Report - pub-7c4437da171e413f991cd44cf10c6d3e.r2.dev/loading.html

Report Overview

Visited public
2023-12-08 19:02:59
Tags
phishing
URL
pub-7c4437da171e413f991cd44cf10c6d3e.r2.dev/loading.html
Finishing URL
pub-7c4437da171e413f991cd44cf10c6d3e.r2.dev/index.html#0
IP / ASN
104.18.3.35
#13335 CLOUDFLARENET
Title
Signing in......
Phishing - Generic phishing

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
pub-7c4437da171e413f991cd44cf10c6d3e.r2.dev	unknown	2022-08-23	2023-11-13 23:20:27	2023-11-14 05:00:06	6.5 kB	750 kB	104.18.3.35
cdnjs.cloudflare.com	235	2009-02-17	2015-04-17 22:46:33	2023-12-08 05:09:48	1.5 kB	20 kB	104.17.24.14
www.w3schools.com	17487	2000-03-21	2014-02-05 21:15:46	2023-12-07 17:27:37	1.4 kB	17 kB	192.229.133.221
ajax.googleapis.com	12905	2005-01-25	2013-08-16 11:51:31	2023-12-08 08:34:59	1.4 kB	93 kB	142.250.74.106

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (3)

	URL	From	Size	First Seen	Last Seen
	ajax.googleapis.com/ajax/libs/jquery/2.2.4/jquery.min.js	ScriptElement	86 kB	2023-03-07	2025-05-09
Pretty URL ajax.googleapis.com/ajax/libs/jquery/2.2.4/jquery.min.js IP 142.250.74.106 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:02 Last Seen2025-05-09 10:36 Times Seen173907 Hash 2f6b11a7e914718e0290410e85366fe9 69bb69e25ca7d5ef0935317584e6153f3fd9a88c 05b85d96f41fff14d8f608dad03ab71e2c1017c2da0914d7c59291bad7a54f8e Loading...

	pub-7c4437da171e413f991cd44cf10c6d3e.r2.dev/index.html#0	ScriptElement	117 kB	2024-08-20	2024-08-20
Pretty URL pub-7c4437da171e413f991cd44cf10c6d3e.r2.dev/index.html#0 IP 0.0.0.0 ASN #0 Introduced by scriptElement Embedded in HTML true Observations First Seen2024-08-20 16:20 Last Seen2024-08-20 16:20 Times Seen1 Hash 15349c7f8ddbddc26332329491f85435 dfc0cf57ba69c5bfb44347ea99b3478e396f1aef 57c69277b32a3928ef8cde0f78b53e2d0bfa63de1e1b797b8fb6d60e17fb6f79 Loading...

	unknown	Function	34 B	2023-04-11	2025-05-09
Pretty Introduced by Function Embedded in HTML false Observations First Seen2023-04-11 21:16 Last Seen2025-05-09 10:19 Times Seen67023 Hash 572cb94037fffc2a0a53b465972e15f1 0d679b041a7c1ca45cc99e2d229fc2b86762838d 6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35 Loading...

HTTP Transactions (21)

	URL	IP	Response	Size
	pub-7c4437da171e413f991cd44cf10c6d3e.r2.dev/loading.html	104.18.3.35	200 OK	12 kB
URL User Request GET HTTP/1.1 pub-7c4437da171e413f991cd44cf10c6d3e.r2.dev/loading.html IP 104.18.3.35:443 ASN #13335 CLOUDFLARENET Certificate IssuerLet's Encrypt Subject.r2.dev Fingerprint91:F0:8B:D3:AA:FC:86:18:F9:F2:29:EB:98:8C:D8:5A:3A:76:5C:CF ValidityWed, 11 Oct 2023 17:13:53 GMT - Tue, 09 Jan 2024 17:13:52 GMT File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (30833), with CRLF line terminators Size 12 kB (11669 bytes) Hash 9ddd0bdb094ec0ee0c98cc4d8ebe571c 2b8f14effb2a31e59c050e1ddd01c64ae6202557 e27c7c6aa718b84a7bb84a0ebbe5b56084842982c6a2e148188f72272ba036a7 HTTP Headers GET /loading.html HTTP/1.1 Host: pub-7c4437da171e413f991cd44cf10c6d3e.r2.dev User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/*;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Upgrade-Insecure-Requests: 1 Connection: keep-alive Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache `HTTP/1.1 200 OK Date: Fri, 08 Dec 2023 19:02:41 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive ETag: W/"9ddd0bdb094ec0ee0c98cc4d8ebe571c" Last-Modified: Mon, 13 Nov 2023 19:36:05 GMT Vary: Accept-Encoding Server: cloudflare CF-RAY: 83274398bbfdb4eb-OSL Content-Encoding: gzip`

	cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.min.css	104.17.24.14	200 OK	5.6 kB
URL GET HTTP/3 cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.min.css IP 104.17.24.14:443 ASN #13335 CLOUDFLARENET Requested by https://pub-7c4437da171e413f991cd44cf10c6d3e.r2.dev/index.html# Certificate IssuerCloudflare, Inc. Subjectsni.cloudflaressl.com Fingerprint7A:EA:B9:09:71:70:6C:87:C9:D3:82:74:8A:7B:B4:60:E5:40:2D:8D ValidityMon, 03 Jul 2023 00:00:00 GMT - Tue, 02 Jul 2024 23:59:59 GMT File type ASCII text, with very long lines (30837) Size 5.6 kB (5631 bytes) Hash 269550530cc127b6aa5a35925a7de6ce 512c7d79033e3028a9be61b540cf1a6870c896f8 799aeb25cc0373fdee0e1b1db7ad6c2f6a0e058dfadaa3379689f583213190bd HTTP Headers `GET /ajax/libs/font-awesome/4.7.0/css/font-awesome.min.css HTTP/1.1 Host: cdnjs.cloudflare.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/css,/;q=0.1 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://pub-7c4437da171e413f991cd44cf10c6d3e.r2.dev/ Sec-Fetch-Dest: style Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` HTTP/2 200 OK date: Fri, 08 Dec 2023 19:02:41 GMT content-type: text/css; charset=utf-8 content-length: 5631 access-control-allow-origin: * cache-control: public, max-age=30672000 content-encoding: br etag: "5eb03e5f-7918" last-modified: Mon, 04 May 2020 16:10:07 GMT cf-cdnjs-via: cfworker/kv cross-origin-resource-policy: cross-origin timing-allow-origin: * x-content-type-options: nosniff vary: Accept-Encoding cf-cache-status: HIT age: 5543 expires: Wed, 27 Nov 2024 19:02:41 GMT accept-ranges: bytes report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Z%2Bo%2Bncx5KDiJ30JwX3TgEYuRwv%2FRyAwixbc3SGKJ%2FfviHTARDHaELSAaLTRQKesiDRkl3NfGk0pNYfYjCNhzP4iMjBUXXvZum1GUUyZOx8VP6IhQmpz2VIEDpYPFw1Dkb%2FjHVVXa"}],"group":"cf-nel","max_age":604800} nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} strict-transport-security: max-age=15780000 server: cloudflare cf-ray: 8327439cee4e56bb-OSL alt-svc: h3=":443"; ma=86400 X-Firefox-Spdy: h2

	www.w3schools.com/w3css/4/w3.css	192.229.133.221	200 OK	5.3 kB
URL GET HTTP/2 www.w3schools.com/w3css/4/w3.css IP 192.229.133.221:443 ASN #15133 EDGECAST Requested by https://pub-7c4437da171e413f991cd44cf10c6d3e.r2.dev/index.html#0 Certificate IssuerDigiCert Inc Subject.w3schools.com FingerprintC1:D8:A1:39:6A:5E:03:D0:6B:53:1B:C0:E7:E0:84:EB:D2:44:AE:A2 ValiditySun, 05 Mar 2023 00:00:00 GMT - Thu, 04 Apr 2024 23:59:59 GMT File type Unicode text, UTF-8 (with BOM) text Size 5.3 kB (5250 bytes) Hash ba0537e9574725096af97c27d7e54f76 bd46b47d74d344f435b5805114559d45979762d5 4a7611bc677873a0f87fe21727bc3a2a43f57a5ded3b10ce33a0f371a2e6030f HTTP Headers `GET /w3css/4/w3.css HTTP/1.1 Host: www.w3schools.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/css,/*;q=0.1 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://pub-7c4437da171e413f991cd44cf10c6d3e.r2.dev/ Sec-Fetch-Dest: style Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` HTTP/2 200 OK content-encoding: gzip accept-ranges: bytes age: 8713 cache-control: public,max-age=14400,public content-security-policy: frame-ancestors 'self' https://mycourses.w3schools.com; content-type: text/css date: Fri, 08 Dec 2023 19:02:41 GMT etag: "02d5c15b629da1:0" last-modified: Fri, 08 Dec 2023 09:08:18 GMT server: ECS (ska/F716) vary: Accept-Encoding x-cache: HIT x-content-security-policy: frame-ancestors 'self' https://mycourses.w3schools.com; x-powered-by: ASP.NET content-length: 5250 X-Firefox-Spdy: h2

	ajax.googleapis.com/ajax/libs/jquery/2.2.4/jquery.min.js	142.250.74.106	200 OK	30 kB
URL GET HTTP/3 ajax.googleapis.com/ajax/libs/jquery/2.2.4/jquery.min.js IP 142.250.74.106:443 ASN #15169 GOOGLE Requested by https://pub-7c4437da171e413f991cd44cf10c6d3e.r2.dev/index.html#0 Certificate IssuerGoogle Trust Services LLC Subjectupload.video.google.com FingerprintCC:96:E0:52:E0:9B:EA:A9:A0:F8:88:9A:90:20:11:47:61:00:3C:42 ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT File type ASCII text, with very long lines (32065) Size 30 kB (30028 bytes) Hash 2f6b11a7e914718e0290410e85366fe9 69bb69e25ca7d5ef0935317584e6153f3fd9a88c 05b85d96f41fff14d8f608dad03ab71e2c1017c2da0914d7c59291bad7a54f8e HTTP Headers `GET /ajax/libs/jquery/2.2.4/jquery.min.js HTTP/1.1 Host: ajax.googleapis.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://pub-7c4437da171e413f991cd44cf10c6d3e.r2.dev/ Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` HTTP/2 200 OK accept-ranges: bytes content-encoding: gzip access-control-allow-origin: * content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers cross-origin-resource-policy: cross-origin cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers" report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]} timing-allow-origin: * content-length: 30028 x-content-type-options: nosniff server: sffe x-xss-protection: 0 date: Thu, 07 Dec 2023 16:00:57 GMT expires: Fri, 06 Dec 2024 16:00:57 GMT cache-control: public, max-age=31536000, stale-while-revalidate=2592000 last-modified: Tue, 03 Mar 2020 19:15:00 GMT content-type: text/javascript; charset=UTF-8 vary: Accept-Encoding age: 97304 alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 X-Firefox-Spdy: h2

	pub-7c4437da171e413f991cd44cf10c6d3e.r2.dev/loading.html	104.18.3.35	200 OK	12 kB
URL User Request GET HTTP/1.1 pub-7c4437da171e413f991cd44cf10c6d3e.r2.dev/loading.html IP 104.18.3.35:443 ASN #13335 CLOUDFLARENET Certificate IssuerLet's Encrypt Subject.r2.dev Fingerprint91:F0:8B:D3:AA:FC:86:18:F9:F2:29:EB:98:8C:D8:5A:3A:76:5C:CF ValidityWed, 11 Oct 2023 17:13:53 GMT - Tue, 09 Jan 2024 17:13:52 GMT File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (30833), with CRLF line terminators Size 12 kB (11669 bytes) Hash 9ddd0bdb094ec0ee0c98cc4d8ebe571c 2b8f14effb2a31e59c050e1ddd01c64ae6202557 e27c7c6aa718b84a7bb84a0ebbe5b56084842982c6a2e148188f72272ba036a7 HTTP Headers `GET /loading.html HTTP/1.1 Host: pub-7c4437da171e413f991cd44cf10c6d3e.r2.dev User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://pub-7c4437da171e413f991cd44cf10c6d3e.r2.dev/loading.html Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Date: Fri, 08 Dec 2023 19:02:41 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive ETag: W/"9ddd0bdb094ec0ee0c98cc4d8ebe571c" Last-Modified: Mon, 13 Nov 2023 19:36:05 GMT Vary: Accept-Encoding Server: cloudflare CF-RAY: 8327439e8976b4eb-OSL Content-Encoding: gzip`

	pub-7c4437da171e413f991cd44cf10c6d3e.r2.dev/index.html	104.18.3.35		53 kB
URL pub-7c4437da171e413f991cd44cf10c6d3e.r2.dev/index.html IP 104.18.3.35:0 ASN #13335 CLOUDFLARENET Certificate IssuerLet's Encrypt Subject.r2.dev Fingerprint91:F0:8B:D3:AA:FC:86:18:F9:F2:29:EB:98:8C:D8:5A:3A:76:5C:CF ValidityWed, 11 Oct 2023 17:13:53 GMT - Tue, 09 Jan 2024 17:13:52 GMT File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (30833), with CRLF line terminators Size 53 kB (53325 bytes) Hash 3c1e320b5210780dd18efe51c6fcade0 40699b8bc75873b234651f60dba6535cbed34c08 3a9d5d1f5141dfa1ba2e4bba6116f504a77592b1b9c5ac0a66958d22b8936e87 HTTP Headers GET /index.html HTTP/1.1 Host: pub-7c4437da171e413f991cd44cf10c6d3e.r2.dev User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/*;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://pub-7c4437da171e413f991cd44cf10c6d3e.r2.dev/loading.html Upgrade-Insecure-Requests: 1 Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache `HTTP/1.1 200 OK Date: Fri, 08 Dec 2023 19:02:50 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive ETag: W/"3c1e320b5210780dd18efe51c6fcade0" Last-Modified: Thu, 23 Nov 2023 16:36:41 GMT Vary: Accept-Encoding Server: cloudflare CF-RAY: 832743d6ce8fb4eb-OSL Content-Encoding: gzip`

	cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.min.css	104.17.24.14	200 OK	5.6 kB
URL GET HTTP/3 cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.min.css IP 104.17.24.14:443 ASN #13335 CLOUDFLARENET Requested by https://pub-7c4437da171e413f991cd44cf10c6d3e.r2.dev/index.html# Certificate IssuerCloudflare, Inc. Subjectsni.cloudflaressl.com Fingerprint7A:EA:B9:09:71:70:6C:87:C9:D3:82:74:8A:7B:B4:60:E5:40:2D:8D ValidityMon, 03 Jul 2023 00:00:00 GMT - Tue, 02 Jul 2024 23:59:59 GMT File type ASCII text, with very long lines (30837) Size 5.6 kB (5631 bytes) Hash 269550530cc127b6aa5a35925a7de6ce 512c7d79033e3028a9be61b540cf1a6870c896f8 799aeb25cc0373fdee0e1b1db7ad6c2f6a0e058dfadaa3379689f583213190bd HTTP Headers `GET /ajax/libs/font-awesome/4.7.0/css/font-awesome.min.css HTTP/1.1 Host: cdnjs.cloudflare.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/css,/;q=0.1 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://pub-7c4437da171e413f991cd44cf10c6d3e.r2.dev/ Sec-Fetch-Dest: style Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache TE: trailers` HTTP/3 200 OK date: Fri, 08 Dec 2023 19:02:51 GMT content-type: text/css; charset=utf-8 content-length: 5631 access-control-allow-origin: * cache-control: public, max-age=30672000 content-encoding: br etag: "5eb03e5f-7918" last-modified: Mon, 04 May 2020 16:10:07 GMT cf-cdnjs-via: cfworker/kv cross-origin-resource-policy: cross-origin timing-allow-origin: * x-content-type-options: nosniff vary: Accept-Encoding cf-cache-status: HIT age: 5553 expires: Wed, 27 Nov 2024 19:02:51 GMT accept-ranges: bytes report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ct2k%2Bfsxfl%2FRf9DG1E2RC80%2Feim03fuCjtx0UBnM7AZyVYIy5SX9AXQ4V9ILFLSqrIkQE08uCb2cyiisex0IlcTwVQ87%2BnhxG1sOhaE0gpXNNzxMu%2FAMnio91jwkXILfDCLpKGwM"}],"group":"cf-nel","max_age":604800} nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} strict-transport-security: max-age=15780000 server: cloudflare cf-ray: 832743d8ec8756be-OSL alt-svc: h3=":443"; ma=86400

	www.w3schools.com/w3css/4/w3.css	192.229.133.221	200 OK	5.3 kB
URL GET HTTP/2 www.w3schools.com/w3css/4/w3.css IP 192.229.133.221:443 ASN #15133 EDGECAST Requested by https://pub-7c4437da171e413f991cd44cf10c6d3e.r2.dev/index.html#0 Certificate IssuerDigiCert Inc Subject.w3schools.com FingerprintC1:D8:A1:39:6A:5E:03:D0:6B:53:1B:C0:E7:E0:84:EB:D2:44:AE:A2 ValiditySun, 05 Mar 2023 00:00:00 GMT - Thu, 04 Apr 2024 23:59:59 GMT File type Unicode text, UTF-8 (with BOM) text Size 5.3 kB (5250 bytes) Hash ba0537e9574725096af97c27d7e54f76 bd46b47d74d344f435b5805114559d45979762d5 4a7611bc677873a0f87fe21727bc3a2a43f57a5ded3b10ce33a0f371a2e6030f HTTP Headers `GET /w3css/4/w3.css HTTP/1.1 Host: www.w3schools.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/css,/*;q=0.1 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://pub-7c4437da171e413f991cd44cf10c6d3e.r2.dev/ Sec-Fetch-Dest: style Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache TE: trailers` HTTP/2 200 OK content-encoding: gzip accept-ranges: bytes age: 8723 cache-control: public,max-age=14400,public content-security-policy: frame-ancestors 'self' https://mycourses.w3schools.com; content-type: text/css date: Fri, 08 Dec 2023 19:02:51 GMT etag: "02d5c15b629da1:0" last-modified: Fri, 08 Dec 2023 09:08:18 GMT server: ECS (ska/F716) vary: Accept-Encoding x-cache: HIT x-content-security-policy: frame-ancestors 'self' https://mycourses.w3schools.com; x-powered-by: ASP.NET content-length: 5250 X-Firefox-Spdy: h2

	ajax.googleapis.com/ajax/libs/jquery/2.2.4/jquery.min.js	142.250.74.106	200 OK	30 kB
URL GET HTTP/3 ajax.googleapis.com/ajax/libs/jquery/2.2.4/jquery.min.js IP 142.250.74.106:443 ASN #15169 GOOGLE Requested by https://pub-7c4437da171e413f991cd44cf10c6d3e.r2.dev/index.html#0 Certificate IssuerGoogle Trust Services LLC Subjectupload.video.google.com FingerprintCC:96:E0:52:E0:9B:EA:A9:A0:F8:88:9A:90:20:11:47:61:00:3C:42 ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT File type ASCII text, with very long lines (32065) Size 30 kB (30028 bytes) Hash 2f6b11a7e914718e0290410e85366fe9 69bb69e25ca7d5ef0935317584e6153f3fd9a88c 05b85d96f41fff14d8f608dad03ab71e2c1017c2da0914d7c59291bad7a54f8e HTTP Headers `GET /ajax/libs/jquery/2.2.4/jquery.min.js HTTP/1.1 Host: ajax.googleapis.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://pub-7c4437da171e413f991cd44cf10c6d3e.r2.dev/ Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache TE: trailers` HTTP/3 200 OK accept-ranges: bytes content-encoding: gzip access-control-allow-origin: * content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers cross-origin-resource-policy: cross-origin cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers" report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]} timing-allow-origin: * content-length: 30028 x-content-type-options: nosniff server: sffe x-xss-protection: 0 date: Thu, 07 Dec 2023 16:00:57 GMT expires: Fri, 06 Dec 2024 16:00:57 GMT cache-control: public, max-age=31536000, stale-while-revalidate=2592000 last-modified: Tue, 03 Mar 2020 19:15:00 GMT content-type: text/javascript; charset=UTF-8 vary: Accept-Encoding age: 97314 alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

	pub-7c4437da171e413f991cd44cf10c6d3e.r2.dev/images/faviconV2_002.png	104.18.3.35	404 Not Found	6.5 kB
URL GET HTTP/1.1 pub-7c4437da171e413f991cd44cf10c6d3e.r2.dev/images/faviconV2_002.png IP 104.18.3.35:443 ASN #13335 CLOUDFLARENET Requested by https://pub-7c4437da171e413f991cd44cf10c6d3e.r2.dev/index.html# Certificate IssuerLet's Encrypt Subject.r2.dev Fingerprint91:F0:8B:D3:AA:FC:86:18:F9:F2:29:EB:98:8C:D8:5A:3A:76:5C:CF ValidityWed, 11 Oct 2023 17:13:53 GMT - Tue, 09 Jan 2024 17:13:52 GMT File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (611) Size 6.5 kB (6476 bytes) Hash df3d48946e8d3f5a83608308edbb4b86 47b9c40c97abf2658df96b1c06109324e15e1a00 570a6631252b8a52df4de0e953ae77dbdf524dfc3637cda2840494a0d2b49499 HTTP Headers `GET /images/faviconV2_002.png HTTP/1.1 Host: pub-7c4437da171e413f991cd44cf10c6d3e.r2.dev User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://pub-7c4437da171e413f991cd44cf10c6d3e.r2.dev/index.html Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 404 Not Found Date: Fri, 08 Dec 2023 19:02:51 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive Vary: Accept-Encoding Server: cloudflare CF-RAY: 832743d8e8a3b4eb-OSL Content-Encoding: gzip`

	pub-7c4437da171e413f991cd44cf10c6d3e.r2.dev/PORTAL%20-%20GMAIL%20Mail_files/faviconV2_002.png	104.18.3.35	404 Not Found	6.5 kB
URL GET HTTP/1.1 pub-7c4437da171e413f991cd44cf10c6d3e.r2.dev/PORTAL%20-%20GMAIL%20Mail_files/faviconV2_002.png IP 104.18.3.35:443 ASN #13335 CLOUDFLARENET Requested by https://pub-7c4437da171e413f991cd44cf10c6d3e.r2.dev/index.html#0 Certificate IssuerLet's Encrypt Subject.r2.dev Fingerprint91:F0:8B:D3:AA:FC:86:18:F9:F2:29:EB:98:8C:D8:5A:3A:76:5C:CF ValidityWed, 11 Oct 2023 17:13:53 GMT - Tue, 09 Jan 2024 17:13:52 GMT File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (611) Size 6.5 kB (6481 bytes) Hash df3d48946e8d3f5a83608308edbb4b86 47b9c40c97abf2658df96b1c06109324e15e1a00 570a6631252b8a52df4de0e953ae77dbdf524dfc3637cda2840494a0d2b49499 HTTP Headers GET /PORTAL%20-%20GMAIL%20Mail_files/faviconV2_002.png HTTP/1.1 Host: pub-7c4437da171e413f991cd44cf10c6d3e.r2.dev User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://pub-7c4437da171e413f991cd44cf10c6d3e.r2.dev/index.html Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache `HTTP/1.1 404 Not Found Date: Fri, 08 Dec 2023 19:02:51 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive Vary: Accept-Encoding Server: cloudflare CF-RAY: 832743d92a70b50b-OSL Content-Encoding: gzip`

	pub-7c4437da171e413f991cd44cf10c6d3e.r2.dev/index.html	104.18.3.35		53 kB
URL pub-7c4437da171e413f991cd44cf10c6d3e.r2.dev/index.html IP 104.18.3.35:0 ASN #13335 CLOUDFLARENET Certificate IssuerLet's Encrypt Subject.r2.dev Fingerprint91:F0:8B:D3:AA:FC:86:18:F9:F2:29:EB:98:8C:D8:5A:3A:76:5C:CF ValidityWed, 11 Oct 2023 17:13:53 GMT - Tue, 09 Jan 2024 17:13:52 GMT File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (30833), with CRLF line terminators Size 53 kB (53426 bytes) Hash 3c1e320b5210780dd18efe51c6fcade0 40699b8bc75873b234651f60dba6535cbed34c08 3a9d5d1f5141dfa1ba2e4bba6116f504a77592b1b9c5ac0a66958d22b8936e87 HTTP Headers GET /index.html HTTP/1.1 Host: pub-7c4437da171e413f991cd44cf10c6d3e.r2.dev User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/*;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://pub-7c4437da171e413f991cd44cf10c6d3e.r2.dev/index.html Upgrade-Insecure-Requests: 1 Sec-Fetch-Dest: iframe Sec-Fetch-Mode: navigate Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache `HTTP/1.1 200 OK Date: Fri, 08 Dec 2023 19:02:51 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive ETag: W/"3c1e320b5210780dd18efe51c6fcade0" Last-Modified: Thu, 23 Nov 2023 16:36:41 GMT Vary: Accept-Encoding Server: cloudflare CF-RAY: 832743d95e52b51b-OSL Content-Encoding: gzip`

	cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.min.css	104.17.24.14	200 OK	5.6 kB
URL GET HTTP/3 cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.min.css IP 104.17.24.14:443 ASN #13335 CLOUDFLARENET Requested by https://pub-7c4437da171e413f991cd44cf10c6d3e.r2.dev/index.html# Certificate IssuerCloudflare, Inc. Subjectsni.cloudflaressl.com Fingerprint7A:EA:B9:09:71:70:6C:87:C9:D3:82:74:8A:7B:B4:60:E5:40:2D:8D ValidityMon, 03 Jul 2023 00:00:00 GMT - Tue, 02 Jul 2024 23:59:59 GMT File type ASCII text, with very long lines (30837) Size 5.6 kB (5631 bytes) Hash 269550530cc127b6aa5a35925a7de6ce 512c7d79033e3028a9be61b540cf1a6870c896f8 799aeb25cc0373fdee0e1b1db7ad6c2f6a0e058dfadaa3379689f583213190bd HTTP Headers `GET /ajax/libs/font-awesome/4.7.0/css/font-awesome.min.css HTTP/1.1 Host: cdnjs.cloudflare.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/css,/;q=0.1 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://pub-7c4437da171e413f991cd44cf10c6d3e.r2.dev/ Sec-Fetch-Dest: style Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache TE: trailers` HTTP/3 200 OK date: Fri, 08 Dec 2023 19:02:51 GMT content-type: text/css; charset=utf-8 content-length: 5631 access-control-allow-origin: * cache-control: public, max-age=30672000 content-encoding: br etag: "5eb03e5f-7918" last-modified: Mon, 04 May 2020 16:10:07 GMT cf-cdnjs-via: cfworker/kv cross-origin-resource-policy: cross-origin timing-allow-origin: * x-content-type-options: nosniff vary: Accept-Encoding cf-cache-status: HIT age: 5553 expires: Wed, 27 Nov 2024 19:02:51 GMT accept-ranges: bytes report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ddRzaaAa84WzkhLEt1Nfj3ZdX5pa85tMkvY933vWOdWMbIyaWfkLxsJVaePxDZyDZRFRsJMGvdMvDGgzX4vOOeBv%2BbtT%2Ftki00IfG%2BecB%2FJJC9wreWpk0RSQmAMgs62imAZOD1u3"}],"group":"cf-nel","max_age":604800} nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} strict-transport-security: max-age=15780000 server: cloudflare cf-ray: 832743da1e2656be-OSL alt-svc: h3=":443"; ma=86400

	www.w3schools.com/w3css/4/w3.css	192.229.133.221	200 OK	5.3 kB
URL GET HTTP/2 www.w3schools.com/w3css/4/w3.css IP 192.229.133.221:443 ASN #15133 EDGECAST Requested by https://pub-7c4437da171e413f991cd44cf10c6d3e.r2.dev/index.html#0 Certificate IssuerDigiCert Inc Subject.w3schools.com FingerprintC1:D8:A1:39:6A:5E:03:D0:6B:53:1B:C0:E7:E0:84:EB:D2:44:AE:A2 ValiditySun, 05 Mar 2023 00:00:00 GMT - Thu, 04 Apr 2024 23:59:59 GMT File type Unicode text, UTF-8 (with BOM) text Size 5.3 kB (5250 bytes) Hash ba0537e9574725096af97c27d7e54f76 bd46b47d74d344f435b5805114559d45979762d5 4a7611bc677873a0f87fe21727bc3a2a43f57a5ded3b10ce33a0f371a2e6030f HTTP Headers `GET /w3css/4/w3.css HTTP/1.1 Host: www.w3schools.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/css,/*;q=0.1 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://pub-7c4437da171e413f991cd44cf10c6d3e.r2.dev/ Sec-Fetch-Dest: style Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache TE: trailers` HTTP/2 200 OK content-encoding: gzip accept-ranges: bytes age: 8723 cache-control: public,max-age=14400,public content-security-policy: frame-ancestors 'self' https://mycourses.w3schools.com; content-type: text/css date: Fri, 08 Dec 2023 19:02:51 GMT etag: "02d5c15b629da1:0" last-modified: Fri, 08 Dec 2023 09:08:18 GMT server: ECS (ska/F716) vary: Accept-Encoding x-cache: HIT x-content-security-policy: frame-ancestors 'self' https://mycourses.w3schools.com; x-powered-by: ASP.NET content-length: 5250 X-Firefox-Spdy: h2

	ajax.googleapis.com/ajax/libs/jquery/2.2.4/jquery.min.js	142.250.74.106	200 OK	30 kB
URL GET HTTP/3 ajax.googleapis.com/ajax/libs/jquery/2.2.4/jquery.min.js IP 142.250.74.106:443 ASN #15169 GOOGLE Requested by https://pub-7c4437da171e413f991cd44cf10c6d3e.r2.dev/index.html#0 Certificate IssuerGoogle Trust Services LLC Subjectupload.video.google.com FingerprintCC:96:E0:52:E0:9B:EA:A9:A0:F8:88:9A:90:20:11:47:61:00:3C:42 ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT File type ASCII text, with very long lines (32065) Size 30 kB (30028 bytes) Hash 2f6b11a7e914718e0290410e85366fe9 69bb69e25ca7d5ef0935317584e6153f3fd9a88c 05b85d96f41fff14d8f608dad03ab71e2c1017c2da0914d7c59291bad7a54f8e HTTP Headers `GET /ajax/libs/jquery/2.2.4/jquery.min.js HTTP/1.1 Host: ajax.googleapis.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://pub-7c4437da171e413f991cd44cf10c6d3e.r2.dev/ Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache TE: trailers` HTTP/3 200 OK accept-ranges: bytes content-encoding: gzip access-control-allow-origin: * content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers cross-origin-resource-policy: cross-origin cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers" report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]} timing-allow-origin: * content-length: 30028 x-content-type-options: nosniff server: sffe x-xss-protection: 0 date: Thu, 07 Dec 2023 16:00:57 GMT expires: Fri, 06 Dec 2024 16:00:57 GMT cache-control: public, max-age=31536000, stale-while-revalidate=2592000 last-modified: Tue, 03 Mar 2020 19:15:00 GMT content-type: text/javascript; charset=UTF-8 vary: Accept-Encoding age: 97314 alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

	pub-7c4437da171e413f991cd44cf10c6d3e.r2.dev/images/faviconV2_002.png	104.18.3.35	404 Not Found	6.5 kB
URL GET HTTP/1.1 pub-7c4437da171e413f991cd44cf10c6d3e.r2.dev/images/faviconV2_002.png IP 104.18.3.35:443 ASN #13335 CLOUDFLARENET Requested by https://pub-7c4437da171e413f991cd44cf10c6d3e.r2.dev/index.html# Certificate IssuerLet's Encrypt Subject.r2.dev Fingerprint91:F0:8B:D3:AA:FC:86:18:F9:F2:29:EB:98:8C:D8:5A:3A:76:5C:CF ValidityWed, 11 Oct 2023 17:13:53 GMT - Tue, 09 Jan 2024 17:13:52 GMT File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (611) Size 6.5 kB (6476 bytes) Hash df3d48946e8d3f5a83608308edbb4b86 47b9c40c97abf2658df96b1c06109324e15e1a00 570a6631252b8a52df4de0e953ae77dbdf524dfc3637cda2840494a0d2b49499 HTTP Headers `GET /images/faviconV2_002.png HTTP/1.1 Host: pub-7c4437da171e413f991cd44cf10c6d3e.r2.dev User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://pub-7c4437da171e413f991cd44cf10c6d3e.r2.dev/index.html Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 404 Not Found Date: Fri, 08 Dec 2023 19:02:51 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive Vary: Accept-Encoding Server: cloudflare CF-RAY: 832743da1f13b51b-OSL Content-Encoding: gzip`

	pub-7c4437da171e413f991cd44cf10c6d3e.r2.dev/PORTAL%20-%20GMAIL%20Mail_files/faviconV2_002.png	104.18.3.35	404 Not Found	6.5 kB
URL GET HTTP/1.1 pub-7c4437da171e413f991cd44cf10c6d3e.r2.dev/PORTAL%20-%20GMAIL%20Mail_files/faviconV2_002.png IP 104.18.3.35:443 ASN #13335 CLOUDFLARENET Requested by https://pub-7c4437da171e413f991cd44cf10c6d3e.r2.dev/index.html#0 Certificate IssuerLet's Encrypt Subject.r2.dev Fingerprint91:F0:8B:D3:AA:FC:86:18:F9:F2:29:EB:98:8C:D8:5A:3A:76:5C:CF ValidityWed, 11 Oct 2023 17:13:53 GMT - Tue, 09 Jan 2024 17:13:52 GMT File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (611) Size 6.5 kB (6476 bytes) Hash df3d48946e8d3f5a83608308edbb4b86 47b9c40c97abf2658df96b1c06109324e15e1a00 570a6631252b8a52df4de0e953ae77dbdf524dfc3637cda2840494a0d2b49499 HTTP Headers GET /PORTAL%20-%20GMAIL%20Mail_files/faviconV2_002.png HTTP/1.1 Host: pub-7c4437da171e413f991cd44cf10c6d3e.r2.dev User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://pub-7c4437da171e413f991cd44cf10c6d3e.r2.dev/index.html Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache `HTTP/1.1 404 Not Found Date: Fri, 08 Dec 2023 19:02:51 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive Vary: Accept-Encoding Server: cloudflare CF-RAY: 832743da1a10b4eb-OSL Content-Encoding: gzip`

	pub-7c4437da171e413f991cd44cf10c6d3e.r2.dev/index.html	104.18.3.35		53 kB
URL pub-7c4437da171e413f991cd44cf10c6d3e.r2.dev/index.html IP 104.18.3.35:0 ASN #13335 CLOUDFLARENET Certificate IssuerLet's Encrypt Subject.r2.dev Fingerprint91:F0:8B:D3:AA:FC:86:18:F9:F2:29:EB:98:8C:D8:5A:3A:76:5C:CF ValidityWed, 11 Oct 2023 17:13:53 GMT - Tue, 09 Jan 2024 17:13:52 GMT File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (30833), with CRLF line terminators Size 53 kB (53320 bytes) Hash 3c1e320b5210780dd18efe51c6fcade0 40699b8bc75873b234651f60dba6535cbed34c08 3a9d5d1f5141dfa1ba2e4bba6116f504a77592b1b9c5ac0a66958d22b8936e87 HTTP Headers `GET /index.html HTTP/1.1 Host: pub-7c4437da171e413f991cd44cf10c6d3e.r2.dev User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://pub-7c4437da171e413f991cd44cf10c6d3e.r2.dev/index.html Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Date: Fri, 08 Dec 2023 19:02:51 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive ETag: W/"3c1e320b5210780dd18efe51c6fcade0" Last-Modified: Thu, 23 Nov 2023 16:36:41 GMT Vary: Accept-Encoding Server: cloudflare CF-RAY: 832743dd4b36b51b-OSL Content-Encoding: gzip`

	pub-7c4437da171e413f991cd44cf10c6d3e.r2.dev/index.html	104.18.3.35	200 OK	179 kB
URL GET HTTP/1.1 pub-7c4437da171e413f991cd44cf10c6d3e.r2.dev/index.html IP 104.18.3.35:443 ASN #13335 CLOUDFLARENET Requested by https://pub-7c4437da171e413f991cd44cf10c6d3e.r2.dev/index.html#0 Certificate IssuerLet's Encrypt Subject.r2.dev Fingerprint91:F0:8B:D3:AA:FC:86:18:F9:F2:29:EB:98:8C:D8:5A:3A:76:5C:CF ValidityWed, 11 Oct 2023 17:13:53 GMT - Tue, 09 Jan 2024 17:13:52 GMT File type Size 179 kB (178911 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers `GET /index.html HTTP/1.1 Host: pub-7c4437da171e413f991cd44cf10c6d3e.r2.dev User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://pub-7c4437da171e413f991cd44cf10c6d3e.r2.dev/index.html Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Date: Fri, 08 Dec 2023 19:02:51 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive ETag: W/"3c1e320b5210780dd18efe51c6fcade0" Last-Modified: Thu, 23 Nov 2023 16:36:41 GMT Vary: Accept-Encoding Server: cloudflare CF-RAY: 832743dd4b36b51b-OSL Content-Encoding: gzip`

	pub-7c4437da171e413f991cd44cf10c6d3e.r2.dev/index.html	104.18.3.35	200 OK	179 kB
URL User Request GET HTTP/1.1 pub-7c4437da171e413f991cd44cf10c6d3e.r2.dev/index.html IP 104.18.3.35:443 ASN #13335 CLOUDFLARENET Certificate IssuerLet's Encrypt Subject.r2.dev Fingerprint91:F0:8B:D3:AA:FC:86:18:F9:F2:29:EB:98:8C:D8:5A:3A:76:5C:CF ValidityWed, 11 Oct 2023 17:13:53 GMT - Tue, 09 Jan 2024 17:13:52 GMT File type Size 179 kB (178911 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers GET /index.html HTTP/1.1 Host: pub-7c4437da171e413f991cd44cf10c6d3e.r2.dev User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/*;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://pub-7c4437da171e413f991cd44cf10c6d3e.r2.dev/loading.html Upgrade-Insecure-Requests: 1 Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache `HTTP/1.1 200 OK Date: Fri, 08 Dec 2023 19:02:50 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive ETag: W/"3c1e320b5210780dd18efe51c6fcade0" Last-Modified: Thu, 23 Nov 2023 16:36:41 GMT Vary: Accept-Encoding Server: cloudflare CF-RAY: 832743d6ce8fb4eb-OSL Content-Encoding: gzip`

	pub-7c4437da171e413f991cd44cf10c6d3e.r2.dev/index.html	104.18.3.35	200 OK	179 kB
URL GET HTTP/1.1 pub-7c4437da171e413f991cd44cf10c6d3e.r2.dev/index.html IP 104.18.3.35:443 ASN #13335 CLOUDFLARENET Requested by https://pub-7c4437da171e413f991cd44cf10c6d3e.r2.dev/index.html#0 Certificate IssuerLet's Encrypt Subject.r2.dev Fingerprint91:F0:8B:D3:AA:FC:86:18:F9:F2:29:EB:98:8C:D8:5A:3A:76:5C:CF ValidityWed, 11 Oct 2023 17:13:53 GMT - Tue, 09 Jan 2024 17:13:52 GMT File type Size 179 kB (178911 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers GET /index.html HTTP/1.1 Host: pub-7c4437da171e413f991cd44cf10c6d3e.r2.dev User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/*;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://pub-7c4437da171e413f991cd44cf10c6d3e.r2.dev/index.html Upgrade-Insecure-Requests: 1 Sec-Fetch-Dest: iframe Sec-Fetch-Mode: navigate Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache `HTTP/1.1 200 OK Date: Fri, 08 Dec 2023 19:02:51 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive ETag: W/"3c1e320b5210780dd18efe51c6fcade0" Last-Modified: Thu, 23 Nov 2023 16:36:41 GMT Vary: Accept-Encoding Server: cloudflare CF-RAY: 832743d95e52b51b-OSL Content-Encoding: gzip`

Report Overview

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (3)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (21)

URL User Request GET HTTP/1.1

IP

ASN

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/3

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/3

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL User Request GET HTTP/1.1

IP

ASN

Certificate

File type

Size

Hash

HTTP Headers

URL

IP

ASN

Certificate

File type