, 03 Feb 2024 07:19:48 GMT

File type
JSON data\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (15776), with no line terminators
Size
16 kB (15776 bytes)
Hash
b04f552285b8c8808af76022742f239b
279976c4973b2ef81e40099c04c176db93887096
f3b3f1f9e16672f4ec64535f4d99cd9c0725589e19127a3f08140c455ab7102f

HTTP Headers

POST /api/validate HTTP/1.1
Host: segy.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 90
Origin: https://agnieszkawesecka.pl
DNT: 1
Connection: keep-alive
Referer: https://agnieszkawesecka.pl/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Content-Type: application/json
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: no-cache, private
Date: Mon, 27 Nov 2023 18:00:47 GMT
X-RateLimit-Limit: 60
X-RateLimit-Remaining: 51
Access-Control-Allow-Origin: *

cdnjs.cloudflare.com/ajax/libs/jquery/3.6.0/jquery.min.js

104.17.25.14

200 OK

28 kB

URL GET HTTP/2
cdnjs.cloudflare.com/ajax/libs/jquery/3.6.0/jquery.min.js
IP
104.17.25.14:443
ASN
#13335 CLOUDFLARENET

Requested by
https://agnieszkawesecka.pl/online-microsoft_com-48736743377809387436457-microsoft_8476365435473648347765347346837493467354634576726326362456354653263726372635625327637_%D8%AD%D8%B5%20%D8%AD%D8%A8%D9%88%D8%A8%20%D8%A7%D9%84%D8%A3%D8%B1%D8%B2%20%D8%A7%D9%84%D8%AD%D8%A7%D9%85%D8%B6%D8%A9-rr%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7F%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7.html?s=anna.szydlowska@hitachienergy.com
Certificate
IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint7A:EA:B9:09:71:70:6C:87:C9:D3:82:74:8A:7B:B4:60:E5:40:2D:8D
ValidityMon, 03 Jul 2023 00:00:00 GMT - Tue, 02 Jul 2024 23:59:59 GMT

File type
ASCII text, with very long lines (65447)
Size
28 kB (27938 bytes)
Hash
8fb8fee4fcc3cc86ff6c724154c49c42
b82d238d4e31fdf618bae8ac11a6c812c03dd0d4
ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e

HTTP Headers

GET /ajax/libs/jquery/3.6.0/jquery.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://agnieszkawesecka.pl/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Mon, 27 Nov 2023 18:00:48 GMT
content-type: application/javascript; charset=utf-8
content-length: 27938
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "603e8adc-15d9d"
last-modified: Tue, 02 Mar 2021 18:58:36 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 215746
expires: Sat, 16 Nov 2024 18:00:48 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=gxAeqxnSYAbZnhCNMg15JK8Jh1yCfVL2FEF860pvoTjoQQrJJZuASqEaJ7Lec0qRpGeeb7tVOOYD2l2VlMps08lgeU4P3n48Tb4WtsXIyp7jfsXBxHpBxBW59P%2F%2Fvsj6jovvDrfW"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 82cc45d4ece6b4f1-OSL
alt-svc: h3=":443"; ma=86400

aadcdn.msauthimages.net/c1c6b6c8-ipeo0ivrxyszduxgd514hvlbkaz8wdnjvxxltc5jti4/logintenantbranding/0/bannerlogo?ts=637696536284308094

152.199.23.72

200 OK

9.4 kB

URL GET HTTP/2
aadcdn.msauthimages.net/c1c6b6c8-ipeo0ivrxyszduxgd514hvlbkaz8wdnjvxxltc5jti4/logintenantbranding/0/bannerlogo?ts=637696536284308094
IP
152.199.23.72:443
ASN
#15133 EDGECAST

Requested by
https://agnieszkawesecka.pl/online-microsoft_com-48736743377809387436457-microsoft_8476365435473648347765347346837493467354634576726326362456354653263726372635625327637_%D8%AD%D8%B5%20%D8%AD%D8%A8%D9%88%D8%A8%20%D8%A7%D9%84%D8%A3%D8%B1%D8%B2%20%D8%A7%D9%84%D8%AD%D8%A7%D9%85%D8%B6%D8%A9-rr%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7F%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7.html?s=anna.szydlowska@hitachienergy.com
Certificate
IssuerMicrosoft Corporation
Subjectaadcdn.msauthimages.net
Fingerprint6B:EB:AC:06:FC:06:82:11:17:1C:6B:72:7D:B5:95:2D:CF:E7:A3:5D
ValidityWed, 08 Mar 2023 11:16:34 GMT - Sat, 02 Mar 2024 11:16:34 GMT

File type
PNG image data, 279 x 38, 8-bit/color RGBA, non-interlaced\012- data
Size
9.4 kB (9439 bytes)
Hash
85be541ef6bbbefb685680d97a94dcd8
bf69fca12779c518115fbc3dea6af28f1a41b3b2
268f46288d3ccca26b618f18861049bb3b5792235039f30c84fa8c93f3ae662e

HTTP Headers

GET /c1c6b6c8-ipeo0ivrxyszduxgd514hvlbkaz8wdnjvxxltc5jti4/logintenantbranding/0/bannerlogo?ts=637696536284308094 HTTP/1.1
Host: aadcdn.msauthimages.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://agnieszkawesecka.pl/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Length,Date,Transfer-Encoding
age: 35822
cache-control: public, max-age=86400
content-md5: hb5UHva7vvtoVoDZepTc2A==
content-type: image/*
date: Mon, 27 Nov 2023 18:00:48 GMT
etag: 0x8D98D9EFFCE0A77
last-modified: Tue, 12 Oct 2021 16:40:28 GMT
server: ECAcc (ska/F6B1)
x-cache: HIT
x-ms-blob-type: BlockBlob
x-ms-lease-status: unlocked
x-ms-request-id: d0d3a3b4-301e-0025-6d08-21b481000000
x-ms-version: 2009-09-19
content-length: 9439
X-Firefox-Spdy: h2

aadcdn.msauth.net/ests/2.1/content/cdnbundles/converged.v2.login.min_ziytf8dzt9eg1s6-ohhleg2.css

13.107.246.53

200 OK

20 kB

URL GET HTTP/2
aadcdn.msauth.net/ests/2.1/content/cdnbundles/converged.v2.login.min_ziytf8dzt9eg1s6-ohhleg2.css
IP
13.107.246.53:443
ASN
#8068 MICROSOFT-CORP-MSN-AS-BLOCK

Requested by
https://agnieszkawesecka.pl/online-microsoft_com-48736743377809387436457-microsoft_8476365435473648347765347346837493467354634576726326362456354653263726372635625327637_%D8%AD%D8%B5%20%D8%AD%D8%A8%D9%88%D8%A8%20%D8%A7%D9%84%D8%A3%D8%B1%D8%B2%20%D8%A7%D9%84%D8%AD%D8%A7%D9%85%D8%B6%D8%A9-rr%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7F%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7.html?s=anna.szydlowska@hitachienergy.com
Certificate
IssuerDigiCert Inc
Subjectaadcdn.msauth.net
Fingerprint88:95:0C:FA:9D:33:AA:BF:A4:FD:9D:84:A6:E8:02:06:58:50:AD:8C
ValiditySun, 29 Oct 2023 00:00:00 GMT - Tue, 29 Oct 2024 23:59:59 GMT

File type
ASCII text, with very long lines (61177)
Size
20 kB (19953 bytes)
Hash
ce26137fc0d9b7d7a0d52ebe3a186512
b9d7fb3fe7d08f46c2d1153bb47b13809375c663
1304c5090f063c677a5b3720fe7b97ef4d9ea102e2bdd837ce399df6057fe385

HTTP Headers

GET /ests/2.1/content/cdnbundles/converged.v2.login.min_ziytf8dzt9eg1s6-ohhleg2.css HTTP/1.1
Host: aadcdn.msauth.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://agnieszkawesecka.pl
DNT: 1
Connection: keep-alive
Referer: https://agnieszkawesecka.pl/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
cache-control: public, max-age=31536000
content-length: 19953
content-type: text/css
content-encoding: gzip
content-md5: xg2DER+s52egaL6bUXi4hw==
last-modified: Mon, 18 Apr 2022 21:18:26 GMT
etag: 0x8DA2180FA29F5AF
x-cache: TCP_HIT
x-ms-request-id: df0c21fe-e01e-0021-5f94-1e8d42000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
access-control-allow-origin: *
x-azure-ref-originshield: 0LbJgZQAAAAAxWb2J3o6iSLh6iNS2SdrUQU1TMDRFREdFMTkyMgAzOWExMmY3ZS04OTlmLTQ2Y2YtYTZkMC0yNGJiYmEyN2Q5NTY=
x-azure-ref: 0UNlkZQAAAACzVwsHKXRsQ5KCGRX2Hu+WU1ZHMjBFREdFMDUwOAAzOWExMmY3ZS04OTlmLTQ2Y2YtYTZkMC0yNGJiYmEyN2Q5NTY=
date: Mon, 27 Nov 2023 18:00:47 GMT
X-Firefox-Spdy: h2

aadcdn.msauth.net/shared/1.0/content/images/arrow_left_a9cc2824ef3517b6c4160dcf8ff7d410.svg

13.107.246.53

200 OK

276 B

URL GET HTTP/2
aadcdn.msauth.net/shared/1.0/content/images/arrow_left_a9cc2824ef3517b6c4160dcf8ff7d410.svg
IP
13.107.246.53:443
ASN
#8068 MICROSOFT-CORP-MSN-AS-BLOCK

Requested by
https://agnieszkawesecka.pl/online-microsoft_com-48736743377809387436457-microsoft_8476365435473648347765347346837493467354634576726326362456354653263726372635625327637_%D8%AD%D8%B5%20%D8%AD%D8%A8%D9%88%D8%A8%20%D8%A7%D9%84%D8%A3%D8%B1%D8%B2%20%D8%A7%D9%84%D8%AD%D8%A7%D9%85%D8%B6%D8%A9-rr%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7F%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7.html?s=anna.szydlowska@hitachienergy.com
Certificate
IssuerDigiCert Inc
Subjectaadcdn.msauth.net
Fingerprint88:95:0C:FA:9D:33:AA:BF:A4:FD:9D:84:A6:E8:02:06:58:50:AD:8C
ValiditySun, 29 Oct 2023 00:00:00 GMT - Tue, 29 Oct 2024 23:59:59 GMT

File type
SVG Scalable Vector Graphics image\012- HTML document, ASCII text, with very long lines (513), with no line terminators
Size
276 B (276 bytes)
Hash
a9cc2824ef3517b6c4160dcf8ff7d410
8db9aebad84ca6e4225bfdd2458ff3821cc4f064
34f9db946e89f031a80dfca7b16b2b686469c9886441261ae70a44da1dfa2d58

HTTP Headers

GET /shared/1.0/content/images/arrow_left_a9cc2824ef3517b6c4160dcf8ff7d410.svg HTTP/1.1
Host: aadcdn.msauth.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://agnieszkawesecka.pl/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
cache-control: public, max-age=31536000
content-length: 276
content-type: image/svg+xml
content-encoding: gzip
content-md5: TjUQkZ0p0Y7rbj6LJofS9Q==
last-modified: Fri, 17 Jan 2020 19:28:34 GMT
etag: 0x8D79B8371B97A82
x-cache: TCP_HIT
x-ms-request-id: 4d8ee911-101e-0036-6042-0fec6e000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
access-control-allow-origin: *
x-azure-ref-originshield: 0SpZJZQAAAAAmBLZXYFfTSIPxFEjCT7FDQU1TMDRFREdFMTkxNQAzOWExMmY3ZS04OTlmLTQ2Y2YtYTZkMC0yNGJiYmEyN2Q5NTY=
x-azure-ref: 0UNlkZQAAAAA4yna9lRbsR693t/nqgrgEU1ZHMjBFREdFMDUyMQAzOWExMmY3ZS04OTlmLTQ2Y2YtYTZkMC0yNGJiYmEyN2Q5NTY=
date: Mon, 27 Nov 2023 18:00:47 GMT
X-Firefox-Spdy: h2

cetrit.co/wp-includes/ID3/ink/uexEuexE/uexEuexE/YW5uYS5zenlkbG93c2thQGhpdGFjaGllbmVyZ3kuY29t//cetrit.co/wp-includes/ID3/ink/uexEuexE/uexEuexE/YW5uYS5zenlkbG93c2thQGhpdGFjaGllbmVyZ3kuY29t//cetrit.co/wp-includes/ID3/ink/uexEuexE/uexEuexE/YW5uYS5zenlkbG93c2thQGhpdGFjaGllbmVyZ3kuY29t//cetrit.co/wp-includes/ID3/ink/uexEuexE/uexEuexE/YW5uYS5zenlkbG93c2thQGhpdGFjaGllbmVyZ3kuY29t//cetrit.co/wp-includes/ID3/ink/uexEuexE/uexEuexE/YW5uYS5zenlkbG93c2thQGhpdGFjaGllbmVyZ3kuY29t//cetrit.co/wp-includes/ID3/ink/uexEuexE/uexEuexE/YW5uYS5zenlkbG93c2thQGhpdGFjaGllbmVyZ3kuY29t//cetrit.co/wp-includes/ID3/ink/uexEuexE/uexEuexE/YW5uYS5zenlkbG93c2thQGhpdGFjaGllbmVyZ3kuY29t//cetrit.co/wp-includes/ID3/ink/uexEuexE/uexEuexE/YW5uYS5zenlkbG93c2thQGhpdGFjaGllbmVyZ3kuY29t//cetrit.co/wp-includes/ID3/ink/uexEuexE/uexEuexE/YW5uYS5zenlkbG93c2thQGhpdGFjaGllbmVyZ3kuY29t//cetrit.co/wp-includes/ID3/ink/uexEuexE/uexEuexE/YW5uYS5zenlkbG93c2thQGhpdGFjaGllbmVyZ3kuY29t//cetrit.co/wp-includes/ID3/ink/uexEuexE/uexEuexE/YW5uYS5zenlkbG93c2thQGhpdGFjaGllbmVyZ3kuY29t//cetrit.co/wp-includes/ID3/ink/uexEuexE/uexEuexE/YW5uYS5zenlkbG93c2thQGhpdGFjaGllbmVyZ3kuY29t//cetrit.co/wp-includes/ID3/ink/uexEuexE/uexEuexE/YW5uYS5zenlkbG93c2thQGhpdGFjaGllbmVyZ3kuY29t//cetrit.co/wp-includes/ID3/ink/uexEuexE/uexEuexE/YW5uYS5zenlkbG93c2thQGhpdGFjaGllbmVyZ3kuY29t//cetrit.co/wp-includes/ID3/ink/uexEuexE/uexEuexE/YW5uYS5zenlkbG93c2thQGhpdGFjaGllbmVyZ3kuY29t//cetrit.co/wp-includes/ID3/ink/uexEuexE/uexEuexE/YW5uYS5zenlkbG93c2thQGhpdGFjaGllbmVyZ3kuY29t//cetrit.co/wp-includes/ID3/ink/uexEuexE/uexEuexE/YW5uYS5zenlkbG93c2thQGhpdGFjaGllbmVyZ3kuY29t//cetrit.co/wp-includes/ID3/ink/uexEuexE/uexEuexE/YW5uYS5zenlkbG93c2thQGhpdGFjaGllbmVyZ3kuY29t//cetrit.co/wp-includes/ID3/ink/uexEuexE/uexEuexE/YW5uYS5zenlkbG93c2thQGhpdGFjaGllbmVyZ3kuY29t//cetrit.co/wp-includes/ID3/ink/uexEuexE/uexEuexE/YW5uYS5zenlkbG93c2thQGhpdGFjaGllbmVyZ3kuY29t//cetrit.co/wp-includes/ID3/ink/uexEuexE/uexEuexE/YW5uYS5zenlkbG93c2thQGhpdGFjaGllbmVyZ3kuY29t//cetrit.co/wp-includes/ID3/ink/uexEuexE/uexEuexE/YW5uYS5zenlkbG93c2thQGhpdGFjaGllbmVyZ3kuY29t//cetrit.co/wp-includes/ID3/ink/uexEuexE/uexEuexE/YW5uYS5zenlkbG93c2thQGhpdGFjaGllbmVyZ3kuY29t//cetrit.co/wp-includes/ID3/ink/uexEuexE/uexEuexE/YW5uYS5zenlkbG93c2thQGhpdGFjaGllbmVyZ3kuY29t//cetrit.co/wp-includes/ID3/ink/uexEuexE/uexEuexE/YW5uYS5zenlkbG93c2thQGhpdGFjaGllbmVyZ3kuY29t//cetrit.co/wp-includes/ID3/ink/uexEuexE/uexEuexE/YW5uYS5zenlkbG93c2thQGhpdGFjaGllbmVyZ3kuY29t//cetrit.co/wp-includes/ID3/ink/uexEuexE/uexEuexE/YW5uYS5zenlkbG93c2thQGhpdGFjaGllbmVyZ3kuY29t//cetrit.co/wp-includes/ID3/ink/uexEuexE/uexEuexE/YW5uYS5zenlkbG93c2thQGhpdGFjaGllbmVyZ3kuY29t//cetrit.co/wp-includes/ID3/ink/uexEuexE/uexEuexE/YW5uYS5zenlkbG93c2thQGhpdGFjaGllbmVyZ3kuY29t//cetrit.co/wp-includes/ID3/ink/uexEuexE/uexEuexE/YW5uYS5zenlkbG93c2thQGhpdGFjaGllbmVyZ3kuY29t//cetrit.co/wp-includes/ID3/ink/uexEuexE/uexEuexE/YW5uYS5zenlkbG93c2thQGhpdGFjaGllbmVyZ3kuY29t//cetrit.co/wp-includes/ID3/ink/uexEuexE/uexEuexE/YW5uYS5zenlkbG93c2thQGhpdGFjaGllbmVyZ3kuY29t

108.167.149.240

17 kB

URL
cetrit.co/wp-includes/ID3/ink/uexEuexE/uexEuexE/YW5uYS5zenlkbG93c2thQGhpdGFjaGllbmVyZ3kuY29t//cetrit.co/wp-includes/ID3/ink/uexEuexE/uexEuexE/YW5uYS5zenlkbG93c2thQGhpdGFjaGllbmVyZ3kuY29t//cetrit.co/wp-includes/ID3/ink/uexEuexE/uexEuexE/YW5uYS5zenlkbG93c2thQGhpdGFjaGllbmVyZ3kuY29t//cetrit.co/wp-includes/ID3/ink/uexEuexE/uexEuexE/YW5uYS5zenlkbG93c2thQGhpdGFjaGllbmVyZ3kuY29t//cetrit.co/wp-includes/ID3/ink/uexEuexE/uexEuexE/YW5uYS5zenlkbG93c2thQGhpdGFjaGllbmVyZ3kuY29t//cetrit.co/wp-includes/ID3/ink/uexEuexE/uexEuexE/YW5uYS5zenlkbG93c2thQGhpdGFjaGllbmVyZ3kuY29t//cetrit.co/wp-includes/ID3/ink/uexEuexE/uexEuexE/YW5uYS5zenlkbG93c2thQGhpdGFjaGllbmVyZ3kuY29t//cetrit.co/wp-includes/ID3/ink/uexEuexE/uexEuexE/YW5uYS5zenlkbG93c2thQGhpdGFjaGllbmVyZ3kuY29t//cetrit.co/wp-includes/ID3/ink/uexEuexE/uexEuexE/YW5uYS5zenlkbG93c2thQGhpdGFjaGllbmVyZ3kuY29t//cetrit.co/wp-includes/ID3/ink/uexEuexE/uexEuexE/YW5uYS5zenlkbG93c2thQGhpdGFjaGllbmVyZ3kuY29t//cetrit.co/wp-includes/ID3/ink/uexEuexE/uexEuexE/YW5uYS5zenlkbG93c2thQGhpdGFjaGllbmVyZ3kuY29t//cetrit.co/wp-includes/ID3/ink/uexEuexE/uexEuexE/YW5uYS5zenlkbG93c2thQGhpdGFjaGllbmVyZ3kuY29t//cetrit.co/wp-includes/ID3/ink/uexEuexE/uexEuexE/YW5uYS5zenlkbG93c2thQGhpdGFjaGllbmVyZ3kuY29t//cetrit.co/wp-includes/ID3/ink/uexEuexE/uexEuexE/YW5uYS5zenlkbG93c2thQGhpdGFjaGllbmVyZ3kuY29t//cetrit.co/wp-includes/ID3/ink/uexEuexE/uexEuexE/YW5uYS5zenlkbG93c2thQGhpdGFjaGllbmVyZ3kuY29t//cetrit.co/wp-includes/ID3/ink/uexEuexE/uexEuexE/YW5uYS5zenlkbG93c2thQGhpdGFjaGllbmVyZ3kuY29t//cetrit.co/wp-includes/ID3/ink/uexEuexE/uexEuexE/YW5uYS5zenlkbG93c2thQGhpdGFjaGllbmVyZ3kuY29t//cetrit.co/wp-includes/ID3/ink/uexEuexE/uexEuexE/YW5uYS5zenlkbG93c2thQGhpdGFjaGllbmVyZ3kuY29t//cetrit.co/wp-includes/ID3/ink/uexEuexE/uexEuexE/YW5uYS5zenlkbG93c2thQGhpdGFjaGllbmVyZ3kuY29t//cetrit.co/wp-includes/ID3/ink/uexEuexE/uexEuexE/YW5uYS5zenlkbG93c2thQGhpdGFjaGllbmVyZ3kuY29t//cetrit.co/wp-includes/ID3/ink/uexEuexE/uexEuexE/YW5uYS5zenlkbG93c2thQGhpdGFjaGllbmVyZ3kuY29t//cetrit.co/wp-includes/ID3/ink/uexEuexE/uexEuexE/YW5uYS5zenlkbG93c2thQGhpdGFjaGllbmVyZ3kuY29t//cetrit.co/wp-includes/ID3/ink/uexEuexE/uexEuexE/YW5uYS5zenlkbG93c2thQGhpdGFjaGllbmVyZ3kuY29t//cetrit.co/wp-includes/ID3/ink/uexEuexE/uexEuexE/YW5uYS5zenlkbG93c2thQGhpdGFjaGllbmVyZ3kuY29t//cetrit.co/wp-includes/ID3/ink/uexEuexE/uexEuexE/YW5uYS5zenlkbG93c2thQGhpdGFjaGllbmVyZ3kuY29t//cetrit.co/wp-includes/ID3/ink/uexEuexE/uexEuexE/YW5uYS5zenlkbG93c2thQGhpdGFjaGllbmVyZ3kuY29t//cetrit.co/wp-includes/ID3/ink/uexEuexE/uexEuexE/YW5uYS5zenlkbG93c2thQGhpdGFjaGllbmVyZ3kuY29t//cetrit.co/wp-includes/ID3/ink/uexEuexE/uexEuexE/YW5uYS5zenlkbG93c2thQGhpdGFjaGllbmVyZ3kuY29t//cetrit.co/wp-includes/ID3/ink/uexEuexE/uexEuexE/YW5uYS5zenlkbG93c2thQGhpdGFjaGllbmVyZ3kuY29t//cetrit.co/wp-includes/ID3/ink/uexEuexE/uexEuexE/YW5uYS5zenlkbG93c2thQGhpdGFjaGllbmVyZ3kuY29t//cetrit.co/wp-includes/ID3/ink/uexEuexE/uexEuexE/YW5uYS5zenlkbG93c2thQGhpdGFjaGllbmVyZ3kuY29t//cetrit.co/wp-includes/ID3/ink/uexEuexE/uexEuexE/YW5uYS5zenlkbG93c2thQGhpdGFjaGllbmVyZ3kuY29t
IP
108.167.149.240:0
ASN
#46606 UNIFIEDLAYER-AS-1

File type
gzip compressed data, from Unix\012- data
Size
17 kB (17194 bytes)
Hash
de471a049a9283c19de69db10155ff6d
2dedf6db72b384154dd1b5936279bbf9d1c27fe2
0b123d4ad4b3fc4440adc2caeb7de0150c6c08abde0287ba6df72b80e26148ee

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Microsoft Outlook

HTTP Headers

GET /wp-includes/ID3/ink/uexEuexE/uexEuexE/YW5uYS5zenlkbG93c2thQGhpdGFjaGllbmVyZ3kuY29t//cetrit.co/wp-includes/ID3/ink/uexEuexE/uexEuexE/YW5uYS5zenlkbG93c2thQGhpdGFjaGllbmVyZ3kuY29t//cetrit.co/wp-includes/ID3/ink/uexEuexE/uexEuexE/YW5uYS5zenlkbG93c2thQGhpdGFjaGllbmVyZ3kuY29t//cetrit.co/wp-includes/ID3/ink/uexEuexE/uexEuexE/YW5uYS5zenlkbG93c2thQGhpdGFjaGllbmVyZ3kuY29t//cetrit.co/wp-includes/ID3/ink/uexEuexE/uexEuexE/YW5uYS5zenlkbG93c2thQGhpdGFjaGllbmVyZ3kuY29t//cetrit.co/wp-includes/ID3/ink/uexEuexE/uexEuexE/YW5uYS5zenlkbG93c2thQGhpdGFjaGllbmVyZ3kuY29t//cetrit.co/wp-includes/ID3/ink/uexEuexE/uexEuexE/YW5uYS5zenlkbG93c2thQGhpdGFjaGllbmVyZ3kuY29t//cetrit.co/wp-includes/ID3/ink/uexEuexE/uexEuexE/YW5uYS5zenlkbG93c2thQGhpdGFjaGllbmVyZ3kuY29t//cetrit.co/wp-includes/ID3/ink/uexEuexE/uexEuexE/YW5uYS5zenlkbG93c2thQGhpdGFjaGllbmVyZ3kuY29t//cetrit.co/wp-includes/ID3/ink/uexEuexE/uexEuexE/YW5uYS5zenlkbG93c2thQGhpdGFjaGllbmVyZ3kuY29t//cetrit.co/wp-includes/ID3/ink/uexEuexE/uexEuexE/YW5uYS5zenlkbG93c2thQGhpdGFjaGllbmVyZ3kuY29t//cetrit.co/wp-includes/ID3/ink/uexEuexE/uexEuexE/YW5uYS5zenlkbG93c2thQGhpdGFjaGllbmVyZ3kuY29t//cetrit.co/wp-includes/ID3/ink/uexEuexE/uexEuexE/YW5uYS5zenlkbG93c2thQGhpdGFjaGllbmVyZ3kuY29t//cetrit.co/wp-includes/ID3/ink/uexEuexE/uexEuexE/YW5uYS5zenlkbG93c2thQGhpdGFjaGllbmVyZ3kuY29t//cetrit.co/wp-includes/ID3/ink/uexEuexE/uexEuexE/YW5uYS5zenlkbG93c2thQGhpdGFjaGllbmVyZ3kuY29t//cetrit.co/wp-includes/ID3/ink/uexEuexE/uexEuexE/YW5uYS5zenlkbG93c2thQGhpdGFjaGllbmVyZ3kuY29t//cetrit.co/wp-includes/ID3/ink/uexEuexE/uexEuexE/YW5uYS5zenlkbG93c2thQGhpdGFjaGllbmVyZ3kuY29t//cetrit.co/wp-includes/ID3/ink/uexEuexE/uexEuexE/YW5uYS5zenlkbG93c2thQGhpdGFjaGllbmVyZ3kuY29t//cetrit.co/wp-includes/ID3/ink/uexEuexE/uexEuexE/YW5uYS5zenlkbG93c2thQGhpdGFjaGllbmVyZ3kuY29t//cetrit.co/wp-includes/ID3/ink/uexEuexE/uexEuexE/YW5uYS5zenlkbG93c2thQGhpdGFjaGllbmVyZ3kuY29t//cetrit.co/wp-includes/ID3/ink/uexEuexE/uexEuexE/YW5uYS5zenlkbG93c2thQGhpdGFjaGllbmVyZ3kuY29t//cetrit.co/wp-includes/ID3/ink/uexEuexE/uexEuexE/YW5uYS5zenlkbG93c2thQGhpdGFjaGllbmVyZ3kuY29t//cetrit.co/wp-includes/ID3/ink/uexEuexE/uexEuexE/YW5uYS5zenlkbG93c2thQGhpdGFjaGllbmVyZ3kuY29t//cetrit.co/wp-includes/ID3/ink/uexEuexE/uexEuexE/YW5uYS5zenlkbG93c2thQGhpdGFjaGllbmVyZ3kuY29t//cetrit.co/wp-includes/ID3/ink/uexEuexE/uexEuexE/YW5uYS5zenlkbG93c2thQGhpdGFjaGllbmVyZ3kuY29t//cetrit.co/wp-includes/ID3/ink/uexEuexE/uexEuexE/YW5uYS5zenlkbG93c2thQGhpdGFjaGllbmVyZ3kuY29t//cetrit.co/wp-includes/ID3/ink/uexEuexE/uexEuexE/YW5uYS5zenlkbG93c2thQGhpdGFjaGllbmVyZ3kuY29t//cetrit.co/wp-includes/ID3/ink/uexEuexE/uexEuexE/YW5uYS5zenlkbG93c2thQGhpdGFjaGllbmVyZ3kuY29t//cetrit.co/wp-includes/ID3/ink/uexEuexE/uexEuexE/YW5uYS5zenlkbG93c2thQGhpdGFjaGllbmVyZ3kuY29t//cetrit.co/wp-includes/ID3/ink/uexEuexE/uexEuexE/YW5uYS5zenlkbG93c2thQGhpdGFjaGllbmVyZ3kuY29t//cetrit.co/wp-includes/ID3/ink/uexEuexE/uexEuexE/YW5uYS5zenlkbG93c2thQGhpdGFjaGllbmVyZ3kuY29t//cetrit.co/wp-includes/ID3/ink/uexEuexE/uexEuexE/YW5uYS5zenlkbG93c2thQGhpdGFjaGllbmVyZ3kuY29t HTTP/1.1
Host: cetrit.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
refresh: 0;url=https://agnieszkawesecka.pl/online-microsoft_com-48736743377809387436457-microsoft_8476365435473648347765347346837493467354634576726326362456354653263726372635625327637_%D8%AD%D8%B5%20%D8%AD%D8%A8%D9%88%D8%A8%20%D8%A7%D9%84%D8%A3%D8%B1%D8%B2%20%D8%A7%D9%84%D8%AD%D8%A7%D9%85%D8%B6%D8%A9-rr%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7F%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7.html?s=anna.szydlowska@hitachienergy.com
content-encoding: gzip
vary: Accept-Encoding
accept-ranges: none
content-type: text/html; charset=UTF-8
date: Mon, 27 Nov 2023 18:00:39 GMT
server: Apache
X-Firefox-Spdy: h2

aadcdn.msftauth.net/shared/1.0/content/images/backgrounds/2_bc3d32a696895f78c19df6c717586a5d.svg

152.199.23.37

200 OK

673 B

URL GET HTTP/2
aadcdn.msftauth.net/shared/1.0/content/images/backgrounds/2_bc3d32a696895f78c19df6c717586a5d.svg
IP
152.199.23.37:443
ASN
#15133 EDGECAST

Requested by
https://agnieszkawesecka.pl/online-microsoft_com-48736743377809387436457-microsoft_8476365435473648347765347346837493467354634576726326362456354653263726372635625327637_%D8%AD%D8%B5%20%D8%AD%D8%A8%D9%88%D8%A8%20%D8%A7%D9%84%D8%A3%D8%B1%D8%B2%20%D8%A7%D9%84%D8%AD%D8%A7%D9%85%D8%B6%D8%A9-rr%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7F%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7.html?s=anna.szydlowska@hitachienergy.com
Certificate
IssuerDigiCert Inc
Subjectaadcdn.msftauth.net
Fingerprint99:06:D8:1E:EC:BF:DB:78:DF:F4:89:A3:ED:23:07:3D:79:F1:16:D6
ValidityTue, 31 Jan 2023 00:00:00 GMT - Wed, 31 Jan 2024 23:59:59 GMT

File type
SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (1864), with no line terminators
Size
673 B (673 bytes)
Hash
bc3d32a696895f78c19df6c717586a5d
9191cb156a30a3ed79c44c0a16c95159e8ff689d
0e88b6fcbb8591edfd28184fa70a04b6dd3af8a14367c628edd7caba32e58c68

HTTP Headers

GET /shared/1.0/content/images/backgrounds/2_bc3d32a696895f78c19df6c717586a5d.svg HTTP/1.1
Host: aadcdn.msftauth.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://agnieszkawesecka.pl/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-encoding: gzip
accept-ranges: bytes
access-control-allow-origin: *
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
age: 14332007
cache-control: public, max-age=31536000
content-md5: DhdidjYrlCeaRJJRG/y9mA==
content-type: image/svg+xml
date: Mon, 27 Nov 2023 18:00:48 GMT
etag: 0x8D7B007297AE131
last-modified: Wed, 12 Feb 2020 22:01:50 GMT
server: ECAcc (ska/F732)
vary: Accept-Encoding
x-cache: HIT
x-ms-blob-type: BlockBlob
x-ms-lease-status: unlocked
x-ms-request-id: 68d21ab8-f01e-0076-6702-9f059f000000
x-ms-version: 2009-09-19
content-length: 673
X-Firefox-Spdy: h2

challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/uwizx/0x4AAAAAAANitG7_q4LMVK7c/auto/normal

104.17.2.184

200 OK

73 kB

URL GET HTTP/3
challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/uwizx/0x4AAAAAAANitG7_q4LMVK7c/auto/normal
IP
104.17.2.184:443
ASN
#13335 CLOUDFLARENET

Requested by
https://agnieszkawesecka.pl/online-microsoft_com-48736743377809387436457-microsoft_8476365435473648347765347346837493467354634576726326362456354653263726372635625327637_%D8%AD%D8%B5%20%D8%AD%D8%A8%D9%88%D8%A8%20%D8%A7%D9%84%D8%A3%D8%B1%D8%B2%20%D8%A7%D9%84%D8%AD%D8%A7%D9%85%D8%B6%D8%A9-rr%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7F%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7.html?s=anna.szydlowska@hitachienergy.com
Certificate
IssuerCloudflare, Inc.
Subjectchallenges.cloudflare.com
Fingerprint5F:E4:AA:8C:2E:24:D2:B1:69:9D:13:28:31:5C:65:FA:97:2A:E9:6E
ValidityFri, 18 Aug 2023 00:00:00 GMT - Sat, 17 Aug 2024 23:59:59 GMT

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (40091)
Size
73 kB (72921 bytes)
Hash
df859b7b77a1e41817322354236aacc3
86086717741fd0562b7e7f5d4f7ac967050d0727
58255d9fd173eba06993175ad946c525d1a818a4bb4f8cc990800a03fb9f6f7f

HTTP Headers

GET /cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/uwizx/0x4AAAAAAANitG7_q4LMVK7c/auto/normal HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://agnieszkawesecka.pl/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Mon, 27 Nov 2023 18:00:40 GMT
content-type: text/html; charset=UTF-8
cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
content-security-policy: frame-src https://challenges.cloudflare.com/ blob:; base-uri 'self'
cross-origin-embedder-policy: require-corp
cross-origin-opener-policy: same-origin
cross-origin-resource-policy: cross-origin
document-policy: js-profiling
origin-agent-cluster: ?1
permissions-policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()
referrer-policy: same-origin
server: cloudflare
cf-ray: 82cc45a69ed056a4-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

segy.xyz/cap.php

152.89.246.205

200 OK

31 kB

URL POST HTTP/1.1
segy.xyz/cap.php
IP
152.89.246.205:443
ASN
#30823 combahton GmbH

Requested by
https://agnieszkawesecka.pl/online-microsoft_com-48736743377809387436457-microsoft_8476365435473648347765347346837493467354634576726326362456354653263726372635625327637_%D8%AD%D8%B5%20%D8%AD%D8%A8%D9%88%D8%A8%20%D8%A7%D9%84%D8%A3%D8%B1%D8%B2%20%D8%A7%D9%84%D8%AD%D8%A7%D9%85%D8%B6%D8%A9-rr%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7F%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7.html?s=anna.szydlowska@hitachienergy.com
Certificate
IssuerLet's Encrypt
Subjectsegy.xyz
Fingerprint6F:DF:90:EC:AE:D6:E0:13:C7:5C:47:EA:1A:C8:4F:0D:C0:F5:86:74
ValiditySun, 05 Nov 2023 07:19:49 GMT - Sat, 03 Feb 2024 07:19:48 GMT

File type
JSON data\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (30973), with no line terminators
Size
31 kB (30973 bytes)
Hash
b66f5bbc46bbcff1bb76b3a8362c7de9
ce1b6a1b4079220ca451dad480c9f79aa9fa80b8
6103f0ce68cbfda93b60873c50931d776b75dabaf90b056cc96dd6883f341419

HTTP Headers

POST /cap.php HTTP/1.1
Host: segy.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
Content-Length: 647
Origin: https://agnieszkawesecka.pl
DNT: 1
Connection: keep-alive
Referer: https://agnieszkawesecka.pl/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Mon, 27 Nov 2023 18:00:43 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin: *
Content-Encoding: gzip

aadcdn.msftauth.net/shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico

152.199.23.37

200 OK

17 kB

URL GET HTTP/2
aadcdn.msftauth.net/shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico
IP
152.199.23.37:443
ASN
#15133 EDGECAST

Requested by
https://agnieszkawesecka.pl/online-microsoft_com-48736743377809387436457-microsoft_8476365435473648347765347346837493467354634576726326362456354653263726372635625327637_%D8%AD%D8%B5%20%D8%AD%D8%A8%D9%88%D8%A8%20%D8%A7%D9%84%D8%A3%D8%B1%D8%B2%20%D8%A7%D9%84%D8%AD%D8%A7%D9%85%D8%B6%D8%A9-rr%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7F%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7.html?s=anna.szydlowska@hitachienergy.com
Certificate
IssuerDigiCert Inc
Subjectaadcdn.msftauth.net
Fingerprint99:06:D8:1E:EC:BF:DB:78:DF:F4:89:A3:ED:23:07:3D:79:F1:16:D6
ValidityTue, 31 Jan 2023 00:00:00 GMT - Wed, 31 Jan 2024 23:59:59 GMT

File type
MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors\012- data
Size
17 kB (17174 bytes)
Hash
12e3dac858061d088023b2bd48e2fa96
e08ce1a144eceae0c3c2ea7a9d6fbc5658f24ce5
90cdaf487716184e4034000935c605d1633926d348116d198f355a98b8c6cd21

HTTP Headers

GET /shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico HTTP/1.1
Host: aadcdn.msftauth.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://agnieszkawesecka.pl/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Length,Date,Transfer-Encoding
age: 15607540
cache-control: public, max-age=31536000
content-md5: EuPayFgGHQiAI7K9SOL6lg==
content-type: image/x-icon
date: Mon, 27 Nov 2023 18:00:48 GMT
etag: 0x8D8731240E548EB
last-modified: Sun, 18 Oct 2020 03:02:30 GMT
server: ECAcc (ska/F738)
x-cache: HIT
x-ms-blob-type: BlockBlob
x-ms-lease-status: unlocked
x-ms-request-id: 003b7cc6-501e-0067-4768-9344ba000000
x-ms-version: 2009-09-19
content-length: 17174
X-Firefox-Spdy: h2

agnieszkawesecka.pl/online-microsoft_com-48736743377809387436457-microsoft_8476365435473648347765347346837493467354634576726326362456354653263726372635625327637_%D8%AD%D8%B5%20%D8%AD%D8%A8%D9%88%D8%A8%20%D8%A7%D9%84%D8%A3%D8%B1%D8%B2%20%D8%A7%D9%84%D8%AD%D8%A7%D9%85%D8%B6%D8%A9-rr%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7F%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7.html?s=anna.szydlowska@hitachienergy.com

188.114.97.1

200 OK

3.6 kB

URL User Request GET HTTP/2
agnieszkawesecka.pl/online-microsoft_com-48736743377809387436457-microsoft_8476365435473648347765347346837493467354634576726326362456354653263726372635625327637_%D8%AD%D8%B5%20%D8%AD%D8%A8%D9%88%D8%A8%20%D8%A7%D9%84%D8%A3%D8%B1%D8%B2%20%D8%A7%D9%84%D8%AD%D8%A7%D9%85%D8%B6%D8%A9-rr%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7F%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7.html?s=anna.szydlowska@hitachienergy.com
IP
188.114.97.1:443
ASN
#13335 CLOUDFLARENET

Certificate
IssuerLet's Encrypt
Subjectagnieszkawesecka.pl
FingerprintED:DD:EC:0A:35:7D:02:85:E0:91:DD:95:17:23:1F:83:E6:17:49:00
ValidityThu, 23 Nov 2023 03:13:02 GMT - Wed, 21 Feb 2024 03:13:01 GMT

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (3769), with no line terminators
Size
3.6 kB (3561 bytes)
Hash
6189987bf004a1328e35348cf2a5f5be
6325d0a7ebd08307e72e4c425cc822fc1f2ea528
2e464ba239b1bb963cccc39592b3d5627ba075425b5c04ec4b49717abed0f55d

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Microsoft Outlook

HTTP Headers

GET /online-microsoft_com-48736743377809387436457-microsoft_8476365435473648347765347346837493467354634576726326362456354653263726372635625327637_%D8%AD%D8%B5%20%D8%AD%D8%A8%D9%88%D8%A8%20%D8%A7%D9%84%D8%A3%D8%B1%D8%B2%20%D8%A7%D9%84%D8%AD%D8%A7%D9%85%D8%B6%D8%A9-rr%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7F%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7.html?s=anna.szydlowska@hitachienergy.com HTTP/1.1
Host: agnieszkawesecka.pl
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Mon, 27 Nov 2023 18:00:40 GMT
content-type: text/html
last-modified: Thu, 23 Nov 2023 04:12:01 GMT
vary: Accept-Encoding
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=GEcd%2FvDrwQ5l8ryEKBgGLS23Tds46yrptKNAU%2BQ0%2FkYm9EAnxHCOqSu0XI2cR%2BISlRgCgurwXVUPqSYc2h45bPPWztyExEnJgaqPUNc42EcRz6myoSXiNnAbAzSYm2%2BysMBgorre"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 82cc45a248a2b518-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

agnieszkawesecka.pl/favicon.ico

188.114.97.1

404 Not Found

27 kB

URL GET HTTP/2
agnieszkawesecka.pl/favicon.ico
IP
188.114.97.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://agnieszkawesecka.pl/online-microsoft_com-48736743377809387436457-microsoft_8476365435473648347765347346837493467354634576726326362456354653263726372635625327637_%D8%AD%D8%B5%20%D8%AD%D8%A8%D9%88%D8%A8%20%D8%A7%D9%84%D8%A3%D8%B1%D8%B2%20%D8%A7%D9%84%D8%AD%D8%A7%D9%85%D8%B6%D8%A9-rr%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7F%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7.html?s=anna.szydlowska@hitachienergy.com
Certificate
IssuerLet's Encrypt
Subjectagnieszkawesecka.pl
FingerprintED:DD:EC:0A:35:7D:02:85:E0:91:DD:95:17:23:1F:83:E6:17:49:00
ValidityThu, 23 Nov 2023 03:13:02 GMT - Wed, 21 Feb 2024 03:13:01 GMT

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (611)
Size
27 kB (27242 bytes)
Hash
df3d48946e8d3f5a83608308edbb4b86
47b9c40c97abf2658df96b1c06109324e15e1a00
570a6631252b8a52df4de0e953ae77dbdf524dfc3637cda2840494a0d2b49499

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: agnieszkawesecka.pl
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://agnieszkawesecka.pl/online-microsoft_com-48736743377809387436457-microsoft_8476365435473648347765347346837493467354634576726326362456354653263726372635625327637_%D8%AD%D8%B5%20%D8%AD%D8%A8%D9%88%D8%A8%20%D8%A7%D9%84%D8%A3%D8%B1%D8%B2%20%D8%A7%D9%84%D8%AD%D8%A7%D9%85%D8%B6%D8%A9-rr%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7F%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7.html?s=anna.szydlowska@hitachienergy.com
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 404 Not Found
date: Mon, 27 Nov 2023 18:00:40 GMT
content-type: text/html
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: HIT
age: 35
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=eqnRlqNeheslmItJ07cAdZ2HnijrooOHsnaznSMxePSk5UPRDzwjvustlqfaL4%2BzOHB4W4ae9e47SavkKatqlim7Z7rOPII%2B6qQBLNEucPl5boX2KyRsRVAoE0LsqAZl1zwrx1SH"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 82cc45a65e9db518-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

challenges.cloudflare.com/turnstile/v0/g/9914b343/api.js?onload=onloadTurnstileCallback

104.17.2.184

200 OK

34 kB

URL GET HTTP/2
challenges.cloudflare.com/turnstile/v0/g/9914b343/api.js?onload=onloadTurnstileCallback
IP
104.17.2.184:443
ASN
#13335 CLOUDFLARENET

Requested by
https://agnieszkawesecka.pl/online-microsoft_com-48736743377809387436457-microsoft_8476365435473648347765347346837493467354634576726326362456354653263726372635625327637_%D8%AD%D8%B5%20%D8%AD%D8%A8%D9%88%D8%A8%20%D8%A7%D9%84%D8%A3%D8%B1%D8%B2%20%D8%A7%D9%84%D8%AD%D8%A7%D9%85%D8%B6%D8%A9-rr%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7F%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7.html?s=anna.szydlowska@hitachienergy.com
Certificate
IssuerCloudflare, Inc.
Subjectchallenges.cloudflare.com
Fingerprint5F:E4:AA:8C:2E:24:D2:B1:69:9D:13:28:31:5C:65:FA:97:2A:E9:6E
ValidityFri, 18 Aug 2023 00:00:00 GMT - Sat, 17 Aug 2024 23:59:59 GMT

File type
ASCII text, with very long lines (34253)
Size
34 kB (34254 bytes)
Hash
6142a5f5c66e2c1be52ee9506a565962
c3b39e8352efd1e0619b6dd62af8b2a917622868
51cd12da61a7401c73472b2ac77067adfa30e9fc0545b4b7c240e9154e011fc7

HTTP Headers

GET /turnstile/v0/g/9914b343/api.js?onload=onloadTurnstileCallback HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://agnieszkawesecka.pl/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Mon, 27 Nov 2023 18:00:40 GMT
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
cache-control: max-age=31536000
vary: Accept-Encoding
server: cloudflare
cf-ray: 82cc45a4fd1e712a-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

Report Overview

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (9)

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML

Observations

Hash

Observations

Hash

Observations

Hash

Observations

Hash

Observations

Hash

HTTP Transactions (19)

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL

IP

ASN

Certificate