| prod-cdn.wetransfer.net/packs/media/actiefgrotesque/ActiefGrotesque_W_Medium-293e86f0.woff | 54.230.111.127 | 200 OK | 32 kB |
URL GET HTTP/2prod-cdn.wetransfer.net/packs/media/actiefgrotesque/ActiefGrotesque_W_Medium-293e86f0.woff IP54.230.111.127:443
Requested byhttps://lingering-thunder-0229.nguyenchong9455.workers.dev/ CertificateIssuerAmazon Subjectwetransfer.net Fingerprint0B:0D:65:82:74:97:1B:AD:60:D8:48:2B:7D:A7:00:EA:34:08:86:48 ValiditySun, 30 Jul 2023 00:00:00 GMT - Wed, 28 Aug 2024 23:59:59 GMT
File typeWeb Open Font Format, TrueType, length 32124, version 1.6554 Hash868aedeefe7669e8a4f7196f7df5d058 45bd20ef2c6b717a2526efd98a01207979b2a623 d8700b022ef56752cd12ff224b3f409e84aeb8a43ac68ba052167096baf46555
GET /packs/media/actiefgrotesque/ActiefGrotesque_W_Medium-293e86f0.woff HTTP/1.1
Host: prod-cdn.wetransfer.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://lingering-thunder-0229.nguyenchong9455.workers.dev/
Origin: https://lingering-thunder-0229.nguyenchong9455.workers.dev
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: font/woff
content-length: 32124
date: Thu, 25 Apr 2024 01:38:54 GMT
last-modified: Thu, 21 Dec 2023 14:25:54 GMT
etag: "868aedeefe7669e8a4f7196f7df5d058"
x-amz-server-side-encryption: AES256
cache-control: public, max-age=31536000
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 07d5d44815808d5d5a6f43984a987698.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 6kVEGdOKQQL57m-Is613wRYZgggJnN3dfUl7L0glD7Qc2Yh-3TtovA==
age: 144540
X-Firefox-Spdy: h2
|
|
| prod-cdn.wetransfer.net/packs/media/gt-super-wt/GT-Super-WT-Super-1b214df1.woff | 54.230.111.127 | 200 OK | 43 kB |
URL GET HTTP/2prod-cdn.wetransfer.net/packs/media/gt-super-wt/GT-Super-WT-Super-1b214df1.woff IP54.230.111.127:443
Requested byhttps://lingering-thunder-0229.nguyenchong9455.workers.dev/ CertificateIssuerAmazon Subjectwetransfer.net Fingerprint0B:0D:65:82:74:97:1B:AD:60:D8:48:2B:7D:A7:00:EA:34:08:86:48 ValiditySun, 30 Jul 2023 00:00:00 GMT - Wed, 28 Aug 2024 23:59:59 GMT
File typeWeb Open Font Format, TrueType, length 43188, version 0.0 Hash55576599a2d772f9297c5036d355b1fb c52e4f9a59137105deb12a3de25ee7d5a15fd286 1e3d5d86432b9bfcdf25ce0e35fd23667cea86f6fa71fa920cd84abb70258f73
GET /packs/media/gt-super-wt/GT-Super-WT-Super-1b214df1.woff HTTP/1.1
Host: prod-cdn.wetransfer.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://lingering-thunder-0229.nguyenchong9455.workers.dev/
Origin: https://lingering-thunder-0229.nguyenchong9455.workers.dev
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: font/woff
content-length: 43188
date: Thu, 25 Apr 2024 01:38:54 GMT
last-modified: Thu, 21 Dec 2023 14:25:55 GMT
etag: "55576599a2d772f9297c5036d355b1fb"
x-amz-server-side-encryption: AES256
cache-control: public, max-age=31536000
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 07d5d44815808d5d5a6f43984a987698.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: I_l1QmxB1MU4ZOzKUiKARPg_6z6pIinShaw5m57sFLGuwHHaMzQ9tQ==
age: 144540
X-Firefox-Spdy: h2
|
|
| prod-cdn.wetransfer.net/packs/media/actiefgrotesque/ActiefGrotesque_W_Regular-1f437876.woff | 54.230.111.127 | 200 OK | 31 kB |
URL GET HTTP/2prod-cdn.wetransfer.net/packs/media/actiefgrotesque/ActiefGrotesque_W_Regular-1f437876.woff IP54.230.111.127:443
Requested byhttps://lingering-thunder-0229.nguyenchong9455.workers.dev/ CertificateIssuerAmazon Subjectwetransfer.net Fingerprint0B:0D:65:82:74:97:1B:AD:60:D8:48:2B:7D:A7:00:EA:34:08:86:48 ValiditySun, 30 Jul 2023 00:00:00 GMT - Wed, 28 Aug 2024 23:59:59 GMT
File typeWeb Open Font Format, TrueType, length 31120, version 1.6554 Hash57cbbfdafc43e0deecc75a309dd042c6 b9cc2ff331b8520706de175f5b3fdba6731a9bfc a9117f16bdaa64c953b303bef951dfca6316ef59f1b7ca72d5b946b1d815f6a6
GET /packs/media/actiefgrotesque/ActiefGrotesque_W_Regular-1f437876.woff HTTP/1.1
Host: prod-cdn.wetransfer.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://lingering-thunder-0229.nguyenchong9455.workers.dev/
Origin: https://lingering-thunder-0229.nguyenchong9455.workers.dev
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: font/woff
content-length: 31120
date: Thu, 25 Apr 2024 01:38:54 GMT
last-modified: Thu, 21 Dec 2023 14:25:54 GMT
etag: "57cbbfdafc43e0deecc75a309dd042c6"
x-amz-server-side-encryption: AES256
cache-control: public, max-age=31536000
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 07d5d44815808d5d5a6f43984a987698.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: XaI5rkBMdYmxQtdjVSEbz3cMZnwLi5U-WqxllJxlWjCFEsQ2Po4g3Q==
age: 144540
X-Firefox-Spdy: h2
|
|
| cdnjs.cloudflare.com/ajax/libs/popper.js/1.12.9/umd/popper.min.js | 104.17.25.14 | 200 OK | 6.2 kB |
URL GET HTTP/2cdnjs.cloudflare.com/ajax/libs/popper.js/1.12.9/umd/popper.min.js IP104.17.25.14:443
Requested byhttps://lingering-thunder-0229.nguyenchong9455.workers.dev/ CertificateIssuerCloudflare, Inc. Subjectsni.cloudflaressl.com Fingerprint7A:EA:B9:09:71:70:6C:87:C9:D3:82:74:8A:7B:B4:60:E5:40:2D:8D ValidityMon, 03 Jul 2023 00:00:00 GMT - Tue, 02 Jul 2024 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (19015) Hash70d3fda195602fe8b75e0097eed74dde c3b977aa4b8dfb69d651e07015031d385ded964b a52f7aa54d7bcaafa056ee0a050262dfc5694ae28dee8b4cac3429af37ff0d66
GET /ajax/libs/popper.js/1.12.9/umd/popper.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://lingering-thunder-0229.nguyenchong9455.workers.dev/
Origin: https://lingering-thunder-0229.nguyenchong9455.workers.dev
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 26 Apr 2024 17:47:53 GMT
content-type: application/javascript; charset=utf-8
content-length: 6157
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03fa9-4af4"
last-modified: Mon, 04 May 2020 16:15:37 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 161226
expires: Wed, 16 Apr 2025 17:47:53 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=bFqUVGLdaAu9W2KGoibysZ0dUtvXVODXuh28KUJd%2Bupo6%2BPq5n%2FMm48ies04sQyfBPblaI9Gf8rsdeWip7bBdjnM%2Bs3nSOhKM7ZpjsFDH9PFZLYpFxq0mVRGxUV2wOptTPZ%2FFAM8"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 87a8668a79367130-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| cdn.jsdelivr.net/npm/jquery.session@1.0.0/jquery.session.min.js | 151.101.65.229 | 200 OK | 983 B |
URL GET HTTP/2cdn.jsdelivr.net/npm/jquery.session@1.0.0/jquery.session.min.js IP151.101.65.229:443
Requested byhttps://lingering-thunder-0229.nguyenchong9455.workers.dev/ CertificateIssuerGlobalSign nv-sa Subjectjsdelivr.net Fingerprint05:87:2C:BA:73:14:21:54:82:00:8B:AD:85:8F:E9:C6:4D:C7:66:09 ValidityWed, 27 Sep 2023 18:13:13 GMT - Mon, 28 Oct 2024 18:13:12 GMT
File typeASCII text, with very long lines (1993) Hashc0ac9c9487d60de96dc68dbb25bd8dd6 99419b0be4b85422ff84870e54dbd8a52dc6dab1 76ad6584ac5bdd459939dc7532fae7c2bdd8e22d773ff16d2306f42a1ffc569c
GET /npm/jquery.session@1.0.0/jquery.session.min.js HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://lingering-thunder-0229.nguyenchong9455.workers.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=31536000, s-maxage=31536000, immutable
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: application/javascript; charset=utf-8
x-jsd-version: 1.0.0
x-jsd-version-type: version
etag: W/"91d-mUGbC+S4VCL/hIcOVNvYpS3G2rE"
content-encoding: br
accept-ranges: bytes
date: Fri, 26 Apr 2024 17:47:53 GMT
age: 1707211
x-served-by: cache-fra-eddf8230025-FRA, cache-hel1410034-HEL
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 983
X-Firefox-Spdy: h2
|
|
| code.jquery.com/jquery-3.2.1.slim.min.js | 151.101.194.137 | 200 OK | 24 kB |
URL GET HTTP/2code.jquery.com/jquery-3.2.1.slim.min.js IP151.101.194.137:443
Requested byhttps://lingering-thunder-0229.nguyenchong9455.workers.dev/ CertificateIssuerSectigo Limited Subject*.jquery.com FingerprintD2:19:0A:AD:CE:BB:9C:61:17:5D:29:4B:A2:54:E8:C6:91:B8:F9:8D ValidityTue, 11 Jul 2023 00:00:00 GMT - Sun, 14 Jul 2024 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (32012) Hash5f48fc77cac90c4778fa24ec9c57f37d 9e89d1515bc4c371b86f4cb1002fd8e377c1829f 9365920887b11b33a3dc4ba28a0f93951f200341263e3b9cefd384798e4be398
GET /jquery-3.2.1.slim.min.js HTTP/1.1
Host: code.jquery.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://lingering-thunder-0229.nguyenchong9455.workers.dev/
Origin: https://lingering-thunder-0229.nguyenchong9455.workers.dev
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Fri, 18 Oct 1991 12:00:00 GMT
etag: W/"28feccc0-10fdd"
cache-control: public, max-age=31536000, stale-while-revalidate=604800
access-control-allow-origin: *
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Fri, 26 Apr 2024 17:47:53 GMT
age: 1623807
x-served-by: cache-lga21963-LGA, cache-hel1410027-HEL
x-cache: HIT, HIT
x-cache-hits: 40, 17046
x-timer: S1714153673.385101,VS0,VE0
vary: Accept-Encoding
content-length: 23856
X-Firefox-Spdy: h2
|
|
| ajax.googleapis.com/ajax/libs/jquery/2.2.4/jquery.min.js | 142.250.74.138 | 200 OK | 30 kB |
URL GET HTTP/2ajax.googleapis.com/ajax/libs/jquery/2.2.4/jquery.min.js IP142.250.74.138:443
Requested byhttps://lingering-thunder-0229.nguyenchong9455.workers.dev/ CertificateIssuerGoogle Trust Services LLC Subjectupload.video.google.com Fingerprint5F:6D:48:87:16:89:1E:A5:57:29:92:8B:34:BD:F2:92:0C:7F:F2:50 ValidityMon, 08 Apr 2024 07:32:03 GMT - Mon, 01 Jul 2024 07:32:02 GMT
File typeJavaScript source, ASCII text, with very long lines (32065) Hash2f6b11a7e914718e0290410e85366fe9 69bb69e25ca7d5ef0935317584e6153f3fd9a88c 05b85d96f41fff14d8f608dad03ab71e2c1017c2da0914d7c59291bad7a54f8e
GET /ajax/libs/jquery/2.2.4/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://lingering-thunder-0229.nguyenchong9455.workers.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 30028
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 25 Apr 2024 17:38:23 GMT
expires: Fri, 25 Apr 2025 17:38:23 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
age: 86970
last-modified: Tue, 03 Mar 2020 19:15:00 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| lingering-thunder-0229.nguyenchong9455.workers.dev/packs/media/actiefgrotesque/ActiefGrotesque_W_Bd-1bdd99f9.woff | 172.67.175.143 | 200 OK | 2.0 MB |
URL GET HTTP/3lingering-thunder-0229.nguyenchong9455.workers.dev/packs/media/actiefgrotesque/ActiefGrotesque_W_Bd-1bdd99f9.woff IP172.67.175.143:443
Requested byhttps://lingering-thunder-0229.nguyenchong9455.workers.dev/ CertificateIssuerGoogle Trust Services LLC Subjectnguyenchong9455.workers.dev Fingerprint4F:AF:F2:54:B4:8B:77:6C:2B:9C:3B:7E:1C:3B:60:8B:5A:24:A2:CD ValiditySat, 13 Apr 2024 20:58:01 GMT - Fri, 12 Jul 2024 20:58:00 GMT
File typeHTML document, ASCII text, with very long lines (65527) Size2.0 MB (2013081 bytes) Hash557d3772c4c1e1564e8c734160d81602 d7f03f917d23363e7f5de2724abc43c9c054fea5 a0774701220e259dc394ed31b92bea4b60275ccf8cc1747145e72ef8d46b1623
Analyzer | Verdict | Alert | urlquery | phishing | Phishing - WeTransfer | OpenPhish | phishing | WeTransfer | PhishTank | phishing | WeTransfer |
GET /packs/media/actiefgrotesque/ActiefGrotesque_W_Bd-1bdd99f9.woff HTTP/1.1
Host: lingering-thunder-0229.nguyenchong9455.workers.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Referer: https://lingering-thunder-0229.nguyenchong9455.workers.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 26 Apr 2024 17:47:54 GMT
content-type: text/html;charset=UTF-8
content-length: 2013081
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=6kbHir%2BhS8fnYkHdSaEHCmOOBzcWRdDyqgTt0sM8Uy9bipb9q2kp1RI7dngtYJmCyHI3qirpG%2F3d5cT5oAqbyI3Yx21s2y3%2FSKH1%2BwRPr0U2xDgNeQ%2Ft6r%2BgFqdL1br9g5pLyaS9op9BAICNbgDO7cK5%2FiJqk1KQ6Cifd4eaHTlV23EeJQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a8668f5ecc56af-OSL
alt-svc: h3=":443"; ma=86400
|
|
| lingering-thunder-0229.nguyenchong9455.workers.dev/css/0.txt | 172.67.175.143 | 200 OK | 2.3 MB |
URL GET HTTP/3lingering-thunder-0229.nguyenchong9455.workers.dev/css/0.txt IP172.67.175.143:443
Requested byhttps://lingering-thunder-0229.nguyenchong9455.workers.dev/ CertificateIssuerGoogle Trust Services LLC Subjectnguyenchong9455.workers.dev Fingerprint4F:AF:F2:54:B4:8B:77:6C:2B:9C:3B:7E:1C:3B:60:8B:5A:24:A2:CD ValiditySat, 13 Apr 2024 20:58:01 GMT - Fri, 12 Jul 2024 20:58:00 GMT
File typeHTML document, ASCII text, with very long lines (65527) Size2.3 MB (2269136 bytes) Hash557d3772c4c1e1564e8c734160d81602 d7f03f917d23363e7f5de2724abc43c9c054fea5 a0774701220e259dc394ed31b92bea4b60275ccf8cc1747145e72ef8d46b1623
Analyzer | Verdict | Alert | urlquery | phishing | Phishing - WeTransfer | OpenPhish | phishing | WeTransfer | PhishTank | phishing | WeTransfer |
GET /css/0.txt HTTP/1.1
Host: lingering-thunder-0229.nguyenchong9455.workers.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://lingering-thunder-0229.nguyenchong9455.workers.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 26 Apr 2024 17:47:53 GMT
content-type: text/html;charset=UTF-8
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=4soY7vWmhDRHMGXw9BREPE%2BsQPV7BYVnOYuclNcwgBb5%2BhxuWqrwdCF%2FFASFzcb8omM1l1dCbYReQhl6aFz5QiRj9PBcUahKynHjK6B%2F7%2FhsPi8u0M%2FRqq1hnBvPGF6JCKSXa8a0scS75nRS0Cq3p11%2B5AFbsOUEbMg6k5AHKtDDLKoMFg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a86689de3c56af-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| www.googletagmanager.com/gtm.js?id=GTM-5WF5RH4 | 142.250.74.168 | 200 OK | 67 kB |
URL GET HTTP/2www.googletagmanager.com/gtm.js?id=GTM-5WF5RH4 IP142.250.74.168:443
Requested byhttps://lingering-thunder-0229.nguyenchong9455.workers.dev/ CertificateIssuerGoogle Trust Services LLC Subject*.google-analytics.com FingerprintFC:B1:16:E0:D8:F3:2B:F3:AB:33:E5:E1:23:57:F4:48:66:FD:4D:52 ValidityMon, 08 Apr 2024 06:34:55 GMT - Mon, 01 Jul 2024 06:34:54 GMT
File typeJavaScript source, ASCII text, with very long lines (44393) Hashb4567d434e478fe6578730b82a83cc13 572a6f183b2c1bfb593df1d57f168f8bc8405835 c79f96cf2c51168ce7bae9e9fff9d20d29c1c9ab8eb73efe7db9b1bc2aa85eef
GET /gtm.js?id=GTM-5WF5RH4 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://lingering-thunder-0229.nguyenchong9455.workers.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Fri, 26 Apr 2024 17:47:54 GMT
expires: Fri, 26 Apr 2024 17:47:54 GMT
cache-control: private, max-age=900
last-modified: Fri, 26 Apr 2024 15:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 67164
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| lingering-thunder-0229.nguyenchong9455.workers.dev/packs/media/actiefgrotesque/ActiefGrotesque_W_Medium-293e86f0.woff | 172.67.175.143 | 200 OK | 2.0 MB |
URL GET HTTP/3lingering-thunder-0229.nguyenchong9455.workers.dev/packs/media/actiefgrotesque/ActiefGrotesque_W_Medium-293e86f0.woff IP172.67.175.143:443
Requested byhttps://lingering-thunder-0229.nguyenchong9455.workers.dev/ CertificateIssuerGoogle Trust Services LLC Subjectnguyenchong9455.workers.dev Fingerprint4F:AF:F2:54:B4:8B:77:6C:2B:9C:3B:7E:1C:3B:60:8B:5A:24:A2:CD ValiditySat, 13 Apr 2024 20:58:01 GMT - Fri, 12 Jul 2024 20:58:00 GMT
File typeHTML document, ASCII text, with very long lines (65527) Size2.0 MB (2013081 bytes) Hash557d3772c4c1e1564e8c734160d81602 d7f03f917d23363e7f5de2724abc43c9c054fea5 a0774701220e259dc394ed31b92bea4b60275ccf8cc1747145e72ef8d46b1623
Analyzer | Verdict | Alert | urlquery | phishing | Phishing - WeTransfer | OpenPhish | phishing | WeTransfer | PhishTank | phishing | WeTransfer |
GET /packs/media/actiefgrotesque/ActiefGrotesque_W_Medium-293e86f0.woff HTTP/1.1
Host: lingering-thunder-0229.nguyenchong9455.workers.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Referer: https://lingering-thunder-0229.nguyenchong9455.workers.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 26 Apr 2024 17:47:54 GMT
content-type: text/html;charset=UTF-8
content-length: 2013081
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=gcFKIwMYCWDzv9yvFZPCTCJs93pymYsHW15gm6cZdt76%2BbfnIxDyrzbWcP59G6qnZ9ugf34znnasbSavjm4U3iqN6HTUFEahVa%2BGhDV5nDw%2BWey9Vd42wBPC%2FbRLPkyGuu3B7Fq%2FWWyBCrm%2Bdw4RpP%2BgUnZYosmaJxyxIGtltDsET9Lm0Q%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a8668f6ef056af-OSL
alt-svc: h3=":443"; ma=86400
|
|
| lingering-thunder-0229.nguyenchong9455.workers.dev/packs/media/images/globe-dd3d31e7.svg | 172.67.175.143 | 200 OK | 513 kB |
URL GET HTTP/3lingering-thunder-0229.nguyenchong9455.workers.dev/packs/media/images/globe-dd3d31e7.svg IP172.67.175.143:443
Requested byhttps://lingering-thunder-0229.nguyenchong9455.workers.dev/ CertificateIssuerGoogle Trust Services LLC Subjectnguyenchong9455.workers.dev Fingerprint4F:AF:F2:54:B4:8B:77:6C:2B:9C:3B:7E:1C:3B:60:8B:5A:24:A2:CD ValiditySat, 13 Apr 2024 20:58:01 GMT - Fri, 12 Jul 2024 20:58:00 GMT
File typeHTML document, ASCII text, with very long lines (65527) Size513 kB (512625 bytes) Hash557d3772c4c1e1564e8c734160d81602 d7f03f917d23363e7f5de2724abc43c9c054fea5 a0774701220e259dc394ed31b92bea4b60275ccf8cc1747145e72ef8d46b1623
Analyzer | Verdict | Alert | urlquery | phishing | Phishing - WeTransfer | OpenPhish | phishing | WeTransfer | PhishTank | phishing | WeTransfer |
GET /packs/media/images/globe-dd3d31e7.svg HTTP/1.1
Host: lingering-thunder-0229.nguyenchong9455.workers.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://lingering-thunder-0229.nguyenchong9455.workers.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 26 Apr 2024 17:47:54 GMT
content-type: text/html;charset=UTF-8
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=bAFLnMi%2FGYCmosG9sRGe6tquPdfiOyR9DMuSkWGm%2FajvMU3OfOAmsADHcg3WNvZRNLr0458cegPhF6CFvtUPr4esNUtnCjXKGq7YYeS13C6M4Ua19XrJWu0OWaZ7b6j794M28Pq6NO9iyZ%2BDlL1GbODbouZIF1UqN7vUriFCEa7EmhjY%2Bg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a8668f2ea156af-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| prod-cdn.wetransfer.net/packs/media/images/apple-touch-icon-180x180-precomposed-fd272b89.png | 54.230.111.127 | 200 OK | 16 kB |
URL GET HTTP/2prod-cdn.wetransfer.net/packs/media/images/apple-touch-icon-180x180-precomposed-fd272b89.png IP54.230.111.127:443
Requested byhttps://lingering-thunder-0229.nguyenchong9455.workers.dev/ CertificateIssuerAmazon Subjectwetransfer.net Fingerprint0B:0D:65:82:74:97:1B:AD:60:D8:48:2B:7D:A7:00:EA:34:08:86:48 ValiditySun, 30 Jul 2023 00:00:00 GMT - Wed, 28 Aug 2024 23:59:59 GMT
File typePNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced Hashbc5b180f2d0001298a5ea3691e3fc623 edf2c67a5cef4efd081e5e6e4bc027e72be45593 b8c5bf2f80790d4abbe7fd5dca0bcf5c3eeaa4e23b1b35c8854a3fdb5c26b1e9
GET /packs/media/images/apple-touch-icon-180x180-precomposed-fd272b89.png HTTP/1.1
Host: prod-cdn.wetransfer.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://lingering-thunder-0229.nguyenchong9455.workers.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 16208
date: Fri, 22 Dec 2023 22:58:57 GMT
last-modified: Thu, 21 Dec 2023 14:25:55 GMT
etag: "bc5b180f2d0001298a5ea3691e3fc623"
x-amz-server-side-encryption: AES256
cache-control: public, max-age=31536000
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 db0992ba349fc51d5151ec8330e36c28.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: ddbJVWd7_crFZmh16VoA83_b9U4lpd2ekK-EWJC91z2ekPeo_2meaQ==
age: 10867739
X-Firefox-Spdy: h2
|
|
| prod-cdn.wetransfer.net/packs/media/images/favicon-a34a7465.ico | 54.230.111.127 | 200 OK | 42 kB |
URL GET HTTP/2prod-cdn.wetransfer.net/packs/media/images/favicon-a34a7465.ico IP54.230.111.127:443
Requested byhttps://lingering-thunder-0229.nguyenchong9455.workers.dev/ CertificateIssuerAmazon Subjectwetransfer.net Fingerprint0B:0D:65:82:74:97:1B:AD:60:D8:48:2B:7D:A7:00:EA:34:08:86:48 ValiditySun, 30 Jul 2023 00:00:00 GMT - Wed, 28 Aug 2024 23:59:59 GMT
File typeMS Windows icon resource - 5 icons, 16x16, 32 bits/pixel, 24x24, 32 bits/pixel Hash692e1c7339c359b6412f059c9c9a0474 e7c1a53dca16b7664880e5b8a92524cf9a47fb62 d12161435ace47c6883360e08466508593325f134c1852b1d0e6e75d5f76adda
GET /packs/media/images/favicon-a34a7465.ico HTTP/1.1
Host: prod-cdn.wetransfer.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://lingering-thunder-0229.nguyenchong9455.workers.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/vnd.microsoft.icon
content-length: 41566
date: Wed, 27 Mar 2024 01:09:01 GMT
last-modified: Thu, 21 Dec 2023 14:25:56 GMT
etag: "692e1c7339c359b6412f059c9c9a0474"
x-amz-server-side-encryption: AES256
cache-control: public, max-age=31536000
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 db0992ba349fc51d5151ec8330e36c28.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: YuxR14ANhDIT84YW_oeL1bnrdJTKqLGwRAF4EQTrzHXfT-8ohWgaNg==
age: 2651935
X-Firefox-Spdy: h2
|
|
| d19ptbnuzhibkh.cloudfront.net/2.10.2/sp.js | 54.230.241.130 | 200 OK | 30 kB |
URL GET HTTP/2d19ptbnuzhibkh.cloudfront.net/2.10.2/sp.js IP54.230.241.130:443
Requested byhttps://lingering-thunder-0229.nguyenchong9455.workers.dev/ CertificateIssuerAmazon Subject*.cloudfront.net FingerprintFA:21:45:DC:4D:94:03:A3:09:77:51:78:4A:21:F2:C5:6D:94:BE:52 ValidityTue, 10 Oct 2023 00:00:00 GMT - Thu, 19 Sep 2024 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (64917) Hash69c0026af7f2b8f2eed23f2f5fc5c68f a0e872c89db6991d03932756d43480e40eb38628 d9a9b2a15666ace13ce304e0a34baaa8a82ce5bc9d01480872869c9871dc552c
GET /2.10.2/sp.js HTTP/1.1
Host: d19ptbnuzhibkh.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://lingering-thunder-0229.nguyenchong9455.workers.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript
content-length: 29895
date: Sat, 20 Apr 2024 01:32:18 GMT
last-modified: Tue, 30 Apr 2019 15:14:08 GMT
etag: "c7b65b3f4e8761897af9a3ca5d76682e"
cache-control: max-age=315360000
content-encoding: gzip
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 8ac66e1d6983a0f44cf391b1ec3b1cce.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: m7Fr4LU3PyKg3kjxaR9OuAeXwZIg1f4Rqej-VJOoVknnseQj1pa6Pw==
age: 576938
X-Firefox-Spdy: h2
|
|
| lingering-thunder-0229.nguyenchong9455.workers.dev/css/advertising-4aee5180207621f94abeb04df0d9e7e52f4496bf16a55f712.js | 172.67.175.143 | 200 OK | 265 kB |
URL GET HTTP/3lingering-thunder-0229.nguyenchong9455.workers.dev/css/advertising-4aee5180207621f94abeb04df0d9e7e52f4496bf16a55f712.js IP172.67.175.143:443
Requested byhttps://lingering-thunder-0229.nguyenchong9455.workers.dev/ CertificateIssuerGoogle Trust Services LLC Subjectnguyenchong9455.workers.dev Fingerprint4F:AF:F2:54:B4:8B:77:6C:2B:9C:3B:7E:1C:3B:60:8B:5A:24:A2:CD ValiditySat, 13 Apr 2024 20:58:01 GMT - Fri, 12 Jul 2024 20:58:00 GMT
File typeHTML document, ASCII text, with very long lines (65527) Size265 kB (264714 bytes) Hash557d3772c4c1e1564e8c734160d81602 d7f03f917d23363e7f5de2724abc43c9c054fea5 a0774701220e259dc394ed31b92bea4b60275ccf8cc1747145e72ef8d46b1623
Analyzer | Verdict | Alert | urlquery | phishing | Phishing - WeTransfer | OpenPhish | phishing | WeTransfer | PhishTank | phishing | WeTransfer |
GET /css/advertising-4aee5180207621f94abeb04df0d9e7e52f4496bf16a55f712.js HTTP/1.1
Host: lingering-thunder-0229.nguyenchong9455.workers.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://lingering-thunder-0229.nguyenchong9455.workers.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 26 Apr 2024 17:47:53 GMT
content-type: text/html;charset=UTF-8
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=leMUTbMa9qt%2F4vRFX4D%2F2hJMT3ZrAyk%2FOeFt2kbG1N%2Fghx5JC5O6yAreXZA4jjAsXy5NYKYL8etu54pSt8D7kcQp2S9Dcohjae4oQXrJbSCDyASn7KH6cx3dPTumnoaXB%2FKS9KLDiV7AFCDWhVUjkZwauvu613mSwqdjnIFMHv5X40vLTQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a86689de3a56af-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| prod-cdn.wetransfer.net/packs/media/transfer_window/email-verification-lock-e6ed8c56.svg | 54.230.111.127 | 200 OK | 1.7 kB |
URL GET HTTP/2prod-cdn.wetransfer.net/packs/media/transfer_window/email-verification-lock-e6ed8c56.svg IP54.230.111.127:443
Requested byhttps://lingering-thunder-0229.nguyenchong9455.workers.dev/ CertificateIssuerAmazon Subjectwetransfer.net Fingerprint0B:0D:65:82:74:97:1B:AD:60:D8:48:2B:7D:A7:00:EA:34:08:86:48 ValiditySun, 30 Jul 2023 00:00:00 GMT - Wed, 28 Aug 2024 23:59:59 GMT
File typeSVG Scalable Vector Graphics image Hash886c669e43a2cb3b3d624da08a9c39ff 565a6c535981f273b263ee8e6ae2d0fc9ab97565 c1532b769622f6757e4958c8b1c0789e73fab7c1bcc50ce57a0cfb903d6dfdd3
GET /packs/media/transfer_window/email-verification-lock-e6ed8c56.svg HTTP/1.1
Host: prod-cdn.wetransfer.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://lingering-thunder-0229.nguyenchong9455.workers.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/svg+xml
date: Thu, 04 Jan 2024 14:30:13 GMT
last-modified: Thu, 21 Dec 2023 14:26:03 GMT
etag: W/"207f0c93fc997af575b8b9ad9db8777c"
x-amz-server-side-encryption: AES256
cache-control: public, max-age=31536000
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 db0992ba349fc51d5151ec8330e36c28.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 6YsYfb2-2a3thWETfBbSkw-_hHE2DYswH6TIoXfBkVJkxArFwbknPw==
age: 9775061
X-Firefox-Spdy: h2
|
|
| lingering-thunder-0229.nguyenchong9455.workers.dev/css/application-c2b6f877fed288c2431f.js | 172.67.175.143 | 200 OK | 2.0 MB |
URL GET HTTP/3lingering-thunder-0229.nguyenchong9455.workers.dev/css/application-c2b6f877fed288c2431f.js IP172.67.175.143:443
Requested byhttps://lingering-thunder-0229.nguyenchong9455.workers.dev/ CertificateIssuerGoogle Trust Services LLC Subjectnguyenchong9455.workers.dev Fingerprint4F:AF:F2:54:B4:8B:77:6C:2B:9C:3B:7E:1C:3B:60:8B:5A:24:A2:CD ValiditySat, 13 Apr 2024 20:58:01 GMT - Fri, 12 Jul 2024 20:58:00 GMT
Size2.0 MB (2013081 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer | Verdict | Alert | urlquery | phishing | Phishing - WeTransfer | OpenPhish | phishing | WeTransfer | PhishTank | phishing | WeTransfer |
GET /css/application-c2b6f877fed288c2431f.js HTTP/1.1
Host: lingering-thunder-0229.nguyenchong9455.workers.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://lingering-thunder-0229.nguyenchong9455.workers.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 26 Apr 2024 17:47:54 GMT
content-type: text/html;charset=UTF-8
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=QlKpvzyap6u%2BFUAlJ%2BQkuIYOhKt1kiLItByHav1fBta7ffekrFMrdLqLDo20zg5RfxYsW53ff1tBHTf%2BMRnXnIIK%2FTKLLOCiWSOOxJl4%2FFjc6eew%2FB6lSTZtMUByTZN5qSa6Q1Q3st9LXMekuJxhFI94f%2FQmBzCFxvGsplrbcC%2BcqdgLcg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a866900fd156af-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| lingering-thunder-0229.nguyenchong9455.workers.dev/css/vendor-ef8fd9ca3a0295622111.js | 172.67.175.143 | 200 OK | 2.0 MB |
URL GET HTTP/3lingering-thunder-0229.nguyenchong9455.workers.dev/css/vendor-ef8fd9ca3a0295622111.js IP172.67.175.143:443
Requested byhttps://lingering-thunder-0229.nguyenchong9455.workers.dev/ CertificateIssuerGoogle Trust Services LLC Subjectnguyenchong9455.workers.dev Fingerprint4F:AF:F2:54:B4:8B:77:6C:2B:9C:3B:7E:1C:3B:60:8B:5A:24:A2:CD ValiditySat, 13 Apr 2024 20:58:01 GMT - Fri, 12 Jul 2024 20:58:00 GMT
Size2.0 MB (2013081 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer | Verdict | Alert | urlquery | phishing | Phishing - WeTransfer | OpenPhish | phishing | WeTransfer | PhishTank | phishing | WeTransfer |
GET /css/vendor-ef8fd9ca3a0295622111.js HTTP/1.1
Host: lingering-thunder-0229.nguyenchong9455.workers.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://lingering-thunder-0229.nguyenchong9455.workers.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 26 Apr 2024 17:47:54 GMT
content-type: text/html;charset=UTF-8
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=b1V3rdAdYvKD0msF1XbZCpsmtVthIWKfzgKLxt6mCUJHZ8cQ3R7y1VYLXnKEMk%2BMGapuuWHshWiNi2M9Fk3JUkaB8U8k1nQkUcMSu0szbqgQieUiW458GKR8qCkln13OzyJLJI2pX4pQbzkG05U2ehmbumgVZMGvrfjPjqhyyXxDaOVxTg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a866900fd256af-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| stackpath.bootstrapcdn.com/bootstrap/4.1.3/js/bootstrap.min.js | 104.18.11.207 | 200 OK | 51 kB |
URL GET HTTP/2stackpath.bootstrapcdn.com/bootstrap/4.1.3/js/bootstrap.min.js IP104.18.11.207:443
Requested byhttps://lingering-thunder-0229.nguyenchong9455.workers.dev/ CertificateIssuerGoogle Trust Services LLC Subjectbootstrapcdn.com Fingerprint57:B4:25:B9:9C:88:A1:A3:3D:F7:31:74:02:E4:D1:E0:0A:F5:11:63 ValidityWed, 27 Mar 2024 00:22:09 GMT - Tue, 25 Jun 2024 00:22:08 GMT
File typeJavaScript source, ASCII text, with very long lines (50758) Hash67176c242e1bdc20603c878dee836df3 27a71b00383d61ef3c489326b3564d698fc1227c 56c12a125b021d21a69e61d7190cefa168d6c28ce715265cea1b3b0112d169c4
GET /bootstrap/4.1.3/js/bootstrap.min.js HTTP/1.1
Host: stackpath.bootstrapcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lingering-thunder-0229.nguyenchong9455.workers.dev/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 26 Apr 2024 17:47:53 GMT
content-type: application/javascript; charset=utf-8
vary: Accept-Encoding
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: DE
access-control-allow-origin: *
cache-control: public, max-age=31919000
last-modified: Mon, 25 Jan 2021 22:04:06 GMT
cdn-cachedat: 11/15/2021 23:30:00
cdn-proxyver: 1.0
cdn-requestpullcode: 200
cdn-requestpullsuccess: True
cdn-edgestorageid: 723
cdn-status: 200
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
cdn-requestid: a35b0179a28ed953258d0fb41376a09c
cdn-cache: HIT
cf-cache-status: HIT
age: 2068274
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 87a86689dd5a568d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| lingering-thunder-0229.nguyenchong9455.workers.dev/css/17116643.js | 172.67.175.143 | 200 OK | 2.0 MB |
URL GET HTTP/3lingering-thunder-0229.nguyenchong9455.workers.dev/css/17116643.js IP172.67.175.143:443
Requested byhttps://lingering-thunder-0229.nguyenchong9455.workers.dev/ CertificateIssuerGoogle Trust Services LLC Subjectnguyenchong9455.workers.dev Fingerprint4F:AF:F2:54:B4:8B:77:6C:2B:9C:3B:7E:1C:3B:60:8B:5A:24:A2:CD ValiditySat, 13 Apr 2024 20:58:01 GMT - Fri, 12 Jul 2024 20:58:00 GMT
Size2.0 MB (2013081 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer | Verdict | Alert | urlquery | phishing | Phishing - WeTransfer | OpenPhish | phishing | WeTransfer | PhishTank | phishing | WeTransfer |
GET /css/17116643.js HTTP/1.1
Host: lingering-thunder-0229.nguyenchong9455.workers.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://lingering-thunder-0229.nguyenchong9455.workers.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 26 Apr 2024 17:47:53 GMT
content-type: text/html;charset=UTF-8
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=OozNDVxu1bKb7fA%2B2uydq%2BSOdSEHfH7OhHnfXZZzZy2STgVXUIdn6theV2nUPp88VjP9Cjb7ZbJUmUQVCFjsu1vFUE50RZsrsb3PaLx6l1WzK2KKdM%2FiS5fXPyBVOr9ZSj5lzw3Vwb37S%2BjyR4eCnKCG5ZxodsEJQev4q97a%2FIwpYiMGew%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a86689be0d56af-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| lingering-thunder-0229.nguyenchong9455.workers.dev/css/gtm.js | 172.67.175.143 | 200 OK | 2.0 MB |
URL GET HTTP/3lingering-thunder-0229.nguyenchong9455.workers.dev/css/gtm.js IP172.67.175.143:443
Requested byhttps://lingering-thunder-0229.nguyenchong9455.workers.dev/ CertificateIssuerGoogle Trust Services LLC Subjectnguyenchong9455.workers.dev Fingerprint4F:AF:F2:54:B4:8B:77:6C:2B:9C:3B:7E:1C:3B:60:8B:5A:24:A2:CD ValiditySat, 13 Apr 2024 20:58:01 GMT - Fri, 12 Jul 2024 20:58:00 GMT
Size2.0 MB (2013081 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer | Verdict | Alert | urlquery | phishing | Phishing - WeTransfer | OpenPhish | phishing | WeTransfer | PhishTank | phishing | WeTransfer |
GET /css/gtm.js HTTP/1.1
Host: lingering-thunder-0229.nguyenchong9455.workers.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://lingering-thunder-0229.nguyenchong9455.workers.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 26 Apr 2024 17:47:53 GMT
content-type: text/html;charset=UTF-8
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=cQdLDXEYq7OLiDXrBxSldq6BGUCf050lJ7cOssAU2r98v450EihrNzD%2Bxie1X%2FBKZTDlms9JUlsyQ449u2uQVlWNQV3gurWG6p1d6SNc6baSueV29nOxe2Y%2BnHk%2FFRZYA0ZtbWW1FhjvQx6sTBaiBnTDDCoBLSG%2FM8WUAGWECPx%2BXlHsCg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a86689ce1e56af-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| lingering-thunder-0229.nguyenchong9455.workers.dev/css/en-0d65947306b8b68f172b.js | 172.67.175.143 | 200 OK | 2.0 MB |
URL GET HTTP/3lingering-thunder-0229.nguyenchong9455.workers.dev/css/en-0d65947306b8b68f172b.js IP172.67.175.143:443
Requested byhttps://lingering-thunder-0229.nguyenchong9455.workers.dev/ CertificateIssuerGoogle Trust Services LLC Subjectnguyenchong9455.workers.dev Fingerprint4F:AF:F2:54:B4:8B:77:6C:2B:9C:3B:7E:1C:3B:60:8B:5A:24:A2:CD ValiditySat, 13 Apr 2024 20:58:01 GMT - Fri, 12 Jul 2024 20:58:00 GMT
Size2.0 MB (2013081 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer | Verdict | Alert | urlquery | phishing | Phishing - WeTransfer | OpenPhish | phishing | WeTransfer | PhishTank | phishing | WeTransfer |
GET /css/en-0d65947306b8b68f172b.js HTTP/1.1
Host: lingering-thunder-0229.nguyenchong9455.workers.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://lingering-thunder-0229.nguyenchong9455.workers.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 26 Apr 2024 17:47:53 GMT
content-type: text/html;charset=UTF-8
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=iKubJIL7lgbOMZlpMgoma5GuXFFrEJ1Xg91tJ0yNAAR2cMXbjsEWySnZqJatwQbEEeUHZehCgCOHQvs2dotKeQfWkZUCMkXV3aK98wDdFl1rUYti74OyOYRNydJPR6fKzlGevckN28soNPvSZ8bitECbbYHkI0wE%2Fy%2Fmiv5zSV4bSnBJEg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a86689ce2256af-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| ajax.googleapis.luchifab.com/ajax.googleapis/ajax/libs/jquery/2.2.4/jquery.min.js | 0.0.0.0 | | 0 B |
URL GET ajax.googleapis.luchifab.com/ajax.googleapis/ajax/libs/jquery/2.2.4/jquery.min.js IP0.0.0.0:0
Requested byhttps://lingering-thunder-0229.nguyenchong9455.workers.dev/
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ajax.googleapis/ajax/libs/jquery/2.2.4/jquery.min.js HTTP/1.1
Host: ajax.googleapis.luchifab.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lingering-thunder-0229.nguyenchong9455.workers.dev/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
|
|
| lingering-thunder-0229.nguyenchong9455.workers.dev/css/wallpaper-59e18dcf37d4cc5f163b.js | 172.67.175.143 | 200 OK | 2.0 MB |
URL GET HTTP/3lingering-thunder-0229.nguyenchong9455.workers.dev/css/wallpaper-59e18dcf37d4cc5f163b.js IP172.67.175.143:443
Requested byhttps://lingering-thunder-0229.nguyenchong9455.workers.dev/ CertificateIssuerGoogle Trust Services LLC Subjectnguyenchong9455.workers.dev Fingerprint4F:AF:F2:54:B4:8B:77:6C:2B:9C:3B:7E:1C:3B:60:8B:5A:24:A2:CD ValiditySat, 13 Apr 2024 20:58:01 GMT - Fri, 12 Jul 2024 20:58:00 GMT
Size2.0 MB (2013081 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer | Verdict | Alert | urlquery | phishing | Phishing - WeTransfer | OpenPhish | phishing | WeTransfer | PhishTank | phishing | WeTransfer |
GET /css/wallpaper-59e18dcf37d4cc5f163b.js HTTP/1.1
Host: lingering-thunder-0229.nguyenchong9455.workers.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://lingering-thunder-0229.nguyenchong9455.workers.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 26 Apr 2024 17:47:53 GMT
content-type: text/html;charset=UTF-8
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=QJWsRk6ILTS5UY%2BUxy2ovLFCUQjAy%2B4ep%2F5z3i7H355KT5SlIs%2BqIJsF49sPtDhIVh%2FD8TqTFMJ2b8CwfEvtANKjVgrdL7%2Ffsm%2BvoDinv90EnikwmwLGzJl7Wxv47412Jemjd9%2BL30S1ms5HmVN2m0nBqZh4xX%2BN%2FPh%2B%2Fn0%2BQB6r61I0Qw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a86689be0c56af-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| maxcdn.bootstrapcdn.com/bootstrap/4.0.0/js/bootstrap.min.js | 104.18.11.207 | 200 OK | 49 kB |
URL GET HTTP/2maxcdn.bootstrapcdn.com/bootstrap/4.0.0/js/bootstrap.min.js IP104.18.11.207:443
Requested byhttps://lingering-thunder-0229.nguyenchong9455.workers.dev/ CertificateIssuerGoogle Trust Services LLC Subjectbootstrapcdn.com Fingerprint57:B4:25:B9:9C:88:A1:A3:3D:F7:31:74:02:E4:D1:E0:0A:F5:11:63 ValidityWed, 27 Mar 2024 00:22:09 GMT - Tue, 25 Jun 2024 00:22:08 GMT
File typeJavaScript source, ASCII text, with very long lines (48664) Hash14d449eb8876fa55e1ef3c2cc52b0c17 a9545831803b1359cfeed47e3b4d6bae68e40e99 e7ed36ceee5450b4243bbc35188afabdfb4280c7c57597001de0ed167299b01b
GET /bootstrap/4.0.0/js/bootstrap.min.js HTTP/1.1
Host: maxcdn.bootstrapcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://lingering-thunder-0229.nguyenchong9455.workers.dev/
Origin: https://lingering-thunder-0229.nguyenchong9455.workers.dev
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 26 Apr 2024 17:47:53 GMT
content-type: application/javascript; charset=utf-8
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: DE
vary: Accept-Encoding
access-control-allow-origin: *
cache-control: public, max-age=31919000
content-encoding: br
etag: W/"14d449eb8876fa55e1ef3c2cc52b0c17"
last-modified: Mon, 25 Jan 2021 22:04:04 GMT
cdn-cachedat: 03/18/2024 12:46:36
cdn-proxyver: 1.04
cdn-requestpullcode: 200
cdn-requestpullsuccess: True
cdn-edgestorageid: 1048
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
cdn-status: 200
cdn-requestid: f79feda6c4e9612994404e3f59b85cc4
cdn-cache: HIT
cf-cache-status: HIT
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 87a8668a7946b515-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| stackpath.bootstrapcdn.com/bootstrap/4.1.3/js/bootstrap.min.js | 104.18.11.207 | 200 OK | 51 kB |
URL GET HTTP/3stackpath.bootstrapcdn.com/bootstrap/4.1.3/js/bootstrap.min.js IP104.18.11.207:443
Requested byhttps://lingering-thunder-0229.nguyenchong9455.workers.dev/ CertificateIssuerGoogle Trust Services LLC Subjectbootstrapcdn.com Fingerprint57:B4:25:B9:9C:88:A1:A3:3D:F7:31:74:02:E4:D1:E0:0A:F5:11:63 ValidityWed, 27 Mar 2024 00:22:09 GMT - Tue, 25 Jun 2024 00:22:08 GMT
File typeJavaScript source, ASCII text, with very long lines (50758) Hash67176c242e1bdc20603c878dee836df3 27a71b00383d61ef3c489326b3564d698fc1227c 56c12a125b021d21a69e61d7190cefa168d6c28ce715265cea1b3b0112d169c4
GET /bootstrap/4.1.3/js/bootstrap.min.js HTTP/1.1
Host: stackpath.bootstrapcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://lingering-thunder-0229.nguyenchong9455.workers.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 26 Apr 2024 17:47:54 GMT
content-type: application/javascript; charset=utf-8
vary: Accept-Encoding
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: DE
access-control-allow-origin: *
cache-control: public, max-age=31919000
last-modified: Mon, 25 Jan 2021 22:04:06 GMT
cdn-cachedat: 11/15/2021 23:30:00
cdn-proxyver: 1.0
cdn-requestpullcode: 200
cdn-requestpullsuccess: True
cdn-edgestorageid: 723
cdn-status: 200
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
cdn-requestid: a35b0179a28ed953258d0fb41376a09c
cdn-cache: HIT
cf-cache-status: HIT
age: 2068275
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 87a866900c38b52d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| lingering-thunder-0229.nguyenchong9455.workers.dev/css/analytics.js | 172.67.175.143 | 200 OK | 2.0 MB |
URL GET HTTP/3lingering-thunder-0229.nguyenchong9455.workers.dev/css/analytics.js IP172.67.175.143:443
Requested byhttps://lingering-thunder-0229.nguyenchong9455.workers.dev/ CertificateIssuerGoogle Trust Services LLC Subjectnguyenchong9455.workers.dev Fingerprint4F:AF:F2:54:B4:8B:77:6C:2B:9C:3B:7E:1C:3B:60:8B:5A:24:A2:CD ValiditySat, 13 Apr 2024 20:58:01 GMT - Fri, 12 Jul 2024 20:58:00 GMT
Size2.0 MB (2013081 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer | Verdict | Alert | urlquery | phishing | Phishing - WeTransfer | OpenPhish | phishing | WeTransfer | PhishTank | phishing | WeTransfer |
GET /css/analytics.js HTTP/1.1
Host: lingering-thunder-0229.nguyenchong9455.workers.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://lingering-thunder-0229.nguyenchong9455.workers.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 26 Apr 2024 17:47:53 GMT
content-type: text/html;charset=UTF-8
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=gy7YL7A1ifx5YTUPWd60VRhO%2BuM0Y1R6hhe0RV6mXivGdNJYy8Rn0nN1trYINCWenpzAdWdbqaHCFeiKZ9QZZmHH9PqG6BxZJIig%2BA5ncfFu5Uo%2B%2BDarzduePsfthhqDB5yIf1hZuL%2BjQ7NZ0fGaHI2YAYdAsYiYfy5PlArDmFJWyld%2FUw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a86689adfa56af-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| lingering-thunder-0229.nguyenchong9455.workers.dev/packs/media/actiefgrotesque/ActiefGrotesque_W_Regular-1f437876.woff | 172.67.175.143 | 200 OK | 2.0 MB |
URL GET HTTP/3lingering-thunder-0229.nguyenchong9455.workers.dev/packs/media/actiefgrotesque/ActiefGrotesque_W_Regular-1f437876.woff IP172.67.175.143:443
Requested byhttps://lingering-thunder-0229.nguyenchong9455.workers.dev/ CertificateIssuerGoogle Trust Services LLC Subjectnguyenchong9455.workers.dev Fingerprint4F:AF:F2:54:B4:8B:77:6C:2B:9C:3B:7E:1C:3B:60:8B:5A:24:A2:CD ValiditySat, 13 Apr 2024 20:58:01 GMT - Fri, 12 Jul 2024 20:58:00 GMT
Size2.0 MB (2013081 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer | Verdict | Alert | urlquery | phishing | Phishing - WeTransfer | OpenPhish | phishing | WeTransfer | PhishTank | phishing | WeTransfer |
GET /packs/media/actiefgrotesque/ActiefGrotesque_W_Regular-1f437876.woff HTTP/1.1
Host: lingering-thunder-0229.nguyenchong9455.workers.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Referer: https://lingering-thunder-0229.nguyenchong9455.workers.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 26 Apr 2024 17:47:54 GMT
content-type: text/html;charset=UTF-8
content-length: 2013081
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=cyE2i4vMuWobniPn6i6dTX3cbcib2B5g95aTEY7k7PnWnm8tC6pM%2F0qcLBswMZkLOUMlh%2FbdrzuukSHxYKejDNMIiYSSzvV4qDRQJrvMPFK%2Ba29nRVWr5C1msteJah6rvZ%2F20hC2lCC2K7D72GMr953OY7yU8zF%2BcbwHcFSOs4YW2%2BDPlg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a8668f5ed856af-OSL
alt-svc: h3=":443"; ma=86400
|
|
| lingering-thunder-0229.nguyenchong9455.workers.dev/css/bat.js | 172.67.175.143 | 200 OK | 2.0 MB |
URL GET HTTP/3lingering-thunder-0229.nguyenchong9455.workers.dev/css/bat.js IP172.67.175.143:443
Requested byhttps://lingering-thunder-0229.nguyenchong9455.workers.dev/ CertificateIssuerGoogle Trust Services LLC Subjectnguyenchong9455.workers.dev Fingerprint4F:AF:F2:54:B4:8B:77:6C:2B:9C:3B:7E:1C:3B:60:8B:5A:24:A2:CD ValiditySat, 13 Apr 2024 20:58:01 GMT - Fri, 12 Jul 2024 20:58:00 GMT
Size2.0 MB (2013081 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer | Verdict | Alert | urlquery | phishing | Phishing - WeTransfer | OpenPhish | phishing | WeTransfer | PhishTank | phishing | WeTransfer |
GET /css/bat.js HTTP/1.1
Host: lingering-thunder-0229.nguyenchong9455.workers.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://lingering-thunder-0229.nguyenchong9455.workers.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 26 Apr 2024 17:47:53 GMT
content-type: text/html;charset=UTF-8
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=rFwtgvS9InPACMLyXpIc5rKt135jHFrIoEGVQuc1BsYrdM%2FVqnKCKl%2F2M6an%2FW1tu5RFVatjzCAccG7E20C1F8YltVFBNx86GNPRcCo8pqKd0iIG674Eq8aTY8n15X%2F3%2BBaQLNm6hRa5gDqXHxZ9Z4aahx6u38dkVacCtOFddE1Rhx8ppw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a86689adec56af-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| lingering-thunder-0229.nguyenchong9455.workers.dev/css/sp.js | 172.67.175.143 | 200 OK | 2.0 MB |
URL GET HTTP/3lingering-thunder-0229.nguyenchong9455.workers.dev/css/sp.js IP172.67.175.143:443
Requested byhttps://lingering-thunder-0229.nguyenchong9455.workers.dev/ CertificateIssuerGoogle Trust Services LLC Subjectnguyenchong9455.workers.dev Fingerprint4F:AF:F2:54:B4:8B:77:6C:2B:9C:3B:7E:1C:3B:60:8B:5A:24:A2:CD ValiditySat, 13 Apr 2024 20:58:01 GMT - Fri, 12 Jul 2024 20:58:00 GMT
Size2.0 MB (2013081 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer | Verdict | Alert | urlquery | phishing | Phishing - WeTransfer | OpenPhish | phishing | WeTransfer | PhishTank | phishing | WeTransfer |
GET /css/sp.js HTTP/1.1
Host: lingering-thunder-0229.nguyenchong9455.workers.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://lingering-thunder-0229.nguyenchong9455.workers.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 26 Apr 2024 17:47:53 GMT
content-type: text/html;charset=UTF-8
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=1%2BthKPW4N7QbSdYQcuAtJeJ4dU0JmxKYMHIFjmox6zO2U7mSwp6tRGZ1OZPxshSZLsGdE38waZF5lIWpU9zN5Z4QjVtr6Vr0zCZv340z2QasoBPSTH4rS8dLFT5Vp4toX5uU1qwcSDird8lbdJ%2B4a0ztR1vrBMEMH5jFj3%2FL9%2BnlYEv28g%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a86689ce2056af-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| lingering-thunder-0229.nguyenchong9455.workers.dev/css/gtm_002.js | 172.67.175.143 | 200 OK | 2.0 MB |
URL GET HTTP/3lingering-thunder-0229.nguyenchong9455.workers.dev/css/gtm_002.js IP172.67.175.143:443
Requested byhttps://lingering-thunder-0229.nguyenchong9455.workers.dev/ CertificateIssuerGoogle Trust Services LLC Subjectnguyenchong9455.workers.dev Fingerprint4F:AF:F2:54:B4:8B:77:6C:2B:9C:3B:7E:1C:3B:60:8B:5A:24:A2:CD ValiditySat, 13 Apr 2024 20:58:01 GMT - Fri, 12 Jul 2024 20:58:00 GMT
Size2.0 MB (2013081 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer | Verdict | Alert | urlquery | phishing | Phishing - WeTransfer | OpenPhish | phishing | WeTransfer | PhishTank | phishing | WeTransfer |
GET /css/gtm_002.js HTTP/1.1
Host: lingering-thunder-0229.nguyenchong9455.workers.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://lingering-thunder-0229.nguyenchong9455.workers.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 26 Apr 2024 17:47:53 GMT
content-type: text/html;charset=UTF-8
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=TqimzqhI6pQlOPA3PIl2rlNbFxpyApe7o7c1EIvQJovVpDluOSMtGKjfeesez36PUbY1c6izjH0TDHsK0lb%2FrYUoHT7sgd80CH4IE5scxRFan%2Ff%2BM52CoqLOak964zEhgERkeHG8wVz39sSyA6eYXmW%2B6BwD%2Ba74xzoo7e8MpeVx3NPuMQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a86689be0a56af-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| lingering-thunder-0229.nguyenchong9455.workers.dev/css/en-de295c39cb769807d9fa.js | 172.67.175.143 | 200 OK | 2.0 MB |
URL GET HTTP/3lingering-thunder-0229.nguyenchong9455.workers.dev/css/en-de295c39cb769807d9fa.js IP172.67.175.143:443
Requested byhttps://lingering-thunder-0229.nguyenchong9455.workers.dev/ CertificateIssuerGoogle Trust Services LLC Subjectnguyenchong9455.workers.dev Fingerprint4F:AF:F2:54:B4:8B:77:6C:2B:9C:3B:7E:1C:3B:60:8B:5A:24:A2:CD ValiditySat, 13 Apr 2024 20:58:01 GMT - Fri, 12 Jul 2024 20:58:00 GMT
Size2.0 MB (2013081 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer | Verdict | Alert | urlquery | phishing | Phishing - WeTransfer | OpenPhish | phishing | WeTransfer | PhishTank | phishing | WeTransfer |
GET /css/en-de295c39cb769807d9fa.js HTTP/1.1
Host: lingering-thunder-0229.nguyenchong9455.workers.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://lingering-thunder-0229.nguyenchong9455.workers.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 26 Apr 2024 17:47:53 GMT
content-type: text/html;charset=UTF-8
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=khsfiR5SgjoEcl4NabUi%2B%2BfG08z5jmfvRlr%2Fydwl9KveLNLJrl2rUgG67srfFGvQzS%2BeGH4WHbVhW0sQumveDEwx7o5UCnzSmAiMM7uxp5GrwSqKzofkcfbgErEgiL5m8318b8TyxTMvsujcFOX%2FKkM2zris11Xc4SFjfRBOvvmlTQcOXQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a86689de3656af-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| lingering-thunder-0229.nguyenchong9455.workers.dev/css/application-c2b6f877fed288c2431f.js | 172.67.175.143 | 200 OK | 2.0 MB |
URL GET HTTP/3lingering-thunder-0229.nguyenchong9455.workers.dev/css/application-c2b6f877fed288c2431f.js IP172.67.175.143:443
Requested byhttps://lingering-thunder-0229.nguyenchong9455.workers.dev/ CertificateIssuerGoogle Trust Services LLC Subjectnguyenchong9455.workers.dev Fingerprint4F:AF:F2:54:B4:8B:77:6C:2B:9C:3B:7E:1C:3B:60:8B:5A:24:A2:CD ValiditySat, 13 Apr 2024 20:58:01 GMT - Fri, 12 Jul 2024 20:58:00 GMT
Size2.0 MB (2013081 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer | Verdict | Alert | urlquery | phishing | Phishing - WeTransfer | OpenPhish | phishing | WeTransfer | PhishTank | phishing | WeTransfer |
GET /css/application-c2b6f877fed288c2431f.js HTTP/1.1
Host: lingering-thunder-0229.nguyenchong9455.workers.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lingering-thunder-0229.nguyenchong9455.workers.dev/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 26 Apr 2024 17:47:53 GMT
content-type: text/html;charset=UTF-8
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Po4dXgQFonJvQ%2FDAOt%2FHLjHhr79%2B2%2Fmc%2BY6bNiyEDPP2FIaNXtBwD8BnpiaBHRz1yCnw2vyeeyFbUS0uuXknn6rw5p4ZE8%2F8yfRSlfqzpWq4Q%2Fsncprww%2FdpdIlu%2B5cORhWVMfZMHyEp%2FnQb%2F5wqtfRP8X%2Fq59mM0x8kxe%2B8EqPG6rFLwQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a866899de256af-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| lingering-thunder-0229.nguyenchong9455.workers.dev/css/fbevents.js | 172.67.175.143 | 200 OK | 2.0 MB |
URL GET HTTP/3lingering-thunder-0229.nguyenchong9455.workers.dev/css/fbevents.js IP172.67.175.143:443
Requested byhttps://lingering-thunder-0229.nguyenchong9455.workers.dev/ CertificateIssuerGoogle Trust Services LLC Subjectnguyenchong9455.workers.dev Fingerprint4F:AF:F2:54:B4:8B:77:6C:2B:9C:3B:7E:1C:3B:60:8B:5A:24:A2:CD ValiditySat, 13 Apr 2024 20:58:01 GMT - Fri, 12 Jul 2024 20:58:00 GMT
Size2.0 MB (2013081 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer | Verdict | Alert | urlquery | phishing | Phishing - WeTransfer | OpenPhish | phishing | WeTransfer | PhishTank | phishing | WeTransfer |
GET /css/fbevents.js HTTP/1.1
Host: lingering-thunder-0229.nguyenchong9455.workers.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://lingering-thunder-0229.nguyenchong9455.workers.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 26 Apr 2024 17:47:53 GMT
content-type: text/html;charset=UTF-8
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=KDjubHV8N3RymTyycTGN5PUqm9N0RGZE1fcGkQMAyaWOZBah2LKMh9Y3ADlCR7uthNQ8OwQx9OuLoI83tuxOOKB2FA9btT66VmLHSv0U%2FM5QFb1kibb%2FLpwZHmSSbI3J2p10ggceEjYwNjf8Ql6dHRlx5zFiAD%2BWu79yKRUJlTH9tDXcUA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a86689adeb56af-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| lingering-thunder-0229.nguyenchong9455.workers.dev/ | 172.67.175.143 | 200 OK | 2.0 MB |
URL User Request GET HTTP/2lingering-thunder-0229.nguyenchong9455.workers.dev/ IP172.67.175.143:443
CertificateIssuerGoogle Trust Services LLC Subjectnguyenchong9455.workers.dev Fingerprint4F:AF:F2:54:B4:8B:77:6C:2B:9C:3B:7E:1C:3B:60:8B:5A:24:A2:CD ValiditySat, 13 Apr 2024 20:58:01 GMT - Fri, 12 Jul 2024 20:58:00 GMT
Size2.0 MB (2013081 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer | Verdict | Alert | urlquery | phishing | Phishing - WeTransfer | OpenPhish | phishing | WeTransfer | PhishTank | phishing | WeTransfer |
GET / HTTP/1.1
Host: lingering-thunder-0229.nguyenchong9455.workers.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 26 Apr 2024 17:47:52 GMT
content-type: text/html;charset=UTF-8
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=v4o91TxCr5QjAo6m32aWNA72cCGnmpgXfHn9QYIEwnTTdwjuK2w4kr04OM47AdfHGWBFVZcTz%2FfgDMySinqTXFnIUb%2FokFi8lUqK3Yb1%2FY7XQBxTPjHZzXkn5jujDcRNwyaUvhRx1ytr4a0f2wIXwC%2FG%2Bjtl84jYBN6YAXbnX8JTi70RGw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a866860ae656a8-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| lingering-thunder-0229.nguyenchong9455.workers.dev/css/runtimeapplication-bafdd8b86fd88bb4273d.js | 172.67.175.143 | 200 OK | 2.0 MB |
URL GET HTTP/3lingering-thunder-0229.nguyenchong9455.workers.dev/css/runtimeapplication-bafdd8b86fd88bb4273d.js IP172.67.175.143:443
Requested byhttps://lingering-thunder-0229.nguyenchong9455.workers.dev/ CertificateIssuerGoogle Trust Services LLC Subjectnguyenchong9455.workers.dev Fingerprint4F:AF:F2:54:B4:8B:77:6C:2B:9C:3B:7E:1C:3B:60:8B:5A:24:A2:CD ValiditySat, 13 Apr 2024 20:58:01 GMT - Fri, 12 Jul 2024 20:58:00 GMT
Size2.0 MB (2013081 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer | Verdict | Alert | urlquery | phishing | Phishing - WeTransfer | OpenPhish | phishing | WeTransfer | PhishTank | phishing | WeTransfer |
GET /css/runtimeapplication-bafdd8b86fd88bb4273d.js HTTP/1.1
Host: lingering-thunder-0229.nguyenchong9455.workers.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lingering-thunder-0229.nguyenchong9455.workers.dev/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 26 Apr 2024 17:47:53 GMT
content-type: text/html;charset=UTF-8
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=R3eHT2GvVuRgc4ioPnf6SWBhFNqW%2BQLRpBXhsTGRgLiAJTPvN9jFYHssBydIdclfnTps6s6VdukgYE9AuAj6S%2FkybwbagrGdHXT95TWnqJyXv0yZcIbZmsKVUDXbiPYjaw7s97tH6tZafvtkSL6NLgcrw69kNQuQWf%2FesP3gw%2Fl1z9Hxyw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a866899dd956af-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| lingering-thunder-0229.nguyenchong9455.workers.dev/css/vendor-ef8fd9ca3a0295622111.js | 172.67.175.143 | 200 OK | 2.0 MB |
URL GET HTTP/3lingering-thunder-0229.nguyenchong9455.workers.dev/css/vendor-ef8fd9ca3a0295622111.js IP172.67.175.143:443
Requested byhttps://lingering-thunder-0229.nguyenchong9455.workers.dev/ CertificateIssuerGoogle Trust Services LLC Subjectnguyenchong9455.workers.dev Fingerprint4F:AF:F2:54:B4:8B:77:6C:2B:9C:3B:7E:1C:3B:60:8B:5A:24:A2:CD ValiditySat, 13 Apr 2024 20:58:01 GMT - Fri, 12 Jul 2024 20:58:00 GMT
Size2.0 MB (2013081 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer | Verdict | Alert | urlquery | phishing | Phishing - WeTransfer | OpenPhish | phishing | WeTransfer | PhishTank | phishing | WeTransfer |
GET /css/vendor-ef8fd9ca3a0295622111.js HTTP/1.1
Host: lingering-thunder-0229.nguyenchong9455.workers.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lingering-thunder-0229.nguyenchong9455.workers.dev/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 26 Apr 2024 17:47:53 GMT
content-type: text/html;charset=UTF-8
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=P34olNXBRwu4B9xo3w85imC3ENCJpOsya1LLNEdCjJSIgmwqtcKwVTrkHQmfZXPCiNeKAAa4HtAv98o%2BEfEo%2F9pfgQpMT9k4u4qJtyFF7dr1D1vlI89h90%2F1Vql7IAD4BUg1P0G5qbH9pA5sig8LMSPGvHsx%2BooP%2FDp2epnswtjOIPQ4%2Bw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a866899de556af-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| lingering-thunder-0229.nguyenchong9455.workers.dev/css/runtimeapplication-bafdd8b86fd88bb4273d.js | 172.67.175.143 | 200 OK | 2.0 MB |
URL GET HTTP/3lingering-thunder-0229.nguyenchong9455.workers.dev/css/runtimeapplication-bafdd8b86fd88bb4273d.js IP172.67.175.143:443
Requested byhttps://lingering-thunder-0229.nguyenchong9455.workers.dev/ CertificateIssuerGoogle Trust Services LLC Subjectnguyenchong9455.workers.dev Fingerprint4F:AF:F2:54:B4:8B:77:6C:2B:9C:3B:7E:1C:3B:60:8B:5A:24:A2:CD ValiditySat, 13 Apr 2024 20:58:01 GMT - Fri, 12 Jul 2024 20:58:00 GMT
Size2.0 MB (2013081 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer | Verdict | Alert | urlquery | phishing | Phishing - WeTransfer | OpenPhish | phishing | WeTransfer | PhishTank | phishing | WeTransfer |
GET /css/runtimeapplication-bafdd8b86fd88bb4273d.js HTTP/1.1
Host: lingering-thunder-0229.nguyenchong9455.workers.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://lingering-thunder-0229.nguyenchong9455.workers.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 26 Apr 2024 17:47:54 GMT
content-type: text/html;charset=UTF-8
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Ud8pNNh%2BGcvTPIs1mqczpYC%2FmJy5HenF%2BEZglRNiPameQX1BrGi7zcFIV3FeXyASekwH3SE5%2Bzj0Ie67aFqa2lwMHHrZYRLdXo%2Ff2tZePYRoWb1d9ZGwOvT%2BYdS6MD8qfqsIInbPKYX9SmS7LH44MH3JIn4mjyf1mj8bzxeKu9mXWhHneQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a866900fcd56af-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|