Report - worker-ancient-butterfly-29b6.fokkoyarka.workers.dev/

Report Overview

Submitted URL
worker-ancient-butterfly-29b6.fokkoyarka.workers.dev/
IP
188.114.96.1
ASN
#13335 CLOUDFLARENET
Submitted
2024-04-24 17:48:06
Access
public
Website Title
Webmail :: Welcome to Webmail
Final URL
worker-ancient-butterfly-29b6.fokkoyarka.workers.dev/
Tags
phishing suspicious
urlquery detections
Phishing - Generic phishing
Suspicious - Suspicious Javascript code
Suspicious - Anti-debugging code

Detections

urlquery
9
Network Intrusion Detection
0
Threat Detection Systems
4

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
cdnjs.cloudflare.com	235	2009-02-17	2015-04-17	2024-04-24	543 B	7.2 kB	104.17.25.14
bafybeibusvqm3e73ahgyhttqud3p3vhxaqh5fbtftjgibzsjegsprsulx4.ipfs.w3s.link	unknown	2022-06-27	2022-11-20	2024-04-17	510 B	22 kB	104.18.41.169
bafybeihbjgeaixczn7cx54jxs55tothzeaururwppolrtid7agdsbvhupm.ipfs.w3s.link	unknown	2022-06-27	2022-11-20	2024-04-17	512 B	16 kB	104.18.41.169
bafybeidf5fw6gmcl7xh3ytqn53u7vmg2cfhynrbmhkwhxvcizz5rtdbyxq.ipfs.w3s.link	unknown	2022-06-27	2022-11-20	2024-03-27	513 B	16 kB	104.18.41.169
bafybeig5evukk2lmpa2bdjinbdd6bgqonnqhx7xvqbkbrlqiy4v3vv5n5u.ipfs.w3s.link	unknown	2022-06-27	2022-11-20	2024-04-13	514 B	43 kB	172.64.146.87
bafybeicvuk4mb6tdtpe7yxnckrewbgyimqr5hbp67dhzjjg5mkgo2t2eey.ipfs.dweb.link	unknown	2017-02-24	2023-04-03	2024-04-14	1.2 kB	1.6 kB	209.94.90.2
ajax.googleapis.com	12905	2005-01-25	2013-08-16	2024-04-24	467 B	31 kB	142.250.74.74
code.jquery.com	634	2005-12-10	2012-05-21	2024-04-23	518 B	24 kB	151.101.130.137
worker-ancient-butterfly-29b6.fokkoyarka.workers.dev	unknown	unknown	No data	No data	1.0 kB	91 kB	188.114.97.1
bafybeicvuk4mb6tdtpe7yxnckrewbgyimqr5hbp67dhzjjg5mkgo2t2eey.ipfs.w3s.link	unknown	2022-06-27	2022-11-20	2024-04-17	1.7 kB	32 kB	104.18.41.169
email.powweb.com	unknown	1999-07-04	2017-01-31	2024-04-17	489 B	35 kB	65.254.250.40
maxcdn.bootstrapcdn.com	724	2012-05-25	2014-06-18	2024-04-24	539 B	50 kB	104.18.11.207

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

Scan Date	Severity	Indicator	Alert
2024-04-24	medium	worker-ancient-butterfly-29b6.fokkoyarka.workers.dev/	Webmail Providers
2024-04-24	medium	worker-ancient-butterfly-29b6.fokkoyarka.workers.dev/	Webmail Providers

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (10)

	URL	Size	First Seen	Last Seen
	unknown	18 kB	2024-04-24	2024-04-24
Pretty Introduced by scriptElement Embedded in HTML false Observations First Seen2024-04-24 19:48:12 Last Seen2024-04-24 19:48:12 Times Seen1 Hash 834affcb0095f6a3d203693d3eb59e18 126ddb3d32bf591dbaf7e8c647b3633856f56ea4 d99ea7ca395dced7717084bb2481373aab0ecb9ce6412ab6e93189d38765e99d Loading...

	worker-ancient-butterfly-29b6.fokkoyarka.workers.dev/	76 kB	2024-04-24	2024-04-24
Pretty URL worker-ancient-butterfly-29b6.fokkoyarka.workers.dev/ IP 188.114.97.1 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2024-04-24 19:48:12 Last Seen2024-04-24 19:48:12 Times Seen1 Hash f93d84a5574854a4ddd84241db229b98 8c88596c3876e745cd53ec7d89f0186ad2b29c8d b73ec83ea334cc50d8da4739a62f8b205e1bc38cdc497276207d0ecea5ae41cf Loading...

	unknown	58 B	2024-02-22	2024-04-24
Pretty Introduced by scriptElement Embedded in HTML false Observations First Seen2024-02-22 03:35:30 Last Seen2024-04-24 19:48:12 Times Seen3 Hash 0781b875d87cd026ec26a643a6648c07 c86c737df81b82b70444f42b921f819194751fbe 018bf81361633f3d68e66b7393f5545cc3763319094fc3111bfd38905f9cf30e Loading...

	unknown	670 B	2023-06-26	2024-04-24
Pretty Introduced by scriptElement Embedded in HTML false Observations First Seen2023-06-26 19:45:11 Last Seen2024-04-24 19:48:12 Times Seen5 Hash 6e37a288e48f8c18a05134a6ebbe95df 7c947832a933f343a5e4296848792fd697412f38 49f8c5813a4e785c53af5352503bf6daaa657406b012444be8c355460f61695e Loading...

	code.jquery.com/jquery-3.2.1.slim.min.js	70 kB	2023-03-07	2024-05-06
Pretty URL code.jquery.com/jquery-3.2.1.slim.min.js IP 151.101.130.137 ASN #54113 FASTLY Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:02:43 Last Seen2024-05-06 06:45:26 Times Seen107726 Hash 5f48fc77cac90c4778fa24ec9c57f37d 9e89d1515bc4c371b86f4cb1002fd8e377c1829f 9365920887b11b33a3dc4ba28a0f93951f200341263e3b9cefd384798e4be398 Loading...

	maxcdn.bootstrapcdn.com/bootstrap/4.0.0/js/bootstrap.min.js	49 kB	2023-03-07	2024-05-06
Pretty URL maxcdn.bootstrapcdn.com/bootstrap/4.0.0/js/bootstrap.min.js IP 104.18.11.207 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:02:44 Last Seen2024-05-06 08:42:20 Times Seen138728 Hash 14d449eb8876fa55e1ef3c2cc52b0c17 a9545831803b1359cfeed47e3b4d6bae68e40e99 e7ed36ceee5450b4243bbc35188afabdfb4280c7c57597001de0ed167299b01b Loading...

	unknown	1.0 kB	2024-02-22	2024-04-24
Pretty Introduced by scriptElement Embedded in HTML false Observations First Seen2024-02-22 03:35:30 Last Seen2024-04-24 19:48:12 Times Seen3 Hash 405a168e612a5c3ad849f5e160022eef df49a0c47be80716631d8f1de45b18ed35aa84e3 786c2563337210c71284b0847977f2f83b07f13d0d99dd97247fc801fe795240 Loading...

	cdnjs.cloudflare.com/ajax/libs/popper.js/1.12.9/umd/popper.min.js	19 kB	2023-03-07	2024-05-06
Pretty URL cdnjs.cloudflare.com/ajax/libs/popper.js/1.12.9/umd/popper.min.js IP 104.17.25.14 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:02:44 Last Seen2024-05-06 08:42:20 Times Seen113496 Hash 70d3fda195602fe8b75e0097eed74dde c3b977aa4b8dfb69d651e07015031d385ded964b a52f7aa54d7bcaafa056ee0a050262dfc5694ae28dee8b4cac3429af37ff0d66 Loading...

	ajax.googleapis.com/ajax/libs/jquery/2.2.4/jquery.min.js	86 kB	2023-03-07	2024-05-06
Pretty URL ajax.googleapis.com/ajax/libs/jquery/2.2.4/jquery.min.js IP 142.250.74.74 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:02:00 Last Seen2024-05-06 06:45:40 Times Seen388576 Hash 2f6b11a7e914718e0290410e85366fe9 69bb69e25ca7d5ef0935317584e6153f3fd9a88c 05b85d96f41fff14d8f608dad03ab71e2c1017c2da0914d7c59291bad7a54f8e Loading...

		Size	First Seen	Last Seen
	#1 Write - 183b952566418dad6e582a1b7da367c3	25 kB	2024-04-24	2024-04-24
Pretty Observations First Seen2024-04-24 19:48:12 Last Seen2024-04-24 19:48:12 Times Seen1 Hash 183b952566418dad6e582a1b7da367c3 a488cfebe5d3e414c250c9647e99b63af12d5ec3 c9c6eaeb670342f3b99c4958ff0a07721dba8e83bc827d7d3de26906580c0ef2 Loading...

HTTP Transactions (16)

URL IP Response Size

cdnjs.cloudflare.com/ajax/libs/popper.js/1.12.9/umd/popper.min.js

104.17.25.14

200 OK

6.2 kB

URL GET HTTP/2
cdnjs.cloudflare.com/ajax/libs/popper.js/1.12.9/umd/popper.min.js
IP
104.17.25.14:443
ASN
#13335 CLOUDFLARENET

Requested by
https://worker-ancient-butterfly-29b6.fokkoyarka.workers.dev/
Certificate
IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint7A:EA:B9:09:71:70:6C:87:C9:D3:82:74:8A:7B:B4:60:E5:40:2D:8D
ValidityMon, 03 Jul 2023 00:00:00 GMT - Tue, 02 Jul 2024 23:59:59 GMT

File type
JavaScript source, ASCII text, with very long lines (19015)
Size
6.2 kB (6157 bytes)
Hash
70d3fda195602fe8b75e0097eed74dde
c3b977aa4b8dfb69d651e07015031d385ded964b
a52f7aa54d7bcaafa056ee0a050262dfc5694ae28dee8b4cac3429af37ff0d66

HTTP Headers

GET /ajax/libs/popper.js/1.12.9/umd/popper.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://worker-ancient-butterfly-29b6.fokkoyarka.workers.dev
DNT: 1
Connection: keep-alive
Referer: https://worker-ancient-butterfly-29b6.fokkoyarka.workers.dev/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Wed, 24 Apr 2024 17:47:40 GMT
content-type: application/javascript; charset=utf-8
content-length: 6157
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03fa9-4af4"
last-modified: Mon, 04 May 2020 16:15:37 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 3425744
expires: Mon, 14 Apr 2025 17:47:40 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=TRVJdl6pHnBQXtnNBvsYQ2sV4r%2BHe7NH2%2FOx%2Fa0h13SsxtZ4NJB%2BBCA3pSyoXMysA%2BskRLwWUm37h1mNIJofSxQC6gLUiMzSI2J%2FhHJJ2CWqXmNLg2OxHJp2iPY3h0WbG4ZynlVE"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 8797eb79eaa6b500-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

ajax.googleapis.com/ajax/libs/jquery/2.2.4/jquery.min.js

142.250.74.74

200 OK

30 kB

URL GET HTTP/2
ajax.googleapis.com/ajax/libs/jquery/2.2.4/jquery.min.js
IP
142.250.74.74:443
ASN
#15169 GOOGLE

Requested by
https://worker-ancient-butterfly-29b6.fokkoyarka.workers.dev/
Certificate
IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
Fingerprint15:CB:F7:AC:18:3F:DC:1E:F9:4E:94:D1:98:40:40:61:53:17:28:F2
ValidityMon, 18 Mar 2024 20:35:28 GMT - Mon, 10 Jun 2024 20:35:27 GMT

File type
JavaScript source, ASCII text, with very long lines (32065)
Size
30 kB (30028 bytes)
Hash
2f6b11a7e914718e0290410e85366fe9
69bb69e25ca7d5ef0935317584e6153f3fd9a88c
05b85d96f41fff14d8f608dad03ab71e2c1017c2da0914d7c59291bad7a54f8e

HTTP Headers

GET /ajax/libs/jquery/2.2.4/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://worker-ancient-butterfly-29b6.fokkoyarka.workers.dev/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 30028
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 20 Apr 2024 13:58:14 GMT
expires: Sun, 20 Apr 2025 13:58:14 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
age: 359366
last-modified: Tue, 03 Mar 2020 19:15:00 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

code.jquery.com/jquery-3.2.1.slim.min.js

151.101.130.137

200 OK

24 kB

URL GET HTTP/2
code.jquery.com/jquery-3.2.1.slim.min.js
IP
151.101.130.137:443
ASN
#54113 FASTLY

Requested by
https://worker-ancient-butterfly-29b6.fokkoyarka.workers.dev/
Certificate
IssuerSectigo Limited
Subject*.jquery.com
FingerprintD2:19:0A:AD:CE:BB:9C:61:17:5D:29:4B:A2:54:E8:C6:91:B8:F9:8D
ValidityTue, 11 Jul 2023 00:00:00 GMT - Sun, 14 Jul 2024 23:59:59 GMT

File type
JavaScript source, ASCII text, with very long lines (32012)
Size
24 kB (23856 bytes)
Hash
5f48fc77cac90c4778fa24ec9c57f37d
9e89d1515bc4c371b86f4cb1002fd8e377c1829f
9365920887b11b33a3dc4ba28a0f93951f200341263e3b9cefd384798e4be398

HTTP Headers

GET /jquery-3.2.1.slim.min.js HTTP/1.1
Host: code.jquery.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://worker-ancient-butterfly-29b6.fokkoyarka.workers.dev
DNT: 1
Connection: keep-alive
Referer: https://worker-ancient-butterfly-29b6.fokkoyarka.workers.dev/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Fri, 18 Oct 1991 12:00:00 GMT
etag: W/"28feccc0-10fdd"
cache-control: public, max-age=31536000, stale-while-revalidate=604800
access-control-allow-origin: *
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Wed, 24 Apr 2024 17:47:40 GMT
age: 1450993
x-served-by: cache-lga21963-LGA, cache-hel1410032-HEL
x-cache: HIT, HIT
x-cache-hits: 40, 139716
x-timer: S1713980861.579637,VS0,VE0
vary: Accept-Encoding
content-length: 23856
X-Firefox-Spdy: h2

worker-ancient-butterfly-29b6.fokkoyarka.workers.dev/

188.114.97.1

200 OK

13 kB

URL User Request GET HTTP/2
worker-ancient-butterfly-29b6.fokkoyarka.workers.dev/
IP
188.114.97.1:443
ASN
#13335 CLOUDFLARENET

Certificate
IssuerGoogle Trust Services LLC
Subjectfokkoyarka.workers.dev
FingerprintE5:B3:DD:A6:C9:72:DF:15:65:30:16:CF:F8:78:F3:9C:7F:8F:7C:8F
ValidityMon, 22 Apr 2024 06:38:00 GMT - Sun, 21 Jul 2024 06:37:59 GMT

File type
HTML document, ASCII text, with very long lines (65492)
Size
13 kB (13144 bytes)
Hash
7522a71cf0caa2f27670b2d6984a85e5
5ea2a0e3553e92bd4b9edbea9ac6cc0d412e6a8a
59be334f968aeba481b1bd8020232c5ef6c911846bbc818c7fded49d2a357a8e

Detections

Analyzer	Verdict	Alert
urlquery	suspicious	Suspicious - Suspicious Javascript code
OpenPhish	phishing	Webmail Providers

HTTP Headers

GET / HTTP/1.1
Host: worker-ancient-butterfly-29b6.fokkoyarka.workers.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Wed, 24 Apr 2024 17:47:40 GMT
content-type: text/html;charset=UTF-8
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=F9QdBa0d1BjGKQNLFw7iuMuJ66uyMJe36YrgjgdNUp5AGh0fX8tZsWaivw7dxch0h0acsSUGudjlFBxwPI%2FhYfv4DzmNxSx9PpfsJm9aM0LAg3WCi5E1DZYyW86Uwg2hIV5ebnYKBjuaMd4QDrJxp1vx2q2Xh65IAq2XqxHQPcSWI6mL0keP"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8797eb779a0b5688-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

bafybeibusvqm3e73ahgyhttqud3p3vhxaqh5fbtftjgibzsjegsprsulx4.ipfs.w3s.link/desktop.css

104.18.41.169

200 OK

20 kB

URL GET HTTP/2
bafybeibusvqm3e73ahgyhttqud3p3vhxaqh5fbtftjgibzsjegsprsulx4.ipfs.w3s.link/desktop.css
IP
104.18.41.169:443
ASN
#13335 CLOUDFLARENET

Requested by
https://worker-ancient-butterfly-29b6.fokkoyarka.workers.dev/
Certificate
IssuerCloudflare, Inc.
Subjectw3s.link
FingerprintF0:61:BA:8C:26:BF:F4:1E:58:01:8D:72:FD:EE:3A:4D:2B:07:5E:C4
ValiditySat, 17 Jun 2023 00:00:00 GMT - Sun, 16 Jun 2024 23:59:59 GMT

File type
gzip compressed data, from Unix
Size
20 kB (20248 bytes)
Hash
c6ea0a622b8d32f71883b4d536841673
17c1f350c641a227079e943ac04593b981b173ed
a3ad65c71d52b310ae2ffa33232628ce4a8d0b210b25a254d6d9379e7d7097ec

HTTP Headers

GET /desktop.css HTTP/1.1
Host: bafybeibusvqm3e73ahgyhttqud3p3vhxaqh5fbtftjgibzsjegsprsulx4.ipfs.w3s.link
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://worker-ancient-butterfly-29b6.fokkoyarka.workers.dev/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Wed, 24 Apr 2024 17:47:41 GMT
content-type: text/css
cf-ray: 8797eb7a8eb20b61-OSL
access-control-allow-origin: *
cache-control: public, max-age=29030400, immutable
etag: W/"bafkreicto2m5ftkxf53lv4lvuwmaieli6kclafxsnkpjjtlrlr57sxoxyu"
vary: Accept-Encoding
access-control-allow-methods: GET
access-control-expose-headers: Link
content-security-policy: default-src 'self' 'unsafe-inline' 'unsafe-eval' blob: data: https://*.w3s.link https://*.nftstorage.link https://*.dweb.link https://ipfs.io/ipfs/ https://*.githubusercontent.com https://tableland.network https://*.tableland.network ; form-action 'self'; navigate-to 'self'; connect-src 'self' blob: data: https://*.w3s.link https://*.nftstorage.link https://*.dweb.link https://ipfs.io/ipfs/ https://*.githubusercontent.com https://tableland.network https://*.tableland.network ; report-to csp-endpoint ; report-uri https://csp-report-to.web3.storage
reporting-endpoints: csp-endpoint="https://csp-report-to.web3.storage"
server-timing: request;dur=1359
x-dotstorage-anchor: fa0e17c7b032804a4760c5607b1cf2f3042b0b447ec419b6815a58dcff979267
x-dotstorage-resolution-id: https://freeway.dag.haus
x-dotstorage-resolution-layer: dotstorage-race
x-freeway-version: 2.15.0
server: cloudflare
content-encoding: gzip
X-Firefox-Spdy: h2

bafybeihbjgeaixczn7cx54jxs55tothzeaururwppolrtid7agdsbvhupm.ipfs.w3s.link/framework.css

104.18.41.169

200 OK

15 kB

URL GET HTTP/2
bafybeihbjgeaixczn7cx54jxs55tothzeaururwppolrtid7agdsbvhupm.ipfs.w3s.link/framework.css
IP
104.18.41.169:443
ASN
#13335 CLOUDFLARENET

Requested by
https://worker-ancient-butterfly-29b6.fokkoyarka.workers.dev/
Certificate
IssuerCloudflare, Inc.
Subjectw3s.link
FingerprintF0:61:BA:8C:26:BF:F4:1E:58:01:8D:72:FD:EE:3A:4D:2B:07:5E:C4
ValiditySat, 17 Jun 2023 00:00:00 GMT - Sun, 16 Jun 2024 23:59:59 GMT

File type
gzip compressed data, from Unix
Size
15 kB (14678 bytes)
Hash
72556189c15a6941c3f98423c61a091a
5498b3a070d639bf81b200ffaf114d00823b3bb3
44e2d7b56f2731df38c66e6e3f1caab4733fa81313b363d3f1bd37ecd6cff59f

HTTP Headers

GET /framework.css HTTP/1.1
Host: bafybeihbjgeaixczn7cx54jxs55tothzeaururwppolrtid7agdsbvhupm.ipfs.w3s.link
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://worker-ancient-butterfly-29b6.fokkoyarka.workers.dev/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Wed, 24 Apr 2024 17:47:41 GMT
content-type: text/css
cf-ray: 8797eb7a5e7c0b61-OSL
access-control-allow-origin: *
cache-control: public, max-age=29030400, immutable
etag: W/"bafkreih24rhryngyjmc4q67ji33vinlpdwdftmhssww5lj76ujw36fc2wq"
vary: Accept-Encoding
access-control-allow-methods: GET
access-control-expose-headers: Link
content-security-policy: default-src 'self' 'unsafe-inline' 'unsafe-eval' blob: data: https://*.w3s.link https://*.nftstorage.link https://*.dweb.link https://ipfs.io/ipfs/ https://*.githubusercontent.com https://tableland.network https://*.tableland.network ; form-action 'self'; navigate-to 'self'; connect-src 'self' blob: data: https://*.w3s.link https://*.nftstorage.link https://*.dweb.link https://ipfs.io/ipfs/ https://*.githubusercontent.com https://tableland.network https://*.tableland.network ; report-to csp-endpoint ; report-uri https://csp-report-to.web3.storage
reporting-endpoints: csp-endpoint="https://csp-report-to.web3.storage"
server-timing: request;dur=1101
x-dotstorage-anchor: cc6588b805a52443e1f0fab296221c95ef842b32d4b2b05512b92896ba010fc9
x-dotstorage-resolution-id: https://freeway.dag.haus
x-dotstorage-resolution-layer: dotstorage-race
x-freeway-version: 2.15.0
server: cloudflare
content-encoding: gzip
X-Firefox-Spdy: h2

bafybeidf5fw6gmcl7xh3ytqn53u7vmg2cfhynrbmhkwhxvcizz5rtdbyxq.ipfs.w3s.link/styles.min.css

104.18.41.169

200 OK

14 kB

URL GET HTTP/2
bafybeidf5fw6gmcl7xh3ytqn53u7vmg2cfhynrbmhkwhxvcizz5rtdbyxq.ipfs.w3s.link/styles.min.css
IP
104.18.41.169:443
ASN
#13335 CLOUDFLARENET

Requested by
https://worker-ancient-butterfly-29b6.fokkoyarka.workers.dev/
Certificate
IssuerCloudflare, Inc.
Subjectw3s.link
FingerprintF0:61:BA:8C:26:BF:F4:1E:58:01:8D:72:FD:EE:3A:4D:2B:07:5E:C4
ValiditySat, 17 Jun 2023 00:00:00 GMT - Sun, 16 Jun 2024 23:59:59 GMT

File type
gzip compressed data, from Unix
Size
14 kB (14489 bytes)
Hash
7609c939f515041e9caf6efda49980da
c8984c17d86e3f32b8083feac29eba4483fd4ea4
4047f08c6d90cd2e906e5c08ce9752025f83a2fa452ff020dd4e5a22433b3b4c

HTTP Headers

GET /styles.min.css HTTP/1.1
Host: bafybeidf5fw6gmcl7xh3ytqn53u7vmg2cfhynrbmhkwhxvcizz5rtdbyxq.ipfs.w3s.link
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://worker-ancient-butterfly-29b6.fokkoyarka.workers.dev/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Wed, 24 Apr 2024 17:47:41 GMT
content-type: text/css
cf-ray: 8797eb7a7ea70b61-OSL
access-control-allow-origin: *
cache-control: public, max-age=29030400, immutable
etag: W/"bafkreih345c7d7xfo4leet44fbessdxomvezsoefstmldmj6owqkh2gl24"
vary: Accept-Encoding
access-control-allow-methods: GET
access-control-expose-headers: Link
content-security-policy: default-src 'self' 'unsafe-inline' 'unsafe-eval' blob: data: https://*.w3s.link https://*.nftstorage.link https://*.dweb.link https://ipfs.io/ipfs/ https://*.githubusercontent.com https://tableland.network https://*.tableland.network ; form-action 'self'; navigate-to 'self'; connect-src 'self' blob: data: https://*.w3s.link https://*.nftstorage.link https://*.dweb.link https://ipfs.io/ipfs/ https://*.githubusercontent.com https://tableland.network https://*.tableland.network ; report-to csp-endpoint ; report-uri https://csp-report-to.web3.storage
reporting-endpoints: csp-endpoint="https://csp-report-to.web3.storage"
server-timing: request;dur=840
x-dotstorage-anchor: 889eb602a9546b388907feece6bd30c074efa6eb4dbc293f5ad8832182c72f14
x-dotstorage-resolution-id: https://freeway.dag.haus
x-dotstorage-resolution-layer: dotstorage-race
x-freeway-version: 2.15.0
server: cloudflare
content-encoding: gzip
X-Firefox-Spdy: h2

bafybeicvuk4mb6tdtpe7yxnckrewbgyimqr5hbp67dhzjjg5mkgo2t2eey.ipfs.w3s.link/images/logo_2.png

104.18.41.169

307 Temporary Redirect

0 B

URL GET HTTP/2
bafybeicvuk4mb6tdtpe7yxnckrewbgyimqr5hbp67dhzjjg5mkgo2t2eey.ipfs.w3s.link/images/logo_2.png
IP
104.18.41.169:443
ASN
#13335 CLOUDFLARENET

Requested by
https://worker-ancient-butterfly-29b6.fokkoyarka.workers.dev/
Certificate
IssuerCloudflare, Inc.
Subjectw3s.link
FingerprintF0:61:BA:8C:26:BF:F4:1E:58:01:8D:72:FD:EE:3A:4D:2B:07:5E:C4
ValiditySat, 17 Jun 2023 00:00:00 GMT - Sun, 16 Jun 2024 23:59:59 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /images/logo_2.png HTTP/1.1
Host: bafybeicvuk4mb6tdtpe7yxnckrewbgyimqr5hbp67dhzjjg5mkgo2t2eey.ipfs.w3s.link
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bafybeicvuk4mb6tdtpe7yxnckrewbgyimqr5hbp67dhzjjg5mkgo2t2eey.ipfs.w3s.link/xdesktop.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 307 Temporary Redirect
date: Wed, 24 Apr 2024 17:47:42 GMT
content-length: 0
location: https://bafybeicvuk4mb6tdtpe7yxnckrewbgyimqr5hbp67dhzjjg5mkgo2t2eey.ipfs.dweb.link/images/logo_2.png
access-control-allow-origin: *
access-control-expose-headers: Link
content-security-policy: default-src 'self' 'unsafe-inline' 'unsafe-eval' blob: data: https://*.w3s.link https://*.nftstorage.link https://*.dweb.link https://ipfs.io/ipfs/ https://*.githubusercontent.com https://tableland.network https://*.tableland.network ; form-action 'self'; navigate-to 'self'; connect-src 'self' blob: data: https://*.w3s.link https://*.nftstorage.link https://*.dweb.link https://ipfs.io/ipfs/ https://*.githubusercontent.com https://tableland.network https://*.tableland.network ; report-to csp-endpoint ; report-uri https://csp-report-to.web3.storage
reporting-endpoints: csp-endpoint="https://csp-report-to.web3.storage"
server-timing: request;dur=324
vary: Accept-Encoding
server: cloudflare
cf-ray: 8797eb83ff9b0b61-OSL
X-Firefox-Spdy: h2

bafybeicvuk4mb6tdtpe7yxnckrewbgyimqr5hbp67dhzjjg5mkgo2t2eey.ipfs.w3s.link/images/logo_1.png

104.18.41.169

307 Temporary Redirect

0 B

URL GET HTTP/2
bafybeicvuk4mb6tdtpe7yxnckrewbgyimqr5hbp67dhzjjg5mkgo2t2eey.ipfs.w3s.link/images/logo_1.png
IP
104.18.41.169:443
ASN
#13335 CLOUDFLARENET

Requested by
https://worker-ancient-butterfly-29b6.fokkoyarka.workers.dev/
Certificate
IssuerCloudflare, Inc.
Subjectw3s.link
FingerprintF0:61:BA:8C:26:BF:F4:1E:58:01:8D:72:FD:EE:3A:4D:2B:07:5E:C4
ValiditySat, 17 Jun 2023 00:00:00 GMT - Sun, 16 Jun 2024 23:59:59 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /images/logo_1.png HTTP/1.1
Host: bafybeicvuk4mb6tdtpe7yxnckrewbgyimqr5hbp67dhzjjg5mkgo2t2eey.ipfs.w3s.link
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bafybeicvuk4mb6tdtpe7yxnckrewbgyimqr5hbp67dhzjjg5mkgo2t2eey.ipfs.w3s.link/xdesktop.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 307 Temporary Redirect
date: Wed, 24 Apr 2024 17:47:42 GMT
content-length: 0
location: https://bafybeicvuk4mb6tdtpe7yxnckrewbgyimqr5hbp67dhzjjg5mkgo2t2eey.ipfs.dweb.link/images/logo_1.png
access-control-allow-origin: *
access-control-expose-headers: Link
content-security-policy: default-src 'self' 'unsafe-inline' 'unsafe-eval' blob: data: https://*.w3s.link https://*.nftstorage.link https://*.dweb.link https://ipfs.io/ipfs/ https://*.githubusercontent.com https://tableland.network https://*.tableland.network ; form-action 'self'; navigate-to 'self'; connect-src 'self' blob: data: https://*.w3s.link https://*.nftstorage.link https://*.dweb.link https://ipfs.io/ipfs/ https://*.githubusercontent.com https://tableland.network https://*.tableland.network ; report-to csp-endpoint ; report-uri https://csp-report-to.web3.storage
reporting-endpoints: csp-endpoint="https://csp-report-to.web3.storage"
server-timing: request;dur=617
vary: Accept-Encoding
server: cloudflare
cf-ray: 8797eb83ff9e0b61-OSL
X-Firefox-Spdy: h2

email.powweb.com/roundcube/skins/larry/images/favicon.ico

65.254.250.40

200 OK

34 kB

URL GET HTTP/1.1
email.powweb.com/roundcube/skins/larry/images/favicon.ico
IP
65.254.250.40:443
ASN
#29873 BIZLAND-SD

Requested by
https://worker-ancient-butterfly-29b6.fokkoyarka.workers.dev/
Certificate
IssuerSectigo Limited
Subject*.powweb.com
FingerprintEA:B7:A0:20:C1:75:BA:45:9C:AE:71:96:28:39:E7:77:FC:CE:4C:63
ValidityWed, 02 Aug 2023 00:00:00 GMT - Sun, 01 Sep 2024 23:59:59 GMT

File type
MS Windows icon resource - 5 icons, 16x16, 32 bits/pixel, 24x24, 32 bits/pixel
Size
34 kB (34494 bytes)
Hash
ef9c0362bf20a086bb7c2e8ea346b9f0
fc3ef03acb552dfe09279dccadd99ba8eea5217c
20c30fd4340308d6a4ab222acae353fc2460793ac76645bb1ef1d9d61f4f0a9e

HTTP Headers

GET /roundcube/skins/larry/images/favicon.ico HTTP/1.1
Host: email.powweb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://worker-ancient-butterfly-29b6.fokkoyarka.workers.dev/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx/1.17.8
Date: Wed, 24 Apr 2024 17:47:42 GMT
Content-Type: image/x-icon
Content-Length: 34494
Last-Modified: Tue, 17 Mar 2020 18:47:54 GMT
Connection: keep-alive
ETag: "5e711b5a-86be"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Pragma: public
Cache-Control: max-age=315360000, public, must-revalidate, proxy-revalidate
Accept-Ranges: bytes

bafybeig5evukk2lmpa2bdjinbdd6bgqonnqhx7xvqbkbrlqiy4v3vv5n5u.ipfs.w3s.link/jquery-ui.css

172.64.146.87

200 OK

41 kB

URL GET HTTP/2
bafybeig5evukk2lmpa2bdjinbdd6bgqonnqhx7xvqbkbrlqiy4v3vv5n5u.ipfs.w3s.link/jquery-ui.css
IP
172.64.146.87:443
ASN
#13335 CLOUDFLARENET

Requested by
https://worker-ancient-butterfly-29b6.fokkoyarka.workers.dev/
Certificate
IssuerCloudflare, Inc.
Subjectw3s.link
FingerprintF0:61:BA:8C:26:BF:F4:1E:58:01:8D:72:FD:EE:3A:4D:2B:07:5E:C4
ValiditySat, 17 Jun 2023 00:00:00 GMT - Sun, 16 Jun 2024 23:59:59 GMT

File type
ASCII text, with very long lines (2363)
Size
41 kB (41241 bytes)
Hash
283a8860d287f25535e0d42266f62691
d4621ff863cf3b23a02923a9a9414a83a3f85323
9e6a2f457e5c0c9619a2226bda332cdf8cae20bd9db822347506e044861a67ee

HTTP Headers

GET /jquery-ui.css HTTP/1.1
Host: bafybeig5evukk2lmpa2bdjinbdd6bgqonnqhx7xvqbkbrlqiy4v3vv5n5u.ipfs.w3s.link
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://worker-ancient-butterfly-29b6.fokkoyarka.workers.dev/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Wed, 24 Apr 2024 17:47:42 GMT
content-type: text/css
cf-ray: 8797eb7a6f11b503-OSL
access-control-allow-origin: *
cache-control: public, max-age=29030400, immutable
etag: W/"bafkreie6nixuk7s4bslbtircnpndglg7rsxcbpm5xardi5ig4bcimgth5y"
vary: Accept-Encoding
access-control-allow-methods: GET
access-control-expose-headers: Link
content-security-policy: default-src 'self' 'unsafe-inline' 'unsafe-eval' blob: data: https://*.w3s.link https://*.nftstorage.link https://*.dweb.link https://ipfs.io/ipfs/ https://*.githubusercontent.com https://tableland.network https://*.tableland.network ; form-action 'self'; navigate-to 'self'; connect-src 'self' blob: data: https://*.w3s.link https://*.nftstorage.link https://*.dweb.link https://ipfs.io/ipfs/ https://*.githubusercontent.com https://tableland.network https://*.tableland.network ; report-to csp-endpoint ; report-uri https://csp-report-to.web3.storage
reporting-endpoints: csp-endpoint="https://csp-report-to.web3.storage"
server-timing: request;dur=1476
x-dotstorage-anchor: bd3b4483866df2df1847df0242b10541dd6897ed7c73cb7094dfdb739713ee43
x-dotstorage-resolution-id: https://freeway.dag.haus
x-dotstorage-resolution-layer: dotstorage-race
x-freeway-version: 2.15.0
server: cloudflare
content-encoding: gzip
X-Firefox-Spdy: h2

maxcdn.bootstrapcdn.com/bootstrap/4.0.0/js/bootstrap.min.js

104.18.11.207

200 OK

49 kB

URL GET HTTP/2
maxcdn.bootstrapcdn.com/bootstrap/4.0.0/js/bootstrap.min.js
IP
104.18.11.207:443
ASN
#13335 CLOUDFLARENET

Requested by
https://worker-ancient-butterfly-29b6.fokkoyarka.workers.dev/
Certificate
IssuerGoogle Trust Services LLC
Subjectbootstrapcdn.com
Fingerprint57:B4:25:B9:9C:88:A1:A3:3D:F7:31:74:02:E4:D1:E0:0A:F5:11:63
ValidityWed, 27 Mar 2024 00:22:09 GMT - Tue, 25 Jun 2024 00:22:08 GMT

File type
JavaScript source, ASCII text, with very long lines (48664)
Size
49 kB (48944 bytes)
Hash
14d449eb8876fa55e1ef3c2cc52b0c17
a9545831803b1359cfeed47e3b4d6bae68e40e99
e7ed36ceee5450b4243bbc35188afabdfb4280c7c57597001de0ed167299b01b

HTTP Headers

GET /bootstrap/4.0.0/js/bootstrap.min.js HTTP/1.1
Host: maxcdn.bootstrapcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://worker-ancient-butterfly-29b6.fokkoyarka.workers.dev
DNT: 1
Connection: keep-alive
Referer: https://worker-ancient-butterfly-29b6.fokkoyarka.workers.dev/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Wed, 24 Apr 2024 17:47:40 GMT
content-type: application/javascript; charset=utf-8
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: DE
vary: Accept-Encoding
access-control-allow-origin: *
cache-control: public, max-age=31919000
content-encoding: br
etag: W/"14d449eb8876fa55e1ef3c2cc52b0c17"
last-modified: Mon, 25 Jan 2021 22:04:04 GMT
cdn-cachedat: 03/18/2024 12:46:36
cdn-proxyver: 1.04
cdn-requestpullcode: 200
cdn-requestpullsuccess: True
cdn-edgestorageid: 1048
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
cdn-status: 200
cdn-requestid: 485dfbf20d3dc5d79a2d0db200ff8178
cdn-cache: HIT
cf-cache-status: HIT
age: 47967
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 8797eb7a8a200b41-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

worker-ancient-butterfly-29b6.fokkoyarka.workers.dev/evergageSmall.min.js.download

188.114.97.1

200 OK

76 kB

URL GET HTTP/3
worker-ancient-butterfly-29b6.fokkoyarka.workers.dev/evergageSmall.min.js.download
IP
188.114.97.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://worker-ancient-butterfly-29b6.fokkoyarka.workers.dev/
Certificate
IssuerGoogle Trust Services LLC
Subjectfokkoyarka.workers.dev
FingerprintE5:B3:DD:A6:C9:72:DF:15:65:30:16:CF:F8:78:F3:9C:7F:8F:7C:8F
ValidityMon, 22 Apr 2024 06:38:00 GMT - Sun, 21 Jul 2024 06:37:59 GMT

File type
HTML document, ASCII text, with very long lines (65492)
Size
76 kB (76257 bytes)
Hash
7522a71cf0caa2f27670b2d6984a85e5
5ea2a0e3553e92bd4b9edbea9ac6cc0d412e6a8a
59be334f968aeba481b1bd8020232c5ef6c911846bbc818c7fded49d2a357a8e

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Webmail Providers

HTTP Headers

GET /evergageSmall.min.js.download HTTP/1.1
Host: worker-ancient-butterfly-29b6.fokkoyarka.workers.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://worker-ancient-butterfly-29b6.fokkoyarka.workers.dev/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Wed, 24 Apr 2024 17:47:40 GMT
content-type: text/html;charset=UTF-8
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2BbZ9NWHewXH74WE5rCWW3pGAPHQFhE3yJzG%2FY%2F8cOZojWpyndxV2g6zpzD4CXgHJYHrpoWyVJZCgjN7ltIznby0%2FsvtTNErx7w23XNPeUMhdS9X9GVqlFtz9stuHYyLhYKfSXLX97FfDE1GkIpZUqpXCZxbkKgPSPPjpsdZwjJljKu8E0SaJ"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8797eb79ba64b500-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

bafybeicvuk4mb6tdtpe7yxnckrewbgyimqr5hbp67dhzjjg5mkgo2t2eey.ipfs.dweb.link/images/logo_1.png

209.94.90.2

404 Not Found

0 B

URL GET HTTP/3
bafybeicvuk4mb6tdtpe7yxnckrewbgyimqr5hbp67dhzjjg5mkgo2t2eey.ipfs.dweb.link/images/logo_1.png
IP
209.94.90.2:443
ASN
#40680 PROTOCOL

Requested by
https://worker-ancient-butterfly-29b6.fokkoyarka.workers.dev/
Certificate
IssuerLet's Encrypt
Subjectdweb.link
FingerprintF6:88:14:38:C6:3C:1C:FC:F0:D3:23:B2:F2:72:50:9D:5C:DC:BE:D2
ValidityTue, 16 Apr 2024 16:54:22 GMT - Mon, 15 Jul 2024 16:54:21 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /images/logo_1.png HTTP/1.1
Host: bafybeicvuk4mb6tdtpe7yxnckrewbgyimqr5hbp67dhzjjg5mkgo2t2eey.ipfs.dweb.link
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://bafybeicvuk4mb6tdtpe7yxnckrewbgyimqr5hbp67dhzjjg5mkgo2t2eey.ipfs.w3s.link/
DNT: 1
Connection: keep-alive
Cookie: __cflb=0H28v9H4u6qsawHYTF1FbaZbjH9KPSdge2ZyLg4KccC
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 404 Not Found
date: Wed, 24 Apr 2024 17:47:42 GMT
content-type: text/plain; charset=utf-8
access-control-allow-headers: Content-Type, Range, User-Agent, X-Requested-With
access-control-allow-methods: GET, HEAD, OPTIONS
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Content-Range, X-Chunked-Output, X-Ipfs-Path, X-Ipfs-Roots, X-Stream-Output
x-content-type-options: nosniff
x-ipfs-path: /ipfs/bafybeicvuk4mb6tdtpe7yxnckrewbgyimqr5hbp67dhzjjg5mkgo2t2eey/images/logo_1.png
x-ipfs-pop: rainbow-am6-02
cf-cache-status: EXPIRED
vary: Accept-Encoding
server: cloudflare
cf-ray: 8797eb87ed0ab521-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

bafybeicvuk4mb6tdtpe7yxnckrewbgyimqr5hbp67dhzjjg5mkgo2t2eey.ipfs.w3s.link/xdesktop.css

104.18.41.169

200 OK

29 kB

URL GET HTTP/2
bafybeicvuk4mb6tdtpe7yxnckrewbgyimqr5hbp67dhzjjg5mkgo2t2eey.ipfs.w3s.link/xdesktop.css
IP
104.18.41.169:443
ASN
#13335 CLOUDFLARENET

Requested by
https://worker-ancient-butterfly-29b6.fokkoyarka.workers.dev/
Certificate
IssuerCloudflare, Inc.
Subjectw3s.link
FingerprintF0:61:BA:8C:26:BF:F4:1E:58:01:8D:72:FD:EE:3A:4D:2B:07:5E:C4
ValiditySat, 17 Jun 2023 00:00:00 GMT - Sun, 16 Jun 2024 23:59:59 GMT

File type
ASCII text
Size
29 kB (28887 bytes)
Hash
6597a7cb410aaae59666563cf3a3420d
4b5861bf0a82f478b72cbe93fd8facb59b42fb02
da78c7fdec13d5db31d388f7695ddf218c9af00a505899d2d416f2e31e3c48f7

HTTP Headers

GET /xdesktop.css HTTP/1.1
Host: bafybeicvuk4mb6tdtpe7yxnckrewbgyimqr5hbp67dhzjjg5mkgo2t2eey.ipfs.w3s.link
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://worker-ancient-butterfly-29b6.fokkoyarka.workers.dev/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Wed, 24 Apr 2024 17:47:41 GMT
content-type: text/css
cf-ray: 8797eb7a8eab0b61-OSL
access-control-allow-origin: *
cache-control: public, max-age=29030400, immutable
etag: W/"bafkreig2pdd733at2xntdu4i65uv3xzbrsnpacsqlcm5fvaw6lrr4pci64"
vary: Accept-Encoding
access-control-allow-methods: GET
access-control-expose-headers: Link
content-security-policy: default-src 'self' 'unsafe-inline' 'unsafe-eval' blob: data: https://*.w3s.link https://*.nftstorage.link https://*.dweb.link https://ipfs.io/ipfs/ https://*.githubusercontent.com https://tableland.network https://*.tableland.network ; form-action 'self'; navigate-to 'self'; connect-src 'self' blob: data: https://*.w3s.link https://*.nftstorage.link https://*.dweb.link https://ipfs.io/ipfs/ https://*.githubusercontent.com https://tableland.network https://*.tableland.network ; report-to csp-endpoint ; report-uri https://csp-report-to.web3.storage
reporting-endpoints: csp-endpoint="https://csp-report-to.web3.storage"
server-timing: request;dur=755
x-dotstorage-anchor: 5c08774bdc1f7b6a693c809df268323c30075b305b7e492d619c94f22d9c5184
x-dotstorage-resolution-id: https://freeway.dag.haus
x-dotstorage-resolution-layer: dotstorage-race
x-freeway-version: 2.15.0
server: cloudflare
content-encoding: gzip
X-Firefox-Spdy: h2

bafybeicvuk4mb6tdtpe7yxnckrewbgyimqr5hbp67dhzjjg5mkgo2t2eey.ipfs.dweb.link/images/logo_2.png

209.94.90.2

404 Not Found

0 B

URL GET HTTP/2
bafybeicvuk4mb6tdtpe7yxnckrewbgyimqr5hbp67dhzjjg5mkgo2t2eey.ipfs.dweb.link/images/logo_2.png
IP
209.94.90.2:443
ASN
#40680 PROTOCOL

Requested by
https://worker-ancient-butterfly-29b6.fokkoyarka.workers.dev/
Certificate
IssuerLet's Encrypt
Subjectdweb.link
FingerprintF6:88:14:38:C6:3C:1C:FC:F0:D3:23:B2:F2:72:50:9D:5C:DC:BE:D2
ValidityTue, 16 Apr 2024 16:54:22 GMT - Mon, 15 Jul 2024 16:54:21 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /images/logo_2.png HTTP/1.1
Host: bafybeicvuk4mb6tdtpe7yxnckrewbgyimqr5hbp67dhzjjg5mkgo2t2eey.ipfs.dweb.link
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://bafybeicvuk4mb6tdtpe7yxnckrewbgyimqr5hbp67dhzjjg5mkgo2t2eey.ipfs.w3s.link/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 404 Not Found
date: Wed, 24 Apr 2024 17:47:42 GMT
content-type: text/plain; charset=utf-8
access-control-allow-headers: Content-Type, Range, User-Agent, X-Requested-With
access-control-allow-methods: GET, HEAD, OPTIONS
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Content-Range, X-Chunked-Output, X-Ipfs-Path, X-Ipfs-Roots, X-Stream-Output
x-content-type-options: nosniff
x-ipfs-path: /ipfs/bafybeicvuk4mb6tdtpe7yxnckrewbgyimqr5hbp67dhzjjg5mkgo2t2eey/images/logo_2.png
x-ipfs-pop: rainbow-am6-02
cf-cache-status: EXPIRED
set-cookie: __cflb=0H28v9H4u6qsawHYTF1FbaZbjH9KPSdge2ZyLg4KccC; SameSite=None; Secure; path=/; expires=Thu, 25-Apr-24 16:47:42 GMT; HttpOnly
vary: Accept-Encoding
server: cloudflare
cf-ray: 8797eb865bdf56be-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (10)

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

Observations

Hash

HTTP Transactions (16)