| prod-cdn.wetransfer.net/packs/media/actiefgrotesque/ActiefGrotesque_W_Regular-1f437876.woff | 54.230.111.37 | 200 OK | 31 kB |
URL GET HTTP/2prod-cdn.wetransfer.net/packs/media/actiefgrotesque/ActiefGrotesque_W_Regular-1f437876.woff IP54.230.111.37:443
Requested byhttps://lingering-thunder-0229.nguyenchong9455.workers.dev/css/runtimeapplication-bafdd8b86fd88bb4273d.js CertificateIssuerAmazon Subjectwetransfer.net Fingerprint0B:0D:65:82:74:97:1B:AD:60:D8:48:2B:7D:A7:00:EA:34:08:86:48 ValiditySun, 30 Jul 2023 00:00:00 GMT - Wed, 28 Aug 2024 23:59:59 GMT
File typeWeb Open Font Format, TrueType, length 31120, version 1.6554 Hash57cbbfdafc43e0deecc75a309dd042c6 b9cc2ff331b8520706de175f5b3fdba6731a9bfc a9117f16bdaa64c953b303bef951dfca6316ef59f1b7ca72d5b946b1d815f6a6
GET /packs/media/actiefgrotesque/ActiefGrotesque_W_Regular-1f437876.woff HTTP/1.1
Host: prod-cdn.wetransfer.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://lingering-thunder-0229.nguyenchong9455.workers.dev/
Origin: https://lingering-thunder-0229.nguyenchong9455.workers.dev
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: font/woff
content-length: 31120
date: Wed, 10 Apr 2024 21:58:06 GMT
last-modified: Thu, 21 Dec 2023 14:25:54 GMT
etag: "57cbbfdafc43e0deecc75a309dd042c6"
x-amz-server-side-encryption: AES256
cache-control: public, max-age=31536000
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 c26775cc34c23943f6f5cfc9a3da9b4a.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: aa4_RynLiaBA7r9NEs1bZGArP1EDmcfJy4Ach6RSEqnpeAgUoSXtDw==
age: 629918
X-Firefox-Spdy: h2
|
|
| prod-cdn.wetransfer.net/packs/media/gt-super-wt/GT-Super-WT-Super-1b214df1.woff | 54.230.111.37 | 200 OK | 43 kB |
URL GET HTTP/2prod-cdn.wetransfer.net/packs/media/gt-super-wt/GT-Super-WT-Super-1b214df1.woff IP54.230.111.37:443
Requested byhttps://lingering-thunder-0229.nguyenchong9455.workers.dev/css/runtimeapplication-bafdd8b86fd88bb4273d.js CertificateIssuerAmazon Subjectwetransfer.net Fingerprint0B:0D:65:82:74:97:1B:AD:60:D8:48:2B:7D:A7:00:EA:34:08:86:48 ValiditySun, 30 Jul 2023 00:00:00 GMT - Wed, 28 Aug 2024 23:59:59 GMT
File typeWeb Open Font Format, TrueType, length 43188, version 0.0 Hash55576599a2d772f9297c5036d355b1fb c52e4f9a59137105deb12a3de25ee7d5a15fd286 1e3d5d86432b9bfcdf25ce0e35fd23667cea86f6fa71fa920cd84abb70258f73
GET /packs/media/gt-super-wt/GT-Super-WT-Super-1b214df1.woff HTTP/1.1
Host: prod-cdn.wetransfer.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://lingering-thunder-0229.nguyenchong9455.workers.dev/
Origin: https://lingering-thunder-0229.nguyenchong9455.workers.dev
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: font/woff
content-length: 43188
date: Thu, 11 Apr 2024 18:24:22 GMT
last-modified: Thu, 21 Dec 2023 14:25:55 GMT
etag: "55576599a2d772f9297c5036d355b1fb"
x-amz-server-side-encryption: AES256
cache-control: public, max-age=31536000
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 c26775cc34c23943f6f5cfc9a3da9b4a.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 7Fi4yGuRNxgCNfPnR_dpA2fzZUFzSd03IKhC23aX7F4TqTOMo1hNHQ==
age: 556342
X-Firefox-Spdy: h2
|
|
| prod-cdn.wetransfer.net/packs/media/actiefgrotesque/ActiefGrotesque_W_Medium-293e86f0.woff | 54.230.111.37 | 200 OK | 32 kB |
URL GET HTTP/2prod-cdn.wetransfer.net/packs/media/actiefgrotesque/ActiefGrotesque_W_Medium-293e86f0.woff IP54.230.111.37:443
Requested byhttps://lingering-thunder-0229.nguyenchong9455.workers.dev/css/runtimeapplication-bafdd8b86fd88bb4273d.js CertificateIssuerAmazon Subjectwetransfer.net Fingerprint0B:0D:65:82:74:97:1B:AD:60:D8:48:2B:7D:A7:00:EA:34:08:86:48 ValiditySun, 30 Jul 2023 00:00:00 GMT - Wed, 28 Aug 2024 23:59:59 GMT
File typeWeb Open Font Format, TrueType, length 32124, version 1.6554 Hash868aedeefe7669e8a4f7196f7df5d058 45bd20ef2c6b717a2526efd98a01207979b2a623 d8700b022ef56752cd12ff224b3f409e84aeb8a43ac68ba052167096baf46555
GET /packs/media/actiefgrotesque/ActiefGrotesque_W_Medium-293e86f0.woff HTTP/1.1
Host: prod-cdn.wetransfer.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://lingering-thunder-0229.nguyenchong9455.workers.dev/
Origin: https://lingering-thunder-0229.nguyenchong9455.workers.dev
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: font/woff
content-length: 32124
date: Thu, 11 Apr 2024 11:43:40 GMT
last-modified: Thu, 21 Dec 2023 14:25:54 GMT
etag: "868aedeefe7669e8a4f7196f7df5d058"
x-amz-server-side-encryption: AES256
cache-control: public, max-age=31536000
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 c26775cc34c23943f6f5cfc9a3da9b4a.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: qs-sfnitIyH7Z1TwiI5xx31mxXJBCeOSYgOS_S4Kt2cSi6p9VsrrGQ==
age: 580384
X-Firefox-Spdy: h2
|
|
| cdnjs.cloudflare.com/ajax/libs/popper.js/1.12.9/umd/popper.min.js | 104.17.24.14 | 200 OK | 6.2 kB |
URL GET HTTP/2cdnjs.cloudflare.com/ajax/libs/popper.js/1.12.9/umd/popper.min.js IP104.17.24.14:443
Requested byhttps://lingering-thunder-0229.nguyenchong9455.workers.dev/css/runtimeapplication-bafdd8b86fd88bb4273d.js CertificateIssuerCloudflare, Inc. Subjectsni.cloudflaressl.com Fingerprint7A:EA:B9:09:71:70:6C:87:C9:D3:82:74:8A:7B:B4:60:E5:40:2D:8D ValidityMon, 03 Jul 2023 00:00:00 GMT - Tue, 02 Jul 2024 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (19015) Hash70d3fda195602fe8b75e0097eed74dde c3b977aa4b8dfb69d651e07015031d385ded964b a52f7aa54d7bcaafa056ee0a050262dfc5694ae28dee8b4cac3429af37ff0d66
GET /ajax/libs/popper.js/1.12.9/umd/popper.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://lingering-thunder-0229.nguyenchong9455.workers.dev/
Origin: https://lingering-thunder-0229.nguyenchong9455.workers.dev
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 18 Apr 2024 04:56:43 GMT
content-type: application/javascript; charset=utf-8
content-length: 6157
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03fa9-4af4"
last-modified: Mon, 04 May 2020 16:15:37 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 2861087
expires: Tue, 08 Apr 2025 04:56:43 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=2hTZWBi8crVATtRAJNFdiodR4%2FbedO6J5cf1JxkBcndfZ7XUoAmoM9L%2BkavzHZBOwYSq3DxeBaZj59gdGREGRlIw03BAwi6vimvbBH1vIg3ns6j5GM8IFwCBsN5WuMGOLS1eUO5E"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 876211ea0ba2b4f3-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| cdn.jsdelivr.net/npm/jquery.session@1.0.0/jquery.session.min.js | 151.101.1.229 | 200 OK | 983 B |
URL GET HTTP/2cdn.jsdelivr.net/npm/jquery.session@1.0.0/jquery.session.min.js IP151.101.1.229:443
Requested byhttps://lingering-thunder-0229.nguyenchong9455.workers.dev/css/runtimeapplication-bafdd8b86fd88bb4273d.js CertificateIssuerGlobalSign nv-sa Subjectjsdelivr.net Fingerprint05:87:2C:BA:73:14:21:54:82:00:8B:AD:85:8F:E9:C6:4D:C7:66:09 ValidityWed, 27 Sep 2023 18:13:13 GMT - Mon, 28 Oct 2024 18:13:12 GMT
File typeASCII text, with very long lines (1993) Hashc0ac9c9487d60de96dc68dbb25bd8dd6 99419b0be4b85422ff84870e54dbd8a52dc6dab1 76ad6584ac5bdd459939dc7532fae7c2bdd8e22d773ff16d2306f42a1ffc569c
GET /npm/jquery.session@1.0.0/jquery.session.min.js HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://lingering-thunder-0229.nguyenchong9455.workers.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=31536000, s-maxage=31536000, immutable
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: application/javascript; charset=utf-8
x-jsd-version: 1.0.0
x-jsd-version-type: version
etag: W/"91d-mUGbC+S4VCL/hIcOVNvYpS3G2rE"
content-encoding: br
accept-ranges: bytes
date: Thu, 18 Apr 2024 04:56:43 GMT
age: 3809907
x-served-by: cache-fra-eddf8230025-FRA, cache-hel1410030-HEL
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 983
X-Firefox-Spdy: h2
|
|
| code.jquery.com/jquery-3.2.1.slim.min.js | 151.101.194.137 | 200 OK | 24 kB |
URL GET HTTP/2code.jquery.com/jquery-3.2.1.slim.min.js IP151.101.194.137:443
Requested byhttps://lingering-thunder-0229.nguyenchong9455.workers.dev/css/runtimeapplication-bafdd8b86fd88bb4273d.js CertificateIssuerSectigo Limited Subject*.jquery.com FingerprintD2:19:0A:AD:CE:BB:9C:61:17:5D:29:4B:A2:54:E8:C6:91:B8:F9:8D ValidityTue, 11 Jul 2023 00:00:00 GMT - Sun, 14 Jul 2024 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (32012) Hash5f48fc77cac90c4778fa24ec9c57f37d 9e89d1515bc4c371b86f4cb1002fd8e377c1829f 9365920887b11b33a3dc4ba28a0f93951f200341263e3b9cefd384798e4be398
GET /jquery-3.2.1.slim.min.js HTTP/1.1
Host: code.jquery.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://lingering-thunder-0229.nguyenchong9455.workers.dev/
Origin: https://lingering-thunder-0229.nguyenchong9455.workers.dev
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Fri, 18 Oct 1991 12:00:00 GMT
etag: W/"28feccc0-10fdd"
cache-control: public, max-age=31536000, stale-while-revalidate=604800
access-control-allow-origin: *
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Thu, 18 Apr 2024 04:56:43 GMT
age: 886337
x-served-by: cache-lga21963-LGA, cache-hel1410031-HEL
x-cache: HIT, HIT
x-cache-hits: 40, 76508
x-timer: S1713416204.854983,VS0,VE0
vary: Accept-Encoding
content-length: 23856
X-Firefox-Spdy: h2
|
|
| ajax.googleapis.com/ajax/libs/jquery/2.2.4/jquery.min.js | 142.250.74.42 | 200 OK | 30 kB |
URL GET HTTP/2ajax.googleapis.com/ajax/libs/jquery/2.2.4/jquery.min.js IP142.250.74.42:443
Requested byhttps://lingering-thunder-0229.nguyenchong9455.workers.dev/css/runtimeapplication-bafdd8b86fd88bb4273d.js CertificateIssuerGoogle Trust Services LLC Subjectupload.video.google.com Fingerprint47:5A:64:7D:9F:47:34:07:31:91:97:F7:04:42:7A:D5:EA:AD:07:4E ValidityMon, 04 Mar 2024 07:16:44 GMT - Mon, 27 May 2024 07:16:43 GMT
File typeJavaScript source, ASCII text, with very long lines (32065) Hash2f6b11a7e914718e0290410e85366fe9 69bb69e25ca7d5ef0935317584e6153f3fd9a88c 05b85d96f41fff14d8f608dad03ab71e2c1017c2da0914d7c59291bad7a54f8e
GET /ajax/libs/jquery/2.2.4/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://lingering-thunder-0229.nguyenchong9455.workers.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 30028
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 13 Apr 2024 13:58:13 GMT
expires: Sun, 13 Apr 2025 13:58:13 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
last-modified: Tue, 03 Mar 2020 19:15:00 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
age: 399511
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| lingering-thunder-0229.nguyenchong9455.workers.dev/css/css/sp.js | 172.67.175.143 | 200 OK | 2.3 MB |
URL GET HTTP/3lingering-thunder-0229.nguyenchong9455.workers.dev/css/css/sp.js IP172.67.175.143:443
Requested byhttps://lingering-thunder-0229.nguyenchong9455.workers.dev/css/runtimeapplication-bafdd8b86fd88bb4273d.js CertificateIssuerGoogle Trust Services LLC Subjectnguyenchong9455.workers.dev Fingerprint4F:AF:F2:54:B4:8B:77:6C:2B:9C:3B:7E:1C:3B:60:8B:5A:24:A2:CD ValiditySat, 13 Apr 2024 20:58:01 GMT - Fri, 12 Jul 2024 20:58:00 GMT
File typeHTML document, ASCII text, with very long lines (65527) Size2.3 MB (2269136 bytes) Hash557d3772c4c1e1564e8c734160d81602 d7f03f917d23363e7f5de2724abc43c9c054fea5 a0774701220e259dc394ed31b92bea4b60275ccf8cc1747145e72ef8d46b1623
Analyzer | Verdict | Alert | urlquery | phishing | Phishing - WeTransfer | OpenPhish | phishing | WeTransfer | PhishTank | phishing | WeTransfer |
GET /css/css/sp.js HTTP/1.1
Host: lingering-thunder-0229.nguyenchong9455.workers.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://lingering-thunder-0229.nguyenchong9455.workers.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 18 Apr 2024 04:56:43 GMT
content-type: text/html;charset=UTF-8
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2BOr2P06FYyDEf6LuFkIIc0DKOjwBtXTkr2wyzvHH%2FJhL954PS3UckMbkxGKqolbmj%2BeuhS0ieGEKw0V7lKrJtytbxUyVz1CsRZ9k440ORn6DQlOXdVm275XlH5nazKpzs8vUNyVX1CCFxmc61HmaAnssTRVQ7Xm1buP0pJr797tF%2FEUrUQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 876211e8fd04569d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| lingering-thunder-0229.nguyenchong9455.workers.dev/css/css/gtm.js | 172.67.175.143 | 200 OK | 2.3 MB |
URL GET HTTP/3lingering-thunder-0229.nguyenchong9455.workers.dev/css/css/gtm.js IP172.67.175.143:443
Requested byhttps://lingering-thunder-0229.nguyenchong9455.workers.dev/css/runtimeapplication-bafdd8b86fd88bb4273d.js CertificateIssuerGoogle Trust Services LLC Subjectnguyenchong9455.workers.dev Fingerprint4F:AF:F2:54:B4:8B:77:6C:2B:9C:3B:7E:1C:3B:60:8B:5A:24:A2:CD ValiditySat, 13 Apr 2024 20:58:01 GMT - Fri, 12 Jul 2024 20:58:00 GMT
File typeHTML document, ASCII text, with very long lines (65527) Size2.3 MB (2269136 bytes) Hash557d3772c4c1e1564e8c734160d81602 d7f03f917d23363e7f5de2724abc43c9c054fea5 a0774701220e259dc394ed31b92bea4b60275ccf8cc1747145e72ef8d46b1623
Analyzer | Verdict | Alert | urlquery | phishing | Phishing - WeTransfer | OpenPhish | phishing | WeTransfer | PhishTank | phishing | WeTransfer |
GET /css/css/gtm.js HTTP/1.1
Host: lingering-thunder-0229.nguyenchong9455.workers.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://lingering-thunder-0229.nguyenchong9455.workers.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 18 Apr 2024 04:56:43 GMT
content-type: text/html;charset=UTF-8
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=2%2BFkDGEj78lKYN7kp4TpYMpO%2Bz3nirEBayUI2Gr7XgUJZI0zJJejnFBT2iXQ4ildPv6Jjqc2FF%2F8XJNRm4T1jCj5ucsTYukqhQ7gzBIlmtyzRpH04jOT%2F%2FE3PHMvJJLWj4ZQYgEfRKxBfVt42tJGn3jJ9eHnu0KRwWVo1B6xy5OvPQoaSA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 876211e8fd02569d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| lingering-thunder-0229.nguyenchong9455.workers.dev/css/css/17116643.js | 172.67.175.143 | 200 OK | 2.3 MB |
URL GET HTTP/3lingering-thunder-0229.nguyenchong9455.workers.dev/css/css/17116643.js IP172.67.175.143:443
Requested byhttps://lingering-thunder-0229.nguyenchong9455.workers.dev/css/runtimeapplication-bafdd8b86fd88bb4273d.js CertificateIssuerGoogle Trust Services LLC Subjectnguyenchong9455.workers.dev Fingerprint4F:AF:F2:54:B4:8B:77:6C:2B:9C:3B:7E:1C:3B:60:8B:5A:24:A2:CD ValiditySat, 13 Apr 2024 20:58:01 GMT - Fri, 12 Jul 2024 20:58:00 GMT
File typeHTML document, ASCII text, with very long lines (65527) Size2.3 MB (2269136 bytes) Hash557d3772c4c1e1564e8c734160d81602 d7f03f917d23363e7f5de2724abc43c9c054fea5 a0774701220e259dc394ed31b92bea4b60275ccf8cc1747145e72ef8d46b1623
Analyzer | Verdict | Alert | urlquery | phishing | Phishing - WeTransfer | OpenPhish | phishing | WeTransfer | PhishTank | phishing | WeTransfer |
GET /css/css/17116643.js HTTP/1.1
Host: lingering-thunder-0229.nguyenchong9455.workers.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://lingering-thunder-0229.nguyenchong9455.workers.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 18 Apr 2024 04:56:43 GMT
content-type: text/html;charset=UTF-8
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=choCQQPpFPAnE21d6R8B6dJ2RtA%2FL%2FmAEhTRhma01eO08Vce2eF9J01Asy9RB9qbcSAM4jtVpWcjoV%2FX2iCxm8NhIehNk%2BaGl5FMM9u2vxRH823X1yezXEMjMCHYz%2BsqzV1II4udpP67%2BmlVGeke1%2FJkrDNktPv%2Bs7lDRQBoOWwwRCnxYg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 876211e8dcb7569d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| stackpath.bootstrapcdn.com/bootstrap/4.1.3/js/bootstrap.min.js | 104.18.11.207 | 200 OK | 31 kB |
URL GET HTTP/2stackpath.bootstrapcdn.com/bootstrap/4.1.3/js/bootstrap.min.js IP104.18.11.207:443
Requested byhttps://lingering-thunder-0229.nguyenchong9455.workers.dev/css/runtimeapplication-bafdd8b86fd88bb4273d.js CertificateIssuerGoogle Trust Services LLC Subjectbootstrapcdn.com Fingerprint57:B4:25:B9:9C:88:A1:A3:3D:F7:31:74:02:E4:D1:E0:0A:F5:11:63 ValidityWed, 27 Mar 2024 00:22:09 GMT - Tue, 25 Jun 2024 00:22:08 GMT
File typeJavaScript source, ASCII text, with very long lines (50758) Hash67176c242e1bdc20603c878dee836df3 27a71b00383d61ef3c489326b3564d698fc1227c 56c12a125b021d21a69e61d7190cefa168d6c28ce715265cea1b3b0112d169c4
GET /bootstrap/4.1.3/js/bootstrap.min.js HTTP/1.1
Host: stackpath.bootstrapcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://lingering-thunder-0229.nguyenchong9455.workers.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 18 Apr 2024 04:56:44 GMT
content-type: application/javascript; charset=utf-8
vary: Accept-Encoding
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: DE
access-control-allow-origin: *
cache-control: public, max-age=31919000
last-modified: Mon, 25 Jan 2021 22:04:06 GMT
cdn-cachedat: 11/15/2021 23:30:00
cdn-proxyver: 1.0
cdn-requestpullcode: 200
cdn-requestpullsuccess: True
cdn-edgestorageid: 723
cdn-status: 200
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
cdn-requestid: a35b0179a28ed953258d0fb41376a09c
cdn-cache: HIT
cf-cache-status: HIT
age: 1330805
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 876211ef3c8356ba-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| prod-cdn.wetransfer.net/packs/media/images/favicon-a34a7465.ico | 54.230.111.37 | 200 OK | 42 kB |
URL GET HTTP/2prod-cdn.wetransfer.net/packs/media/images/favicon-a34a7465.ico IP54.230.111.37:443
Requested byhttps://lingering-thunder-0229.nguyenchong9455.workers.dev/css/runtimeapplication-bafdd8b86fd88bb4273d.js CertificateIssuerAmazon Subjectwetransfer.net Fingerprint0B:0D:65:82:74:97:1B:AD:60:D8:48:2B:7D:A7:00:EA:34:08:86:48 ValiditySun, 30 Jul 2023 00:00:00 GMT - Wed, 28 Aug 2024 23:59:59 GMT
File typeMS Windows icon resource - 5 icons, 16x16, 32 bits/pixel, 24x24, 32 bits/pixel Hash692e1c7339c359b6412f059c9c9a0474 e7c1a53dca16b7664880e5b8a92524cf9a47fb62 d12161435ace47c6883360e08466508593325f134c1852b1d0e6e75d5f76adda
GET /packs/media/images/favicon-a34a7465.ico HTTP/1.1
Host: prod-cdn.wetransfer.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://lingering-thunder-0229.nguyenchong9455.workers.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/vnd.microsoft.icon
content-length: 41566
date: Wed, 27 Mar 2024 01:09:01 GMT
last-modified: Thu, 21 Dec 2023 14:25:56 GMT
etag: "692e1c7339c359b6412f059c9c9a0474"
x-amz-server-side-encryption: AES256
cache-control: public, max-age=31536000
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 6259d2cd8a5947ad41a420527bbed7a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: EinvxOkZ1LEnmthGYPG_b3TjwU2dQkHLGlZ4F03dH1Tzbdj_aP_eXQ==
age: 1914466
X-Firefox-Spdy: h2
|
|
| www.googletagmanager.com/gtm.js?id=GTM-5WF5RH4 | 142.250.74.168 | 200 OK | 66 kB |
URL GET HTTP/2www.googletagmanager.com/gtm.js?id=GTM-5WF5RH4 IP142.250.74.168:443
Requested byhttps://lingering-thunder-0229.nguyenchong9455.workers.dev/css/runtimeapplication-bafdd8b86fd88bb4273d.js CertificateIssuerGoogle Trust Services LLC Subject*.google-analytics.com FingerprintBF:40:8C:8B:CB:69:1E:3F:E2:3B:B7:8A:8E:C0:D6:98:5F:81:FA:2D ValidityMon, 04 Mar 2024 06:35:45 GMT - Mon, 27 May 2024 06:35:44 GMT
File typeJavaScript source, ASCII text, with very long lines (44393) Hash326732707e7bf00093326b3c973708af 3cbe7b9e58100a4154e954508c44e95cbe414eac 26847bd09134138fd63fee31be628e3a487d6819fb6072361bea8d4b983cde79
GET /gtm.js?id=GTM-5WF5RH4 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://lingering-thunder-0229.nguyenchong9455.workers.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Thu, 18 Apr 2024 04:56:46 GMT
expires: Thu, 18 Apr 2024 04:56:46 GMT
cache-control: private, max-age=900
last-modified: Thu, 18 Apr 2024 03:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 66038
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| lingering-thunder-0229.nguyenchong9455.workers.dev/css/css/en-0d65947306b8b68f172b.js | 172.67.175.143 | 200 OK | 265 kB |
URL GET HTTP/3lingering-thunder-0229.nguyenchong9455.workers.dev/css/css/en-0d65947306b8b68f172b.js IP172.67.175.143:443
Requested byhttps://lingering-thunder-0229.nguyenchong9455.workers.dev/css/runtimeapplication-bafdd8b86fd88bb4273d.js CertificateIssuerGoogle Trust Services LLC Subjectnguyenchong9455.workers.dev Fingerprint4F:AF:F2:54:B4:8B:77:6C:2B:9C:3B:7E:1C:3B:60:8B:5A:24:A2:CD ValiditySat, 13 Apr 2024 20:58:01 GMT - Fri, 12 Jul 2024 20:58:00 GMT
File typeHTML document, ASCII text, with very long lines (65527) Size265 kB (265330 bytes) Hash557d3772c4c1e1564e8c734160d81602 d7f03f917d23363e7f5de2724abc43c9c054fea5 a0774701220e259dc394ed31b92bea4b60275ccf8cc1747145e72ef8d46b1623
Analyzer | Verdict | Alert | urlquery | phishing | Phishing - WeTransfer | OpenPhish | phishing | WeTransfer | PhishTank | phishing | WeTransfer |
GET /css/css/en-0d65947306b8b68f172b.js HTTP/1.1
Host: lingering-thunder-0229.nguyenchong9455.workers.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://lingering-thunder-0229.nguyenchong9455.workers.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 18 Apr 2024 04:56:43 GMT
content-type: text/html;charset=UTF-8
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=AwrToSq8aX8j3ugekMRkDZLV1HqtBIceKB2WFJx0%2FVGKmNS4zOBWjEcL2A9dgYnVqPw6HeQrZVBzrAqb9OtuFF3tRRX1rbf5sY4CW8y8oejVoCS5LTWnZ12USXRVwmeDO3Y0XTSgPDvqf53ZNNotfms6oLSGCXCnspRkvggE2yCw8lv32w%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 876211e8fd06569d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| maxcdn.bootstrapcdn.com/bootstrap/4.0.0/js/bootstrap.min.js | 104.18.10.207 | 200 OK | 44 kB |
URL GET HTTP/2maxcdn.bootstrapcdn.com/bootstrap/4.0.0/js/bootstrap.min.js IP104.18.10.207:443
Requested byhttps://lingering-thunder-0229.nguyenchong9455.workers.dev/css/runtimeapplication-bafdd8b86fd88bb4273d.js CertificateIssuerGoogle Trust Services LLC Subjectbootstrapcdn.com Fingerprint57:B4:25:B9:9C:88:A1:A3:3D:F7:31:74:02:E4:D1:E0:0A:F5:11:63 ValidityWed, 27 Mar 2024 00:22:09 GMT - Tue, 25 Jun 2024 00:22:08 GMT
File typeJavaScript source, ASCII text, with very long lines (48664) Hash14d449eb8876fa55e1ef3c2cc52b0c17 a9545831803b1359cfeed47e3b4d6bae68e40e99 e7ed36ceee5450b4243bbc35188afabdfb4280c7c57597001de0ed167299b01b
GET /bootstrap/4.0.0/js/bootstrap.min.js HTTP/1.1
Host: maxcdn.bootstrapcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://lingering-thunder-0229.nguyenchong9455.workers.dev/
Origin: https://lingering-thunder-0229.nguyenchong9455.workers.dev
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 18 Apr 2024 04:56:43 GMT
content-type: application/javascript; charset=utf-8
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: DE
vary: Accept-Encoding
access-control-allow-origin: *
cache-control: public, max-age=31919000
content-encoding: br
etag: W/"14d449eb8876fa55e1ef3c2cc52b0c17"
last-modified: Mon, 25 Jan 2021 22:04:04 GMT
cdn-cachedat: 03/18/2024 12:46:36
cdn-proxyver: 1.04
cdn-requestpullcode: 200
cdn-requestpullsuccess: True
cdn-edgestorageid: 1048
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
cdn-status: 200
cdn-requestid: f79feda6c4e9612994404e3f59b85cc4
cdn-cache: HIT
cf-cache-status: HIT
age: 300886
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 876211ea0f62b4ed-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| lingering-thunder-0229.nguyenchong9455.workers.dev/css/css/en-de295c39cb769807d9fa.js | 172.67.175.143 | 200 OK | 265 kB |
URL GET HTTP/3lingering-thunder-0229.nguyenchong9455.workers.dev/css/css/en-de295c39cb769807d9fa.js IP172.67.175.143:443
Requested byhttps://lingering-thunder-0229.nguyenchong9455.workers.dev/css/runtimeapplication-bafdd8b86fd88bb4273d.js CertificateIssuerGoogle Trust Services LLC Subjectnguyenchong9455.workers.dev Fingerprint4F:AF:F2:54:B4:8B:77:6C:2B:9C:3B:7E:1C:3B:60:8B:5A:24:A2:CD ValiditySat, 13 Apr 2024 20:58:01 GMT - Fri, 12 Jul 2024 20:58:00 GMT
File typeHTML document, ASCII text, with very long lines (65527) Size265 kB (264878 bytes) Hash557d3772c4c1e1564e8c734160d81602 d7f03f917d23363e7f5de2724abc43c9c054fea5 a0774701220e259dc394ed31b92bea4b60275ccf8cc1747145e72ef8d46b1623
Analyzer | Verdict | Alert | urlquery | phishing | Phishing - WeTransfer | OpenPhish | phishing | WeTransfer | PhishTank | phishing | WeTransfer |
GET /css/css/en-de295c39cb769807d9fa.js HTTP/1.1
Host: lingering-thunder-0229.nguyenchong9455.workers.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://lingering-thunder-0229.nguyenchong9455.workers.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 18 Apr 2024 04:56:43 GMT
content-type: text/html;charset=UTF-8
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=RHDE4zSrZVyJPhZCssQhbZk09vsTpsSzwzCnXSwIebM3w3sGej4GudRLbEwtCujNvhtuzL%2Fp0vKTPHvJ4sfOp3DvpSLa%2BFkA2aog7y71DffUiMLq7O68jgHAG7xEmJ%2B1iP7JcNJVh2RkznqVXErDRkdOWSVJUrjJEDcQpyqj4IclWEliWQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 876211e8fd08569d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| lingering-thunder-0229.nguyenchong9455.workers.dev/packs/media/actiefgrotesque/ActiefGrotesque_W_Regular-1f437876.woff | 172.67.175.143 | 200 OK | 2.0 MB |
URL GET HTTP/3lingering-thunder-0229.nguyenchong9455.workers.dev/packs/media/actiefgrotesque/ActiefGrotesque_W_Regular-1f437876.woff IP172.67.175.143:443
Requested byhttps://lingering-thunder-0229.nguyenchong9455.workers.dev/css/runtimeapplication-bafdd8b86fd88bb4273d.js CertificateIssuerGoogle Trust Services LLC Subjectnguyenchong9455.workers.dev Fingerprint4F:AF:F2:54:B4:8B:77:6C:2B:9C:3B:7E:1C:3B:60:8B:5A:24:A2:CD ValiditySat, 13 Apr 2024 20:58:01 GMT - Fri, 12 Jul 2024 20:58:00 GMT
Size2.0 MB (2013081 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer | Verdict | Alert | urlquery | phishing | Phishing - WeTransfer | OpenPhish | phishing | WeTransfer | PhishTank | phishing | WeTransfer |
GET /packs/media/actiefgrotesque/ActiefGrotesque_W_Regular-1f437876.woff HTTP/1.1
Host: lingering-thunder-0229.nguyenchong9455.workers.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Referer: https://lingering-thunder-0229.nguyenchong9455.workers.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 18 Apr 2024 04:56:44 GMT
content-type: text/html;charset=UTF-8
content-length: 2013081
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=LbdpeS942lPGx2SePzyHvCtBPYGzn1O%2Fi6raMEnQ5gwfCiy6urXIVs9QM%2FCRFJ3NHWKYAJIiUTHJfydwG2Pha%2BphkNAqen0WElqFT6NwoIry6SEFQ0iVSYa6ShxV578ajzHKHTZyRGCBRrrthzFVLVg%2FJ3REOWr5dokAwV4HquxnoH5p4g%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 876211ee5acd569d-OSL
alt-svc: h3=":443"; ma=86400
|
|
| lingering-thunder-0229.nguyenchong9455.workers.dev/css/css/runtimeapplication-bafdd8b86fd88bb4273d.js | 172.67.175.143 | 200 OK | 2.0 MB |
URL GET HTTP/3lingering-thunder-0229.nguyenchong9455.workers.dev/css/css/runtimeapplication-bafdd8b86fd88bb4273d.js IP172.67.175.143:443
Requested byhttps://lingering-thunder-0229.nguyenchong9455.workers.dev/css/runtimeapplication-bafdd8b86fd88bb4273d.js CertificateIssuerGoogle Trust Services LLC Subjectnguyenchong9455.workers.dev Fingerprint4F:AF:F2:54:B4:8B:77:6C:2B:9C:3B:7E:1C:3B:60:8B:5A:24:A2:CD ValiditySat, 13 Apr 2024 20:58:01 GMT - Fri, 12 Jul 2024 20:58:00 GMT
Size2.0 MB (2013081 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer | Verdict | Alert | urlquery | phishing | Phishing - WeTransfer | OpenPhish | phishing | WeTransfer | PhishTank | phishing | WeTransfer |
GET /css/css/runtimeapplication-bafdd8b86fd88bb4273d.js HTTP/1.1
Host: lingering-thunder-0229.nguyenchong9455.workers.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://lingering-thunder-0229.nguyenchong9455.workers.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 18 Apr 2024 04:56:44 GMT
content-type: text/html;charset=UTF-8
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=r2Lw3oGdk%2BJWM2w9OUjpUNuW7Kz0exqQUQkUI1lsVNB81yT4Y7t06dsjS2zOgV8vOBVs2eyWHkCemyqBgql9uTCjFKu2hcXCgFA39voZVoIjyf90rvFydnf1lpUhg6VSbUm2K8Dvz%2B7lS7CcdTOJseJoPckJ4RyyyR4nEDHbJCuaZFFF7A%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 876211ef3bb8569d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| lingering-thunder-0229.nguyenchong9455.workers.dev/css/css/bat.js | 172.67.175.143 | 200 OK | 2.0 MB |
URL GET HTTP/3lingering-thunder-0229.nguyenchong9455.workers.dev/css/css/bat.js IP172.67.175.143:443
Requested byhttps://lingering-thunder-0229.nguyenchong9455.workers.dev/css/runtimeapplication-bafdd8b86fd88bb4273d.js CertificateIssuerGoogle Trust Services LLC Subjectnguyenchong9455.workers.dev Fingerprint4F:AF:F2:54:B4:8B:77:6C:2B:9C:3B:7E:1C:3B:60:8B:5A:24:A2:CD ValiditySat, 13 Apr 2024 20:58:01 GMT - Fri, 12 Jul 2024 20:58:00 GMT
Size2.0 MB (2013081 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer | Verdict | Alert | urlquery | phishing | Phishing - WeTransfer | OpenPhish | phishing | WeTransfer | PhishTank | phishing | WeTransfer |
GET /css/css/bat.js HTTP/1.1
Host: lingering-thunder-0229.nguyenchong9455.workers.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://lingering-thunder-0229.nguyenchong9455.workers.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 18 Apr 2024 04:56:43 GMT
content-type: text/html;charset=UTF-8
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2FeyEylUneeaBx%2FP1UtJBtL6bMoXIcANcyFE4HMArFuXrfMS%2Beq6aELCOptnfPT0dydtmsfvUxGpYGYkz1DBHhWqFqz3mQaytmwNTOm6Fv2sBibuDoWw3UChEtCyBRlKT1WPsH4PTApKVCR2VzeW7MgKZtyKyyXavYX8sKPLVz4hZXFiz1Q%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 876211e8dca1569d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| lingering-thunder-0229.nguyenchong9455.workers.dev/packs/media/images/globe-dd3d31e7.svg | 172.67.175.143 | 200 OK | 2.0 MB |
URL GET HTTP/3lingering-thunder-0229.nguyenchong9455.workers.dev/packs/media/images/globe-dd3d31e7.svg IP172.67.175.143:443
Requested byhttps://lingering-thunder-0229.nguyenchong9455.workers.dev/css/runtimeapplication-bafdd8b86fd88bb4273d.js CertificateIssuerGoogle Trust Services LLC Subjectnguyenchong9455.workers.dev Fingerprint4F:AF:F2:54:B4:8B:77:6C:2B:9C:3B:7E:1C:3B:60:8B:5A:24:A2:CD ValiditySat, 13 Apr 2024 20:58:01 GMT - Fri, 12 Jul 2024 20:58:00 GMT
Size2.0 MB (2013081 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer | Verdict | Alert | urlquery | phishing | Phishing - WeTransfer | OpenPhish | phishing | WeTransfer | PhishTank | phishing | WeTransfer |
GET /packs/media/images/globe-dd3d31e7.svg HTTP/1.1
Host: lingering-thunder-0229.nguyenchong9455.workers.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://lingering-thunder-0229.nguyenchong9455.workers.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 18 Apr 2024 04:56:44 GMT
content-type: text/html;charset=UTF-8
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=EM1JJ0tMuLoH74lxZmremWMtuPIAiQSF3k10Qr746SaJn7lLVpG73SQSwHc8E%2F2txSc0wgj2LOcToAaKXTGPZeWV85wJ05ffp0B95aombfTH%2BkY06crpoKtfQ8aSLzpR8C9OmPn9mOsNFfvWxJDA4DSmWe1q%2FaTRtLxtkNPba8kfXpwV0w%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 876211ee3abc569d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| ajax.googleapis.luchifab.com/ajax.googleapis/ajax/libs/jquery/2.2.4/jquery.min.js | 0.0.0.0 | | 0 B |
URL GET ajax.googleapis.luchifab.com/ajax.googleapis/ajax/libs/jquery/2.2.4/jquery.min.js IP0.0.0.0:0
Requested byhttps://lingering-thunder-0229.nguyenchong9455.workers.dev/css/runtimeapplication-bafdd8b86fd88bb4273d.js
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ajax.googleapis/ajax/libs/jquery/2.2.4/jquery.min.js HTTP/1.1
Host: ajax.googleapis.luchifab.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lingering-thunder-0229.nguyenchong9455.workers.dev/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
|
|
| lingering-thunder-0229.nguyenchong9455.workers.dev/css/runtimeapplication-bafdd8b86fd88bb4273d.js | 172.67.175.143 | 200 OK | 2.0 MB |
URL User Request GET HTTP/2lingering-thunder-0229.nguyenchong9455.workers.dev/css/runtimeapplication-bafdd8b86fd88bb4273d.js IP172.67.175.143:443
CertificateIssuerGoogle Trust Services LLC Subjectnguyenchong9455.workers.dev Fingerprint4F:AF:F2:54:B4:8B:77:6C:2B:9C:3B:7E:1C:3B:60:8B:5A:24:A2:CD ValiditySat, 13 Apr 2024 20:58:01 GMT - Fri, 12 Jul 2024 20:58:00 GMT
Size2.0 MB (2013081 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer | Verdict | Alert | urlquery | phishing | Phishing - WeTransfer | OpenPhish | phishing | WeTransfer | PhishTank | phishing | WeTransfer |
GET /css/runtimeapplication-bafdd8b86fd88bb4273d.js HTTP/1.1
Host: lingering-thunder-0229.nguyenchong9455.workers.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 18 Apr 2024 04:56:43 GMT
content-type: text/html;charset=UTF-8
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=0JpmKnz0Ibc3jBvXgSDKSxZiglfpbjeaNweFt3afHyRb93MjsV%2FNr3wH116RDPfMYgLiFyOEh2l%2FiUwu65SDXd8prQK4ztyUBNyrLCmV0iD61kAvX%2FuovVp6ZtpwPO9cctQKOVbLM8j7DiYedj2pOZz9rdyJfrUfmhiHOXSZ4SA9OGn1vw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 876211e4bd7fb4fa-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| lingering-thunder-0229.nguyenchong9455.workers.dev/css/css/application-c2b6f877fed288c2431f.js | 172.67.175.143 | 200 OK | 2.0 MB |
URL GET HTTP/3lingering-thunder-0229.nguyenchong9455.workers.dev/css/css/application-c2b6f877fed288c2431f.js IP172.67.175.143:443
Requested byhttps://lingering-thunder-0229.nguyenchong9455.workers.dev/css/runtimeapplication-bafdd8b86fd88bb4273d.js CertificateIssuerGoogle Trust Services LLC Subjectnguyenchong9455.workers.dev Fingerprint4F:AF:F2:54:B4:8B:77:6C:2B:9C:3B:7E:1C:3B:60:8B:5A:24:A2:CD ValiditySat, 13 Apr 2024 20:58:01 GMT - Fri, 12 Jul 2024 20:58:00 GMT
Size2.0 MB (2013081 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer | Verdict | Alert | urlquery | phishing | Phishing - WeTransfer | OpenPhish | phishing | WeTransfer | PhishTank | phishing | WeTransfer |
GET /css/css/application-c2b6f877fed288c2431f.js HTTP/1.1
Host: lingering-thunder-0229.nguyenchong9455.workers.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lingering-thunder-0229.nguyenchong9455.workers.dev/css/runtimeapplication-bafdd8b86fd88bb4273d.js
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 18 Apr 2024 04:56:43 GMT
content-type: text/html;charset=UTF-8
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=hTT16wYLJF2XYQqKCG50tzD6D4nH9NxKCf4BQjfd5y4ZCbyUTQC4k%2BApVGZZuYCmJSilo%2B1cKlXt5yGEPKoCC5wFQ92D9JD%2FS%2Brju4QRIjIaxkaf58Cwcf6WiDoF2T5tw7VT9HUwcN5gGWDdIEO4JFWQRNygXQPJsYSu%2FUWGsm8I8DVS4w%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 876211e8cc91569d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| lingering-thunder-0229.nguyenchong9455.workers.dev/css/css/advertising-4aee5180207621f94abeb04df0d9e7e52f4496bf16a55f712.js | 172.67.175.143 | 200 OK | 2.0 MB |
URL GET HTTP/3lingering-thunder-0229.nguyenchong9455.workers.dev/css/css/advertising-4aee5180207621f94abeb04df0d9e7e52f4496bf16a55f712.js IP172.67.175.143:443
Requested byhttps://lingering-thunder-0229.nguyenchong9455.workers.dev/css/runtimeapplication-bafdd8b86fd88bb4273d.js CertificateIssuerGoogle Trust Services LLC Subjectnguyenchong9455.workers.dev Fingerprint4F:AF:F2:54:B4:8B:77:6C:2B:9C:3B:7E:1C:3B:60:8B:5A:24:A2:CD ValiditySat, 13 Apr 2024 20:58:01 GMT - Fri, 12 Jul 2024 20:58:00 GMT
Size2.0 MB (2013081 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer | Verdict | Alert | urlquery | phishing | Phishing - WeTransfer | OpenPhish | phishing | WeTransfer | PhishTank | phishing | WeTransfer |
GET /css/css/advertising-4aee5180207621f94abeb04df0d9e7e52f4496bf16a55f712.js HTTP/1.1
Host: lingering-thunder-0229.nguyenchong9455.workers.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://lingering-thunder-0229.nguyenchong9455.workers.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 18 Apr 2024 04:56:43 GMT
content-type: text/html;charset=UTF-8
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=GsHj%2BG09cBOnQc3IUmszzwR4P9ghaHj0LGAJ735p%2F%2B4KXBsT0uIjnBkCKQRRXsCIWGvFrGbeMPK2BOeBHwqcAqDrUkxBOtOkH%2B5V04wcg2x6zGfIYWRypYBYs3gLdtuGlkqikd0hin14lyZRT8ByiXE2akz8ww6lw0f2jolEzYTxXpZYng%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 876211e8fd0a569d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| lingering-thunder-0229.nguyenchong9455.workers.dev/css/css/application-c2b6f877fed288c2431f.js | 172.67.175.143 | 200 OK | 2.0 MB |
URL GET HTTP/3lingering-thunder-0229.nguyenchong9455.workers.dev/css/css/application-c2b6f877fed288c2431f.js IP172.67.175.143:443
Requested byhttps://lingering-thunder-0229.nguyenchong9455.workers.dev/css/runtimeapplication-bafdd8b86fd88bb4273d.js CertificateIssuerGoogle Trust Services LLC Subjectnguyenchong9455.workers.dev Fingerprint4F:AF:F2:54:B4:8B:77:6C:2B:9C:3B:7E:1C:3B:60:8B:5A:24:A2:CD ValiditySat, 13 Apr 2024 20:58:01 GMT - Fri, 12 Jul 2024 20:58:00 GMT
Size2.0 MB (2013081 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer | Verdict | Alert | urlquery | phishing | Phishing - WeTransfer | OpenPhish | phishing | WeTransfer | PhishTank | phishing | WeTransfer |
GET /css/css/application-c2b6f877fed288c2431f.js HTTP/1.1
Host: lingering-thunder-0229.nguyenchong9455.workers.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://lingering-thunder-0229.nguyenchong9455.workers.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 18 Apr 2024 04:56:44 GMT
content-type: text/html;charset=UTF-8
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=2a0x2gY1mDEX%2Fmh9Bl5YCRTCW1j%2Bly6bFJmpNUKkqAfI0GwYqK0bliBqWTNiWhIZxeVWY5CPgSYMXwP8wb2CnSYRgcH%2B0jpx7lSxnAyAIsHvQAXfMU3t9QIzrc7kAs8eRJ6GZGAKZGZ9P4zbQorQn7zWmt%2FyOnxH5NTwNOmhS6I3uuxhfQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 876211ef3bb9569d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| prod-cdn.wetransfer.net/packs/media/images/apple-touch-icon-180x180-precomposed-fd272b89.png | 54.230.111.37 | 200 OK | 16 kB |
URL GET HTTP/2prod-cdn.wetransfer.net/packs/media/images/apple-touch-icon-180x180-precomposed-fd272b89.png IP54.230.111.37:443
Requested byhttps://lingering-thunder-0229.nguyenchong9455.workers.dev/css/runtimeapplication-bafdd8b86fd88bb4273d.js CertificateIssuerAmazon Subjectwetransfer.net Fingerprint0B:0D:65:82:74:97:1B:AD:60:D8:48:2B:7D:A7:00:EA:34:08:86:48 ValiditySun, 30 Jul 2023 00:00:00 GMT - Wed, 28 Aug 2024 23:59:59 GMT
File typePNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced Hashbc5b180f2d0001298a5ea3691e3fc623 edf2c67a5cef4efd081e5e6e4bc027e72be45593 b8c5bf2f80790d4abbe7fd5dca0bcf5c3eeaa4e23b1b35c8854a3fdb5c26b1e9
GET /packs/media/images/apple-touch-icon-180x180-precomposed-fd272b89.png HTTP/1.1
Host: prod-cdn.wetransfer.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://lingering-thunder-0229.nguyenchong9455.workers.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/png
content-length: 16208
date: Fri, 22 Dec 2023 22:58:57 GMT
last-modified: Thu, 21 Dec 2023 14:25:55 GMT
etag: "bc5b180f2d0001298a5ea3691e3fc623"
x-amz-server-side-encryption: AES256
cache-control: public, max-age=31536000
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 6259d2cd8a5947ad41a420527bbed7a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 4FK6r7CfdvsefyUHiWSxuxwlDOC2KPAlKshsqaPBBPXLNCX3KhL7mA==
age: 10130270
X-Firefox-Spdy: h2
|
|
| lingering-thunder-0229.nguyenchong9455.workers.dev/css/css/gtm_002.js | 172.67.175.143 | 200 OK | 2.0 MB |
URL GET HTTP/3lingering-thunder-0229.nguyenchong9455.workers.dev/css/css/gtm_002.js IP172.67.175.143:443
Requested byhttps://lingering-thunder-0229.nguyenchong9455.workers.dev/css/runtimeapplication-bafdd8b86fd88bb4273d.js CertificateIssuerGoogle Trust Services LLC Subjectnguyenchong9455.workers.dev Fingerprint4F:AF:F2:54:B4:8B:77:6C:2B:9C:3B:7E:1C:3B:60:8B:5A:24:A2:CD ValiditySat, 13 Apr 2024 20:58:01 GMT - Fri, 12 Jul 2024 20:58:00 GMT
Size2.0 MB (2013081 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer | Verdict | Alert | urlquery | phishing | Phishing - WeTransfer | OpenPhish | phishing | WeTransfer | PhishTank | phishing | WeTransfer |
GET /css/css/gtm_002.js HTTP/1.1
Host: lingering-thunder-0229.nguyenchong9455.workers.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://lingering-thunder-0229.nguyenchong9455.workers.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 18 Apr 2024 04:56:43 GMT
content-type: text/html;charset=UTF-8
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=sj4rQmCWGFk5%2F2QqL%2BltBzaocuA5ErkENRKLOKzmkzIHFlN5jLTREMMQsCsXtMQ%2Fpkolu37VVr8PoDl8wOFGJlRkBZzlGQmLv9LZAOWtXMc4xDpJFpUhwWPPtuap6ZVMvZOsnbaWqKLj0GLPFaHKJV2MXFNLj2PbbCasvMpqTcHOJDB6UQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 876211e8dcae569d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| lingering-thunder-0229.nguyenchong9455.workers.dev/css/css/wallpaper-59e18dcf37d4cc5f163b.js | 172.67.175.143 | 200 OK | 2.0 MB |
URL GET HTTP/3lingering-thunder-0229.nguyenchong9455.workers.dev/css/css/wallpaper-59e18dcf37d4cc5f163b.js IP172.67.175.143:443
Requested byhttps://lingering-thunder-0229.nguyenchong9455.workers.dev/css/runtimeapplication-bafdd8b86fd88bb4273d.js CertificateIssuerGoogle Trust Services LLC Subjectnguyenchong9455.workers.dev Fingerprint4F:AF:F2:54:B4:8B:77:6C:2B:9C:3B:7E:1C:3B:60:8B:5A:24:A2:CD ValiditySat, 13 Apr 2024 20:58:01 GMT - Fri, 12 Jul 2024 20:58:00 GMT
Size2.0 MB (2013081 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer | Verdict | Alert | urlquery | phishing | Phishing - WeTransfer | OpenPhish | phishing | WeTransfer | PhishTank | phishing | WeTransfer |
GET /css/css/wallpaper-59e18dcf37d4cc5f163b.js HTTP/1.1
Host: lingering-thunder-0229.nguyenchong9455.workers.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://lingering-thunder-0229.nguyenchong9455.workers.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 18 Apr 2024 04:56:43 GMT
content-type: text/html;charset=UTF-8
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=VaMR7oKw4ZAlwiEOmRnxfENJdcs5CkAUcRbxQCVoqcqXZxKb79cw00yE6PZHeOip12LsT3WjnLByEpUfilukkrEZ%2FoYK4w8tQxmN96ARJLr5TpeThCJEVmaaAcNIAW15wqZlwJz4m0ZyxaeLzDugFdZCOy4gW1VimGof3jThN9l1qNQkng%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 876211e8dcb0569d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| prod-cdn.wetransfer.net/packs/media/transfer_window/email-verification-lock-e6ed8c56.svg | 54.230.111.37 | 200 OK | 1.7 kB |
URL GET HTTP/2prod-cdn.wetransfer.net/packs/media/transfer_window/email-verification-lock-e6ed8c56.svg IP54.230.111.37:443
Requested byhttps://lingering-thunder-0229.nguyenchong9455.workers.dev/css/runtimeapplication-bafdd8b86fd88bb4273d.js CertificateIssuerAmazon Subjectwetransfer.net Fingerprint0B:0D:65:82:74:97:1B:AD:60:D8:48:2B:7D:A7:00:EA:34:08:86:48 ValiditySun, 30 Jul 2023 00:00:00 GMT - Wed, 28 Aug 2024 23:59:59 GMT
File typeSVG Scalable Vector Graphics image Hash886c669e43a2cb3b3d624da08a9c39ff 565a6c535981f273b263ee8e6ae2d0fc9ab97565 c1532b769622f6757e4958c8b1c0789e73fab7c1bcc50ce57a0cfb903d6dfdd3
GET /packs/media/transfer_window/email-verification-lock-e6ed8c56.svg HTTP/1.1
Host: prod-cdn.wetransfer.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://lingering-thunder-0229.nguyenchong9455.workers.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/svg+xml
date: Thu, 04 Jan 2024 14:30:13 GMT
last-modified: Thu, 21 Dec 2023 14:26:03 GMT
etag: W/"207f0c93fc997af575b8b9ad9db8777c"
x-amz-server-side-encryption: AES256
cache-control: public, max-age=31536000
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 6259d2cd8a5947ad41a420527bbed7a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: Qq1uhYSI1ujCuwfg2ccd-nP1xwziRYK4bxF3xLMw1QKGJ8TVq5_91A==
age: 9037591
X-Firefox-Spdy: h2
|
|
| lingering-thunder-0229.nguyenchong9455.workers.dev/css/css/vendor-ef8fd9ca3a0295622111.js | 172.67.175.143 | 200 OK | 2.0 MB |
URL GET HTTP/3lingering-thunder-0229.nguyenchong9455.workers.dev/css/css/vendor-ef8fd9ca3a0295622111.js IP172.67.175.143:443
Requested byhttps://lingering-thunder-0229.nguyenchong9455.workers.dev/css/runtimeapplication-bafdd8b86fd88bb4273d.js CertificateIssuerGoogle Trust Services LLC Subjectnguyenchong9455.workers.dev Fingerprint4F:AF:F2:54:B4:8B:77:6C:2B:9C:3B:7E:1C:3B:60:8B:5A:24:A2:CD ValiditySat, 13 Apr 2024 20:58:01 GMT - Fri, 12 Jul 2024 20:58:00 GMT
Size2.0 MB (2013081 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer | Verdict | Alert | urlquery | phishing | Phishing - WeTransfer | OpenPhish | phishing | WeTransfer | PhishTank | phishing | WeTransfer |
GET /css/css/vendor-ef8fd9ca3a0295622111.js HTTP/1.1
Host: lingering-thunder-0229.nguyenchong9455.workers.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://lingering-thunder-0229.nguyenchong9455.workers.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 18 Apr 2024 04:56:44 GMT
content-type: text/html;charset=UTF-8
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=efdXi0%2B8jtVC91%2BrgYzZj7%2B4nOHV1fZWwqYN%2Bhh9YnNCiwmyIf9roqej%2BzuCirWetRgbGq%2FhWAu3rlCETM26FiEw24AllgcpcqeML7BMT0m5UP2wY2uD5QQjOhvoegtyY8padEgpsqoFMI0oDbCFh9n34Y8QZNIs6Whj3YvWPtQX8eAgFQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 876211ef3bba569d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| lingering-thunder-0229.nguyenchong9455.workers.dev/css/css/0.txt | 172.67.175.143 | 200 OK | 2.0 MB |
URL GET HTTP/3lingering-thunder-0229.nguyenchong9455.workers.dev/css/css/0.txt IP172.67.175.143:443
Requested byhttps://lingering-thunder-0229.nguyenchong9455.workers.dev/css/runtimeapplication-bafdd8b86fd88bb4273d.js CertificateIssuerGoogle Trust Services LLC Subjectnguyenchong9455.workers.dev Fingerprint4F:AF:F2:54:B4:8B:77:6C:2B:9C:3B:7E:1C:3B:60:8B:5A:24:A2:CD ValiditySat, 13 Apr 2024 20:58:01 GMT - Fri, 12 Jul 2024 20:58:00 GMT
Size2.0 MB (2013081 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer | Verdict | Alert | urlquery | phishing | Phishing - WeTransfer | OpenPhish | phishing | WeTransfer | PhishTank | phishing | WeTransfer |
GET /css/css/0.txt HTTP/1.1
Host: lingering-thunder-0229.nguyenchong9455.workers.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://lingering-thunder-0229.nguyenchong9455.workers.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 18 Apr 2024 04:56:44 GMT
content-type: text/html;charset=UTF-8
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=gzA2HId7CB3sokKNmRLN%2F2Qnhe1OfJFwppPnPZaxPk4fYqfB%2F1EQsW1e%2BUWoW%2Ffdjnhi4dK7Ef%2BpfJh1VTSgD8vFHth5WNADZoOroLqzTFmYJk1c1jxxAysnaaUTb4zMoe%2BAJ7kCWK7GLApXKUv7dJregNYfOrFGoxwXIelEziKhXhX0Ag%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 876211ef3bbb569d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| lingering-thunder-0229.nguyenchong9455.workers.dev/css/css/runtimeapplication-bafdd8b86fd88bb4273d.js | 172.67.175.143 | 200 OK | 2.0 MB |
URL GET HTTP/3lingering-thunder-0229.nguyenchong9455.workers.dev/css/css/runtimeapplication-bafdd8b86fd88bb4273d.js IP172.67.175.143:443
Requested byhttps://lingering-thunder-0229.nguyenchong9455.workers.dev/css/runtimeapplication-bafdd8b86fd88bb4273d.js CertificateIssuerGoogle Trust Services LLC Subjectnguyenchong9455.workers.dev Fingerprint4F:AF:F2:54:B4:8B:77:6C:2B:9C:3B:7E:1C:3B:60:8B:5A:24:A2:CD ValiditySat, 13 Apr 2024 20:58:01 GMT - Fri, 12 Jul 2024 20:58:00 GMT
Size2.0 MB (2013081 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer | Verdict | Alert | urlquery | phishing | Phishing - WeTransfer | OpenPhish | phishing | WeTransfer | PhishTank | phishing | WeTransfer |
GET /css/css/runtimeapplication-bafdd8b86fd88bb4273d.js HTTP/1.1
Host: lingering-thunder-0229.nguyenchong9455.workers.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lingering-thunder-0229.nguyenchong9455.workers.dev/css/runtimeapplication-bafdd8b86fd88bb4273d.js
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 18 Apr 2024 04:56:43 GMT
content-type: text/html;charset=UTF-8
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=0fatbshCZILoMnsn5m5MHeCD3nHDqvvj4is2lX%2FJ7Y4v5m%2BRq3%2F2GHUBVqzdkKuqpEwMprtsccPJvejLaXpXCeiahrK6LMKajMrPFPSdAeH3lP%2BjiqD69fNTD78WXfUrDdLyNWRtRmF%2F%2Bnz3rrzSNrtS3alpmoN4iDgb1SXahbNouUjoaQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 876211e8cc90569d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| lingering-thunder-0229.nguyenchong9455.workers.dev/packs/media/actiefgrotesque/ActiefGrotesque_W_Medium-293e86f0.woff | 172.67.175.143 | 200 OK | 2.0 MB |
URL GET HTTP/3lingering-thunder-0229.nguyenchong9455.workers.dev/packs/media/actiefgrotesque/ActiefGrotesque_W_Medium-293e86f0.woff IP172.67.175.143:443
Requested byhttps://lingering-thunder-0229.nguyenchong9455.workers.dev/css/runtimeapplication-bafdd8b86fd88bb4273d.js CertificateIssuerGoogle Trust Services LLC Subjectnguyenchong9455.workers.dev Fingerprint4F:AF:F2:54:B4:8B:77:6C:2B:9C:3B:7E:1C:3B:60:8B:5A:24:A2:CD ValiditySat, 13 Apr 2024 20:58:01 GMT - Fri, 12 Jul 2024 20:58:00 GMT
Size2.0 MB (2013081 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer | Verdict | Alert | urlquery | phishing | Phishing - WeTransfer | OpenPhish | phishing | WeTransfer | PhishTank | phishing | WeTransfer |
GET /packs/media/actiefgrotesque/ActiefGrotesque_W_Medium-293e86f0.woff HTTP/1.1
Host: lingering-thunder-0229.nguyenchong9455.workers.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Referer: https://lingering-thunder-0229.nguyenchong9455.workers.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 18 Apr 2024 04:56:44 GMT
content-type: text/html;charset=UTF-8
content-length: 2013081
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2FglKMDBVQp7pAfBed%2FCATRadQuV4V1jZzVGTj%2F7FC4RPiQ%2BkoBAROVOw7RjZRqhc9iEE2CrM13OxLj7bdPZ46JfEVj8hBIvLxcyfaY%2FPTF5T36OKhbVDejCx7596M6L9ctBJj1f%2BFxt3%2FCEFYDazfORNVOFxn9b4%2FdO2etsXOGkcpFGVRQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 876211ee7aef569d-OSL
alt-svc: h3=":443"; ma=86400
|
|
| lingering-thunder-0229.nguyenchong9455.workers.dev/css/css/analytics.js | 172.67.175.143 | 200 OK | 2.0 MB |
URL GET HTTP/3lingering-thunder-0229.nguyenchong9455.workers.dev/css/css/analytics.js IP172.67.175.143:443
Requested byhttps://lingering-thunder-0229.nguyenchong9455.workers.dev/css/runtimeapplication-bafdd8b86fd88bb4273d.js CertificateIssuerGoogle Trust Services LLC Subjectnguyenchong9455.workers.dev Fingerprint4F:AF:F2:54:B4:8B:77:6C:2B:9C:3B:7E:1C:3B:60:8B:5A:24:A2:CD ValiditySat, 13 Apr 2024 20:58:01 GMT - Fri, 12 Jul 2024 20:58:00 GMT
Size2.0 MB (2013081 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer | Verdict | Alert | urlquery | phishing | Phishing - WeTransfer | OpenPhish | phishing | WeTransfer | PhishTank | phishing | WeTransfer |
GET /css/css/analytics.js HTTP/1.1
Host: lingering-thunder-0229.nguyenchong9455.workers.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://lingering-thunder-0229.nguyenchong9455.workers.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 18 Apr 2024 04:56:43 GMT
content-type: text/html;charset=UTF-8
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=94%2BIDp8H1wY6WMTWnVnDJVUhNm%2FmAHYn1Rah7DBP0T23xOVCpzPhy3JjlrZOh8ax%2BQKGwm28y172JIQpVB4uGus%2FlhGItlyt1mpxso%2BhwQrtZJTzOxgYRz%2BpmC%2BMK5iZX2jA%2F5LficfiiNmvyexZZtVxkp%2BJGzJXQN6uDmH3UImKE8Vy7w%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 876211e8dca8569d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| lingering-thunder-0229.nguyenchong9455.workers.dev/css/css/0.txt | 172.67.175.143 | 200 OK | 2.0 MB |
URL GET HTTP/3lingering-thunder-0229.nguyenchong9455.workers.dev/css/css/0.txt IP172.67.175.143:443
Requested byhttps://lingering-thunder-0229.nguyenchong9455.workers.dev/css/runtimeapplication-bafdd8b86fd88bb4273d.js CertificateIssuerGoogle Trust Services LLC Subjectnguyenchong9455.workers.dev Fingerprint4F:AF:F2:54:B4:8B:77:6C:2B:9C:3B:7E:1C:3B:60:8B:5A:24:A2:CD ValiditySat, 13 Apr 2024 20:58:01 GMT - Fri, 12 Jul 2024 20:58:00 GMT
Size2.0 MB (2013081 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer | Verdict | Alert | urlquery | phishing | Phishing - WeTransfer | OpenPhish | phishing | WeTransfer | PhishTank | phishing | WeTransfer |
GET /css/css/0.txt HTTP/1.1
Host: lingering-thunder-0229.nguyenchong9455.workers.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://lingering-thunder-0229.nguyenchong9455.workers.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 18 Apr 2024 04:56:43 GMT
content-type: text/html;charset=UTF-8
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=6NuwAzeJeqK7TowQFy%2FeRx%2BWdp%2Fqw4QxC1j5%2FHuK2zKog2rS7cYYeE4kO5XqY38WgoOJj%2FZ%2BeET%2BLjlW8whlq7HwgvCvKqtcKrg2KtLA9tZUP3greMMAu%2Fy5udMrk0TTKz51vcGJutdZsPduSGHmAlAP2Uo41qO6tQVO%2Fw28XBqlFkvpCw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 876211e90d16569d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| lingering-thunder-0229.nguyenchong9455.workers.dev/css/css/vendor-ef8fd9ca3a0295622111.js | 172.67.175.143 | 200 OK | 2.0 MB |
URL GET HTTP/3lingering-thunder-0229.nguyenchong9455.workers.dev/css/css/vendor-ef8fd9ca3a0295622111.js IP172.67.175.143:443
Requested byhttps://lingering-thunder-0229.nguyenchong9455.workers.dev/css/runtimeapplication-bafdd8b86fd88bb4273d.js CertificateIssuerGoogle Trust Services LLC Subjectnguyenchong9455.workers.dev Fingerprint4F:AF:F2:54:B4:8B:77:6C:2B:9C:3B:7E:1C:3B:60:8B:5A:24:A2:CD ValiditySat, 13 Apr 2024 20:58:01 GMT - Fri, 12 Jul 2024 20:58:00 GMT
Size2.0 MB (2013081 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer | Verdict | Alert | urlquery | phishing | Phishing - WeTransfer | OpenPhish | phishing | WeTransfer | PhishTank | phishing | WeTransfer |
GET /css/css/vendor-ef8fd9ca3a0295622111.js HTTP/1.1
Host: lingering-thunder-0229.nguyenchong9455.workers.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lingering-thunder-0229.nguyenchong9455.workers.dev/css/runtimeapplication-bafdd8b86fd88bb4273d.js
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 18 Apr 2024 04:56:43 GMT
content-type: text/html;charset=UTF-8
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=6LtHBX7Nk%2BZ1o8SFdv2JZeie8XmaD%2Fi9iFuI44XW2OIpRoLjcpxVWsfgd7EUAmbyYUkNX7iu7S96pkjpKvjIDVjpt6PVgNPDBo8A27tPCCQhulRLz3SMIMjvziuaNjGLqqTgDmeN6H3xfm4SghT3jN8KUqe2Dq9POqga4cXZaF4GhKG1Kg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 876211e8cc93569d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| lingering-thunder-0229.nguyenchong9455.workers.dev/css/css/fbevents.js | 172.67.175.143 | 200 OK | 2.0 MB |
URL GET HTTP/3lingering-thunder-0229.nguyenchong9455.workers.dev/css/css/fbevents.js IP172.67.175.143:443
Requested byhttps://lingering-thunder-0229.nguyenchong9455.workers.dev/css/runtimeapplication-bafdd8b86fd88bb4273d.js CertificateIssuerGoogle Trust Services LLC Subjectnguyenchong9455.workers.dev Fingerprint4F:AF:F2:54:B4:8B:77:6C:2B:9C:3B:7E:1C:3B:60:8B:5A:24:A2:CD ValiditySat, 13 Apr 2024 20:58:01 GMT - Fri, 12 Jul 2024 20:58:00 GMT
Size2.0 MB (2013081 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer | Verdict | Alert | urlquery | phishing | Phishing - WeTransfer | OpenPhish | phishing | WeTransfer | PhishTank | phishing | WeTransfer |
GET /css/css/fbevents.js HTTP/1.1
Host: lingering-thunder-0229.nguyenchong9455.workers.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://lingering-thunder-0229.nguyenchong9455.workers.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 18 Apr 2024 04:56:43 GMT
content-type: text/html;charset=UTF-8
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=QbpOVKDWJDMvC69XyH1ST6HsVi5E7N10NVObrIqc7Ba%2FjtkT7D1p400M%2BAw1VbSUi50YgC4ZiJYh4R%2BARG%2Bzgj5JrAa%2BArbhmIfq26Ii4bOy7QOVKZq9TjRU%2F8yZA5unoEW1MtL4I2qbCIZ0AlljURkEkztMLH4D0Mdo%2BaNblR1SLK8huw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 876211e8cc9e569d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| lingering-thunder-0229.nguyenchong9455.workers.dev/packs/media/actiefgrotesque/ActiefGrotesque_W_Bd-1bdd99f9.woff | 172.67.175.143 | 200 OK | 2.0 MB |
URL GET HTTP/3lingering-thunder-0229.nguyenchong9455.workers.dev/packs/media/actiefgrotesque/ActiefGrotesque_W_Bd-1bdd99f9.woff IP172.67.175.143:443
Requested byhttps://lingering-thunder-0229.nguyenchong9455.workers.dev/css/runtimeapplication-bafdd8b86fd88bb4273d.js CertificateIssuerGoogle Trust Services LLC Subjectnguyenchong9455.workers.dev Fingerprint4F:AF:F2:54:B4:8B:77:6C:2B:9C:3B:7E:1C:3B:60:8B:5A:24:A2:CD ValiditySat, 13 Apr 2024 20:58:01 GMT - Fri, 12 Jul 2024 20:58:00 GMT
Size2.0 MB (2013081 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer | Verdict | Alert | urlquery | phishing | Phishing - WeTransfer | OpenPhish | phishing | WeTransfer | PhishTank | phishing | WeTransfer |
GET /packs/media/actiefgrotesque/ActiefGrotesque_W_Bd-1bdd99f9.woff HTTP/1.1
Host: lingering-thunder-0229.nguyenchong9455.workers.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Referer: https://lingering-thunder-0229.nguyenchong9455.workers.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 18 Apr 2024 04:56:44 GMT
content-type: text/html;charset=UTF-8
content-length: 2013081
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=5VsbFHBRCSF1T5eDXVeG5t2iDvkAkcvGnCCN5XBB%2BkOfcNMWfnULfICxiuRH1Xyk6B%2FtbupFrJnxm3LAGTMnCuJ5iCdSxBYnOF9uNmojSNcDXVOpO6gDKjDEX%2FG0rk8x1wP%2FfL%2BiGfS7rb%2BFqiqptQtcEn%2FXrTvn%2Bqo8fuzg%2BPQeotGjUw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 876211ee5aca569d-OSL
alt-svc: h3=":443"; ma=86400
|
|
| d19ptbnuzhibkh.cloudfront.net/2.10.2/sp.js | 54.230.241.130 | 200 OK | 98 kB |
URL GET HTTP/2d19ptbnuzhibkh.cloudfront.net/2.10.2/sp.js IP54.230.241.130:443
Requested byhttps://lingering-thunder-0229.nguyenchong9455.workers.dev/css/runtimeapplication-bafdd8b86fd88bb4273d.js CertificateIssuerAmazon Subject*.cloudfront.net FingerprintFA:21:45:DC:4D:94:03:A3:09:77:51:78:4A:21:F2:C5:6D:94:BE:52 ValidityTue, 10 Oct 2023 00:00:00 GMT - Thu, 19 Sep 2024 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (64917) Hash69c0026af7f2b8f2eed23f2f5fc5c68f a0e872c89db6991d03932756d43480e40eb38628 d9a9b2a15666ace13ce304e0a34baaa8a82ce5bc9d01480872869c9871dc552c
GET /2.10.2/sp.js HTTP/1.1
Host: d19ptbnuzhibkh.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://lingering-thunder-0229.nguyenchong9455.workers.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript
content-length: 29895
date: Sun, 07 Apr 2024 09:53:15 GMT
last-modified: Tue, 30 Apr 2019 15:14:08 GMT
etag: "c7b65b3f4e8761897af9a3ca5d76682e"
cache-control: max-age=315360000
content-encoding: gzip
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 db0992ba349fc51d5151ec8330e36c28.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: IgqE4zPraEKxDYOgAuxBnm-WnavluFpxFBCbMHokOLKfy8e-kSLxLA==
age: 932612
X-Firefox-Spdy: h2
|
|