Report - skywalker.infura-ipfs.io/ipfs/bafybeifr4lnr2o6b4ed24mh4t5gw64sdh6wpcqb2j6lmxijo2ezwo7zzhi/

Report Overview

Submitted URL
skywalker.infura-ipfs.io/ipfs/bafybeifr4lnr2o6b4ed24mh4t5gw64sdh6wpcqb2j6lmxijo2ezwo7zzhi/
IP
54.205.31.215
ASN
#14618 AMAZON-AES
Submitted
2024-05-07 17:04:41
Access
public
Website Title
WeTransfer
Final URL
skywalker.infura-ipfs.io/ipfs/bafybeifr4lnr2o6b4ed24mh4t5gw64sdh6wpcqb2j6lmxijo2ezwo7zzhi/
Tags
wetransfer phishing financial
urlquery detections
Phishing - WeTransfer

Detections

urlquery
12
Network Intrusion Detection
0
Threat Detection Systems
2

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
ajax.googleapis.com	12905	2005-01-25	2013-08-16	2024-05-07	439 B	31 kB	142.250.74.170
stackpath.bootstrapcdn.com	2467	2012-05-25	2018-06-15	2024-05-07	459 B	16 kB	104.18.11.207
maxcdn.bootstrapcdn.com	724	2012-05-25	2014-06-18	2024-05-06	481 B	20 kB	104.18.10.207
mk2-b4c8d3.ingress-earth.ewp.live	unknown	2022-05-26	2022-08-12	2024-03-16	2.2 kB	347 kB	63.250.43.129
prod-cdn.wetransfer.net	25787	2009-02-02	2018-10-23	2024-05-02	2.7 kB	196 kB	52.85.243.7
skywalker.infura-ipfs.io	unknown	2020-01-30	2023-07-11	2024-01-19	5.8 kB	621 kB	54.205.31.215
cdnjs.cloudflare.com	235	2009-02-17	2015-04-17	2024-05-06	988 B	14 kB	104.17.24.14
code.jquery.com	634	2005-12-10	2012-05-21	2024-05-07	938 B	49 kB	151.101.130.137

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

Scan Date	Severity	Indicator	Alert
2024-05-07	medium	skywalker.infura-ipfs.io/ipfs/bafybeifr4lnr2o6b4ed24mh4t5gw64sdh6wpcqb2j6lmxijo2ezwo7zzhi/	WeTransfer

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (9)

	URL	Size	First Seen	Last Seen
	maxcdn.bootstrapcdn.com/bootstrap/4.0.0/js/bootstrap.min.js	49 kB	2023-03-07	2024-05-29
Pretty URL maxcdn.bootstrapcdn.com/bootstrap/4.0.0/js/bootstrap.min.js IP 104.18.10.207 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:02:44 Last Seen2024-05-29 04:43:21 Times Seen142798 Hash 14d449eb8876fa55e1ef3c2cc52b0c17 a9545831803b1359cfeed47e3b4d6bae68e40e99 e7ed36ceee5450b4243bbc35188afabdfb4280c7c57597001de0ed167299b01b Loading...

	cdnjs.cloudflare.com/ajax/libs/popper.js/1.12.9/umd/popper.min.js	19 kB	2023-03-07	2024-05-29
Pretty URL cdnjs.cloudflare.com/ajax/libs/popper.js/1.12.9/umd/popper.min.js IP 104.17.24.14 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:02:44 Last Seen2024-05-29 04:43:21 Times Seen117921 Hash 70d3fda195602fe8b75e0097eed74dde c3b977aa4b8dfb69d651e07015031d385ded964b a52f7aa54d7bcaafa056ee0a050262dfc5694ae28dee8b4cac3429af37ff0d66 Loading...

	skywalker.infura-ipfs.io/ipfs/bafybeifr4lnr2o6b4ed24mh4t5gw64sdh6wpcqb2j6lmxijo2ezwo7zzhi/	180 B	2023-03-10	2024-05-28
Pretty URL skywalker.infura-ipfs.io/ipfs/bafybeifr4lnr2o6b4ed24mh4t5gw64sdh6wpcqb2j6lmxijo2ezwo7zzhi/ IP 54.205.31.215 ASN #14618 AMAZON-AES Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-10 03:57:28 Last Seen2024-05-28 09:05:24 Times Seen83 Hash 5e482b304c542822e2abfe756d0afc2e 472f517561c6a24eb42a10949f26f2958ed66b0f 190c0f852e7d36453f82e6b3724dc4fdfa6645470dcb81c3123cb45abf1d8feb Loading...

	skywalker.infura-ipfs.io/ipfs/bafybeifr4lnr2o6b4ed24mh4t5gw64sdh6wpcqb2j6lmxijo2ezwo7zzhi/	255 B	2023-03-07	2024-05-28
Pretty URL skywalker.infura-ipfs.io/ipfs/bafybeifr4lnr2o6b4ed24mh4t5gw64sdh6wpcqb2j6lmxijo2ezwo7zzhi/ IP 54.205.31.215 ASN #14618 AMAZON-AES Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 13:52:30 Last Seen2024-05-28 09:05:24 Times Seen81 Hash 10c6db510fa5e86ca96c9e5478998536 be37bd9e1d8e9ace1a0d36b68ac844316073f0d6 00de48e5cc9a51c60b85c1b75fc1552fca4090e5e17ec5162c35f6edcc803c9a Loading...

	ajax.googleapis.com/ajax/libs/jquery/2.2.4/jquery.min.js	86 kB	2023-03-07	2024-05-29
Pretty URL ajax.googleapis.com/ajax/libs/jquery/2.2.4/jquery.min.js IP 142.250.74.170 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:02:00 Last Seen2024-05-29 05:00:16 Times Seen399055 Hash 2f6b11a7e914718e0290410e85366fe9 69bb69e25ca7d5ef0935317584e6153f3fd9a88c 05b85d96f41fff14d8f608dad03ab71e2c1017c2da0914d7c59291bad7a54f8e Loading...

	skywalker.infura-ipfs.io/ipfs/bafybeifr4lnr2o6b4ed24mh4t5gw64sdh6wpcqb2j6lmxijo2ezwo7zzhi/	316 B	2023-03-07	2024-05-28
Pretty URL skywalker.infura-ipfs.io/ipfs/bafybeifr4lnr2o6b4ed24mh4t5gw64sdh6wpcqb2j6lmxijo2ezwo7zzhi/ IP 54.205.31.215 ASN #14618 AMAZON-AES Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 13:52:30 Last Seen2024-05-28 09:05:24 Times Seen83 Hash 50269a5c4bb0b82d479ce39d3debb16c 7d2d8e2693dc353cd52bcb010c12bea6dee2c4ee 1907e0faf4a94ed2bf53eb7eea33143b11fc44882e978c7b12c1c26f895a26af Loading...

	stackpath.bootstrapcdn.com/bootstrap/4.1.3/js/bootstrap.min.js	51 kB	2023-03-07	2024-05-29
Pretty URL stackpath.bootstrapcdn.com/bootstrap/4.1.3/js/bootstrap.min.js IP 104.18.11.207 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:02:44 Last Seen2024-05-29 05:24:42 Times Seen252005 Hash 67176c242e1bdc20603c878dee836df3 27a71b00383d61ef3c489326b3564d698fc1227c 56c12a125b021d21a69e61d7190cefa168d6c28ce715265cea1b3b0112d169c4 Loading...

	code.jquery.com/jquery-3.2.1.slim.min.js	70 kB	2023-03-07	2024-05-29
Pretty URL code.jquery.com/jquery-3.2.1.slim.min.js IP 151.101.130.137 ASN #54113 FASTLY Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:02:43 Last Seen2024-05-29 04:43:20 Times Seen111449 Hash 5f48fc77cac90c4778fa24ec9c57f37d 9e89d1515bc4c371b86f4cb1002fd8e377c1829f 9365920887b11b33a3dc4ba28a0f93951f200341263e3b9cefd384798e4be398 Loading...

	skywalker.infura-ipfs.io/ipfs/bafybeifr4lnr2o6b4ed24mh4t5gw64sdh6wpcqb2j6lmxijo2ezwo7zzhi/	2.3 kB	2024-05-07	2024-05-07
Pretty URL skywalker.infura-ipfs.io/ipfs/bafybeifr4lnr2o6b4ed24mh4t5gw64sdh6wpcqb2j6lmxijo2ezwo7zzhi/ IP 54.205.31.215 ASN #14618 AMAZON-AES Introduced by scriptElement Embedded in HTML true Observations First Seen2024-05-07 19:04:43 Last Seen2024-05-07 19:04:43 Times Seen1 Hash 605d6a66db237f13986ddcfbd4fb571f 74a324fa21824ff913403122be9a1d135a929b45 05f93ea7d1a8a2d744197bfccd558faae14ba77c1a668a3e80acbd92af32968a Loading...

HTTP Transactions (27)

URL IP Response Size

prod-cdn.wetransfer.net/packs/media/actiefgrotesque/ActiefGrotesque_W_Regular-1f437876.woff

52.85.243.7

200 OK

31 kB

URL GET HTTP/2
prod-cdn.wetransfer.net/packs/media/actiefgrotesque/ActiefGrotesque_W_Regular-1f437876.woff
IP
52.85.243.7:443
ASN
#16509 AMAZON-02

Requested by
https://skywalker.infura-ipfs.io/ipfs/bafybeifr4lnr2o6b4ed24mh4t5gw64sdh6wpcqb2j6lmxijo2ezwo7zzhi/
Certificate
IssuerAmazon
Subjectwetransfer.net
Fingerprint0B:0D:65:82:74:97:1B:AD:60:D8:48:2B:7D:A7:00:EA:34:08:86:48
ValiditySun, 30 Jul 2023 00:00:00 GMT - Wed, 28 Aug 2024 23:59:59 GMT

File type
Web Open Font Format, TrueType, length 31120, version 1.6554
Size
31 kB (31120 bytes)
Hash
57cbbfdafc43e0deecc75a309dd042c6
b9cc2ff331b8520706de175f5b3fdba6731a9bfc
a9117f16bdaa64c953b303bef951dfca6316ef59f1b7ca72d5b946b1d815f6a6

HTTP Headers

GET /packs/media/actiefgrotesque/ActiefGrotesque_W_Regular-1f437876.woff HTTP/1.1
Host: prod-cdn.wetransfer.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://skywalker.infura-ipfs.io/
Origin: https://skywalker.infura-ipfs.io
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: font/woff
content-length: 31120
date: Mon, 06 May 2024 00:55:58 GMT
last-modified: Thu, 21 Dec 2023 14:25:54 GMT
etag: "57cbbfdafc43e0deecc75a309dd042c6"
x-amz-server-side-encryption: AES256
cache-control: public, max-age=31536000
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 60f2c4b6c07455537be83f75f12576e8.cloudfront.net (CloudFront)
x-amz-cf-pop: ARN1-C1
x-amz-cf-id: ZK1ZaQdqQHqNfqHYHvw3gq93owBqCChf-zKraVMUQXzT0YZ8pG8Dzg==
age: 144497
X-Firefox-Spdy: h2

prod-cdn.wetransfer.net/packs/media/actiefgrotesque/ActiefGrotesque_W_Medium-293e86f0.woff

52.85.243.7

200 OK

32 kB

URL GET HTTP/2
prod-cdn.wetransfer.net/packs/media/actiefgrotesque/ActiefGrotesque_W_Medium-293e86f0.woff
IP
52.85.243.7:443
ASN
#16509 AMAZON-02

Requested by
https://skywalker.infura-ipfs.io/ipfs/bafybeifr4lnr2o6b4ed24mh4t5gw64sdh6wpcqb2j6lmxijo2ezwo7zzhi/
Certificate
IssuerAmazon
Subjectwetransfer.net
Fingerprint0B:0D:65:82:74:97:1B:AD:60:D8:48:2B:7D:A7:00:EA:34:08:86:48
ValiditySun, 30 Jul 2023 00:00:00 GMT - Wed, 28 Aug 2024 23:59:59 GMT

File type
Web Open Font Format, TrueType, length 32124, version 1.6554
Size
32 kB (32124 bytes)
Hash
868aedeefe7669e8a4f7196f7df5d058
45bd20ef2c6b717a2526efd98a01207979b2a623
d8700b022ef56752cd12ff224b3f409e84aeb8a43ac68ba052167096baf46555

HTTP Headers

GET /packs/media/actiefgrotesque/ActiefGrotesque_W_Medium-293e86f0.woff HTTP/1.1
Host: prod-cdn.wetransfer.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://skywalker.infura-ipfs.io/
Origin: https://skywalker.infura-ipfs.io
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: font/woff
content-length: 32124
date: Mon, 06 May 2024 00:55:58 GMT
last-modified: Thu, 21 Dec 2023 14:25:54 GMT
etag: "868aedeefe7669e8a4f7196f7df5d058"
x-amz-server-side-encryption: AES256
cache-control: public, max-age=31536000
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 60f2c4b6c07455537be83f75f12576e8.cloudfront.net (CloudFront)
x-amz-cf-pop: ARN1-C1
x-amz-cf-id: KwgdAD_ZVHAcX1ziB7pGtP5wz0gs5S5927OQBi2zs70cmL-OaFOOZw==
age: 144497
X-Firefox-Spdy: h2

prod-cdn.wetransfer.net/packs/media/gt-super-wt/GT-Super-WT-Super-1b214df1.woff

52.85.243.7

200 OK

43 kB

URL GET HTTP/2
prod-cdn.wetransfer.net/packs/media/gt-super-wt/GT-Super-WT-Super-1b214df1.woff
IP
52.85.243.7:443
ASN
#16509 AMAZON-02

Requested by
https://skywalker.infura-ipfs.io/ipfs/bafybeifr4lnr2o6b4ed24mh4t5gw64sdh6wpcqb2j6lmxijo2ezwo7zzhi/
Certificate
IssuerAmazon
Subjectwetransfer.net
Fingerprint0B:0D:65:82:74:97:1B:AD:60:D8:48:2B:7D:A7:00:EA:34:08:86:48
ValiditySun, 30 Jul 2023 00:00:00 GMT - Wed, 28 Aug 2024 23:59:59 GMT

File type
Web Open Font Format, TrueType, length 43188, version 0.0
Size
43 kB (43188 bytes)
Hash
55576599a2d772f9297c5036d355b1fb
c52e4f9a59137105deb12a3de25ee7d5a15fd286
1e3d5d86432b9bfcdf25ce0e35fd23667cea86f6fa71fa920cd84abb70258f73

HTTP Headers

GET /packs/media/gt-super-wt/GT-Super-WT-Super-1b214df1.woff HTTP/1.1
Host: prod-cdn.wetransfer.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://skywalker.infura-ipfs.io/
Origin: https://skywalker.infura-ipfs.io
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: font/woff
content-length: 43188
date: Mon, 06 May 2024 00:55:58 GMT
last-modified: Thu, 21 Dec 2023 14:25:55 GMT
etag: "55576599a2d772f9297c5036d355b1fb"
x-amz-server-side-encryption: AES256
cache-control: public, max-age=31536000
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 60f2c4b6c07455537be83f75f12576e8.cloudfront.net (CloudFront)
x-amz-cf-pop: ARN1-C1
x-amz-cf-id: _5-g9jqp84Ga9HySU6gln368IvffXNBjYkumSbjHgRzDvFm1SzuBcQ==
age: 144497
X-Firefox-Spdy: h2

skywalker.infura-ipfs.io/ipfs/bafybeifr4lnr2o6b4ed24mh4t5gw64sdh6wpcqb2j6lmxijo2ezwo7zzhi/

54.205.31.215

200 OK

613 kB

URL User Request GET HTTP/1.1
skywalker.infura-ipfs.io/ipfs/bafybeifr4lnr2o6b4ed24mh4t5gw64sdh6wpcqb2j6lmxijo2ezwo7zzhi/
IP
54.205.31.215:443
ASN
#14618 AMAZON-AES

Certificate
IssuerAmazon
Subjectinfura-ipfs.io
Fingerprint65:7C:55:31:4F:BD:D1:6D:0F:51:8B:3C:AC:4D:5F:02:30:0E:A9:E3
ValidityMon, 06 Nov 2023 00:00:00 GMT - Wed, 04 Dec 2024 23:59:59 GMT

File type
HTML document, ASCII text, with very long lines (62988), with CRLF line terminators
Size
613 kB (612961 bytes)
Hash
a90d218d2aef9d2d358895853db7fd2e
b7ca4f0007cf2abcb69bc69515c09269e8ea46fb
a30650d1dbe84ff8ad0414aa2374a3c6b622084a648f4111a5ccdb5112e87a67

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - WeTransfer
OpenPhish	phishing	WeTransfer

HTTP Headers

GET /ipfs/bafybeifr4lnr2o6b4ed24mh4t5gw64sdh6wpcqb2j6lmxijo2ezwo7zzhi/ HTTP/1.1
Host: skywalker.infura-ipfs.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Accept-Ranges: bytes
Access-Control-Allow-Headers: Content-Type, Range, User-Agent, X-Requested-With
Access-Control-Expose-Headers: Content-Length, Content-Range, X-Chunked-Output, X-Ipfs-Path, X-Ipfs-Roots, X-Stream-Output
Cache-Control: public, max-age=29030400, immutable
Content-Length: 612961
Content-Type: text/html
Date: Tue, 07 May 2024 17:04:14 GMT
Etag: "bafybeifr4lnr2o6b4ed24mh4t5gw64sdh6wpcqb2j6lmxijo2ezwo7zzhi"
Vary: Origin
X-Ipfs-Path: /ipfs/bafybeifr4lnr2o6b4ed24mh4t5gw64sdh6wpcqb2j6lmxijo2ezwo7zzhi/
X-Ipfs-Roots: bafybeifr4lnr2o6b4ed24mh4t5gw64sdh6wpcqb2j6lmxijo2ezwo7zzhi
X-Robots-Tag: noindex

cdnjs.cloudflare.com/ajax/libs/popper.js/1.12.9/umd/popper.min.js

104.17.24.14

200 OK

6.2 kB

URL GET HTTP/2
cdnjs.cloudflare.com/ajax/libs/popper.js/1.12.9/umd/popper.min.js
IP
104.17.24.14:443
ASN
#13335 CLOUDFLARENET

Requested by
https://skywalker.infura-ipfs.io/ipfs/bafybeifr4lnr2o6b4ed24mh4t5gw64sdh6wpcqb2j6lmxijo2ezwo7zzhi/
Certificate
IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint7A:EA:B9:09:71:70:6C:87:C9:D3:82:74:8A:7B:B4:60:E5:40:2D:8D
ValidityMon, 03 Jul 2023 00:00:00 GMT - Tue, 02 Jul 2024 23:59:59 GMT

File type
JavaScript source, ASCII text, with very long lines (19015)
Size
6.2 kB (6157 bytes)
Hash
70d3fda195602fe8b75e0097eed74dde
c3b977aa4b8dfb69d651e07015031d385ded964b
a52f7aa54d7bcaafa056ee0a050262dfc5694ae28dee8b4cac3429af37ff0d66

HTTP Headers

GET /ajax/libs/popper.js/1.12.9/umd/popper.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://skywalker.infura-ipfs.io/
Origin: https://skywalker.infura-ipfs.io
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Tue, 07 May 2024 17:04:15 GMT
content-type: application/javascript; charset=utf-8
content-length: 6157
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03fa9-4af4"
last-modified: Mon, 04 May 2020 16:15:37 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 593529
expires: Sun, 27 Apr 2025 17:04:15 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ycoOp79OS61Gql4svteQ%2FSBkrJzwcDbUr4LkvPHkMCaG%2BLQLeIcq5F%2FNY287A%2Bws6INazS3vyiQEuG%2FoCyDk%2BJ%2BbcNruYPUNW02%2Blkd5F%2BV%2BF%2FeR%2Bu9Ejez1L1BTwI2vbomID4md"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 8802c9befecd0afe-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

code.jquery.com/jquery-3.2.1.slim.min.js

151.101.130.137

200 OK

24 kB

URL GET HTTP/2
code.jquery.com/jquery-3.2.1.slim.min.js
IP
151.101.130.137:443
ASN
#54113 FASTLY

Requested by
https://skywalker.infura-ipfs.io/ipfs/bafybeifr4lnr2o6b4ed24mh4t5gw64sdh6wpcqb2j6lmxijo2ezwo7zzhi/
Certificate
IssuerSectigo Limited
Subject*.jquery.com
FingerprintD2:19:0A:AD:CE:BB:9C:61:17:5D:29:4B:A2:54:E8:C6:91:B8:F9:8D
ValidityTue, 11 Jul 2023 00:00:00 GMT - Sun, 14 Jul 2024 23:59:59 GMT

File type
JavaScript source, ASCII text, with very long lines (32012)
Size
24 kB (23856 bytes)
Hash
5f48fc77cac90c4778fa24ec9c57f37d
9e89d1515bc4c371b86f4cb1002fd8e377c1829f
9365920887b11b33a3dc4ba28a0f93951f200341263e3b9cefd384798e4be398

HTTP Headers

GET /jquery-3.2.1.slim.min.js HTTP/1.1
Host: code.jquery.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://skywalker.infura-ipfs.io/
Origin: https://skywalker.infura-ipfs.io
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Fri, 18 Oct 1991 12:00:00 GMT
etag: W/"28feccc0-10fdd"
cache-control: public, max-age=31536000, stale-while-revalidate=604800
access-control-allow-origin: *
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Tue, 07 May 2024 17:04:15 GMT
age: 384077
x-served-by: cache-lga21963-LGA, cache-hel1410033-HEL
x-cache: HIT, HIT
x-cache-hits: 43, 4925
x-timer: S1715101455.203088,VS0,VE0
vary: Accept-Encoding
content-length: 23856
X-Firefox-Spdy: h2

skywalker.infura-ipfs.io/ipfs/bafybeifr4lnr2o6b4ed24mh4t5gw64sdh6wpcqb2j6lmxijo2ezwo7zzhi/css/gtm.js

54.205.31.215

404 Not Found

182 B

URL GET HTTP/1.1
skywalker.infura-ipfs.io/ipfs/bafybeifr4lnr2o6b4ed24mh4t5gw64sdh6wpcqb2j6lmxijo2ezwo7zzhi/css/gtm.js
IP
54.205.31.215:443
ASN
#14618 AMAZON-AES

Requested by
https://skywalker.infura-ipfs.io/ipfs/bafybeifr4lnr2o6b4ed24mh4t5gw64sdh6wpcqb2j6lmxijo2ezwo7zzhi/
Certificate
IssuerAmazon
Subjectinfura-ipfs.io
Fingerprint65:7C:55:31:4F:BD:D1:6D:0F:51:8B:3C:AC:4D:5F:02:30:0E:A9:E3
ValidityMon, 06 Nov 2023 00:00:00 GMT - Wed, 04 Dec 2024 23:59:59 GMT

File type
ASCII text
Size
182 B (182 bytes)
Hash
67a63f3bf559437a5ade7091ed05091d
904a2e4fa83712010a94abc5bdc606e5acafa67e
4b2d5cb11f43fbf5319659046bcc285e132e0b31c550816787ad1d5af578c2c3

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - WeTransfer

HTTP Headers

GET /ipfs/bafybeifr4lnr2o6b4ed24mh4t5gw64sdh6wpcqb2j6lmxijo2ezwo7zzhi/css/gtm.js HTTP/1.1
Host: skywalker.infura-ipfs.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://skywalker.infura-ipfs.io/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 404 Not Found
Access-Control-Allow-Headers: Content-Type, Range, User-Agent, X-Requested-With
Access-Control-Expose-Headers: Content-Length, Content-Range, X-Chunked-Output, X-Ipfs-Path, X-Ipfs-Roots, X-Stream-Output
Content-Length: 182
Content-Type: text/plain; charset=utf-8
Date: Tue, 07 May 2024 17:04:15 GMT
Vary: Origin
X-Content-Type-Options: nosniff
X-Ipfs-Path: /ipfs/bafybeifr4lnr2o6b4ed24mh4t5gw64sdh6wpcqb2j6lmxijo2ezwo7zzhi/css/gtm.js
X-Robots-Tag: noindex

skywalker.infura-ipfs.io/ipfs/bafybeifr4lnr2o6b4ed24mh4t5gw64sdh6wpcqb2j6lmxijo2ezwo7zzhi/css/application-c2b6f877fed288c2431f.html

54.205.31.215

404 Not Found

213 B

URL GET HTTP/1.1
skywalker.infura-ipfs.io/ipfs/bafybeifr4lnr2o6b4ed24mh4t5gw64sdh6wpcqb2j6lmxijo2ezwo7zzhi/css/application-c2b6f877fed288c2431f.html
IP
54.205.31.215:443
ASN
#14618 AMAZON-AES

Requested by
https://skywalker.infura-ipfs.io/ipfs/bafybeifr4lnr2o6b4ed24mh4t5gw64sdh6wpcqb2j6lmxijo2ezwo7zzhi/
Certificate
IssuerAmazon
Subjectinfura-ipfs.io
Fingerprint65:7C:55:31:4F:BD:D1:6D:0F:51:8B:3C:AC:4D:5F:02:30:0E:A9:E3
ValidityMon, 06 Nov 2023 00:00:00 GMT - Wed, 04 Dec 2024 23:59:59 GMT

File type
ASCII text
Size
213 B (213 bytes)
Hash
d63decc25b9bd30a23289dbe0c2c6bbe
8ac6e359b38bb4f395260c5c05d4b99075c7b24c
5f3237ca8866b7ac91f2cf9800e4d0dedae8de73ef4331a0fb7364bd5ebee63a

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - WeTransfer

HTTP Headers

GET /ipfs/bafybeifr4lnr2o6b4ed24mh4t5gw64sdh6wpcqb2j6lmxijo2ezwo7zzhi/css/application-c2b6f877fed288c2431f.html HTTP/1.1
Host: skywalker.infura-ipfs.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://skywalker.infura-ipfs.io/ipfs/bafybeifr4lnr2o6b4ed24mh4t5gw64sdh6wpcqb2j6lmxijo2ezwo7zzhi/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 404 Not Found
Access-Control-Allow-Headers: Content-Type, Range, User-Agent, X-Requested-With
Access-Control-Expose-Headers: Content-Length, Content-Range, X-Chunked-Output, X-Ipfs-Path, X-Ipfs-Roots, X-Stream-Output
Content-Length: 213
Content-Type: text/plain; charset=utf-8
Date: Tue, 07 May 2024 17:04:15 GMT
Vary: Origin
X-Content-Type-Options: nosniff
X-Ipfs-Path: /ipfs/bafybeifr4lnr2o6b4ed24mh4t5gw64sdh6wpcqb2j6lmxijo2ezwo7zzhi/css/application-c2b6f877fed288c2431f.html
X-Robots-Tag: noindex

skywalker.infura-ipfs.io/ipfs/bafybeifr4lnr2o6b4ed24mh4t5gw64sdh6wpcqb2j6lmxijo2ezwo7zzhi/css/vendor-ef8fd9ca3a0295622111.html

54.205.31.215

404 Not Found

208 B

URL GET HTTP/1.1
skywalker.infura-ipfs.io/ipfs/bafybeifr4lnr2o6b4ed24mh4t5gw64sdh6wpcqb2j6lmxijo2ezwo7zzhi/css/vendor-ef8fd9ca3a0295622111.html
IP
54.205.31.215:443
ASN
#14618 AMAZON-AES

Requested by
https://skywalker.infura-ipfs.io/ipfs/bafybeifr4lnr2o6b4ed24mh4t5gw64sdh6wpcqb2j6lmxijo2ezwo7zzhi/
Certificate
IssuerAmazon
Subjectinfura-ipfs.io
Fingerprint65:7C:55:31:4F:BD:D1:6D:0F:51:8B:3C:AC:4D:5F:02:30:0E:A9:E3
ValidityMon, 06 Nov 2023 00:00:00 GMT - Wed, 04 Dec 2024 23:59:59 GMT

File type
ASCII text
Size
208 B (208 bytes)
Hash
d1b18a764f26870da143496a88abd34a
351bc52b3653ad2e01fd8d67c722b1647f198ba2
ff4c612af7cce68e8293a2d6a66e36531bc8776b6cc79897fdb2fe4c30eac4a0

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - WeTransfer

HTTP Headers

GET /ipfs/bafybeifr4lnr2o6b4ed24mh4t5gw64sdh6wpcqb2j6lmxijo2ezwo7zzhi/css/vendor-ef8fd9ca3a0295622111.html HTTP/1.1
Host: skywalker.infura-ipfs.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://skywalker.infura-ipfs.io/ipfs/bafybeifr4lnr2o6b4ed24mh4t5gw64sdh6wpcqb2j6lmxijo2ezwo7zzhi/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 404 Not Found
Access-Control-Allow-Headers: Content-Type, Range, User-Agent, X-Requested-With
Access-Control-Expose-Headers: Content-Length, Content-Range, X-Chunked-Output, X-Ipfs-Path, X-Ipfs-Roots, X-Stream-Output
Content-Length: 208
Content-Type: text/plain; charset=utf-8
Date: Tue, 07 May 2024 17:04:15 GMT
Vary: Origin
X-Content-Type-Options: nosniff
X-Ipfs-Path: /ipfs/bafybeifr4lnr2o6b4ed24mh4t5gw64sdh6wpcqb2j6lmxijo2ezwo7zzhi/css/vendor-ef8fd9ca3a0295622111.html
X-Robots-Tag: noindex

skywalker.infura-ipfs.io/ipfs/bafybeifr4lnr2o6b4ed24mh4t5gw64sdh6wpcqb2j6lmxijo2ezwo7zzhi/css/runtimeapplication-bafdd8b86fd88bb4273d.html

54.205.31.215

404 Not Found

220 B

URL GET HTTP/1.1
skywalker.infura-ipfs.io/ipfs/bafybeifr4lnr2o6b4ed24mh4t5gw64sdh6wpcqb2j6lmxijo2ezwo7zzhi/css/runtimeapplication-bafdd8b86fd88bb4273d.html
IP
54.205.31.215:443
ASN
#14618 AMAZON-AES

Requested by
https://skywalker.infura-ipfs.io/ipfs/bafybeifr4lnr2o6b4ed24mh4t5gw64sdh6wpcqb2j6lmxijo2ezwo7zzhi/
Certificate
IssuerAmazon
Subjectinfura-ipfs.io
Fingerprint65:7C:55:31:4F:BD:D1:6D:0F:51:8B:3C:AC:4D:5F:02:30:0E:A9:E3
ValidityMon, 06 Nov 2023 00:00:00 GMT - Wed, 04 Dec 2024 23:59:59 GMT

File type
ASCII text
Size
220 B (220 bytes)
Hash
70914fe1b1c70d706de316fb7b9e79ec
087da1312e2e12ee7ccd9efd50b542a13052db8c
7b8bfe050f5a0639b77dd11c54bd023c2e1d2184f6c94e304b6cb6f65eb5c66a

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - WeTransfer

HTTP Headers

GET /ipfs/bafybeifr4lnr2o6b4ed24mh4t5gw64sdh6wpcqb2j6lmxijo2ezwo7zzhi/css/runtimeapplication-bafdd8b86fd88bb4273d.html HTTP/1.1
Host: skywalker.infura-ipfs.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://skywalker.infura-ipfs.io/ipfs/bafybeifr4lnr2o6b4ed24mh4t5gw64sdh6wpcqb2j6lmxijo2ezwo7zzhi/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 404 Not Found
Access-Control-Allow-Headers: Content-Type, Range, User-Agent, X-Requested-With
Access-Control-Expose-Headers: Content-Length, Content-Range, X-Chunked-Output, X-Ipfs-Path, X-Ipfs-Roots, X-Stream-Output
Content-Length: 220
Content-Type: text/plain; charset=utf-8
Date: Tue, 07 May 2024 17:04:15 GMT
Vary: Origin
X-Content-Type-Options: nosniff
X-Ipfs-Path: /ipfs/bafybeifr4lnr2o6b4ed24mh4t5gw64sdh6wpcqb2j6lmxijo2ezwo7zzhi/css/runtimeapplication-bafdd8b86fd88bb4273d.html
X-Robots-Tag: noindex

ajax.googleapis.com/ajax/libs/jquery/2.2.4/jquery.min.js

142.250.74.170

200 OK

30 kB

URL GET HTTP/3
ajax.googleapis.com/ajax/libs/jquery/2.2.4/jquery.min.js
IP
142.250.74.170:443
ASN
#15169 GOOGLE

Requested by
https://skywalker.infura-ipfs.io/ipfs/bafybeifr4lnr2o6b4ed24mh4t5gw64sdh6wpcqb2j6lmxijo2ezwo7zzhi/
Certificate
IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
Fingerprint36:49:20:36:0C:4D:DA:55:65:64:23:0F:49:3E:FA:78:87:35:A3:79
ValidityTue, 16 Apr 2024 04:17:12 GMT - Tue, 09 Jul 2024 04:17:11 GMT

File type
JavaScript source, ASCII text, with very long lines (32065)
Size
30 kB (30028 bytes)
Hash
2f6b11a7e914718e0290410e85366fe9
69bb69e25ca7d5ef0935317584e6153f3fd9a88c
05b85d96f41fff14d8f608dad03ab71e2c1017c2da0914d7c59291bad7a54f8e

HTTP Headers

GET /ajax/libs/jquery/2.2.4/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://skywalker.infura-ipfs.io/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 30028
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 02 May 2024 23:24:47 GMT
expires: Fri, 02 May 2025 23:24:47 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
last-modified: Tue, 03 Mar 2020 19:15:00 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
age: 409168
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

skywalker.infura-ipfs.io/ipfs/bafybeifr4lnr2o6b4ed24mh4t5gw64sdh6wpcqb2j6lmxijo2ezwo7zzhi/css/en-de295c39cb769807d9fa.js

54.205.31.215

404 Not Found

202 B

URL GET HTTP/1.1
skywalker.infura-ipfs.io/ipfs/bafybeifr4lnr2o6b4ed24mh4t5gw64sdh6wpcqb2j6lmxijo2ezwo7zzhi/css/en-de295c39cb769807d9fa.js
IP
54.205.31.215:443
ASN
#14618 AMAZON-AES

Requested by
https://skywalker.infura-ipfs.io/ipfs/bafybeifr4lnr2o6b4ed24mh4t5gw64sdh6wpcqb2j6lmxijo2ezwo7zzhi/
Certificate
IssuerAmazon
Subjectinfura-ipfs.io
Fingerprint65:7C:55:31:4F:BD:D1:6D:0F:51:8B:3C:AC:4D:5F:02:30:0E:A9:E3
ValidityMon, 06 Nov 2023 00:00:00 GMT - Wed, 04 Dec 2024 23:59:59 GMT

File type
ASCII text
Size
202 B (202 bytes)
Hash
5f9946c856a576101a9b6f8bebe60574
0c4167fcf1dd298e08eecccd637d2afc4238251c
7bb155bdc9c93f089d0c459b0c0bc20c8089252d2dfb39d6c8feaa53bdcb9832

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - WeTransfer

HTTP Headers

GET /ipfs/bafybeifr4lnr2o6b4ed24mh4t5gw64sdh6wpcqb2j6lmxijo2ezwo7zzhi/css/en-de295c39cb769807d9fa.js HTTP/1.1
Host: skywalker.infura-ipfs.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://skywalker.infura-ipfs.io/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 404 Not Found
Access-Control-Allow-Headers: Content-Type, Range, User-Agent, X-Requested-With
Access-Control-Expose-Headers: Content-Length, Content-Range, X-Chunked-Output, X-Ipfs-Path, X-Ipfs-Roots, X-Stream-Output
Content-Length: 202
Content-Type: text/plain; charset=utf-8
Date: Tue, 07 May 2024 17:04:15 GMT
Vary: Origin
X-Content-Type-Options: nosniff
X-Ipfs-Path: /ipfs/bafybeifr4lnr2o6b4ed24mh4t5gw64sdh6wpcqb2j6lmxijo2ezwo7zzhi/css/en-de295c39cb769807d9fa.js
X-Robots-Tag: noindex

skywalker.infura-ipfs.io/ipfs/bafybeifr4lnr2o6b4ed24mh4t5gw64sdh6wpcqb2j6lmxijo2ezwo7zzhi/css/0.txt

54.205.31.215

404 Not Found

181 B

URL GET HTTP/1.1
skywalker.infura-ipfs.io/ipfs/bafybeifr4lnr2o6b4ed24mh4t5gw64sdh6wpcqb2j6lmxijo2ezwo7zzhi/css/0.txt
IP
54.205.31.215:443
ASN
#14618 AMAZON-AES

Requested by
https://skywalker.infura-ipfs.io/ipfs/bafybeifr4lnr2o6b4ed24mh4t5gw64sdh6wpcqb2j6lmxijo2ezwo7zzhi/
Certificate
IssuerAmazon
Subjectinfura-ipfs.io
Fingerprint65:7C:55:31:4F:BD:D1:6D:0F:51:8B:3C:AC:4D:5F:02:30:0E:A9:E3
ValidityMon, 06 Nov 2023 00:00:00 GMT - Wed, 04 Dec 2024 23:59:59 GMT

File type
ASCII text
Size
181 B (181 bytes)
Hash
b086ccd47aaa011e524c2d90bf8edda2
fe816227f9091528e5f1ed36287b347e72a110a6
9e22eb933fe0675ce90797679a2d5a21684de4324cf72d213efe6820674525b1

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - WeTransfer

HTTP Headers

GET /ipfs/bafybeifr4lnr2o6b4ed24mh4t5gw64sdh6wpcqb2j6lmxijo2ezwo7zzhi/css/0.txt HTTP/1.1
Host: skywalker.infura-ipfs.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://skywalker.infura-ipfs.io/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 404 Not Found
Access-Control-Allow-Headers: Content-Type, Range, User-Agent, X-Requested-With
Access-Control-Expose-Headers: Content-Length, Content-Range, X-Chunked-Output, X-Ipfs-Path, X-Ipfs-Roots, X-Stream-Output
Content-Length: 181
Content-Type: text/plain; charset=utf-8
Date: Tue, 07 May 2024 17:04:15 GMT
Vary: Origin
X-Content-Type-Options: nosniff
X-Ipfs-Path: /ipfs/bafybeifr4lnr2o6b4ed24mh4t5gw64sdh6wpcqb2j6lmxijo2ezwo7zzhi/css/0.txt
X-Robots-Tag: noindex

skywalker.infura-ipfs.io/ipfs/bafybeifr4lnr2o6b4ed24mh4t5gw64sdh6wpcqb2j6lmxijo2ezwo7zzhi/css/sp.js

54.205.31.215

404 Not Found

181 B

URL GET HTTP/1.1
skywalker.infura-ipfs.io/ipfs/bafybeifr4lnr2o6b4ed24mh4t5gw64sdh6wpcqb2j6lmxijo2ezwo7zzhi/css/sp.js
IP
54.205.31.215:443
ASN
#14618 AMAZON-AES

Requested by
https://skywalker.infura-ipfs.io/ipfs/bafybeifr4lnr2o6b4ed24mh4t5gw64sdh6wpcqb2j6lmxijo2ezwo7zzhi/
Certificate
IssuerAmazon
Subjectinfura-ipfs.io
Fingerprint65:7C:55:31:4F:BD:D1:6D:0F:51:8B:3C:AC:4D:5F:02:30:0E:A9:E3
ValidityMon, 06 Nov 2023 00:00:00 GMT - Wed, 04 Dec 2024 23:59:59 GMT

File type
ASCII text
Size
181 B (181 bytes)
Hash
d63472033d100f6f70687c54aef94f25
ad726e17e40d14bf6a2f67c85fec1739b0695eb5
40e700d9c6695e4666e4bbb636f7b41c341357c848c0b0ee43c75213a52a4191

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - WeTransfer

HTTP Headers

GET /ipfs/bafybeifr4lnr2o6b4ed24mh4t5gw64sdh6wpcqb2j6lmxijo2ezwo7zzhi/css/sp.js HTTP/1.1
Host: skywalker.infura-ipfs.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://skywalker.infura-ipfs.io/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 404 Not Found
Access-Control-Allow-Headers: Content-Type, Range, User-Agent, X-Requested-With
Access-Control-Expose-Headers: Content-Length, Content-Range, X-Chunked-Output, X-Ipfs-Path, X-Ipfs-Roots, X-Stream-Output
Content-Length: 181
Content-Type: text/plain; charset=utf-8
Date: Tue, 07 May 2024 17:04:15 GMT
Vary: Origin
X-Content-Type-Options: nosniff
X-Ipfs-Path: /ipfs/bafybeifr4lnr2o6b4ed24mh4t5gw64sdh6wpcqb2j6lmxijo2ezwo7zzhi/css/sp.js
X-Robots-Tag: noindex

skywalker.infura-ipfs.io/ipfs/bafybeifr4lnr2o6b4ed24mh4t5gw64sdh6wpcqb2j6lmxijo2ezwo7zzhi/css/en-0d65947306b8b68f172b.js

54.205.31.215

404 Not Found

202 B

URL GET HTTP/1.1
skywalker.infura-ipfs.io/ipfs/bafybeifr4lnr2o6b4ed24mh4t5gw64sdh6wpcqb2j6lmxijo2ezwo7zzhi/css/en-0d65947306b8b68f172b.js
IP
54.205.31.215:443
ASN
#14618 AMAZON-AES

Requested by
https://skywalker.infura-ipfs.io/ipfs/bafybeifr4lnr2o6b4ed24mh4t5gw64sdh6wpcqb2j6lmxijo2ezwo7zzhi/
Certificate
IssuerAmazon
Subjectinfura-ipfs.io
Fingerprint65:7C:55:31:4F:BD:D1:6D:0F:51:8B:3C:AC:4D:5F:02:30:0E:A9:E3
ValidityMon, 06 Nov 2023 00:00:00 GMT - Wed, 04 Dec 2024 23:59:59 GMT

File type
ASCII text
Size
202 B (202 bytes)
Hash
17fe6a86b7ed4cd1a1a4a6e02b87d4a0
c80825cf8394f2febafcd0ad45da7841a7950903
cd857ddf6709a856646a5728922feb5efadaabc910829e508e4c44539deba515

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - WeTransfer

HTTP Headers

GET /ipfs/bafybeifr4lnr2o6b4ed24mh4t5gw64sdh6wpcqb2j6lmxijo2ezwo7zzhi/css/en-0d65947306b8b68f172b.js HTTP/1.1
Host: skywalker.infura-ipfs.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://skywalker.infura-ipfs.io/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 404 Not Found
Access-Control-Allow-Headers: Content-Type, Range, User-Agent, X-Requested-With
Access-Control-Expose-Headers: Content-Length, Content-Range, X-Chunked-Output, X-Ipfs-Path, X-Ipfs-Roots, X-Stream-Output
Content-Length: 202
Content-Type: text/plain; charset=utf-8
Date: Tue, 07 May 2024 17:04:15 GMT
Vary: Origin
X-Content-Type-Options: nosniff
X-Ipfs-Path: /ipfs/bafybeifr4lnr2o6b4ed24mh4t5gw64sdh6wpcqb2j6lmxijo2ezwo7zzhi/css/en-0d65947306b8b68f172b.js
X-Robots-Tag: noindex

skywalker.infura-ipfs.io/ipfs/bafybeifr4lnr2o6b4ed24mh4t5gw64sdh6wpcqb2j6lmxijo2ezwo7zzhi/css/en-de295c39cb769807d9fa.js

54.205.31.215

404 Not Found

202 B

URL GET HTTP/1.1
skywalker.infura-ipfs.io/ipfs/bafybeifr4lnr2o6b4ed24mh4t5gw64sdh6wpcqb2j6lmxijo2ezwo7zzhi/css/en-de295c39cb769807d9fa.js
IP
54.205.31.215:443
ASN
#14618 AMAZON-AES

Requested by
https://skywalker.infura-ipfs.io/ipfs/bafybeifr4lnr2o6b4ed24mh4t5gw64sdh6wpcqb2j6lmxijo2ezwo7zzhi/
Certificate
IssuerAmazon
Subjectinfura-ipfs.io
Fingerprint65:7C:55:31:4F:BD:D1:6D:0F:51:8B:3C:AC:4D:5F:02:30:0E:A9:E3
ValidityMon, 06 Nov 2023 00:00:00 GMT - Wed, 04 Dec 2024 23:59:59 GMT

File type
ASCII text
Size
202 B (202 bytes)
Hash
5f9946c856a576101a9b6f8bebe60574
0c4167fcf1dd298e08eecccd637d2afc4238251c
7bb155bdc9c93f089d0c459b0c0bc20c8089252d2dfb39d6c8feaa53bdcb9832

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - WeTransfer

HTTP Headers

GET /ipfs/bafybeifr4lnr2o6b4ed24mh4t5gw64sdh6wpcqb2j6lmxijo2ezwo7zzhi/css/en-de295c39cb769807d9fa.js HTTP/1.1
Host: skywalker.infura-ipfs.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://skywalker.infura-ipfs.io/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 404 Not Found
Access-Control-Allow-Headers: Content-Type, Range, User-Agent, X-Requested-With
Access-Control-Expose-Headers: Content-Length, Content-Range, X-Chunked-Output, X-Ipfs-Path, X-Ipfs-Roots, X-Stream-Output
Content-Length: 202
Content-Type: text/plain; charset=utf-8
Date: Tue, 07 May 2024 17:04:15 GMT
Vary: Origin
X-Content-Type-Options: nosniff
X-Ipfs-Path: /ipfs/bafybeifr4lnr2o6b4ed24mh4t5gw64sdh6wpcqb2j6lmxijo2ezwo7zzhi/css/en-de295c39cb769807d9fa.js
X-Robots-Tag: noindex

code.jquery.com/jquery-3.2.1.slim.min.js

151.101.130.137

200 OK

24 kB

URL GET HTTP/2
code.jquery.com/jquery-3.2.1.slim.min.js
IP
151.101.130.137:443
ASN
#54113 FASTLY

Requested by
https://skywalker.infura-ipfs.io/ipfs/bafybeifr4lnr2o6b4ed24mh4t5gw64sdh6wpcqb2j6lmxijo2ezwo7zzhi/
Certificate
IssuerSectigo Limited
Subject*.jquery.com
FingerprintD2:19:0A:AD:CE:BB:9C:61:17:5D:29:4B:A2:54:E8:C6:91:B8:F9:8D
ValidityTue, 11 Jul 2023 00:00:00 GMT - Sun, 14 Jul 2024 23:59:59 GMT

File type
JavaScript source, ASCII text, with very long lines (32012)
Size
24 kB (23856 bytes)
Hash
5f48fc77cac90c4778fa24ec9c57f37d
9e89d1515bc4c371b86f4cb1002fd8e377c1829f
9365920887b11b33a3dc4ba28a0f93951f200341263e3b9cefd384798e4be398

HTTP Headers

GET /jquery-3.2.1.slim.min.js HTTP/1.1
Host: code.jquery.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://skywalker.infura-ipfs.io/
Origin: https://skywalker.infura-ipfs.io
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Fri, 18 Oct 1991 12:00:00 GMT
etag: W/"28feccc0-10fdd"
cache-control: public, max-age=31536000, stale-while-revalidate=604800
access-control-allow-origin: *
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Tue, 07 May 2024 17:04:15 GMT
age: 384077
x-served-by: cache-lga21963-LGA, cache-hel1410033-HEL
x-cache: HIT, HIT
x-cache-hits: 43, 4926
x-timer: S1715101456.777271,VS0,VE0
vary: Accept-Encoding
content-length: 23856
X-Firefox-Spdy: h2

stackpath.bootstrapcdn.com/bootstrap/4.1.3/js/bootstrap.min.js

104.18.11.207

200 OK

15 kB

URL GET HTTP/2
stackpath.bootstrapcdn.com/bootstrap/4.1.3/js/bootstrap.min.js
IP
104.18.11.207:443
ASN
#13335 CLOUDFLARENET

Requested by
https://skywalker.infura-ipfs.io/ipfs/bafybeifr4lnr2o6b4ed24mh4t5gw64sdh6wpcqb2j6lmxijo2ezwo7zzhi/
Certificate
IssuerGoogle Trust Services LLC
Subjectbootstrapcdn.com
Fingerprint57:B4:25:B9:9C:88:A1:A3:3D:F7:31:74:02:E4:D1:E0:0A:F5:11:63
ValidityWed, 27 Mar 2024 00:22:09 GMT - Tue, 25 Jun 2024 00:22:08 GMT

File type
JavaScript source, ASCII text, with very long lines (50758)
Size
15 kB (14936 bytes)
Hash
67176c242e1bdc20603c878dee836df3
27a71b00383d61ef3c489326b3564d698fc1227c
56c12a125b021d21a69e61d7190cefa168d6c28ce715265cea1b3b0112d169c4

HTTP Headers

GET /bootstrap/4.1.3/js/bootstrap.min.js HTTP/1.1
Host: stackpath.bootstrapcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://skywalker.infura-ipfs.io/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Tue, 07 May 2024 17:04:15 GMT
content-type: application/javascript; charset=utf-8
vary: Accept-Encoding
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: DE
access-control-allow-origin: *
cache-control: public, max-age=31919000
last-modified: Mon, 25 Jan 2021 22:04:06 GMT
cdn-cachedat: 11/15/2021 23:30:00
cdn-proxyver: 1.0
cdn-requestpullcode: 200
cdn-requestpullsuccess: True
cdn-edgestorageid: 723
cdn-status: 200
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
cdn-requestid: a35b0179a28ed953258d0fb41376a09c
cdn-cache: HIT
cf-cache-status: HIT
age: 593536
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 8802c9c25b7e56ba-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

cdnjs.cloudflare.com/ajax/libs/popper.js/1.12.9/umd/popper.min.js

104.17.24.14

200 OK

6.2 kB

URL GET HTTP/2
cdnjs.cloudflare.com/ajax/libs/popper.js/1.12.9/umd/popper.min.js
IP
104.17.24.14:443
ASN
#13335 CLOUDFLARENET

Requested by
https://skywalker.infura-ipfs.io/ipfs/bafybeifr4lnr2o6b4ed24mh4t5gw64sdh6wpcqb2j6lmxijo2ezwo7zzhi/
Certificate
IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint7A:EA:B9:09:71:70:6C:87:C9:D3:82:74:8A:7B:B4:60:E5:40:2D:8D
ValidityMon, 03 Jul 2023 00:00:00 GMT - Tue, 02 Jul 2024 23:59:59 GMT

File type
JavaScript source, ASCII text, with very long lines (19015)
Size
6.2 kB (6157 bytes)
Hash
70d3fda195602fe8b75e0097eed74dde
c3b977aa4b8dfb69d651e07015031d385ded964b
a52f7aa54d7bcaafa056ee0a050262dfc5694ae28dee8b4cac3429af37ff0d66

HTTP Headers

GET /ajax/libs/popper.js/1.12.9/umd/popper.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://skywalker.infura-ipfs.io/
Origin: https://skywalker.infura-ipfs.io
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Tue, 07 May 2024 17:04:15 GMT
content-type: application/javascript; charset=utf-8
content-length: 6157
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03fa9-4af4"
last-modified: Mon, 04 May 2020 16:15:37 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 593529
expires: Sun, 27 Apr 2025 17:04:15 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=UIGlMJTmsHP33RcTG4CVvlNIhNSP%2FqBjR2DKcTmp1dPAMvjctq7stY6Ya22tNfKlzao497859TugA6Dd3xQnEtmkdtNsL0PGSAfeGf7pTOAmo6iO%2FyXjVDV3rhRZ4sNlxK3kzfsZ"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 8802c9c2fe470afe-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

skywalker.infura-ipfs.io/ipfs/bafybeifr4lnr2o6b4ed24mh4t5gw64sdh6wpcqb2j6lmxijo2ezwo7zzhi/css/0.txt

54.205.31.215

404 Not Found

181 B

URL GET HTTP/1.1
skywalker.infura-ipfs.io/ipfs/bafybeifr4lnr2o6b4ed24mh4t5gw64sdh6wpcqb2j6lmxijo2ezwo7zzhi/css/0.txt
IP
54.205.31.215:443
ASN
#14618 AMAZON-AES

Requested by
https://skywalker.infura-ipfs.io/ipfs/bafybeifr4lnr2o6b4ed24mh4t5gw64sdh6wpcqb2j6lmxijo2ezwo7zzhi/
Certificate
IssuerAmazon
Subjectinfura-ipfs.io
Fingerprint65:7C:55:31:4F:BD:D1:6D:0F:51:8B:3C:AC:4D:5F:02:30:0E:A9:E3
ValidityMon, 06 Nov 2023 00:00:00 GMT - Wed, 04 Dec 2024 23:59:59 GMT

File type
ASCII text
Size
181 B (181 bytes)
Hash
b086ccd47aaa011e524c2d90bf8edda2
fe816227f9091528e5f1ed36287b347e72a110a6
9e22eb933fe0675ce90797679a2d5a21684de4324cf72d213efe6820674525b1

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - WeTransfer

HTTP Headers

GET /ipfs/bafybeifr4lnr2o6b4ed24mh4t5gw64sdh6wpcqb2j6lmxijo2ezwo7zzhi/css/0.txt HTTP/1.1
Host: skywalker.infura-ipfs.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://skywalker.infura-ipfs.io/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 404 Not Found
Access-Control-Allow-Headers: Content-Type, Range, User-Agent, X-Requested-With
Access-Control-Expose-Headers: Content-Length, Content-Range, X-Chunked-Output, X-Ipfs-Path, X-Ipfs-Roots, X-Stream-Output
Content-Length: 181
Content-Type: text/plain; charset=utf-8
Date: Tue, 07 May 2024 17:04:15 GMT
Vary: Origin
X-Content-Type-Options: nosniff
X-Ipfs-Path: /ipfs/bafybeifr4lnr2o6b4ed24mh4t5gw64sdh6wpcqb2j6lmxijo2ezwo7zzhi/css/0.txt
X-Robots-Tag: noindex

prod-cdn.wetransfer.net/packs/media/transfer_window/email-verification-lock-e6ed8c56.svg

52.85.243.7

200 OK

45 kB

URL GET HTTP/2
prod-cdn.wetransfer.net/packs/media/transfer_window/email-verification-lock-e6ed8c56.svg
IP
52.85.243.7:443
ASN
#16509 AMAZON-02

Requested by
https://skywalker.infura-ipfs.io/ipfs/bafybeifr4lnr2o6b4ed24mh4t5gw64sdh6wpcqb2j6lmxijo2ezwo7zzhi/
Certificate
IssuerAmazon
Subjectwetransfer.net
Fingerprint0B:0D:65:82:74:97:1B:AD:60:D8:48:2B:7D:A7:00:EA:34:08:86:48
ValiditySun, 30 Jul 2023 00:00:00 GMT - Wed, 28 Aug 2024 23:59:59 GMT

File type
gzip compressed data, from Unix
Size
45 kB (45182 bytes)
Hash
072e2586229870cde9d1ccb6c5595ce2
3405142a98440ab8ada17470e89c3d05aa92af26
6f1b19f2517bbad65c948fc1911f6e2c83646674a06fab1a73e0432cf900cad0

HTTP Headers

GET /packs/media/transfer_window/email-verification-lock-e6ed8c56.svg HTTP/1.1
Host: prod-cdn.wetransfer.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://skywalker.infura-ipfs.io/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
content-type: image/svg+xml
date: Sun, 07 Apr 2024 16:45:18 GMT
last-modified: Thu, 21 Dec 2023 14:26:03 GMT
etag: W/"207f0c93fc997af575b8b9ad9db8777c"
x-amz-server-side-encryption: AES256
cache-control: public, max-age=31536000
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 60f2c4b6c07455537be83f75f12576e8.cloudfront.net (CloudFront)
x-amz-cf-pop: ARN1-C1
x-amz-cf-id: Xkta8waQW_Z7lugO3BDAAuz_0G-pQDIudIuazEew1Afyon-KFqYTVw==
age: 2593138
X-Firefox-Spdy: h2

maxcdn.bootstrapcdn.com/bootstrap/4.0.0/js/bootstrap.min.js

104.18.10.207

200 OK

18 kB

URL GET HTTP/3
maxcdn.bootstrapcdn.com/bootstrap/4.0.0/js/bootstrap.min.js
IP
104.18.10.207:443
ASN
#13335 CLOUDFLARENET

Requested by
https://skywalker.infura-ipfs.io/ipfs/bafybeifr4lnr2o6b4ed24mh4t5gw64sdh6wpcqb2j6lmxijo2ezwo7zzhi/
Certificate
IssuerGoogle Trust Services LLC
Subjectbootstrapcdn.com
Fingerprint57:B4:25:B9:9C:88:A1:A3:3D:F7:31:74:02:E4:D1:E0:0A:F5:11:63
ValidityWed, 27 Mar 2024 00:22:09 GMT - Tue, 25 Jun 2024 00:22:08 GMT

File type
JavaScript source, ASCII text, with very long lines (48664)
Size
18 kB (18539 bytes)
Hash
14d449eb8876fa55e1ef3c2cc52b0c17
a9545831803b1359cfeed47e3b4d6bae68e40e99
e7ed36ceee5450b4243bbc35188afabdfb4280c7c57597001de0ed167299b01b

HTTP Headers

GET /bootstrap/4.0.0/js/bootstrap.min.js HTTP/1.1
Host: maxcdn.bootstrapcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://skywalker.infura-ipfs.io/
Origin: https://skywalker.infura-ipfs.io
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Tue, 07 May 2024 17:04:15 GMT
content-type: application/javascript; charset=utf-8
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: DE
vary: Accept-Encoding
access-control-allow-origin: *
cache-control: public, max-age=31919000
content-encoding: br
etag: W/"14d449eb8876fa55e1ef3c2cc52b0c17"
last-modified: Mon, 25 Jan 2021 22:04:04 GMT
cdn-cachedat: 03/18/2024 12:46:36
cdn-proxyver: 1.04
cdn-requestpullcode: 200
cdn-requestpullsuccess: True
cdn-edgestorageid: 1048
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
cdn-status: 200
cdn-requestid: abea42b7bdbc80f328058ad101c298b6
cdn-cache: HIT
cf-cache-status: HIT
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 8802c9beff2b56a8-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

prod-cdn.wetransfer.net/packs/media/images/favicon-a34a7465.ico

52.85.243.7

200 OK

42 kB

URL GET HTTP/2
prod-cdn.wetransfer.net/packs/media/images/favicon-a34a7465.ico
IP
52.85.243.7:443
ASN
#16509 AMAZON-02

Requested by
https://skywalker.infura-ipfs.io/ipfs/bafybeifr4lnr2o6b4ed24mh4t5gw64sdh6wpcqb2j6lmxijo2ezwo7zzhi/
Certificate
IssuerAmazon
Subjectwetransfer.net
Fingerprint0B:0D:65:82:74:97:1B:AD:60:D8:48:2B:7D:A7:00:EA:34:08:86:48
ValiditySun, 30 Jul 2023 00:00:00 GMT - Wed, 28 Aug 2024 23:59:59 GMT

File type
MS Windows icon resource - 5 icons, 16x16, 32 bits/pixel, 24x24, 32 bits/pixel
Size
42 kB (41566 bytes)
Hash
692e1c7339c359b6412f059c9c9a0474
e7c1a53dca16b7664880e5b8a92524cf9a47fb62
d12161435ace47c6883360e08466508593325f134c1852b1d0e6e75d5f76adda

HTTP Headers

GET /packs/media/images/favicon-a34a7465.ico HTTP/1.1
Host: prod-cdn.wetransfer.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://skywalker.infura-ipfs.io/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
content-type: image/vnd.microsoft.icon
content-length: 41566
date: Sun, 05 Nov 2023 02:42:50 GMT
last-modified: Thu, 02 Nov 2023 17:34:43 GMT
etag: "692e1c7339c359b6412f059c9c9a0474"
x-amz-server-side-encryption: AES256
cache-control: public, max-age=31536000
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 60f2c4b6c07455537be83f75f12576e8.cloudfront.net (CloudFront)
x-amz-cf-pop: ARN1-C1
x-amz-cf-id: -1QHhrBDbKcSLbmVHsAj4I8OU3BFSfP4zwl_5woPjsHuX27pUbDFXw==
age: 15949287
X-Firefox-Spdy: h2

mk2-b4c8d3.ingress-earth.ewp.live/packs/media/actiefgrotesque/ActiefGrotesque_W_Bd-1bdd99f9.woff

63.250.43.129

404 Not Found

171 kB

URL GET HTTP/2
mk2-b4c8d3.ingress-earth.ewp.live/packs/media/actiefgrotesque/ActiefGrotesque_W_Bd-1bdd99f9.woff
IP
63.250.43.129:443
ASN
#22612 NAMECHEAP-NET

Requested by
https://skywalker.infura-ipfs.io/ipfs/bafybeifr4lnr2o6b4ed24mh4t5gw64sdh6wpcqb2j6lmxijo2ezwo7zzhi/
Certificate
IssuerSectigo Limited
Subject*.ingress-earth.ewp.live
Fingerprint19:EA:22:E2:5B:93:2F:19:37:C8:EF:8A:37:0C:C3:BC:94:95:1A:3A
ValidityTue, 30 Apr 2024 00:00:00 GMT - Sat, 31 May 2025 23:59:59 GMT

File type
HTML document, Unicode text, UTF-8 text, with very long lines (60420)
Size
171 kB (171284 bytes)
Hash
7b28cd8f2af620bb4684079350985274
17a374012451b2bffcaf885622346415f93928ad
4cfb151994816e40b0f0ecde4d1ef838ba4031e925e13e1038c366dce5c270be

HTTP Headers

GET /packs/media/actiefgrotesque/ActiefGrotesque_W_Bd-1bdd99f9.woff HTTP/1.1
Host: mk2-b4c8d3.ingress-earth.ewp.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Referer: https://skywalker.infura-ipfs.io/
Origin: https://skywalker.infura-ipfs.io
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 404 Not Found
content-type: text/html
date: Tue, 07 May 2024 17:04:15 GMT
X-Firefox-Spdy: h2

mk2-b4c8d3.ingress-earth.ewp.live/packs/media/actiefgrotesque/ActiefGrotesque_W_Regular-1f437876.woff

63.250.43.129

404 Not Found

162 kB

URL GET HTTP/2
mk2-b4c8d3.ingress-earth.ewp.live/packs/media/actiefgrotesque/ActiefGrotesque_W_Regular-1f437876.woff
IP
63.250.43.129:443
ASN
#22612 NAMECHEAP-NET

Requested by
https://skywalker.infura-ipfs.io/ipfs/bafybeifr4lnr2o6b4ed24mh4t5gw64sdh6wpcqb2j6lmxijo2ezwo7zzhi/
Certificate
IssuerSectigo Limited
Subject*.ingress-earth.ewp.live
Fingerprint19:EA:22:E2:5B:93:2F:19:37:C8:EF:8A:37:0C:C3:BC:94:95:1A:3A
ValidityTue, 30 Apr 2024 00:00:00 GMT - Sat, 31 May 2025 23:59:59 GMT

File type

Size
162 kB (162522 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /packs/media/actiefgrotesque/ActiefGrotesque_W_Regular-1f437876.woff HTTP/1.1
Host: mk2-b4c8d3.ingress-earth.ewp.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Referer: https://skywalker.infura-ipfs.io/
Origin: https://skywalker.infura-ipfs.io
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 404 Not Found
content-type: text/html
date: Tue, 07 May 2024 17:04:15 GMT
X-Firefox-Spdy: h2

mk2-b4c8d3.ingress-earth.ewp.live/packs/media/images/globe-dd3d31e7.svg

63.250.43.129

404 Not Found

0 B

URL GET HTTP/2
mk2-b4c8d3.ingress-earth.ewp.live/packs/media/images/globe-dd3d31e7.svg
IP
63.250.43.129:443
ASN
#22612 NAMECHEAP-NET

Requested by
https://skywalker.infura-ipfs.io/ipfs/bafybeifr4lnr2o6b4ed24mh4t5gw64sdh6wpcqb2j6lmxijo2ezwo7zzhi/
Certificate
IssuerSectigo Limited
Subject*.ingress-earth.ewp.live
Fingerprint19:EA:22:E2:5B:93:2F:19:37:C8:EF:8A:37:0C:C3:BC:94:95:1A:3A
ValidityTue, 30 Apr 2024 00:00:00 GMT - Sat, 31 May 2025 23:59:59 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /packs/media/images/globe-dd3d31e7.svg HTTP/1.1
Host: mk2-b4c8d3.ingress-earth.ewp.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://skywalker.infura-ipfs.io/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 404 Not Found
content-type: text/html
date: Tue, 07 May 2024 17:04:15 GMT
X-Firefox-Spdy: h2

mk2-b4c8d3.ingress-earth.ewp.live/packs/media/actiefgrotesque/ActiefGrotesque_W_Medium-293e86f0.woff

63.250.43.129

404 Not Found

13 kB

URL GET HTTP/2
mk2-b4c8d3.ingress-earth.ewp.live/packs/media/actiefgrotesque/ActiefGrotesque_W_Medium-293e86f0.woff
IP
63.250.43.129:443
ASN
#22612 NAMECHEAP-NET

Requested by
https://skywalker.infura-ipfs.io/ipfs/bafybeifr4lnr2o6b4ed24mh4t5gw64sdh6wpcqb2j6lmxijo2ezwo7zzhi/
Certificate
IssuerSectigo Limited
Subject*.ingress-earth.ewp.live
Fingerprint19:EA:22:E2:5B:93:2F:19:37:C8:EF:8A:37:0C:C3:BC:94:95:1A:3A
ValidityTue, 30 Apr 2024 00:00:00 GMT - Sat, 31 May 2025 23:59:59 GMT

File type

Size
13 kB (12778 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /packs/media/actiefgrotesque/ActiefGrotesque_W_Medium-293e86f0.woff HTTP/1.1
Host: mk2-b4c8d3.ingress-earth.ewp.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Referer: https://skywalker.infura-ipfs.io/
Origin: https://skywalker.infura-ipfs.io
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 404 Not Found
content-type: text/html
date: Tue, 07 May 2024 17:04:15 GMT
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (9)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML