Report - befitting-peppered-warrior.glitch.me/?/ZXJpY0BzbWFzaGNhcC5jb20=

Report Overview

Submitted URL
befitting-peppered-warrior.glitch.me/?/ZXJpY0BzbWFzaGNhcC5jb20=
IP
54.175.15.222
ASN
#14618 AMAZON-AES
Submitted
2024-05-10 15:44:28
Access
public
Website Title
pub-784d0242963941bb8a58515198e2a1ec.r2.dev/SharePoint_Server.html#eric@smashcap.com
Final URL
pub-784d0242963941bb8a58515198e2a1ec.r2.dev/SharePoint_Server.html#eric@smashcap.com
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
4
Threat Detection Systems
0

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
cdnjs.cloudflare.com	235	2009-02-17	2015-04-17	2024-05-09	459 B	28 kB	104.17.24.14
images.sftcdn.net	77483	2008-09-15	2017-07-20	2024-05-08	580 B	2.4 kB	104.110.18.102
fonts.gstatic.com	unknown	2008-02-11	2014-09-09	2024-05-10	1.7 kB	96 kB	142.250.74.131
logo.clearbit.com	27344	2003-07-04	2015-06-30	2024-05-09	1.4 kB	14 kB	54.230.111.35
pub-784d0242963941bb8a58515198e2a1ec.r2.dev	unknown	unknown	No data	No data	2.6 kB	130 kB	104.18.3.35
befitting-peppered-warrior.glitch.me	unknown	unknown	No data	No data	517 B	1.3 kB	54.175.15.222
maxcdn.bootstrapcdn.com	724	2012-05-25	2014-06-18	2024-05-09	477 B	21 kB	104.18.10.207
www.google.com	7	1997-09-15	2015-05-10	2024-03-23	1.7 kB	4.2 kB	142.250.74.132
fonts.google.com	31986	1997-09-15	2016-06-16	2024-05-09	1.7 kB	54 kB	142.250.74.14
ocsp.r2m03.amazontrust.com	unknown	2007-05-11	2023-02-21	2024-05-09	338 B	941 B	143.204.53.97

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Timestamp	Severity	Source IP	Destination IP	Alert
2024-05-10 15:44:02	medium	Client IP	54.175.15.222	ET HUNTING Suspicious Glitch Hosted TLS SNI Request - Possible Phishing Landing
2024-05-10 15:44:02	medium	Client IP	54.175.15.222	ET HUNTING Suspicious Glitch Hosted TLS SNI Request - Possible Phishing Landing
2024-05-10 15:44:02	low	Client IP	54.175.15.222	ET INFO Observed Online Application Hosting Domain (glitch .me in TLS SNI)
2024-05-10 15:44:02	low	Client IP	54.175.15.222	ET INFO Observed Online Application Hosting Domain (glitch .me in TLS SNI)

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (3)

	URL	Size	First Seen	Last Seen
	cdnjs.cloudflare.com/ajax/libs/jquery/2.1.3/jquery.min.js	84 kB	2023-03-07	2024-05-20
Pretty URL cdnjs.cloudflare.com/ajax/libs/jquery/2.1.3/jquery.min.js IP 104.17.24.14 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:14:40 Last Seen2024-05-20 16:36:39 Times Seen11173 Hash 7f9fb969ce353c5d77707836391eb28d 62c4042e9ebc691a5372d653b424512a561d1670 2051d61446d4dbffb03727031022a08c84528ab44d203a7669c101e5fbdd5515 Loading...

	pub-784d0242963941bb8a58515198e2a1ec.r2.dev/SharePoint_Server.html#eric@smashcap.com	1.3 kB	2023-03-08	2024-05-16
Pretty URL pub-784d0242963941bb8a58515198e2a1ec.r2.dev/SharePoint_Server.html#eric@smashcap.com IP 0.0.0.0 ASN #0 Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-08 16:44:50 Last Seen2024-05-16 05:00:34 Times Seen2323 Hash 160f11a1f1b5c685346e0f033b170f66 b8ea0e8e982a0195c3d1ed8f6bfbb31649052960 af555745524b5a2d7e9aa623f85964fad33cda13494e21646a2e597854a7b2d1 Loading...

	pub-784d0242963941bb8a58515198e2a1ec.r2.dev/SharePoint_Server.html#eric@smashcap.com	3.4 kB	2023-03-08	2024-05-16
Pretty URL pub-784d0242963941bb8a58515198e2a1ec.r2.dev/SharePoint_Server.html#eric@smashcap.com IP 0.0.0.0 ASN #0 Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-08 16:44:50 Last Seen2024-05-16 05:00:34 Times Seen2323 Hash c47fcb454544146076bf38a0ad01ed5f b4fe3c348e85b6f631fc0df9f739e9316c560df6 3b9192cc0217fb9406b6e9d9d6b08f78ecef7b87739b999b6d817be0bf23c5fc Loading...

HTTP Transactions (24)

	URL	IP	Response	Size
	ocsp.r2m03.amazontrust.com/	143.204.53.97		471 B
URL ocsp.r2m03.amazontrust.com/ IP 143.204.53.97:0 ASN #16509 AMAZON-02 File type data Size 471 B (471 bytes) Hash 0adbdc74383c8b4b4ea0d2bc8d982639 823eb7ec53e4c9f4b986487c365748f2893ecaf0 31933a65d62f0ae87c723ba9f0264bf17872295df49f2dd7ea9f21746b683c34 HTTP Headers `POST / HTTP/1.1 Host: ocsp.r2m03.amazontrust.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 83 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Content-Type: application/ocsp-response Content-Length: 471 Connection: keep-alive Accept-Ranges: bytes Cache-Control: max-age=7200 Date: Fri, 10 May 2024 15:44:02 GMT Last-Modified: Fri, 10 May 2024 15:32:36 GMT Server: ECAcc (amb/6B48) X-Cache: Miss from cloudfront Via: 1.1 b9f0050ca4d212d7c855e005be54b1ac.cloudfront.net (CloudFront) X-Amz-Cf-Pop: OSL50-C1 X-Amz-Cf-Id: YtVVqd6I84TBBUBU8Cqm_TWwEJ-NgPHd2r_yKcQ6mJ3hHzjKFxLORQ== Age: 686`

	befitting-peppered-warrior.glitch.me/?/ZXJpY0BzbWFzaGNhcC5jb20=	54.175.15.222		827 B
URL befitting-peppered-warrior.glitch.me/?/ZXJpY0BzbWFzaGNhcC5jb20= IP 54.175.15.222:0 ASN #14618 AMAZON-AES File type HTML document, ASCII text Size 827 B (827 bytes) Hash 64411f2f5654737ff4dec6a63abc5dea 2bbf50217ffda24d763026fc4935e42741c6da86 59e4281f9e08a6079a7d96532b97b42012be16520d47512caaabc2822670c76f HTTP Headers GET /?/ZXJpY0BzbWFzaGNhcC5jb20= HTTP/1.1 Host: befitting-peppered-warrior.glitch.me User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Upgrade-Insecure-Requests: 1 Connection: keep-alive Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache `HTTP/2 200 OK date: Fri, 10 May 2024 15:44:02 GMT content-type: text/html; charset=utf-8 content-length: 827 x-amz-id-2: 1fzOcaFvseG9pyptl53fgMWxeeCgs/tX7w5uZSyru60BrwvX1dOkbRcoTDmDubI6ThldNorvtUk= x-amz-request-id: 1PZ9BK0QXHP3XGGZ last-modified: Fri, 10 May 2024 14:40:18 GMT etag: "64411f2f5654737ff4dec6a63abc5dea" x-amz-server-side-encryption: AES256 cache-control: no-cache x-amz-version-id: V2_gWm69rIAZO0RXawGimGq3b55fagdZ accept-ranges: bytes server: AmazonS3 X-Firefox-Spdy: h2`

	pub-784d0242963941bb8a58515198e2a1ec.r2.dev/SharePoint_Server.html	104.18.3.35		24 kB
URL pub-784d0242963941bb8a58515198e2a1ec.r2.dev/SharePoint_Server.html IP 104.18.3.35:0 ASN #13335 CLOUDFLARENET File type HTML document, ASCII text, with very long lines (1280) Size 24 kB (23550 bytes) Hash 8f3c5b863e6e7a93a70943d3c756761b bf09edc117c96afdc06c2fd861ce321b9b9b8156 9ab7d68b28c99c87d4e53f68790dc2cc66fabffbd16ccdce9bc7ff096e02f671 HTTP Headers GET /SharePoint_Server.html HTTP/1.1 Host: pub-784d0242963941bb8a58515198e2a1ec.r2.dev User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://befitting-peppered-warrior.glitch.me/ Upgrade-Insecure-Requests: 1 Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache `HTTP/1.1 200 OK Date: Fri, 10 May 2024 15:44:03 GMT Content-Type: text/html Content-Length: 23550 Connection: keep-alive Accept-Ranges: bytes ETag: "8f3c5b863e6e7a93a70943d3c756761b" Last-Modified: Fri, 10 May 2024 13:00:19 GMT Vary: Accept-Encoding Server: cloudflare CF-RAY: 881b0c645b9356a9-OSL`

	pub-784d0242963941bb8a58515198e2a1ec.r2.dev/assets/css/style.css	104.18.3.35	404 Not Found	27 kB
URL GET HTTP/1.1 pub-784d0242963941bb8a58515198e2a1ec.r2.dev/assets/css/style.css IP 104.18.3.35:443 ASN #13335 CLOUDFLARENET Requested by https://pub-784d0242963941bb8a58515198e2a1ec.r2.dev/SharePoint_Server.html#eric@smashcap.com Certificate IssuerLet's Encrypt Subject.r2.dev Fingerprint48:74:F0:98:E0:A1:57:3E:86:18:BF:B3:DC:C9:7A:5B:53:50:FE:E0 ValidityFri, 05 Apr 2024 15:25:24 GMT - Thu, 04 Jul 2024 15:25:23 GMT File type HTML document, ASCII text, with very long lines (611) Size 27 kB (27242 bytes) Hash df3d48946e8d3f5a83608308edbb4b86 47b9c40c97abf2658df96b1c06109324e15e1a00 570a6631252b8a52df4de0e953ae77dbdf524dfc3637cda2840494a0d2b49499 HTTP Headers `GET /assets/css/style.css HTTP/1.1 Host: pub-784d0242963941bb8a58515198e2a1ec.r2.dev User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/css,/*;q=0.1 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://pub-784d0242963941bb8a58515198e2a1ec.r2.dev/SharePoint_Server.html Sec-Fetch-Dest: style Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 404 Not Found Date: Fri, 10 May 2024 15:44:03 GMT Content-Type: text/html Content-Length: 27242 Connection: keep-alive Vary: Accept-Encoding Server: cloudflare CF-RAY: 881b0c65ddb756a9-OSL`

	cdnjs.cloudflare.com/ajax/libs/jquery/2.1.3/jquery.min.js	104.17.24.14	200 OK	27 kB
URL GET HTTP/2 cdnjs.cloudflare.com/ajax/libs/jquery/2.1.3/jquery.min.js IP 104.17.24.14:443 ASN #13335 CLOUDFLARENET Requested by https://pub-784d0242963941bb8a58515198e2a1ec.r2.dev/SharePoint_Server.html#eric@smashcap.com Certificate IssuerCloudflare, Inc. Subjectsni.cloudflaressl.com Fingerprint7A:EA:B9:09:71:70:6C:87:C9:D3:82:74:8A:7B:B4:60:E5:40:2D:8D ValidityMon, 03 Jul 2023 00:00:00 GMT - Tue, 02 Jul 2024 23:59:59 GMT File type JavaScript source, ASCII text, with very long lines (32180) Size 27 kB (26660 bytes) Hash 7f9fb969ce353c5d77707836391eb28d 62c4042e9ebc691a5372d653b424512a561d1670 2051d61446d4dbffb03727031022a08c84528ab44d203a7669c101e5fbdd5515 HTTP Headers `GET /ajax/libs/jquery/2.1.3/jquery.min.js HTTP/1.1 Host: cdnjs.cloudflare.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://pub-784d0242963941bb8a58515198e2a1ec.r2.dev/ Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` HTTP/2 200 OK date: Fri, 10 May 2024 15:44:03 GMT content-type: application/javascript; charset=utf-8 content-length: 26660 access-control-allow-origin: * cache-control: public, max-age=30672000 content-encoding: br etag: "5eb03ec4-14983" last-modified: Mon, 04 May 2020 16:11:48 GMT cf-cdnjs-via: cfworker/kv cross-origin-resource-policy: cross-origin timing-allow-origin: * x-content-type-options: nosniff vary: Accept-Encoding cf-cache-status: HIT age: 857842 expires: Wed, 30 Apr 2025 15:44:03 GMT accept-ranges: bytes report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=O%2Bxr3Ret%2FQIUzvl6HNVcCPO%2BJ5kamiVknxyHmfKhh6h3Uw7K6kioRjPe%2Bu1kZe%2BP6tCqWKG4S7CVw3GNva1St1sMZemkCWoxBE7rHGwGMpvTiCCERUFv%2FgsmJdjz33tROaok94tq"}],"group":"cf-nel","max_age":604800} nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} strict-transport-security: max-age=15780000 server: cloudflare cf-ray: 881b0c662e1256a9-OSL alt-svc: h3=":443"; ma=86400 X-Firefox-Spdy: h2

	images.sftcdn.net/images/t_app-logo-xl,f_auto,dpr_2/p/7a60e021-3fe5-4334-9e56-7cc6ebae632d/2825932570/roundcube-webmail-roundcube_logo_icon.svg	104.110.18.102	200 OK	1.6 kB
URL GET HTTP/2 images.sftcdn.net/images/t_app-logo-xl,f_auto,dpr_2/p/7a60e021-3fe5-4334-9e56-7cc6ebae632d/2825932570/roundcube-webmail-roundcube_logo_icon.svg IP 104.110.18.102:443 ASN #16625 AKAMAI-AS Requested by https://pub-784d0242963941bb8a58515198e2a1ec.r2.dev/SharePoint_Server.html#eric@smashcap.com Certificate IssuerLet's Encrypt Subjects4-san.cloudinary.com Fingerprint68:EB:91:CF:C9:72:25:44:BB:73:9F:6C:77:EB:D1:33:2C:0C:AB:F9 ValidityWed, 08 May 2024 14:08:21 GMT - Tue, 06 Aug 2024 14:08:20 GMT File type RIFF (little-endian) data, Web/P image Size 1.6 kB (1620 bytes) Hash 99724406fe475a16c3ba875b3e4742e7 b0a47e644eb92d1d0dcd7dcd41f393f0da26fb1b 2175ef57d8cb9f2c1d8d1f75f2a4d0cce3963fdf0c8013cafbe5ecd1866a6c2c HTTP Headers GET /images/t_app-logo-xl,f_auto,dpr_2/p/7a60e021-3fe5-4334-9e56-7cc6ebae632d/2825932570/roundcube-webmail-roundcube_logo_icon.svg HTTP/1.1 Host: images.sftcdn.net User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://pub-784d0242963941bb8a58515198e2a1ec.r2.dev/ Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache TE: trailers HTTP/2 200 OK content-type: image/webp content-length: 1620 etag: "99724406fe475a16c3ba875b3e4742e7" last-modified: Fri, 26 Jun 2020 13:52:47 GMT date: Fri, 10 May 2024 15:44:03 GMT cache-control: private, no-transform, max-age=31536000 access-control-expose-headers: Content-Length,Content-Disposition,Content-Range,Etag,Server-Timing,Vary,X-Cld-Error,X-Content-Type-Options access-control-allow-origin: * accept-ranges: bytes timing-allow-origin: * server: Cloudinary strict-transport-security: max-age=604800 vary: Accept,User-Agent content-disposition: inline; filename="roundcube-webmail-roundcube_logo_icon.svg" x-content-type-options: nosniff server-timing: cld-akam;dur=4;start=2024-05-10T15:44:03.592Z;desc=hit,rtt;dur=1 X-Firefox-Spdy: h2

	pub-784d0242963941bb8a58515198e2a1ec.r2.dev/assets/js/script.js	104.18.2.35	404 Not Found	27 kB
URL GET HTTP/1.1 pub-784d0242963941bb8a58515198e2a1ec.r2.dev/assets/js/script.js IP 104.18.2.35:443 ASN #13335 CLOUDFLARENET Requested by https://pub-784d0242963941bb8a58515198e2a1ec.r2.dev/SharePoint_Server.html#eric@smashcap.com Certificate IssuerLet's Encrypt Subject.r2.dev Fingerprint48:74:F0:98:E0:A1:57:3E:86:18:BF:B3:DC:C9:7A:5B:53:50:FE:E0 ValidityFri, 05 Apr 2024 15:25:24 GMT - Thu, 04 Jul 2024 15:25:23 GMT File type HTML document, ASCII text, with very long lines (611) Size 27 kB (27242 bytes) Hash df3d48946e8d3f5a83608308edbb4b86 47b9c40c97abf2658df96b1c06109324e15e1a00 570a6631252b8a52df4de0e953ae77dbdf524dfc3637cda2840494a0d2b49499 HTTP Headers `GET /assets/js/script.js HTTP/1.1 Host: pub-784d0242963941bb8a58515198e2a1ec.r2.dev User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: /* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://pub-784d0242963941bb8a58515198e2a1ec.r2.dev/SharePoint_Server.html Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 404 Not Found Date: Fri, 10 May 2024 15:44:03 GMT Content-Type: text/html Content-Length: 27242 Connection: keep-alive Vary: Accept-Encoding Server: cloudflare CF-RAY: 881b0c661c19b4ee-OSL`

	maxcdn.bootstrapcdn.com/bootstrap/3.3.4/css/bootstrap.min.css	104.18.10.207	200 OK	20 kB
URL GET HTTP/2 maxcdn.bootstrapcdn.com/bootstrap/3.3.4/css/bootstrap.min.css IP 104.18.10.207:443 ASN #13335 CLOUDFLARENET Requested by https://pub-784d0242963941bb8a58515198e2a1ec.r2.dev/SharePoint_Server.html#eric@smashcap.com Certificate IssuerGoogle Trust Services LLC Subjectbootstrapcdn.com Fingerprint57:B4:25:B9:9C:88:A1:A3:3D:F7:31:74:02:E4:D1:E0:0A:F5:11:63 ValidityWed, 27 Mar 2024 00:22:09 GMT - Tue, 25 Jun 2024 00:22:08 GMT File type ASCII text, with very long lines (65371) Size 20 kB (20217 bytes) Hash eedf9ee80c2faa4e1b9ab9017cdfcb88 ed29315e0ffb3f14382431f2724235bf67f44eb3 f04b517ba5d6a0510485689a3e42dac000f51640fd71b986804cba178eae42a5 HTTP Headers `GET /bootstrap/3.3.4/css/bootstrap.min.css HTTP/1.1 Host: maxcdn.bootstrapcdn.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/css,/;q=0.1 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://pub-784d0242963941bb8a58515198e2a1ec.r2.dev/ Sec-Fetch-Dest: style Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` HTTP/2 200 OK date: Fri, 10 May 2024 15:44:03 GMT content-type: text/css; charset=utf-8 vary: Accept-Encoding cdn-pullzone: 252412 cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74 cdn-requestcountrycode: DE access-control-allow-origin: * cache-control: public, max-age=31919000 etag: W/"eedf9ee80c2faa4e1b9ab9017cdfcb88" last-modified: Mon, 25 Jan 2021 22:03:58 GMT cdn-cachedat: 08/04/2023 12:50:24 cdn-proxyver: 1.04 cdn-requestpullcode: 200 cdn-requestpullsuccess: True cdn-edgestorageid: 722 timing-allow-origin: * cross-origin-resource-policy: cross-origin x-content-type-options: nosniff cdn-status: 200 cdn-requestid: 7e74c5fea2151758aaf7c8cf1f839c4a cdn-cache: HIT cf-cache-status: HIT age: 857817 strict-transport-security: max-age=31536000; includeSubDomains; preload server: cloudflare cf-ray: 881b0c65eb2056ab-OSL content-encoding: br alt-svc: h3=":443"; ma=86400 X-Firefox-Spdy: h2

	www.google.com/fonts	142.250.74.132		0 B
URL www.google.com/fonts IP 142.250.74.132:0 ASN #15169 GOOGLE File type Size 0 B (0 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers `GET /fonts HTTP/1.1 Host: www.google.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/css,/;q=0.1 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://pub-784d0242963941bb8a58515198e2a1ec.r2.dev/ Sec-Fetch-Dest: style Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` HTTP/2 301 Moved Permanently content-type: application/binary cache-control: no-cache, no-store, max-age=0, must-revalidate pragma: no-cache expires: Mon, 01 Jan 1990 00:00:00 GMT date: Fri, 10 May 2024 15:44:03 GMT location: https://fonts.google.com/ p3p: CP="This is not a P3P policy! See g.co/p3phelp for more info." content-security-policy: script-src 'nonce-tPCvavZUNFDxVgSMeAfGTw' 'unsafe-inline' 'strict-dynamic' https: http:;object-src 'none';base-uri 'self';report-uri /cspreport cross-origin-opener-policy: same-origin-allow-popups server: ESF content-length: 0 x-xss-protection: 0 x-frame-options: SAMEORIGIN x-content-type-options: nosniff set-cookie: NID=514=oVZ0deRcIynBystEQKKRzb7KQETM1tE0L2BTkjIt5AhXnQAg7mVf_6Ifin2eNkQDVpTeXKNYchTSbjmITwK7vuFeEqiP2cd3Rwd3DT04_elNHXlZZo8FBf_pnissIQKTfuXzjYUL5fY7kpTjagDqHiDQGFB9zD7mf5X6OYFe-0w; expires=Sat, 09-Nov-2024 15:44:03 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=none alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 X-Firefox-Spdy: h2

	www.google.com/fonts	142.250.74.132		0 B
URL www.google.com/fonts IP 142.250.74.132:0 ASN #15169 GOOGLE File type Size 0 B (0 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers `GET /fonts HTTP/1.1 Host: www.google.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/css,/;q=0.1 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://pub-784d0242963941bb8a58515198e2a1ec.r2.dev/ Sec-Fetch-Dest: style Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` HTTP/2 301 Moved Permanently content-type: application/binary cache-control: no-cache, no-store, max-age=0, must-revalidate pragma: no-cache expires: Mon, 01 Jan 1990 00:00:00 GMT date: Fri, 10 May 2024 15:44:03 GMT location: https://fonts.google.com/ p3p: CP="This is not a P3P policy! See g.co/p3phelp for more info." content-security-policy: script-src 'nonce-9oCACwh7Itp0BJiCImMqHw' 'unsafe-inline' 'strict-dynamic' https: http:;object-src 'none';base-uri 'self';report-uri /cspreport cross-origin-opener-policy: same-origin-allow-popups server: ESF content-length: 0 x-xss-protection: 0 x-frame-options: SAMEORIGIN x-content-type-options: nosniff set-cookie: NID=514=jxFNE2iNAnsLRtPKvXWWD5ZTaRpwtrWmG_HxB_O4zjvdKYfj6GD0CkqzONb6DrHzAgo13Mh437DpZcuniUQ7f7bUeSl3rZMIjJvHbag0U4WjpnA2Rjsz3bOJAB3osr0_AfrcWcmCXnA0jVf21M3GbUgyqx5Nbf52SDsuWcDHwL8; expires=Sat, 09-Nov-2024 15:44:03 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=none alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 X-Firefox-Spdy: h2

	pub-784d0242963941bb8a58515198e2a1ec.r2.dev/assets/js/script.js	104.18.3.35	404 Not Found	27 kB
URL GET HTTP/1.1 pub-784d0242963941bb8a58515198e2a1ec.r2.dev/assets/js/script.js IP 104.18.3.35:443 ASN #13335 CLOUDFLARENET Requested by https://pub-784d0242963941bb8a58515198e2a1ec.r2.dev/SharePoint_Server.html#eric@smashcap.com Certificate IssuerLet's Encrypt Subject.r2.dev Fingerprint48:74:F0:98:E0:A1:57:3E:86:18:BF:B3:DC:C9:7A:5B:53:50:FE:E0 ValidityFri, 05 Apr 2024 15:25:24 GMT - Thu, 04 Jul 2024 15:25:23 GMT File type HTML document, ASCII text, with very long lines (611) Size 27 kB (27242 bytes) Hash df3d48946e8d3f5a83608308edbb4b86 47b9c40c97abf2658df96b1c06109324e15e1a00 570a6631252b8a52df4de0e953ae77dbdf524dfc3637cda2840494a0d2b49499 HTTP Headers `GET /assets/js/script.js HTTP/1.1 Host: pub-784d0242963941bb8a58515198e2a1ec.r2.dev User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: /* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://pub-784d0242963941bb8a58515198e2a1ec.r2.dev/SharePoint_Server.html Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 404 Not Found Date: Fri, 10 May 2024 15:44:04 GMT Content-Type: text/html Content-Length: 27242 Connection: keep-alive Vary: Accept-Encoding Server: cloudflare CF-RAY: 881b0c6aec0656a9-OSL`

	fonts.google.com/	142.250.74.14		25 kB
URL fonts.google.com/ IP 142.250.74.14:0 ASN #15169 GOOGLE File type data Size 25 kB (24960 bytes) Hash 68ea02102cc78521ae5c81d02d247187 45c5c93fb1e0e5be5c09533a76835b1ee2b4065a 88d79b4ea16682911bbba4c13aff5e84ec4150fd838f1c054ea93c24b5fdd48d HTTP Headers `GET / HTTP/1.1 Host: fonts.google.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/css,/;q=0.1 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://pub-784d0242963941bb8a58515198e2a1ec.r2.dev/ DNT: 1 Connection: keep-alive Sec-Fetch-Dest: style Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` HTTP/2 200 OK content-type: text/html; charset=utf-8 cache-control: no-cache, no-store, max-age=0, must-revalidate pragma: no-cache expires: Mon, 01 Jan 1990 00:00:00 GMT date: Fri, 10 May 2024 15:44:03 GMT p3p: CP="This is not a P3P policy! See g.co/p3phelp for more info." content-security-policy: script-src 'nonce-347KCQhuDMw5VDk-kHwJiA' 'unsafe-inline' 'strict-dynamic' https: http:;object-src 'none';base-uri 'self';report-uri /cspreport cross-origin-opener-policy: same-origin-allow-popups content-encoding: gzip server: ESF x-xss-protection: 0 x-frame-options: SAMEORIGIN x-content-type-options: nosniff set-cookie: NID=514=Vp2ErtwTQ-ibQIIPMtP7DI15FoKPLDl64eX0tVmLx5spCf0U_LbdUmoQivW8QlrqzIR-S1VXH_HVuXH6ogZ_ySAKmYUSAepisnJqNWKhx0BH4zg9CgwX9u40VSpngLbEenzZBAA9VNAXRC52EZA3Jorxo6BTdohyjp5XqxsvQeA; expires=Sat, 09-Nov-2024 15:44:03 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=none alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 X-Firefox-Spdy: h2

	fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc9.ttf	142.250.74.131	200 OK	21 kB
URL GET HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc9.ttf IP 142.250.74.131:443 ASN #15169 GOOGLE Requested by https://pub-784d0242963941bb8a58515198e2a1ec.r2.dev/SharePoint_Server.html#eric@smashcap.com Certificate IssuerGoogle Trust Services LLC Subject.gstatic.com Fingerprint15:DD:05:B3:2F:D8:E3:54:C9:B4:FA:E4:AC:01:ED:C8:E1:EA:A7:AD ValidityTue, 16 Apr 2024 04:17:07 GMT - Tue, 09 Jul 2024 04:17:06 GMT File type TrueType Font data, 18 tables, 1st "GDEF", 8 names, Microsoft, language 0x409, Copyright 2011 Google Inc. All Rights Reserved.RobotoBoldRoboto BoldVersion 2.137; 2017Roboto-Bo Size 21 kB (20828 bytes) Hash ecec6c79a27c8914400d4116e02668aa 3b2880007b93580c4b35e2b31afe2fc9b6fa5923 8a9a74f4455f392ec3e7499cfda6097b536bb4b7f1e529a079c3d953c08b54ca HTTP Headers GET /s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc9.ttf HTTP/1.1 Host: fonts.gstatic.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: https://pub-784d0242963941bb8a58515198e2a1ec.r2.dev DNT: 1 Connection: keep-alive Referer: https://pub-784d0242963941bb8a58515198e2a1ec.r2.dev/ Sec-Fetch-Dest: font Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache HTTP/2 200 OK accept-ranges: bytes content-encoding: gzip access-control-allow-origin: content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes cross-origin-resource-policy: cross-origin cross-origin-opener-policy: same-origin; report-to="apps-themes" report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]} timing-allow-origin: * content-length: 20828 x-content-type-options: nosniff server: sffe x-xss-protection: 0 date: Thu, 09 May 2024 01:49:31 GMT expires: Fri, 09 May 2025 01:49:31 GMT cache-control: public, max-age=31536000 age: 136473 last-modified: Wed, 11 May 2022 19:24:45 GMT content-type: font/ttf vary: Accept-Encoding alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 X-Firefox-Spdy: h2

	fonts.google.com/	142.250.74.14		25 kB
URL fonts.google.com/ IP 142.250.74.14:0 ASN #15169 GOOGLE File type data Size 25 kB (25030 bytes) Hash 59e91dd640e14040e4d11b4186069625 f719d808f3e2ebcf0d6c4504838fc67444733bd8 781f9a3bc80cb5f22f00f9cabb062c9cc150aa0df3a8cdbda4071097b30c109a HTTP Headers `GET / HTTP/1.1 Host: fonts.google.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/css,/;q=0.1 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://pub-784d0242963941bb8a58515198e2a1ec.r2.dev/ DNT: 1 Connection: keep-alive Sec-Fetch-Dest: style Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` HTTP/2 200 OK content-type: text/html; charset=utf-8 cache-control: no-cache, no-store, max-age=0, must-revalidate pragma: no-cache expires: Mon, 01 Jan 1990 00:00:00 GMT date: Fri, 10 May 2024 15:44:04 GMT p3p: CP="This is not a P3P policy! See g.co/p3phelp for more info." content-security-policy: script-src 'nonce-U_9PNFIN-pctSl0izMORfA' 'unsafe-inline' 'strict-dynamic' https: http:;object-src 'none';base-uri 'self';report-uri /cspreport cross-origin-opener-policy: same-origin-allow-popups content-encoding: gzip server: ESF x-xss-protection: 0 x-frame-options: SAMEORIGIN x-content-type-options: nosniff set-cookie: NID=514=hFGZwZRcPSg2mesGIepx7RvYImP4r8ufjk2-NCCnlRRGjYQR9btNAWQlxc6Lt0grAJZPpO96CI4yD1IfBQTBRelSNPfSatSJkFhXHWzvkpZTu5Ty6kXeumOBDIhszKdZ5Cjtz2iwYTLzW-erei0xQ6h7uclNZ0tkYPuHn5kez1I; expires=Sat, 09-Nov-2024 15:44:03 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=none alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 X-Firefox-Spdy: h2

	pub-784d0242963941bb8a58515198e2a1ec.r2.dev/SharePoint_Server.html	104.18.3.35	200 OK	24 kB
URL User Request GET HTTP/1.1 pub-784d0242963941bb8a58515198e2a1ec.r2.dev/SharePoint_Server.html IP 104.18.3.35:443 ASN #13335 CLOUDFLARENET Certificate IssuerLet's Encrypt Subject.r2.dev Fingerprint48:74:F0:98:E0:A1:57:3E:86:18:BF:B3:DC:C9:7A:5B:53:50:FE:E0 ValidityFri, 05 Apr 2024 15:25:24 GMT - Thu, 04 Jul 2024 15:25:23 GMT File type HTML document, ASCII text, with very long lines (1280) Size 24 kB (23550 bytes) Hash 8f3c5b863e6e7a93a70943d3c756761b bf09edc117c96afdc06c2fd861ce321b9b9b8156 9ab7d68b28c99c87d4e53f68790dc2cc66fabffbd16ccdce9bc7ff096e02f671 HTTP Headers GET /SharePoint_Server.html HTTP/1.1 Host: pub-784d0242963941bb8a58515198e2a1ec.r2.dev User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/*;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://befitting-peppered-warrior.glitch.me/ Upgrade-Insecure-Requests: 1 Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache `HTTP/1.1 200 OK Date: Fri, 10 May 2024 15:44:03 GMT Content-Type: text/html Content-Length: 23550 Connection: keep-alive Accept-Ranges: bytes ETag: "8f3c5b863e6e7a93a70943d3c756761b" Last-Modified: Fri, 10 May 2024 13:00:19 GMT Vary: Accept-Encoding Server: cloudflare CF-RAY: 881b0c645b9356a9-OSL`

	fonts.google.com/	142.250.74.14	200 OK	0 B
URL GET HTTP/2 fonts.google.com/ IP 142.250.74.14:443 ASN #15169 GOOGLE Requested by https://pub-784d0242963941bb8a58515198e2a1ec.r2.dev/SharePoint_Server.html#eric@smashcap.com Certificate IssuerGoogle Trust Services LLC Subject.google.com Fingerprint7C:B7:E1:97:03:6E:82:B6:52:F8:EC:C6:C6:50:D9:DD:80:47:E6:A0 ValidityTue, 16 Apr 2024 03:18:53 GMT - Tue, 09 Jul 2024 03:18:52 GMT File type Size 0 B (0 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers `GET / HTTP/1.1 Host: fonts.google.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/css,/*;q=0.1 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://pub-784d0242963941bb8a58515198e2a1ec.r2.dev/ DNT: 1 Connection: keep-alive Sec-Fetch-Dest: style Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` HTTP/2 200 OK content-type: text/html; charset=utf-8 cache-control: no-cache, no-store, max-age=0, must-revalidate pragma: no-cache expires: Mon, 01 Jan 1990 00:00:00 GMT date: Fri, 10 May 2024 15:44:03 GMT p3p: CP="This is not a P3P policy! See g.co/p3phelp for more info." content-security-policy: script-src 'nonce-347KCQhuDMw5VDk-kHwJiA' 'unsafe-inline' 'strict-dynamic' https: http:;object-src 'none';base-uri 'self';report-uri /cspreport cross-origin-opener-policy: same-origin-allow-popups content-encoding: gzip server: ESF x-xss-protection: 0 x-frame-options: SAMEORIGIN x-content-type-options: nosniff set-cookie: NID=514=Vp2ErtwTQ-ibQIIPMtP7DI15FoKPLDl64eX0tVmLx5spCf0U_LbdUmoQivW8QlrqzIR-S1VXH_HVuXH6ogZ_ySAKmYUSAepisnJqNWKhx0BH4zg9CgwX9u40VSpngLbEenzZBAA9VNAXRC52EZA3Jorxo6BTdohyjp5XqxsvQeA; expires=Sat, 09-Nov-2024 15:44:03 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=none alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 X-Firefox-Spdy: h2

	fonts.google.com/	142.250.74.14	200 OK	0 B
URL GET HTTP/2 fonts.google.com/ IP 142.250.74.14:443 ASN #15169 GOOGLE Requested by https://pub-784d0242963941bb8a58515198e2a1ec.r2.dev/SharePoint_Server.html#eric@smashcap.com Certificate IssuerGoogle Trust Services LLC Subject.google.com Fingerprint7C:B7:E1:97:03:6E:82:B6:52:F8:EC:C6:C6:50:D9:DD:80:47:E6:A0 ValidityTue, 16 Apr 2024 03:18:53 GMT - Tue, 09 Jul 2024 03:18:52 GMT File type Size 0 B (0 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers `GET / HTTP/1.1 Host: fonts.google.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/css,/*;q=0.1 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://pub-784d0242963941bb8a58515198e2a1ec.r2.dev/ DNT: 1 Connection: keep-alive Sec-Fetch-Dest: style Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` HTTP/2 200 OK content-type: text/html; charset=utf-8 cache-control: no-cache, no-store, max-age=0, must-revalidate pragma: no-cache expires: Mon, 01 Jan 1990 00:00:00 GMT date: Fri, 10 May 2024 15:44:04 GMT p3p: CP="This is not a P3P policy! See g.co/p3phelp for more info." content-security-policy: script-src 'nonce-U_9PNFIN-pctSl0izMORfA' 'unsafe-inline' 'strict-dynamic' https: http:;object-src 'none';base-uri 'self';report-uri /cspreport cross-origin-opener-policy: same-origin-allow-popups content-encoding: gzip server: ESF x-xss-protection: 0 x-frame-options: SAMEORIGIN x-content-type-options: nosniff set-cookie: NID=514=hFGZwZRcPSg2mesGIepx7RvYImP4r8ufjk2-NCCnlRRGjYQR9btNAWQlxc6Lt0grAJZPpO96CI4yD1IfBQTBRelSNPfSatSJkFhXHWzvkpZTu5Ty6kXeumOBDIhszKdZ5Cjtz2iwYTLzW-erei0xQ6h7uclNZ0tkYPuHn5kez1I; expires=Sat, 09-Nov-2024 15:44:03 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=none alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 X-Firefox-Spdy: h2

	www.google.com/fonts	142.250.74.132	301 Moved Permanently	0 B
URL GET HTTP/2 www.google.com/fonts IP 142.250.74.132:443 ASN #15169 GOOGLE Requested by https://pub-784d0242963941bb8a58515198e2a1ec.r2.dev/SharePoint_Server.html#eric@smashcap.com Certificate IssuerGoogle Trust Services LLC Subjectwww.google.com FingerprintC6:A2:DC:31:5A:53:FA:DD:55:71:A3:F4:DD:43:3D:16:71:B8:B3:99 ValidityTue, 16 Apr 2024 04:20:32 GMT - Tue, 09 Jul 2024 04:20:31 GMT File type Size 0 B (0 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers `GET /fonts HTTP/1.1 Host: www.google.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/css,/;q=0.1 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://pub-784d0242963941bb8a58515198e2a1ec.r2.dev/ Sec-Fetch-Dest: style Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` HTTP/2 301 Moved Permanently content-type: application/binary cache-control: no-cache, no-store, max-age=0, must-revalidate pragma: no-cache expires: Mon, 01 Jan 1990 00:00:00 GMT date: Fri, 10 May 2024 15:44:03 GMT location: https://fonts.google.com/ p3p: CP="This is not a P3P policy! See g.co/p3phelp for more info." content-security-policy: script-src 'nonce-tPCvavZUNFDxVgSMeAfGTw' 'unsafe-inline' 'strict-dynamic' https: http:;object-src 'none';base-uri 'self';report-uri /cspreport cross-origin-opener-policy: same-origin-allow-popups server: ESF content-length: 0 x-xss-protection: 0 x-frame-options: SAMEORIGIN x-content-type-options: nosniff set-cookie: NID=514=oVZ0deRcIynBystEQKKRzb7KQETM1tE0L2BTkjIt5AhXnQAg7mVf_6Ifin2eNkQDVpTeXKNYchTSbjmITwK7vuFeEqiP2cd3Rwd3DT04_elNHXlZZo8FBf_pnissIQKTfuXzjYUL5fY7kpTjagDqHiDQGFB9zD7mf5X6OYFe-0w; expires=Sat, 09-Nov-2024 15:44:03 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=none alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 X-Firefox-Spdy: h2

	www.google.com/fonts	142.250.74.132	301 Moved Permanently	0 B
URL GET HTTP/2 www.google.com/fonts IP 142.250.74.132:443 ASN #15169 GOOGLE Requested by https://pub-784d0242963941bb8a58515198e2a1ec.r2.dev/SharePoint_Server.html#eric@smashcap.com Certificate IssuerGoogle Trust Services LLC Subjectwww.google.com FingerprintC6:A2:DC:31:5A:53:FA:DD:55:71:A3:F4:DD:43:3D:16:71:B8:B3:99 ValidityTue, 16 Apr 2024 04:20:32 GMT - Tue, 09 Jul 2024 04:20:31 GMT File type Size 0 B (0 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers `GET /fonts HTTP/1.1 Host: www.google.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/css,/;q=0.1 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://pub-784d0242963941bb8a58515198e2a1ec.r2.dev/ Sec-Fetch-Dest: style Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` HTTP/2 301 Moved Permanently content-type: application/binary cache-control: no-cache, no-store, max-age=0, must-revalidate pragma: no-cache expires: Mon, 01 Jan 1990 00:00:00 GMT date: Fri, 10 May 2024 15:44:03 GMT location: https://fonts.google.com/ p3p: CP="This is not a P3P policy! See g.co/p3phelp for more info." content-security-policy: script-src 'nonce-9oCACwh7Itp0BJiCImMqHw' 'unsafe-inline' 'strict-dynamic' https: http:;object-src 'none';base-uri 'self';report-uri /cspreport cross-origin-opener-policy: same-origin-allow-popups server: ESF content-length: 0 x-xss-protection: 0 x-frame-options: SAMEORIGIN x-content-type-options: nosniff set-cookie: NID=514=jxFNE2iNAnsLRtPKvXWWD5ZTaRpwtrWmG_HxB_O4zjvdKYfj6GD0CkqzONb6DrHzAgo13Mh437DpZcuniUQ7f7bUeSl3rZMIjJvHbag0U4WjpnA2Rjsz3bOJAB3osr0_AfrcWcmCXnA0jVf21M3GbUgyqx5Nbf52SDsuWcDHwL8; expires=Sat, 09-Nov-2024 15:44:03 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=none alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 X-Firefox-Spdy: h2

	logo.clearbit.com/smashcap.com	54.230.111.35	200 OK	4.0 kB
URL GET HTTP/2 logo.clearbit.com/smashcap.com IP 54.230.111.35:443 ASN #16509 AMAZON-02 Requested by https://pub-784d0242963941bb8a58515198e2a1ec.r2.dev/SharePoint_Server.html#eric@smashcap.com Certificate IssuerAmazon Subjectclearbit.com FingerprintCE:16:94:BB:21:1F:D1:5C:C5:B1:B0:D0:51:6C:C5:26:30:0D:59:72 ValidityMon, 22 Jan 2024 00:00:00 GMT - Tue, 18 Feb 2025 23:59:59 GMT File type PNG image data, 128 x 128, 8-bit/color RGB, non-interlaced Size 4.0 kB (4013 bytes) Hash 5586b6e0dd621d0accdc4e38b78ab780 08caf6dbf47cec9aa61bcfb86d238a4c76011506 9109384e1be262410c2f321db00cbaf01b29d0c63dbe3660e32d8eaacb797948 HTTP Headers `GET /smashcap.com HTTP/1.1 Host: logo.clearbit.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: https://pub-784d0242963941bb8a58515198e2a1ec.r2.dev DNT: 1 Connection: keep-alive Referer: https://pub-784d0242963941bb8a58515198e2a1ec.r2.dev/ Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` HTTP/2 200 OK content-type: image/png access-control-allow-origin: * cache-control: public, max-age=2592000 date: Tue, 07 May 2024 08:20:59 GMT x-envoy-response-flags: - server: Clearbit strict-transport-security: max-age=63072000; includeSubDomains; preload x-content-type-options: nosniff x-cache: Hit from cloudfront via: 1.1 3bff78035f818b6a3185b0f5f4586410.cloudfront.net (CloudFront) x-amz-cf-pop: OSL50-P1 x-amz-cf-id: u_abdAEr3Q0H4slT_1ftA3bA0QBQgG4MBlqRwVw1sdneAcqrCHfh6A== age: 285785 X-Firefox-Spdy: h2

	fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxP.ttf	142.250.74.131	200 OK	36 kB
URL GET HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxP.ttf IP 142.250.74.131:443 ASN #15169 GOOGLE Requested by https://pub-784d0242963941bb8a58515198e2a1ec.r2.dev/SharePoint_Server.html#eric@smashcap.com Certificate IssuerGoogle Trust Services LLC Subject.gstatic.com Fingerprint15:DD:05:B3:2F:D8:E3:54:C9:B4:FA:E4:AC:01:ED:C8:E1:EA:A7:AD ValidityTue, 16 Apr 2024 04:17:07 GMT - Tue, 09 Jul 2024 04:17:06 GMT File type TrueType Font data, 18 tables, 1st "GDEF", 8 names, Microsoft, language 0x409, Copyright 2011 Google Inc. All Rights Reserved.RobotoRegularVersion 2.137; 2017Roboto-Regularhtt Size 36 kB (36216 bytes) Hash a0d084a3e8176664e75f8eca3ebea96c 324ec20b91392a6871d7846e0ff2972447a1b2b8 a9ef021078603005c0b08fba881f1a7eb62ef213238021f3e8a4a00daa60b9d6 HTTP Headers GET /s/roboto/v30/KFOmCnqEu92Fr1Mu4mxP.ttf HTTP/1.1 Host: fonts.gstatic.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: https://pub-784d0242963941bb8a58515198e2a1ec.r2.dev DNT: 1 Connection: keep-alive Referer: https://pub-784d0242963941bb8a58515198e2a1ec.r2.dev/ Sec-Fetch-Dest: font Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache HTTP/2 200 OK accept-ranges: bytes content-encoding: gzip access-control-allow-origin: content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes cross-origin-resource-policy: cross-origin cross-origin-opener-policy: same-origin; report-to="apps-themes" report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]} timing-allow-origin: * content-length: 20776 x-content-type-options: nosniff server: sffe x-xss-protection: 0 date: Fri, 10 May 2024 02:15:09 GMT expires: Sat, 10 May 2025 02:15:09 GMT cache-control: public, max-age=31536000 age: 48535 last-modified: Wed, 11 May 2022 19:24:42 GMT content-type: font/ttf vary: Accept-Encoding alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 X-Firefox-Spdy: h2

	fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fBBc9.ttf	142.250.74.131	200 OK	36 kB
URL GET HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fBBc9.ttf IP 142.250.74.131:443 ASN #15169 GOOGLE Requested by https://pub-784d0242963941bb8a58515198e2a1ec.r2.dev/SharePoint_Server.html#eric@smashcap.com Certificate IssuerGoogle Trust Services LLC Subject.gstatic.com Fingerprint15:DD:05:B3:2F:D8:E3:54:C9:B4:FA:E4:AC:01:ED:C8:E1:EA:A7:AD ValidityTue, 16 Apr 2024 04:17:07 GMT - Tue, 09 Jul 2024 04:17:06 GMT File type TrueType Font data, 18 tables, 1st "GDEF", 8 names, Microsoft, language 0x409, Copyright 2011 Google Inc. All Rights Reserved.Roboto LightRegularVersion 2.137; 2017Roboto-Ligh Size 36 kB (36216 bytes) Hash 85df2cb76110ce9ce787b45a5266d23a 91187234316d05377268346f4631e2de3bb6affe 4501b0c41bd6ffd12d34114eed5113b9e136f5f1715d7b4348dd1ccb570470f9 HTTP Headers GET /s/roboto/v30/KFOlCnqEu92Fr1MmSU5fBBc9.ttf HTTP/1.1 Host: fonts.gstatic.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: https://pub-784d0242963941bb8a58515198e2a1ec.r2.dev DNT: 1 Connection: keep-alive Referer: https://pub-784d0242963941bb8a58515198e2a1ec.r2.dev/ Sec-Fetch-Dest: font Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache HTTP/2 200 OK accept-ranges: bytes content-encoding: gzip access-control-allow-origin: content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes cross-origin-resource-policy: cross-origin cross-origin-opener-policy: same-origin; report-to="apps-themes" report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]} timing-allow-origin: * content-length: 20847 x-content-type-options: nosniff server: sffe x-xss-protection: 0 date: Thu, 09 May 2024 02:00:04 GMT expires: Fri, 09 May 2025 02:00:04 GMT cache-control: public, max-age=31536000 age: 135840 last-modified: Wed, 11 May 2022 19:24:41 GMT content-type: font/ttf vary: Accept-Encoding alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 X-Firefox-Spdy: h2

	logo.clearbit.com/smashcap.com	54.230.111.35	200 OK	4.0 kB
URL GET HTTP/2 logo.clearbit.com/smashcap.com IP 54.230.111.35:443 ASN #16509 AMAZON-02 Requested by https://pub-784d0242963941bb8a58515198e2a1ec.r2.dev/SharePoint_Server.html#eric@smashcap.com Certificate IssuerAmazon Subjectclearbit.com FingerprintCE:16:94:BB:21:1F:D1:5C:C5:B1:B0:D0:51:6C:C5:26:30:0D:59:72 ValidityMon, 22 Jan 2024 00:00:00 GMT - Tue, 18 Feb 2025 23:59:59 GMT File type PNG image data, 128 x 128, 8-bit/color RGB, non-interlaced Size 4.0 kB (4013 bytes) Hash 5586b6e0dd621d0accdc4e38b78ab780 08caf6dbf47cec9aa61bcfb86d238a4c76011506 9109384e1be262410c2f321db00cbaf01b29d0c63dbe3660e32d8eaacb797948 HTTP Headers `GET /smashcap.com HTTP/1.1 Host: logo.clearbit.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://pub-784d0242963941bb8a58515198e2a1ec.r2.dev/ Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` HTTP/2 200 OK content-type: image/png access-control-allow-origin: * cache-control: public, max-age=2592000 date: Tue, 07 May 2024 08:20:59 GMT x-envoy-response-flags: - server: Clearbit strict-transport-security: max-age=63072000; includeSubDomains; preload x-content-type-options: nosniff x-cache: Hit from cloudfront via: 1.1 ee04daa979e7a02cc5ca472521bc18a6.cloudfront.net (CloudFront) x-amz-cf-pop: OSL50-P1 x-amz-cf-id: MNgdGPV_KsbIqv0KmFl0BpYXTGr3qu2igw23K-1nJ5dLuIdppsL23w== age: 285785 X-Firefox-Spdy: h2

	logo.clearbit.com/smashcap.com	54.230.111.35	200 OK	4.0 kB
URL GET HTTP/2 logo.clearbit.com/smashcap.com IP 54.230.111.35:443 ASN #16509 AMAZON-02 Requested by https://pub-784d0242963941bb8a58515198e2a1ec.r2.dev/SharePoint_Server.html#eric@smashcap.com Certificate IssuerAmazon Subjectclearbit.com FingerprintCE:16:94:BB:21:1F:D1:5C:C5:B1:B0:D0:51:6C:C5:26:30:0D:59:72 ValidityMon, 22 Jan 2024 00:00:00 GMT - Tue, 18 Feb 2025 23:59:59 GMT File type PNG image data, 128 x 128, 8-bit/color RGB, non-interlaced Size 4.0 kB (4013 bytes) Hash 5586b6e0dd621d0accdc4e38b78ab780 08caf6dbf47cec9aa61bcfb86d238a4c76011506 9109384e1be262410c2f321db00cbaf01b29d0c63dbe3660e32d8eaacb797948 HTTP Headers `GET /smashcap.com HTTP/1.1 Host: logo.clearbit.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://pub-784d0242963941bb8a58515198e2a1ec.r2.dev/ Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` HTTP/2 200 OK content-type: image/png access-control-allow-origin: * cache-control: public, max-age=2592000 date: Tue, 07 May 2024 08:20:59 GMT x-envoy-response-flags: - server: Clearbit strict-transport-security: max-age=63072000; includeSubDomains; preload x-content-type-options: nosniff x-cache: Hit from cloudfront via: 1.1 ee04daa979e7a02cc5ca472521bc18a6.cloudfront.net (CloudFront) x-amz-cf-pop: OSL50-P1 x-amz-cf-id: zmn3kmY6FIWQYAJl3cOAavS_CPJJyY2VgY-_vheAqas4mpNpU9Pivg== age: 285785 X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (3)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (24)

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL GET HTTP/1.1

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/2

IP