Report - testings4.galgad07.workers.dev/

Report Overview

Submitted URL
testings4.galgad07.workers.dev/
IP
188.114.97.1
ASN
#13335 CLOUDFLARENET
Submitted
2024-04-18 04:49:56
Access
public
Website Title
Banco De Oro
Final URL
testings4.galgad07.workers.dev/
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
2

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
maxcdn.bootstrapcdn.com	724	2012-05-25	2014-06-18	2024-04-17	466 B	122 kB	104.18.10.207
content.powerapps.com	10048	1998-03-10	2019-03-22	2024-04-04	1.5 kB	23 kB	13.107.213.53
raw.githack.com	133734	2013-10-12	2014-11-10	2024-04-17	3.3 kB	856 kB	104.21.234.230
raw.githubusercontent.com	35802	2014-02-06	2014-03-01	2024-04-17	1.9 kB	33 kB	185.199.109.133
testings4.galgad07.workers.dev	unknown	2019-02-08	2024-04-16	2024-04-18	487 B	552 kB	188.114.96.1

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

Scan Date	Severity	Indicator	Alert
2024-04-17	medium	testings4.galgad07.workers.dev/	BDO Unibank

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (1)

	URL	Size	First Seen	Last Seen
	testings4.galgad07.workers.dev/	2.4 kB	2024-04-18	2024-04-21
Pretty URL testings4.galgad07.workers.dev/ IP 188.114.96.1 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2024-04-18 06:49:57 Last Seen2024-04-21 17:57:26 Times Seen2 Hash 1c7f06e3b731732fce520ae44045ae83 74b22858d121e152d5d26a011f96120480f3f656 5d17eefa74085e5a2a7191f787fe78036fb84d879ad16a94111e3c376b58c56b Loading...

HTTP Transactions (16)

URL IP Response Size

content.powerapps.com/resource/powerappsportal/dist/pcf-style.bundle-0d8f841437.css

13.107.213.53

200 OK

1.4 kB

URL GET HTTP/2
content.powerapps.com/resource/powerappsportal/dist/pcf-style.bundle-0d8f841437.css
IP
13.107.213.53:443
ASN
#8075 MICROSOFT-CORP-MSN-AS-BLOCK

Requested by
https://testings4.galgad07.workers.dev/
Certificate
IssuerMicrosoft Corporation
Subjectcontent.powerapps.com
Fingerprint27:39:07:EE:F6:22:21:2A:2E:DC:A1:E3:57:DA:6B:5D:5C:1A:38:A2
ValidityWed, 31 Jan 2024 12:31:53 GMT - Sat, 25 Jan 2025 12:31:53 GMT

File type
ASCII text, with very long lines (11717), with no line terminators
Size
1.4 kB (1442 bytes)
Hash
0d8f841437f1c86ad54318ad353323e0
c9ca6c5393492dcdaea9516f2399c143d7d486f0
d691db162acde81487d3a3f9d21391ebb2fd5d7b9f8c626356be5a4d380419f4

HTTP Headers

GET /resource/powerappsportal/dist/pcf-style.bundle-0d8f841437.css HTTP/1.1
Host: content.powerapps.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://testings4.galgad07.workers.dev/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Thu, 18 Apr 2024 04:49:31 GMT
content-type: text/css
content-length: 1442
access-control-allow-origin: *
cache-control: public, max-age=31536000
content-encoding: br
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains
x-ms-islandgateway: ga000000O
x-ms-static-content: AL000002T
timing-allow-origin: *
x-servicefabric: NoRetry
x-ms-service-request-id: 42df3807-bfed-4ecc-aec9-a28566af406d
x-ms-correlation-id: 2b443fd5-dd82-486e-8caf-d07820cdfeed
x-ms-activity-vector: 00.01.00
server-timing: x-ms-igw-upstream-headers;dur=92.2,x-ms-igw-req-overhead;dur=0.5
x-content-type-options: nosniff
x-azure-ref: 20240418T044931Z-17f9dd4c48bdtt2tckkauf2nf800000001q0000000005e7g
x-cache: TCP_HIT
x-fd-int-roxy-purgeid: 67510084
accept-ranges: bytes
X-Firefox-Spdy: h2

content.powerapps.com/resource/powerappsportal/dist/font-awesome.bundle-3d8a58a48f.css

13.107.213.53

200 OK

2.6 kB

URL GET HTTP/2
content.powerapps.com/resource/powerappsportal/dist/font-awesome.bundle-3d8a58a48f.css
IP
13.107.213.53:443
ASN
#8075 MICROSOFT-CORP-MSN-AS-BLOCK

Requested by
https://testings4.galgad07.workers.dev/
Certificate
IssuerMicrosoft Corporation
Subjectcontent.powerapps.com
Fingerprint27:39:07:EE:F6:22:21:2A:2E:DC:A1:E3:57:DA:6B:5D:5C:1A:38:A2
ValidityWed, 31 Jan 2024 12:31:53 GMT - Sat, 25 Jan 2025 12:31:53 GMT

File type
Unicode text, UTF-8 (with BOM) text, with very long lines (13123), with CRLF line terminators
Size
2.6 kB (2630 bytes)
Hash
3d8a58a48f40f6564c3f3668eeee91a0
0a99cc0043999807f879c16b1becd13f36f71a56
31ad9ca96f5261e21e4ee2074153533e62a39af0f1ebfa5b65f3b24f7f3ccc4a

HTTP Headers

GET /resource/powerappsportal/dist/font-awesome.bundle-3d8a58a48f.css HTTP/1.1
Host: content.powerapps.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://testings4.galgad07.workers.dev/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Thu, 18 Apr 2024 04:49:31 GMT
content-type: text/css
content-length: 2630
access-control-allow-origin: *
cache-control: public, max-age=31536000
content-encoding: br
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains
x-ms-islandgateway: ga00000H0
x-ms-static-content: pi0000005
timing-allow-origin: *
x-servicefabric: NoRetry
x-ms-service-request-id: ffeb0db9-373b-4840-a905-52398a66cb18
x-ms-correlation-id: d02efffa-9626-4c66-b8c8-389be2572f56
x-ms-activity-vector: 00.01.00
server-timing: x-ms-igw-upstream-headers;dur=363.4,x-ms-igw-req-overhead;dur=0.3
x-content-type-options: nosniff
x-azure-ref: 20240418T044931Z-17f9dd4c48bdtt2tckkauf2nf800000001q0000000005e7k
x-cache: TCP_HIT
x-fd-int-roxy-purgeid: 67510084
accept-ranges: bytes
X-Firefox-Spdy: h2

content.powerapps.com/resource/powerappsportal/dist/preform.bundle-ed52eff176.css

13.107.213.53

200 OK

16 kB

URL GET HTTP/2
content.powerapps.com/resource/powerappsportal/dist/preform.bundle-ed52eff176.css
IP
13.107.213.53:443
ASN
#8075 MICROSOFT-CORP-MSN-AS-BLOCK

Requested by
https://testings4.galgad07.workers.dev/
Certificate
IssuerMicrosoft Corporation
Subjectcontent.powerapps.com
Fingerprint27:39:07:EE:F6:22:21:2A:2E:DC:A1:E3:57:DA:6B:5D:5C:1A:38:A2
ValidityWed, 31 Jan 2024 12:31:53 GMT - Sat, 25 Jan 2025 12:31:53 GMT

File type
ASCII text, with very long lines (64632), with CRLF line terminators
Size
16 kB (16433 bytes)
Hash
ed52eff1768b73e5b94343ef482c7065
db924aa33531181ac6f676a63710e4b891e0e062
7a8ca9343fc9beced71378ec2104a721f3b59eefca694da3c75c47f24ba50984

HTTP Headers

GET /resource/powerappsportal/dist/preform.bundle-ed52eff176.css HTTP/1.1
Host: content.powerapps.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://testings4.galgad07.workers.dev/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Thu, 18 Apr 2024 04:49:31 GMT
content-type: text/css
content-length: 16433
access-control-allow-origin: *
cache-control: public, max-age=31536000
content-encoding: br
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains
x-ms-islandgateway: GA000006G
x-ms-static-content: ZE000000C
timing-allow-origin: *
x-servicefabric: NoRetry
x-ms-service-request-id: 6316abb3-c927-40f5-a407-711bdda4867c
x-ms-correlation-id: 939545bd-efdc-46b2-9e95-15e9a253763d
x-ms-activity-vector: 00.01.00
server-timing: x-ms-igw-upstream-headers;dur=340.7,x-ms-igw-req-overhead;dur=0.2
x-content-type-options: nosniff
x-azure-ref: 20240418T044931Z-17f9dd4c48bdtt2tckkauf2nf800000001q0000000005e7h
x-cache: TCP_HIT
x-fd-int-roxy-purgeid: 67510084
accept-ranges: bytes
X-Firefox-Spdy: h2

raw.githack.com/Dashblack69/configuresme/main/bdo-logo.png

104.21.234.230

301 Moved Permanently

474 B

URL GET HTTP/2
raw.githack.com/Dashblack69/configuresme/main/bdo-logo.png
IP
104.21.234.230:443
ASN
#13335 CLOUDFLARENET

Requested by
https://testings4.galgad07.workers.dev/
Certificate
IssuerGoogle Trust Services LLC
Subjectgithack.com
FingerprintA4:13:2F:80:0A:C6:7C:8B:08:12:12:22:60:76:15:7D:40:80:70:54
ValidityFri, 01 Mar 2024 13:12:36 GMT - Thu, 30 May 2024 13:12:35 GMT

File type
data
Size
474 B (474 bytes)
Hash
702580d194a9c63fb84cbfea2806dcce
fa741a6584f6edfe1b54a7b6088bfed1723ef2af
96c94aa1c3423897e665778146370edd986a5cdb0984412515c854316603c774

HTTP Headers

GET /Dashblack69/configuresme/main/bdo-logo.png HTTP/1.1
Host: raw.githack.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://testings4.galgad07.workers.dev/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 301 Moved Permanently
date: Thu, 18 Apr 2024 04:49:31 GMT
content-type: text/html
location: https://raw.githubusercontent.com/Dashblack69/configuresme/main/bdo-logo.png
cache-control: max-age=86400, public
access-control-allow-origin: *
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=9Q11YqdBUYTKZhbcoxPd4LPeBs055RjzDuN0pF2vI%2FsXE64vWQJTr2G%2FpgXOMjFBaoG8ZUUN9SFZ0CcM%2FP5frp%2B%2F6fPaxVKHWXfcegLdNPqxVcOdVp8KPbjxSNIIvtIAqH0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8762075919c1dd7d-LHR
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

raw.githubusercontent.com/Dashblack69/configuresme/main/bdo-logo.png

185.199.109.133

200 OK

17 kB

URL GET HTTP/2
raw.githubusercontent.com/Dashblack69/configuresme/main/bdo-logo.png
IP
185.199.109.133:443
ASN
#54113 FASTLY

Requested by
https://testings4.galgad07.workers.dev/
Certificate
IssuerDigiCert Inc
Subject*.github.io
Fingerprint97:D8:C5:70:0F:12:24:6C:88:BC:FA:06:7E:8C:A7:4D:A8:62:67:28
ValidityFri, 15 Mar 2024 00:00:00 GMT - Fri, 14 Mar 2025 23:59:59 GMT

File type
PNG image data, 1181 x 410, 8-bit/color RGBA, non-interlaced
Size
17 kB (17244 bytes)
Hash
0e2068066103629fc8892148f5131c50
a9d312a06e8033f84cff2255c7e6f9e88f2c9597
5c6731b032fabee6090d6ac9e6ba8c3533d074c03b21f2f09064b979d1331025

HTTP Headers

GET /Dashblack69/configuresme/main/bdo-logo.png HTTP/1.1
Host: raw.githubusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://testings4.galgad07.workers.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
cache-control: max-age=300
content-security-policy: default-src 'none'; style-src 'unsafe-inline'; sandbox
content-type: image/png
etag: W/"f03f5c87b877b568b381b4b76cbb51f2f6e9deef737902bde578f86d59a5b9cb"
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
x-frame-options: deny
x-xss-protection: 1; mode=block
x-github-request-id: A57E:1F2F76:AF4228:B82CC4:6620A65B
accept-ranges: bytes
date: Thu, 18 Apr 2024 04:49:31 GMT
via: 1.1 varnish
x-served-by: cache-hel1410024-HEL
x-cache: MISS
x-cache-hits: 0
x-timer: S1713415771.236254,VS0,VE163
vary: Authorization,Accept-Encoding,Origin
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
x-fastly-request-id: fa465ec1f70b2d8df51e5200aacff96a76210fea
expires: Thu, 18 Apr 2024 04:54:31 GMT
source-age: 0
content-length: 17244
X-Firefox-Spdy: h2

raw.githubusercontent.com/Dashblack69/configuresme/main/SMS.png

185.199.109.133

200 OK

2.2 kB

URL GET HTTP/2
raw.githubusercontent.com/Dashblack69/configuresme/main/SMS.png
IP
185.199.109.133:443
ASN
#54113 FASTLY

Requested by
https://testings4.galgad07.workers.dev/
Certificate
IssuerDigiCert Inc
Subject*.github.io
Fingerprint97:D8:C5:70:0F:12:24:6C:88:BC:FA:06:7E:8C:A7:4D:A8:62:67:28
ValidityFri, 15 Mar 2024 00:00:00 GMT - Fri, 14 Mar 2025 23:59:59 GMT

File type
PNG image data, 60 x 73, 8-bit/color RGBA, non-interlaced
Size
2.2 kB (2239 bytes)
Hash
f4616969a9f587c156e3da6d7e84b4a4
8a799723080a713fc09b94ffb1a28e78f77c3149
4e33b58410834ea9dae804bf915691963cfeab04e05b19f5e651ebb6aab04c86

HTTP Headers

GET /Dashblack69/configuresme/main/SMS.png HTTP/1.1
Host: raw.githubusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://testings4.galgad07.workers.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
cache-control: max-age=300
content-security-policy: default-src 'none'; style-src 'unsafe-inline'; sandbox
content-type: image/png
etag: W/"655117a15238605f444a56825779b1f1ebb163cf5523de75f0fe53b66f57a326"
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
x-frame-options: deny
x-xss-protection: 1; mode=block
x-github-request-id: 3952:353C66:3F4FD63:42E3DFF:6620A65A
accept-ranges: bytes
date: Thu, 18 Apr 2024 04:49:31 GMT
via: 1.1 varnish
x-served-by: cache-hel1410024-HEL
x-cache: MISS
x-cache-hits: 0
x-timer: S1713415771.236378,VS0,VE163
vary: Authorization,Accept-Encoding,Origin
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
x-fastly-request-id: 2422cd7ad2e5023a4d348ccad41af6e974efb15e
expires: Thu, 18 Apr 2024 04:54:31 GMT
source-age: 0
content-length: 2239
X-Firefox-Spdy: h2

raw.githack.com/Dashblack69/configuresme/main/favicon.ico

104.21.234.230

301 Moved Permanently

9.9 kB

URL GET HTTP/3
raw.githack.com/Dashblack69/configuresme/main/favicon.ico
IP
104.21.234.230:443
ASN
#13335 CLOUDFLARENET

Requested by
https://testings4.galgad07.workers.dev/
Certificate
IssuerGoogle Trust Services LLC
Subjectgithack.com
FingerprintA4:13:2F:80:0A:C6:7C:8B:08:12:12:22:60:76:15:7D:40:80:70:54
ValidityFri, 01 Mar 2024 13:12:36 GMT - Thu, 30 May 2024 13:12:35 GMT

File type
data
Size
9.9 kB (9853 bytes)
Hash
1c1cee48744173cd089d9267e7a81dc0
f3c821d1699cfed0da57880a3213eb7517bdedf8
e3108e2117e05e1f52242c0fffaebe20afd372263602770b370b8627656c72f8

HTTP Headers

GET /Dashblack69/configuresme/main/favicon.ico HTTP/1.1
Host: raw.githack.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://testings4.galgad07.workers.dev/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 301 Moved Permanently
date: Thu, 18 Apr 2024 04:49:31 GMT
content-type: text/html
location: https://raw.githubusercontent.com/Dashblack69/configuresme/main/favicon.ico
cache-control: max-age=86400, public
access-control-allow-origin: *
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=IX5hZYffYkyh%2F2BzgUJ0Ue%2B7uaJpMLkXIEsTzijPhsS2HoEZreqza8Gtrm4qvLLLyY%2BgxoLyuCO6hMsDozlbT72C64jhnUu%2BJSQ8Ari9Etjrz9fObzn36%2B3KHJlXXdHJxow%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8762075beffd7772-LHR
alt-svc: h3=":443"; ma=86400

raw.githack.com/Dashblack69/configuresme/main/ntbresponsive.css

104.21.234.230

200 OK

221 kB

URL GET HTTP/2
raw.githack.com/Dashblack69/configuresme/main/ntbresponsive.css
IP
104.21.234.230:443
ASN
#13335 CLOUDFLARENET

Requested by
https://testings4.galgad07.workers.dev/
Certificate
IssuerGoogle Trust Services LLC
Subjectgithack.com
FingerprintA4:13:2F:80:0A:C6:7C:8B:08:12:12:22:60:76:15:7D:40:80:70:54
ValidityFri, 01 Mar 2024 13:12:36 GMT - Thu, 30 May 2024 13:12:35 GMT

File type
ASCII text, with CRLF line terminators
Size
221 kB (221259 bytes)
Hash
8a0cf96a0aca2badb2ae23dac3ae8c73
164e4598d48752657ff9d27d007a97039f5b0a9c
0e0bfa14b80e4cf441937508369e0582c193278e42cd985059e852714e34acd1

HTTP Headers

GET /Dashblack69/configuresme/main/ntbresponsive.css HTTP/1.1
Host: raw.githack.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://testings4.galgad07.workers.dev/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Thu, 18 Apr 2024 04:49:31 GMT
content-type: text/css; charset=utf-8
etag: W/"baf4a453d88339b81ff13ab55566902c7cb904748d7bb14cd33eab41dd66ad8c"
x-github-request-id: 2B80:263384:FA35FC:106CBF9:661EB47D
via: 1.1 varnish
x-served-by: cache-hel1410027-HEL
x-cache: MISS
x-cache-hits: 0
x-timer: S1713288318.689287,VS0,VE216
vary: Authorization,Accept-Encoding,Origin
cross-origin-resource-policy: cross-origin
x-fastly-request-id: b411a32970c321d049a7fff50d5a7f4a0fd54f73
source-age: 0
cache-control: max-age=60, public
x-robots-tag: none
access-control-allow-origin: *
x-githack-cache-status: HIT
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=OcUhXo6aCaUoPbw4qsWZJmv4r1VLpUtY1FopOfFArxH%2BmmwPdmBgzw91maTfnVNIiR%2BHxu7xwjuhGAD1vZDYQdQ8EuIDOlJ0%2BrHF%2FIKlv0z1bsNujKGSYxcHNe%2FybRjpLnM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8762075919c0dd7d-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

raw.githack.com/Dashblack69/configuresme/main/Back.png

104.21.234.230

301 Moved Permanently

283 B

URL GET HTTP/2
raw.githack.com/Dashblack69/configuresme/main/Back.png
IP
104.21.234.230:443
ASN
#13335 CLOUDFLARENET

Requested by
https://testings4.galgad07.workers.dev/
Certificate
IssuerGoogle Trust Services LLC
Subjectgithack.com
FingerprintA4:13:2F:80:0A:C6:7C:8B:08:12:12:22:60:76:15:7D:40:80:70:54
ValidityFri, 01 Mar 2024 13:12:36 GMT - Thu, 30 May 2024 13:12:35 GMT

File type

Size
283 B (283 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /Dashblack69/configuresme/main/Back.png HTTP/1.1
Host: raw.githack.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://testings4.galgad07.workers.dev/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 301 Moved Permanently
date: Thu, 18 Apr 2024 04:49:31 GMT
content-type: text/html
location: https://raw.githubusercontent.com/Dashblack69/configuresme/main/Back.png
cache-control: max-age=86400, public
access-control-allow-origin: *
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=zErQ67GJ2g25mG%2BcbYqRlAZ3bzd1sdCtu3bKEldJ7AFeJqY9%2BnbFVEWwrfwHCr1G24Yk9kf8BML%2F%2FdPHp4HTURrDOvZD67E6NBxnKFSI769du5De2tqkwuPuhTW8JNgtMHA%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8762075929c4dd7d-LHR
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

testings4.galgad07.workers.dev/

188.114.96.1

200 OK

552 kB

URL User Request GET HTTP/2
testings4.galgad07.workers.dev/
IP
188.114.96.1:443
ASN
#13335 CLOUDFLARENET

Certificate
IssuerGoogle Trust Services LLC
Subjectgalgad07.workers.dev
Fingerprint52:A1:7E:B2:26:9C:E9:47:FC:79:D7:F1:04:4C:E6:B0:C2:0A:73:BC
ValidityTue, 16 Apr 2024 15:05:54 GMT - Mon, 15 Jul 2024 15:05:53 GMT

File type

Size
552 kB (551897 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	BDO Unibank

HTTP Headers

GET / HTTP/1.1
Host: testings4.galgad07.workers.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Thu, 18 Apr 2024 04:49:30 GMT
content-type: text/html
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=NcHxTCzTRyt8%2FxenK%2FwpEdM2mCs3L8ZEKKNufbtfLRza5wwcWoHawAt6xNZhvt0ROEHBCI7uFE3R%2BnFtHaU%2FMf%2BqVaOxIkcMjdmy6o%2BgPAg0tSUafzZHn7BAF5ICuyqQAT9j%2Fa4gk7ZKtAFrlgsKz%2Fk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87620756a8b0b527-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

raw.githubusercontent.com/Dashblack69/configuresme/main/favicon.ico

185.199.109.133

200 OK

9.7 kB

URL GET HTTP/2
raw.githubusercontent.com/Dashblack69/configuresme/main/favicon.ico
IP
185.199.109.133:443
ASN
#54113 FASTLY

Requested by
https://testings4.galgad07.workers.dev/
Certificate
IssuerDigiCert Inc
Subject*.github.io
Fingerprint97:D8:C5:70:0F:12:24:6C:88:BC:FA:06:7E:8C:A7:4D:A8:62:67:28
ValidityFri, 15 Mar 2024 00:00:00 GMT - Fri, 14 Mar 2025 23:59:59 GMT

File type
MS Windows icon resource - 1 icon, 48x48, 32 bits/pixel
Size
9.7 kB (9662 bytes)
Hash
df6c308d76b08bc7a05617774be0f26f
ca447fd18e378b08417886c95015a6660e00da9c
b2230868139f53f2d58fa08dce9f75fcb3b00f33d8a06de2e194e501142dafb7

HTTP Headers

GET /Dashblack69/configuresme/main/favicon.ico HTTP/1.1
Host: raw.githubusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://testings4.galgad07.workers.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
cache-control: max-age=300
content-security-policy: default-src 'none'; style-src 'unsafe-inline'; sandbox
content-type: image/vnd.microsoft.icon
etag: W/"0efc492576184823b73de63163814c81594fef1c488b72c4593bbe00d4585a1d"
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
x-frame-options: deny
x-xss-protection: 1; mode=block
x-github-request-id: A704:28618D:18C8712:1A1D81B:6620A27B
accept-ranges: bytes
date: Thu, 18 Apr 2024 04:49:31 GMT
via: 1.1 varnish
x-served-by: cache-hel1410024-HEL
x-cache: HIT
x-cache-hits: 0
x-timer: S1713415772.620918,VS0,VE164
vary: Authorization,Accept-Encoding,Origin
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
x-fastly-request-id: e71b12e84e61974088189bc4ad81707805d6ef34
expires: Thu, 18 Apr 2024 04:54:31 GMT
source-age: 0
content-length: 9662
X-Firefox-Spdy: h2

maxcdn.bootstrapcdn.com/bootstrap/3.3.6/css/bootstrap.min.css

104.18.10.207

200 OK

121 kB

URL GET HTTP/2
maxcdn.bootstrapcdn.com/bootstrap/3.3.6/css/bootstrap.min.css
IP
104.18.10.207:443
ASN
#13335 CLOUDFLARENET

Requested by
https://testings4.galgad07.workers.dev/
Certificate
IssuerGoogle Trust Services LLC
Subjectbootstrapcdn.com
Fingerprint57:B4:25:B9:9C:88:A1:A3:3D:F7:31:74:02:E4:D1:E0:0A:F5:11:63
ValidityWed, 27 Mar 2024 00:22:09 GMT - Tue, 25 Jun 2024 00:22:08 GMT

File type
ASCII text, with very long lines (65371)
Size
121 kB (121260 bytes)
Hash
2f624089c65f12185e79925bc5a7fc42
8eb176c70b9cfa6871b76d6dc98fb526e7e9b3de
eece6e0c65b7007ab0eb1b4998d36dafe381449525824349128efc3f86f4c91c

HTTP Headers

GET /bootstrap/3.3.6/css/bootstrap.min.css HTTP/1.1
Host: maxcdn.bootstrapcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://testings4.galgad07.workers.dev/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Thu, 18 Apr 2024 04:49:30 GMT
content-type: text/css; charset=utf-8
vary: Accept-Encoding
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: DE
access-control-allow-origin: *
cache-control: public, max-age=31919000
etag: W/"2f624089c65f12185e79925bc5a7fc42"
last-modified: Mon, 25 Jan 2021 22:03:59 GMT
cdn-cachedat: 10/31/2023 18:48:20
cdn-proxyver: 1.04
cdn-requestpullcode: 200
cdn-requestpullsuccess: True
cdn-edgestorageid: 755
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
cdn-status: 200
cdn-requestid: 455985e84def5b01c1ff875ffa4ec273
cdn-cache: HIT
cf-cache-status: HIT
age: 12442978
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 876207587c58b50b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

raw.githack.com/Dashblack69/configuresme/main/etbResponsive.css

104.21.234.230

200 OK

153 kB

URL GET HTTP/2
raw.githack.com/Dashblack69/configuresme/main/etbResponsive.css
IP
104.21.234.230:443
ASN
#13335 CLOUDFLARENET

Requested by
https://testings4.galgad07.workers.dev/
Certificate
IssuerGoogle Trust Services LLC
Subjectgithack.com
FingerprintA4:13:2F:80:0A:C6:7C:8B:08:12:12:22:60:76:15:7D:40:80:70:54
ValidityFri, 01 Mar 2024 13:12:36 GMT - Thu, 30 May 2024 13:12:35 GMT

File type
ASCII text, with CRLF line terminators
Size
153 kB (153212 bytes)
Hash
4a38e89edd0c6510274ad0dbe4ed7b81
bba4e44a606772367643f498286144e86f0210f0
4a9a238a2e288b1139d225ddda061a7ee2a691a313677bdc61da93656cd55f5e

HTTP Headers

GET /Dashblack69/configuresme/main/etbResponsive.css HTTP/1.1
Host: raw.githack.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://testings4.galgad07.workers.dev/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Thu, 18 Apr 2024 04:49:31 GMT
content-type: text/css; charset=utf-8
etag: W/"89e3c15f67a5f5bd27d3bc7ab0c0805b2374c2800af23e7e2d3d70bc89da9f7b"
x-github-request-id: CB0E:28A883:4D7DB6:50B2D3:661EB47D
via: 1.1 varnish
x-served-by: cache-hel1410034-HEL
x-cache: MISS
x-cache-hits: 0
x-timer: S1713288318.721407,VS0,VE173
vary: Authorization,Accept-Encoding,Origin
cross-origin-resource-policy: cross-origin
x-fastly-request-id: f7ec9ed5ed26d50719d7727b33256b497bdf1d59
source-age: 0
cache-control: max-age=60, public
x-robots-tag: none
access-control-allow-origin: *
x-githack-cache-status: HIT
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=BBkkdvMcPSSQJzP3vdsgJZqNvFNiwmY1QO5yT6P975nmiK75TEvN%2BiYCxk18xppq0L%2FTc7b4uli6BCRvUJ2oK%2FCZ2aAcMvNjojgqnyZnIZxkVilPWKFIqymgWVEPr%2BTvj60%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8762075929c8dd7d-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

raw.githack.com/Dashblack69/configuresme/main/custom_CC.css

104.21.234.230

200 OK

462 kB

URL GET HTTP/2
raw.githack.com/Dashblack69/configuresme/main/custom_CC.css
IP
104.21.234.230:443
ASN
#13335 CLOUDFLARENET

Requested by
https://testings4.galgad07.workers.dev/
Certificate
IssuerGoogle Trust Services LLC
Subjectgithack.com
FingerprintA4:13:2F:80:0A:C6:7C:8B:08:12:12:22:60:76:15:7D:40:80:70:54
ValidityFri, 01 Mar 2024 13:12:36 GMT - Thu, 30 May 2024 13:12:35 GMT

File type

Size
462 kB (462422 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /Dashblack69/configuresme/main/custom_CC.css HTTP/1.1
Host: raw.githack.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://testings4.galgad07.workers.dev/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Thu, 18 Apr 2024 04:49:31 GMT
content-type: text/css; charset=utf-8
etag: W/"be436e6589f9b31eac53041dc4c3ad2f5cdbe91464c83ef1acf8d049ae1c4a16"
x-github-request-id: B9C0:28A6FA:3948E53:3C91C33:661EB4F4
via: 1.1 varnish
x-served-by: cache-hel1410033-HEL
x-cache: MISS
x-cache-hits: 0
x-timer: S1713288439.255952,VS0,VE212
vary: Authorization,Accept-Encoding,Origin
cross-origin-resource-policy: cross-origin
x-fastly-request-id: b94583d1d2b00c8f80ac9755978d808dccaf23b7
source-age: 0
cache-control: max-age=60, public
x-robots-tag: none
access-control-allow-origin: *
x-githack-cache-status: HIT
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=1ncCwVtA1coNzsz29E5QzMslx220VJ1oPjXhfNcmlYofeuNkVzCvpd6Ao07NCJV4wGKikEcgE5WH6y8So7yrLy1HaQl551gvhiu89EVqg35qxrRqx3sSFwdpjHske1FoGF0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8762075929c6dd7d-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

raw.githack.com/Dashblack69/configuresme/main/SMS.png

104.21.234.230

301 Moved Permanently

2.2 kB

URL GET HTTP/2
raw.githack.com/Dashblack69/configuresme/main/SMS.png
IP
104.21.234.230:443
ASN
#13335 CLOUDFLARENET

Requested by
https://testings4.galgad07.workers.dev/
Certificate
IssuerGoogle Trust Services LLC
Subjectgithack.com
FingerprintA4:13:2F:80:0A:C6:7C:8B:08:12:12:22:60:76:15:7D:40:80:70:54
ValidityFri, 01 Mar 2024 13:12:36 GMT - Thu, 30 May 2024 13:12:35 GMT

File type

Size
2.2 kB (2239 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /Dashblack69/configuresme/main/SMS.png HTTP/1.1
Host: raw.githack.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://testings4.galgad07.workers.dev/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 301 Moved Permanently
date: Thu, 18 Apr 2024 04:49:31 GMT
content-type: text/html
location: https://raw.githubusercontent.com/Dashblack69/configuresme/main/SMS.png
cache-control: max-age=86400, public
access-control-allow-origin: *
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=qR8R6j8QISXGdDvsuQudKaW2xZWt75BlUzMAE7w5kemWkFEpWKSusV8QATzKdegqHXueenzRqMqDkNHP6MwJxERzK5tgNPqEfRaS13eXO95hom1%2BGBOy1wFd%2FPUuJGcxHBY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8762075919c3dd7d-LHR
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

raw.githubusercontent.com/Dashblack69/configuresme/main/Back.png

185.199.109.133

200 OK

283 B

URL GET HTTP/2
raw.githubusercontent.com/Dashblack69/configuresme/main/Back.png
IP
185.199.109.133:443
ASN
#54113 FASTLY

Requested by
https://testings4.galgad07.workers.dev/
Certificate
IssuerDigiCert Inc
Subject*.github.io
Fingerprint97:D8:C5:70:0F:12:24:6C:88:BC:FA:06:7E:8C:A7:4D:A8:62:67:28
ValidityFri, 15 Mar 2024 00:00:00 GMT - Fri, 14 Mar 2025 23:59:59 GMT

File type
PNG image data, 20 x 20, 8-bit/color RGBA, non-interlaced
Size
283 B (283 bytes)
Hash
8d7d33960bb41de05ea3acf68923f3b3
bd80cdf36100d22e2efe5b31f33d67777276752b
af3bb18959e9c06aeb907324802bf73eea35a5e7299b70f8ad3c32483a906369

HTTP Headers

GET /Dashblack69/configuresme/main/Back.png HTTP/1.1
Host: raw.githubusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://testings4.galgad07.workers.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
cache-control: max-age=300
content-security-policy: default-src 'none'; style-src 'unsafe-inline'; sandbox
content-type: image/png
etag: W/"3dda6eac7cf1a30d572a26aa26b168bdebfc80e1831b29d72fc65b2007733bec"
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
x-frame-options: deny
x-xss-protection: 1; mode=block
x-github-request-id: CB40:353C66:3F4FD63:42E3E00:6620A65A
accept-ranges: bytes
date: Thu, 18 Apr 2024 04:49:31 GMT
via: 1.1 varnish
x-served-by: cache-hel1410024-HEL
x-cache: MISS
x-cache-hits: 0
x-timer: S1713415771.236383,VS0,VE151
vary: Authorization,Accept-Encoding,Origin
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
x-fastly-request-id: c84b1c099420c534a25aea084f8a8cc35d1ff74d
expires: Thu, 18 Apr 2024 04:54:31 GMT
source-age: 0
content-length: 283
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (1)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (16)

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/2