| worker-billowing-wind-3494.resscue-medic.workers.dev/ | 172.67.172.249 | 200 OK | 19 kB |
URL User Request GET HTTP/2worker-billowing-wind-3494.resscue-medic.workers.dev/ IP172.67.172.249:443
CertificateIssuerGoogle Trust Services LLC Subjectresscue-medic.workers.dev Fingerprint36:1F:2E:BA:EB:FA:FB:65:A2:B2:71:3D:02:1A:A7:18:39:0F:4E:AD ValidityFri, 29 Mar 2024 17:32:18 GMT - Thu, 27 Jun 2024 17:32:17 GMT
File typeHTML document, ASCII text, with very long lines (65535) Hashb3f7202430782fc1fafd64a5e7dc9351 53d234e3e5def908f4299045c6f5170b86b61dfe 46d2fb50d16e2a30a04244f15e5eefa958bee5b47b358bc8706516b8ba801b1a
Analyzer | Verdict | Alert | urlquery | phishing | Phishing - Yahoo | urlquery | suspicious | Suspicious - Suspicious Javascript code |
GET / HTTP/1.1
Host: worker-billowing-wind-3494.resscue-medic.workers.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 09 May 2024 01:39:00 GMT
content-type: text/html;charset=UTF-8
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=AU20nfM2FZzVZhWuPFzGMmkXPP3OdiL%2F%2BMPoHV0mT0vCBY7OcFiQLKbQhk0JLyrgItmpjWsJs7NGD8FA21nn5EZ4QuXCJkHiWMzeQ8hIe8nzig7jM0WBrr8IsIJHAFU0Nps0l%2Bz334roY%2Be%2FMH4sOCg6v0c96t3aBhbu4jzYXV5WTxwriuoE"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880df9284dc756a2-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| s.yimg.com/wm/mbr/images/yahoo-favicon-img-v0.0.2.ico | 87.248.119.252 | 200 OK | 1.4 kB |
URL GET HTTP/2s.yimg.com/wm/mbr/images/yahoo-favicon-img-v0.0.2.ico IP87.248.119.252:443 ASN#203220 Yahoo-UK Limited
Requested byhttps://worker-billowing-wind-3494.resscue-medic.workers.dev/ CertificateIssuerDigiCert Inc Subject*.fantasysports.yahoo.com FingerprintFB:A0:5A:E1:EC:89:4D:F2:05:92:12:26:0C:97:C8:C6:CF:19:2F:96 ValidityTue, 30 Apr 2024 00:00:00 GMT - Wed, 19 Jun 2024 23:59:59 GMT
File typeMS Windows icon resource - 1 icon, 16x16, 8 bits/pixel Hashb6814ae5582d7953821acbd76e977bb4 75a33fc706c2c6ba233e76c17337e466949f403c 4a491acd00880c407a2b749619003716c87e9c25ac344e5934c13e8f9aa0e8b3
GET /wm/mbr/images/yahoo-favicon-img-v0.0.2.ico HTTP/1.1
Host: s.yimg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://worker-billowing-wind-3494.resscue-medic.workers.dev/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
x-amz-id-2: xo+x7ieiMoy9heruvUxmRh2OOfVrbcwFfkcCrlK7ff8MZmVh7P68cogdjR8QpfdXD7N4ATdalxbFpFfdPum6qA==
x-amz-request-id: VCQSVBSFNYG3124P
date: Tue, 07 May 2024 20:54:21 GMT
last-modified: Wed, 11 Sep 2019 18:01:04 GMT
etag: "b6814ae5582d7953821acbd76e977bb4"
x-amz-server-side-encryption: AES256
cache-control: public,max-age=315360000
accept-ranges: bytes
content-type: image/vnd.microsoft.icon
server: ATS
content-length: 1406
referrer-policy: no-referrer-when-downgrade
vary: Origin
age: 103483
strict-transport-security: max-age=31536000
expect-ct: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
ats-carp-promotion: 1, 1
X-Firefox-Spdy: h2
|
|
| s.yimg.com/wm/mbr/images/checkbox-checked.svg | 87.248.119.252 | 200 OK | 659 B |
URL GET HTTP/2s.yimg.com/wm/mbr/images/checkbox-checked.svg IP87.248.119.252:443 ASN#203220 Yahoo-UK Limited
Requested byhttps://worker-billowing-wind-3494.resscue-medic.workers.dev/ CertificateIssuerDigiCert Inc Subject*.fantasysports.yahoo.com FingerprintFB:A0:5A:E1:EC:89:4D:F2:05:92:12:26:0C:97:C8:C6:CF:19:2F:96 ValidityTue, 30 Apr 2024 00:00:00 GMT - Wed, 19 Jun 2024 23:59:59 GMT
File typeSVG Scalable Vector Graphics image Hashac8c4fbeda6efad9549cb41b992a8b3a 46f532f081af894297bce53a7d212e2d253a60bf 11b4310df6e27428e7cf86f316abdc10148ac5cf3c8bbbd5b85c88b9f6290c59
GET /wm/mbr/images/checkbox-checked.svg HTTP/1.1
Host: s.yimg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dl.dropboxusercontent.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
x-amz-id-2: VCl+nIFc+dzhenj7X8fjVcEX/cj6bXzW6pH8JUL5z/fgQ7a3cz1swemdXW6nBjDSZF0N9zPf4/o=
x-amz-request-id: TGSGB5DK9857E0F0
date: Tue, 23 Apr 2024 04:56:42 GMT
last-modified: Fri, 24 Apr 2020 17:13:52 GMT
etag: "ac8c4fbeda6efad9549cb41b992a8b3a-df"
x-amz-server-side-encryption: AES256
cache-control: public,max-age=315360000
accept-ranges: bytes
content-type: image/svg+xml
server: ATS
referrer-policy: no-referrer-when-downgrade
vary: Origin, Accept-Encoding
age: 1370542
content-encoding: gzip
content-length: 659
strict-transport-security: max-age=31536000
expect-ct: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
ats-carp-promotion: 1, 1
X-Firefox-Spdy: h2
|
|
| dl.dropboxusercontent.com/s/yntjno1t8hokj3k/yahoo-main.css | 162.125.70.15 | 200 OK | 155 kB |
URL GET HTTP/2dl.dropboxusercontent.com/s/yntjno1t8hokj3k/yahoo-main.css IP162.125.70.15:443
Requested byhttps://worker-billowing-wind-3494.resscue-medic.workers.dev/ CertificateIssuerDigiCert Inc Subject*.dl.dropboxusercontent.com Fingerprint66:F4:AC:24:6B:45:2B:53:3A:0C:7A:96:51:BC:36:53:B5:E8:39:40 ValidityMon, 25 Mar 2024 00:00:00 GMT - Tue, 11 Mar 2025 23:59:59 GMT
File typegzip compressed data, from Unix Size155 kB (155322 bytes) Hasha5ce40a362912e2b21cedd28b43b99bc 6e82eb7aca4d036bdf29b26933a964a729c55d7b 32dbad57f77b6728ac44c3cde960bc2fdc50f14660e032a0f835a3ba3ef0d17d
GET /s/yntjno1t8hokj3k/yahoo-main.css HTTP/1.1
Host: dl.dropboxusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://worker-billowing-wind-3494.resscue-medic.workers.dev/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
accept-ranges: bytes
cache-control: max-age=60
content-disposition: inline; filename="yahoo-main.css"; filename*=UTF-8''yahoo-main.css
content-security-policy: report-uri https://www.dropbox.com/csp_log?policy_name=blockserver-usercontent ; sandbox allow-forms allow-scripts allow-top-navigation allow-popups, form-action 'none' ; report-uri https://www.dropbox.com/csp_log?policy_name=blockserver-noscript ; script-src 'none'
pragma: public
set-cookie: uc_session=TsOPfgz9JvxWDrYHjR16CwluxcDbpfA9tG5fh0pKoU2gHVbcp45d0lCtoQDYHCwv; Domain=dropboxusercontent.com; HttpOnly; Path=/; SameSite=None; Secure
x-content-type-options: nosniff
x-server-response-time: 286
date: Thu, 09 May 2024 01:39:01 GMT
server: envoy
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-robots-tag: noindex, nofollow, noimageindex
content-encoding: gzip
vary: Accept-Encoding
x-dropbox-response-origin: far_remote
x-dropbox-request-id: 7939752fe0ab46e0be02edb2a3d4948c
X-Firefox-Spdy: h2
|
|
| s.yimg.com/wm/mbr/images/yahoo-apple-touch-v0.0.2.png | 87.248.119.252 | 200 OK | 13 kB |
URL GET HTTP/2s.yimg.com/wm/mbr/images/yahoo-apple-touch-v0.0.2.png IP87.248.119.252:443 ASN#203220 Yahoo-UK Limited
Requested byhttps://worker-billowing-wind-3494.resscue-medic.workers.dev/ CertificateIssuerDigiCert Inc Subject*.fantasysports.yahoo.com FingerprintFB:A0:5A:E1:EC:89:4D:F2:05:92:12:26:0C:97:C8:C6:CF:19:2F:96 ValidityTue, 30 Apr 2024 00:00:00 GMT - Wed, 19 Jun 2024 23:59:59 GMT
File typePNG image data, 180 x 180, 8-bit/color RGB, interlaced Hasha9d2dde886cd61f73365a84878c78475 6f1f1f7414116c4b01f04ee0a07b41202c2da539 b168c836ccef9cf1cbf7b2440bc11d26667c4ae19613f1e7cf5e6cdc303c7de4
GET /wm/mbr/images/yahoo-apple-touch-v0.0.2.png HTTP/1.1
Host: s.yimg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://worker-billowing-wind-3494.resscue-medic.workers.dev/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
x-amz-id-2: M9ppW5c1XONpF+b/Hd9QqcLUxkuBfvx2T0wQAB6nXDlU+IdwrFT549+bo7ZU3U1dUOVIJdXyvqhkpJUNyHqYgbMFLRN8sllgd5gsiGVi2zI=
x-amz-request-id: C8NB8YG46NKG61W1
date: Wed, 17 Apr 2024 10:43:39 GMT
last-modified: Thu, 12 Sep 2019 21:58:38 GMT
etag: "a9d2dde886cd61f73365a84878c78475"
x-amz-server-side-encryption: AES256
cache-control: public,max-age=315360000
accept-ranges: bytes
content-type: image/png
server: ATS
content-length: 12635
referrer-policy: no-referrer-when-downgrade
vary: Origin
age: 1868124
strict-transport-security: max-age=31536000
expect-ct: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
ats-carp-promotion: 1, 1
X-Firefox-Spdy: h2
|
|
| s.yimg.com/cv/ae/sports/fonts/2017/Yahoo_Sans-Regular.woff2 | 87.248.119.252 | 200 OK | 29 kB |
URL GET HTTP/2s.yimg.com/cv/ae/sports/fonts/2017/Yahoo_Sans-Regular.woff2 IP87.248.119.252:443 ASN#203220 Yahoo-UK Limited
Requested byhttps://worker-billowing-wind-3494.resscue-medic.workers.dev/ CertificateIssuerDigiCert Inc Subject*.fantasysports.yahoo.com FingerprintFB:A0:5A:E1:EC:89:4D:F2:05:92:12:26:0C:97:C8:C6:CF:19:2F:96 ValidityTue, 30 Apr 2024 00:00:00 GMT - Wed, 19 Jun 2024 23:59:59 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 28860, version 1.0 Hasha99b283070afc519f4816e4300c515d2 65b78d03d56de125060e61069debfc47e38fb3df fc0e2df417e7959509df87df6b4de2eb1479c8718bc2d8ab0bc70d3753c68560
GET /cv/ae/sports/fonts/2017/Yahoo_Sans-Regular.woff2 HTTP/1.1
Host: s.yimg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://worker-billowing-wind-3494.resscue-medic.workers.dev
DNT: 1
Connection: keep-alive
Referer: https://dl.dropboxusercontent.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
x-amz-id-2: eUqfV3BH2LZbpPpB8piJwTHXInj/5UaUEsDoikmXfIvfPKJpr1yovkLmk6kQ7v5mdf72DepX34A=
x-amz-request-id: WJC6SQFMRJFY6HBH
date: Sun, 31 Mar 2024 10:42:46 GMT
last-modified: Thu, 19 Apr 2018 19:06:41 GMT
etag: "a99b283070afc519f4816e4300c515d2"
x-amz-server-side-encryption: AES256
cache-control: max-age=31536000,public
x-amz-meta-created-date: Tue, 03 Oct 2017 06:22:51 GMT
x-amz-meta-mbst-etag: "YM:1:cb5e4811-e042-455c-b2b2-f984d5f70e0200055a9e8550b736"
x-amz-meta-x-ysws-mbst-vtime: 1507011771545398
expires: Sat, 05 Sep 2026 00:00:00 GMT
x-amz-meta-x-ysws-access: public
accept-ranges: bytes
content-type: font/woff2
server: ATS
content-length: 28860
referrer-policy: no-referrer-when-downgrade
age: 3336977
access-control-allow-origin: *
strict-transport-security: max-age=31536000
expect-ct: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
vary: Origin
ats-carp-promotion: 1, 1
X-Firefox-Spdy: h2
|
|
| s.yimg.com/cv/ae/sports/fonts/2017/Yahoo_Sans-Semibold.woff2 | 87.248.119.252 | 200 OK | 29 kB |
URL GET HTTP/2s.yimg.com/cv/ae/sports/fonts/2017/Yahoo_Sans-Semibold.woff2 IP87.248.119.252:443 ASN#203220 Yahoo-UK Limited
Requested byhttps://worker-billowing-wind-3494.resscue-medic.workers.dev/ CertificateIssuerDigiCert Inc Subject*.fantasysports.yahoo.com FingerprintFB:A0:5A:E1:EC:89:4D:F2:05:92:12:26:0C:97:C8:C6:CF:19:2F:96 ValidityTue, 30 Apr 2024 00:00:00 GMT - Wed, 19 Jun 2024 23:59:59 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 29040, version 1.0 Hashaf9fdad7698452697b016850fff96423 710130c79bf56297f8abcc6d6c575172590133b0 b8989e0be6a0c3a8a407d8b69b7884eb5ebf401b7eee8b8b98c5eeec3ba497fa
GET /cv/ae/sports/fonts/2017/Yahoo_Sans-Semibold.woff2 HTTP/1.1
Host: s.yimg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://worker-billowing-wind-3494.resscue-medic.workers.dev
DNT: 1
Connection: keep-alive
Referer: https://dl.dropboxusercontent.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
x-amz-id-2: b/d3/8M7GI4ALyri0mfuljZG8dliBMLx5+RRB9sqZUGhVuSowHOa/LFdmMpaGMHCP/qwqJX2GVU=
x-amz-request-id: N36X1SXQ20R48RQA
date: Mon, 06 May 2024 07:44:03 GMT
last-modified: Thu, 19 Apr 2018 17:33:29 GMT
etag: "af9fdad7698452697b016850fff96423"
x-amz-server-side-encryption: AES256
cache-control: max-age=31536000,public
x-amz-meta-created-date: Tue, 03 Oct 2017 06:22:51 GMT
x-amz-meta-mbst-etag: "YM:1:95620d49-21c2-4044-b803-58b70c8e419700055a9e854fb9f1"
x-amz-meta-x-ysws-mbst-vtime: 1507011771480561
expires: Sat, 05 Sep 2026 00:00:00 GMT
x-amz-meta-x-ysws-access: public
accept-ranges: bytes
content-type: font/woff2
server: ATS
content-length: 29040
referrer-policy: no-referrer-when-downgrade
age: 237300
access-control-allow-origin: *
strict-transport-security: max-age=31536000
expect-ct: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
vary: Origin
ats-carp-promotion: 1, 1
X-Firefox-Spdy: h2
|
|
| s.yimg.com/cv/ae/sports/fonts/2017/Yahoo_Sans-Medium.woff2 | 87.248.119.252 | 200 OK | 29 kB |
URL GET HTTP/2s.yimg.com/cv/ae/sports/fonts/2017/Yahoo_Sans-Medium.woff2 IP87.248.119.252:443 ASN#203220 Yahoo-UK Limited
Requested byhttps://worker-billowing-wind-3494.resscue-medic.workers.dev/ CertificateIssuerDigiCert Inc Subject*.fantasysports.yahoo.com FingerprintFB:A0:5A:E1:EC:89:4D:F2:05:92:12:26:0C:97:C8:C6:CF:19:2F:96 ValidityTue, 30 Apr 2024 00:00:00 GMT - Wed, 19 Jun 2024 23:59:59 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 29228, version 1.0 Hash7c7c02dcee2bf1c2528db6092d4ad1fa 988a01f705c074261490625c70f94b2642413693 d5312dacbe6f248c6c4b60251d7acf77bc3bc891cd9b880dead36d9babb288c4
GET /cv/ae/sports/fonts/2017/Yahoo_Sans-Medium.woff2 HTTP/1.1
Host: s.yimg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://worker-billowing-wind-3494.resscue-medic.workers.dev
DNT: 1
Connection: keep-alive
Referer: https://dl.dropboxusercontent.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
x-amz-id-2: 3KSgBQulwwK/rKZ4TssLF9029jeQCULc+kGlzOS3mZiQNW3LpqmQTlJafsKXVcBsXYSFCHws/1U=
x-amz-request-id: YVF6FM7JBEGBS6MF
date: Wed, 10 Apr 2024 08:37:08 GMT
last-modified: Thu, 19 Apr 2018 16:25:50 GMT
etag: "7c7c02dcee2bf1c2528db6092d4ad1fa"
x-amz-server-side-encryption: AES256
cache-control: max-age=31536000,public
x-amz-meta-created-date: Tue, 03 Oct 2017 06:22:52 GMT
x-amz-meta-mbst-etag: "YM:1:1bb49599-26ac-442e-b6b8-f4e40f067ea500055a9e855b6ecb"
x-amz-meta-x-ysws-mbst-vtime: 1507011772247755
expires: Sat, 05 Sep 2026 00:00:00 GMT
x-amz-meta-x-ysws-access: public
accept-ranges: bytes
content-type: font/woff2
server: ATS
content-length: 29228
referrer-policy: no-referrer-when-downgrade
age: 2480516
strict-transport-security: max-age=31536000
expect-ct: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
access-control-allow-origin: *
vary: Origin
ats-carp-promotion: 1
X-Firefox-Spdy: h2
|
|