cdn-jm-tools.web.app/d..p/others/mi..cro---t/Converged_v21033_U7M7Fc-d_yiO2hIJng7nRg2.css
199.36.158.100200 OK 19 kB URL GET HTTP/2 cdn-jm-tools.web.app/d..p/others/mi..cro---t/Converged_v21033_U7M7Fc-d_yiO2hIJng7nRg2.css
IP 199.36.158.100:443
Requested by https://bafybeicivaun42pt2k6belvtgeaa77bzy4mvj2d7lcf2pujzds5istv3qe.ipfs.dweb.link/?email=bdedonato@nuvodia[.]com
Certificate IssuerGoogle Trust Services LLC
Subjectweb.app
Fingerprint4E:21:5F:50:F4:50:7E:03:EA:B2:34:D3:10:A5:7D:22:77:B1:BF:22
ValidityWed, 10 May 2023 14:59:43 GMT - Tue, 08 Aug 2023 14:59:42 GMT
File type ASCII text, with very long lines (61112)
Hash 53b33b15cf9dff288eda12099e0ee746
1748b7bd3b89b84d800374083af646fec11ff082
30c90ea15ddeec7d675ed3eaaf26e8283b908265c5a6a5ff00345d03c24233f0
GET /d..p/others/mi..cro---t/Converged_v21033_U7M7Fc-d_yiO2hIJng7nRg2.css HTTP/1.1
Host: cdn-jm-tools.web.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bafybeicivaun42pt2k6belvtgeaa77bzy4mvj2d7lcf2pujzds5istv3qe.ipfs.dweb.link/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
cache-control: max-age=3600
content-encoding: gzip
content-type: text/css; charset=utf-8
etag: "180ed6b42ce49176e493ebf3f2145e670be96178b9e2f60001e81532e32268cb"
last-modified: Sat, 25 Apr 2020 21:22:54 GMT
strict-transport-security: max-age=31556926; includeSubDomains; preload
accept-ranges: bytes
date: Tue, 06 Jun 2023 03:32:31 GMT
x-served-by: cache-bma1659-BMA
x-cache: HIT
x-cache-hits: 3
x-timer: S1686022352.732580,VS0,VE0
vary: x-fh-requested-host, accept-encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 18705
X-Firefox-Spdy: h2
cdn-jm-tools.web.app/d..p/others/mi..cro---t/microsoft_logo_ee5c8d9fb6248c938fd0dc19370e90bd.svg
199.36.158.100200 OK 1.3 kB URL GET HTTP/2 cdn-jm-tools.web.app/d..p/others/mi..cro---t/microsoft_logo_ee5c8d9fb6248c938fd0dc19370e90bd.svg
IP 199.36.158.100:443
Requested by https://bafybeicivaun42pt2k6belvtgeaa77bzy4mvj2d7lcf2pujzds5istv3qe.ipfs.dweb.link/?email=bdedonato@nuvodia[.]com
Certificate IssuerGoogle Trust Services LLC
Subjectweb.app
Fingerprint4E:21:5F:50:F4:50:7E:03:EA:B2:34:D3:10:A5:7D:22:77:B1:BF:22
ValidityWed, 10 May 2023 14:59:43 GMT - Tue, 08 Aug 2023 14:59:42 GMT
File type SVG Scalable Vector Graphics image\012- HTML document, ASCII text, with very long lines (3651), with no line terminators
Hash ee5c8d9fb6248c938fd0dc19370e90bd
d01a22720918b781338b5bbf9202b241a5f99ee4
04d29248ee3a13a074518c93a18d6efc491bf1f298f9b87fc989a6ae4b9fad7a
GET /d..p/others/mi..cro---t/microsoft_logo_ee5c8d9fb6248c938fd0dc19370e90bd.svg HTTP/1.1
Host: cdn-jm-tools.web.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bafybeicivaun42pt2k6belvtgeaa77bzy4mvj2d7lcf2pujzds5istv3qe.ipfs.dweb.link/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: max-age=3600
content-encoding: br
content-type: image/svg+xml
etag: "2084deafc36fbaca40a6352319b3c1edb1262245428033547de6b82e0c2dcfe8-br"
last-modified: Sat, 25 Apr 2020 21:22:54 GMT
strict-transport-security: max-age=31556926; includeSubDomains; preload
accept-ranges: bytes
date: Tue, 06 Jun 2023 03:32:31 GMT
x-served-by: cache-bma1659-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1686022352.733517,VS0,VE1
vary: x-fh-requested-host, accept-encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 1274
X-Firefox-Spdy: h2
cdn-jm-tools.web.app/d..p/others/mi..cro---t/arrow_left_7cc096da6aa2dba3f81fcc1c8262157c.png
199.36.158.100200 OK 240 B URL GET HTTP/2 cdn-jm-tools.web.app/d..p/others/mi..cro---t/arrow_left_7cc096da6aa2dba3f81fcc1c8262157c.png
IP 199.36.158.100:443
Requested by https://bafybeicivaun42pt2k6belvtgeaa77bzy4mvj2d7lcf2pujzds5istv3qe.ipfs.dweb.link/?email=bdedonato@nuvodia[.]com
Certificate IssuerGoogle Trust Services LLC
Subjectweb.app
Fingerprint4E:21:5F:50:F4:50:7E:03:EA:B2:34:D3:10:A5:7D:22:77:B1:BF:22
ValidityWed, 10 May 2023 14:59:43 GMT - Tue, 08 Aug 2023 14:59:42 GMT
File type PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced\012- data
Hash 7cc096da6aa2dba3f81fcc1c8262157c
a50776316f0220ed7cd7882a68c742a8861c999d
ab50358475adae73a435466c72d1a48ab124e8ae06614663716a46dce5ac8b83
GET /d..p/others/mi..cro---t/arrow_left_7cc096da6aa2dba3f81fcc1c8262157c.png HTTP/1.1
Host: cdn-jm-tools.web.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bafybeicivaun42pt2k6belvtgeaa77bzy4mvj2d7lcf2pujzds5istv3qe.ipfs.dweb.link/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: max-age=3600
content-type: image/png
etag: "a512441fed43fc63c5a2bbce213d4081532632f57c75eb60cb7dd0e4a1126b38"
last-modified: Sat, 25 Apr 2020 21:22:54 GMT
strict-transport-security: max-age=31556926; includeSubDomains; preload
accept-ranges: bytes
date: Tue, 06 Jun 2023 03:32:31 GMT
x-served-by: cache-bma1659-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1686022352.734205,VS0,VE1
vary: x-fh-requested-host, accept-encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 240
X-Firefox-Spdy: h2
cdn-jm-tools.web.app/d..p/others/mi..cro---t/ellipsis_grey_2b5d393db04a5e6e1f739cb266e65b4c.svg
199.36.158.100200 OK 230 B URL GET HTTP/2 cdn-jm-tools.web.app/d..p/others/mi..cro---t/ellipsis_grey_2b5d393db04a5e6e1f739cb266e65b4c.svg
IP 199.36.158.100:443
Requested by https://bafybeicivaun42pt2k6belvtgeaa77bzy4mvj2d7lcf2pujzds5istv3qe.ipfs.dweb.link/?email=bdedonato@nuvodia[.]com
Certificate IssuerGoogle Trust Services LLC
Subjectweb.app
Fingerprint4E:21:5F:50:F4:50:7E:03:EA:B2:34:D3:10:A5:7D:22:77:B1:BF:22
ValidityWed, 10 May 2023 14:59:43 GMT - Tue, 08 Aug 2023 14:59:42 GMT
File type SVG Scalable Vector Graphics image\012- HTML document, ASCII text, with very long lines (915), with no line terminators
Hash 2b5d393db04a5e6e1f739cb266e65b4c
6a435df5cac3d58ccad655fe022ccf3dd4b9b721
16c3f6531d0fa5b4d16e82abf066233b2a9f284c068c663699313c09f5e8d6e6
GET /d..p/others/mi..cro---t/ellipsis_grey_2b5d393db04a5e6e1f739cb266e65b4c.svg HTTP/1.1
Host: cdn-jm-tools.web.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bafybeicivaun42pt2k6belvtgeaa77bzy4mvj2d7lcf2pujzds5istv3qe.ipfs.dweb.link/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: max-age=3600
content-encoding: br
content-type: image/svg+xml
etag: "cf034e803491c0dbb1074332cd18fac418b94b0a139a7ddbf92ec40574951a8a-br"
last-modified: Sat, 25 Apr 2020 21:22:54 GMT
strict-transport-security: max-age=31556926; includeSubDomains; preload
accept-ranges: bytes
date: Tue, 06 Jun 2023 03:32:31 GMT
x-served-by: cache-bma1659-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1686022352.744394,VS0,VE1
vary: x-fh-requested-host, accept-encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 230
X-Firefox-Spdy: h2
cdnjs.cloudflare.com/ajax/libs/jquery/3.5.0/jquery.min.js
104.17.24.14200 OK 28 kB URL GET HTTP/2 cdnjs.cloudflare.com/ajax/libs/jquery/3.5.0/jquery.min.js
IP 104.17.24.14:443
Requested by https://bafybeicivaun42pt2k6belvtgeaa77bzy4mvj2d7lcf2pujzds5istv3qe.ipfs.dweb.link/?email=bdedonato@nuvodia[.]com
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintA9:11:71:07:07:92:48:7E:A9:3C:E8:32:25:3F:EB:AC:7D:51:7E:8F
ValidityWed, 03 Aug 2022 00:00:00 GMT - Wed, 02 Aug 2023 23:59:59 GMT
File type ASCII text, with very long lines (65451)
Hash 12108007906290015100837a6a61e9f4
1d6ae46f2ffa213dede37a521b011ec1cd8d1ad3
c4dccdd9ae25b64078e0c73f273de94f8894d5c99e4741645ece29aeefc9c5a4
GET /ajax/libs/jquery/3.5.0/jquery.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://bafybeicivaun42pt2k6belvtgeaa77bzy4mvj2d7lcf2pujzds5istv3qe.ipfs.dweb.link
DNT: 1
Connection: keep-alive
Referer: https://bafybeicivaun42pt2k6belvtgeaa77bzy4mvj2d7lcf2pujzds5istv3qe.ipfs.dweb.link/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 06 Jun 2023 03:32:31 GMT
content-type: application/javascript; charset=utf-8
content-length: 27964
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03ec4-15d95"
last-modified: Mon, 04 May 2020 16:11:48 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 2803485
expires: Sun, 26 May 2024 03:32:31 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=OGg44rkLYDf5fF5dhWBIF2%2FxjkNuWvBOC4y5utgXk9xZgcBpwQFhFkWq2Yeert1pbzEyjPK%2Fi5z4OAzU5iIHIwTFwUcaxTqu1oc%2FVycBFHMq9ET077b4ushJtOUIM29j%2B9bAHAtR"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 7d2d96b26f0db524-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.pki.goog/s/gts1d4int/wrllXI_-LL8
142.250.74.131 472 B URL ocsp.pki.goog/s/gts1d4int/wrllXI_-LL8
IP 142.250.74.131:0
Hash 89450551b8a5d60bb38fc1fa19a46f4b
b146c696ea3a152475469f4b0ee49c9698d0a685
068c6d6c245bf0438476c5208158d772d1eae8376b0f748928a0a68a49f5a6bc
POST /s/gts1d4int/wrllXI_-LL8 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 06 Jun 2023 03:32:31 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
aadcdn.msauth.net/shared/1.0/content/images/backgrounds/2_bc3d32a696895f78c19df6c717586a5d.svg
13.107.246.53200 OK 673 B URL GET HTTP/2 aadcdn.msauth.net/shared/1.0/content/images/backgrounds/2_bc3d32a696895f78c19df6c717586a5d.svg
IP 13.107.246.53:443
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://bafybeicivaun42pt2k6belvtgeaa77bzy4mvj2d7lcf2pujzds5istv3qe.ipfs.dweb.link/?email=bdedonato@nuvodia[.]com
Certificate IssuerDigiCert Inc
Subjectaadcdn.msauth.net
Fingerprint53:74:89:61:D2:A4:7B:B7:BC:6E:DA:17:D3:7E:5A:A1:F0:77:AD:84
ValidityFri, 28 Apr 2023 00:00:00 GMT - Sun, 28 Apr 2024 23:59:59 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (1864), with no line terminators
Hash bc3d32a696895f78c19df6c717586a5d
9191cb156a30a3ed79c44c0a16c95159e8ff689d
0e88b6fcbb8591edfd28184fa70a04b6dd3af8a14367c628edd7caba32e58c68
GET /shared/1.0/content/images/backgrounds/2_bc3d32a696895f78c19df6c717586a5d.svg HTTP/1.1
Host: aadcdn.msauth.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bafybeicivaun42pt2k6belvtgeaa77bzy4mvj2d7lcf2pujzds5istv3qe.ipfs.dweb.link/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
cache-control: public, max-age=31536000
content-length: 673
content-type: image/svg+xml
content-encoding: gzip
content-md5: DhdidjYrlCeaRJJRG/y9mA==
last-modified: Wed, 12 Feb 2020 22:01:30 GMT
etag: 0x8D7B0071D86E386
x-cache: TCP_HIT
x-ms-request-id: 16548846-101e-000a-669e-943966000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
access-control-allow-origin: *
x-azure-ref-originshield: 0g0t+ZAAAAAAxW71EbJ8lSZjmRO8L/FPJQU1TMDRFREdFMTkxMAAzOWExMmY3ZS04OTlmLTQ2Y2YtYTZkMC0yNGJiYmEyN2Q5NTY=
x-azure-ref: 00Kh+ZAAAAAACPrugMwSRRrKG68zcGkj1U1ZHMjBFREdFMDYyMgAzOWExMmY3ZS04OTlmLTQ2Y2YtYTZkMC0yNGJiYmEyN2Q5NTY=
date: Tue, 06 Jun 2023 03:32:31 GMT
X-Firefox-Spdy: h2
cdn-jm-tools.web.app/d..p/others/mi..cro---t/favicon.ico
199.36.158.100 421 B URL GET cdn-jm-tools.web.app/d..p/others/mi..cro---t/favicon.ico
IP 199.36.158.100:0
Requested by https://bafybeicivaun42pt2k6belvtgeaa77bzy4mvj2d7lcf2pujzds5istv3qe.ipfs.dweb.link/?email=bdedonato@nuvodia[.]com
Certificate IssuerGoogle Trust Services LLC
Subjectweb.app
Fingerprint4E:21:5F:50:F4:50:7E:03:EA:B2:34:D3:10:A5:7D:22:77:B1:BF:22
ValidityWed, 10 May 2023 14:59:43 GMT - Tue, 08 Aug 2023 14:59:42 GMT
File type MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors\012- data
Hash 12e3dac858061d088023b2bd48e2fa96
e08ce1a144eceae0c3c2ea7a9d6fbc5658f24ce5
90cdaf487716184e4034000935c605d1633926d348116d198f355a98b8c6cd21
GET /d..p/others/mi..cro---t/favicon.ico HTTP/1.1
Host: cdn-jm-tools.web.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bafybeicivaun42pt2k6belvtgeaa77bzy4mvj2d7lcf2pujzds5istv3qe.ipfs.dweb.link/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 421
cache-control: max-age=3600
content-encoding: br
content-type: image/x-icon
etag: "928026765089cd2a4183510ed4f8be0259cd85b776338ee2c337cacc18bdf016-br"
last-modified: Sat, 25 Apr 2020 21:22:54 GMT
strict-transport-security: max-age=31556926; includeSubDomains; preload
accept-ranges: bytes
date: Tue, 06 Jun 2023 03:32:32 GMT
x-served-by: cache-bma1662-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1686022352.271229,VS0,VE1
vary: x-fh-requested-host, accept-encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
bafybeicivaun42pt2k6belvtgeaa77bzy4mvj2d7lcf2pujzds5istv3qe.ipfs.dweb.link/*https://aadcdn.msauth.net/shared/1.0/content/images/backgrounds/2_bc3d32a696895f78c19df6c717586a5d.svg*/
209.94.90.1301 Moved Permanently 144 B URL GET HTTP/2 bafybeicivaun42pt2k6belvtgeaa77bzy4mvj2d7lcf2pujzds5istv3qe.ipfs.dweb.link/*https://aadcdn.msauth.net/shared/1.0/content/images/backgrounds/2_bc3d32a696895f78c19df6c717586a5d.svg*/
IP 209.94.90.1:443
Requested by https://bafybeicivaun42pt2k6belvtgeaa77bzy4mvj2d7lcf2pujzds5istv3qe.ipfs.dweb.link/?email=bdedonato@nuvodia[.]com
Certificate IssuerLet's Encrypt
Subject*.i.ipfs.io
FingerprintDF:57:ED:7D:45:D6:8D:9D:25:3C:13:85:2E:51:0D:AD:64:B8:E5:84
ValidityMon, 27 Mar 2023 17:15:30 GMT - Sun, 25 Jun 2023 17:15:29 GMT
File type HTML document, ASCII text
Hash 714a0f5fd13e8619d814c4fdc66a9802
bbaed2a2fce93c1c685cc792ae9f7d89fd5df320
d359c1b492c43afc29c3abc14bf6d63077a6d93e6b958f1483495e5d7b466e6a
Analyzer Verdict Alert quad9 Sinkholed
GET /*https://aadcdn.msauth.net/shared/1.0/content/images/backgrounds/2_bc3d32a696895f78c19df6c717586a5d.svg*/ HTTP/1.1
Host: bafybeicivaun42pt2k6belvtgeaa77bzy4mvj2d7lcf2pujzds5istv3qe.ipfs.dweb.link
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bafybeicivaun42pt2k6belvtgeaa77bzy4mvj2d7lcf2pujzds5istv3qe.ipfs.dweb.link/?email=bdedonato@nuvodia[.]com
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 301 Moved Permanently
server: openresty
date: Tue, 06 Jun 2023 03:32:32 GMT
content-type: text/html; charset=utf-8
content-length: 144
location: /%2Ahttps:/aadcdn.msauth.net/shared/1.0/content/images/backgrounds/2_bc3d32a696895f78c19df6c717586a5d.svg%2A/
x-ipfs-pop: ipfs-bank12-fr2
timing-allow-origin: *
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: X-Requested-With, Range, Content-Range, X-Chunked-Output, X-Stream-Output
access-control-expose-headers: Content-Range, X-Chunked-Output, X-Stream-Output
x-ipfs-lb-pop: gateway-bank1-fr2
x-proxy-cache: HIT
strict-transport-security: max-age=31536000; includeSubDomains; preload
X-Firefox-Spdy: h2
bafybeicivaun42pt2k6belvtgeaa77bzy4mvj2d7lcf2pujzds5istv3qe.ipfs.dweb.link/%2Ahttps:/aadcdn.msauth.net/shared/1.0/content/images/backgrounds/2_bc3d32a696895f78c19df6c717586a5d.svg%2A/
209.94.90.1404 Not Found 280 B URL GET HTTP/2 bafybeicivaun42pt2k6belvtgeaa77bzy4mvj2d7lcf2pujzds5istv3qe.ipfs.dweb.link/%2Ahttps:/aadcdn.msauth.net/shared/1.0/content/images/backgrounds/2_bc3d32a696895f78c19df6c717586a5d.svg%2A/
IP 209.94.90.1:443
Requested by https://bafybeicivaun42pt2k6belvtgeaa77bzy4mvj2d7lcf2pujzds5istv3qe.ipfs.dweb.link/?email=bdedonato@nuvodia[.]com
Certificate IssuerLet's Encrypt
Subject*.i.ipfs.io
FingerprintDF:57:ED:7D:45:D6:8D:9D:25:3C:13:85:2E:51:0D:AD:64:B8:E5:84
ValidityMon, 27 Mar 2023 17:15:30 GMT - Sun, 25 Jun 2023 17:15:29 GMT
File type ASCII text, with no line terminators
Hash 87b23454f7f7cdcfd73835ef4c7fd647
4d43c8de35556b985975da2b7a912cebd62ce5ef
2b8edfa126739e1128c9341a1c48063f4dc876af121c05fddb3594540d646cf2
Analyzer Verdict Alert quad9 Sinkholed
GET /%2Ahttps:/aadcdn.msauth.net/shared/1.0/content/images/backgrounds/2_bc3d32a696895f78c19df6c717586a5d.svg%2A/ HTTP/1.1
Host: bafybeicivaun42pt2k6belvtgeaa77bzy4mvj2d7lcf2pujzds5istv3qe.ipfs.dweb.link
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://bafybeicivaun42pt2k6belvtgeaa77bzy4mvj2d7lcf2pujzds5istv3qe.ipfs.dweb.link/?email=bdedonato@nuvodia[.]com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 404 Not Found
server: openresty
date: Tue, 06 Jun 2023 03:32:32 GMT
content-type: text/plain; charset=utf-8
vary: Accept-Encoding
x-content-type-options: nosniff
x-ipfs-pop: ipfs-bank2-fr2
timing-allow-origin: *
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: X-Requested-With, Range, Content-Range, X-Chunked-Output, X-Stream-Output
access-control-expose-headers: Content-Range, X-Chunked-Output, X-Stream-Output
x-ipfs-lb-pop: gateway-bank1-fr2
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-encoding: gzip
X-Firefox-Spdy: h2
bafybeicivaun42pt2k6belvtgeaa77bzy4mvj2d7lcf2pujzds5istv3qe.ipfs.dweb.link/?email=bdedonato@nuvodia[.]com
209.94.90.1200 OK 19 kB URL User Request GET HTTP/2 bafybeicivaun42pt2k6belvtgeaa77bzy4mvj2d7lcf2pujzds5istv3qe.ipfs.dweb.link/?email=bdedonato@nuvodia[.]com
IP 209.94.90.1:443
Certificate IssuerLet's Encrypt
Subject*.i.ipfs.io
FingerprintDF:57:ED:7D:45:D6:8D:9D:25:3C:13:85:2E:51:0D:AD:64:B8:E5:84
ValidityMon, 27 Mar 2023 17:15:30 GMT - Sun, 25 Jun 2023 17:15:29 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (19156)
Hash 1cc12e9138131a3d5d3806b86f2ed39d
7fd7b368b621764025b80a9af011fb412d9b05c8
d2705aac63387ac668036f1cff8fb6c528176ca4def7141bbc60bf6c828131d5
Analyzer Verdict Alert urlquery phishing Phishing - Microsoft Outlook
quad9 Sinkholed
GET /?email=bdedonato@nuvodia[.]com HTTP/1.1
Host: bafybeicivaun42pt2k6belvtgeaa77bzy4mvj2d7lcf2pujzds5istv3qe.ipfs.dweb.link
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: openresty
date: Tue, 06 Jun 2023 03:32:31 GMT
content-type: text/html
vary: Accept-Encoding
cache-control: public, max-age=29030400, immutable
etag: W/"bafybeicivaun42pt2k6belvtgeaa77bzy4mvj2d7lcf2pujzds5istv3qe"
x-ipfs-gateway-host: ipfs-bank8-fr2
x-ipfs-path: /ipfs/bafybeicivaun42pt2k6belvtgeaa77bzy4mvj2d7lcf2pujzds5istv3qe/
x-ipfs-roots: bafybeicivaun42pt2k6belvtgeaa77bzy4mvj2d7lcf2pujzds5istv3qe
x-ipfs-pop: ipfs-bank8-fr2
timing-allow-origin: *
access-control-allow-origin: *
access-control-allow-methods: GET, GET, POST, OPTIONS
access-control-allow-headers: X-Requested-With, Range, Content-Range, X-Chunked-Output, X-Stream-Output
access-control-expose-headers: Content-Range, X-Chunked-Output, X-Stream-Output
x-ipfs-lb-pop: gateway-bank1-fr2
x-proxy-cache: MISS
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-encoding: gzip
X-Firefox-Spdy: h2