| pub-ad9c0fb8162c4b9fa96435e086e0ab27.r2.dev/edocsign.html |  104.18.3.35 | 200 OK | 544 B |
URL User Request GET HTTP/1.1pub-ad9c0fb8162c4b9fa96435e086e0ab27.r2.dev/edocsign.html IP104.18.3.35:443
CertificateIssuerLet's Encrypt Subject*.r2.dev Fingerprint48:74:F0:98:E0:A1:57:3E:86:18:BF:B3:DC:C9:7A:5B:53:50:FE:E0 ValidityFri, 05 Apr 2024 15:25:24 GMT - Thu, 04 Jul 2024 15:25:23 GMT
File typeHTML document, ASCII text, with CRLF line terminators Hash5a5ee08cb43fd5dc4c5d130a2fa4b1a8 a6e7e5ac4a7d9b1741505832c566d1d3a8ca4fa0 b88bac66e841b896e0624923cca1420ae48a411544d97a751bfc80355213d915
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Microsoft | | OpenPhish | phishing | Microsoft OneDrive | | PhishTank | phishing | Other | | Quad9 DNS | malicious | Sinkholed |
GET /edocsign.html HTTP/1.1
Host: pub-ad9c0fb8162c4b9fa96435e086e0ab27.r2.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 17 Apr 2024 16:59:04 GMT
Content-Type: text/html
Content-Length: 544
Connection: keep-alive
Accept-Ranges: bytes
ETag: "5a5ee08cb43fd5dc4c5d130a2fa4b1a8"
Last-Modified: Wed, 28 Feb 2024 15:07:34 GMT
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 875df6a579c49311-CPH
|
|
| digifileshop.ir/clod/jquery.js |  88.135.68.69 | 200 OK | 82 kB |
URL GET HTTP/2digifileshop.ir/clod/jquery.js IP88.135.68.69:443 ASN#212296 Dade Pardazan Fahim Shahin Shahr (Ltd)
Requested byhttps://pub-ad9c0fb8162c4b9fa96435e086e0ab27.r2.dev/edocsign.html CertificateIssuerLet's Encrypt Subjectmail.app.auth-doc.sign-certific.ssa.digifileshop.ir Fingerprint02:7C:F8:F4:F3:68:C9:A1:67:79:14:F5:2C:29:86:8A:85:3B:5F:0B ValidityWed, 13 Mar 2024 17:45:54 GMT - Tue, 11 Jun 2024 17:45:53 GMT
File typeJavaScript source, ASCII text, with CRLF line terminators Hash24fa855a7678b1938f16235881e3e80b 67b6c9946134456d67c07765d230130d8679f8c6 f2a84bc4f4cb8ae04162f42f1f3ebed1e05725d9b5bf666b885356c7698a071f
GET /clod/jquery.js HTTP/1.1
Host: digifileshop.ir
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pub-ad9c0fb8162c4b9fa96435e086e0ab27.r2.dev/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Wed, 24 Apr 2024 16:59:05 GMT
content-type: application/javascript
last-modified: Wed, 28 Feb 2024 14:37:40 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 81458
date: Wed, 17 Apr 2024 16:59:05 GMT
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2
|
|
| digifileshop.ir/clod/basic.js | 88.135.68.69 | 200 OK | 7.3 kB |
URL GET HTTP/2digifileshop.ir/clod/basic.js IP88.135.68.69:443 ASN#212296 Dade Pardazan Fahim Shahin Shahr (Ltd)
Requested byhttps://pub-ad9c0fb8162c4b9fa96435e086e0ab27.r2.dev/edocsign.html CertificateIssuerLet's Encrypt Subjectmail.app.auth-doc.sign-certific.ssa.digifileshop.ir Fingerprint02:7C:F8:F4:F3:68:C9:A1:67:79:14:F5:2C:29:86:8A:85:3B:5F:0B ValidityWed, 13 Mar 2024 17:45:54 GMT - Tue, 11 Jun 2024 17:45:53 GMT
File typeJavaScript source, ASCII text, with very long lines (23140), with CRLF line terminators Hashb641322daa6eff7695b693fa10d6551f 33d9f1ff9913f05a5ea230af810f94309f73f5a1 8182f9039aaa30bcc32a5c74515e21b7e90c628ac177ce9dfda00525ce2117cf
GET /clod/basic.js HTTP/1.1
Host: digifileshop.ir
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pub-ad9c0fb8162c4b9fa96435e086e0ab27.r2.dev/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Wed, 24 Apr 2024 16:59:05 GMT
content-type: application/javascript
last-modified: Wed, 28 Feb 2024 14:37:27 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 7256
date: Wed, 17 Apr 2024 16:59:05 GMT
X-Firefox-Spdy: h2
|
|
| code.jquery.com/jquery-3.1.1.min.js |  151.101.194.137 | 200 OK | 30 kB |
URL GET HTTP/2code.jquery.com/jquery-3.1.1.min.js IP151.101.194.137:443
Requested byhttps://pub-ad9c0fb8162c4b9fa96435e086e0ab27.r2.dev/edocsign.html CertificateIssuerSectigo Limited Subject*.jquery.com FingerprintD2:19:0A:AD:CE:BB:9C:61:17:5D:29:4B:A2:54:E8:C6:91:B8:F9:8D ValidityTue, 11 Jul 2023 00:00:00 GMT - Sun, 14 Jul 2024 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (32030) Hashe071abda8fe61194711cfc2ab99fe104 f647a6d37dc4ca055ced3cf64bbc1f490070acba 85556761a8800d14ced8fcd41a6b8b26bf012d44a318866c0d81a62092efd9bf
GET /jquery-3.1.1.min.js HTTP/1.1
Host: code.jquery.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Fri, 18 Oct 1991 12:00:00 GMT
etag: W/"28feccc0-152b5"
cache-control: public, max-age=31536000, stale-while-revalidate=604800
access-control-allow-origin: *
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Wed, 17 Apr 2024 16:59:05 GMT
age: 18572546
x-served-by: cache-lga21947-LGA, cache-hel1410029-HEL
x-cache: HIT, HIT
x-cache-hits: 118, 104293
x-timer: S1713373146.528182,VS0,VE0
vary: Accept-Encoding
content-length: 30070
X-Firefox-Spdy: h2
|
|
| code.jquery.com/jquery-3.2.1.slim.min.js | 151.101.194.137 | 200 OK | 24 kB |
URL GET HTTP/2code.jquery.com/jquery-3.2.1.slim.min.js IP151.101.194.137:443
Requested byhttps://pub-ad9c0fb8162c4b9fa96435e086e0ab27.r2.dev/edocsign.html CertificateIssuerSectigo Limited Subject*.jquery.com FingerprintD2:19:0A:AD:CE:BB:9C:61:17:5D:29:4B:A2:54:E8:C6:91:B8:F9:8D ValidityTue, 11 Jul 2023 00:00:00 GMT - Sun, 14 Jul 2024 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (32012) Hash5f48fc77cac90c4778fa24ec9c57f37d 9e89d1515bc4c371b86f4cb1002fd8e377c1829f 9365920887b11b33a3dc4ba28a0f93951f200341263e3b9cefd384798e4be398
GET /jquery-3.2.1.slim.min.js HTTP/1.1
Host: code.jquery.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://pub-ad9c0fb8162c4b9fa96435e086e0ab27.r2.dev
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Fri, 18 Oct 1991 12:00:00 GMT
etag: W/"28feccc0-10fdd"
cache-control: public, max-age=31536000, stale-while-revalidate=604800
access-control-allow-origin: *
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Wed, 17 Apr 2024 16:59:05 GMT
age: 843279
x-served-by: cache-lga21963-LGA, cache-hel1410028-HEL
x-cache: HIT, HIT
x-cache-hits: 40, 89874
x-timer: S1713373146.572122,VS0,VE0
vary: Accept-Encoding
content-length: 23856
X-Firefox-Spdy: h2
|
|
| cdnjs.cloudflare.com/ajax/libs/popper.js/1.12.9/umd/popper.min.js | 104.17.24.14 | 200 OK | 6.2 kB |
URL GET HTTP/2cdnjs.cloudflare.com/ajax/libs/popper.js/1.12.9/umd/popper.min.js IP104.17.24.14:443
Requested byhttps://pub-ad9c0fb8162c4b9fa96435e086e0ab27.r2.dev/edocsign.html CertificateIssuerCloudflare, Inc. Subjectsni.cloudflaressl.com Fingerprint7A:EA:B9:09:71:70:6C:87:C9:D3:82:74:8A:7B:B4:60:E5:40:2D:8D ValidityMon, 03 Jul 2023 00:00:00 GMT - Tue, 02 Jul 2024 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (19015) Hash70d3fda195602fe8b75e0097eed74dde c3b977aa4b8dfb69d651e07015031d385ded964b a52f7aa54d7bcaafa056ee0a050262dfc5694ae28dee8b4cac3429af37ff0d66
GET /ajax/libs/popper.js/1.12.9/umd/popper.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://pub-ad9c0fb8162c4b9fa96435e086e0ab27.r2.dev
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 17 Apr 2024 16:59:05 GMT
content-type: application/javascript; charset=utf-8
content-length: 6157
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03fa9-4af4"
last-modified: Mon, 04 May 2020 16:15:37 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 586907
expires: Mon, 07 Apr 2025 16:59:05 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ZEosNbpLoijiY2Npj5Sr0TKbSDlK47z3X8X1M0D8QawEC878U6DTSzndMYQzviI5gMgUg559w9jX2TeKms8mIT9CZsc6iA92vyoEmIKlAg0ZhrLEFccdbPufmVVdqqNKpudhxXf1"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 875df6afcae610b1-CPH
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| ajax.googleapis.com/ajax/libs/jquery/2.2.4/jquery.min.js | 142.250.74.170 | 200 OK | 30 kB |
URL GET HTTP/2ajax.googleapis.com/ajax/libs/jquery/2.2.4/jquery.min.js IP142.250.74.170:443
Requested byhttps://pub-ad9c0fb8162c4b9fa96435e086e0ab27.r2.dev/edocsign.html CertificateIssuerGoogle Trust Services LLC Subjectupload.video.google.com Fingerprint47:5A:64:7D:9F:47:34:07:31:91:97:F7:04:42:7A:D5:EA:AD:07:4E ValidityMon, 04 Mar 2024 07:16:44 GMT - Mon, 27 May 2024 07:16:43 GMT
File typeJavaScript source, ASCII text, with very long lines (32065) Hash2f6b11a7e914718e0290410e85366fe9 69bb69e25ca7d5ef0935317584e6153f3fd9a88c 05b85d96f41fff14d8f608dad03ab71e2c1017c2da0914d7c59291bad7a54f8e
GET /ajax/libs/jquery/2.2.4/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 30028
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 11 Apr 2024 17:38:23 GMT
expires: Fri, 11 Apr 2025 17:38:23 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
age: 516042
last-modified: Tue, 03 Mar 2020 19:15:00 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| ajax.googleapis.com/ajax/libs/jquery/2.2.4/jquery.min.js | 142.250.74.170 | 200 OK | 30 kB |
URL GET HTTP/2ajax.googleapis.com/ajax/libs/jquery/2.2.4/jquery.min.js IP142.250.74.170:443
Requested byhttps://pub-ad9c0fb8162c4b9fa96435e086e0ab27.r2.dev/edocsign.html CertificateIssuerGoogle Trust Services LLC Subjectupload.video.google.com Fingerprint47:5A:64:7D:9F:47:34:07:31:91:97:F7:04:42:7A:D5:EA:AD:07:4E ValidityMon, 04 Mar 2024 07:16:44 GMT - Mon, 27 May 2024 07:16:43 GMT
File typeJavaScript source, ASCII text, with very long lines (32065) Hash2f6b11a7e914718e0290410e85366fe9 69bb69e25ca7d5ef0935317584e6153f3fd9a88c 05b85d96f41fff14d8f608dad03ab71e2c1017c2da0914d7c59291bad7a54f8e
GET /ajax/libs/jquery/2.2.4/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 30028
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 11 Apr 2024 17:38:23 GMT
expires: Fri, 11 Apr 2025 17:38:23 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
age: 516042
last-modified: Tue, 03 Mar 2020 19:15:00 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| icon-library.com/images/one-drive-icon/one-drive-icon-28.jpg | 172.67.68.224 | 200 OK | 15 kB |
URL GET HTTP/2icon-library.com/images/one-drive-icon/one-drive-icon-28.jpg IP172.67.68.224:443
Requested byhttps://pub-ad9c0fb8162c4b9fa96435e086e0ab27.r2.dev/edocsign.html CertificateIssuerGoogle Trust Services LLC Subjecticon-library.com FingerprintA4:A9:B0:06:3C:55:29:F6:F4:F1:31:2C:16:EB:40:3D:5E:F1:B5:DD ValidityMon, 18 Mar 2024 13:36:58 GMT - Sun, 16 Jun 2024 13:36:57 GMT
File typePNG image data, 300 x 189, 8-bit/color RGBA, non-interlaced Hash038183a1bc5dc6bffad412edfe09c2e4 06594be36a2070c11bd57b8d8fee478d893b660d 047cd04c0bf47796870a485d672f90f6b4ec54203957cd520022b46130102a46
GET /images/one-drive-icon/one-drive-icon-28.jpg HTTP/1.1
Host: icon-library.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 17 Apr 2024 16:59:05 GMT
content-type: image/jpeg
content-length: 14777
cf-bgj: h2pri
last-modified: Tue, 09 Jul 2019 06:32:45 GMT
strict-transport-security: max-age=31536000;
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=f0ffLg626vbFnVvzsMpN1mvImO8PbLSlE8kDgid6r9a2KSaaNEHRiVMYpJ%2B%2FofAJ%2FbWlj8lqjRrg2%2BRIDUhA7hM7hFBjNfd8e1m2qOoi%2FVs%2FZt6SRZ%2Bjfe9xH%2BrITsttLj4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 875df6b17c3d63c8-LHR
X-Firefox-Spdy: h2
|
|
| i.imgur.com/5sLeYjL.png |  151.101.244.193 | 302 Found | 0 B |
IP151.101.244.193:443
Requested byhttps://pub-ad9c0fb8162c4b9fa96435e086e0ab27.r2.dev/edocsign.html CertificateIssuerSectigo Limited Subject*.imgur.com Fingerprint39:5B:E1:0D:4A:FC:A4:C7:F3:71:DE:C4:5C:12:69:F9:5F:58:9F:42 ValidityThu, 15 Feb 2024 00:00:00 GMT - Fri, 14 Feb 2025 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /5sLeYjL.png HTTP/1.1
Host: i.imgur.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
retry-after: 0
location: https://i.imgur.com/removed.png
accept-ranges: bytes
date: Wed, 17 Apr 2024 16:59:05 GMT
age: 0
x-served-by: cache-iad-kcgs7200120-IAD, cache-hel1410020-HEL
x-cache: HIT, MISS
x-cache-hits: 0, 0
x-timer: S1713373146.857362,VS0,VE124
strict-transport-security: max-age=300
access-control-allow-methods: GET, OPTIONS
access-control-allow-origin: *
server: cat factory 1.0
content-length: 0
X-Firefox-Spdy: h2
|
|
| maxcdn.bootstrapcdn.com/bootstrap/4.0.0/css/bootstrap.min.css | 104.18.10.207 | 200 OK | 25 kB |
URL GET HTTP/2maxcdn.bootstrapcdn.com/bootstrap/4.0.0/css/bootstrap.min.css IP104.18.10.207:443
Requested byhttps://pub-ad9c0fb8162c4b9fa96435e086e0ab27.r2.dev/edocsign.html CertificateIssuerGoogle Trust Services LLC Subjectbootstrapcdn.com Fingerprint57:B4:25:B9:9C:88:A1:A3:3D:F7:31:74:02:E4:D1:E0:0A:F5:11:63 ValidityWed, 27 Mar 2024 00:22:09 GMT - Tue, 25 Jun 2024 00:22:08 GMT
File typeASCII text, with very long lines (65325) Hash450fc463b8b1a349df717056fbb3e078 895125a4522a3b10ee7ada06ee6503587cbf95c5 2c0f3dcfe93d7e380c290fe4ab838ed8cadff1596d62697f5444be460d1f876d
GET /bootstrap/4.0.0/css/bootstrap.min.css HTTP/1.1
Host: maxcdn.bootstrapcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://pub-ad9c0fb8162c4b9fa96435e086e0ab27.r2.dev
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 17 Apr 2024 16:59:05 GMT
content-type: text/css; charset=utf-8
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: DE
vary: Accept-Encoding
access-control-allow-origin: *
cache-control: public, max-age=31919000
content-encoding: br
etag: W/"450fc463b8b1a349df717056fbb3e078"
last-modified: Mon, 25 Jan 2021 22:04:04 GMT
cdn-cachedat: 03/18/2024 12:51:41
cdn-proxyver: 1.04
cdn-requestpullcode: 200
cdn-requestpullsuccess: True
cdn-edgestorageid: 1048
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
cdn-status: 200
cdn-requestid: 13628463cd3c45393c8c07a9c7b81f8a
cdn-cache: HIT
cf-cache-status: HIT
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 875df6afcafd8f59-CPH
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| bafkreidr44uzhhqxl5fotu74yzc5nnzyt3budjd2qskq4bdrs4zr7xbc6e.ipfs.nftstorage.link/ | 172.64.146.216 | 200 OK | 18 kB |
URL GET HTTP/2bafkreidr44uzhhqxl5fotu74yzc5nnzyt3budjd2qskq4bdrs4zr7xbc6e.ipfs.nftstorage.link/ IP172.64.146.216:443
Requested byhttps://pub-ad9c0fb8162c4b9fa96435e086e0ab27.r2.dev/edocsign.html CertificateIssuerLet's Encrypt Subjectnftstorage.link Fingerprint9B:66:BA:52:EF:53:AB:A1:89:67:FE:91:A2:0B:1C:23:C3:66:CB:19 ValiditySat, 13 Apr 2024 08:26:05 GMT - Fri, 12 Jul 2024 08:26:04 GMT
File typePNG image data, 187 x 188, 8-bit/color RGBA, non-interlaced Hasha5cdadd60382e9ae6228121542eb1c2a cec15f6470d0237569e931d7d11752b41ac5d8a3 71e729939e175f4ae9d3fcc645d6b7389ec341a47a84950e047197331fdc22f1
GET / HTTP/1.1
Host: bafkreidr44uzhhqxl5fotu74yzc5nnzyt3budjd2qskq4bdrs4zr7xbc6e.ipfs.nftstorage.link
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 17 Apr 2024 16:59:06 GMT
content-type: image/png
content-length: 18147
cf-ray: 875df6b10df7abe4-CPH
access-control-allow-origin: *
cache-control: public, max-age=29030400, immutable
etag: "bafkreidr44uzhhqxl5fotu74yzc5nnzyt3budjd2qskq4bdrs4zr7xbc6e"
vary: Accept-Encoding
access-control-allow-methods: GET
access-control-expose-headers: Link
content-security-policy: default-src 'self' 'unsafe-inline' 'unsafe-eval' blob: data: https://*.w3s.link https://*.nftstorage.link https://*.dweb.link https://ipfs.io/ipfs/ https://*.githubusercontent.com https://polygon-rpc.com https://rpc.testnet.fantom.network ; form-action 'self'; navigate-to 'self'; connect-src 'self' blob: data: https://*.w3s.link https://*.nftstorage.link https://*.dweb.link https://ipfs.io/ipfs/ https://*.githubusercontent.com https://polygon-rpc.com https://rpc.testnet.fantom.network ; report-to csp-endpoint ; report-uri https://csp-report-to.web3.storage
reporting-endpoints: csp-endpoint="https://csp-report-to.web3.storage"
server-timing: request;dur=525
x-dotstorage-anchor: 07af72e9fce3b8553b445b6c76df621a4da7e7dc4a15b54cb184fe4474025464
x-dotstorage-resolution-id: https://freeway.dag.haus
x-dotstorage-resolution-layer: dotstorage-race
x-freeway-version: 2.15.0
server: cloudflare
X-Firefox-Spdy: h2
|
|
| bafkreifk2jhnl43decleyuk3tce4wkkdxp4dbnahaomzvu4xn7hic5xfkq.ipfs.nftstorage.link/ | 172.64.146.216 | 200 OK | 18 kB |
URL GET HTTP/2bafkreifk2jhnl43decleyuk3tce4wkkdxp4dbnahaomzvu4xn7hic5xfkq.ipfs.nftstorage.link/ IP172.64.146.216:443
Requested byhttps://pub-ad9c0fb8162c4b9fa96435e086e0ab27.r2.dev/edocsign.html CertificateIssuerLet's Encrypt Subjectnftstorage.link Fingerprint9B:66:BA:52:EF:53:AB:A1:89:67:FE:91:A2:0B:1C:23:C3:66:CB:19 ValiditySat, 13 Apr 2024 08:26:05 GMT - Fri, 12 Jul 2024 08:26:04 GMT
File typePNG image data, 151 x 151, 8-bit/color RGBA, non-interlaced Hash4458cd0a6df7deabdff0b99bd5905ec9 45a8b436d07d7ed7973b87a1c393d6973afe6fb5 aad24ed5f36320964c515b9889cb2943bbf830b40703999ad3976fce8176e554
GET / HTTP/1.1
Host: bafkreifk2jhnl43decleyuk3tce4wkkdxp4dbnahaomzvu4xn7hic5xfkq.ipfs.nftstorage.link
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 17 Apr 2024 16:59:06 GMT
content-type: image/png
content-length: 17931
cf-ray: 875df6b0fde9abe4-CPH
access-control-allow-origin: *
cache-control: public, max-age=29030400, immutable
etag: "bafkreifk2jhnl43decleyuk3tce4wkkdxp4dbnahaomzvu4xn7hic5xfkq"
vary: Accept-Encoding
access-control-allow-methods: GET
access-control-expose-headers: Link
content-security-policy: default-src 'self' 'unsafe-inline' 'unsafe-eval' blob: data: https://*.w3s.link https://*.nftstorage.link https://*.dweb.link https://ipfs.io/ipfs/ https://*.githubusercontent.com https://polygon-rpc.com https://rpc.testnet.fantom.network ; form-action 'self'; navigate-to 'self'; connect-src 'self' blob: data: https://*.w3s.link https://*.nftstorage.link https://*.dweb.link https://ipfs.io/ipfs/ https://*.githubusercontent.com https://polygon-rpc.com https://rpc.testnet.fantom.network ; report-to csp-endpoint ; report-uri https://csp-report-to.web3.storage
reporting-endpoints: csp-endpoint="https://csp-report-to.web3.storage"
server-timing: request;dur=544
x-dotstorage-anchor: 059f090883c2301819046f7c00b7d118fbaa465622c32a511c40c5f4390c6caf
x-dotstorage-resolution-id: https://freeway.dag.haus
x-dotstorage-resolution-layer: dotstorage-race
x-freeway-version: 2.15.0
server: cloudflare
X-Firefox-Spdy: h2
|
|
| fonts.googleapis.com/css?family=SegeoUI&display=swap | 142.250.74.106 | 400 Bad Request | 180 kB |
URL GET HTTP/2fonts.googleapis.com/css?family=SegeoUI&display=swap IP142.250.74.106:443
Requested byhttps://pub-ad9c0fb8162c4b9fa96435e086e0ab27.r2.dev/edocsign.html CertificateIssuerGoogle Trust Services LLC Subjectupload.video.google.com Fingerprint47:5A:64:7D:9F:47:34:07:31:91:97:F7:04:42:7A:D5:EA:AD:07:4E ValidityMon, 04 Mar 2024 07:16:44 GMT - Mon, 27 May 2024 07:16:43 GMT
File typegzip compressed data, max compression Size180 kB (179616 bytes) Hash40027e880f4dc7c0d0a00f99796ce20b e0f89c5abe7523811b95628e501fb71721d1b9fd 2a20beca22f4ad7116bc2b51d8c3b47be7f76a6519f863085929cef9991f5cc8
GET /css?family=SegeoUI&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 400 Bad Request
content-type: text/html; charset=utf-8
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Wed, 17 Apr 2024 16:59:05 GMT
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| bafkreihyvdhu6gjisoghs3rpgx4megynkegu4pyw4alo5a6r6idpr266cq.ipfs.nftstorage.link/ | 172.64.146.216 | 200 OK | 26 kB |
URL GET HTTP/2bafkreihyvdhu6gjisoghs3rpgx4megynkegu4pyw4alo5a6r6idpr266cq.ipfs.nftstorage.link/ IP172.64.146.216:443
Requested byhttps://pub-ad9c0fb8162c4b9fa96435e086e0ab27.r2.dev/edocsign.html CertificateIssuerLet's Encrypt Subjectnftstorage.link Fingerprint9B:66:BA:52:EF:53:AB:A1:89:67:FE:91:A2:0B:1C:23:C3:66:CB:19 ValiditySat, 13 Apr 2024 08:26:05 GMT - Fri, 12 Jul 2024 08:26:04 GMT
File typePNG image data, 253 x 218, 8-bit/color RGBA, non-interlaced Hashec9cbc1048239b3927ad0276fc983019 17c27c038644bdb141381b606c7c94a177c07326 f8a8cf4f1928938c796e2f35f8c21b0d510d4e3f16e016ee83d1f206f8ebde14
GET / HTTP/1.1
Host: bafkreihyvdhu6gjisoghs3rpgx4megynkegu4pyw4alo5a6r6idpr266cq.ipfs.nftstorage.link
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 17 Apr 2024 16:59:06 GMT
content-type: image/png
content-length: 26456
cf-ray: 875df6b0fdeeabe4-CPH
access-control-allow-origin: *
cache-control: public, max-age=29030400, immutable
etag: "bafkreihyvdhu6gjisoghs3rpgx4megynkegu4pyw4alo5a6r6idpr266cq"
vary: Accept-Encoding
access-control-allow-methods: GET
access-control-expose-headers: Link
content-security-policy: default-src 'self' 'unsafe-inline' 'unsafe-eval' blob: data: https://*.w3s.link https://*.nftstorage.link https://*.dweb.link https://ipfs.io/ipfs/ https://*.githubusercontent.com https://polygon-rpc.com https://rpc.testnet.fantom.network ; form-action 'self'; navigate-to 'self'; connect-src 'self' blob: data: https://*.w3s.link https://*.nftstorage.link https://*.dweb.link https://ipfs.io/ipfs/ https://*.githubusercontent.com https://polygon-rpc.com https://rpc.testnet.fantom.network ; report-to csp-endpoint ; report-uri https://csp-report-to.web3.storage
reporting-endpoints: csp-endpoint="https://csp-report-to.web3.storage"
server-timing: request;dur=703
x-dotstorage-anchor: 0ac972454f6e04b756562ee1731f63a967a74b6ac67e35f061fa918ff9951f75
x-dotstorage-resolution-id: https://freeway.dag.haus
x-dotstorage-resolution-layer: dotstorage-race
x-freeway-version: 2.15.0
server: cloudflare
X-Firefox-Spdy: h2
|
|
| bafkreicxrgcgc4jkmoordg67rc3riwiz3tejk3d2e4os4sqqqszj5lthqu.ipfs.nftstorage.link/ | 172.64.146.216 | 200 OK | 771 B |
URL GET HTTP/2bafkreicxrgcgc4jkmoordg67rc3riwiz3tejk3d2e4os4sqqqszj5lthqu.ipfs.nftstorage.link/ IP172.64.146.216:443
Requested byhttps://pub-ad9c0fb8162c4b9fa96435e086e0ab27.r2.dev/edocsign.html CertificateIssuerLet's Encrypt Subjectnftstorage.link Fingerprint9B:66:BA:52:EF:53:AB:A1:89:67:FE:91:A2:0B:1C:23:C3:66:CB:19 ValiditySat, 13 Apr 2024 08:26:05 GMT - Fri, 12 Jul 2024 08:26:04 GMT
File typePNG image data, 26 x 26, 8-bit/color RGBA, non-interlaced Hashc3fc46c5799c76f9107504028f39190f 519096ad3f03410cf9ce3c9b9fcca6b439d97b23 57898461712a639d119bdf88b7145919dcc8956c7a271d2e4a1084b29eae6785
GET / HTTP/1.1
Host: bafkreicxrgcgc4jkmoordg67rc3riwiz3tejk3d2e4os4sqqqszj5lthqu.ipfs.nftstorage.link
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 17 Apr 2024 16:59:06 GMT
content-type: image/png
content-length: 771
cf-ray: 875df6b0fdeaabe4-CPH
access-control-allow-origin: *
cache-control: public, max-age=29030400, immutable
etag: "bafkreicxrgcgc4jkmoordg67rc3riwiz3tejk3d2e4os4sqqqszj5lthqu"
vary: Accept-Encoding
access-control-allow-methods: GET
access-control-expose-headers: Link
content-security-policy: default-src 'self' 'unsafe-inline' 'unsafe-eval' blob: data: https://*.w3s.link https://*.nftstorage.link https://*.dweb.link https://ipfs.io/ipfs/ https://*.githubusercontent.com https://polygon-rpc.com https://rpc.testnet.fantom.network ; form-action 'self'; navigate-to 'self'; connect-src 'self' blob: data: https://*.w3s.link https://*.nftstorage.link https://*.dweb.link https://ipfs.io/ipfs/ https://*.githubusercontent.com https://polygon-rpc.com https://rpc.testnet.fantom.network ; report-to csp-endpoint ; report-uri https://csp-report-to.web3.storage
reporting-endpoints: csp-endpoint="https://csp-report-to.web3.storage"
server-timing: request;dur=763
x-dotstorage-anchor: 74d28545c43e7947282ea44fb2b69ecbe1f6b6f1ca8e0155204678776073ab80
x-dotstorage-resolution-id: https://freeway.dag.haus
x-dotstorage-resolution-layer: dotstorage-race
x-freeway-version: 2.15.0
server: cloudflare
X-Firefox-Spdy: h2
|
|
| ka-f.fontawesome.com/releases/v5.15.4/css/free-v4-shims.min.css?token=585b051251 | 104.21.26.223 | 200 OK | 27 kB |
URL GET HTTP/2ka-f.fontawesome.com/releases/v5.15.4/css/free-v4-shims.min.css?token=585b051251 IP104.21.26.223:443
Requested byhttps://pub-ad9c0fb8162c4b9fa96435e086e0ab27.r2.dev/edocsign.html CertificateIssuerGoogle Trust Services LLC Subjectka-f.fontawesome.com Fingerprint8D:43:33:42:48:C0:F5:34:71:EC:49:69:9C:62:01:4A:6F:41:11:98 ValidityTue, 05 Mar 2024 09:23:28 GMT - Mon, 03 Jun 2024 09:23:27 GMT
File typeASCII text, with very long lines (26500) Hash76f34b71fc9fb641507ff6a822cc07f5 73ed2f8f21cd40fb496e61306acbb5849d4dbff4 6dea47458a4cd7cd7312cc780a53c62e0c8b3ccc8d0b13c1ac0ea6e3dfcecea8
GET /releases/v5.15.4/css/free-v4-shims.min.css?token=585b051251 HTTP/1.1
Host: ka-f.fontawesome.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pub-ad9c0fb8162c4b9fa96435e086e0ab27.r2.dev/
Origin: https://pub-ad9c0fb8162c4b9fa96435e086e0ab27.r2.dev
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 17 Apr 2024 16:59:06 GMT
content-type: text/css
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-max-age: 3000
last-modified: Wed, 04 Aug 2021 18:53:09 GMT
etag: W/"76f34b71fc9fb641507ff6a822cc07f5"
cache-control: max-age=31556926
access-control-allow-headers: fa-kit-token
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 f02d12ca65f35faca412663f5188aecc.cloudfront.net (CloudFront)
x-amz-cf-pop: CPH50-C2
x-amz-cf-id: tfArl_X2-1OD98IforHUDbNUh0so0fEMez3S36V00oUua-IiUVHPsQ==
age: 30116
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=KyblLXaJMJtPiTZ%2FIakUSW11%2F6AyWkK9CGawVcIua9IR2REdltkWLtlxlYXeAOzwiarbRGpGWPlHuIwRuX00jlvh4CBC8meGsgDARYlatmUoKE4FXusIYUjxGoO8f9OuR7CYKTPh8Q%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 875df6b25986be42-CPH
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| pub-ad9c0fb8162c4b9fa96435e086e0ab27.r2.dev/favicon.ico | 0.0.0.0 | | 0 B |
URL GET pub-ad9c0fb8162c4b9fa96435e086e0ab27.r2.dev/favicon.ico IP0.0.0.0:0
Requested byhttps://pub-ad9c0fb8162c4b9fa96435e086e0ab27.r2.dev/edocsign.html CertificateIssuerLet's Encrypt Subject*.r2.dev Fingerprint48:74:F0:98:E0:A1:57:3E:86:18:BF:B3:DC:C9:7A:5B:53:50:FE:E0 ValidityFri, 05 Apr 2024 15:25:24 GMT - Thu, 04 Jul 2024 15:25:23 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Microsoft | | Quad9 DNS | malicious | Sinkholed |
GET /favicon.ico HTTP/1.1
Host: pub-ad9c0fb8162c4b9fa96435e086e0ab27.r2.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pub-ad9c0fb8162c4b9fa96435e086e0ab27.r2.dev/edocsign.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
|
|
| kit.fontawesome.com/585b051251.js | 172.64.147.188 | 200 OK | 12 kB |
URL GET HTTP/2kit.fontawesome.com/585b051251.js IP172.64.147.188:443
Requested byhttps://pub-ad9c0fb8162c4b9fa96435e086e0ab27.r2.dev/edocsign.html CertificateIssuerDigiCert Inc Subject*.fontawesome.com Fingerprint93:F9:69:8C:73:B0:08:60:65:F3:39:41:39:66:D3:2B:78:3A:6E:3D ValidityMon, 04 Dec 2023 00:00:00 GMT - Fri, 03 Jan 2025 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (11461) Hash55d343a40c7166a79fd314f13cbb2e93 96904a849c32ca220e0aaa2ae3e81cf2b5cdf764 a1f75d6278713a84a8f28a392c77ca8a6a7c32bf14314d4a34a6ce2f06cfdf7a
GET /585b051251.js HTTP/1.1
Host: kit.fontawesome.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://pub-ad9c0fb8162c4b9fa96435e086e0ab27.r2.dev
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 17 Apr 2024 16:59:05 GMT
content-type: text/javascript
access-control-allow-headers: accept, accept-langauge, content-language, content-type, fa-kit-token
access-control-allow-methods: GET, OPTIONS
access-control-allow-origin: *
access-control-max-age: 3000
cache-control: max-age=60, public, stale-while-revalidate=30
vary: origin, accept-encoding, access-control-request-headers, access-control-request-method
x-request-id: F8cD1TWNdVH75Olc3eBB
cf-cache-status: REVALIDATED
server: cloudflare
cf-ray: 875df6afcf4492c1-CPH
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| maxcdn.bootstrapcdn.com/bootstrap/4.0.0/js/bootstrap.min.js | 104.18.10.207 | 200 OK | 49 kB |
URL GET HTTP/2maxcdn.bootstrapcdn.com/bootstrap/4.0.0/js/bootstrap.min.js IP104.18.10.207:443
Requested byhttps://pub-ad9c0fb8162c4b9fa96435e086e0ab27.r2.dev/edocsign.html CertificateIssuerGoogle Trust Services LLC Subjectbootstrapcdn.com Fingerprint57:B4:25:B9:9C:88:A1:A3:3D:F7:31:74:02:E4:D1:E0:0A:F5:11:63 ValidityWed, 27 Mar 2024 00:22:09 GMT - Tue, 25 Jun 2024 00:22:08 GMT
File typeJavaScript source, ASCII text, with very long lines (48664) Hash14d449eb8876fa55e1ef3c2cc52b0c17 a9545831803b1359cfeed47e3b4d6bae68e40e99 e7ed36ceee5450b4243bbc35188afabdfb4280c7c57597001de0ed167299b01b
GET /bootstrap/4.0.0/js/bootstrap.min.js HTTP/1.1
Host: maxcdn.bootstrapcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://pub-ad9c0fb8162c4b9fa96435e086e0ab27.r2.dev
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 17 Apr 2024 16:59:05 GMT
content-type: application/javascript; charset=utf-8
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: DE
vary: Accept-Encoding
access-control-allow-origin: *
cache-control: public, max-age=31919000
content-encoding: br
etag: W/"14d449eb8876fa55e1ef3c2cc52b0c17"
last-modified: Mon, 25 Jan 2021 22:04:04 GMT
cdn-cachedat: 03/18/2024 12:46:36
cdn-proxyver: 1.04
cdn-requestpullcode: 200
cdn-requestpullsuccess: True
cdn-edgestorageid: 1048
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
cdn-status: 200
cdn-requestid: 89a91712876b560857245aa89e3f059a
cdn-cache: HIT
cf-cache-status: HIT
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 875df6afaab88f59-CPH
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| bafkreidltp6ockde5z54hk3a46lifxrkoapwjzmrsxszgdv3tiogpirej4.ipfs.nftstorage.link/ | 172.64.146.216 | 200 OK | 179 kB |
URL GET HTTP/2bafkreidltp6ockde5z54hk3a46lifxrkoapwjzmrsxszgdv3tiogpirej4.ipfs.nftstorage.link/ IP172.64.146.216:443
Requested byhttps://pub-ad9c0fb8162c4b9fa96435e086e0ab27.r2.dev/edocsign.html CertificateIssuerLet's Encrypt Subjectnftstorage.link Fingerprint9B:66:BA:52:EF:53:AB:A1:89:67:FE:91:A2:0B:1C:23:C3:66:CB:19 ValiditySat, 13 Apr 2024 08:26:05 GMT - Fri, 12 Jul 2024 08:26:04 GMT
File typePNG image data, 1999 x 1093, 8-bit colormap, non-interlaced Size179 kB (178845 bytes) Hash49e24f572401a88d22940723d25fb803 7cc9312c020f594ab640a012f0cbd363d7761301 6b9bfce12864ee7bc3ab60e79682de2a701f64e59195e5930ebb9a1c67a2244f
GET / HTTP/1.1
Host: bafkreidltp6ockde5z54hk3a46lifxrkoapwjzmrsxszgdv3tiogpirej4.ipfs.nftstorage.link
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 17 Apr 2024 16:59:06 GMT
content-type: image/png
content-length: 178845
cf-ray: 875df6b1df3fabe4-CPH
access-control-allow-origin: *
cache-control: public, max-age=29030400, immutable
etag: "bafkreidltp6ockde5z54hk3a46lifxrkoapwjzmrsxszgdv3tiogpirej4"
vary: Accept-Encoding
access-control-allow-methods: GET
access-control-expose-headers: Link
content-security-policy: default-src 'self' 'unsafe-inline' 'unsafe-eval' blob: data: https://*.w3s.link https://*.nftstorage.link https://*.dweb.link https://ipfs.io/ipfs/ https://*.githubusercontent.com https://polygon-rpc.com https://rpc.testnet.fantom.network ; form-action 'self'; navigate-to 'self'; connect-src 'self' blob: data: https://*.w3s.link https://*.nftstorage.link https://*.dweb.link https://ipfs.io/ipfs/ https://*.githubusercontent.com https://polygon-rpc.com https://rpc.testnet.fantom.network ; report-to csp-endpoint ; report-uri https://csp-report-to.web3.storage
reporting-endpoints: csp-endpoint="https://csp-report-to.web3.storage"
server-timing: request;dur=578
x-dotstorage-anchor: 43de2eb21f65adcfb5f786b3a5e27a79d98bbb9b73849fc52eb2468e6e65870c
x-dotstorage-resolution-id: https://freeway.dag.haus
x-dotstorage-resolution-layer: dotstorage-race
x-freeway-version: 2.15.0
server: cloudflare
X-Firefox-Spdy: h2
|
|
| bafkreibo6bopl3uphffghgihpwi6ckxd5v7xemrtmmelzqcr73fhfuwxxa.ipfs.nftstorage.link/ | 0.0.0.0 | | 0 B |
URL GET bafkreibo6bopl3uphffghgihpwi6ckxd5v7xemrtmmelzqcr73fhfuwxxa.ipfs.nftstorage.link/ IP0.0.0.0:0
Requested byhttps://pub-ad9c0fb8162c4b9fa96435e086e0ab27.r2.dev/edocsign.html CertificateIssuerLet's Encrypt Subjectnftstorage.link Fingerprint9B:66:BA:52:EF:53:AB:A1:89:67:FE:91:A2:0B:1C:23:C3:66:CB:19 ValiditySat, 13 Apr 2024 08:26:05 GMT - Fri, 12 Jul 2024 08:26:04 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: bafkreibo6bopl3uphffghgihpwi6ckxd5v7xemrtmmelzqcr73fhfuwxxa.ipfs.nftstorage.link
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 17 Apr 2024 16:59:06 GMT
content-type: image/x-icon
cf-ray: 875df6afec16abe4-CPH
access-control-allow-origin: *
cache-control: public, max-age=29030400, immutable
etag: W/"bafkreibo6bopl3uphffghgihpwi6ckxd5v7xemrtmmelzqcr73fhfuwxxa"
vary: Accept-Encoding
access-control-allow-methods: GET
access-control-expose-headers: Link
content-security-policy: default-src 'self' 'unsafe-inline' 'unsafe-eval' blob: data: https://*.w3s.link https://*.nftstorage.link https://*.dweb.link https://ipfs.io/ipfs/ https://*.githubusercontent.com https://polygon-rpc.com https://rpc.testnet.fantom.network ; form-action 'self'; navigate-to 'self'; connect-src 'self' blob: data: https://*.w3s.link https://*.nftstorage.link https://*.dweb.link https://ipfs.io/ipfs/ https://*.githubusercontent.com https://polygon-rpc.com https://rpc.testnet.fantom.network ; report-to csp-endpoint ; report-uri https://csp-report-to.web3.storage
reporting-endpoints: csp-endpoint="https://csp-report-to.web3.storage"
server-timing: request;dur=527
x-dotstorage-anchor: 5a8d5cb739cee6fa0ad6389ff1c056c0628c49780a0e7e7497a7634e33d9cfba
x-dotstorage-resolution-id: https://freeway.dag.haus
x-dotstorage-resolution-layer: dotstorage-race
x-freeway-version: 2.15.0
server: cloudflare
content-encoding: br
X-Firefox-Spdy: h2
|
|
| i.imgur.com/removed.png | 151.101.244.193 | 200 OK | 503 B |
IP151.101.244.193:443
Requested byhttps://pub-ad9c0fb8162c4b9fa96435e086e0ab27.r2.dev/edocsign.html CertificateIssuerSectigo Limited Subject*.imgur.com Fingerprint39:5B:E1:0D:4A:FC:A4:C7:F3:71:DE:C4:5C:12:69:F9:5F:58:9F:42 ValidityThu, 15 Feb 2024 00:00:00 GMT - Fri, 14 Feb 2025 23:59:59 GMT
File typePNG image data, 161 x 81, 1-bit colormap, non-interlaced Hashd835884373f4d6c8f24742ceabe74946 20002faf28adfd94ca98cf6ced46f14334b53684 9b5936f4006146e4e1e9025b474c02863c0b5614132ad40db4b925a10e8bfbb9
GET /removed.png HTTP/1.1
Host: i.imgur.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
last-modified: Wed, 14 May 2014 05:44:36 GMT
etag: "d835884373f4d6c8f24742ceabe74946"
content-type: image/png
cache-control: public, max-age=31536000
accept-ranges: bytes
date: Wed, 17 Apr 2024 16:59:06 GMT
age: 3647906
x-served-by: cache-bwi5167-BWI, cache-hel1410020-HEL
x-cache: HIT, HIT
x-cache-hits: 1, 543867
x-timer: S1713373146.023734,VS0,VE0
strict-transport-security: max-age=300
access-control-allow-methods: GET, OPTIONS
access-control-allow-origin: *
server: cat factory 1.0
x-content-type-options: nosniff
content-length: 503
X-Firefox-Spdy: h2
|
|
| ka-f.fontawesome.com/releases/v5.15.4/css/free.min.css?token=585b051251 | 104.21.26.223 | 200 OK | 60 kB |
URL GET HTTP/2ka-f.fontawesome.com/releases/v5.15.4/css/free.min.css?token=585b051251 IP104.21.26.223:443
Requested byhttps://pub-ad9c0fb8162c4b9fa96435e086e0ab27.r2.dev/edocsign.html CertificateIssuerGoogle Trust Services LLC Subjectka-f.fontawesome.com Fingerprint8D:43:33:42:48:C0:F5:34:71:EC:49:69:9C:62:01:4A:6F:41:11:98 ValidityTue, 05 Mar 2024 09:23:28 GMT - Mon, 03 Jun 2024 09:23:27 GMT
File typeASCII text, with very long lines (60130) Hasha12ec7ebe75a4d59a5dd6b79e2ba2e16 28f5dcc595ee6d4163481ef64170180502c8629b fc5128dfdcdfa0c3a9967a6d2f19399d7bf1aaae6ad7571b96b03915a1f30dda
GET /releases/v5.15.4/css/free.min.css?token=585b051251 HTTP/1.1
Host: ka-f.fontawesome.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pub-ad9c0fb8162c4b9fa96435e086e0ab27.r2.dev/
Origin: https://pub-ad9c0fb8162c4b9fa96435e086e0ab27.r2.dev
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 17 Apr 2024 16:59:05 GMT
content-type: text/css
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-max-age: 3000
last-modified: Wed, 04 Aug 2021 18:53:09 GMT
etag: W/"a12ec7ebe75a4d59a5dd6b79e2ba2e16"
cache-control: max-age=31556926
access-control-allow-headers: fa-kit-token
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 575a0c6f16652571820285002db8b856.cloudfront.net (CloudFront)
x-amz-cf-pop: ARN53-P2
x-amz-cf-id: 0sFwPT6J4pyDgYQVpjvZV9FsQ0pDsNPDttYlDhPjB3zleuaULxIljQ==
age: 30115
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=7bN5yaBbscuVVP4%2F3IeiEUuP25KE8R%2FY2EufWtsHZa%2F%2FXloxt%2BsYLgvZOHjBVqvoUgLYbGNoOxlBpgvw0dzve5PI2XNA4ThUMmGFTTfECY1A0BmODx31sL%2BdnKB67SVvq0UD8AlHaA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 875df6b2597dbe42-CPH
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
0.0.0.0