Report - web.saginawchamber.org/cwt/external/wcpages/referral.aspx?ReferralType=W&ProfileID=17218&ListingID=10575&CategoryID=105&SubCategoryID=0&url=//manxzc%E3%80%82org/readme/7ZzHTj2ghPlxdsVcUhvZBQm3wk8fsGSRW-2Ft8e35jyd7w2MRegjFZ-2FucnAXT6794zO09c_URK63rxHNyfi1jEBdkw3wjUupajZnMgjf-2BBzv1iTaR-2FFG4zX6M-2B5dSl3Pw93-2BOSm0Eis7b1HO3hRfMRmqpUAJKwntZMIUQ58Nj4vAproVXczjdfCEihvRKlxhDrNPRL0ySWAlU9hei391ryLh9BJguFJVLnR-2FZmoSVHT9Sxdp5RjqUACBAWUFAjBsPDlZodXEd-2FoPt9cbMnd5e3hpR-2BxGzopjKO3enNbAn-2FpUYPPNMaFgN6VaSzZAN2NPQrelDpo03uFsBLPjELHOMdWkLeRpMzJpZyvcn3Y-2FsOFa8g3QDyJW-2FSrA7dsVXj-2Bbz0S-2B-2BBkZ2fpqvz8ikhirWX2vKCqF-2FeDR-2FK9E1Y8VmSYd-2Bh-2BmXDWGcle40VSAZj-2Fwv0QRyHPsobB3u4BMC1b-2BhowdIqNK90WdvI-2FMKaAE3eRj0234cs-3D/dHJhY3kuY2FtcEBzY2FzdXJnZXJ5LmNvbQ==

Report Overview

Visited public
2023-12-01 18:48:37
Tags
phishing microsoft outlook
URL
web.saginawchamber.org/cwt/external/wcpages/referral.aspx?ReferralType=W&ProfileID=17218&ListingID=10575&CategoryID=105&SubCategoryID=0&url=//manxzc%E3%80%82org/readme/7ZzHTj2ghPlxdsVcUhvZBQm3wk8fsGSRW-2Ft8e35jyd7w2MRegjFZ-2FucnAXT6794zO09c_URK63rxHNyfi1jEBdkw3wjUupajZnMgjf-2BBzv1iTaR-2FFG4zX6M-2B5dSl3Pw93-2BOSm0Eis7b1HO3hRfMRmqpUAJKwntZMIUQ58Nj4vAproVXczjdfCEihvRKlxhDrNPRL0ySWAlU9hei391ryLh9BJguFJVLnR-2FZmoSVHT9Sxdp5RjqUACBAWUFAjBsPDlZodXEd-2FoPt9cbMnd5e3hpR-2BxGzopjKO3enNbAn-2FpUYPPNMaFgN6VaSzZAN2NPQrelDpo03uFsBLPjELHOMdWkLeRpMzJpZyvcn3Y-2FsOFa8g3QDyJW-2FSrA7dsVXj-2Bbz0S-2B-2BBkZ2fpqvz8ikhirWX2vKCqF-2FeDR-2FK9E1Y8VmSYd-2Bh-2BmXDWGcle40VSAZj-2Fwv0QRyHPsobB3u4BMC1b-2BhowdIqNK90WdvI-2FMKaAE3eRj0234cs-3D/dHJhY3kuY2FtcEBzY2FzdXJnZXJ5LmNvbQ==
Finishing URL
agnieszkawesecka.pl/online-microsoft_com-48736743377809387436457-microsoft_8476365435473648347765347346837493467354634576726326362456354653263726372635625327637_%D8%AD%D8%B5%20%D8%AD%D8%A8%D9%88%D8%A8%20%D8%A7%D9%84%D8%A3%D8%B1%D8%B2%20%D8%A7%D9%84%D8%AD%D8%A7%D9%85%D8%B6%D8%A9-rr%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7F%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7.html?s=tracy.camp@scasurgery.com
IP / ASN
104.18.246.141
#13335 CLOUDFLARENET
Title
Sign In
Phishing - Microsoft Outlook

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
cdnjs.cloudflare.com	235	2009-02-17	2015-04-17 22:46:33	2023-12-01 05:09:17	908 B	58 kB	104.17.24.14
adfs365.scasurgery.com	unknown	2007-06-04	2019-11-30 13:21:27	2023-11-04 03:38:02	996 B	125 kB	161.249.150.16
agnieszkawesecka.pl	unknown	2015-08-01	2019-06-09 06:18:06	2023-11-30 22:54:55	2.1 kB	32 kB	188.114.96.1
challenges.cloudflare.com	unknown	2009-02-17	2021-10-20 07:02:03	2023-12-01 05:10:15	1.6 kB	142 kB	104.17.3.184
manxzc.org	unknown	2023-11-26	2023-11-28 14:18:08	2023-11-28 14:18:08	1.1 kB	798 B	91.209.70.135
ajax.googleapis.com	12905	2005-01-25	2013-08-16 11:51:31	2023-12-01 08:07:42	446 B	32 kB	142.250.74.10
segy.shop	unknown	2023-11-29	2023-11-30 15:40:23	2023-11-30 22:54:40	1.6 kB	15 kB	152.89.246.205

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (9)

	URL	From	Size	First Seen	Last Seen
	cdnjs.cloudflare.com/ajax/libs/jquery/3.6.0/jquery.min.js	ScriptElement	90 kB	2023-03-07	2025-05-11
Pretty URL cdnjs.cloudflare.com/ajax/libs/jquery/3.6.0/jquery.min.js IP 104.17.24.14 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:02 Last Seen2025-05-11 12:42 Times Seen205877 Hash 8fb8fee4fcc3cc86ff6c724154c49c42 b82d238d4e31fdf618bae8ac11a6c812c03dd0d4 ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e Loading...

	unknown	ScriptElement	7.5 kB	2023-11-30	2024-08-20
Pretty Introduced by scriptElement Embedded in HTML false Observations First Seen2023-11-30 22:54 Last Seen2024-08-20 17:17 Times Seen320 Hash c69c6fd73b6558bd75115e1f19142ece 3999fcf9b030207747715a8e474df2f02f84f7b6 af71f0bb7ddde9cf3eee892b7641eded64f41ce0ed77f8092f69240d5aa82b6f Loading...

	challenges.cloudflare.com/turnstile/v0/api.js?onload=onloadTurnstileCallback	ScriptElement	34 kB	2023-11-30	2023-12-14
Pretty URL challenges.cloudflare.com/turnstile/v0/api.js?onload=onloadTurnstileCallback IP 104.17.3.184 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-11-30 14:29 Last Seen2023-12-14 14:42 Times Seen11689 Hash 8c90f391245a994ae95e644a587c8626 7bfc99336571d0ccfe38f9e1d18cb26b4adfc316 acbe221d9bb71e85d0a3b52a7a9d44ee4669ab664186b32d0c737a2be62681e7 Loading...

	agnieszkawesecka.pl/online-microsoft_com-48736743377809387436457-microsoft_8476365435473648347765347346837493467354634576726326362456354653263726372635625327637_%D8%AD%D8%B5%20%D8%AD%D8%A8%D9%88%D8%A8%20%D8%A7%D9%84%D8%A3%D8%B1%D8%B2%20%D8%A7%D9%84%D8%AD%D8%A7%D9%85%D8%B6%D8%A9-rr%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7F%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7.html?s=tracy.camp@scasurgery.com	ScriptElement	0 B	0001-01-01	2025-05-11
Pretty URL agnieszkawesecka.pl/online-microsoft_com-48736743377809387436457-microsoft_8476365435473648347765347346837493467354634576726326362456354653263726372635625327637_%D8%AD%D8%B5%20%D8%AD%D8%A8%D9%88%D8%A8%20%D8%A7%D9%84%D8%A3%D8%B1%D8%B2%20%D8%A7%D9%84%D8%AD%D8%A7%D9%85%D8%B6%D8%A9-rr%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7F%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7.html?s=tracy.camp@scasurgery.com IP 188.114.96.1 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen0001-01-01 00:00 Last Seen2025-05-11 12:42 Times Seen4654370 Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Loading...

	unknown	ScriptElement	4.5 kB	2023-12-01	2024-08-20
Pretty Introduced by scriptElement Embedded in HTML false Observations First Seen2023-12-01 17:19 Last Seen2024-08-20 17:09 Times Seen2 Hash df5d0fba9e4ed6f4a59e0f818deea638 b7c806a397a357a46516551aba7f8ddb49082a5b 5675a641b1e35e498778aa461a2c65f83030c1a565ca1ab7366899a30d314623 Loading...

		Size	First Seen	Last Seen
	#1 Eval - 9e925e9341b490bfd3b4c4ca3b0c1ef2	4 B	2023-03-07 01:03	2025-05-11 12:36
Pretty Observations First Seen2023-03-07 01:03 Last Seen2025-05-11 12:36 Times Seen369061 Hash 9e925e9341b490bfd3b4c4ca3b0c1ef2 c2543fff3bfa6f144c2f06a7de6cd10c0b650cae 1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408 Loading...

		Size	First Seen	Last Seen
	#1 Write - de962e8dfaee72c7ca0379098902f4f0	30 kB	2023-11-30 22:54	2024-08-20 17:17
Pretty Observations First Seen2023-11-30 22:54 Last Seen2024-08-20 17:17 Times Seen322 Hash de962e8dfaee72c7ca0379098902f4f0 34c0d1071f6db631d91097eda504c4e0c47cccde 4a50fa0043595864a83dafe1e7d6b14e10fb7545f2ff095d0fa92ada2beebcd5 Loading...

	#2 Write - 440475cb6ada70fbe1b5ebd5c2ed77e6	7.3 kB	2024-08-20 17:09	2024-08-20 17:09
Pretty Observations First Seen2024-08-20 17:09 Last Seen2024-08-20 17:09 Times Seen2 Hash 440475cb6ada70fbe1b5ebd5c2ed77e6 da05a3b64b304940b5567783c63f4b0ddfc33f2f c983283723a77077678e4680dc19b05828cd6b063763f6f9fcd782f470c5fc35 Loading...

	#3 Write - d50fe447c67a515d4ba936505175a8fe	3.6 kB	2023-11-30 14:29	2024-08-20 17:20
Pretty Observations First Seen2023-11-30 14:29 Last Seen2024-08-20 17:20 Times Seen11653 Hash d50fe447c67a515d4ba936505175a8fe 78d20da444441fb45dcf61e09d9bcbc9f01502e2 7dcf7a54137031c03f28f6a33cb62b258023c5de06d504259d5ad39f16b1b85e Loading...

HTTP Transactions (14)

URL IP Response Size

manxzc.org/readme/7ZzHTj2ghPlxdsVcUhvZBQm3wk8fsGSRW-2Ft8e35jyd7w2MRegjFZ-2FucnAXT6794zO09c_URK63rxHNyfi1jEBdkw3wjUupajZnMgjf-2BBzv1iTaR-2FFG4zX6M-2B5dSl3Pw93-2BOSm0Eis7b1HO3hRfMRmqpUAJKwntZMIUQ58Nj4vAproVXczjdfCEihvRKlxhDrNPRL0ySWAlU9hei391ryLh9BJguFJVLnR-2FZmoSVHT9Sxdp5RjqUACBAWUFAjBsPDlZodXEd-2FoPt9cbMnd5e3hpR-2BxGzopjKO3enNbAn-2FpUYPPNMaFgN6VaSzZAN2NPQrelDpo03uFsBLPjELHOMdWkLeRpMzJpZyvcn3Y-2FsOFa8g3QDyJW-2FSrA7dsVXj-2Bbz0S-2B-2BBkZ2fpqvz8ikhirWX2vKCqF-2FeDR-2FK9E1Y8VmSYd-2Bh-2BmXDWGcle40VSAZj-2Fwv0QRyHPsobB3u4BMC1b-2BhowdIqNK90WdvI-2FMKaAE3eRj0234cs-3D/dHJhY3kuY2FtcEBzY2FzdXJnZXJ5LmNvbQ==

91.209.70.135

0 B

URL
manxzc.org/readme/7ZzHTj2ghPlxdsVcUhvZBQm3wk8fsGSRW-2Ft8e35jyd7w2MRegjFZ-2FucnAXT6794zO09c_URK63rxHNyfi1jEBdkw3wjUupajZnMgjf-2BBzv1iTaR-2FFG4zX6M-2B5dSl3Pw93-2BOSm0Eis7b1HO3hRfMRmqpUAJKwntZMIUQ58Nj4vAproVXczjdfCEihvRKlxhDrNPRL0ySWAlU9hei391ryLh9BJguFJVLnR-2FZmoSVHT9Sxdp5RjqUACBAWUFAjBsPDlZodXEd-2FoPt9cbMnd5e3hpR-2BxGzopjKO3enNbAn-2FpUYPPNMaFgN6VaSzZAN2NPQrelDpo03uFsBLPjELHOMdWkLeRpMzJpZyvcn3Y-2FsOFa8g3QDyJW-2FSrA7dsVXj-2Bbz0S-2B-2BBkZ2fpqvz8ikhirWX2vKCqF-2FeDR-2FK9E1Y8VmSYd-2Bh-2BmXDWGcle40VSAZj-2Fwv0QRyHPsobB3u4BMC1b-2BhowdIqNK90WdvI-2FMKaAE3eRj0234cs-3D/dHJhY3kuY2FtcEBzY2FzdXJnZXJ5LmNvbQ==
IP
91.209.70.135:0
ASN
#43317 FNK LLC

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Microsoft Outlook

HTTP Headers

GET /readme/7ZzHTj2ghPlxdsVcUhvZBQm3wk8fsGSRW-2Ft8e35jyd7w2MRegjFZ-2FucnAXT6794zO09c_URK63rxHNyfi1jEBdkw3wjUupajZnMgjf-2BBzv1iTaR-2FFG4zX6M-2B5dSl3Pw93-2BOSm0Eis7b1HO3hRfMRmqpUAJKwntZMIUQ58Nj4vAproVXczjdfCEihvRKlxhDrNPRL0ySWAlU9hei391ryLh9BJguFJVLnR-2FZmoSVHT9Sxdp5RjqUACBAWUFAjBsPDlZodXEd-2FoPt9cbMnd5e3hpR-2BxGzopjKO3enNbAn-2FpUYPPNMaFgN6VaSzZAN2NPQrelDpo03uFsBLPjELHOMdWkLeRpMzJpZyvcn3Y-2FsOFa8g3QDyJW-2FSrA7dsVXj-2Bbz0S-2B-2BBkZ2fpqvz8ikhirWX2vKCqF-2FeDR-2FK9E1Y8VmSYd-2Bh-2BmXDWGcle40VSAZj-2Fwv0QRyHPsobB3u4BMC1b-2BhowdIqNK90WdvI-2FMKaAE3eRj0234cs-3D/dHJhY3kuY2FtcEBzY2FzdXJnZXJ5LmNvbQ== HTTP/1.1
Host: manxzc.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Fri, 01 Dec 2023 18:48:20 GMT
Server: Apache
refresh: 0;url=https://agnieszkawesecka.pl/online-microsoft_com-48736743377809387436457-microsoft_8476365435473648347765347346837493467354634576726326362456354653263726372635625327637_%D8%AD%D8%B5%20%D8%AD%D8%A8%D9%88%D8%A8%20%D8%A7%D9%84%D8%A3%D8%B1%D8%B2%20%D8%A7%D9%84%D8%AD%D8%A7%D9%85%D8%B6%D8%A9-rr%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7F%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7.html?s=tracy.camp@scasurgery.com
Content-Length: 0
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8

ajax.googleapis.com/ajax/libs/jquery/3.6.0/jquery.min.js

142.250.74.10

200 OK

31 kB

URL GET HTTP/2
ajax.googleapis.com/ajax/libs/jquery/3.6.0/jquery.min.js
IP
142.250.74.10:443
ASN
#15169 GOOGLE

Requested by
https://agnieszkawesecka.pl/online-microsoft_com-48736743377809387436457-microsoft_8476365435473648347765347346837493467354634576726326362456354653263726372635625327637_%D8%AD%D8%B5%20%D8%AD%D8%A8%D9%88%D8%A8%20%D8%A7%D9%84%D8%A3%D8%B1%D8%B2%20%D8%A7%D9%84%D8%AD%D8%A7%D9%85%D8%B6%D8%A9-rr%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7F%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7.html?s=tracy.camp@scasurgery.com
Certificate
IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
FingerprintCC:96:E0:52:E0:9B:EA:A9:A0:F8:88:9A:90:20:11:47:61:00:3C:42
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT

File type
ASCII text, with very long lines (65447)
Size
31 kB (31017 bytes)
Hash
8fb8fee4fcc3cc86ff6c724154c49c42
b82d238d4e31fdf618bae8ac11a6c812c03dd0d4
ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e

HTTP Headers

GET /ajax/libs/jquery/3.6.0/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://agnieszkawesecka.pl/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 31017
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 01 Dec 2023 05:46:05 GMT
expires: Sat, 30 Nov 2024 05:46:05 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
last-modified: Wed, 10 Mar 2021 14:28:09 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
age: 46935
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

segy.shop/cap.php

152.89.246.205

200 OK

6.5 kB

URL POST HTTP/1.1
segy.shop/cap.php
IP
152.89.246.205:443
ASN
#30823 combahton GmbH

Requested by
https://agnieszkawesecka.pl/online-microsoft_com-48736743377809387436457-microsoft_8476365435473648347765347346837493467354634576726326362456354653263726372635625327637_%D8%AD%D8%B5%20%D8%AD%D8%A8%D9%88%D8%A8%20%D8%A7%D9%84%D8%A3%D8%B1%D8%B2%20%D8%A7%D9%84%D8%AD%D8%A7%D9%85%D8%B6%D8%A9-rr%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7F%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7.html?s=tracy.camp@scasurgery.com
Certificate
IssuerLet's Encrypt
Subjectsegy.shop
FingerprintEB:95:7A:90:22:94:A6:8D:13:EE:A6:CE:16:62:13:B3:B8:E5:58:43
ValidityThu, 30 Nov 2023 09:25:10 GMT - Wed, 28 Feb 2024 09:25:09 GMT

File type
JSON data\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (30978), with no line terminators
Size
6.5 kB (6485 bytes)
Hash
b2ed6808a3fbf0230a5e35a36ffbf0c4
1c66b9f280290364382cf571fe9e9769432fb4fb
317a8bee521641671a95648e5009caae07b5411c2853cb5e0b56f1273c3ac7cc

HTTP Headers

POST /cap.php HTTP/1.1
Host: segy.shop
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
Content-Length: 647
Origin: https://agnieszkawesecka.pl
DNT: 1
Connection: keep-alive
Referer: https://agnieszkawesecka.pl/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Fri, 01 Dec 2023 18:48:23 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin: *
Content-Encoding: gzip

cdnjs.cloudflare.com/ajax/libs/jquery/3.6.0/jquery.min.js

104.17.24.14

200 OK

28 kB

URL GET HTTP/2
cdnjs.cloudflare.com/ajax/libs/jquery/3.6.0/jquery.min.js
IP
104.17.24.14:443
ASN
#13335 CLOUDFLARENET

Requested by
https://agnieszkawesecka.pl/online-microsoft_com-48736743377809387436457-microsoft_8476365435473648347765347346837493467354634576726326362456354653263726372635625327637_%D8%AD%D8%B5%20%D8%AD%D8%A8%D9%88%D8%A8%20%D8%A7%D9%84%D8%A3%D8%B1%D8%B2%20%D8%A7%D9%84%D8%AD%D8%A7%D9%85%D8%B6%D8%A9-rr%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7F%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7.html?s=tracy.camp@scasurgery.com
Certificate
IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint7A:EA:B9:09:71:70:6C:87:C9:D3:82:74:8A:7B:B4:60:E5:40:2D:8D
ValidityMon, 03 Jul 2023 00:00:00 GMT - Tue, 02 Jul 2024 23:59:59 GMT

File type
ASCII text, with very long lines (65447)
Size
28 kB (27938 bytes)
Hash
8fb8fee4fcc3cc86ff6c724154c49c42
b82d238d4e31fdf618bae8ac11a6c812c03dd0d4
ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e

HTTP Headers

GET /ajax/libs/jquery/3.6.0/jquery.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://agnieszkawesecka.pl/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Fri, 01 Dec 2023 18:48:24 GMT
content-type: application/javascript; charset=utf-8
content-length: 27938
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "603e8adc-15d9d"
last-modified: Tue, 02 Mar 2021 18:58:36 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 564202
expires: Wed, 20 Nov 2024 18:48:24 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=9A4RvoOlqcIrDj408JNPrp%2F6gxvQWT7BMyzwiQANFYCEWtSCkeMqv5hvaiyKZRk%2BmFFPAr%2F%2FHzADtDmxoSlcr8WAWNI1D%2B2FY7L9uCAr88q38elTfWEQav4qcnSWnXJZovSA%2B3qa"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 82ed8112bfa856c3-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

segy.shop/api/validate

152.89.246.205

204 No Content

0 B

URL OPTIONS HTTP/1.1
segy.shop/api/validate
IP
152.89.246.205:443
ASN
#30823 combahton GmbH

Requested by
https://agnieszkawesecka.pl/online-microsoft_com-48736743377809387436457-microsoft_8476365435473648347765347346837493467354634576726326362456354653263726372635625327637_%D8%AD%D8%B5%20%D8%AD%D8%A8%D9%88%D8%A8%20%D8%A7%D9%84%D8%A3%D8%B1%D8%B2%20%D8%A7%D9%84%D8%AD%D8%A7%D9%85%D8%B6%D8%A9-rr%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7F%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7.html?s=tracy.camp@scasurgery.com
Certificate
IssuerLet's Encrypt
Subjectsegy.shop
FingerprintEB:95:7A:90:22:94:A6:8D:13:EE:A6:CE:16:62:13:B3:B8:E5:58:43
ValidityThu, 30 Nov 2023 09:25:10 GMT - Wed, 28 Feb 2024 09:25:09 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

OPTIONS /api/validate HTTP/1.1
Host: segy.shop
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://agnieszkawesecka.pl/
Origin: https://agnieszkawesecka.pl
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 204 No Content
Server: nginx/1.18.0 (Ubuntu)
Content-Type: text/html; charset=UTF-8
Connection: keep-alive
Cache-Control: no-cache, private
Date: Fri, 01 Dec 2023 18:48:26 GMT
Access-Control-Allow-Origin: *
Vary: Access-Control-Request-Method, Access-Control-Request-Headers
Access-Control-Allow-Methods: POST
Access-Control-Allow-Headers: content-type
Access-Control-Max-Age: 0

segy.shop/api/validate

152.89.246.205

204 No Content

7.8 kB

URL OPTIONS HTTP/1.1
segy.shop/api/validate
IP
152.89.246.205:443
ASN
#30823 combahton GmbH

Requested by
https://agnieszkawesecka.pl/online-microsoft_com-48736743377809387436457-microsoft_8476365435473648347765347346837493467354634576726326362456354653263726372635625327637_%D8%AD%D8%B5%20%D8%AD%D8%A8%D9%88%D8%A8%20%D8%A7%D9%84%D8%A3%D8%B1%D8%B2%20%D8%A7%D9%84%D8%AD%D8%A7%D9%85%D8%B6%D8%A9-rr%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7F%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7.html?s=tracy.camp@scasurgery.com
Certificate
IssuerLet's Encrypt
Subjectsegy.shop
FingerprintEB:95:7A:90:22:94:A6:8D:13:EE:A6:CE:16:62:13:B3:B8:E5:58:43
ValidityThu, 30 Nov 2023 09:25:10 GMT - Wed, 28 Feb 2024 09:25:09 GMT

File type
JSON data\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (7838), with no line terminators
Size
7.8 kB (7838 bytes)
Hash
838312c45b8a8374200ace11accc336b
5e16fa15bcdd63a6e6373ad57769c6779e9ec98a
aca5d9459e8b57d10ae48dc265468298de8eb03f2a7896e15aa9dab5f5417b56

HTTP Headers

POST /api/validate HTTP/1.1
Host: segy.shop
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 82
Origin: https://agnieszkawesecka.pl
DNT: 1
Connection: keep-alive
Referer: https://agnieszkawesecka.pl/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Content-Type: application/json
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: no-cache, private
Date: Fri, 01 Dec 2023 18:48:31 GMT
X-RateLimit-Limit: 60
X-RateLimit-Remaining: 59
Access-Control-Allow-Origin: *

cdnjs.cloudflare.com/ajax/libs/jquery/3.6.0/jquery.min.js

104.17.24.14

200 OK

28 kB

URL GET HTTP/2
cdnjs.cloudflare.com/ajax/libs/jquery/3.6.0/jquery.min.js
IP
104.17.24.14:443
ASN
#13335 CLOUDFLARENET

Requested by
https://agnieszkawesecka.pl/online-microsoft_com-48736743377809387436457-microsoft_8476365435473648347765347346837493467354634576726326362456354653263726372635625327637_%D8%AD%D8%B5%20%D8%AD%D8%A8%D9%88%D8%A8%20%D8%A7%D9%84%D8%A3%D8%B1%D8%B2%20%D8%A7%D9%84%D8%AD%D8%A7%D9%85%D8%B6%D8%A9-rr%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7F%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7.html?s=tracy.camp@scasurgery.com
Certificate
IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint7A:EA:B9:09:71:70:6C:87:C9:D3:82:74:8A:7B:B4:60:E5:40:2D:8D
ValidityMon, 03 Jul 2023 00:00:00 GMT - Tue, 02 Jul 2024 23:59:59 GMT

File type
ASCII text, with very long lines (65447)
Size
28 kB (27938 bytes)
Hash
8fb8fee4fcc3cc86ff6c724154c49c42
b82d238d4e31fdf618bae8ac11a6c812c03dd0d4
ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e

HTTP Headers

GET /ajax/libs/jquery/3.6.0/jquery.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://agnieszkawesecka.pl/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 01 Dec 2023 18:48:32 GMT
content-type: application/javascript; charset=utf-8
content-length: 27938
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "603e8adc-15d9d"
last-modified: Tue, 02 Mar 2021 18:58:36 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 564210
expires: Wed, 20 Nov 2024 18:48:32 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=RICyi1dNR26W2%2FNmCdP9nma%2BpGVpz5QuDvS1ibCUJud5luPF1WVM132Dddg%2BelJW%2BtdVQEyzLcT8VychvGcblXot7U1EVpYZwZEXlyAxVrhZqsq8yspXq9JgY%2Fii%2Bi8q%2BlROFFHv"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 82ed814348421c16-OSL
alt-svc: h3=":443"; ma=86400

adfs365.scasurgery.com/adfs/portal/css/style.css

161.249.150.16

200 OK

7.8 kB

URL GET HTTP/1.1
adfs365.scasurgery.com/adfs/portal/css/style.css
IP
161.249.150.16:443
ASN
#10879 UHC

Requested by
https://agnieszkawesecka.pl/online-microsoft_com-48736743377809387436457-microsoft_8476365435473648347765347346837493467354634576726326362456354653263726372635625327637_%D8%AD%D8%B5%20%D8%AD%D8%A8%D9%88%D8%A8%20%D8%A7%D9%84%D8%A3%D8%B1%D8%B2%20%D8%A7%D9%84%D8%AD%D8%A7%D9%85%D8%B6%D8%A9-rr%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7F%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7.html?s=tracy.camp@scasurgery.com
Certificate
IssuerGoDaddy.com, Inc.
Subjectadfs365.scasurgery.com
Fingerprint2D:A1:3F:E5:19:47:78:E8:0A:28:BC:E6:3D:CD:BB:03:F5:3F:C7:9D
ValiditySun, 02 Apr 2023 14:53:04 GMT - Fri, 03 May 2024 14:53:04 GMT

File type
Unicode text, UTF-8 text, with CRLF line terminators
Size
7.8 kB (7812 bytes)
Hash
81d1717dd8379e22c8ab66f8f83dc181
67618f6e2a348cdd7c7cb8b6b6b10374ef87a0be
d74d4d6943f32ae6f7f11d14d601dbb0e1a58919176ee512150366b6279aaf99

HTTP Headers

GET /adfs/portal/css/style.css HTTP/1.1
Host: adfs365.scasurgery.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://agnieszkawesecka.pl/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Length: 7812
Content-Type: text/css
Expires: Sun, 31 Dec 2023 18:48:33 GMT
ETag: D74D4D6943F32AE6F7F11D14D601DBB0E1A58919176EE512150366B6279AAF99
Server: Microsoft-HTTPAPI/2.0 Microsoft-HTTPAPI/2.0
Date: Fri, 01 Dec 2023 18:48:32 GMT

adfs365.scasurgery.com//adfs/portal/illustration/illustration.png?id=183128A3C941EDE3D9199FA37D6AA90E0A7DFE101B37D10B4FEDA0CF35E11AFD

161.249.150.16

117 kB

URL GET
adfs365.scasurgery.com//adfs/portal/illustration/illustration.png?id=183128A3C941EDE3D9199FA37D6AA90E0A7DFE101B37D10B4FEDA0CF35E11AFD
IP
161.249.150.16:0
ASN
#10879 UHC

Requested by
https://agnieszkawesecka.pl/online-microsoft_com-48736743377809387436457-microsoft_8476365435473648347765347346837493467354634576726326362456354653263726372635625327637_%D8%AD%D8%B5%20%D8%AD%D8%A8%D9%88%D8%A8%20%D8%A7%D9%84%D8%A3%D8%B1%D8%B2%20%D8%A7%D9%84%D8%AD%D8%A7%D9%85%D8%B6%D8%A9-rr%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7F%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7.html?s=tracy.camp@scasurgery.com
Certificate
IssuerGoDaddy.com, Inc.
Subjectadfs365.scasurgery.com
Fingerprint2D:A1:3F:E5:19:47:78:E8:0A:28:BC:E6:3D:CD:BB:03:F5:3F:C7:9D
ValiditySun, 02 Apr 2023 14:53:04 GMT - Fri, 03 May 2024 14:53:04 GMT

File type
PNG image data, 1420 x 1080, 8-bit/color RGB, non-interlaced\012- data
Size
117 kB (116699 bytes)
Hash
1aee2235cc822dc6527bb377a4b363db
e36089f29546687061f2ef30e2498a1e9744416d
183128a3c941ede3d9199fa37d6aa90e0a7dfe101b37d10b4feda0cf35e11afd

HTTP Headers

GET //adfs/portal/illustration/illustration.png?id=183128A3C941EDE3D9199FA37D6AA90E0A7DFE101B37D10B4FEDA0CF35E11AFD HTTP/1.1
Host: adfs365.scasurgery.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://agnieszkawesecka.pl/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Length: 116699
Content-Type: image/png
Expires: Sun, 31 Dec 2023 18:48:33 GMT
ETag: 183128A3C941EDE3D9199FA37D6AA90E0A7DFE101B37D10B4FEDA0CF35E11AFD
Server: Microsoft-HTTPAPI/2.0 Microsoft-HTTPAPI/2.0
Date: Fri, 01 Dec 2023 18:48:32 GMT

agnieszkawesecka.pl/online-microsoft_com-48736743377809387436457-microsoft_8476365435473648347765347346837493467354634576726326362456354653263726372635625327637_%D8%AD%D8%B5%20%D8%AD%D8%A8%D9%88%D8%A8%20%D8%A7%D9%84%D8%A3%D8%B1%D8%B2%20%D8%A7%D9%84%D8%AD%D8%A7%D9%85%D8%B6%D8%A9-rr%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7F%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7.html?s=tracy.camp@scasurgery.com

188.114.96.1

200 OK

3.6 kB

URL User Request GET HTTP/2
agnieszkawesecka.pl/online-microsoft_com-48736743377809387436457-microsoft_8476365435473648347765347346837493467354634576726326362456354653263726372635625327637_%D8%AD%D8%B5%20%D8%AD%D8%A8%D9%88%D8%A8%20%D8%A7%D9%84%D8%A3%D8%B1%D8%B2%20%D8%A7%D9%84%D8%AD%D8%A7%D9%85%D8%B6%D8%A9-rr%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7F%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7.html?s=tracy.camp@scasurgery.com
IP
188.114.96.1:443
ASN
#13335 CLOUDFLARENET

Certificate
IssuerLet's Encrypt
Subjectagnieszkawesecka.pl
FingerprintED:DD:EC:0A:35:7D:02:85:E0:91:DD:95:17:23:1F:83:E6:17:49:00
ValidityThu, 23 Nov 2023 03:13:02 GMT - Wed, 21 Feb 2024 03:13:01 GMT

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (3829), with no line terminators
Size
3.6 kB (3617 bytes)
Hash
7efef4e41633eccc6df384582f242076
533b8d65ca4a92018bef0d06513c18397cf51435
153a54ca1be72a8a2508ad7ac2c1060cc94f59617f2b94773e339b852e3f07ca

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Microsoft Outlook

HTTP Headers

GET /online-microsoft_com-48736743377809387436457-microsoft_8476365435473648347765347346837493467354634576726326362456354653263726372635625327637_%D8%AD%D8%B5%20%D8%AD%D8%A8%D9%88%D8%A8%20%D8%A7%D9%84%D8%A3%D8%B1%D8%B2%20%D8%A7%D9%84%D8%AD%D8%A7%D9%85%D8%B6%D8%A9-rr%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7F%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7.html?s=tracy.camp@scasurgery.com HTTP/1.1
Host: agnieszkawesecka.pl
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Fri, 01 Dec 2023 18:48:20 GMT
content-type: text/html
last-modified: Thu, 30 Nov 2023 21:19:15 GMT
vary: Accept-Encoding
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=nZ7KP9c2rPuBQYJ0dRKxvvrSaJn5CTUDwr8umto8FMh6NBvBYqFGFDhBWGBrLpDnJa6F6jXTxnUyybBmQKB%2F1NnY0CgpAsftclNM8PvRlUX06fwPxYYawqFadDjdBYZxbiX51%2B7R"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 82ed80f7be6eb529-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

challenges.cloudflare.com/turnstile/v0/api.js?onload=onloadTurnstileCallback

104.17.3.184

302 Found

34 kB

URL GET HTTP/2
challenges.cloudflare.com/turnstile/v0/api.js?onload=onloadTurnstileCallback
IP
104.17.3.184:443
ASN
#13335 CLOUDFLARENET

Requested by
https://agnieszkawesecka.pl/online-microsoft_com-48736743377809387436457-microsoft_8476365435473648347765347346837493467354634576726326362456354653263726372635625327637_%D8%AD%D8%B5%20%D8%AD%D8%A8%D9%88%D8%A8%20%D8%A7%D9%84%D8%A3%D8%B1%D8%B2%20%D8%A7%D9%84%D8%AD%D8%A7%D9%85%D8%B6%D8%A9-rr%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7F%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7.html?s=tracy.camp@scasurgery.com
Certificate
IssuerCloudflare, Inc.
Subjectchallenges.cloudflare.com
Fingerprint5F:E4:AA:8C:2E:24:D2:B1:69:9D:13:28:31:5C:65:FA:97:2A:E9:6E
ValidityFri, 18 Aug 2023 00:00:00 GMT - Sat, 17 Aug 2024 23:59:59 GMT

File type

Size
34 kB (33876 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /turnstile/v0/api.js?onload=onloadTurnstileCallback HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://agnieszkawesecka.pl/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 302 Found
date: Fri, 01 Dec 2023 18:48:20 GMT
vary: accept-encoding
location: /turnstile/v0/b/56d3063b/api.js?onload=onloadTurnstileCallback
access-control-allow-origin: *
cache-control: max-age=300, public
server: cloudflare
cf-ray: 82ed80f8f96e568e-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/97rw8/0x4AAAAAAANitG7_q4LMVK7c/auto/normal

104.17.3.184

200 OK

73 kB

URL GET HTTP/3
challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/97rw8/0x4AAAAAAANitG7_q4LMVK7c/auto/normal
IP
104.17.3.184:443
ASN
#13335 CLOUDFLARENET

Requested by
https://agnieszkawesecka.pl/online-microsoft_com-48736743377809387436457-microsoft_8476365435473648347765347346837493467354634576726326362456354653263726372635625327637_%D8%AD%D8%B5%20%D8%AD%D8%A8%D9%88%D8%A8%20%D8%A7%D9%84%D8%A3%D8%B1%D8%B2%20%D8%A7%D9%84%D8%AD%D8%A7%D9%85%D8%B6%D8%A9-rr%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7F%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7.html?s=tracy.camp@scasurgery.com
Certificate
IssuerCloudflare, Inc.
Subjectchallenges.cloudflare.com
Fingerprint5F:E4:AA:8C:2E:24:D2:B1:69:9D:13:28:31:5C:65:FA:97:2A:E9:6E
ValidityFri, 18 Aug 2023 00:00:00 GMT - Sat, 17 Aug 2024 23:59:59 GMT

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (40091)
Size
73 kB (72921 bytes)
Hash
9029ec62a15bb8cde8c4fc09d5f27c95
de74104cba8917d558fd9d4786e473c1eb97fac6
d43599134a2dcefa3fec9c8d03d292a9c7a13c145aee6f333ba92cf8d8e52219

HTTP Headers

GET /cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/97rw8/0x4AAAAAAANitG7_q4LMVK7c/auto/normal HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://agnieszkawesecka.pl/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Fri, 01 Dec 2023 18:48:20 GMT
content-type: text/html; charset=UTF-8
cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
content-security-policy: frame-src https://challenges.cloudflare.com/ blob:; base-uri 'self'
cross-origin-embedder-policy: require-corp
cross-origin-opener-policy: same-origin
cross-origin-resource-policy: cross-origin
document-policy: js-profiling
origin-agent-cluster: ?1
permissions-policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()
referrer-policy: same-origin
server: cloudflare
cf-ray: 82ed80fa0f3ab515-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

agnieszkawesecka.pl/favicon.ico

188.114.96.1

404 Not Found

27 kB

URL GET HTTP/2
agnieszkawesecka.pl/favicon.ico
IP
188.114.96.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://agnieszkawesecka.pl/online-microsoft_com-48736743377809387436457-microsoft_8476365435473648347765347346837493467354634576726326362456354653263726372635625327637_%D8%AD%D8%B5%20%D8%AD%D8%A8%D9%88%D8%A8%20%D8%A7%D9%84%D8%A3%D8%B1%D8%B2%20%D8%A7%D9%84%D8%AD%D8%A7%D9%85%D8%B6%D8%A9-rr%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7F%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7.html?s=tracy.camp@scasurgery.com
Certificate
IssuerLet's Encrypt
Subjectagnieszkawesecka.pl
FingerprintED:DD:EC:0A:35:7D:02:85:E0:91:DD:95:17:23:1F:83:E6:17:49:00
ValidityThu, 23 Nov 2023 03:13:02 GMT - Wed, 21 Feb 2024 03:13:01 GMT

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (611)
Size
27 kB (27242 bytes)
Hash
df3d48946e8d3f5a83608308edbb4b86
47b9c40c97abf2658df96b1c06109324e15e1a00
570a6631252b8a52df4de0e953ae77dbdf524dfc3637cda2840494a0d2b49499

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: agnieszkawesecka.pl
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://agnieszkawesecka.pl/online-microsoft_com-48736743377809387436457-microsoft_8476365435473648347765347346837493467354634576726326362456354653263726372635625327637_%D8%AD%D8%B5%20%D8%AD%D8%A8%D9%88%D8%A8%20%D8%A7%D9%84%D8%A3%D8%B1%D8%B2%20%D8%A7%D9%84%D8%AD%D8%A7%D9%85%D8%B6%D8%A9-rr%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7F%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7.html?s=tracy.camp@scasurgery.com
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 404 Not Found
date: Fri, 01 Dec 2023 18:48:20 GMT
content-type: text/html
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=J%2F5NrzdvTZdkKwB5U2J7tKE7z8i1HAXQpckah7mcAtqMfW5bZp%2FJxnZIESzuwO%2B3a4BTHHePfSd7NRkv7zbSgJbUFq%2Fzw8v0UblT0xTK8zC2XiJEmnuqkpVuD7qiN%2F24VpzmZHJ%2B"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 82ed80f9f8a4b529-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

challenges.cloudflare.com/turnstile/v0/b/56d3063b/api.js?onload=onloadTurnstileCallback

104.17.3.184

200 OK

34 kB

URL GET HTTP/2
challenges.cloudflare.com/turnstile/v0/b/56d3063b/api.js?onload=onloadTurnstileCallback
IP
104.17.3.184:443
ASN
#13335 CLOUDFLARENET

Requested by
https://agnieszkawesecka.pl/online-microsoft_com-48736743377809387436457-microsoft_8476365435473648347765347346837493467354634576726326362456354653263726372635625327637_%D8%AD%D8%B5%20%D8%AD%D8%A8%D9%88%D8%A8%20%D8%A7%D9%84%D8%A3%D8%B1%D8%B2%20%D8%A7%D9%84%D8%AD%D8%A7%D9%85%D8%B6%D8%A9-rr%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7F%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7%D8%B1%D8%AF%20%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%85%D8%A7.html?s=tracy.camp@scasurgery.com
Certificate
IssuerCloudflare, Inc.
Subjectchallenges.cloudflare.com
Fingerprint5F:E4:AA:8C:2E:24:D2:B1:69:9D:13:28:31:5C:65:FA:97:2A:E9:6E
ValidityFri, 18 Aug 2023 00:00:00 GMT - Sat, 17 Aug 2024 23:59:59 GMT

File type
ASCII text, with very long lines (33875)
Size
34 kB (33876 bytes)
Hash
8c90f391245a994ae95e644a587c8626
7bfc99336571d0ccfe38f9e1d18cb26b4adfc316
acbe221d9bb71e85d0a3b52a7a9d44ee4669ab664186b32d0c737a2be62681e7

HTTP Headers

GET /turnstile/v0/b/56d3063b/api.js?onload=onloadTurnstileCallback HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://agnieszkawesecka.pl/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Fri, 01 Dec 2023 18:48:20 GMT
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
cache-control: max-age=31536000
vary: Accept-Encoding
server: cloudflare
cf-ray: 82ed80f919d1568e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

Report Overview

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (9)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML

Observations

Hash

Observations

Hash

Observations

Hash

Observations

Hash

Observations

Hash

HTTP Transactions (14)

URL

IP

ASN

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL POST HTTP/1.1

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/2

IP

ASN