Report - shared-unit-118f.7n8o27al.workers.dev/

Report Overview

Submitted URL
shared-unit-118f.7n8o27al.workers.dev/
IP
172.67.155.140
ASN
#13335 CLOUDFLARENET
Submitted
2024-03-29 05:12:33
Access
public
Website Title
OurTime.com - The 50+ Single Network
Final URL
shared-unit-118f.7n8o27al.workers.dev/bf36b970-2d2a-4a2a-bac1-17d4a3038160
Tags
suspicious
urlquery detections
Suspicious - Suspicious Javascript code

Detections

urlquery
3
Network Intrusion Detection
0
Threat Detection Systems
8

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
code.jquery.com	634	2005-12-10	2012-05-21	2024-03-28	431 B	31 kB	151.101.130.137
codesandbox.io	95492	2016-11-23	2017-04-04	2024-03-27	1.9 kB	184 kB	172.64.154.107
api.rename-service0.workers.dev	unknown	2019-02-08	2022-05-30	2024-03-25	6.6 kB	310 kB	172.67.209.83
shared-unit-118f.7n8o27al.workers.dev	unknown	2019-02-08	2023-03-07	2023-09-02	963 B	2.6 MB	0.0.0.0
imgs.rename-service0.workers.dev	unknown	2019-02-08	2022-05-30	2024-03-25	412 B	779 B	0.0.0.0

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

Scan Date	Severity	Indicator	Alert
2024-03-28	medium	shared-unit-118f.7n8o27al.workers.dev/	InterActiveCorp
2024-03-28	medium	shared-unit-118f.7n8o27al.workers.dev/	InterActiveCorp

PhishTank

Scan Date	Severity	Indicator	Alert
2023-09-01	medium	shared-unit-118f.7n8o27al.workers.dev/favicon.ico	Other
2023-09-01	medium	shared-unit-118f.7n8o27al.workers.dev/	Other

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (23)

	URL	Size	First Seen	Last Seen
	unknown	1.4 MB	2023-09-02	2024-04-20
Pretty Introduced by scriptElement Embedded in HTML false Observations First Seen2023-09-02 05:21:18 Last Seen2024-04-20 19:16:16 Times Seen6 Hash a7039cacabe9e5c689dd6b7db49deefb 2ab77608b8bb1ef6bc51ebfc7142e706ac5ee1f9 ebca3779929f73c3c3c44bf3cc3e936e15c7f9d7900487ed8b60ea16d36451b6 Loading...

	api.rename-service0.workers.dev/js?id=UA-1817027-45	96 kB	2023-03-13	2024-04-27
Pretty URL api.rename-service0.workers.dev/js?id=UA-1817027-45 IP 172.67.209.83 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-13 13:52:40 Last Seen2024-04-27 07:46:38 Times Seen962 Hash c1277eaf2fba47836bedee41d16ed8d0 716f0753108d0704e98e9bfa0672851b1cf79519 2cfb61c5b4464a49bf1a1867ab3c06ad790468ab0d6b3dec415a5929b20dac85 Loading...

	api.rename-service0.workers.dev/jquery-migrate-3.3.1.min.js	11 kB	2023-03-08	2024-04-27
Pretty URL api.rename-service0.workers.dev/jquery-migrate-3.3.1.min.js IP 172.67.209.83 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-08 02:41:29 Last Seen2024-04-27 07:46:38 Times Seen1016 Hash 68f90fa1b7a532a073bd613f011a9c97 a4fd8d2e4556e6348d067212da590d56dc30b8a5 90a8d6a27a26f746b4b263102f4fe120e956d99e3789325aafc7d6b7ca0ff0e4 Loading...

	unknown	1.4 MB	2023-09-02	2024-04-20
Pretty Introduced by scriptElement Embedded in HTML false Observations First Seen2023-09-02 05:21:18 Last Seen2024-04-20 19:16:16 Times Seen6 Hash 3b390b76d447767313cb572ac6d17a0f d8dbf6d80760c0fc9cb8244d188bf5b7a8f135da 1dbdf0038d691c75f2b21fc7f995f910ff5a4967b6b7a68a2b0adf2d6542d866 Loading...

	shared-unit-118f.7n8o27al.workers.dev/bf36b970-2d2a-4a2a-bac1-17d4a3038160	1.9 MB	2023-09-02	2024-04-20
Pretty URL shared-unit-118f.7n8o27al.workers.dev/bf36b970-2d2a-4a2a-bac1-17d4a3038160 IP 0.0.0.0 ASN #0 Introduced by scriptElement Embedded in HTML true Observations First Seen2023-09-02 05:21:18 Last Seen2024-04-20 19:16:16 Times Seen6 Hash ddf910831cfac90f45eef709a4358593 0c8add03d1bd36d998743a17e888d3cacc01c333 5c830191df10f9e189b7b37b817d630a08f99fd4a0139cd19b3ab64543a0fda6 Loading...

	unknown	481 kB	2023-09-02	2024-04-20
Pretty Introduced by scriptElement Embedded in HTML false Observations First Seen2023-09-02 05:21:19 Last Seen2024-04-20 19:16:16 Times Seen6 Hash 047c45e65023bcba6acff4030575b43f 9aa9e3b18fc2a6a088cccfe174da19e39ad7863a 567df34659cf697bb345325817d9ab29de4ee886e69eb7137b3d328b0ec1dbd5 Loading...

	unknown	278 B	2023-05-10	2024-04-26
Pretty Introduced by scriptElement Embedded in HTML false Observations First Seen2023-05-10 18:40:41 Last Seen2024-04-26 19:49:36 Times Seen483 Hash d176264d994fbc767fa254757a66468a 4319b0f0236541d74ffd4fba0b236cffcb8c3a11 52eeb0e6768b1de1c84eea820ce123eeac8aeb207c1f35608ca43ab814bf6801 Loading...

	unknown	127 B	2023-05-10	2024-04-26
Pretty Introduced by scriptElement Embedded in HTML false Observations First Seen2023-05-10 18:40:41 Last Seen2024-04-26 19:49:36 Times Seen481 Hash f0325abf945aabc90a9974bbca58398d 1113927bc5bfcb3dedf2c94a76d265902bace38e 22f54eaa2ea0bdb02d20b92a3c2c72366d3336a9edec513a669d03b6bcfbcdbf Loading...

	unknown	34 B	2023-04-11	2024-04-27
Pretty Introduced by Function Embedded in HTML false Observations First Seen2023-04-11 21:16:40 Last Seen2024-04-27 20:31:05 Times Seen75257 Hash 572cb94037fffc2a0a53b465972e15f1 0d679b041a7c1ca45cc99e2d229fc2b86762838d 6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35 Loading...

	api.rename-service0.workers.dev/otSDKStub.js	19 kB	2023-03-08	2024-04-27
Pretty URL api.rename-service0.workers.dev/otSDKStub.js IP 172.67.209.83 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-08 15:08:15 Last Seen2024-04-27 07:46:38 Times Seen988 Hash 9bd02f97086983b13a1ba0f2ace23a34 b7da87ca35222ded535d85d1a2d8ed33c734f2c3 11b947e74a7ba8f1d433b84ab7a719799ec0662a9035a8b4a2ab4d7d1eb2d681 Loading...

	unknown	1.5 kB	2023-05-10	2024-04-26
Pretty Introduced by scriptElement Embedded in HTML false Observations First Seen2023-05-10 18:40:41 Last Seen2024-04-26 19:49:36 Times Seen481 Hash 11d4882e2c9207a2998fd737302eaafa 0946b9cee3915f4e3c384f63ac5a04dcd902d294 8b736921036313b1adc9d28b472b2442794040d119b7597b23d54adade6df76a Loading...

	unknown	1.3 kB	2023-05-10	2024-04-26
Pretty Introduced by scriptElement Embedded in HTML false Observations First Seen2023-05-10 18:40:41 Last Seen2024-04-26 19:49:36 Times Seen482 Hash b0855b6503bb1b3cb5121e30ef78e8aa 5c25088ae897f6669fa0ecd4d5b1de9d0e261d6b 93ad295e66f3aed9ba6b8c62c2652587b95ba19d2cd0e0550fea13e5b5916a39 Loading...

	unknown	1.1 kB	2023-05-10	2024-04-26
Pretty Introduced by scriptElement Embedded in HTML false Observations First Seen2023-05-10 18:40:41 Last Seen2024-04-26 19:49:36 Times Seen481 Hash c10675b49d02e056f4f34df873b1178f 3bebe1c97a6b59904664869180a1a6f158f0e6ab 0af2480d899de74c4c0a619cde8e1a29d450f44d8d02ff048c64dd943ebf0254 Loading...

	api.rename-service0.workers.dev/jquery-3.5.1.min.js	90 kB	2023-03-07	2024-04-27
Pretty URL api.rename-service0.workers.dev/jquery-3.5.1.min.js IP 172.67.209.83 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:03:09 Last Seen2024-04-27 07:46:38 Times Seen14194 Hash b61aa6e2d68d21b3546b5b418bf0e9c3 9c1398f0de4c869dacb1c9ab1a8cc327f5421ff7 f36844906ad2309877aae3121b87fb15b9e09803cb4c333adc7e1e35ac92e14b Loading...

	unknown	177 kB	2023-09-02	2024-04-20
Pretty Introduced by scriptElement Embedded in HTML false Observations First Seen2023-09-02 05:21:19 Last Seen2024-04-20 19:16:16 Times Seen6 Hash 9f7bb15443506ef58b3a8d1a79fbe277 bc11b3f7076d8164c48795545ef1dba198ceda33 0ee894698842bc875b47759294684cf3e45046e7950369c478fb9794db0f168f Loading...

		Size	First Seen	Last Seen
	#1 Eval - 9e925e9341b490bfd3b4c4ca3b0c1ef2	4 B	2023-03-07	2024-04-27
Pretty Observations First Seen2023-03-07 01:03:43 Last Seen2024-04-27 20:27:07 Times Seen350227 Hash 9e925e9341b490bfd3b4c4ca3b0c1ef2 c2543fff3bfa6f144c2f06a7de6cd10c0b650cae 1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408 Loading...

		Size	First Seen	Last Seen
	#1 Write - 1cc18faca256370404b3e6c3c8a8c4e0	276 kB	2023-09-02	2024-04-20
Pretty Observations First Seen2023-09-02 05:21:19 Last Seen2024-04-20 19:16:16 Times Seen6 Hash 1cc18faca256370404b3e6c3c8a8c4e0 112537f1385cdd27e0524d63a03bb4895e9f9f83 13b5c7272a67eb7d6033af9fdfe51962214aab3ece7da68332aaaf5a9c54c031 Loading...

	#2 Write - 20dd0e0341eb451eda549f1000548fd9	169 B	2023-03-13	2024-04-27
Pretty Observations First Seen2023-03-13 13:52:40 Last Seen2024-04-27 07:46:38 Times Seen1073 Hash 20dd0e0341eb451eda549f1000548fd9 fe8e12a90df35feac29e01f9a2681fcdd7431798 e5d7579755eec1c2499708d8a154b6cb987dbfebe5ea6bfdd4583153357de6ab Loading...

	#3 Write - b52dbcefc0994ae36abbc79c057c9e40	1.3 kB	2023-03-13	2024-04-27
Pretty Observations First Seen2023-03-13 13:52:40 Last Seen2024-04-27 07:46:38 Times Seen1067 Hash b52dbcefc0994ae36abbc79c057c9e40 280aaf80f4ab249f9c0d32ecac19ce4d63c70e1b 021ca1e9646ddc0348c787c83dc4db9d8b088e42a099196a97d21ad8a5a75e0b Loading...

	#4 Write - b9216ec213b156051642d3a3d2441066	962 B	2023-03-13	2024-04-27
Pretty Observations First Seen2023-03-13 13:52:40 Last Seen2024-04-27 07:46:38 Times Seen1072 Hash b9216ec213b156051642d3a3d2441066 95376479a4f93e2b751a018fa1cd1632e933e597 bc731c56133eb2cf058bf1eb2932d13df5bcb5e41695dcbb35c2d5d970967f7c Loading...

	#5 Write - 06367dd871eba9f4ed0a23868655a763	1.4 MB	2023-09-02	2024-04-20
Pretty Observations First Seen2023-09-02 05:21:19 Last Seen2024-04-20 19:16:16 Times Seen6 Hash 06367dd871eba9f4ed0a23868655a763 1d8ba83773bbf9ccaa274d8ecb5f0ac40f8429a4 5c2fa588e027445e839da76184aad68507139938b4c5d60f5b2c72e1f9112837 Loading...

	#6 Write - 94e3c6646e4c1fd32be945c0eaaa2689	1.4 MB	2023-09-02	2024-04-20
Pretty Observations First Seen2023-09-02 05:21:19 Last Seen2024-04-20 19:16:16 Times Seen6 Hash 94e3c6646e4c1fd32be945c0eaaa2689 ba94ca4f9139ccbc8754ec95613529662f5a16ed ba6c3935d46ee8f69c7f9dc214ed70a35f8bf8b437a00e2842df12f37f43998b Loading...

	#7 Write - 3c48253f40bbc84e7a1099eb9a10dc2f	481 kB	2023-09-02	2024-04-20
Pretty Observations First Seen2023-09-02 05:21:19 Last Seen2024-04-20 19:16:16 Times Seen6 Hash 3c48253f40bbc84e7a1099eb9a10dc2f a6f00c352c5f0a5ca50a6251b6eefa440a3b5025 a2b5f0429c54d66b06cdade6864cbbca6f723d493cfcdc01f3463ea1492146b3 Loading...

HTTP Transactions (24)

URL IP Response Size

code.jquery.com/jquery-3.4.1.min.js

151.101.130.137

200 OK

31 kB

URL GET HTTP/2
code.jquery.com/jquery-3.4.1.min.js
IP
151.101.130.137:443
ASN
#54113 FASTLY

Requested by
https://shared-unit-118f.7n8o27al.workers.dev/
Certificate
IssuerSectigo Limited
Subject*.jquery.com
FingerprintD2:19:0A:AD:CE:BB:9C:61:17:5D:29:4B:A2:54:E8:C6:91:B8:F9:8D
ValidityTue, 11 Jul 2023 00:00:00 GMT - Sun, 14 Jul 2024 23:59:59 GMT

File type
JavaScript source, ASCII text, with very long lines (65451)
Size
31 kB (30638 bytes)
Hash
220afd743d9e9643852e31a135a9f3ae
88523924351bac0b5d560fe0c5781e2556e7693d
0925e8ad7bd971391a8b1e98be8e87a6971919eb5b60c196485941c3c1df089a

HTTP Headers

GET /jquery-3.4.1.min.js HTTP/1.1
Host: code.jquery.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://shared-unit-118f.7n8o27al.workers.dev/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Fri, 18 Oct 1991 12:00:00 GMT
etag: W/"28feccc0-15851"
cache-control: public, max-age=31536000, stale-while-revalidate=604800
access-control-allow-origin: *
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Fri, 29 Mar 2024 05:12:03 GMT
age: 3607620
x-served-by: cache-lga21965-LGA, cache-hel1410027-HEL
x-cache: HIT, HIT
x-cache-hits: 23, 653027
x-timer: S1711689123.164642,VS0,VE0
vary: Accept-Encoding
content-length: 30638
X-Firefox-Spdy: h2

codesandbox.io/static/js/banner.d9cb10a38.js

172.64.154.107

200 OK

1.7 kB

URL GET HTTP/2
codesandbox.io/static/js/banner.d9cb10a38.js
IP
172.64.154.107:443
ASN
#13335 CLOUDFLARENET

Requested by
https://shared-unit-118f.7n8o27al.workers.dev/
Certificate
IssuerLet's Encrypt
Subjectcodesandbox.io
Fingerprint07:3E:75:0B:F2:71:AF:23:54:EF:53:35:B2:91:F5:98:97:FB:88:A3
ValidityMon, 25 Mar 2024 01:49:20 GMT - Sun, 23 Jun 2024 01:49:19 GMT

File type
JavaScript source, ASCII text, with very long lines (3789)
Size
1.7 kB (1705 bytes)
Hash
7276e5de19625bde798fd48cbcc7c5ad
107dba2e074af92f069ef603620112baa87e93b5
74850bad3411bc2540a6928159967088a555cb990e9569065a878e9e8a864830

HTTP Headers

GET /static/js/banner.d9cb10a38.js HTTP/1.1
Host: codesandbox.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://shared-unit-118f.7n8o27al.workers.dev/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Fri, 29 Mar 2024 05:12:03 GMT
content-type: application/javascript
last-modified: Wed, 22 Nov 2023 10:23:27 GMT
vary: Accept-Encoding
etag: W/"655dd69f-efa"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
access-control-allow-methods: GET
via: 1.1 google
alt-svc: h3=":443"; ma=86400
cf-cache-status: HIT
age: 4778430
set-cookie: _cfuvid=e.KpBgIVdc4i1iRi2CH34yXKM1Cr9U.TFXi_41AJyGU-1711689123176-0.0.1.1-604800000; path=/; domain=.codesandbox.io; HttpOnly; Secure; SameSite=None
server: cloudflare
cf-ray: 86bd5cdbcc6756c5-OSL
content-encoding: br
X-Firefox-Spdy: h2

api.rename-service0.workers.dev/heagregauwe.png

172.67.209.83

200 OK

1.7 kB

URL GET HTTP/2
api.rename-service0.workers.dev/heagregauwe.png
IP
172.67.209.83:443
ASN
#13335 CLOUDFLARENET

Requested by
https://shared-unit-118f.7n8o27al.workers.dev/
Certificate
IssuerGoogle Trust Services LLC
Subjectrename-service0.workers.dev
FingerprintDD:78:66:F0:B8:A6:6F:26:2E:FC:06:42:8C:D5:B6:F6:0B:42:3A:17
ValidityWed, 07 Feb 2024 08:06:45 GMT - Tue, 07 May 2024 08:06:44 GMT

File type
PNG image data, 128 x 28, 8-bit/color RGBA, non-interlaced
Size
1.7 kB (1737 bytes)
Hash
d44e44807a2c4cb00a239af39d565264
aa8f4de7d37140a3bca9725cd791da8283a7a5b4
7248b8c4a08b8a45d4add928a459a98f12d61c02f5a7886f14bec7084e8ffdcb

HTTP Headers

GET /heagregauwe.png HTTP/1.1
Host: api.rename-service0.workers.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Fri, 29 Mar 2024 05:12:05 GMT
content-type: image/png
content-length: 1737
cf-ray: 86bd5ce72ed4712e-OSL
cf-cache-status: HIT
accept-ranges: bytes
age: 171182
etag: "heagregauwe.b2def557d4.png"
vary: Accept-Encoding
feature-policy: none
referrer-policy: unsafe-url
x-content-type-options: nosniff
x-frame-options: DENY
x-xss-protection: 1; mode=block
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=IR5CTH4ZlWtY%2FAKQs%2FLc7qMrOMZCzG7G8h6cnDnhDZ0aS3yyGT1jRcfX%2BYXI08Klc6G9pTAjN9OpBWTQp58FLRkdwefJZceKZBP1K%2B%2Bx6yvZ60wcZndXbqKOOtySKfcrynG%2BG0vSndTCNklL8lYfb9Rs"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

api.rename-service0.workers.dev/otSDKStub.js/consent//.json

172.67.209.83

404 Not Found

1.2 kB

URL GET HTTP/3
api.rename-service0.workers.dev/otSDKStub.js/consent//.json
IP
172.67.209.83:443
ASN
#13335 CLOUDFLARENET

Requested by
https://shared-unit-118f.7n8o27al.workers.dev/
Certificate
IssuerGoogle Trust Services LLC
Subjectrename-service0.workers.dev
FingerprintDD:78:66:F0:B8:A6:6F:26:2E:FC:06:42:8C:D5:B6:F6:0B:42:3A:17
ValidityWed, 07 Feb 2024 08:06:45 GMT - Tue, 07 May 2024 08:06:44 GMT

File type
HTML document, ASCII text
Size
1.2 kB (1228 bytes)
Hash
2651ace67d355424b9fab1835e9e4999
9cb906ac8673baae3c257119aba1748925b5ff9c
adb3f83748bb48498ab46c1c2d8e88ca9e982e5412231beef5a5a80bd045d1e0

HTTP Headers

GET /otSDKStub.js/consent//.json HTTP/1.1
Host: api.rename-service0.workers.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://shared-unit-118f.7n8o27al.workers.dev
DNT: 1
Connection: keep-alive
Referer: https://shared-unit-118f.7n8o27al.workers.dev/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 404 Not Found
date: Fri, 29 Mar 2024 05:12:05 GMT
content-length: 1228
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=QRIUOWa6APkqPWxgF4uY1e%2FebnA7R5%2Br8qduZk%2FUtWs3z%2FPIQd8%2FUDBPDvirvi6X8bupEtgak1XAXhuCO22dc8PESvDKyzxws9phxMyzLtiUpH3i1N5oeABCAEUOI8806uNKuxZAsIPwogxMu7XjVlhZ"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 86bd5ce88b8e5697-OSL
alt-svc: h3=":443"; ma=86400

api.rename-service0.workers.dev/jquery-3.5.1.min.js

172.67.209.83

200 OK

40 kB

URL GET HTTP/2
api.rename-service0.workers.dev/jquery-3.5.1.min.js
IP
172.67.209.83:443
ASN
#13335 CLOUDFLARENET

Requested by
https://shared-unit-118f.7n8o27al.workers.dev/
Certificate
IssuerGoogle Trust Services LLC
Subjectrename-service0.workers.dev
FingerprintDD:78:66:F0:B8:A6:6F:26:2E:FC:06:42:8C:D5:B6:F6:0B:42:3A:17
ValidityWed, 07 Feb 2024 08:06:45 GMT - Tue, 07 May 2024 08:06:44 GMT

File type
JavaScript source, ASCII text, with very long lines (65450), with CRLF line terminators
Size
40 kB (39943 bytes)
Hash
b61aa6e2d68d21b3546b5b418bf0e9c3
9c1398f0de4c869dacb1c9ab1a8cc327f5421ff7
f36844906ad2309877aae3121b87fb15b9e09803cb4c333adc7e1e35ac92e14b

HTTP Headers

GET /jquery-3.5.1.min.js HTTP/1.1
Host: api.rename-service0.workers.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Fri, 29 Mar 2024 05:12:05 GMT
content-type: application/javascript; charset=utf-8
cf-ray: 86bd5ce72ed7712e-OSL
cf-cache-status: HIT
age: 171182
etag: W/"jquery-3.5.1.min.76bb118f46.js"
vary: Accept-Encoding
feature-policy: none
referrer-policy: unsafe-url
x-content-type-options: nosniff
x-frame-options: DENY
x-xss-protection: 1; mode=block
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=zJRButK7E4D9m8qzyDCtIQJytuGOjYCtgaKh6Sj%2FXplwz9NurTSqgsGWMk6pxcVZfaowFb0Z%2FvYAq%2FWhK8b8sWg26Pd0iY6vu6XsvXaqcfpXEP%2FAdRGE%2B5IZo7sh1E1XGyn%2B3pU4AAPfneRO8sGkV7NI"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

api.rename-service0.workers.dev/166.css

172.67.209.83

200 OK

7.1 kB

URL GET HTTP/3
api.rename-service0.workers.dev/166.css
IP
172.67.209.83:443
ASN
#13335 CLOUDFLARENET

Requested by
https://shared-unit-118f.7n8o27al.workers.dev/
Certificate
IssuerGoogle Trust Services LLC
Subjectrename-service0.workers.dev
FingerprintDD:78:66:F0:B8:A6:6F:26:2E:FC:06:42:8C:D5:B6:F6:0B:42:3A:17
ValidityWed, 07 Feb 2024 08:06:45 GMT - Tue, 07 May 2024 08:06:44 GMT

File type
ASCII text, with very long lines (362)
Size
7.1 kB (7111 bytes)
Hash
803e560fb4cbf4cfb2ac3e0ab8231b9a
77ff7da2d5218e988deaa4abb14c38f749f2ed7b
0c98d3a9b8c08a5813b773e49994d1ada4cb43a72f655c71b8efa33dbacc3f60

HTTP Headers

GET /166.css HTTP/1.1
Host: api.rename-service0.workers.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 29 Mar 2024 05:12:05 GMT
content-type: text/css; charset=utf-8
cf-ray: 86bd5ce88d4456cb-OSL
cf-cache-status: HIT
age: 171181
etag: W/"166.32916c6d57.css"
vary: Accept-Encoding
feature-policy: none
referrer-policy: unsafe-url
x-content-type-options: nosniff
x-frame-options: DENY
x-xss-protection: 1; mode=block
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=hjzEEY90tJsqKVopGF9Zyd6OojwLM0sBTLEJ5ZxehiUrp8MtR2bejUFFoQHdxhrxMbV66rGa1iTLUCLMLQd3axB2gFxD52TuPwqV%2FXe%2F1j46qv9yXEp1OG%2BGUfX70DD2o0H4pk2ptSfLQYDHXFb5kqrn"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
content-encoding: br
alt-svc: h3=":443"; ma=86400

api.rename-service0.workers.dev/css?family=PT+Sans:400italic

172.67.209.83

200 OK

7.1 kB

URL GET HTTP/3
api.rename-service0.workers.dev/css?family=PT+Sans:400italic
IP
172.67.209.83:443
ASN
#13335 CLOUDFLARENET

Requested by
https://shared-unit-118f.7n8o27al.workers.dev/
Certificate
IssuerGoogle Trust Services LLC
Subjectrename-service0.workers.dev
FingerprintDD:78:66:F0:B8:A6:6F:26:2E:FC:06:42:8C:D5:B6:F6:0B:42:3A:17
ValidityWed, 07 Feb 2024 08:06:45 GMT - Tue, 07 May 2024 08:06:44 GMT

File type
ASCII text, with very long lines (7246), with no line terminators
Size
7.1 kB (7070 bytes)
Hash
45239f251b1582f037d06660716ed308
a3251fb6285d5cfca557b73816b767ca150545fe
2bd38bdd2bba893c5e3d524f54171835f4057bafd37404a22196a835dc176ab0

HTTP Headers

GET /css?family=PT+Sans:400italic HTTP/1.1
Host: api.rename-service0.workers.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Fri, 29 Mar 2024 05:12:05 GMT
content-type: text/css; charset=utf-8
cf-ray: 86bd5ce87d3956cb-OSL
cf-cache-status: HIT
age: 171181
etag: W/"css.1da7928062"
vary: Accept-Encoding
feature-policy: none
referrer-policy: unsafe-url
x-content-type-options: nosniff
x-frame-options: DENY
x-xss-protection: 1; mode=block
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2BpglFtcXUlI2I6%2FkQlVw450BaBXcdzmO3NEbN7GnFEhebqYRlEUuzOI8UmQsT3PMDf3ROdbysrS3oKl7ZeS7%2FiNey1O6yLO1secihQP2Ro7tNNc14K1v3Us%2FbuzhT2vH00SeRb0smkxohd8%2FTE9kncvQ"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
content-encoding: br
alt-svc: h3=":443"; ma=86400

api.rename-service0.workers.dev/base_external.css

172.67.209.83

200 OK

30 kB

URL GET HTTP/3
api.rename-service0.workers.dev/base_external.css
IP
172.67.209.83:443
ASN
#13335 CLOUDFLARENET

Requested by
https://shared-unit-118f.7n8o27al.workers.dev/
Certificate
IssuerGoogle Trust Services LLC
Subjectrename-service0.workers.dev
FingerprintDD:78:66:F0:B8:A6:6F:26:2E:FC:06:42:8C:D5:B6:F6:0B:42:3A:17
ValidityWed, 07 Feb 2024 08:06:45 GMT - Tue, 07 May 2024 08:06:44 GMT

File type
ASCII text, with very long lines (30269)
Size
30 kB (30345 bytes)
Hash
fada22ae6813bebe5f4e709d296a20b2
9b26b404c2dbe3b7136de5dd54b1c07d268a9db2
891410621746b2ff6d1e4830eb0d819521c9b01e9e213257fcd4d2f554ff1a61

HTTP Headers

GET /base_external.css HTTP/1.1
Host: api.rename-service0.workers.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Fri, 29 Mar 2024 05:12:05 GMT
content-type: text/css; charset=utf-8
cf-ray: 86bd5ce87d4056cb-OSL
cf-cache-status: HIT
age: 171181
etag: W/"base_external.4e102eeb51.css"
vary: Accept-Encoding
feature-policy: none
referrer-policy: unsafe-url
x-content-type-options: nosniff
x-frame-options: DENY
x-xss-protection: 1; mode=block
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=dTRHdw9nfqij4LE5xrAf%2B%2BoBBfypRv7ylq7%2F3xUG31%2FMAj%2FkEtM9Rurn3mgJKG1tQy%2BvFr8ApxwKT83kf1y9NX7s8jY8eM7bTmL0gRTP5noG%2BRL3hMviJku5gedjKkbIc62BcWAsFIetu1nUrHDXcutg"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
content-encoding: br
alt-svc: h3=":443"; ma=86400

codesandbox.io/public/sse-hooks/sse-hooks.7a01a0f7b828579aff40884fc77e13bc.js

172.64.154.107

200 OK

176 kB

URL GET HTTP/2
codesandbox.io/public/sse-hooks/sse-hooks.7a01a0f7b828579aff40884fc77e13bc.js
IP
172.64.154.107:443
ASN
#13335 CLOUDFLARENET

Requested by
https://shared-unit-118f.7n8o27al.workers.dev/
Certificate
IssuerLet's Encrypt
Subjectcodesandbox.io
Fingerprint07:3E:75:0B:F2:71:AF:23:54:EF:53:35:B2:91:F5:98:97:FB:88:A3
ValidityMon, 25 Mar 2024 01:49:20 GMT - Sun, 23 Jun 2024 01:49:19 GMT

File type

Size
176 kB (176547 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /public/sse-hooks/sse-hooks.7a01a0f7b828579aff40884fc77e13bc.js HTTP/1.1
Host: codesandbox.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://shared-unit-118f.7n8o27al.workers.dev/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Fri, 29 Mar 2024 05:12:03 GMT
content-type: application/javascript
last-modified: Wed, 28 Feb 2024 15:36:48 GMT
vary: Accept-Encoding
etag: W/"65df5310-2b1a3"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
access-control-allow-methods: GET
via: 1.1 google
alt-svc: h3=":443"; ma=86400
cf-cache-status: HIT
age: 2554005
set-cookie: _cfuvid=p5IfMv_fWDAcUY2lJVfng5EJ.RqbZ2nnamvpDFo969s-1711689123177-0.0.1.1-604800000; path=/; domain=.codesandbox.io; HttpOnly; Secure; SameSite=None
server: cloudflare
cf-ray: 86bd5cdbcc6c56c5-OSL
content-encoding: br
X-Firefox-Spdy: h2

codesandbox.io/api/v1/sandboxes/shared-unit-118f/phishing

172.64.154.107

404 Not Found

29 B

URL GET HTTP/2
codesandbox.io/api/v1/sandboxes/shared-unit-118f/phishing
IP
172.64.154.107:443
ASN
#13335 CLOUDFLARENET

Requested by
https://shared-unit-118f.7n8o27al.workers.dev/
Certificate
IssuerLet's Encrypt
Subjectcodesandbox.io
Fingerprint07:3E:75:0B:F2:71:AF:23:54:EF:53:35:B2:91:F5:98:97:FB:88:A3
ValidityMon, 25 Mar 2024 01:49:20 GMT - Sun, 23 Jun 2024 01:49:19 GMT

File type
troff or preprocessor input, ASCII text, with no line terminators
Size
29 B (29 bytes)
Hash
338d247cfd4a98a37e2fa6612398e3fd
5f9e8a74db526c50bd79d07511dbedd2274401c6
63d2c3d41458e26ea0117f98b92af156d1f8cac5e88aaf1e12817544d4cc0595

HTTP Headers

GET /api/v1/sandboxes/shared-unit-118f/phishing HTTP/1.1
Host: codesandbox.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://shared-unit-118f.7n8o27al.workers.dev/
Origin: https://shared-unit-118f.7n8o27al.workers.dev
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 404 Not Found
date: Fri, 29 Mar 2024 05:12:03 GMT
content-type: application/json; charset=utf-8
content-length: 29
cache-control: private, max-age=0, no-cache, no-store
x-request-id: F8EkMFpbrd8zwGoCe4zm
via: 1.1 google
alt-svc: h3=":443"; ma=86400
cf-cache-status: DYNAMIC
set-cookie: signedIn=; path=/; expires=Thu, 01 Jan 1970 00:00:00 GMT; max-age=0; HttpOnly
_cfuvid=p0cmIT77hjvPsHit7hkAbRsq4WAQNmJjnGPppKHOklE-1711689123490-0.0.1.1-604800000; path=/; domain=.codesandbox.io; HttpOnly; Secure; SameSite=None
server: cloudflare
cf-ray: 86bd5cdd8bf8712a-OSL
X-Firefox-Spdy: h2

shared-unit-118f.7n8o27al.workers.dev/favicon.ico

0.0.0.0

0 B

URL GET
shared-unit-118f.7n8o27al.workers.dev/favicon.ico
IP
0.0.0.0:0
ASN
#0

Requested by
https://shared-unit-118f.7n8o27al.workers.dev/
Certificate
IssuerGoogle Trust Services LLC
Subject7n8o27al.workers.dev
Fingerprint8F:AA:C2:4D:82:0D:04:E6:98:56:9F:A9:3C:06:F4:C0:C5:96:70:98
ValiditySun, 25 Feb 2024 12:24:02 GMT - Sat, 25 May 2024 12:24:01 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	InterActiveCorp
PhishTank	phishing	Other

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: shared-unit-118f.7n8o27al.workers.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://shared-unit-118f.7n8o27al.workers.dev/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

api.rename-service0.workers.dev/otSDKStub.js

172.67.209.83

200 OK

19 kB

URL GET HTTP/2
api.rename-service0.workers.dev/otSDKStub.js
IP
172.67.209.83:443
ASN
#13335 CLOUDFLARENET

Requested by
https://shared-unit-118f.7n8o27al.workers.dev/
Certificate
IssuerGoogle Trust Services LLC
Subjectrename-service0.workers.dev
FingerprintDD:78:66:F0:B8:A6:6F:26:2E:FC:06:42:8C:D5:B6:F6:0B:42:3A:17
ValidityWed, 07 Feb 2024 08:06:45 GMT - Tue, 07 May 2024 08:06:44 GMT

File type
JavaScript source, ASCII text, with very long lines (19050)
Size
19 kB (19051 bytes)
Hash
9bd02f97086983b13a1ba0f2ace23a34
b7da87ca35222ded535d85d1a2d8ed33c734f2c3
11b947e74a7ba8f1d433b84ab7a719799ec0662a9035a8b4a2ab4d7d1eb2d681

HTTP Headers

GET /otSDKStub.js HTTP/1.1
Host: api.rename-service0.workers.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Fri, 29 Mar 2024 05:12:05 GMT
content-type: application/javascript; charset=utf-8
cf-ray: 86bd5ce72ed3712e-OSL
cf-cache-status: HIT
age: 171182
etag: W/"otSDKStub.3b2ba3d591.js"
vary: Accept-Encoding
feature-policy: none
referrer-policy: unsafe-url
x-content-type-options: nosniff
x-frame-options: DENY
x-xss-protection: 1; mode=block
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=7GYOP2a%2Fu5J19LyHKD8%2FAF1IC8ZTg%2FTvtdgY%2BH6k6TueV8MyXDxwYILh39D5OQAwKDi6NvOgXQf0FNKLAKaVdkg5fGES0I6BAZPoOkVCRC5Ag6JDEbOWGmMKxffvEV%2FwpDDLTyr%2BPeiZUF3B9aNTzZKS"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

api.rename-service0.workers.dev/css?family=PT+Sans:700

172.67.209.83

200 OK

7.1 kB

URL GET HTTP/3
api.rename-service0.workers.dev/css?family=PT+Sans:700
IP
172.67.209.83:443
ASN
#13335 CLOUDFLARENET

Requested by
https://shared-unit-118f.7n8o27al.workers.dev/
Certificate
IssuerGoogle Trust Services LLC
Subjectrename-service0.workers.dev
FingerprintDD:78:66:F0:B8:A6:6F:26:2E:FC:06:42:8C:D5:B6:F6:0B:42:3A:17
ValidityWed, 07 Feb 2024 08:06:45 GMT - Tue, 07 May 2024 08:06:44 GMT

File type
ASCII text, with very long lines (7246), with no line terminators
Size
7.1 kB (7070 bytes)
Hash
45239f251b1582f037d06660716ed308
a3251fb6285d5cfca557b73816b767ca150545fe
2bd38bdd2bba893c5e3d524f54171835f4057bafd37404a22196a835dc176ab0

HTTP Headers

GET /css?family=PT+Sans:700 HTTP/1.1
Host: api.rename-service0.workers.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Fri, 29 Mar 2024 05:12:05 GMT
content-type: text/css; charset=utf-8
cf-ray: 86bd5ce87d3856cb-OSL
cf-cache-status: HIT
age: 171181
etag: W/"css.1da7928062"
vary: Accept-Encoding
feature-policy: none
referrer-policy: unsafe-url
x-content-type-options: nosniff
x-frame-options: DENY
x-xss-protection: 1; mode=block
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=EWOgFvOvzKJKIc2fxil4kZVAwpRA3HYppIeEPspRj0tMHG%2FqStClS5%2B4op2eZCIE5DdUUwOb2f0zLyRa9GExdmxqPP%2FTZFeBr11v%2FA9xn0tAuvlOlJyB5V6uU7cH9OfVVCpRtG8KWyajDx4LMfHUIQJc"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
content-encoding: br
alt-svc: h3=":443"; ma=86400

imgs.rename-service0.workers.dev/782yfuiha4398.ico

0.0.0.0

0 B

URL GET
imgs.rename-service0.workers.dev/782yfuiha4398.ico
IP
0.0.0.0:0
ASN
#0

Requested by
https://shared-unit-118f.7n8o27al.workers.dev/
Certificate
IssuerGoogle Trust Services LLC
Subjectrename-service0.workers.dev
FingerprintDD:78:66:F0:B8:A6:6F:26:2E:FC:06:42:8C:D5:B6:F6:0B:42:3A:17
ValidityWed, 07 Feb 2024 08:06:45 GMT - Tue, 07 May 2024 08:06:44 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /782yfuiha4398.ico HTTP/1.1
Host: imgs.rename-service0.workers.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Fri, 29 Mar 2024 05:12:06 GMT
content-type: image/vnd.microsoft.icon
cf-cache-status: MISS
etag: W/"782yfuiha4398.49f6f302d9.ico"
feature-policy: none
referrer-policy: unsafe-url
x-content-type-options: nosniff
x-frame-options: DENY
x-xss-protection: 1; mode=block
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=QfQxYy79Y9PB9ZQrWCChNEQnyBP3bUgf9HvI484NrwPg6pxy%2BvJv0A%2Frd%2FfmAVfxwqZeul2qG5PqMfxpt4hLov3QmA8AweMM4Fwvy2dNLccQJ2StTZEUsYanX4%2F2mpHt5Z2P%2B%2FQM2xrqEXjumCypL0QtBg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 86bd5ced8ea056cb-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

codesandbox.io/static/js/watermark-button.eeb14a97b.js

172.64.154.107

200 OK

2.8 kB

URL GET HTTP/2
codesandbox.io/static/js/watermark-button.eeb14a97b.js
IP
172.64.154.107:443
ASN
#13335 CLOUDFLARENET

Requested by
https://shared-unit-118f.7n8o27al.workers.dev/
Certificate
IssuerLet's Encrypt
Subjectcodesandbox.io
Fingerprint07:3E:75:0B:F2:71:AF:23:54:EF:53:35:B2:91:F5:98:97:FB:88:A3
ValidityMon, 25 Mar 2024 01:49:20 GMT - Sun, 23 Jun 2024 01:49:19 GMT

File type
JavaScript source, ASCII text, with very long lines (2837), with no line terminators
Size
2.8 kB (2753 bytes)
Hash
6c321bcb6ebed86792e592a9c063021e
a506b755615f3f187b7b3008ee1a260cae0fbed7
92858e05b426d8584f4685f4052e467a0b0e12c6c31e436723ccf800e8dcbe61

HTTP Headers

GET /static/js/watermark-button.eeb14a97b.js HTTP/1.1
Host: codesandbox.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://shared-unit-118f.7n8o27al.workers.dev
DNT: 1
Connection: keep-alive
Referer: https://shared-unit-118f.7n8o27al.workers.dev/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Fri, 29 Mar 2024 05:12:03 GMT
content-type: application/javascript
last-modified: Thu, 21 Mar 2024 12:00:39 GMT
vary: Accept-Encoding
etag: W/"65fc2167-ac1"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
access-control-allow-methods: GET
via: 1.1 google
alt-svc: h3=":443"; ma=86400
cf-cache-status: HIT
set-cookie: _cfuvid=bFAIysKIu036IBN848byRn7g3oAg5BalF8rOmxGVzN8-1711689123294-0.0.1.1-604800000; path=/; domain=.codesandbox.io; HttpOnly; Secure; SameSite=None
server: cloudflare
cf-ray: 86bd5cdbdba2712a-OSL
content-encoding: br
X-Firefox-Spdy: h2

api.rename-service0.workers.dev/js?id=UA-1817027-45

172.67.209.83

200 OK

96 kB

URL GET HTTP/2
api.rename-service0.workers.dev/js?id=UA-1817027-45
IP
172.67.209.83:443
ASN
#13335 CLOUDFLARENET

Requested by
https://shared-unit-118f.7n8o27al.workers.dev/
Certificate
IssuerGoogle Trust Services LLC
Subjectrename-service0.workers.dev
FingerprintDD:78:66:F0:B8:A6:6F:26:2E:FC:06:42:8C:D5:B6:F6:0B:42:3A:17
ValidityWed, 07 Feb 2024 08:06:45 GMT - Tue, 07 May 2024 08:06:44 GMT

File type
JavaScript source, ASCII text, with very long lines (1567)
Size
96 kB (96388 bytes)
Hash
c1277eaf2fba47836bedee41d16ed8d0
716f0753108d0704e98e9bfa0672851b1cf79519
2cfb61c5b4464a49bf1a1867ab3c06ad790468ab0d6b3dec415a5929b20dac85

HTTP Headers

GET /js?id=UA-1817027-45 HTTP/1.1
Host: api.rename-service0.workers.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Fri, 29 Mar 2024 05:12:05 GMT
content-type: application/javascript; charset=utf-8
cf-ray: 86bd5ce72ed6712e-OSL
cf-cache-status: HIT
age: 171182
etag: W/"js.28fa744248"
vary: Accept-Encoding
feature-policy: none
referrer-policy: unsafe-url
x-content-type-options: nosniff
x-frame-options: DENY
x-xss-protection: 1; mode=block
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=V9xXU36wil90C6cZqYuRNLfh4cb7iBWkOyL7%2FzAqfW%2BT8R68WLn0q%2FidT21Hkz9OZwsPrxDhtb%2FssNflfFaTipkBDI5Brqfwmlv4VkVBOD8n2WqJfXbq7prlrUcXtKlmDxSl5UcIpKzCgrq5nPjko0Ph"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

api.rename-service0.workers.dev/moment.min.js

172.67.209.83

200 OK

18 kB

URL GET HTTP/2
api.rename-service0.workers.dev/moment.min.js
IP
172.67.209.83:443
ASN
#13335 CLOUDFLARENET

Requested by
https://shared-unit-118f.7n8o27al.workers.dev/
Certificate
IssuerGoogle Trust Services LLC
Subjectrename-service0.workers.dev
FingerprintDD:78:66:F0:B8:A6:6F:26:2E:FC:06:42:8C:D5:B6:F6:0B:42:3A:17
ValidityWed, 07 Feb 2024 08:06:45 GMT - Tue, 07 May 2024 08:06:44 GMT

File type
JavaScript source, ASCII text, with very long lines (17967), with CRLF line terminators
Size
18 kB (18058 bytes)
Hash
84d735d23a016342e3d247476caecfd2
ba0bf8f19793ef81b0a15b9a41a3463b0c6e6ed9
5a52005e60e92f39a0744fe733d45496ad3769634edbbbc74df1267f9639f522

HTTP Headers

GET /moment.min.js HTTP/1.1
Host: api.rename-service0.workers.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Fri, 29 Mar 2024 05:12:05 GMT
content-type: application/javascript; charset=utf-8
cf-ray: 86bd5ce72ed9712e-OSL
cf-cache-status: HIT
age: 171182
etag: W/"moment.min.7f22d534a7.js"
vary: Accept-Encoding
feature-policy: none
referrer-policy: unsafe-url
x-content-type-options: nosniff
x-frame-options: DENY
x-xss-protection: 1; mode=block
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=vwBUY8omBwkmeVGIk1bFsY9dfzUcJBKyN2fFvke5uacb2BJ2KzKIZUrIjs3ZotXoePZTtdVh%2FZ7XCr90lVqqFkvYadUutKQUQNZa1SwYDp3DJIOYvoCqAY7K1XY%2F5LH%2BhVe3BPZ1eEH8ropBNhEV9lQ1"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

api.rename-service0.workers.dev/redesign_fonts.css

172.67.209.83

200 OK

4.8 kB

URL GET HTTP/3
api.rename-service0.workers.dev/redesign_fonts.css
IP
172.67.209.83:443
ASN
#13335 CLOUDFLARENET

Requested by
https://shared-unit-118f.7n8o27al.workers.dev/
Certificate
IssuerGoogle Trust Services LLC
Subjectrename-service0.workers.dev
FingerprintDD:78:66:F0:B8:A6:6F:26:2E:FC:06:42:8C:D5:B6:F6:0B:42:3A:17
ValidityWed, 07 Feb 2024 08:06:45 GMT - Tue, 07 May 2024 08:06:44 GMT

File type
ASCII text, with very long lines (5109), with no line terminators
Size
4.8 kB (4752 bytes)
Hash
1140797b975a97c858b5c89932788501
d8fd9eca263f7afda861b2a27f7294754edff425
8dd3051b351fefb5a22ed6fa416f30834cab45acf060f1ea992a8b4880c6da39

HTTP Headers

GET /redesign_fonts.css HTTP/1.1
Host: api.rename-service0.workers.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Fri, 29 Mar 2024 05:12:05 GMT
content-type: text/css; charset=utf-8
cf-ray: 86bd5ce87d3e56cb-OSL
cf-cache-status: HIT
age: 171181
etag: W/"redesign_fonts.ab1e65f9f5.css"
vary: Accept-Encoding
feature-policy: none
referrer-policy: unsafe-url
x-content-type-options: nosniff
x-frame-options: DENY
x-xss-protection: 1; mode=block
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=q0SrInblH2WfHa%2FAHO2NvSW8RHtsbRBA1I4P8Rx0DwdiaKsx4MbAj9NSRTwTDFfs4mfTv3SA3UBHWbUeU7FPckOn6nA6k1GG4Ge5zGlEBiKHb6XfVBt%2B%2FLRI4iyKnJwGR3O9IdaQAfeMrKkeeq4xJ%2BWg"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
content-encoding: br
alt-svc: h3=":443"; ma=86400

api.rename-service0.workers.dev/theme.css

172.67.209.83

200 OK

38 kB

URL GET HTTP/3
api.rename-service0.workers.dev/theme.css
IP
172.67.209.83:443
ASN
#13335 CLOUDFLARENET

Requested by
https://shared-unit-118f.7n8o27al.workers.dev/
Certificate
IssuerGoogle Trust Services LLC
Subjectrename-service0.workers.dev
FingerprintDD:78:66:F0:B8:A6:6F:26:2E:FC:06:42:8C:D5:B6:F6:0B:42:3A:17
ValidityWed, 07 Feb 2024 08:06:45 GMT - Tue, 07 May 2024 08:06:44 GMT

File type
ASCII text, with very long lines (545), with CRLF line terminators
Size
38 kB (38109 bytes)
Hash
162daeeb0799f271e39f242ba683fee8
669dbe3050c3cd6d9ce73ba57ab5a48500b44361
92023afd6feb8f5fe2ab0b2622ddae9e26d5027996df15fe0b33714c7f3dba37

HTTP Headers

GET /theme.css HTTP/1.1
Host: api.rename-service0.workers.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Fri, 29 Mar 2024 05:12:05 GMT
content-type: text/css; charset=utf-8
cf-cache-status: MISS
etag: W/"theme.5cf2c65f5e.css"
feature-policy: none
referrer-policy: unsafe-url
x-content-type-options: nosniff
x-frame-options: DENY
x-xss-protection: 1; mode=block
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=fAH%2BssJjIaQkp2g1YyHvzHFmMhjDj%2Bdf2BYkbg%2Foty%2FuIAOMoyi5t%2F6lfxVDlN02pWvAgdjrqcK4D2Kpf5SbL9i5B6QOEJX8GpziM5AtMxv79yToHBkrNotvlLrtPMQNUCmyxyGR0uMRnxjxf13Q%2B%2Bkk"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 86bd5ce88d4756cb-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

shared-unit-118f.7n8o27al.workers.dev/

172.67.155.140

200 OK

2.6 MB

URL User Request GET HTTP/2
shared-unit-118f.7n8o27al.workers.dev/
IP
172.67.155.140:443
ASN
#13335 CLOUDFLARENET

Certificate
IssuerGoogle Trust Services LLC
Subject7n8o27al.workers.dev
Fingerprint8F:AA:C2:4D:82:0D:04:E6:98:56:9F:A9:3C:06:F4:C0:C5:96:70:98
ValiditySun, 25 Feb 2024 12:24:02 GMT - Sat, 25 May 2024 12:24:01 GMT

File type

Size
2.6 MB (2569983 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	InterActiveCorp
PhishTank	phishing	Other

HTTP Headers

GET / HTTP/1.1
Host: shared-unit-118f.7n8o27al.workers.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Fri, 29 Mar 2024 05:12:02 GMT
content-type: text/html;charset=UTF-8
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=38hnpfS1%2FnSxzanuS5Bf7gf2Z3MKGA9eb%2BEk51lxNX9UpzvxrfHx3uKvvQsgxoczlCxED5uQtQJUc1Ez5kH9OxKmxv2l8kry3BlPmbT6ldjpruqKzCcOea6iV28NRjPkr6UxUP2PsivwqgwfuXY7Hn7AhV7toq%2Bd"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 86bd5cd88918b518-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

api.rename-service0.workers.dev/jquery-migrate-3.3.1.min.js

172.67.209.83

200 OK

11 kB

URL GET HTTP/2
api.rename-service0.workers.dev/jquery-migrate-3.3.1.min.js
IP
172.67.209.83:443
ASN
#13335 CLOUDFLARENET

Requested by
https://shared-unit-118f.7n8o27al.workers.dev/
Certificate
IssuerGoogle Trust Services LLC
Subjectrename-service0.workers.dev
FingerprintDD:78:66:F0:B8:A6:6F:26:2E:FC:06:42:8C:D5:B6:F6:0B:42:3A:17
ValidityWed, 07 Feb 2024 08:06:45 GMT - Tue, 07 May 2024 08:06:44 GMT

File type
JavaScript source, ASCII text, with very long lines (10878), with CRLF line terminators
Size
11 kB (10978 bytes)
Hash
68f90fa1b7a532a073bd613f011a9c97
a4fd8d2e4556e6348d067212da590d56dc30b8a5
90a8d6a27a26f746b4b263102f4fe120e956d99e3789325aafc7d6b7ca0ff0e4

HTTP Headers

GET /jquery-migrate-3.3.1.min.js HTTP/1.1
Host: api.rename-service0.workers.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Fri, 29 Mar 2024 05:12:05 GMT
content-type: application/javascript; charset=utf-8
cf-ray: 86bd5ce72ed8712e-OSL
cf-cache-status: HIT
age: 171182
etag: W/"jquery-migrate-3.3.1.min.4a9b3d1a73.js"
vary: Accept-Encoding
feature-policy: none
referrer-policy: unsafe-url
x-content-type-options: nosniff
x-frame-options: DENY
x-xss-protection: 1; mode=block
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=kaFODI%2FJKbaQwIDn1A3IYRGle6xF0o783NnEXTnX2Xr0AZ7Ea18Annw%2FThHSk7Xp%2BtYGuDPGvkpdEWX7jWGwyR6Ka6lx%2FoD2VQr2CR7lVf1jgKugE5iZUQ4lYMHSvebrzWX8TEdz65y%2Fd7fn2gSa253Y"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

api.rename-service0.workers.dev/css?family=PT+Sans:400

172.67.209.83

200 OK

7.1 kB

URL GET HTTP/3
api.rename-service0.workers.dev/css?family=PT+Sans:400
IP
172.67.209.83:443
ASN
#13335 CLOUDFLARENET

Requested by
https://shared-unit-118f.7n8o27al.workers.dev/
Certificate
IssuerGoogle Trust Services LLC
Subjectrename-service0.workers.dev
FingerprintDD:78:66:F0:B8:A6:6F:26:2E:FC:06:42:8C:D5:B6:F6:0B:42:3A:17
ValidityWed, 07 Feb 2024 08:06:45 GMT - Tue, 07 May 2024 08:06:44 GMT

File type
ASCII text, with very long lines (7246), with no line terminators
Size
7.1 kB (7070 bytes)
Hash
45239f251b1582f037d06660716ed308
a3251fb6285d5cfca557b73816b767ca150545fe
2bd38bdd2bba893c5e3d524f54171835f4057bafd37404a22196a835dc176ab0

HTTP Headers

GET /css?family=PT+Sans:400 HTTP/1.1
Host: api.rename-service0.workers.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Fri, 29 Mar 2024 05:12:05 GMT
content-type: text/css; charset=utf-8
cf-ray: 86bd5ce87d3756cb-OSL
cf-cache-status: HIT
age: 171181
etag: W/"css.1da7928062"
vary: Accept-Encoding
feature-policy: none
referrer-policy: unsafe-url
x-content-type-options: nosniff
x-frame-options: DENY
x-xss-protection: 1; mode=block
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=7BwViFofnq6E%2BSvfc4OKOTBO9ii64ghQef20AkdSOMu%2BRm7TbIk8%2FMT7rCSYciO38Xgp2%2FnG%2BXdr%2B2YbD7TSNV%2F%2F94VYsZAPoUbZ3De4V8s3CeghT2Bz1hQDwvqiZrhguu8c6n0dghpdXM64XDQTxnQM"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
content-encoding: br
alt-svc: h3=":443"; ma=86400

api.rename-service0.workers.dev/css?family=PT+Sans:700italic

172.67.209.83

200 OK

7.1 kB

URL GET HTTP/3
api.rename-service0.workers.dev/css?family=PT+Sans:700italic
IP
172.67.209.83:443
ASN
#13335 CLOUDFLARENET

Requested by
https://shared-unit-118f.7n8o27al.workers.dev/
Certificate
IssuerGoogle Trust Services LLC
Subjectrename-service0.workers.dev
FingerprintDD:78:66:F0:B8:A6:6F:26:2E:FC:06:42:8C:D5:B6:F6:0B:42:3A:17
ValidityWed, 07 Feb 2024 08:06:45 GMT - Tue, 07 May 2024 08:06:44 GMT

File type
ASCII text, with very long lines (7246), with no line terminators
Size
7.1 kB (7070 bytes)
Hash
45239f251b1582f037d06660716ed308
a3251fb6285d5cfca557b73816b767ca150545fe
2bd38bdd2bba893c5e3d524f54171835f4057bafd37404a22196a835dc176ab0

HTTP Headers

GET /css?family=PT+Sans:700italic HTTP/1.1
Host: api.rename-service0.workers.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Fri, 29 Mar 2024 05:12:05 GMT
content-type: text/css; charset=utf-8
cf-ray: 86bd5ce87d3b56cb-OSL
cf-cache-status: HIT
age: 171181
etag: W/"css.1da7928062"
vary: Accept-Encoding
feature-policy: none
referrer-policy: unsafe-url
x-content-type-options: nosniff
x-frame-options: DENY
x-xss-protection: 1; mode=block
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=uWxij%2BYWvHWt%2B3SGK%2BsIznXw67d7zNYVXU1H%2FpTG7n4YZvbY%2F63Cg6WM%2Fu6EVGUfXolwPBboTzjidN6I1eocooMcxoimrJPFSmHgPzjFKG6dHk7WSN8eZbXCaPziJvKX9IAQ0pKoEBQ%2BxE6x1XycLner"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
content-encoding: br
alt-svc: h3=":443"; ma=86400

api.rename-service0.workers.dev/font-1.2.css

172.67.209.83

200 OK

1.6 kB

URL GET HTTP/3
api.rename-service0.workers.dev/font-1.2.css
IP
172.67.209.83:443
ASN
#13335 CLOUDFLARENET

Requested by
https://shared-unit-118f.7n8o27al.workers.dev/
Certificate
IssuerGoogle Trust Services LLC
Subjectrename-service0.workers.dev
FingerprintDD:78:66:F0:B8:A6:6F:26:2E:FC:06:42:8C:D5:B6:F6:0B:42:3A:17
ValidityWed, 07 Feb 2024 08:06:45 GMT - Tue, 07 May 2024 08:06:44 GMT

File type
ASCII text, with very long lines (1665), with no line terminators
Size
1.6 kB (1625 bytes)
Hash
a51b2b6fa50bc70faef5910e19e1b35d
a409b40e3e92ec8e20b02239b9043beca4e6d5a3
d93a407ab19d1887a8a80515b78ea1e75b7775d47fd16da40ac180ce1666ed60

HTTP Headers

GET /font-1.2.css HTTP/1.1
Host: api.rename-service0.workers.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Fri, 29 Mar 2024 05:12:05 GMT
content-type: text/css; charset=utf-8
cf-ray: 86bd5ce87d3c56cb-OSL
cf-cache-status: HIT
age: 171181
etag: W/"font-1.2.c193dd3ef6.css"
vary: Accept-Encoding
feature-policy: none
referrer-policy: unsafe-url
x-content-type-options: nosniff
x-frame-options: DENY
x-xss-protection: 1; mode=block
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=9nVi2G2zAvTTM%2F6vlduWqlZ3C9cVTUTpSvNY3J%2FRTzVUj7z3TomD1ZQzUrgWUMWIOQkEayi6074XjDH8q5tk87ycjkSi5b9VDUcns4GIfW%2FgG2mMOCXA%2BQMzJpt9AtYxZj%2BfWbBLZl28%2FYSmSr0Mdkqc"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
content-encoding: br
alt-svc: h3=":443"; ma=86400

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (23)

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML