| store.wulantilaar.com/cache/public/9ijqJlNeaQbhPwa9d5TYzbAhLYCDAW/Y3NrYnhsb2dpc3RpY3NAc2NobmVpZGVyLmNvbQ== | 178.32.67.58 | | 0 B |
URL store.wulantilaar.com/cache/public/9ijqJlNeaQbhPwa9d5TYzbAhLYCDAW/Y3NrYnhsb2dpc3RpY3NAc2NobmVpZGVyLmNvbQ== IP178.32.67.58:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer | Verdict | Alert | OpenPhish | phishing | Office365 |
GET /cache/public/9ijqJlNeaQbhPwa9d5TYzbAhLYCDAW/Y3NrYnhsb2dpc3RpY3NAc2NobmVpZGVyLmNvbQ== HTTP/1.1
Host: store.wulantilaar.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
x-powered-by: PHP/8.1.26
refresh: 0;url=https://pub-9cba10d444bf44eea4f1504b0b173c03.r2.dev/XSD34qjE4Myn%2526m%253Dilk.p0ypaGTJbLL%2526b%253DO4ECJ6p0xWACZ682uuprWTDWQLedDqjE4Myn%2526m%253Dilk.p0ypaGTJbLL%2526b%253DO4ECJ6p0xWACZ682DWQLedDqjE4Myn%2526m%253Dilk.p0ypaGTJbLL%2526b%253DO4ECJ6p0xWACZ682.html#cskbxlogistics@schneider.com
content-type: text/html; charset=UTF-8
content-length: 0
date: Wed, 24 Apr 2024 04:37:56 GMT
server: LiteSpeed
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2
|
|
| pub-9cba10d444bf44eea4f1504b0b173c03.r2.dev/XSD34qjE4Myn%2526m%253Dilk.p0ypaGTJbLL%2526b%253DO4ECJ6p0xWACZ682uuprWTDWQLedDqjE4Myn%2526m%253Dilk.p0ypaGTJbLL%2526b%253DO4ECJ6p0xWACZ682DWQLedDqjE4Myn%2526m%253Dilk.p0ypaGTJbLL%2526b%253DO4ECJ6p0xWACZ682.html | 104.18.2.35 | | 2.9 kB |
URL pub-9cba10d444bf44eea4f1504b0b173c03.r2.dev/XSD34qjE4Myn%2526m%253Dilk.p0ypaGTJbLL%2526b%253DO4ECJ6p0xWACZ682uuprWTDWQLedDqjE4Myn%2526m%253Dilk.p0ypaGTJbLL%2526b%253DO4ECJ6p0xWACZ682DWQLedDqjE4Myn%2526m%253Dilk.p0ypaGTJbLL%2526b%253DO4ECJ6p0xWACZ682.html IP104.18.2.35:0
File typeHTML document, ASCII text, with very long lines (696) Hash6b3f94f2aee2fdf9246b0b2f97d5ae7d ae8a4f472f3eda0054146d49b4fa862ce8f5c1c2 c4cb895d91a71c309cfaffb68299603c4d9950ff8999948a616fefdabdc7c4c7
GET /XSD34qjE4Myn%2526m%253Dilk.p0ypaGTJbLL%2526b%253DO4ECJ6p0xWACZ682uuprWTDWQLedDqjE4Myn%2526m%253Dilk.p0ypaGTJbLL%2526b%253DO4ECJ6p0xWACZ682DWQLedDqjE4Myn%2526m%253Dilk.p0ypaGTJbLL%2526b%253DO4ECJ6p0xWACZ682.html HTTP/1.1
Host: pub-9cba10d444bf44eea4f1504b0b173c03.r2.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 24 Apr 2024 04:37:56 GMT
Content-Type: text/html
Content-Length: 2875
Connection: keep-alive
Accept-Ranges: bytes
ETag: "6b3f94f2aee2fdf9246b0b2f97d5ae7d"
Last-Modified: Tue, 23 Apr 2024 18:03:24 GMT
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 879366a51f1a7131-OSL
|
|
| pub-9cba10d444bf44eea4f1504b0b173c03.r2.dev/favicon.ico | 104.18.2.35 | 404 Not Found | 27 kB |
URL GET HTTP/1.1pub-9cba10d444bf44eea4f1504b0b173c03.r2.dev/favicon.ico IP104.18.2.35:443
Requested byhttps://pub-9cba10d444bf44eea4f1504b0b173c03.r2.dev/XSD34qjE4Myn%2526m%253Dilk.p0ypaGTJbLL%2526b%253DO4ECJ6p0xWACZ682uuprWTDWQLedDqjE4Myn%2526m%253Dilk.p0ypaGTJbLL%2526b%253DO4ECJ6p0xWACZ682DWQLedDqjE4Myn%2526m%253Dilk.p0ypaGTJbLL%2526b%253DO4ECJ6p0xWACZ682.html#cskbxlogistics@schneider.com CertificateIssuerLet's Encrypt Subject*.r2.dev Fingerprint48:74:F0:98:E0:A1:57:3E:86:18:BF:B3:DC:C9:7A:5B:53:50:FE:E0 ValidityFri, 05 Apr 2024 15:25:24 GMT - Thu, 04 Jul 2024 15:25:23 GMT
File typeHTML document, ASCII text, with very long lines (611) Hashdf3d48946e8d3f5a83608308edbb4b86 47b9c40c97abf2658df96b1c06109324e15e1a00 570a6631252b8a52df4de0e953ae77dbdf524dfc3637cda2840494a0d2b49499
GET /favicon.ico HTTP/1.1
Host: pub-9cba10d444bf44eea4f1504b0b173c03.r2.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pub-9cba10d444bf44eea4f1504b0b173c03.r2.dev/XSD34qjE4Myn%2526m%253Dilk.p0ypaGTJbLL%2526b%253DO4ECJ6p0xWACZ682uuprWTDWQLedDqjE4Myn%2526m%253Dilk.p0ypaGTJbLL%2526b%253DO4ECJ6p0xWACZ682DWQLedDqjE4Myn%2526m%253Dilk.p0ypaGTJbLL%2526b%253DO4ECJ6p0xWACZ682.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Date: Wed, 24 Apr 2024 04:37:57 GMT
Content-Type: text/html
Content-Length: 27242
Connection: keep-alive
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 879366a899577131-OSL
|
|
| aadcdn.msftauth.net/shared/1.0/content/images/picker_verify_code_b41922ebdaebec16b19999fc6054a15a.svg | 152.199.23.37 | 200 OK | 790 B |
URL GET HTTP/2aadcdn.msftauth.net/shared/1.0/content/images/picker_verify_code_b41922ebdaebec16b19999fc6054a15a.svg IP152.199.23.37:443
Requested byhttps://pub-9cba10d444bf44eea4f1504b0b173c03.r2.dev/XSD34qjE4Myn%2526m%253Dilk.p0ypaGTJbLL%2526b%253DO4ECJ6p0xWACZ682uuprWTDWQLedDqjE4Myn%2526m%253Dilk.p0ypaGTJbLL%2526b%253DO4ECJ6p0xWACZ682DWQLedDqjE4Myn%2526m%253Dilk.p0ypaGTJbLL%2526b%253DO4ECJ6p0xWACZ682.html#cskbxlogistics@schneider.com CertificateIssuerDigiCert Inc Subjectaadcdn.msftauth.net Fingerprint3C:9E:70:F5:B3:D1:80:80:8C:97:1C:7B:7E:A8:2C:D8:7B:94:95:0B ValidityFri, 01 Dec 2023 00:00:00 GMT - Sun, 01 Dec 2024 23:59:59 GMT
File typeSVG Scalable Vector Graphics image Hashf7ab697e65b83ce9870a4736085deeec 5ff40bff26b523fbbeaa5228a2aac63e44afaa90 cbb3706e65b35a43bdcfebd23b5479dc0542ca7e23197869b683d12b524472fe
GET /shared/1.0/content/images/picker_verify_code_b41922ebdaebec16b19999fc6054a15a.svg HTTP/1.1
Host: aadcdn.msftauth.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pub-9cba10d444bf44eea4f1504b0b173c03.r2.dev/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-encoding: gzip
accept-ranges: bytes
access-control-allow-origin: *
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
age: 2600272
cache-control: public, max-age=31536000
content-md5: 1jQlecEJaGhFO2st5KXLhg==
content-type: image/svg+xml
date: Wed, 24 Apr 2024 04:37:57 GMT
etag: 0x8DB5C3F4AC59B47
last-modified: Wed, 24 May 2023 10:11:51 GMT
server: ECAcc (ska/F6A9)
vary: Accept-Encoding
x-cache: HIT
x-ms-blob-type: BlockBlob
x-ms-lease-status: unlocked
x-ms-request-id: 2a281429-101e-0042-725a-7edf33000000
x-ms-version: 2009-09-19
content-length: 790
X-Firefox-Spdy: h2
|
|
| twomancake.com/jsnom.js | 172.67.130.24 | 200 OK | 40 kB |
IP172.67.130.24:443
Requested byhttps://pub-9cba10d444bf44eea4f1504b0b173c03.r2.dev/XSD34qjE4Myn%2526m%253Dilk.p0ypaGTJbLL%2526b%253DO4ECJ6p0xWACZ682uuprWTDWQLedDqjE4Myn%2526m%253Dilk.p0ypaGTJbLL%2526b%253DO4ECJ6p0xWACZ682DWQLedDqjE4Myn%2526m%253Dilk.p0ypaGTJbLL%2526b%253DO4ECJ6p0xWACZ682.html#cskbxlogistics@schneider.com CertificateIssuerLet's Encrypt Subjecttwomancake.com FingerprintAF:27:60:8A:CD:A9:93:0A:E2:7C:B9:F0:B3:9B:B4:E4:C1:DD:3D:1C ValidityTue, 09 Apr 2024 04:59:30 GMT - Mon, 08 Jul 2024 04:59:29 GMT
Hash6298f7d39c4b438e7a2bdb380515b742 4d79a9459a63f8b09eda6ac77f72109ba1205dd4 a222bd8706a4023bd3dc61f3f4e6381f0d70c6d4a53d63879dcf73bc30ed54dc
GET /jsnom.js HTTP/1.1
Host: twomancake.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pub-9cba10d444bf44eea4f1504b0b173c03.r2.dev/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 24 Apr 2024 04:37:57 GMT
content-type: application/javascript; charset=UTF-8
x-powered-by: Express
access-control-allow-origin: *
cache-control: public, max-age=14400
last-modified: Tue, 02 Apr 2024 06:43:58 GMT
etag: W/"31652-18e9d8cde06"
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=l26lZW9a8L%2FcLLlsSspXfxoWz6SLbJ4ewl1g40y%2FlrzNpZLwb%2FvpxvmtFmlL0wpecFoQj9dhJswxlfcR5uNNaDquC3NmwJSaE0amKZz%2BvCzmOgNTeI5aCEKdMzYxuAIRGQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 879366a7ba2cb51d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| aadcdn.msauth.net/shared/1.0/content/images/microsoft_logo_564db913a7fa0ca42727161c6d031bef.svg | 13.107.246.53 | 200 OK | 1.4 kB |
URL GET HTTP/2aadcdn.msauth.net/shared/1.0/content/images/microsoft_logo_564db913a7fa0ca42727161c6d031bef.svg IP13.107.246.53:443 ASN#8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested byhttps://pub-9cba10d444bf44eea4f1504b0b173c03.r2.dev/XSD34qjE4Myn%2526m%253Dilk.p0ypaGTJbLL%2526b%253DO4ECJ6p0xWACZ682uuprWTDWQLedDqjE4Myn%2526m%253Dilk.p0ypaGTJbLL%2526b%253DO4ECJ6p0xWACZ682DWQLedDqjE4Myn%2526m%253Dilk.p0ypaGTJbLL%2526b%253DO4ECJ6p0xWACZ682.html#cskbxlogistics@schneider.com CertificateIssuerDigiCert Inc Subjectaadcdn.msauth.net FingerprintEB:7C:D1:4E:EF:B5:D4:72:25:0B:1A:AF:5F:10:3D:EA:13:80:5A:47 ValidityMon, 29 Jan 2024 00:00:00 GMT - Wed, 29 Jan 2025 23:59:59 GMT
File typeSVG Scalable Vector Graphics image Hashee5c8d9fb6248c938fd0dc19370e90bd d01a22720918b781338b5bbf9202b241a5f99ee4 04d29248ee3a13a074518c93a18d6efc491bf1f298f9b87fc989a6ae4b9fad7a
GET /shared/1.0/content/images/microsoft_logo_564db913a7fa0ca42727161c6d031bef.svg HTTP/1.1
Host: aadcdn.msauth.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pub-9cba10d444bf44eea4f1504b0b173c03.r2.dev/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 24 Apr 2024 04:37:58 GMT
content-type: image/svg+xml
content-length: 1435
cache-control: public, max-age=31536000
content-encoding: gzip
last-modified: Wed, 24 May 2023 10:11:48 GMT
etag: 0x8DB5C3F4911527F
x-ms-request-id: 4a5dd113-701e-0069-067d-92d4af000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
access-control-allow-origin: *
x-azure-ref: 20240424T043758Z-16c4f695cc58qx282nqc5nyr8g00000006xg000000003832
x-fd-int-roxy-purgeid: 4554691
x-cache: TCP_HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| cdn.socket.io/4.6.0/socket.io.min.js | 143.204.55.77 | 200 OK | 14 kB |
URL GET HTTP/2cdn.socket.io/4.6.0/socket.io.min.js IP143.204.55.77:443
Requested byhttps://pub-9cba10d444bf44eea4f1504b0b173c03.r2.dev/XSD34qjE4Myn%2526m%253Dilk.p0ypaGTJbLL%2526b%253DO4ECJ6p0xWACZ682uuprWTDWQLedDqjE4Myn%2526m%253Dilk.p0ypaGTJbLL%2526b%253DO4ECJ6p0xWACZ682DWQLedDqjE4Myn%2526m%253Dilk.p0ypaGTJbLL%2526b%253DO4ECJ6p0xWACZ682.html#cskbxlogistics@schneider.com CertificateIssuerAmazon Subjectcdn.socket.io FingerprintBB:7D:4E:26:70:F6:06:2A:12:E9:92:A8:F1:9F:CD:82:0B:BF:48:ED ValiditySun, 22 Oct 2023 00:00:00 GMT - Sun, 17 Nov 2024 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (45667) Hashc63e00eda493f272c4901304558fb15e afdc2e7ecc6f503067510425115209ace39b6de2 9798e1701203296a724278bc96bcb961518f2033e4c6b63860b089a496fa40c8
GET /4.6.0/socket.io.min.js HTTP/1.1
Host: cdn.socket.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://pub-9cba10d444bf44eea4f1504b0b173c03.r2.dev
DNT: 1
Connection: keep-alive
Referer: https://pub-9cba10d444bf44eea4f1504b0b173c03.r2.dev/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
access-control-allow-origin: *
cache-control: public, max-age=31536000, immutable
content-disposition: inline; filename="socket.io.min.js"
content-encoding: gzip
date: Mon, 15 Jan 2024 16:33:26 GMT
etag: W/"80f5b8c6a9eeac15de93e5a112036a06"
server: Vercel
strict-transport-security: max-age=63072000
x-vercel-cache: HIT
x-vercel-id: fra1::gsg9m-1705336406533-adf1f7d78a76
x-cache: Hit from cloudfront
via: 1.1 6a757ab2991da716151f94ca00b38098.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: J9hwkqrAvlYNyUGd5R_yW6jUF8RZ1We6m6Y7gU21mbbknPPqjVFekA==
age: 8597071
X-Firefox-Spdy: h2
|
|
| aadcdn.msauth.net/shared/1.0/content/images/picker_verify_fluent_authenticator_59892f1e05e3adf9fd2f71b42d92a27f.svg | 13.107.246.53 | 200 OK | 2.4 kB |
URL GET HTTP/2aadcdn.msauth.net/shared/1.0/content/images/picker_verify_fluent_authenticator_59892f1e05e3adf9fd2f71b42d92a27f.svg IP13.107.246.53:443 ASN#8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested byhttps://pub-9cba10d444bf44eea4f1504b0b173c03.r2.dev/XSD34qjE4Myn%2526m%253Dilk.p0ypaGTJbLL%2526b%253DO4ECJ6p0xWACZ682uuprWTDWQLedDqjE4Myn%2526m%253Dilk.p0ypaGTJbLL%2526b%253DO4ECJ6p0xWACZ682DWQLedDqjE4Myn%2526m%253Dilk.p0ypaGTJbLL%2526b%253DO4ECJ6p0xWACZ682.html#cskbxlogistics@schneider.com CertificateIssuerDigiCert Inc Subjectaadcdn.msauth.net FingerprintEB:7C:D1:4E:EF:B5:D4:72:25:0B:1A:AF:5F:10:3D:EA:13:80:5A:47 ValidityMon, 29 Jan 2024 00:00:00 GMT - Wed, 29 Jan 2025 23:59:59 GMT
File typeSVG Scalable Vector Graphics image Hashb59c16ca9bf156438a8a96d45e33db64 4e51b7d3477414b220f688adabd76d3ae6472ee3 a7ee799dd5b6f6dbb70b043b766362a6724e71458f9839306c995f06b218c2f8
GET /shared/1.0/content/images/picker_verify_fluent_authenticator_59892f1e05e3adf9fd2f71b42d92a27f.svg HTTP/1.1
Host: aadcdn.msauth.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pub-9cba10d444bf44eea4f1504b0b173c03.r2.dev/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 24 Apr 2024 04:37:58 GMT
content-type: image/svg+xml
content-length: 2407
cache-control: public, max-age=31536000
content-encoding: gzip
last-modified: Wed, 24 May 2023 10:11:49 GMT
etag: 0x8DB5C3F499A9B99
x-ms-request-id: af0ae6e7-901e-000f-527d-926c81000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
access-control-allow-origin: *
x-azure-ref: 20240424T043758Z-16c4f695cc58qx282nqc5nyr8g00000006xg000000003834
x-fd-int-roxy-purgeid: 4554691
x-cache: TCP_HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| aadcdn.msauth.net/shared/1.0/content/images/picker_verify_sms_12b7d768ba76f2e782cc74e328171091.svg | 13.107.246.53 | 200 OK | 199 B |
URL GET HTTP/2aadcdn.msauth.net/shared/1.0/content/images/picker_verify_sms_12b7d768ba76f2e782cc74e328171091.svg IP13.107.246.53:443 ASN#8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested byhttps://pub-9cba10d444bf44eea4f1504b0b173c03.r2.dev/XSD34qjE4Myn%2526m%253Dilk.p0ypaGTJbLL%2526b%253DO4ECJ6p0xWACZ682uuprWTDWQLedDqjE4Myn%2526m%253Dilk.p0ypaGTJbLL%2526b%253DO4ECJ6p0xWACZ682DWQLedDqjE4Myn%2526m%253Dilk.p0ypaGTJbLL%2526b%253DO4ECJ6p0xWACZ682.html#cskbxlogistics@schneider.com CertificateIssuerDigiCert Inc Subjectaadcdn.msauth.net FingerprintEB:7C:D1:4E:EF:B5:D4:72:25:0B:1A:AF:5F:10:3D:EA:13:80:5A:47 ValidityMon, 29 Jan 2024 00:00:00 GMT - Wed, 29 Jan 2025 23:59:59 GMT
File typeSVG Scalable Vector Graphics image Hash27a6d18b56f46818420e60a773c36d4e 346ec247500fddc51cc1d85b8f4b9a343f7a48d3 8ed8f3acb9b87f99e42c74463d4e2be96ee85b8a87cd6eb874295ace420a5904
GET /shared/1.0/content/images/picker_verify_sms_12b7d768ba76f2e782cc74e328171091.svg HTTP/1.1
Host: aadcdn.msauth.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pub-9cba10d444bf44eea4f1504b0b173c03.r2.dev/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 24 Apr 2024 04:37:58 GMT
content-type: image/svg+xml
content-length: 199
cache-control: public, max-age=31536000
content-encoding: gzip
last-modified: Wed, 24 May 2023 10:11:49 GMT
etag: 0x8DB5C3F49C21D98
x-ms-request-id: e356ed44-201e-0064-577d-920bb4000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
access-control-allow-origin: *
x-azure-ref: 20240424T043758Z-16c4f695cc58qx282nqc5nyr8g00000006xg000000003835
x-fd-int-roxy-purgeid: 0
x-cache: TCP_HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| logincdn.msauth.net/shared/1.0/content/images/arrow_left_a9cc2824ef3517b6c4160dcf8ff7d410.svg | 13.107.246.53 | 200 OK | 276 B |
URL GET HTTP/2logincdn.msauth.net/shared/1.0/content/images/arrow_left_a9cc2824ef3517b6c4160dcf8ff7d410.svg IP13.107.246.53:443 ASN#8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested byhttps://pub-9cba10d444bf44eea4f1504b0b173c03.r2.dev/XSD34qjE4Myn%2526m%253Dilk.p0ypaGTJbLL%2526b%253DO4ECJ6p0xWACZ682uuprWTDWQLedDqjE4Myn%2526m%253Dilk.p0ypaGTJbLL%2526b%253DO4ECJ6p0xWACZ682DWQLedDqjE4Myn%2526m%253Dilk.p0ypaGTJbLL%2526b%253DO4ECJ6p0xWACZ682.html#cskbxlogistics@schneider.com CertificateIssuerMicrosoft Corporation Subjectidentitycdn.msauth.net Fingerprint15:1B:3E:26:F4:4A:EE:1C:C2:40:74:BB:BD:AE:20:E4:35:B0:40:40 ValidityWed, 17 Jan 2024 06:03:21 GMT - Sat, 11 Jan 2025 06:03:21 GMT
File typeSVG Scalable Vector Graphics image Hasha9cc2824ef3517b6c4160dcf8ff7d410 8db9aebad84ca6e4225bfdd2458ff3821cc4f064 34f9db946e89f031a80dfca7b16b2b686469c9886441261ae70a44da1dfa2d58
GET /shared/1.0/content/images/arrow_left_a9cc2824ef3517b6c4160dcf8ff7d410.svg HTTP/1.1
Host: logincdn.msauth.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pub-9cba10d444bf44eea4f1504b0b173c03.r2.dev/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 24 Apr 2024 04:37:58 GMT
content-type: image/svg+xml
content-length: 276
cache-control: public, max-age=31536000
content-encoding: gzip
last-modified: Wed, 22 Jan 2020 00:38:00 GMT
etag: 0x8D79ED35591CF44
x-ms-request-id: d42dd95b-201e-0074-14bf-94bb96000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
access-control-allow-origin: *
x-azure-ref: 20240424T043758Z-16c4f695cc5zbb4tvsgh6u01tc00000006tg0000000048df
x-fd-int-roxy-purgeid: 67912908
x-cache: TCP_HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| www.gstatic.com/recaptcha/api2/logo_48.png | 142.250.74.163 | 200 OK | 2.2 kB |
URL GET HTTP/2www.gstatic.com/recaptcha/api2/logo_48.png IP142.250.74.163:443
Requested byhttps://pub-9cba10d444bf44eea4f1504b0b173c03.r2.dev/XSD34qjE4Myn%2526m%253Dilk.p0ypaGTJbLL%2526b%253DO4ECJ6p0xWACZ682uuprWTDWQLedDqjE4Myn%2526m%253Dilk.p0ypaGTJbLL%2526b%253DO4ECJ6p0xWACZ682DWQLedDqjE4Myn%2526m%253Dilk.p0ypaGTJbLL%2526b%253DO4ECJ6p0xWACZ682.html#cskbxlogistics@schneider.com CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com FingerprintF5:5C:D9:68:C6:5F:A3:33:5A:73:C3:79:B6:83:FE:44:2E:A4:83:74 ValidityMon, 18 Mar 2024 20:34:25 GMT - Mon, 10 Jun 2024 20:34:24 GMT
File typePNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced Hashef9941290c50cd3866e2ba6b793f010d 4736508c795667dcea21f8d864233031223b7832 1b9efb22c938500971aac2b2130a475fa23684dd69e43103894968df83145b8a
GET /recaptcha/api2/logo_48.png HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pub-9cba10d444bf44eea4f1504b0b173c03.r2.dev/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 2228
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 18 Apr 2024 17:35:26 GMT
expires: Thu, 25 Apr 2024 17:35:26 GMT
cache-control: public, max-age=604800
age: 471752
last-modified: Tue, 03 Mar 2020 20:15:00 GMT
content-type: image/png
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| twomancake.com/socket.io/?EIO=4&transport=polling&t=OyEPNq4 | 172.67.130.24 | 204 No Content | 0 B |
URL OPTIONS HTTP/3twomancake.com/socket.io/?EIO=4&transport=polling&t=OyEPNq4 IP172.67.130.24:443
Requested byhttps://pub-9cba10d444bf44eea4f1504b0b173c03.r2.dev/XSD34qjE4Myn%2526m%253Dilk.p0ypaGTJbLL%2526b%253DO4ECJ6p0xWACZ682uuprWTDWQLedDqjE4Myn%2526m%253Dilk.p0ypaGTJbLL%2526b%253DO4ECJ6p0xWACZ682DWQLedDqjE4Myn%2526m%253Dilk.p0ypaGTJbLL%2526b%253DO4ECJ6p0xWACZ682.html#cskbxlogistics@schneider.com CertificateIssuerLet's Encrypt Subjecttwomancake.com FingerprintAF:27:60:8A:CD:A9:93:0A:E2:7C:B9:F0:B3:9B:B4:E4:C1:DD:3D:1C ValidityTue, 09 Apr 2024 04:59:30 GMT - Mon, 08 Jul 2024 04:59:29 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /socket.io/?EIO=4&transport=polling&t=OyEPNq4 HTTP/1.1
Host: twomancake.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: auth_uid,session_email
Referer: https://pub-9cba10d444bf44eea4f1504b0b173c03.r2.dev/
Origin: https://pub-9cba10d444bf44eea4f1504b0b173c03.r2.dev
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 204 No Content
date: Wed, 24 Apr 2024 04:38:03 GMT
content-length: 0
access-control-allow-origin: *
access-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE
vary: Access-Control-Request-Headers
access-control-allow-headers: auth_uid,session_email
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=xmn5ScdzSV82Vq0f9H%2BGNdf7A%2BRP5MXYaUCOw4zkZ4uNEzMAjTUdjz6XYgiWRobbOsEVRDrtyTjq9w2SqJbHVQOO7%2FcbAM%2Fkqj9LUrUtTP2kYeBi0AWAhKdt9zTaCsf%2Bww%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 879366cead475685-OSL
alt-svc: h3=":443"; ma=86400
|
|
| twomancake.com/socket.io/?EIO=4&transport=polling&t=OyEPNsh | 172.67.130.24 | 204 No Content | 0 B |
URL OPTIONS HTTP/3twomancake.com/socket.io/?EIO=4&transport=polling&t=OyEPNsh IP172.67.130.24:443
Requested byhttps://pub-9cba10d444bf44eea4f1504b0b173c03.r2.dev/XSD34qjE4Myn%2526m%253Dilk.p0ypaGTJbLL%2526b%253DO4ECJ6p0xWACZ682uuprWTDWQLedDqjE4Myn%2526m%253Dilk.p0ypaGTJbLL%2526b%253DO4ECJ6p0xWACZ682DWQLedDqjE4Myn%2526m%253Dilk.p0ypaGTJbLL%2526b%253DO4ECJ6p0xWACZ682.html#cskbxlogistics@schneider.com CertificateIssuerLet's Encrypt Subjecttwomancake.com FingerprintAF:27:60:8A:CD:A9:93:0A:E2:7C:B9:F0:B3:9B:B4:E4:C1:DD:3D:1C ValidityTue, 09 Apr 2024 04:59:30 GMT - Mon, 08 Jul 2024 04:59:29 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /socket.io/?EIO=4&transport=polling&t=OyEPNsh HTTP/1.1
Host: twomancake.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: auth_uid,session_email
Referer: https://pub-9cba10d444bf44eea4f1504b0b173c03.r2.dev/
Origin: https://pub-9cba10d444bf44eea4f1504b0b173c03.r2.dev
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 204 No Content
date: Wed, 24 Apr 2024 04:38:03 GMT
content-length: 0
access-control-allow-origin: *
access-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE
vary: Access-Control-Request-Headers
access-control-allow-headers: auth_uid,session_email
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=wFh%2F9HjI%2FaIS2WdspLu4GC%2BReULDk1I37HXxDMomrhlVbDCFWF0idiAkTzgAi8HiNtZCiUAE6Y2s4Lnga0kWvJPOgMIoPUNWn0%2BR1XGtvchyvIHiULecqIe2ElfDgZPaGQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 879366cf8dbc5685-OSL
alt-svc: h3=":443"; ma=86400
|
|
| twomancake.com/socket.io/?EIO=4&transport=polling&t=OyEPNw_&sid=ONU6DQHCCDoIYF-bABiy | 172.67.130.24 | 204 No Content | 0 B |
URL OPTIONS HTTP/3twomancake.com/socket.io/?EIO=4&transport=polling&t=OyEPNw_&sid=ONU6DQHCCDoIYF-bABiy IP172.67.130.24:443
Requested byhttps://pub-9cba10d444bf44eea4f1504b0b173c03.r2.dev/XSD34qjE4Myn%2526m%253Dilk.p0ypaGTJbLL%2526b%253DO4ECJ6p0xWACZ682uuprWTDWQLedDqjE4Myn%2526m%253Dilk.p0ypaGTJbLL%2526b%253DO4ECJ6p0xWACZ682DWQLedDqjE4Myn%2526m%253Dilk.p0ypaGTJbLL%2526b%253DO4ECJ6p0xWACZ682.html#cskbxlogistics@schneider.com CertificateIssuerLet's Encrypt Subjecttwomancake.com FingerprintAF:27:60:8A:CD:A9:93:0A:E2:7C:B9:F0:B3:9B:B4:E4:C1:DD:3D:1C ValidityTue, 09 Apr 2024 04:59:30 GMT - Mon, 08 Jul 2024 04:59:29 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /socket.io/?EIO=4&transport=polling&t=OyEPNw_&sid=ONU6DQHCCDoIYF-bABiy HTTP/1.1
Host: twomancake.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: auth_uid,session_email
Referer: https://pub-9cba10d444bf44eea4f1504b0b173c03.r2.dev/
Origin: https://pub-9cba10d444bf44eea4f1504b0b173c03.r2.dev
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 204 No Content
date: Wed, 24 Apr 2024 04:38:03 GMT
content-length: 0
access-control-allow-origin: *
access-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE
vary: Access-Control-Request-Headers
access-control-allow-headers: auth_uid,session_email
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=QD4gNZbyM89EtpYtXMCTQ6i0BJ4tuBa%2FzR0qdfPNUjv8dxTjS%2FeTZbNsStco6CF%2Fr%2ByShLA1smCd8gqX3wKlGSlrka%2FFQhnA%2FA4tSdXnHvZ%2Bv9N%2Biy%2FPL%2FcVmtnjIKm5AQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 879366d14ef25685-OSL
alt-svc: h3=":443"; ma=86400
|
|
| twomancake.com/socket.io/?EIO=4&transport=polling&t=OyEPNx4&sid=ONU6DQHCCDoIYF-bABiy | 172.67.130.24 | 204 No Content | 0 B |
URL OPTIONS HTTP/3twomancake.com/socket.io/?EIO=4&transport=polling&t=OyEPNx4&sid=ONU6DQHCCDoIYF-bABiy IP172.67.130.24:443
Requested byhttps://pub-9cba10d444bf44eea4f1504b0b173c03.r2.dev/XSD34qjE4Myn%2526m%253Dilk.p0ypaGTJbLL%2526b%253DO4ECJ6p0xWACZ682uuprWTDWQLedDqjE4Myn%2526m%253Dilk.p0ypaGTJbLL%2526b%253DO4ECJ6p0xWACZ682DWQLedDqjE4Myn%2526m%253Dilk.p0ypaGTJbLL%2526b%253DO4ECJ6p0xWACZ682.html#cskbxlogistics@schneider.com CertificateIssuerLet's Encrypt Subjecttwomancake.com FingerprintAF:27:60:8A:CD:A9:93:0A:E2:7C:B9:F0:B3:9B:B4:E4:C1:DD:3D:1C ValidityTue, 09 Apr 2024 04:59:30 GMT - Mon, 08 Jul 2024 04:59:29 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /socket.io/?EIO=4&transport=polling&t=OyEPNx4&sid=ONU6DQHCCDoIYF-bABiy HTTP/1.1
Host: twomancake.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: auth_uid,session_email
Referer: https://pub-9cba10d444bf44eea4f1504b0b173c03.r2.dev/
Origin: https://pub-9cba10d444bf44eea4f1504b0b173c03.r2.dev
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 204 No Content
date: Wed, 24 Apr 2024 04:38:03 GMT
content-length: 0
access-control-allow-origin: *
access-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE
vary: Access-Control-Request-Headers
access-control-allow-headers: auth_uid,session_email
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=yLI1Apk1%2Fg%2BDFezfV6ovkjju0%2BoimeOhxdxhwWhnYi8PJxtfJ3jaAB6Ms6V54%2B4lLZWbOdOxbSaRLCwXDrEyjkXkVABE5WK0nSzFq9nt%2FFczuGjLZCbgFiebV7thK50QPg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 879366d14ef45685-OSL
alt-svc: h3=":443"; ma=86400
|
|
| twomancake.com/socket.io/?EIO=4&transport=polling&t=OyEPNzF&sid=OuezeK2pO0Al7BfQABiz | 172.67.130.24 | 200 OK | 0 B |
URL POST HTTP/3twomancake.com/socket.io/?EIO=4&transport=polling&t=OyEPNzF&sid=OuezeK2pO0Al7BfQABiz IP172.67.130.24:443
Requested byhttps://pub-9cba10d444bf44eea4f1504b0b173c03.r2.dev/XSD34qjE4Myn%2526m%253Dilk.p0ypaGTJbLL%2526b%253DO4ECJ6p0xWACZ682uuprWTDWQLedDqjE4Myn%2526m%253Dilk.p0ypaGTJbLL%2526b%253DO4ECJ6p0xWACZ682DWQLedDqjE4Myn%2526m%253Dilk.p0ypaGTJbLL%2526b%253DO4ECJ6p0xWACZ682.html#cskbxlogistics@schneider.com CertificateIssuerLet's Encrypt Subjecttwomancake.com FingerprintAF:27:60:8A:CD:A9:93:0A:E2:7C:B9:F0:B3:9B:B4:E4:C1:DD:3D:1C ValidityTue, 09 Apr 2024 04:59:30 GMT - Mon, 08 Jul 2024 04:59:29 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /socket.io/?EIO=4&transport=polling&t=OyEPNzF&sid=OuezeK2pO0Al7BfQABiz HTTP/1.1
Host: twomancake.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: auth_uid,session_email
Referer: https://pub-9cba10d444bf44eea4f1504b0b173c03.r2.dev/
Origin: https://pub-9cba10d444bf44eea4f1504b0b173c03.r2.dev
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 204 No Content
date: Wed, 24 Apr 2024 04:38:03 GMT
content-length: 0
access-control-allow-origin: *
access-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE
vary: Access-Control-Request-Headers
access-control-allow-headers: auth_uid,session_email
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=VwUOMzmu1HlL2HtYZO1DBk4TRoKcdGoHRJhyx%2BbX5xHvoSYuj6oReJDxB6iZL%2BKaY9t1Le2J9MgjSbY6aGL9HIfgZAUTRLfKbv7U8PSD%2FQFzA7VQW3tDYvJU%2BSVRCMhuQA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 879366d22f535685-OSL
alt-svc: h3=":443"; ma=86400
|
|
| twomancake.com/socket.io/?EIO=4&transport=websocket&sid=ONU6DQHCCDoIYF-bABiy | 172.67.130.24 | | 0 B |
URL twomancake.com/socket.io/?EIO=4&transport=websocket&sid=ONU6DQHCCDoIYF-bABiy IP172.67.130.24:0
CertificateIssuerLet's Encrypt Subjecttwomancake.com FingerprintAF:27:60:8A:CD:A9:93:0A:E2:7C:B9:F0:B3:9B:B4:E4:C1:DD:3D:1C ValidityTue, 09 Apr 2024 04:59:30 GMT - Mon, 08 Jul 2024 04:59:29 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /socket.io/?EIO=4&transport=websocket&sid=ONU6DQHCCDoIYF-bABiy HTTP/1.1
Host: twomancake.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: https://pub-9cba10d444bf44eea4f1504b0b173c03.r2.dev
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: rdjIb3Zbhh/BUsb6PO3+6Q==
DNT: 1
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Date: Wed, 24 Apr 2024 04:38:04 GMT
Connection: upgrade
Upgrade: websocket
Sec-WebSocket-Accept: 6YZ6ubsI43a3Qui6DgfmpLlAizE=
Access-Control-Allow-Origin: *
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Ltx9bnHa3N3lMnIQxlsvp7bA%2BJiU0t2iyzf12sSfyY84iWW3VxfAJ4ALd6JFePl3p2je0fZO%2Fzm4Uur%2FSSVg7ZJn3srGEaVhOVXy58zCMuOXTLzK%2B5eq2nuFYoiOLetBIg%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 879366d19c4c0b4d-OSL
alt-svc: h3=":443"; ma=86400
|
|
| twomancake.com/socket.io/?EIO=4&transport=polling&t=OyEPNzI&sid=OuezeK2pO0Al7BfQABiz | 172.67.130.24 | 204 No Content | 0 B |
URL OPTIONS HTTP/3twomancake.com/socket.io/?EIO=4&transport=polling&t=OyEPNzI&sid=OuezeK2pO0Al7BfQABiz IP172.67.130.24:443
Requested byhttps://pub-9cba10d444bf44eea4f1504b0b173c03.r2.dev/XSD34qjE4Myn%2526m%253Dilk.p0ypaGTJbLL%2526b%253DO4ECJ6p0xWACZ682uuprWTDWQLedDqjE4Myn%2526m%253Dilk.p0ypaGTJbLL%2526b%253DO4ECJ6p0xWACZ682DWQLedDqjE4Myn%2526m%253Dilk.p0ypaGTJbLL%2526b%253DO4ECJ6p0xWACZ682.html#cskbxlogistics@schneider.com CertificateIssuerLet's Encrypt Subjecttwomancake.com FingerprintAF:27:60:8A:CD:A9:93:0A:E2:7C:B9:F0:B3:9B:B4:E4:C1:DD:3D:1C ValidityTue, 09 Apr 2024 04:59:30 GMT - Mon, 08 Jul 2024 04:59:29 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /socket.io/?EIO=4&transport=polling&t=OyEPNzI&sid=OuezeK2pO0Al7BfQABiz HTTP/1.1
Host: twomancake.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: auth_uid,session_email
Referer: https://pub-9cba10d444bf44eea4f1504b0b173c03.r2.dev/
Origin: https://pub-9cba10d444bf44eea4f1504b0b173c03.r2.dev
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 204 No Content
date: Wed, 24 Apr 2024 04:38:04 GMT
content-length: 0
access-control-allow-origin: *
access-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE
vary: Access-Control-Request-Headers
access-control-allow-headers: auth_uid,session_email
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=dPlFgFKwVyQIF9jYijxwmut3JHC4xIJlsM40StaW06%2Bf1TxthgdCoR3%2Fck4hg%2FrrzcUOx%2BybxlADYAsLvdY5CPvzOZ7%2B7ZsX9GK3A5j1iI%2FptO9ECvhl6fcfkzidvrjc2g%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 879366d23f5c5685-OSL
alt-svc: h3=":443"; ma=86400
|
|
| twomancake.com/socket.io/?EIO=4&transport=polling&t=OyEPNx4&sid=ONU6DQHCCDoIYF-bABiy | 172.67.130.24 | 204 No Content | 1 B |
URL OPTIONS HTTP/3twomancake.com/socket.io/?EIO=4&transport=polling&t=OyEPNx4&sid=ONU6DQHCCDoIYF-bABiy IP172.67.130.24:443
Requested byhttps://pub-9cba10d444bf44eea4f1504b0b173c03.r2.dev/XSD34qjE4Myn%2526m%253Dilk.p0ypaGTJbLL%2526b%253DO4ECJ6p0xWACZ682uuprWTDWQLedDqjE4Myn%2526m%253Dilk.p0ypaGTJbLL%2526b%253DO4ECJ6p0xWACZ682DWQLedDqjE4Myn%2526m%253Dilk.p0ypaGTJbLL%2526b%253DO4ECJ6p0xWACZ682.html#cskbxlogistics@schneider.com CertificateIssuerLet's Encrypt Subjecttwomancake.com FingerprintAF:27:60:8A:CD:A9:93:0A:E2:7C:B9:F0:B3:9B:B4:E4:C1:DD:3D:1C ValidityTue, 09 Apr 2024 04:59:30 GMT - Mon, 08 Jul 2024 04:59:29 GMT
File typevery short file (no magic) Hash1679091c5a880faf6fb5e6087eb1b2dc c1dfd96eea8cc2b62785275bca38ac261256e278 e7f6c011776e8db7cd330b54174fd76f7d0216b612387a5ffcfb81e6f0919683
GET /socket.io/?EIO=4&transport=polling&t=OyEPNx4&sid=ONU6DQHCCDoIYF-bABiy HTTP/1.1
Host: twomancake.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Auth_UID: USER24032024UNIQUE0354032432202420240324540332
Session_Email: cskbxlogistics@schneider.com
Origin: https://pub-9cba10d444bf44eea4f1504b0b173c03.r2.dev
DNT: 1
Connection: keep-alive
Referer: https://pub-9cba10d444bf44eea4f1504b0b173c03.r2.dev/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 24 Apr 2024 04:38:04 GMT
content-type: text/plain; charset=UTF-8
content-length: 1
access-control-allow-origin: *
cache-control: no-store
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=YxwF%2FppASaqD0kHYNWhL%2BTP6l2aO7%2BeaZ4wXABF0YGmnEoiqwTV5WniCNHQVZ981ORNdOSD1dsOCUxSALDrro4nqSzBO0MZEEJXck%2FuyjlEgoSCNAJHbm9VYKU9b9Tzk4w%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 879366d2ffec5685-OSL
alt-svc: h3=":443"; ma=86400
|
|
| twomancake.com/socket.io/?EIO=4&transport=websocket&sid=OuezeK2pO0Al7BfQABiz | 104.21.7.98 | | 0 B |
URL twomancake.com/socket.io/?EIO=4&transport=websocket&sid=OuezeK2pO0Al7BfQABiz IP104.21.7.98:0
CertificateIssuerLet's Encrypt Subjecttwomancake.com FingerprintAF:27:60:8A:CD:A9:93:0A:E2:7C:B9:F0:B3:9B:B4:E4:C1:DD:3D:1C ValidityTue, 09 Apr 2024 04:59:30 GMT - Mon, 08 Jul 2024 04:59:29 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /socket.io/?EIO=4&transport=websocket&sid=OuezeK2pO0Al7BfQABiz HTTP/1.1
Host: twomancake.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: https://pub-9cba10d444bf44eea4f1504b0b173c03.r2.dev
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: eJhVH/iIBtIt0cWdv74qnA==
DNT: 1
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Date: Wed, 24 Apr 2024 04:38:04 GMT
Connection: upgrade
Upgrade: websocket
Sec-WebSocket-Accept: Ax9nUvdiaDsvHtlywh2s3sPqYtY=
Access-Control-Allow-Origin: *
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=scTaqfrueVYvyeZRXFMF44FJa67wLqAKPIue7%2Ftsy0cwVwdEhSrCRZM92bfsIapAGVWOCvDZsA9NAUV%2BX%2ByUvMw1XGCEQ9VB5XQXZUR387sTHLdZRLPZqrpZUfUDkiegww%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 879366d38d7e56ba-OSL
alt-svc: h3=":443"; ma=86400
|
|
| twomancake.com/socket.io/?EIO=4&transport=polling&t=OyEPNzI&sid=OuezeK2pO0Al7BfQABiz | 172.67.130.24 | 204 No Content | 1 B |
URL OPTIONS HTTP/3twomancake.com/socket.io/?EIO=4&transport=polling&t=OyEPNzI&sid=OuezeK2pO0Al7BfQABiz IP172.67.130.24:443
Requested byhttps://pub-9cba10d444bf44eea4f1504b0b173c03.r2.dev/XSD34qjE4Myn%2526m%253Dilk.p0ypaGTJbLL%2526b%253DO4ECJ6p0xWACZ682uuprWTDWQLedDqjE4Myn%2526m%253Dilk.p0ypaGTJbLL%2526b%253DO4ECJ6p0xWACZ682DWQLedDqjE4Myn%2526m%253Dilk.p0ypaGTJbLL%2526b%253DO4ECJ6p0xWACZ682.html#cskbxlogistics@schneider.com CertificateIssuerLet's Encrypt Subjecttwomancake.com FingerprintAF:27:60:8A:CD:A9:93:0A:E2:7C:B9:F0:B3:9B:B4:E4:C1:DD:3D:1C ValidityTue, 09 Apr 2024 04:59:30 GMT - Mon, 08 Jul 2024 04:59:29 GMT
File typevery short file (no magic) Hash1679091c5a880faf6fb5e6087eb1b2dc c1dfd96eea8cc2b62785275bca38ac261256e278 e7f6c011776e8db7cd330b54174fd76f7d0216b612387a5ffcfb81e6f0919683
GET /socket.io/?EIO=4&transport=polling&t=OyEPNzI&sid=OuezeK2pO0Al7BfQABiz HTTP/1.1
Host: twomancake.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Auth_UID: USER24032024UNIQUE0354032432202420240324540332
Session_Email: cskbxlogistics@schneider.com
Origin: https://pub-9cba10d444bf44eea4f1504b0b173c03.r2.dev
DNT: 1
Connection: keep-alive
Referer: https://pub-9cba10d444bf44eea4f1504b0b173c03.r2.dev/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 24 Apr 2024 04:38:04 GMT
content-type: text/plain; charset=UTF-8
content-length: 1
access-control-allow-origin: *
cache-control: no-store
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=FmeqgNZ0jzlqrvQWTxHoGYBaSYO%2BwYIED5pvqmYQSa%2BDxlaNBSKBxoFdEGb7wNY5rNwUZnt78djvnA%2Bk77KEAfMN%2F5MeV%2Bhieif%2F4LLkNuaSoVhlcAro0rHhR4Ls%2FEp6Uw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 879366d3f8645685-OSL
alt-svc: h3=":443"; ma=86400
|
|
| twomancake.com/socket.io/?EIO=4&transport=polling&t=OyEPNq4 | 172.67.130.24 | 204 No Content | 7.2 kB |
URL OPTIONS HTTP/3twomancake.com/socket.io/?EIO=4&transport=polling&t=OyEPNq4 IP172.67.130.24:443
Requested byhttps://pub-9cba10d444bf44eea4f1504b0b173c03.r2.dev/XSD34qjE4Myn%2526m%253Dilk.p0ypaGTJbLL%2526b%253DO4ECJ6p0xWACZ682uuprWTDWQLedDqjE4Myn%2526m%253Dilk.p0ypaGTJbLL%2526b%253DO4ECJ6p0xWACZ682DWQLedDqjE4Myn%2526m%253Dilk.p0ypaGTJbLL%2526b%253DO4ECJ6p0xWACZ682.html#cskbxlogistics@schneider.com CertificateIssuerLet's Encrypt Subjecttwomancake.com FingerprintAF:27:60:8A:CD:A9:93:0A:E2:7C:B9:F0:B3:9B:B4:E4:C1:DD:3D:1C ValidityTue, 09 Apr 2024 04:59:30 GMT - Mon, 08 Jul 2024 04:59:29 GMT
File typeASCII text, with no line terminators Hash0232047984d0b9c2b84e6d89deb16a09 cdc5404388bceb5ea8e857b0ffbd1b01f5b27b21 beae54e2f3e4558e4ff968bb17e635be0a4f456511e7fcb66525da9939f453a8
GET /socket.io/?EIO=4&transport=polling&t=OyEPNq4 HTTP/1.1
Host: twomancake.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Auth_UID: USER24032024UNIQUE0354032432202420240324540332
Session_Email: cskbxlogistics@schneider.com
Origin: https://pub-9cba10d444bf44eea4f1504b0b173c03.r2.dev
DNT: 1
Connection: keep-alive
Referer: https://pub-9cba10d444bf44eea4f1504b0b173c03.r2.dev/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 24 Apr 2024 04:38:03 GMT
content-type: text/plain; charset=UTF-8
access-control-allow-origin: *
cache-control: no-store
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=l0qE3%2FNSzjakYeVQVindkfGdCj36P5qhGtFKEcMomWProcynnCdEKbAC3lbWggKtWLZ%2FfaolhV3sbNxRjbiv2ZSGkURigdQfNCY3ybeJUkcTdZZHs%2BF9k2scmr8bttCI5w%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 879366d04e385685-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| aadcdn.msftauth.net/shared/1.0/content/images/appbackgrounds/49_6ffe0a92d779c878835b40171ffc2e13.jpg | 152.199.23.37 | 200 OK | 18 kB |
URL GET HTTP/2aadcdn.msftauth.net/shared/1.0/content/images/appbackgrounds/49_6ffe0a92d779c878835b40171ffc2e13.jpg IP152.199.23.37:443
Requested byhttps://pub-9cba10d444bf44eea4f1504b0b173c03.r2.dev/XSD34qjE4Myn%2526m%253Dilk.p0ypaGTJbLL%2526b%253DO4ECJ6p0xWACZ682uuprWTDWQLedDqjE4Myn%2526m%253Dilk.p0ypaGTJbLL%2526b%253DO4ECJ6p0xWACZ682DWQLedDqjE4Myn%2526m%253Dilk.p0ypaGTJbLL%2526b%253DO4ECJ6p0xWACZ682.html#cskbxlogistics@schneider.com CertificateIssuerDigiCert Inc Subjectaadcdn.msftauth.net Fingerprint3C:9E:70:F5:B3:D1:80:80:8C:97:1C:7B:7E:A8:2C:D8:7B:94:95:0B ValidityFri, 01 Dec 2023 00:00:00 GMT - Sun, 01 Dec 2024 23:59:59 GMT
File typeJPEG image data, baseline, precision 8, 1920x1080, components 3 Hash7916a894ebde7d29c2cc29b267f1299f 78345ca08f9e2c3c2cc9b318950791b349211296 d8f5ab3e00202fd3b45be1acd95d677b137064001e171bc79b06826d98f1e1d3
GET /shared/1.0/content/images/appbackgrounds/49_6ffe0a92d779c878835b40171ffc2e13.jpg HTTP/1.1
Host: aadcdn.msftauth.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pub-9cba10d444bf44eea4f1504b0b173c03.r2.dev/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
age: 2600290
cache-control: public, max-age=31536000
content-md5: eRaolOvefSnCzCmyZ/Epnw==
content-type: image/jpeg
date: Wed, 24 Apr 2024 04:38:12 GMT
etag: 0x8DB5C3F41AC335E
last-modified: Wed, 24 May 2023 10:11:35 GMT
server: ECAcc (ska/F779)
x-cache: HIT
x-ms-blob-type: BlockBlob
x-ms-lease-status: unlocked
x-ms-request-id: a2907119-301e-00d4-625a-7ec248000000
x-ms-version: 2009-09-19
content-length: 17453
X-Firefox-Spdy: h2
|
|
| www.w3schools.com/w3css/4/w3.css | 192.229.133.221 | 200 OK | 23 kB |
URL GET HTTP/2www.w3schools.com/w3css/4/w3.css IP192.229.133.221:443
Requested byhttps://pub-9cba10d444bf44eea4f1504b0b173c03.r2.dev/XSD34qjE4Myn%2526m%253Dilk.p0ypaGTJbLL%2526b%253DO4ECJ6p0xWACZ682uuprWTDWQLedDqjE4Myn%2526m%253Dilk.p0ypaGTJbLL%2526b%253DO4ECJ6p0xWACZ682DWQLedDqjE4Myn%2526m%253Dilk.p0ypaGTJbLL%2526b%253DO4ECJ6p0xWACZ682.html#cskbxlogistics@schneider.com CertificateIssuerDigiCert Inc Subject*.w3schools.com Fingerprint20:AF:FF:E1:FC:DB:58:C8:05:B7:D2:97:1F:8F:A1:C6:AD:ED:59:3A ValidityWed, 03 Apr 2024 00:00:00 GMT - Sun, 04 May 2025 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /w3css/4/w3.css HTTP/1.1
Host: www.w3schools.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pub-9cba10d444bf44eea4f1504b0b173c03.r2.dev/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-encoding: gzip
accept-ranges: bytes
age: 7707
cache-control: public,max-age=14400,public
content-security-policy: frame-ancestors 'self' https://mycourses.w3schools.com;
content-type: text/css
date: Wed, 24 Apr 2024 04:37:58 GMT
etag: "0d6fc18b794da1:0+gzip"
last-modified: Mon, 22 Apr 2024 13:15:08 GMT
server: ECS (ska/F716)
vary: Accept-Encoding
x-cache: HIT
x-content-security-policy: frame-ancestors 'self' https://mycourses.w3schools.com;
x-powered-by: ASP.NET
content-length: 5256
X-Firefox-Spdy: h2
|
|
| aadcdn.msauth.net/shared/1.0/content/images/backgrounds/2_11d9e3bcdfede9ce5ce5ace2d129f1c4.svg | 13.107.246.53 | 200 OK | 1.9 kB |
URL GET HTTP/2aadcdn.msauth.net/shared/1.0/content/images/backgrounds/2_11d9e3bcdfede9ce5ce5ace2d129f1c4.svg IP13.107.246.53:443 ASN#8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested byhttps://pub-9cba10d444bf44eea4f1504b0b173c03.r2.dev/XSD34qjE4Myn%2526m%253Dilk.p0ypaGTJbLL%2526b%253DO4ECJ6p0xWACZ682uuprWTDWQLedDqjE4Myn%2526m%253Dilk.p0ypaGTJbLL%2526b%253DO4ECJ6p0xWACZ682DWQLedDqjE4Myn%2526m%253Dilk.p0ypaGTJbLL%2526b%253DO4ECJ6p0xWACZ682.html#cskbxlogistics@schneider.com CertificateIssuerDigiCert Inc Subjectaadcdn.msauth.net FingerprintEB:7C:D1:4E:EF:B5:D4:72:25:0B:1A:AF:5F:10:3D:EA:13:80:5A:47 ValidityMon, 29 Jan 2024 00:00:00 GMT - Wed, 29 Jan 2025 23:59:59 GMT
File typeSVG Scalable Vector Graphics image Hash4b5c228b4faba433d06ec569ed855b2d a7d3882b93e332460e7c59510a6a811ef011983f eb19d76cd1fad39abf0f2778991883a5cf9ff560117ce8f7c64124e71471b4ed
GET /shared/1.0/content/images/backgrounds/2_11d9e3bcdfede9ce5ce5ace2d129f1c4.svg HTTP/1.1
Host: aadcdn.msauth.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pub-9cba10d444bf44eea4f1504b0b173c03.r2.dev/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 24 Apr 2024 04:37:58 GMT
content-type: image/svg+xml
content-length: 673
cache-control: public, max-age=31536000
content-encoding: gzip
last-modified: Wed, 24 May 2023 10:11:46 GMT
etag: 0x8DB5C3F47E260FD
x-ms-request-id: 9cd21688-601e-0034-397d-926887000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
access-control-allow-origin: *
x-azure-ref: 20240424T043758Z-16c4f695cc58qx282nqc5nyr8g00000006xg000000003833
x-fd-int-roxy-purgeid: 0
x-cache: TCP_HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| pub-9cba10d444bf44eea4f1504b0b173c03.r2.dev/XSD34qjE4Myn%2526m%253Dilk.p0ypaGTJbLL%2526b%253DO4ECJ6p0xWACZ682uuprWTDWQLedDqjE4Myn%2526m%253Dilk.p0ypaGTJbLL%2526b%253DO4ECJ6p0xWACZ682DWQLedDqjE4Myn%2526m%253Dilk.p0ypaGTJbLL%2526b%253DO4ECJ6p0xWACZ682.html | 104.18.2.35 | 200 OK | 2.9 kB |
URL User Request GET HTTP/1.1pub-9cba10d444bf44eea4f1504b0b173c03.r2.dev/XSD34qjE4Myn%2526m%253Dilk.p0ypaGTJbLL%2526b%253DO4ECJ6p0xWACZ682uuprWTDWQLedDqjE4Myn%2526m%253Dilk.p0ypaGTJbLL%2526b%253DO4ECJ6p0xWACZ682DWQLedDqjE4Myn%2526m%253Dilk.p0ypaGTJbLL%2526b%253DO4ECJ6p0xWACZ682.html IP104.18.2.35:443
CertificateIssuerLet's Encrypt Subject*.r2.dev Fingerprint48:74:F0:98:E0:A1:57:3E:86:18:BF:B3:DC:C9:7A:5B:53:50:FE:E0 ValidityFri, 05 Apr 2024 15:25:24 GMT - Thu, 04 Jul 2024 15:25:23 GMT
File typeHTML document, ASCII text, with very long lines (2946), with no line terminators Hashf402060fdd904ca4398f09dbe7e85b33 65a6738be48b8f0be7623f88df7c77e3bc5dd40c 996807760dd5b7ead09d5cbb83ccffbcb83a063a9d5daf0b7ad545978cfbe1b7
GET /XSD34qjE4Myn%2526m%253Dilk.p0ypaGTJbLL%2526b%253DO4ECJ6p0xWACZ682uuprWTDWQLedDqjE4Myn%2526m%253Dilk.p0ypaGTJbLL%2526b%253DO4ECJ6p0xWACZ682DWQLedDqjE4Myn%2526m%253Dilk.p0ypaGTJbLL%2526b%253DO4ECJ6p0xWACZ682.html HTTP/1.1
Host: pub-9cba10d444bf44eea4f1504b0b173c03.r2.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 24 Apr 2024 04:37:56 GMT
Content-Type: text/html
Content-Length: 2875
Connection: keep-alive
Accept-Ranges: bytes
ETag: "6b3f94f2aee2fdf9246b0b2f97d5ae7d"
Last-Modified: Tue, 23 Apr 2024 18:03:24 GMT
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 879366a51f1a7131-OSL
|
|
| twomancake.com/socket.io/?EIO=4&transport=websocket&sid=ONU6DQHCCDoIYF-bABiy | 172.67.130.24 | 101 Switching Protocols | 0 B |
URL GET HTTP/1.1twomancake.com/socket.io/?EIO=4&transport=websocket&sid=ONU6DQHCCDoIYF-bABiy IP172.67.130.24:443
Requested byhttps://pub-9cba10d444bf44eea4f1504b0b173c03.r2.dev/XSD34qjE4Myn%2526m%253Dilk.p0ypaGTJbLL%2526b%253DO4ECJ6p0xWACZ682uuprWTDWQLedDqjE4Myn%2526m%253Dilk.p0ypaGTJbLL%2526b%253DO4ECJ6p0xWACZ682DWQLedDqjE4Myn%2526m%253Dilk.p0ypaGTJbLL%2526b%253DO4ECJ6p0xWACZ682.html#cskbxlogistics@schneider.com CertificateIssuerLet's Encrypt Subjecttwomancake.com FingerprintAF:27:60:8A:CD:A9:93:0A:E2:7C:B9:F0:B3:9B:B4:E4:C1:DD:3D:1C ValidityTue, 09 Apr 2024 04:59:30 GMT - Mon, 08 Jul 2024 04:59:29 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /socket.io/?EIO=4&transport=websocket&sid=ONU6DQHCCDoIYF-bABiy HTTP/1.1
Host: twomancake.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: https://pub-9cba10d444bf44eea4f1504b0b173c03.r2.dev
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: rdjIb3Zbhh/BUsb6PO3+6Q==
DNT: 1
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Date: Wed, 24 Apr 2024 04:38:04 GMT
Connection: upgrade
Upgrade: websocket
Sec-WebSocket-Accept: 6YZ6ubsI43a3Qui6DgfmpLlAizE=
Access-Control-Allow-Origin: *
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Ltx9bnHa3N3lMnIQxlsvp7bA%2BJiU0t2iyzf12sSfyY84iWW3VxfAJ4ALd6JFePl3p2je0fZO%2Fzm4Uur%2FSSVg7ZJn3srGEaVhOVXy58zCMuOXTLzK%2B5eq2nuFYoiOLetBIg%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 879366d19c4c0b4d-OSL
alt-svc: h3=":443"; ma=86400
|
|
| twomancake.com/socket.io/?EIO=4&transport=websocket&sid=OuezeK2pO0Al7BfQABiz | 104.21.7.98 | 101 Switching Protocols | 0 B |
URL GET HTTP/1.1twomancake.com/socket.io/?EIO=4&transport=websocket&sid=OuezeK2pO0Al7BfQABiz IP104.21.7.98:443
Requested byhttps://pub-9cba10d444bf44eea4f1504b0b173c03.r2.dev/XSD34qjE4Myn%2526m%253Dilk.p0ypaGTJbLL%2526b%253DO4ECJ6p0xWACZ682uuprWTDWQLedDqjE4Myn%2526m%253Dilk.p0ypaGTJbLL%2526b%253DO4ECJ6p0xWACZ682DWQLedDqjE4Myn%2526m%253Dilk.p0ypaGTJbLL%2526b%253DO4ECJ6p0xWACZ682.html#cskbxlogistics@schneider.com CertificateIssuerLet's Encrypt Subjecttwomancake.com FingerprintAF:27:60:8A:CD:A9:93:0A:E2:7C:B9:F0:B3:9B:B4:E4:C1:DD:3D:1C ValidityTue, 09 Apr 2024 04:59:30 GMT - Mon, 08 Jul 2024 04:59:29 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /socket.io/?EIO=4&transport=websocket&sid=OuezeK2pO0Al7BfQABiz HTTP/1.1
Host: twomancake.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: https://pub-9cba10d444bf44eea4f1504b0b173c03.r2.dev
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: eJhVH/iIBtIt0cWdv74qnA==
DNT: 1
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Date: Wed, 24 Apr 2024 04:38:04 GMT
Connection: upgrade
Upgrade: websocket
Sec-WebSocket-Accept: Ax9nUvdiaDsvHtlywh2s3sPqYtY=
Access-Control-Allow-Origin: *
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=scTaqfrueVYvyeZRXFMF44FJa67wLqAKPIue7%2Ftsy0cwVwdEhSrCRZM92bfsIapAGVWOCvDZsA9NAUV%2BX%2ByUvMw1XGCEQ9VB5XQXZUR387sTHLdZRLPZqrpZUfUDkiegww%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 879366d38d7e56ba-OSL
alt-svc: h3=":443"; ma=86400
|
|