| prod-cdn.wetransfer.net/packs/media/actiefgrotesque/ActiefGrotesque_W_Regular-1f437876.woff | 54.230.111.127 | 200 OK | 31 kB |
URL GET HTTP/2prod-cdn.wetransfer.net/packs/media/actiefgrotesque/ActiefGrotesque_W_Regular-1f437876.woff IP54.230.111.127:443
Requested byhttps://lingering-thunder-0229.nguyenchong9455.workers.dev/css/0.txt CertificateIssuerAmazon Subjectwetransfer.net Fingerprint0B:0D:65:82:74:97:1B:AD:60:D8:48:2B:7D:A7:00:EA:34:08:86:48 ValiditySun, 30 Jul 2023 00:00:00 GMT - Wed, 28 Aug 2024 23:59:59 GMT
File typeWeb Open Font Format, TrueType, length 31120, version 1.6554 Hash57cbbfdafc43e0deecc75a309dd042c6 b9cc2ff331b8520706de175f5b3fdba6731a9bfc a9117f16bdaa64c953b303bef951dfca6316ef59f1b7ca72d5b946b1d815f6a6
GET /packs/media/actiefgrotesque/ActiefGrotesque_W_Regular-1f437876.woff HTTP/1.1
Host: prod-cdn.wetransfer.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://lingering-thunder-0229.nguyenchong9455.workers.dev/
Origin: https://lingering-thunder-0229.nguyenchong9455.workers.dev
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: font/woff
content-length: 31120
date: Wed, 10 Apr 2024 21:58:06 GMT
last-modified: Thu, 21 Dec 2023 14:25:54 GMT
etag: "57cbbfdafc43e0deecc75a309dd042c6"
x-amz-server-side-encryption: AES256
cache-control: public, max-age=31536000
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 5bcfe2deda0bdbc6bade0af9b61602ca.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: kaMJPrAzRCdoRdRNSggUoY2eTRJOCtAdPkfARlWkz6oBPe6bzB3KPg==
age: 699066
X-Firefox-Spdy: h2
|
|
| cdnjs.cloudflare.com/ajax/libs/popper.js/1.12.9/umd/popper.min.js | 104.17.25.14 | 200 OK | 6.2 kB |
URL GET HTTP/2cdnjs.cloudflare.com/ajax/libs/popper.js/1.12.9/umd/popper.min.js IP104.17.25.14:443
Requested byhttps://lingering-thunder-0229.nguyenchong9455.workers.dev/css/0.txt CertificateIssuerCloudflare, Inc. Subjectsni.cloudflaressl.com Fingerprint7A:EA:B9:09:71:70:6C:87:C9:D3:82:74:8A:7B:B4:60:E5:40:2D:8D ValidityMon, 03 Jul 2023 00:00:00 GMT - Tue, 02 Jul 2024 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (19015) Hash70d3fda195602fe8b75e0097eed74dde c3b977aa4b8dfb69d651e07015031d385ded964b a52f7aa54d7bcaafa056ee0a050262dfc5694ae28dee8b4cac3429af37ff0d66
GET /ajax/libs/popper.js/1.12.9/umd/popper.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://lingering-thunder-0229.nguyenchong9455.workers.dev/
Origin: https://lingering-thunder-0229.nguyenchong9455.workers.dev
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 19 Apr 2024 00:09:11 GMT
content-type: application/javascript; charset=utf-8
content-length: 6157
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03fa9-4af4"
last-modified: Mon, 04 May 2020 16:15:37 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 2930235
expires: Wed, 09 Apr 2025 00:09:11 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=PEjshoOiR%2F4T9A3BZnLjgWU%2Bm384mV2khfj9AVgwZ3c6VRM6Ja2kygC3Rh%2BZ9w%2FfaR%2Ft7J7Xu2ZYJkJl1mhxRWE1Jp0%2FVbCqT6CxsavfMCj4YDVicVVLUHTw%2B8%2BoxtNkyIAzqciJ"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 8768aa14d99cb4f9-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| prod-cdn.wetransfer.net/packs/media/gt-super-wt/GT-Super-WT-Super-1b214df1.woff | 54.230.111.127 | 200 OK | 43 kB |
URL GET HTTP/2prod-cdn.wetransfer.net/packs/media/gt-super-wt/GT-Super-WT-Super-1b214df1.woff IP54.230.111.127:443
Requested byhttps://lingering-thunder-0229.nguyenchong9455.workers.dev/css/0.txt CertificateIssuerAmazon Subjectwetransfer.net Fingerprint0B:0D:65:82:74:97:1B:AD:60:D8:48:2B:7D:A7:00:EA:34:08:86:48 ValiditySun, 30 Jul 2023 00:00:00 GMT - Wed, 28 Aug 2024 23:59:59 GMT
File typeWeb Open Font Format, TrueType, length 43188, version 0.0 Hash55576599a2d772f9297c5036d355b1fb c52e4f9a59137105deb12a3de25ee7d5a15fd286 1e3d5d86432b9bfcdf25ce0e35fd23667cea86f6fa71fa920cd84abb70258f73
GET /packs/media/gt-super-wt/GT-Super-WT-Super-1b214df1.woff HTTP/1.1
Host: prod-cdn.wetransfer.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://lingering-thunder-0229.nguyenchong9455.workers.dev/
Origin: https://lingering-thunder-0229.nguyenchong9455.workers.dev
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: font/woff
content-length: 43188
date: Thu, 11 Apr 2024 18:24:22 GMT
last-modified: Thu, 21 Dec 2023 14:25:55 GMT
etag: "55576599a2d772f9297c5036d355b1fb"
x-amz-server-side-encryption: AES256
cache-control: public, max-age=31536000
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 5bcfe2deda0bdbc6bade0af9b61602ca.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: --nLKZxbrZon5selUsRGaH3Rx1fJzM5nxdNxM6YiA_2uS9cHPo5NmA==
age: 625490
X-Firefox-Spdy: h2
|
|
| prod-cdn.wetransfer.net/packs/media/actiefgrotesque/ActiefGrotesque_W_Medium-293e86f0.woff | 54.230.111.127 | 200 OK | 32 kB |
URL GET HTTP/2prod-cdn.wetransfer.net/packs/media/actiefgrotesque/ActiefGrotesque_W_Medium-293e86f0.woff IP54.230.111.127:443
Requested byhttps://lingering-thunder-0229.nguyenchong9455.workers.dev/css/0.txt CertificateIssuerAmazon Subjectwetransfer.net Fingerprint0B:0D:65:82:74:97:1B:AD:60:D8:48:2B:7D:A7:00:EA:34:08:86:48 ValiditySun, 30 Jul 2023 00:00:00 GMT - Wed, 28 Aug 2024 23:59:59 GMT
File typeWeb Open Font Format, TrueType, length 32124, version 1.6554 Hash868aedeefe7669e8a4f7196f7df5d058 45bd20ef2c6b717a2526efd98a01207979b2a623 d8700b022ef56752cd12ff224b3f409e84aeb8a43ac68ba052167096baf46555
GET /packs/media/actiefgrotesque/ActiefGrotesque_W_Medium-293e86f0.woff HTTP/1.1
Host: prod-cdn.wetransfer.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://lingering-thunder-0229.nguyenchong9455.workers.dev/
Origin: https://lingering-thunder-0229.nguyenchong9455.workers.dev
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: font/woff
content-length: 32124
date: Thu, 11 Apr 2024 11:43:40 GMT
last-modified: Thu, 21 Dec 2023 14:25:54 GMT
etag: "868aedeefe7669e8a4f7196f7df5d058"
x-amz-server-side-encryption: AES256
cache-control: public, max-age=31536000
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 5bcfe2deda0bdbc6bade0af9b61602ca.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: q9QJtckKYPU2NEO04yK5jhkO62jz2qp-JB1KiqiRqb3HTkExpzVi8A==
age: 649532
X-Firefox-Spdy: h2
|
|
| cdn.jsdelivr.net/npm/jquery.session@1.0.0/jquery.session.min.js | 151.101.1.229 | 200 OK | 983 B |
URL GET HTTP/2cdn.jsdelivr.net/npm/jquery.session@1.0.0/jquery.session.min.js IP151.101.1.229:443
Requested byhttps://lingering-thunder-0229.nguyenchong9455.workers.dev/css/0.txt CertificateIssuerGlobalSign nv-sa Subjectjsdelivr.net Fingerprint05:87:2C:BA:73:14:21:54:82:00:8B:AD:85:8F:E9:C6:4D:C7:66:09 ValidityWed, 27 Sep 2023 18:13:13 GMT - Mon, 28 Oct 2024 18:13:12 GMT
File typeASCII text, with very long lines (1993) Hashc0ac9c9487d60de96dc68dbb25bd8dd6 99419b0be4b85422ff84870e54dbd8a52dc6dab1 76ad6584ac5bdd459939dc7532fae7c2bdd8e22d773ff16d2306f42a1ffc569c
GET /npm/jquery.session@1.0.0/jquery.session.min.js HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://lingering-thunder-0229.nguyenchong9455.workers.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=31536000, s-maxage=31536000, immutable
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: application/javascript; charset=utf-8
x-jsd-version: 1.0.0
x-jsd-version-type: version
etag: W/"91d-mUGbC+S4VCL/hIcOVNvYpS3G2rE"
content-encoding: br
accept-ranges: bytes
date: Fri, 19 Apr 2024 00:09:11 GMT
age: 3879054
x-served-by: cache-fra-eddf8230025-FRA, cache-hel1410027-HEL
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 983
X-Firefox-Spdy: h2
|
|
| code.jquery.com/jquery-3.2.1.slim.min.js | 151.101.2.137 | 200 OK | 24 kB |
URL GET HTTP/2code.jquery.com/jquery-3.2.1.slim.min.js IP151.101.2.137:443
Requested byhttps://lingering-thunder-0229.nguyenchong9455.workers.dev/css/0.txt CertificateIssuerSectigo Limited Subject*.jquery.com FingerprintD2:19:0A:AD:CE:BB:9C:61:17:5D:29:4B:A2:54:E8:C6:91:B8:F9:8D ValidityTue, 11 Jul 2023 00:00:00 GMT - Sun, 14 Jul 2024 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (32012) Hash5f48fc77cac90c4778fa24ec9c57f37d 9e89d1515bc4c371b86f4cb1002fd8e377c1829f 9365920887b11b33a3dc4ba28a0f93951f200341263e3b9cefd384798e4be398
GET /jquery-3.2.1.slim.min.js HTTP/1.1
Host: code.jquery.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://lingering-thunder-0229.nguyenchong9455.workers.dev/
Origin: https://lingering-thunder-0229.nguyenchong9455.workers.dev
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Fri, 18 Oct 1991 12:00:00 GMT
etag: W/"28feccc0-10fdd"
cache-control: public, max-age=31536000, stale-while-revalidate=604800
access-control-allow-origin: *
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Fri, 19 Apr 2024 00:09:11 GMT
age: 955484
x-served-by: cache-lga21963-LGA, cache-hel1410022-HEL
x-cache: HIT, HIT
x-cache-hits: 40, 16412
x-timer: S1713485351.220480,VS0,VE0
vary: Accept-Encoding
content-length: 23856
X-Firefox-Spdy: h2
|
|
| lingering-thunder-0229.nguyenchong9455.workers.dev/css/css/runtimeapplication-bafdd8b86fd88bb4273d.js | 104.21.83.117 | 200 OK | 286 kB |
URL GET HTTP/3lingering-thunder-0229.nguyenchong9455.workers.dev/css/css/runtimeapplication-bafdd8b86fd88bb4273d.js IP104.21.83.117:443
Requested byhttps://lingering-thunder-0229.nguyenchong9455.workers.dev/css/0.txt CertificateIssuerGoogle Trust Services LLC Subjectnguyenchong9455.workers.dev Fingerprint4F:AF:F2:54:B4:8B:77:6C:2B:9C:3B:7E:1C:3B:60:8B:5A:24:A2:CD ValiditySat, 13 Apr 2024 20:58:01 GMT - Fri, 12 Jul 2024 20:58:00 GMT
File typeHTML document, ASCII text, with very long lines (65527) Size286 kB (286089 bytes) Hash557d3772c4c1e1564e8c734160d81602 d7f03f917d23363e7f5de2724abc43c9c054fea5 a0774701220e259dc394ed31b92bea4b60275ccf8cc1747145e72ef8d46b1623
Analyzer | Verdict | Alert | urlquery | phishing | Phishing - WeTransfer | OpenPhish | phishing | WeTransfer | PhishTank | phishing | WeTransfer |
GET /css/css/runtimeapplication-bafdd8b86fd88bb4273d.js HTTP/1.1
Host: lingering-thunder-0229.nguyenchong9455.workers.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lingering-thunder-0229.nguyenchong9455.workers.dev/css/0.txt
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 19 Apr 2024 00:09:11 GMT
content-type: text/html;charset=UTF-8
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=6BZ7s2ry9ADbzYVCgyMWjLrBnwXN5Vo5uW01qghdutxvJ4Qgo2nxwmZP%2BkaVghe589lsXniTnBfP%2BrmyRznaVMzAzCAzaJcF0ZXOSc53bBRt0Fb9W%2B6UNHbDLkvmkknDeyQO9tQbf1OnW6shu%2BnXMD%2BC0iiDbgG9xshx1162iom6FJeq4Q%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8768aa13cde2568a-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| lingering-thunder-0229.nguyenchong9455.workers.dev/packs/media/actiefgrotesque/ActiefGrotesque_W_Bd-1bdd99f9.woff | 104.21.83.117 | 200 OK | 2.0 MB |
URL GET HTTP/3lingering-thunder-0229.nguyenchong9455.workers.dev/packs/media/actiefgrotesque/ActiefGrotesque_W_Bd-1bdd99f9.woff IP104.21.83.117:443
Requested byhttps://lingering-thunder-0229.nguyenchong9455.workers.dev/css/0.txt CertificateIssuerGoogle Trust Services LLC Subjectnguyenchong9455.workers.dev Fingerprint4F:AF:F2:54:B4:8B:77:6C:2B:9C:3B:7E:1C:3B:60:8B:5A:24:A2:CD ValiditySat, 13 Apr 2024 20:58:01 GMT - Fri, 12 Jul 2024 20:58:00 GMT
File typeHTML document, ASCII text, with very long lines (65527) Size2.0 MB (2013081 bytes) Hash557d3772c4c1e1564e8c734160d81602 d7f03f917d23363e7f5de2724abc43c9c054fea5 a0774701220e259dc394ed31b92bea4b60275ccf8cc1747145e72ef8d46b1623
Analyzer | Verdict | Alert | urlquery | phishing | Phishing - WeTransfer | OpenPhish | phishing | WeTransfer | PhishTank | phishing | WeTransfer |
GET /packs/media/actiefgrotesque/ActiefGrotesque_W_Bd-1bdd99f9.woff HTTP/1.1
Host: lingering-thunder-0229.nguyenchong9455.workers.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Referer: https://lingering-thunder-0229.nguyenchong9455.workers.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 19 Apr 2024 00:09:12 GMT
content-type: text/html;charset=UTF-8
content-length: 2013081
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=EW9pPbHUvxVK%2FQsHmRiUCDdSfJh9q4C%2BlV%2FXLmLlCIK84rg5aQXAdbYQosxNlbVSgWcX76x6E5XTJ9N%2FWuRkoezOzwqitEiMlH%2FK0NBqmVIyxTh7DBnscXg8rHHRlFEzXspsck5JdDTb3VdqvB4BN1umZ5%2Fft2fFBuzLB45io5xqG1q5kg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8768aa1a1809568a-OSL
alt-svc: h3=":443"; ma=86400
|
|
| lingering-thunder-0229.nguyenchong9455.workers.dev/packs/media/images/globe-dd3d31e7.svg | 104.21.83.117 | 200 OK | 2.3 MB |
URL GET HTTP/3lingering-thunder-0229.nguyenchong9455.workers.dev/packs/media/images/globe-dd3d31e7.svg IP104.21.83.117:443
Requested byhttps://lingering-thunder-0229.nguyenchong9455.workers.dev/css/0.txt CertificateIssuerGoogle Trust Services LLC Subjectnguyenchong9455.workers.dev Fingerprint4F:AF:F2:54:B4:8B:77:6C:2B:9C:3B:7E:1C:3B:60:8B:5A:24:A2:CD ValiditySat, 13 Apr 2024 20:58:01 GMT - Fri, 12 Jul 2024 20:58:00 GMT
File typeHTML document, ASCII text, with very long lines (65527) Size2.3 MB (2269142 bytes) Hash557d3772c4c1e1564e8c734160d81602 d7f03f917d23363e7f5de2724abc43c9c054fea5 a0774701220e259dc394ed31b92bea4b60275ccf8cc1747145e72ef8d46b1623
Analyzer | Verdict | Alert | urlquery | phishing | Phishing - WeTransfer | OpenPhish | phishing | WeTransfer | PhishTank | phishing | WeTransfer |
GET /packs/media/images/globe-dd3d31e7.svg HTTP/1.1
Host: lingering-thunder-0229.nguyenchong9455.workers.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://lingering-thunder-0229.nguyenchong9455.workers.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 19 Apr 2024 00:09:11 GMT
content-type: text/html;charset=UTF-8
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=5KCRLvHE62br%2Bl6OL4dSeONulAqlsj14lUbvic9GxLZxuYhQkgvnR9vSxfiWnzDxiBIhzP9hX8CX%2BVsGsXMjHFULXiBNvtSls94zRWkXxLoHVUvAtJfaJK2Y8xQDifuPTN9Whgmz3KWsimqXoDooPZC4FVWPKyZqeFruhZM4VEiecIbvbA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8768aa19cfea568a-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| www.googletagmanager.com/gtm.js?id=GTM-5WF5RH4 | 142.250.74.168 | 200 OK | 66 kB |
URL GET HTTP/2www.googletagmanager.com/gtm.js?id=GTM-5WF5RH4 IP142.250.74.168:443
Requested byhttps://lingering-thunder-0229.nguyenchong9455.workers.dev/css/0.txt CertificateIssuerGoogle Trust Services LLC Subject*.google-analytics.com FingerprintBF:40:8C:8B:CB:69:1E:3F:E2:3B:B7:8A:8E:C0:D6:98:5F:81:FA:2D ValidityMon, 04 Mar 2024 06:35:45 GMT - Mon, 27 May 2024 06:35:44 GMT
File typeJavaScript source, ASCII text, with very long lines (44393) Hash00166a7e7fee8e9358e1235c31c73c8d d35475c16d31913372e9725eee5bf5290fb18c2a 53e4ebc851f9c0f64fb019a4d290a2817280729fe4ce53588efd3a5a5eee8993
GET /gtm.js?id=GTM-5WF5RH4 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://lingering-thunder-0229.nguyenchong9455.workers.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Fri, 19 Apr 2024 00:09:12 GMT
expires: Fri, 19 Apr 2024 00:09:12 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 65972
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| prod-cdn.wetransfer.net/packs/media/images/apple-touch-icon-180x180-precomposed-fd272b89.png | 54.230.111.127 | 200 OK | 16 kB |
URL GET HTTP/2prod-cdn.wetransfer.net/packs/media/images/apple-touch-icon-180x180-precomposed-fd272b89.png IP54.230.111.127:443
Requested byhttps://lingering-thunder-0229.nguyenchong9455.workers.dev/css/0.txt CertificateIssuerAmazon Subjectwetransfer.net Fingerprint0B:0D:65:82:74:97:1B:AD:60:D8:48:2B:7D:A7:00:EA:34:08:86:48 ValiditySun, 30 Jul 2023 00:00:00 GMT - Wed, 28 Aug 2024 23:59:59 GMT
File typePNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced Hashbc5b180f2d0001298a5ea3691e3fc623 edf2c67a5cef4efd081e5e6e4bc027e72be45593 b8c5bf2f80790d4abbe7fd5dca0bcf5c3eeaa4e23b1b35c8854a3fdb5c26b1e9
GET /packs/media/images/apple-touch-icon-180x180-precomposed-fd272b89.png HTTP/1.1
Host: prod-cdn.wetransfer.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://lingering-thunder-0229.nguyenchong9455.workers.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 16208
date: Fri, 22 Dec 2023 22:58:57 GMT
last-modified: Thu, 21 Dec 2023 14:25:55 GMT
etag: "bc5b180f2d0001298a5ea3691e3fc623"
x-amz-server-side-encryption: AES256
cache-control: public, max-age=31536000
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 d9fb4c3794a085bb4ee2c5798c2cb1b8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: imkFUf5AAXj-jDK6HtMdlvyEgIwlnBtBHPl1b54NUaCHnTMnk4MkhA==
age: 10199417
X-Firefox-Spdy: h2
|
|
| prod-cdn.wetransfer.net/packs/media/images/favicon-a34a7465.ico | 54.230.111.127 | 200 OK | 42 kB |
URL GET HTTP/2prod-cdn.wetransfer.net/packs/media/images/favicon-a34a7465.ico IP54.230.111.127:443
Requested byhttps://lingering-thunder-0229.nguyenchong9455.workers.dev/css/0.txt CertificateIssuerAmazon Subjectwetransfer.net Fingerprint0B:0D:65:82:74:97:1B:AD:60:D8:48:2B:7D:A7:00:EA:34:08:86:48 ValiditySun, 30 Jul 2023 00:00:00 GMT - Wed, 28 Aug 2024 23:59:59 GMT
File typeMS Windows icon resource - 5 icons, 16x16, 32 bits/pixel, 24x24, 32 bits/pixel Hash692e1c7339c359b6412f059c9c9a0474 e7c1a53dca16b7664880e5b8a92524cf9a47fb62 d12161435ace47c6883360e08466508593325f134c1852b1d0e6e75d5f76adda
GET /packs/media/images/favicon-a34a7465.ico HTTP/1.1
Host: prod-cdn.wetransfer.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://lingering-thunder-0229.nguyenchong9455.workers.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/vnd.microsoft.icon
content-length: 41566
date: Wed, 27 Mar 2024 01:09:01 GMT
last-modified: Thu, 21 Dec 2023 14:25:56 GMT
etag: "692e1c7339c359b6412f059c9c9a0474"
x-amz-server-side-encryption: AES256
cache-control: public, max-age=31536000
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 d9fb4c3794a085bb4ee2c5798c2cb1b8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: GEbBWWGbPCIykrSMtV-DKfBWKxc-iOU6jCd15s3fiMkX8slASuktQg==
age: 1983613
X-Firefox-Spdy: h2
|
|
| lingering-thunder-0229.nguyenchong9455.workers.dev/packs/media/actiefgrotesque/ActiefGrotesque_W_Medium-293e86f0.woff | 104.21.83.117 | 200 OK | 2.0 MB |
URL GET HTTP/3lingering-thunder-0229.nguyenchong9455.workers.dev/packs/media/actiefgrotesque/ActiefGrotesque_W_Medium-293e86f0.woff IP104.21.83.117:443
Requested byhttps://lingering-thunder-0229.nguyenchong9455.workers.dev/css/0.txt CertificateIssuerGoogle Trust Services LLC Subjectnguyenchong9455.workers.dev Fingerprint4F:AF:F2:54:B4:8B:77:6C:2B:9C:3B:7E:1C:3B:60:8B:5A:24:A2:CD ValiditySat, 13 Apr 2024 20:58:01 GMT - Fri, 12 Jul 2024 20:58:00 GMT
File typeHTML document, ASCII text, with very long lines (65527) Size2.0 MB (2013081 bytes) Hash557d3772c4c1e1564e8c734160d81602 d7f03f917d23363e7f5de2724abc43c9c054fea5 a0774701220e259dc394ed31b92bea4b60275ccf8cc1747145e72ef8d46b1623
Analyzer | Verdict | Alert | urlquery | phishing | Phishing - WeTransfer | OpenPhish | phishing | WeTransfer | PhishTank | phishing | WeTransfer |
GET /packs/media/actiefgrotesque/ActiefGrotesque_W_Medium-293e86f0.woff HTTP/1.1
Host: lingering-thunder-0229.nguyenchong9455.workers.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Referer: https://lingering-thunder-0229.nguyenchong9455.workers.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 19 Apr 2024 00:09:12 GMT
content-type: text/html;charset=UTF-8
content-length: 2013081
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=vNKGz2GKhZJqAad%2BwoGbyLuWvyh2P41Do083FwyXhFGcCjXoo19xDBJHbYloJgfaXOrIOi5nwXo2JNeFqAbCITCCXM%2FaQAMgqi%2BXbAlV2vG4r7ZM0%2BAOhbjONBjhc5W6eZLWvpz2GvwypiGMdnmHZlxXssw5qy73huyno59ZbMMY8LQ9Zg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8768aa1a3813568a-OSL
alt-svc: h3=":443"; ma=86400
|
|
| lingering-thunder-0229.nguyenchong9455.workers.dev/css/css/sp.js | 104.21.83.117 | 200 OK | 262 kB |
URL GET HTTP/3lingering-thunder-0229.nguyenchong9455.workers.dev/css/css/sp.js IP104.21.83.117:443
Requested byhttps://lingering-thunder-0229.nguyenchong9455.workers.dev/css/0.txt CertificateIssuerGoogle Trust Services LLC Subjectnguyenchong9455.workers.dev Fingerprint4F:AF:F2:54:B4:8B:77:6C:2B:9C:3B:7E:1C:3B:60:8B:5A:24:A2:CD ValiditySat, 13 Apr 2024 20:58:01 GMT - Fri, 12 Jul 2024 20:58:00 GMT
File typeHTML document, ASCII text, with very long lines (65527) Size262 kB (261574 bytes) Hash557d3772c4c1e1564e8c734160d81602 d7f03f917d23363e7f5de2724abc43c9c054fea5 a0774701220e259dc394ed31b92bea4b60275ccf8cc1747145e72ef8d46b1623
Analyzer | Verdict | Alert | urlquery | phishing | Phishing - WeTransfer | OpenPhish | phishing | WeTransfer | PhishTank | phishing | WeTransfer |
GET /css/css/sp.js HTTP/1.1
Host: lingering-thunder-0229.nguyenchong9455.workers.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://lingering-thunder-0229.nguyenchong9455.workers.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 19 Apr 2024 00:09:11 GMT
content-type: text/html;charset=UTF-8
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=r3Vi1wQx0ZFzCTrSFrk75Jp268lo89knRioPBuBGxc1nnO20jqJ3FmEdlfHs9V3%2BfMYisD7W7MrFUHshQQ4vvz7WXqtMcQ338PDCkExW%2BYk3BZILhJYoomBUMZNKP0RUL7MSDxnx0QhdXTLsnOXHr76yoyO12ga%2BG8EGtzJTzP67Ezgyow%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8768aa141dff568a-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| prod-cdn.wetransfer.net/packs/media/transfer_window/email-verification-lock-e6ed8c56.svg | 54.230.111.127 | 200 OK | 8.5 kB |
URL GET HTTP/2prod-cdn.wetransfer.net/packs/media/transfer_window/email-verification-lock-e6ed8c56.svg IP54.230.111.127:443
Requested byhttps://lingering-thunder-0229.nguyenchong9455.workers.dev/css/0.txt CertificateIssuerAmazon Subjectwetransfer.net Fingerprint0B:0D:65:82:74:97:1B:AD:60:D8:48:2B:7D:A7:00:EA:34:08:86:48 ValiditySun, 30 Jul 2023 00:00:00 GMT - Wed, 28 Aug 2024 23:59:59 GMT
File typegzip compressed data, from Unix Hash06238a99b72fb24019f25068a4a189c9 8f5a3aaf9a69fcc55cef512a2afa21fe604aa755 b3c4b2e8677bc2fe372971ad74b8eca61a62c4f6526c8f98479eb82b5950f01c
GET /packs/media/transfer_window/email-verification-lock-e6ed8c56.svg HTTP/1.1
Host: prod-cdn.wetransfer.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://lingering-thunder-0229.nguyenchong9455.workers.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/svg+xml
date: Thu, 04 Jan 2024 14:30:13 GMT
last-modified: Thu, 21 Dec 2023 14:26:03 GMT
etag: W/"207f0c93fc997af575b8b9ad9db8777c"
x-amz-server-side-encryption: AES256
cache-control: public, max-age=31536000
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 d9fb4c3794a085bb4ee2c5798c2cb1b8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: cmCJqrjCZchQmWs8LN84Eh6tmTUsjNrgWLrEgI9Jc6YEMrMLgLyMTQ==
age: 9106739
X-Firefox-Spdy: h2
|
|
| lingering-thunder-0229.nguyenchong9455.workers.dev/css/css/gtm.js | 104.21.83.117 | 200 OK | 260 kB |
URL GET HTTP/3lingering-thunder-0229.nguyenchong9455.workers.dev/css/css/gtm.js IP104.21.83.117:443
Requested byhttps://lingering-thunder-0229.nguyenchong9455.workers.dev/css/0.txt CertificateIssuerGoogle Trust Services LLC Subjectnguyenchong9455.workers.dev Fingerprint4F:AF:F2:54:B4:8B:77:6C:2B:9C:3B:7E:1C:3B:60:8B:5A:24:A2:CD ValiditySat, 13 Apr 2024 20:58:01 GMT - Fri, 12 Jul 2024 20:58:00 GMT
File typeHTML document, ASCII text, with very long lines (65527) Size260 kB (260503 bytes) Hash557d3772c4c1e1564e8c734160d81602 d7f03f917d23363e7f5de2724abc43c9c054fea5 a0774701220e259dc394ed31b92bea4b60275ccf8cc1747145e72ef8d46b1623
Analyzer | Verdict | Alert | urlquery | phishing | Phishing - WeTransfer | OpenPhish | phishing | WeTransfer | PhishTank | phishing | WeTransfer |
GET /css/css/gtm.js HTTP/1.1
Host: lingering-thunder-0229.nguyenchong9455.workers.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://lingering-thunder-0229.nguyenchong9455.workers.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 19 Apr 2024 00:09:11 GMT
content-type: text/html;charset=UTF-8
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=GIIp2gSHAcpJg%2FwWw5IcbTRVPp3%2BaQih6EKu0KuL1lsPHJrYs%2BzPOwfWSQu9h%2F1uZ9JOySFZiAgSdcHce1bwlzylcb9y1emErvtFsjgOm0c5R4%2F0MS3UvhIx%2Fv50Ng4%2BYw68F3SpBjd5QN2YzhOpxs1BSWn2S7w8ahlcejOplZL%2B8A5d4A%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8768aa13fdfa568a-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| stackpath.bootstrapcdn.com/bootstrap/4.1.3/js/bootstrap.min.js | 104.18.10.207 | 200 OK | 26 kB |
URL GET HTTP/3stackpath.bootstrapcdn.com/bootstrap/4.1.3/js/bootstrap.min.js IP104.18.10.207:443
Requested byhttps://lingering-thunder-0229.nguyenchong9455.workers.dev/css/0.txt CertificateIssuerGoogle Trust Services LLC Subjectbootstrapcdn.com Fingerprint57:B4:25:B9:9C:88:A1:A3:3D:F7:31:74:02:E4:D1:E0:0A:F5:11:63 ValidityWed, 27 Mar 2024 00:22:09 GMT - Tue, 25 Jun 2024 00:22:08 GMT
File typeJavaScript source, ASCII text, with very long lines (50758) Hash67176c242e1bdc20603c878dee836df3 27a71b00383d61ef3c489326b3564d698fc1227c 56c12a125b021d21a69e61d7190cefa168d6c28ce715265cea1b3b0112d169c4
GET /bootstrap/4.1.3/js/bootstrap.min.js HTTP/1.1
Host: stackpath.bootstrapcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://lingering-thunder-0229.nguyenchong9455.workers.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 19 Apr 2024 00:09:12 GMT
content-type: application/javascript; charset=utf-8
vary: Accept-Encoding
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: DE
access-control-allow-origin: *
cache-control: public, max-age=31919000
last-modified: Mon, 25 Jan 2021 22:04:06 GMT
cdn-cachedat: 11/15/2021 23:30:00
cdn-proxyver: 1.0
cdn-requestpullcode: 200
cdn-requestpullsuccess: True
cdn-edgestorageid: 723
cdn-status: 200
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
cdn-requestid: a35b0179a28ed953258d0fb41376a09c
cdn-cache: HIT
cf-cache-status: HIT
age: 1399953
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 8768aa1bcf4656bf-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| d19ptbnuzhibkh.cloudfront.net/2.10.2/sp.js | 54.230.241.28 | 200 OK | 30 kB |
URL GET HTTP/2d19ptbnuzhibkh.cloudfront.net/2.10.2/sp.js IP54.230.241.28:443
Requested byhttps://lingering-thunder-0229.nguyenchong9455.workers.dev/css/0.txt CertificateIssuerAmazon Subject*.cloudfront.net FingerprintFA:21:45:DC:4D:94:03:A3:09:77:51:78:4A:21:F2:C5:6D:94:BE:52 ValidityTue, 10 Oct 2023 00:00:00 GMT - Thu, 19 Sep 2024 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (64917) Hash69c0026af7f2b8f2eed23f2f5fc5c68f a0e872c89db6991d03932756d43480e40eb38628 d9a9b2a15666ace13ce304e0a34baaa8a82ce5bc9d01480872869c9871dc552c
GET /2.10.2/sp.js HTTP/1.1
Host: d19ptbnuzhibkh.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://lingering-thunder-0229.nguyenchong9455.workers.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript
content-length: 29895
date: Sun, 07 Apr 2024 09:53:15 GMT
last-modified: Tue, 30 Apr 2019 15:14:08 GMT
etag: "c7b65b3f4e8761897af9a3ca5d76682e"
cache-control: max-age=315360000
content-encoding: gzip
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 07d5d44815808d5d5a6f43984a987698.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: S1-582az8K-3WZ8AiaW0jZg76F8rHsy3hcxuEo2pGp5MnxB0vwfLbg==
age: 1001759
X-Firefox-Spdy: h2
|
|
| lingering-thunder-0229.nguyenchong9455.workers.dev/css/css/advertising-4aee5180207621f94abeb04df0d9e7e52f4496bf16a55f712.js | 104.21.83.117 | 200 OK | 522 kB |
URL GET HTTP/3lingering-thunder-0229.nguyenchong9455.workers.dev/css/css/advertising-4aee5180207621f94abeb04df0d9e7e52f4496bf16a55f712.js IP104.21.83.117:443
Requested byhttps://lingering-thunder-0229.nguyenchong9455.workers.dev/css/0.txt CertificateIssuerGoogle Trust Services LLC Subjectnguyenchong9455.workers.dev Fingerprint4F:AF:F2:54:B4:8B:77:6C:2B:9C:3B:7E:1C:3B:60:8B:5A:24:A2:CD ValiditySat, 13 Apr 2024 20:58:01 GMT - Fri, 12 Jul 2024 20:58:00 GMT
File typeHTML document, ASCII text, with very long lines (65527) Size522 kB (521913 bytes) Hash557d3772c4c1e1564e8c734160d81602 d7f03f917d23363e7f5de2724abc43c9c054fea5 a0774701220e259dc394ed31b92bea4b60275ccf8cc1747145e72ef8d46b1623
Analyzer | Verdict | Alert | urlquery | phishing | Phishing - WeTransfer | OpenPhish | phishing | WeTransfer | PhishTank | phishing | WeTransfer |
GET /css/css/advertising-4aee5180207621f94abeb04df0d9e7e52f4496bf16a55f712.js HTTP/1.1
Host: lingering-thunder-0229.nguyenchong9455.workers.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://lingering-thunder-0229.nguyenchong9455.workers.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 19 Apr 2024 00:09:11 GMT
content-type: text/html;charset=UTF-8
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=LxT5dOOllJ4ySFU8kdpWVhjSoiFGaN1VY%2BgF7zNm8jp75jsXMcgYuPu%2B44WC0C5NOOxsXZTcswuFhNUbAm%2BnMnAFAsCsEenO93Rik4D2jise4MhMpX7QJ9ODj9%2FcQrLhremdYBDvZOxh%2BoeEotyOkU8W%2BOcl9Xb0ZPBCnkRsI%2FlSGbFHkg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8768aa142e0a568a-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| lingering-thunder-0229.nguyenchong9455.workers.dev/css/css/application-c2b6f877fed288c2431f.js | 104.21.83.117 | 200 OK | 2.0 MB |
URL GET HTTP/3lingering-thunder-0229.nguyenchong9455.workers.dev/css/css/application-c2b6f877fed288c2431f.js IP104.21.83.117:443
Requested byhttps://lingering-thunder-0229.nguyenchong9455.workers.dev/css/0.txt CertificateIssuerGoogle Trust Services LLC Subjectnguyenchong9455.workers.dev Fingerprint4F:AF:F2:54:B4:8B:77:6C:2B:9C:3B:7E:1C:3B:60:8B:5A:24:A2:CD ValiditySat, 13 Apr 2024 20:58:01 GMT - Fri, 12 Jul 2024 20:58:00 GMT
Size2.0 MB (2013081 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer | Verdict | Alert | urlquery | phishing | Phishing - WeTransfer | OpenPhish | phishing | WeTransfer | PhishTank | phishing | WeTransfer |
GET /css/css/application-c2b6f877fed288c2431f.js HTTP/1.1
Host: lingering-thunder-0229.nguyenchong9455.workers.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lingering-thunder-0229.nguyenchong9455.workers.dev/css/0.txt
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 19 Apr 2024 00:09:11 GMT
content-type: text/html;charset=UTF-8
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=pEBDsBonoPSTZP%2BRJpnDfA0iIVg4VxEzVqi5stU%2BdpUYbdSIyLNBcIM72bsYAPSB%2Fig6tv9GHTUscglc4Rz6eVnq2T4zOiD%2B07UrHJgWuiCKgcSBBJG%2BZoWEzd5lp2l1w71Yfg8%2BTq3m%2BubhhxNaO1zrHXNVQhTqjdM6qeJwL6Csw7CTGQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8768aa13cde3568a-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| lingering-thunder-0229.nguyenchong9455.workers.dev/css/css/vendor-ef8fd9ca3a0295622111.js | 104.21.83.117 | 200 OK | 2.0 MB |
URL GET HTTP/3lingering-thunder-0229.nguyenchong9455.workers.dev/css/css/vendor-ef8fd9ca3a0295622111.js IP104.21.83.117:443
Requested byhttps://lingering-thunder-0229.nguyenchong9455.workers.dev/css/0.txt CertificateIssuerGoogle Trust Services LLC Subjectnguyenchong9455.workers.dev Fingerprint4F:AF:F2:54:B4:8B:77:6C:2B:9C:3B:7E:1C:3B:60:8B:5A:24:A2:CD ValiditySat, 13 Apr 2024 20:58:01 GMT - Fri, 12 Jul 2024 20:58:00 GMT
Size2.0 MB (2013081 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer | Verdict | Alert | urlquery | phishing | Phishing - WeTransfer | OpenPhish | phishing | WeTransfer | PhishTank | phishing | WeTransfer |
GET /css/css/vendor-ef8fd9ca3a0295622111.js HTTP/1.1
Host: lingering-thunder-0229.nguyenchong9455.workers.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://lingering-thunder-0229.nguyenchong9455.workers.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 19 Apr 2024 00:09:12 GMT
content-type: text/html;charset=UTF-8
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=kCEg8OqBY26RcEQT%2Bz3zuH7wLZE6W6QGkOOIy1KMT4PlNBWfyFyJcLpdTn6XtV2mJLOuCXJVvbbiZggvccXVXEuGtC06l5A7PRUUgRtfqIPW1PIk%2BdRPR6fmcU2%2B%2BB44o5waFXfNOInL0uwQOW8ZJH94int8qNEkIAagVzigO%2FtED4eB4A%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8768aa1bc8a4568a-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| lingering-thunder-0229.nguyenchong9455.workers.dev/css/css/analytics.js | 104.21.83.117 | 200 OK | 2.0 MB |
URL GET HTTP/3lingering-thunder-0229.nguyenchong9455.workers.dev/css/css/analytics.js IP104.21.83.117:443
Requested byhttps://lingering-thunder-0229.nguyenchong9455.workers.dev/css/0.txt CertificateIssuerGoogle Trust Services LLC Subjectnguyenchong9455.workers.dev Fingerprint4F:AF:F2:54:B4:8B:77:6C:2B:9C:3B:7E:1C:3B:60:8B:5A:24:A2:CD ValiditySat, 13 Apr 2024 20:58:01 GMT - Fri, 12 Jul 2024 20:58:00 GMT
Size2.0 MB (2013081 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer | Verdict | Alert | urlquery | phishing | Phishing - WeTransfer | OpenPhish | phishing | WeTransfer | PhishTank | phishing | WeTransfer |
GET /css/css/analytics.js HTTP/1.1
Host: lingering-thunder-0229.nguyenchong9455.workers.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://lingering-thunder-0229.nguyenchong9455.workers.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 19 Apr 2024 00:09:11 GMT
content-type: text/html;charset=UTF-8
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ymmWdY%2B1JF1NlP0M4%2FLfEJeUj5fhmPyxWchzLWN1%2FvUYdAkpVtU4aQBgWUX39TtA6fqiyjruoiLhZdG1rngIpiFiFcOJtbqyH4kflSCsScFyIX1GtfzT2o4oRZaMs84%2F%2BTSH0CFlJc%2Fjzcn9aPJ1%2BLYz5DbfUxl%2B8owPX3LA4HZOI5Uyig%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8768aa13fdf4568a-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| lingering-thunder-0229.nguyenchong9455.workers.dev/css/css/0.txt | 104.21.83.117 | 200 OK | 2.0 MB |
URL GET HTTP/3lingering-thunder-0229.nguyenchong9455.workers.dev/css/css/0.txt IP104.21.83.117:443
Requested byhttps://lingering-thunder-0229.nguyenchong9455.workers.dev/css/0.txt CertificateIssuerGoogle Trust Services LLC Subjectnguyenchong9455.workers.dev Fingerprint4F:AF:F2:54:B4:8B:77:6C:2B:9C:3B:7E:1C:3B:60:8B:5A:24:A2:CD ValiditySat, 13 Apr 2024 20:58:01 GMT - Fri, 12 Jul 2024 20:58:00 GMT
Size2.0 MB (2013081 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer | Verdict | Alert | urlquery | phishing | Phishing - WeTransfer | OpenPhish | phishing | WeTransfer | PhishTank | phishing | WeTransfer |
GET /css/css/0.txt HTTP/1.1
Host: lingering-thunder-0229.nguyenchong9455.workers.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://lingering-thunder-0229.nguyenchong9455.workers.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 19 Apr 2024 00:09:11 GMT
content-type: text/html;charset=UTF-8
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Fn9AUTOCzC%2FrlOh70dCwTr2lZ%2BezUP%2FWVNHjGGGtC0%2Fs9RYyQs5rSpfnXptpEeWadv2j3kZ0CpEZ7DZ4pLlr4eWye4uBLcS2H97zqu1TDqgK7ay1cPUZ7M1D5YHovt2HnVZ9%2BQoSU5X0apvGRM3tj8f2S%2BrQI0kLHCzAgZTVRJRaTXoVpA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8768aa142e0c568a-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| lingering-thunder-0229.nguyenchong9455.workers.dev/css/css/0.txt | 104.21.83.117 | 200 OK | 2.0 MB |
URL GET HTTP/3lingering-thunder-0229.nguyenchong9455.workers.dev/css/css/0.txt IP104.21.83.117:443
Requested byhttps://lingering-thunder-0229.nguyenchong9455.workers.dev/css/0.txt CertificateIssuerGoogle Trust Services LLC Subjectnguyenchong9455.workers.dev Fingerprint4F:AF:F2:54:B4:8B:77:6C:2B:9C:3B:7E:1C:3B:60:8B:5A:24:A2:CD ValiditySat, 13 Apr 2024 20:58:01 GMT - Fri, 12 Jul 2024 20:58:00 GMT
Size2.0 MB (2013081 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer | Verdict | Alert | urlquery | phishing | Phishing - WeTransfer | OpenPhish | phishing | WeTransfer | PhishTank | phishing | WeTransfer |
GET /css/css/0.txt HTTP/1.1
Host: lingering-thunder-0229.nguyenchong9455.workers.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://lingering-thunder-0229.nguyenchong9455.workers.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 19 Apr 2024 00:09:12 GMT
content-type: text/html;charset=UTF-8
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=GfKPW6dLe8%2B4u3QFNAhc3B8DWDkeCQdBiKBBnKpkMnxNSQ8DnfMd8gYp1x20tnqEFaZqJO0O8b4J4bt6RBk5TDqZYWsoeuFbyjGFiBZlUPzurWUv%2BvklyIbJgq8nTm5vA2fTAAgqDGxG2sL1Su5RO75JZ8YhMnqWvTOnHDgWjEOwWATXrA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8768aa1bc8a5568a-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| ajax.googleapis.luchifab.com/ajax.googleapis/ajax/libs/jquery/2.2.4/jquery.min.js | 0.0.0.0 | | 0 B |
URL GET ajax.googleapis.luchifab.com/ajax.googleapis/ajax/libs/jquery/2.2.4/jquery.min.js IP0.0.0.0:0
Requested byhttps://lingering-thunder-0229.nguyenchong9455.workers.dev/css/0.txt
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ajax.googleapis/ajax/libs/jquery/2.2.4/jquery.min.js HTTP/1.1
Host: ajax.googleapis.luchifab.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lingering-thunder-0229.nguyenchong9455.workers.dev/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
|
|
| lingering-thunder-0229.nguyenchong9455.workers.dev/css/css/vendor-ef8fd9ca3a0295622111.js | 104.21.83.117 | 200 OK | 2.0 MB |
URL GET HTTP/3lingering-thunder-0229.nguyenchong9455.workers.dev/css/css/vendor-ef8fd9ca3a0295622111.js IP104.21.83.117:443
Requested byhttps://lingering-thunder-0229.nguyenchong9455.workers.dev/css/0.txt CertificateIssuerGoogle Trust Services LLC Subjectnguyenchong9455.workers.dev Fingerprint4F:AF:F2:54:B4:8B:77:6C:2B:9C:3B:7E:1C:3B:60:8B:5A:24:A2:CD ValiditySat, 13 Apr 2024 20:58:01 GMT - Fri, 12 Jul 2024 20:58:00 GMT
Size2.0 MB (2013081 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer | Verdict | Alert | urlquery | phishing | Phishing - WeTransfer | OpenPhish | phishing | WeTransfer | PhishTank | phishing | WeTransfer |
GET /css/css/vendor-ef8fd9ca3a0295622111.js HTTP/1.1
Host: lingering-thunder-0229.nguyenchong9455.workers.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lingering-thunder-0229.nguyenchong9455.workers.dev/css/0.txt
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 19 Apr 2024 00:09:11 GMT
content-type: text/html;charset=UTF-8
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=CybASjOuECLhFAtJthcRmX8Wm3g2I%2FY7GUvzuc4%2BP3QOFVERO4irbgiumRX9hphubCeaRgpZD5TJI5OrY%2BLAheLaqZxV6DnQGRYMs3UqudE58ZSC1oyuaMdyo4xp5b6bcvh8k%2BXJ9%2FwsNS%2FgqNhFnJlORIzL5WLkw5gSX1Yl94wlv9UknQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8768aa13dde7568a-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| lingering-thunder-0229.nguyenchong9455.workers.dev/packs/media/actiefgrotesque/ActiefGrotesque_W_Regular-1f437876.woff | 104.21.83.117 | 200 OK | 2.0 MB |
URL GET HTTP/3lingering-thunder-0229.nguyenchong9455.workers.dev/packs/media/actiefgrotesque/ActiefGrotesque_W_Regular-1f437876.woff IP104.21.83.117:443
Requested byhttps://lingering-thunder-0229.nguyenchong9455.workers.dev/css/0.txt CertificateIssuerGoogle Trust Services LLC Subjectnguyenchong9455.workers.dev Fingerprint4F:AF:F2:54:B4:8B:77:6C:2B:9C:3B:7E:1C:3B:60:8B:5A:24:A2:CD ValiditySat, 13 Apr 2024 20:58:01 GMT - Fri, 12 Jul 2024 20:58:00 GMT
Size2.0 MB (2013081 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer | Verdict | Alert | urlquery | phishing | Phishing - WeTransfer | OpenPhish | phishing | WeTransfer | PhishTank | phishing | WeTransfer |
GET /packs/media/actiefgrotesque/ActiefGrotesque_W_Regular-1f437876.woff HTTP/1.1
Host: lingering-thunder-0229.nguyenchong9455.workers.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Referer: https://lingering-thunder-0229.nguyenchong9455.workers.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 19 Apr 2024 00:09:12 GMT
content-type: text/html;charset=UTF-8
content-length: 2013081
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ttC86%2Fw3Frrizmus0XcqMmFTqWIN6g9SoLPxzUiPa%2FrIXUruqG9R4nwfUtLhZwn1r73HRUk%2FmFa1c46TWbQ6d1HvelV4KNbF%2BrsUpCKZPjOSd4GPZExAgNf17%2FFXNy163mGfV8uSDUr%2Bw5KWICWJ0LJXTKylm3rI4iKIuhrD02Lm1LkiAg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8768aa1a180b568a-OSL
alt-svc: h3=":443"; ma=86400
|
|
| lingering-thunder-0229.nguyenchong9455.workers.dev/css/css/gtm_002.js | 104.21.83.117 | 200 OK | 2.0 MB |
URL GET HTTP/3lingering-thunder-0229.nguyenchong9455.workers.dev/css/css/gtm_002.js IP104.21.83.117:443
Requested byhttps://lingering-thunder-0229.nguyenchong9455.workers.dev/css/0.txt CertificateIssuerGoogle Trust Services LLC Subjectnguyenchong9455.workers.dev Fingerprint4F:AF:F2:54:B4:8B:77:6C:2B:9C:3B:7E:1C:3B:60:8B:5A:24:A2:CD ValiditySat, 13 Apr 2024 20:58:01 GMT - Fri, 12 Jul 2024 20:58:00 GMT
Size2.0 MB (2013081 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer | Verdict | Alert | urlquery | phishing | Phishing - WeTransfer | OpenPhish | phishing | WeTransfer | PhishTank | phishing | WeTransfer |
GET /css/css/gtm_002.js HTTP/1.1
Host: lingering-thunder-0229.nguyenchong9455.workers.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://lingering-thunder-0229.nguyenchong9455.workers.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 19 Apr 2024 00:09:11 GMT
content-type: text/html;charset=UTF-8
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=NfEPNQuCVy1gxAv%2BQOq5BE3dgXeoEbYO%2FubmYoIKb%2BhRY0I3SX%2BIBigIZoDL%2FMBnd94MoHABXGNXd29zL3PWI8aYmaXwExWfXGnZXkXCBtS0ocsks8YxvQo66AuG%2F9LXgCNXoJF%2Bv694n4NcvPKx8Vv0BHigjR4f%2BuxmvxSFzHYvPCOCgQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8768aa13fdf5568a-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| lingering-thunder-0229.nguyenchong9455.workers.dev/css/css/en-de295c39cb769807d9fa.js | 104.21.83.117 | 200 OK | 2.0 MB |
URL GET HTTP/3lingering-thunder-0229.nguyenchong9455.workers.dev/css/css/en-de295c39cb769807d9fa.js IP104.21.83.117:443
Requested byhttps://lingering-thunder-0229.nguyenchong9455.workers.dev/css/0.txt CertificateIssuerGoogle Trust Services LLC Subjectnguyenchong9455.workers.dev Fingerprint4F:AF:F2:54:B4:8B:77:6C:2B:9C:3B:7E:1C:3B:60:8B:5A:24:A2:CD ValiditySat, 13 Apr 2024 20:58:01 GMT - Fri, 12 Jul 2024 20:58:00 GMT
Size2.0 MB (2013081 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer | Verdict | Alert | urlquery | phishing | Phishing - WeTransfer | OpenPhish | phishing | WeTransfer | PhishTank | phishing | WeTransfer |
GET /css/css/en-de295c39cb769807d9fa.js HTTP/1.1
Host: lingering-thunder-0229.nguyenchong9455.workers.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://lingering-thunder-0229.nguyenchong9455.workers.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 19 Apr 2024 00:09:11 GMT
content-type: text/html;charset=UTF-8
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=D99YBiJ1yjV277TnnzfGwxHeF5mYb0V0ZCVB3%2FcSTG8nRVPSt1GIb920fC83EDWQKvM4NwDrcC0PtwRfxczZpKV2dUOZE%2F8K7G%2FxgFdBmnIIjgCb%2BGsD6rCigZla4VLD5I3c7lfXR5%2FNQWGw0OZfGtbf3JiqJNVmEvu3FxVif15lg2W9TA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8768aa142e08568a-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| ajax.googleapis.com/ajax/libs/jquery/2.2.4/jquery.min.js | 216.58.207.202 | 200 OK | 86 kB |
URL GET HTTP/2ajax.googleapis.com/ajax/libs/jquery/2.2.4/jquery.min.js IP216.58.207.202:443
Requested byhttps://lingering-thunder-0229.nguyenchong9455.workers.dev/css/0.txt CertificateIssuerGoogle Trust Services LLC Subjectupload.video.google.com Fingerprint47:5A:64:7D:9F:47:34:07:31:91:97:F7:04:42:7A:D5:EA:AD:07:4E ValidityMon, 04 Mar 2024 07:16:44 GMT - Mon, 27 May 2024 07:16:43 GMT
File typeJavaScript source, ASCII text, with very long lines (32065) Hash2f6b11a7e914718e0290410e85366fe9 69bb69e25ca7d5ef0935317584e6153f3fd9a88c 05b85d96f41fff14d8f608dad03ab71e2c1017c2da0914d7c59291bad7a54f8e
GET /ajax/libs/jquery/2.2.4/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://lingering-thunder-0229.nguyenchong9455.workers.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 30028
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 18 Apr 2024 17:38:23 GMT
expires: Fri, 18 Apr 2025 17:38:23 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
age: 23448
last-modified: Tue, 03 Mar 2020 19:15:00 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| lingering-thunder-0229.nguyenchong9455.workers.dev/css/css/application-c2b6f877fed288c2431f.js | 104.21.83.117 | 200 OK | 2.0 MB |
URL GET HTTP/3lingering-thunder-0229.nguyenchong9455.workers.dev/css/css/application-c2b6f877fed288c2431f.js IP104.21.83.117:443
Requested byhttps://lingering-thunder-0229.nguyenchong9455.workers.dev/css/0.txt CertificateIssuerGoogle Trust Services LLC Subjectnguyenchong9455.workers.dev Fingerprint4F:AF:F2:54:B4:8B:77:6C:2B:9C:3B:7E:1C:3B:60:8B:5A:24:A2:CD ValiditySat, 13 Apr 2024 20:58:01 GMT - Fri, 12 Jul 2024 20:58:00 GMT
Size2.0 MB (2013081 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer | Verdict | Alert | urlquery | phishing | Phishing - WeTransfer | OpenPhish | phishing | WeTransfer | PhishTank | phishing | WeTransfer |
GET /css/css/application-c2b6f877fed288c2431f.js HTTP/1.1
Host: lingering-thunder-0229.nguyenchong9455.workers.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://lingering-thunder-0229.nguyenchong9455.workers.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 19 Apr 2024 00:09:12 GMT
content-type: text/html;charset=UTF-8
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Z93qVaMBDN%2BMgXWqZe0HL5ABBYYVv74VJ3qIc26MKk8ND%2BcHjO2OaBPnHMWiz4fdjtlK6PtZkZ2uIKdai%2BY59jmRaYRLNOUYoCh1ULPO1rN8jLRtjwWUHeWNq8prAZpwpFTfX4S5VI56ZrZUPAXoqryEx9ik3%2FbkKTKRYtn7HXR5HzLXdA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8768aa1bc8a3568a-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| lingering-thunder-0229.nguyenchong9455.workers.dev/css/css/bat.js | 104.21.83.117 | 200 OK | 2.0 MB |
URL GET HTTP/3lingering-thunder-0229.nguyenchong9455.workers.dev/css/css/bat.js IP104.21.83.117:443
Requested byhttps://lingering-thunder-0229.nguyenchong9455.workers.dev/css/0.txt CertificateIssuerGoogle Trust Services LLC Subjectnguyenchong9455.workers.dev Fingerprint4F:AF:F2:54:B4:8B:77:6C:2B:9C:3B:7E:1C:3B:60:8B:5A:24:A2:CD ValiditySat, 13 Apr 2024 20:58:01 GMT - Fri, 12 Jul 2024 20:58:00 GMT
Size2.0 MB (2013081 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer | Verdict | Alert | urlquery | phishing | Phishing - WeTransfer | OpenPhish | phishing | WeTransfer | PhishTank | phishing | WeTransfer |
GET /css/css/bat.js HTTP/1.1
Host: lingering-thunder-0229.nguyenchong9455.workers.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://lingering-thunder-0229.nguyenchong9455.workers.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 19 Apr 2024 00:09:11 GMT
content-type: text/html;charset=UTF-8
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=j91fPXeD10T6Rry5yOTrJzKKMym6MNRjdgtdALC%2FeoJcfpvMGCCR6e%2BE9PPF8zTwUO5z4UMqWfQ%2BTkZ4PAT0GUpajd6e6CnF5v%2Bs5RyxCW5ZP%2Fgri%2BlDu7owemBpX36F0mbSlrPX20jU0rO4rZwowkqxBMGWQziD37kZrDO%2Bq1Ay109mCw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8768aa13edee568a-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| lingering-thunder-0229.nguyenchong9455.workers.dev/css/css/en-0d65947306b8b68f172b.js | 104.21.83.117 | 200 OK | 2.0 MB |
URL GET HTTP/3lingering-thunder-0229.nguyenchong9455.workers.dev/css/css/en-0d65947306b8b68f172b.js IP104.21.83.117:443
Requested byhttps://lingering-thunder-0229.nguyenchong9455.workers.dev/css/0.txt CertificateIssuerGoogle Trust Services LLC Subjectnguyenchong9455.workers.dev Fingerprint4F:AF:F2:54:B4:8B:77:6C:2B:9C:3B:7E:1C:3B:60:8B:5A:24:A2:CD ValiditySat, 13 Apr 2024 20:58:01 GMT - Fri, 12 Jul 2024 20:58:00 GMT
Size2.0 MB (2013081 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer | Verdict | Alert | urlquery | phishing | Phishing - WeTransfer | OpenPhish | phishing | WeTransfer | PhishTank | phishing | WeTransfer |
GET /css/css/en-0d65947306b8b68f172b.js HTTP/1.1
Host: lingering-thunder-0229.nguyenchong9455.workers.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://lingering-thunder-0229.nguyenchong9455.workers.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 19 Apr 2024 00:09:11 GMT
content-type: text/html;charset=UTF-8
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=phRy8eFJ67HNIDAPKE6VZ9K7%2BFYZBSLC%2BNGGvk40bO7NB18%2B%2F0%2BwAyt4%2FaoxEyhaNiflwr4QUsBz5byOKUOThgiOXFu34sLNTdoD%2BPQmc2C1oDa2qrvWEa7KgBUcPir4ACGkL9d7ne4IqRS0odFE098LQ3ZK5KzVsKd2BnjPwyksRQYL5w%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8768aa141e01568a-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| lingering-thunder-0229.nguyenchong9455.workers.dev/css/css/fbevents.js | 104.21.83.117 | 200 OK | 2.0 MB |
URL GET HTTP/3lingering-thunder-0229.nguyenchong9455.workers.dev/css/css/fbevents.js IP104.21.83.117:443
Requested byhttps://lingering-thunder-0229.nguyenchong9455.workers.dev/css/0.txt CertificateIssuerGoogle Trust Services LLC Subjectnguyenchong9455.workers.dev Fingerprint4F:AF:F2:54:B4:8B:77:6C:2B:9C:3B:7E:1C:3B:60:8B:5A:24:A2:CD ValiditySat, 13 Apr 2024 20:58:01 GMT - Fri, 12 Jul 2024 20:58:00 GMT
Size2.0 MB (2013081 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer | Verdict | Alert | urlquery | phishing | Phishing - WeTransfer | OpenPhish | phishing | WeTransfer | PhishTank | phishing | WeTransfer |
GET /css/css/fbevents.js HTTP/1.1
Host: lingering-thunder-0229.nguyenchong9455.workers.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://lingering-thunder-0229.nguyenchong9455.workers.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 19 Apr 2024 00:09:11 GMT
content-type: text/html;charset=UTF-8
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=gJ8jhaVnXoU9Mov7QEXaaeERIfBayeBxPsBfz%2FeXhx5NIKWUs8kABT6u8QleF4ukvNnJVbF1BqwKwQm0fjo%2BAkPJgoAziOzqEMaB6d0o7gdXo0vVJgLx5fzFaDxw4MkL6w1pMi2bVoGzdVpD7pA5TCdQHG7U7Bm4gb8T67h8NQJeZGtIOQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8768aa13ede9568a-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| lingering-thunder-0229.nguyenchong9455.workers.dev/css/css/wallpaper-59e18dcf37d4cc5f163b.js | 104.21.83.117 | 200 OK | 2.0 MB |
URL GET HTTP/3lingering-thunder-0229.nguyenchong9455.workers.dev/css/css/wallpaper-59e18dcf37d4cc5f163b.js IP104.21.83.117:443
Requested byhttps://lingering-thunder-0229.nguyenchong9455.workers.dev/css/0.txt CertificateIssuerGoogle Trust Services LLC Subjectnguyenchong9455.workers.dev Fingerprint4F:AF:F2:54:B4:8B:77:6C:2B:9C:3B:7E:1C:3B:60:8B:5A:24:A2:CD ValiditySat, 13 Apr 2024 20:58:01 GMT - Fri, 12 Jul 2024 20:58:00 GMT
Size2.0 MB (2013081 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer | Verdict | Alert | urlquery | phishing | Phishing - WeTransfer | OpenPhish | phishing | WeTransfer | PhishTank | phishing | WeTransfer |
GET /css/css/wallpaper-59e18dcf37d4cc5f163b.js HTTP/1.1
Host: lingering-thunder-0229.nguyenchong9455.workers.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://lingering-thunder-0229.nguyenchong9455.workers.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 19 Apr 2024 00:09:11 GMT
content-type: text/html;charset=UTF-8
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=EUCqsbM9Nwju7Bly6fLrihQG18GUP5Bj6e1jLCmHM9Yti9LXKKPt80txQtKYlRyRnm%2FmVyHHZa3vxYODmTt07EctvgmcyWHLOFnSeiyahCs0oMDi5yOE7c4r%2BUMmX%2FCG5lmPn3YgWMhDpfxV1mrT%2BqT1ydHxpKD11NB5J4kFaQR7C86wLA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8768aa13fdf8568a-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| lingering-thunder-0229.nguyenchong9455.workers.dev/css/0.txt | 104.21.83.117 | 200 OK | 2.0 MB |
URL User Request GET HTTP/2lingering-thunder-0229.nguyenchong9455.workers.dev/css/0.txt IP104.21.83.117:443
CertificateIssuerGoogle Trust Services LLC Subjectnguyenchong9455.workers.dev Fingerprint4F:AF:F2:54:B4:8B:77:6C:2B:9C:3B:7E:1C:3B:60:8B:5A:24:A2:CD ValiditySat, 13 Apr 2024 20:58:01 GMT - Fri, 12 Jul 2024 20:58:00 GMT
Size2.0 MB (2013081 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer | Verdict | Alert | urlquery | phishing | Phishing - WeTransfer | OpenPhish | phishing | WeTransfer | PhishTank | phishing | WeTransfer |
GET /css/0.txt HTTP/1.1
Host: lingering-thunder-0229.nguyenchong9455.workers.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 19 Apr 2024 00:09:10 GMT
content-type: text/html;charset=UTF-8
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=QLXSe9GxGamXIxvypaM9CGeCvA%2FdjDFDbdjwc4XRXjDh9cm%2F9lXi7g2z7J%2FaDx2TebEdGhS32cHEuQ%2BL%2FaoV6AsSOKUw%2Fn8RkbOdRuwJ%2FsFkj%2B%2BzAVrgETp1fWl%2BwMAfdE%2BKT%2Feu1NkF1DlHzpv2FfLxs4sKKI%2F5MKkXEQg00gqOEkpz3g%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8768aa0ffe0bb52d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| lingering-thunder-0229.nguyenchong9455.workers.dev/css/css/17116643.js | 104.21.83.117 | 200 OK | 2.0 MB |
URL GET HTTP/3lingering-thunder-0229.nguyenchong9455.workers.dev/css/css/17116643.js IP104.21.83.117:443
Requested byhttps://lingering-thunder-0229.nguyenchong9455.workers.dev/css/0.txt CertificateIssuerGoogle Trust Services LLC Subjectnguyenchong9455.workers.dev Fingerprint4F:AF:F2:54:B4:8B:77:6C:2B:9C:3B:7E:1C:3B:60:8B:5A:24:A2:CD ValiditySat, 13 Apr 2024 20:58:01 GMT - Fri, 12 Jul 2024 20:58:00 GMT
Size2.0 MB (2013081 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer | Verdict | Alert | urlquery | phishing | Phishing - WeTransfer | OpenPhish | phishing | WeTransfer | PhishTank | phishing | WeTransfer |
GET /css/css/17116643.js HTTP/1.1
Host: lingering-thunder-0229.nguyenchong9455.workers.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://lingering-thunder-0229.nguyenchong9455.workers.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 19 Apr 2024 00:09:11 GMT
content-type: text/html;charset=UTF-8
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=M%2B4pxx%2BNtYyc6KZX5gvPlwjDpC6zPUFP0keliQXRfQk9kieSTdutrH95plVwBNnTOKrTf2U3OnSM1N4B7DtEYGvEqIaw%2FBIvSZm2KEzUp%2FA0SMBvUdME65BPccvkugXzDpvVak%2B8yHoLjjI3AcNoBYD9ldPKehzTBBvJRVgSH9p0Zs4sNQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8768aa13fdf9568a-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| maxcdn.bootstrapcdn.com/bootstrap/4.0.0/js/bootstrap.min.js | 104.18.10.207 | 200 OK | 49 kB |
URL GET HTTP/2maxcdn.bootstrapcdn.com/bootstrap/4.0.0/js/bootstrap.min.js IP104.18.10.207:443
Requested byhttps://lingering-thunder-0229.nguyenchong9455.workers.dev/css/0.txt CertificateIssuerGoogle Trust Services LLC Subjectbootstrapcdn.com Fingerprint57:B4:25:B9:9C:88:A1:A3:3D:F7:31:74:02:E4:D1:E0:0A:F5:11:63 ValidityWed, 27 Mar 2024 00:22:09 GMT - Tue, 25 Jun 2024 00:22:08 GMT
File typeJavaScript source, ASCII text, with very long lines (48664) Hash14d449eb8876fa55e1ef3c2cc52b0c17 a9545831803b1359cfeed47e3b4d6bae68e40e99 e7ed36ceee5450b4243bbc35188afabdfb4280c7c57597001de0ed167299b01b
GET /bootstrap/4.0.0/js/bootstrap.min.js HTTP/1.1
Host: maxcdn.bootstrapcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://lingering-thunder-0229.nguyenchong9455.workers.dev/
Origin: https://lingering-thunder-0229.nguyenchong9455.workers.dev
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 19 Apr 2024 00:09:11 GMT
content-type: application/javascript; charset=utf-8
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: DE
vary: Accept-Encoding
access-control-allow-origin: *
cache-control: public, max-age=31919000
content-encoding: br
etag: W/"14d449eb8876fa55e1ef3c2cc52b0c17"
last-modified: Mon, 25 Jan 2021 22:04:04 GMT
cdn-cachedat: 03/18/2024 12:46:36
cdn-proxyver: 1.04
cdn-requestpullcode: 200
cdn-requestpullsuccess: True
cdn-edgestorageid: 1048
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
cdn-status: 200
cdn-requestid: f79feda6c4e9612994404e3f59b85cc4
cdn-cache: HIT
cf-cache-status: HIT
age: 370034
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 8768aa14fec70b61-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|