Report - blue-salad-05d3.rabahebedgua.workers.dev/

Report Overview

Submitted URL
blue-salad-05d3.rabahebedgua.workers.dev/
IP
188.114.97.1
ASN
#13335 CLOUDFLARENET
Submitted
2024-04-26 17:45:49
Access
public
Website Title
OurTime.com - The 50+ Single Network
Final URL
blue-salad-05d3.rabahebedgua.workers.dev/39e5359c-fb99-457e-937b-e94bf566989d
Tags
suspicious
urlquery detections
Suspicious - Suspicious Javascript code

Detections

urlquery
2
Network Intrusion Detection
0
Threat Detection Systems
8

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
code.jquery.com	634	2005-12-10	2012-05-21	2024-04-26	434 B	31 kB	151.101.194.137
codesandbox.io	95492	2016-11-23	2017-04-04	2024-04-24	2.0 kB	58 kB	104.18.33.149
api.rename-service0.workers.dev	unknown	2019-02-08	2022-05-30	2024-01-20	6.6 kB	310 kB	172.67.209.83
imgs.rename-service0.workers.dev	unknown	2019-02-08	2022-05-30	2024-04-16	412 B	784 B	0.0.0.0
blue-salad-05d3.rabahebedgua.workers.dev	unknown	2019-02-08	2023-01-25	2024-02-26	972 B	2.5 MB	188.114.97.1

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

Scan Date	Severity	Indicator	Alert
2024-04-26	medium	blue-salad-05d3.rabahebedgua.workers.dev/	InterActiveCorp
2024-04-26	medium	blue-salad-05d3.rabahebedgua.workers.dev/	InterActiveCorp

PhishTank

Scan Date	Severity	Indicator	Alert
2023-02-23	medium	blue-salad-05d3.rabahebedgua.workers.dev/	Other
2023-02-23	medium	blue-salad-05d3.rabahebedgua.workers.dev/favicon.ico	Other

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (23)

	URL	Size	First Seen	Last Seen
	unknown	1.4 MB	2023-05-10	2024-04-26
Pretty Introduced by scriptElement Embedded in HTML false Observations First Seen2023-05-10 18:40:41 Last Seen2024-04-26 19:45:51 Times Seen12 Hash 2433a5ca1a880696215043347462c140 798114b0c3fabb1d3cffdc969e3fc5b5633ee078 d747bfd44855de3611bc106d19d8ecaa05deaeace72c9550eac55efcdb6c6409 Loading...

	blue-salad-05d3.rabahebedgua.workers.dev/39e5359c-fb99-457e-937b-e94bf566989d	1.9 MB	2023-05-10	2024-04-26
Pretty URL blue-salad-05d3.rabahebedgua.workers.dev/39e5359c-fb99-457e-937b-e94bf566989d IP 0.0.0.0 ASN #0 Introduced by scriptElement Embedded in HTML true Observations First Seen2023-05-10 18:40:41 Last Seen2024-04-26 19:45:51 Times Seen12 Hash fcadf6a74161bcd3555ff942427fb155 3956f36ccb3fe45687c494d7006486a17856d072 b6b3c1b0a16a739d8cce9d3bf14df7b0850f46959c74873a0fa3c32d6a591922 Loading...

	unknown	1.5 kB	2023-05-10	2024-04-28
Pretty Introduced by scriptElement Embedded in HTML false Observations First Seen2023-05-10 18:40:41 Last Seen2024-04-28 19:06:21 Times Seen484 Hash 11d4882e2c9207a2998fd737302eaafa 0946b9cee3915f4e3c384f63ac5a04dcd902d294 8b736921036313b1adc9d28b472b2442794040d119b7597b23d54adade6df76a Loading...

	unknown	1.1 kB	2023-05-10	2024-04-28
Pretty Introduced by scriptElement Embedded in HTML false Observations First Seen2023-05-10 18:40:41 Last Seen2024-04-28 19:06:21 Times Seen484 Hash c10675b49d02e056f4f34df873b1178f 3bebe1c97a6b59904664869180a1a6f158f0e6ab 0af2480d899de74c4c0a619cde8e1a29d450f44d8d02ff048c64dd943ebf0254 Loading...

	unknown	34 B	2023-04-11	2024-05-07
Pretty Introduced by Function Embedded in HTML false Observations First Seen2023-04-11 21:16:40 Last Seen2024-05-07 06:24:26 Times Seen76298 Hash 572cb94037fffc2a0a53b465972e15f1 0d679b041a7c1ca45cc99e2d229fc2b86762838d 6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35 Loading...

	unknown	127 B	2023-05-10	2024-04-28
Pretty Introduced by scriptElement Embedded in HTML false Observations First Seen2023-05-10 18:40:41 Last Seen2024-04-28 19:06:21 Times Seen484 Hash f0325abf945aabc90a9974bbca58398d 1113927bc5bfcb3dedf2c94a76d265902bace38e 22f54eaa2ea0bdb02d20b92a3c2c72366d3336a9edec513a669d03b6bcfbcdbf Loading...

	unknown	169 kB	2023-05-10	2024-04-26
Pretty Introduced by scriptElement Embedded in HTML false Observations First Seen2023-05-10 18:40:41 Last Seen2024-04-26 19:45:51 Times Seen12 Hash ade57c1fe60a9f004a4306ad0256fe6b 9bb044b35fe6ec2533e56af7adfcce70a33151ce 285f2cb27a48bedebe31fd41de144135c1215d536da3a8465e40649d894b4280 Loading...

	unknown	1.4 MB	2023-05-10	2024-04-26
Pretty Introduced by scriptElement Embedded in HTML false Observations First Seen2023-05-10 18:40:41 Last Seen2024-04-26 19:45:51 Times Seen12 Hash b91f416ee3d20d771d764f9a1df877de b0295cacd727ede64143a401658d1fdb8b536e4c 3f9460f5eb11a1a4737fcaee6e143af8ea8012ac7a3c1d553906a06c8ec9f460 Loading...

	unknown	1.3 kB	2023-05-10	2024-04-28
Pretty Introduced by scriptElement Embedded in HTML false Observations First Seen2023-05-10 18:40:41 Last Seen2024-04-28 19:06:21 Times Seen485 Hash b0855b6503bb1b3cb5121e30ef78e8aa 5c25088ae897f6669fa0ecd4d5b1de9d0e261d6b 93ad295e66f3aed9ba6b8c62c2652587b95ba19d2cd0e0550fea13e5b5916a39 Loading...

	api.rename-service0.workers.dev/js?id=UA-1817027-45	96 kB	2023-03-13	2024-05-03
Pretty URL api.rename-service0.workers.dev/js?id=UA-1817027-45 IP 172.67.209.83 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-13 13:52:40 Last Seen2024-05-03 07:55:05 Times Seen972 Hash c1277eaf2fba47836bedee41d16ed8d0 716f0753108d0704e98e9bfa0672851b1cf79519 2cfb61c5b4464a49bf1a1867ab3c06ad790468ab0d6b3dec415a5929b20dac85 Loading...

	api.rename-service0.workers.dev/jquery-migrate-3.3.1.min.js	11 kB	2023-03-08	2024-05-03
Pretty URL api.rename-service0.workers.dev/jquery-migrate-3.3.1.min.js IP 172.67.209.83 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-08 02:41:29 Last Seen2024-05-03 07:55:05 Times Seen1026 Hash 68f90fa1b7a532a073bd613f011a9c97 a4fd8d2e4556e6348d067212da590d56dc30b8a5 90a8d6a27a26f746b4b263102f4fe120e956d99e3789325aafc7d6b7ca0ff0e4 Loading...

	unknown	469 kB	2023-05-10	2024-04-26
Pretty Introduced by scriptElement Embedded in HTML false Observations First Seen2023-05-10 18:40:41 Last Seen2024-04-26 19:45:51 Times Seen12 Hash e046ced6028b0b11e504d190653b7fa8 9f1c8041935484c24326092caced04ed9b838457 a5d4a45c28cdbea0d3edce05a7dc4f6e1a5c97adbf8c2eb8f675c2e568a9db2e Loading...

	unknown	278 B	2023-05-10	2024-04-28
Pretty Introduced by scriptElement Embedded in HTML false Observations First Seen2023-05-10 18:40:41 Last Seen2024-04-28 19:06:21 Times Seen486 Hash d176264d994fbc767fa254757a66468a 4319b0f0236541d74ffd4fba0b236cffcb8c3a11 52eeb0e6768b1de1c84eea820ce123eeac8aeb207c1f35608ca43ab814bf6801 Loading...

	api.rename-service0.workers.dev/otSDKStub.js	19 kB	2023-03-08	2024-05-03
Pretty URL api.rename-service0.workers.dev/otSDKStub.js IP 172.67.209.83 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-08 15:08:15 Last Seen2024-05-03 07:55:05 Times Seen998 Hash 9bd02f97086983b13a1ba0f2ace23a34 b7da87ca35222ded535d85d1a2d8ed33c734f2c3 11b947e74a7ba8f1d433b84ab7a719799ec0662a9035a8b4a2ab4d7d1eb2d681 Loading...

	api.rename-service0.workers.dev/jquery-3.5.1.min.js	90 kB	2023-03-07	2024-05-05
Pretty URL api.rename-service0.workers.dev/jquery-3.5.1.min.js IP 172.67.209.83 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:03:09 Last Seen2024-05-05 13:39:10 Times Seen14250 Hash b61aa6e2d68d21b3546b5b418bf0e9c3 9c1398f0de4c869dacb1c9ab1a8cc327f5421ff7 f36844906ad2309877aae3121b87fb15b9e09803cb4c333adc7e1e35ac92e14b Loading...

		Size	First Seen	Last Seen
	#1 Eval - 9e925e9341b490bfd3b4c4ca3b0c1ef2	4 B	2023-03-07	2024-05-07
Pretty Observations First Seen2023-03-07 01:03:43 Last Seen2024-05-07 06:38:38 Times Seen351598 Hash 9e925e9341b490bfd3b4c4ca3b0c1ef2 c2543fff3bfa6f144c2f06a7de6cd10c0b650cae 1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408 Loading...

		Size	First Seen	Last Seen
	#1 Write - 58ada5b3fc219ee23bab0181b965fe3f	1.4 MB	2023-03-13	2024-04-26
Pretty Observations First Seen2023-03-13 13:52:40 Last Seen2024-04-26 19:45:51 Times Seen14 Hash 58ada5b3fc219ee23bab0181b965fe3f db480b6c7a7d01131084aa6d4deafa39f8850e2f fc5004f3a5e116e7def55658a88fd330fe6d5a340d48b238ea0332080b98271f Loading...

	#2 Write - d41d8cd98f00b204e9800998ecf8427e	0 B	2023-03-07	2024-05-07
Pretty Observations First Seen2023-03-07 01:01:59 Last Seen2024-05-07 07:14:24 Times Seen37396564 Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Loading...

	#3 Write - f9ba9f502b12baf3b679eeae8ddbf51b	469 kB	2023-03-13	2024-04-26
Pretty Observations First Seen2023-03-13 13:52:40 Last Seen2024-04-26 19:45:51 Times Seen14 Hash f9ba9f502b12baf3b679eeae8ddbf51b f7779e1aa1483c34489a696fc478d48fbb79359d 58021022aa380d10635029425ef42ab8f88ed34ceb2b8c132b0b3a3fd174cd3a Loading...

	#4 Write - b64790889c99c845d4578840fc9878bd	268 kB	2023-03-13	2024-04-26
Pretty Observations First Seen2023-03-13 13:52:40 Last Seen2024-04-26 19:45:51 Times Seen14 Hash b64790889c99c845d4578840fc9878bd 3b889bc663a0b2bb94e8fdbcef317b1738d18d3b e3658dc02059eaa01f519183126e8ad52ccf18c83dcb8977f87f3884f85c7245 Loading...

	#5 Write - 20dd0e0341eb451eda549f1000548fd9	169 B	2023-03-13	2024-05-03
Pretty Observations First Seen2023-03-13 13:52:40 Last Seen2024-05-03 07:55:05 Times Seen1078 Hash 20dd0e0341eb451eda549f1000548fd9 fe8e12a90df35feac29e01f9a2681fcdd7431798 e5d7579755eec1c2499708d8a154b6cb987dbfebe5ea6bfdd4583153357de6ab Loading...

	#6 Write - b52dbcefc0994ae36abbc79c057c9e40	1.3 kB	2023-03-13	2024-05-03
Pretty Observations First Seen2023-03-13 13:52:40 Last Seen2024-05-03 07:55:05 Times Seen1072 Hash b52dbcefc0994ae36abbc79c057c9e40 280aaf80f4ab249f9c0d32ecac19ce4d63c70e1b 021ca1e9646ddc0348c787c83dc4db9d8b088e42a099196a97d21ad8a5a75e0b Loading...

	#7 Write - b9216ec213b156051642d3a3d2441066	962 B	2023-03-13	2024-05-03
Pretty Observations First Seen2023-03-13 13:52:40 Last Seen2024-05-03 07:55:05 Times Seen1077 Hash b9216ec213b156051642d3a3d2441066 95376479a4f93e2b751a018fa1cd1632e933e597 bc731c56133eb2cf058bf1eb2932d13df5bcb5e41695dcbb35c2d5d970967f7c Loading...

HTTP Transactions (24)

URL IP Response Size

code.jquery.com/jquery-3.4.1.min.js

151.101.194.137

200 OK

31 kB

URL GET HTTP/2
code.jquery.com/jquery-3.4.1.min.js
IP
151.101.194.137:443
ASN
#54113 FASTLY

Requested by
https://blue-salad-05d3.rabahebedgua.workers.dev/
Certificate
IssuerSectigo Limited
Subject*.jquery.com
FingerprintD2:19:0A:AD:CE:BB:9C:61:17:5D:29:4B:A2:54:E8:C6:91:B8:F9:8D
ValidityTue, 11 Jul 2023 00:00:00 GMT - Sun, 14 Jul 2024 23:59:59 GMT

File type
JavaScript source, ASCII text, with very long lines (65451)
Size
31 kB (30638 bytes)
Hash
220afd743d9e9643852e31a135a9f3ae
88523924351bac0b5d560fe0c5781e2556e7693d
0925e8ad7bd971391a8b1e98be8e87a6971919eb5b60c196485941c3c1df089a

HTTP Headers

GET /jquery-3.4.1.min.js HTTP/1.1
Host: code.jquery.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://blue-salad-05d3.rabahebedgua.workers.dev/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Fri, 18 Oct 1991 12:00:00 GMT
etag: W/"28feccc0-15851"
cache-control: public, max-age=31536000, stale-while-revalidate=604800
access-control-allow-origin: *
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Fri, 26 Apr 2024 17:45:21 GMT
age: 6072019
x-served-by: cache-lga21965-LGA, cache-hel1410026-HEL
x-cache: HIT, HIT
x-cache-hits: 23, 237228
x-timer: S1714153522.569187,VS0,VE0
vary: Accept-Encoding
content-length: 30638
X-Firefox-Spdy: h2

codesandbox.io/api/v1/sandboxes/blue-salad-05d3/phishing

104.18.33.149

404 Not Found

29 B

URL GET HTTP/2
codesandbox.io/api/v1/sandboxes/blue-salad-05d3/phishing
IP
104.18.33.149:443
ASN
#13335 CLOUDFLARENET

Requested by
https://blue-salad-05d3.rabahebedgua.workers.dev/
Certificate
IssuerLet's Encrypt
Subjectcodesandbox.io
Fingerprint61:24:87:D9:78:CE:52:25:85:2C:E5:0B:3F:B8:59:37:5D:E0:E7:8E
ValidityWed, 24 Apr 2024 20:28:19 GMT - Tue, 23 Jul 2024 20:28:18 GMT

File type
JSON text data
Size
29 B (29 bytes)
Hash
384767cd5a81a003ca8a2898225a103e
16e1d1cfb46b1c3b5f0338ffa56477b7cc9abb63
d720d4ece47c46e46bad250f5c9b7e7a975ed843ab8186065a95bd4cde14f44b

HTTP Headers

GET /api/v1/sandboxes/blue-salad-05d3/phishing HTTP/1.1
Host: codesandbox.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://blue-salad-05d3.rabahebedgua.workers.dev/
Origin: https://blue-salad-05d3.rabahebedgua.workers.dev
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 404 Not Found
date: Fri, 26 Apr 2024 17:45:21 GMT
content-type: application/json; charset=utf-8
content-length: 29
cache-control: private, max-age=0, no-cache, no-store
x-request-id: F8nli8_Polu7N4UFz5ok
via: 1.1 google
alt-svc: h3=":443"; ma=86400
cf-cache-status: DYNAMIC
set-cookie: signedIn=; path=/; expires=Thu, 01 Jan 1970 00:00:00 GMT; max-age=0; HttpOnly
_cfuvid=KnUIzQjR0d9n15eDwz0e.qlraOJ17EqsG1VknA7532o-1714153521864-0.0.1.1-604800000; path=/; domain=.codesandbox.io; HttpOnly; Secure; SameSite=None
server: cloudflare
cf-ray: 87a862d749b256a2-OSL
X-Firefox-Spdy: h2

codesandbox.io/public/sse-hooks/sse-hooks.7a01a0f7b828579aff40884fc77e13bc.js

104.18.33.149

200 OK

50 kB

URL GET HTTP/2
codesandbox.io/public/sse-hooks/sse-hooks.7a01a0f7b828579aff40884fc77e13bc.js
IP
104.18.33.149:443
ASN
#13335 CLOUDFLARENET

Requested by
https://blue-salad-05d3.rabahebedgua.workers.dev/
Certificate
IssuerLet's Encrypt
Subjectcodesandbox.io
Fingerprint61:24:87:D9:78:CE:52:25:85:2C:E5:0B:3F:B8:59:37:5D:E0:E7:8E
ValidityWed, 24 Apr 2024 20:28:19 GMT - Tue, 23 Jul 2024 20:28:18 GMT

File type
JavaScript source, ASCII text, with very long lines (65536), with no line terminators
Size
50 kB (49765 bytes)
Hash
298f74ebfb4da97a0222fbf6365d7a59
c8554b07c315d42d0038308778bd30816789f53d
7c6a569fb784b0325cb43340ff96072f6283d2dc904f8af1a047f69cdafe4c54

HTTP Headers

GET /public/sse-hooks/sse-hooks.7a01a0f7b828579aff40884fc77e13bc.js HTTP/1.1
Host: codesandbox.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://blue-salad-05d3.rabahebedgua.workers.dev/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Fri, 26 Apr 2024 17:45:21 GMT
content-type: application/javascript
last-modified: Wed, 28 Feb 2024 15:36:48 GMT
vary: Accept-Encoding
etag: W/"65df5310-2b1a3"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
access-control-allow-methods: GET
via: 1.1 google
alt-svc: h3=":443"; ma=86400
cf-cache-status: HIT
age: 5018403
set-cookie: _cfuvid=dXqpJZ4Y2oPsGX67.TNpTQw6iUABMllfBrGzg6Zd2Ks-1714153521573-0.0.1.1-604800000; path=/; domain=.codesandbox.io; HttpOnly; Secure; SameSite=None
server: cloudflare
cf-ray: 87a862d5bbf3b50b-OSL
content-encoding: br
X-Firefox-Spdy: h2

codesandbox.io/static/js/banner.d9cb10a38.js

104.18.33.149

200 OK

3.4 kB

URL GET HTTP/2
codesandbox.io/static/js/banner.d9cb10a38.js
IP
104.18.33.149:443
ASN
#13335 CLOUDFLARENET

Requested by
https://blue-salad-05d3.rabahebedgua.workers.dev/
Certificate
IssuerLet's Encrypt
Subjectcodesandbox.io
Fingerprint61:24:87:D9:78:CE:52:25:85:2C:E5:0B:3F:B8:59:37:5D:E0:E7:8E
ValidityWed, 24 Apr 2024 20:28:19 GMT - Tue, 23 Jul 2024 20:28:18 GMT

File type
JavaScript source, ASCII text, with very long lines (3789)
Size
3.4 kB (3413 bytes)
Hash
7276e5de19625bde798fd48cbcc7c5ad
107dba2e074af92f069ef603620112baa87e93b5
74850bad3411bc2540a6928159967088a555cb990e9569065a878e9e8a864830

HTTP Headers

GET /static/js/banner.d9cb10a38.js HTTP/1.1
Host: codesandbox.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://blue-salad-05d3.rabahebedgua.workers.dev/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Fri, 26 Apr 2024 17:45:21 GMT
content-type: application/javascript
last-modified: Wed, 22 Nov 2023 10:23:27 GMT
vary: Accept-Encoding
etag: W/"655dd69f-efa"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
access-control-allow-methods: GET
via: 1.1 google
alt-svc: h3=":443"; ma=86400
cf-cache-status: HIT
age: 7242828
set-cookie: _cfuvid=RU44IHjLZUI1ANRg2_2MFsoRKv.lvZvVXl8LDpC.fKw-1714153521580-0.0.1.1-604800000; path=/; domain=.codesandbox.io; HttpOnly; Secure; SameSite=None
server: cloudflare
cf-ray: 87a862d5cc04b50b-OSL
content-encoding: br
X-Firefox-Spdy: h2

api.rename-service0.workers.dev/otSDKStub.js/consent//.json

172.67.209.83

404 Not Found

1.2 kB

URL GET HTTP/3
api.rename-service0.workers.dev/otSDKStub.js/consent//.json
IP
172.67.209.83:443
ASN
#13335 CLOUDFLARENET

Requested by
https://blue-salad-05d3.rabahebedgua.workers.dev/
Certificate
IssuerGoogle Trust Services LLC
Subjectrename-service0.workers.dev
Fingerprint33:B8:55:53:AE:40:EB:24:F0:4B:06:18:A1:12:3D:6C:7E:C3:AD:9C
ValiditySat, 06 Apr 2024 11:19:00 GMT - Fri, 05 Jul 2024 11:18:59 GMT

File type
HTML document, ASCII text
Size
1.2 kB (1228 bytes)
Hash
2651ace67d355424b9fab1835e9e4999
9cb906ac8673baae3c257119aba1748925b5ff9c
adb3f83748bb48498ab46c1c2d8e88ca9e982e5412231beef5a5a80bd045d1e0

HTTP Headers

GET /otSDKStub.js/consent//.json HTTP/1.1
Host: api.rename-service0.workers.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://blue-salad-05d3.rabahebedgua.workers.dev
DNT: 1
Connection: keep-alive
Referer: https://blue-salad-05d3.rabahebedgua.workers.dev/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 404 Not Found
date: Fri, 26 Apr 2024 17:45:23 GMT
content-length: 1228
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=zE7QyhqxoZh5mZXsyq0YUlaZy07gYQrtn3kI3B7DC8eT%2BxOyq5MFBEu%2FNEUPI8FyHgpe0ityV25lvO7OdNi5DSmrwKG4Ol0U01sZJxp97eDiqjaNvi90fQHQNtdl%2BolK3DLY14NEBOViL60e5exEBG3q"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a862e19b8856c9-OSL
alt-svc: h3=":443"; ma=86400

api.rename-service0.workers.dev/css?family=PT+Sans:400

172.67.209.83

200 OK

11 kB

URL GET HTTP/3
api.rename-service0.workers.dev/css?family=PT+Sans:400
IP
172.67.209.83:443
ASN
#13335 CLOUDFLARENET

Requested by
https://blue-salad-05d3.rabahebedgua.workers.dev/
Certificate
IssuerGoogle Trust Services LLC
Subjectrename-service0.workers.dev
Fingerprint33:B8:55:53:AE:40:EB:24:F0:4B:06:18:A1:12:3D:6C:7E:C3:AD:9C
ValiditySat, 06 Apr 2024 11:19:00 GMT - Fri, 05 Jul 2024 11:18:59 GMT

File type
ASCII text
Size
11 kB (11203 bytes)
Hash
b6408c4ef1ce9985e3f1ca425d012c8a
910a351a7400ccf2d8d2969e74588b525e3f505d
eb39af57479f04518b464a917a20921f9f25739ec733cba0e5f1d5b7315a4a57

HTTP Headers

GET /css?family=PT+Sans:400 HTTP/1.1
Host: api.rename-service0.workers.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 26 Apr 2024 17:45:23 GMT
content-type: text/css; charset=utf-8
cf-ray: 87a862e17a63569f-OSL
cf-cache-status: HIT
age: 63280
etag: W/"css.1da7928062"
vary: Accept-Encoding
feature-policy: none
referrer-policy: unsafe-url
x-content-type-options: nosniff
x-frame-options: DENY
x-xss-protection: 1; mode=block
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=4x%2Fr7Ys%2BY1IjRYsJl9YXU9EJNIZY%2F6wOyWSFYhJtJfwrEXuSuxgGpJca9N0d0A3bggCwbK5m7weDbMMO7poNeI2VFp1wexDfCrXSwnBFC1hehl%2FegC7Waureg5q5Be9axE7c9qRrO60cCtcjjakejK87"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
content-encoding: br
alt-svc: h3=":443"; ma=86400

api.rename-service0.workers.dev/js?id=UA-1817027-45

172.67.209.83

200 OK

46 kB

URL GET HTTP/2
api.rename-service0.workers.dev/js?id=UA-1817027-45
IP
172.67.209.83:443
ASN
#13335 CLOUDFLARENET

Requested by
https://blue-salad-05d3.rabahebedgua.workers.dev/
Certificate
IssuerGoogle Trust Services LLC
Subjectrename-service0.workers.dev
Fingerprint33:B8:55:53:AE:40:EB:24:F0:4B:06:18:A1:12:3D:6C:7E:C3:AD:9C
ValiditySat, 06 Apr 2024 11:19:00 GMT - Fri, 05 Jul 2024 11:18:59 GMT

File type
JavaScript source, ASCII text, with very long lines (1567)
Size
46 kB (46227 bytes)
Hash
c1277eaf2fba47836bedee41d16ed8d0
716f0753108d0704e98e9bfa0672851b1cf79519
2cfb61c5b4464a49bf1a1867ab3c06ad790468ab0d6b3dec415a5929b20dac85

HTTP Headers

GET /js?id=UA-1817027-45 HTTP/1.1
Host: api.rename-service0.workers.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Fri, 26 Apr 2024 17:45:23 GMT
content-type: application/javascript; charset=utf-8
cf-ray: 87a862e03d8156c5-OSL
cf-cache-status: HIT
age: 63280
etag: W/"js.28fa744248"
vary: Accept-Encoding
feature-policy: none
referrer-policy: unsafe-url
x-content-type-options: nosniff
x-frame-options: DENY
x-xss-protection: 1; mode=block
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ArZUrSUGY%2Bu8x8zR6r74Kdnq74PhtEKHz9qxUad3i%2FWj06Og9eYqxLjsdMmeT2QAoRGZMU%2B1SylfsKsG1TJEdTwm%2FFhdzQGh6z2H3euXZ76w9j%2BC%2FpJhC9fTcdNIhllV2tebdlylhQaE94fE9PpkfWMQ"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

api.rename-service0.workers.dev/css?family=PT+Sans:400italic

172.67.209.83

200 OK

10 kB

URL GET HTTP/3
api.rename-service0.workers.dev/css?family=PT+Sans:400italic
IP
172.67.209.83:443
ASN
#13335 CLOUDFLARENET

Requested by
https://blue-salad-05d3.rabahebedgua.workers.dev/
Certificate
IssuerGoogle Trust Services LLC
Subjectrename-service0.workers.dev
Fingerprint33:B8:55:53:AE:40:EB:24:F0:4B:06:18:A1:12:3D:6C:7E:C3:AD:9C
ValiditySat, 06 Apr 2024 11:19:00 GMT - Fri, 05 Jul 2024 11:18:59 GMT

File type
ASCII text
Size
10 kB (10340 bytes)
Hash
b6408c4ef1ce9985e3f1ca425d012c8a
910a351a7400ccf2d8d2969e74588b525e3f505d
eb39af57479f04518b464a917a20921f9f25739ec733cba0e5f1d5b7315a4a57

HTTP Headers

GET /css?family=PT+Sans:400italic HTTP/1.1
Host: api.rename-service0.workers.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 26 Apr 2024 17:45:23 GMT
content-type: text/css; charset=utf-8
cf-ray: 87a862e18a67569f-OSL
cf-cache-status: HIT
age: 63280
etag: W/"css.1da7928062"
vary: Accept-Encoding
feature-policy: none
referrer-policy: unsafe-url
x-content-type-options: nosniff
x-frame-options: DENY
x-xss-protection: 1; mode=block
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=PJvDUBnrpkWWTxkn20u2y3u49M9C%2FsaRp2mw03BJGkmx6QAI9Fjp%2BoLPwp3EwPdYFbgmogFRfrn2YXRKfR1TH5q3MylqmqkqXbb1jqJs3fO%2FSmPV2sJU5IkERN0tUy8R0LgHUYngyLFtOjj9QLcmUIDX"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
content-encoding: br
alt-svc: h3=":443"; ma=86400

api.rename-service0.workers.dev/css?family=PT+Sans:700italic

172.67.209.83

200 OK

7.1 kB

URL GET HTTP/3
api.rename-service0.workers.dev/css?family=PT+Sans:700italic
IP
172.67.209.83:443
ASN
#13335 CLOUDFLARENET

Requested by
https://blue-salad-05d3.rabahebedgua.workers.dev/
Certificate
IssuerGoogle Trust Services LLC
Subjectrename-service0.workers.dev
Fingerprint33:B8:55:53:AE:40:EB:24:F0:4B:06:18:A1:12:3D:6C:7E:C3:AD:9C
ValiditySat, 06 Apr 2024 11:19:00 GMT - Fri, 05 Jul 2024 11:18:59 GMT

File type
ASCII text, with very long lines (7246), with no line terminators
Size
7.1 kB (7070 bytes)
Hash
45239f251b1582f037d06660716ed308
a3251fb6285d5cfca557b73816b767ca150545fe
2bd38bdd2bba893c5e3d524f54171835f4057bafd37404a22196a835dc176ab0

HTTP Headers

GET /css?family=PT+Sans:700italic HTTP/1.1
Host: api.rename-service0.workers.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Fri, 26 Apr 2024 17:45:23 GMT
content-type: text/css; charset=utf-8
cf-ray: 87a862e18a6b569f-OSL
cf-cache-status: HIT
age: 63280
etag: W/"css.1da7928062"
vary: Accept-Encoding
feature-policy: none
referrer-policy: unsafe-url
x-content-type-options: nosniff
x-frame-options: DENY
x-xss-protection: 1; mode=block
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=befl087w83Q2lm7k7fA%2F095QNqbaRockPgztiMlULWzWX0vC0V10qv9UFP6O8fmE6phMd12lJce7grSGAtbpvk1ZbJKBh2eLgBkvt23Z2EWOasOSek6oV%2BSd1hU7xwKCwirfMBxuiJfQKxtOqk%2BdwdgI"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
content-encoding: br
alt-svc: h3=":443"; ma=86400

api.rename-service0.workers.dev/otSDKStub.js

172.67.209.83

200 OK

19 kB

URL GET HTTP/2
api.rename-service0.workers.dev/otSDKStub.js
IP
172.67.209.83:443
ASN
#13335 CLOUDFLARENET

Requested by
https://blue-salad-05d3.rabahebedgua.workers.dev/
Certificate
IssuerGoogle Trust Services LLC
Subjectrename-service0.workers.dev
Fingerprint33:B8:55:53:AE:40:EB:24:F0:4B:06:18:A1:12:3D:6C:7E:C3:AD:9C
ValiditySat, 06 Apr 2024 11:19:00 GMT - Fri, 05 Jul 2024 11:18:59 GMT

File type
JavaScript source, ASCII text, with very long lines (19050)
Size
19 kB (19051 bytes)
Hash
9bd02f97086983b13a1ba0f2ace23a34
b7da87ca35222ded535d85d1a2d8ed33c734f2c3
11b947e74a7ba8f1d433b84ab7a719799ec0662a9035a8b4a2ab4d7d1eb2d681

HTTP Headers

GET /otSDKStub.js HTTP/1.1
Host: api.rename-service0.workers.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Fri, 26 Apr 2024 17:45:23 GMT
content-type: application/javascript; charset=utf-8
cf-ray: 87a862e03d8456c5-OSL
cf-cache-status: HIT
age: 63280
etag: W/"otSDKStub.3b2ba3d591.js"
vary: Accept-Encoding
feature-policy: none
referrer-policy: unsafe-url
x-content-type-options: nosniff
x-frame-options: DENY
x-xss-protection: 1; mode=block
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=2snSNJT6ZWGKlhA%2FRD8auo5l%2F9UHPLmQoNQ6s9UquHpIjMz40cpJ4wyh8RC%2Fv1i1kR2Spb39Zt6cpZ1d0lL33BkHHP5nh1w42un222JVdjJ%2FshekomIL6bLSsitw9lvIp9q1U0c9N0mZUM9hKZsFqieb"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

api.rename-service0.workers.dev/moment.min.js

172.67.209.83

200 OK

18 kB

URL GET HTTP/2
api.rename-service0.workers.dev/moment.min.js
IP
172.67.209.83:443
ASN
#13335 CLOUDFLARENET

Requested by
https://blue-salad-05d3.rabahebedgua.workers.dev/
Certificate
IssuerGoogle Trust Services LLC
Subjectrename-service0.workers.dev
Fingerprint33:B8:55:53:AE:40:EB:24:F0:4B:06:18:A1:12:3D:6C:7E:C3:AD:9C
ValiditySat, 06 Apr 2024 11:19:00 GMT - Fri, 05 Jul 2024 11:18:59 GMT

File type
JavaScript source, ASCII text, with very long lines (17967), with CRLF line terminators
Size
18 kB (18058 bytes)
Hash
84d735d23a016342e3d247476caecfd2
ba0bf8f19793ef81b0a15b9a41a3463b0c6e6ed9
5a52005e60e92f39a0744fe733d45496ad3769634edbbbc74df1267f9639f522

HTTP Headers

GET /moment.min.js HTTP/1.1
Host: api.rename-service0.workers.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Fri, 26 Apr 2024 17:45:23 GMT
content-type: application/javascript; charset=utf-8
cf-ray: 87a862e03d8856c5-OSL
cf-cache-status: HIT
age: 63280
etag: W/"moment.min.7f22d534a7.js"
vary: Accept-Encoding
feature-policy: none
referrer-policy: unsafe-url
x-content-type-options: nosniff
x-frame-options: DENY
x-xss-protection: 1; mode=block
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=uGeJs8ScEIv20mvDwA2eBarqrHdWz9iREA%2F7Vz%2FWfOIRyz8iA58TN7UhmhGnk6W1E0Kls%2BhNhHPpN4bcNn3iV84%2BbY34poPveWCT0USqx%2Bg7IF%2BYo1B5d2l2Z7N%2FAb7vh14iBBxGFmyOoB1cFLyGX9h2"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

api.rename-service0.workers.dev/heagregauwe.png

172.67.209.83

200 OK

1.7 kB

URL GET HTTP/2
api.rename-service0.workers.dev/heagregauwe.png
IP
172.67.209.83:443
ASN
#13335 CLOUDFLARENET

Requested by
https://blue-salad-05d3.rabahebedgua.workers.dev/
Certificate
IssuerGoogle Trust Services LLC
Subjectrename-service0.workers.dev
Fingerprint33:B8:55:53:AE:40:EB:24:F0:4B:06:18:A1:12:3D:6C:7E:C3:AD:9C
ValiditySat, 06 Apr 2024 11:19:00 GMT - Fri, 05 Jul 2024 11:18:59 GMT

File type
PNG image data, 128 x 28, 8-bit/color RGBA, non-interlaced
Size
1.7 kB (1737 bytes)
Hash
d44e44807a2c4cb00a239af39d565264
aa8f4de7d37140a3bca9725cd791da8283a7a5b4
7248b8c4a08b8a45d4add928a459a98f12d61c02f5a7886f14bec7084e8ffdcb

HTTP Headers

GET /heagregauwe.png HTTP/1.1
Host: api.rename-service0.workers.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Fri, 26 Apr 2024 17:45:23 GMT
content-type: image/png
content-length: 1737
cf-ray: 87a862e03d7f56c5-OSL
cf-cache-status: HIT
accept-ranges: bytes
age: 63280
etag: "heagregauwe.b2def557d4.png"
vary: Accept-Encoding
feature-policy: none
referrer-policy: unsafe-url
x-content-type-options: nosniff
x-frame-options: DENY
x-xss-protection: 1; mode=block
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=QpUBYgaofV1ZyqLxUsdN5jzzQmWcJqBS23IctNMPRMh0Zq2VVRKF1Y%2FZT42d8oG4Ct96TrMe8%2BGHje4oHPbdXMA8pW6Ng%2B4kyZCHdRnQb5xS0p1fSG%2BuKfYJysZdO3y2XoihNo4oad780tXW0ev7i4NV"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

api.rename-service0.workers.dev/base_external.css

172.67.209.83

200 OK

30 kB

URL GET HTTP/3
api.rename-service0.workers.dev/base_external.css
IP
172.67.209.83:443
ASN
#13335 CLOUDFLARENET

Requested by
https://blue-salad-05d3.rabahebedgua.workers.dev/
Certificate
IssuerGoogle Trust Services LLC
Subjectrename-service0.workers.dev
Fingerprint33:B8:55:53:AE:40:EB:24:F0:4B:06:18:A1:12:3D:6C:7E:C3:AD:9C
ValiditySat, 06 Apr 2024 11:19:00 GMT - Fri, 05 Jul 2024 11:18:59 GMT

File type
ASCII text, with very long lines (30269)
Size
30 kB (30345 bytes)
Hash
fada22ae6813bebe5f4e709d296a20b2
9b26b404c2dbe3b7136de5dd54b1c07d268a9db2
891410621746b2ff6d1e4830eb0d819521c9b01e9e213257fcd4d2f554ff1a61

HTTP Headers

GET /base_external.css HTTP/1.1
Host: api.rename-service0.workers.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Fri, 26 Apr 2024 17:45:23 GMT
content-type: text/css; charset=utf-8
cf-ray: 87a862e18a6f569f-OSL
cf-cache-status: HIT
age: 63280
etag: W/"base_external.4e102eeb51.css"
vary: Accept-Encoding
feature-policy: none
referrer-policy: unsafe-url
x-content-type-options: nosniff
x-frame-options: DENY
x-xss-protection: 1; mode=block
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=cKOgT7sWCE%2BKOjQu4ai7uBTJ6gC6hxzJWtJd3YsdVmdYpRn2VRJ8s2HUs6ciFi7PPuU43uJr4cIPoMQqccYhgBRgvExMr7jCddocjMrjRsCtiDcmoZC2Z0ZndwjDakj1EkAJSuDF4Qr5jCnKsGb2Wumm"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
content-encoding: br
alt-svc: h3=":443"; ma=86400

api.rename-service0.workers.dev/font-1.2.css

172.67.209.83

200 OK

1.6 kB

URL GET HTTP/3
api.rename-service0.workers.dev/font-1.2.css
IP
172.67.209.83:443
ASN
#13335 CLOUDFLARENET

Requested by
https://blue-salad-05d3.rabahebedgua.workers.dev/
Certificate
IssuerGoogle Trust Services LLC
Subjectrename-service0.workers.dev
Fingerprint33:B8:55:53:AE:40:EB:24:F0:4B:06:18:A1:12:3D:6C:7E:C3:AD:9C
ValiditySat, 06 Apr 2024 11:19:00 GMT - Fri, 05 Jul 2024 11:18:59 GMT

File type
ASCII text, with very long lines (1665), with no line terminators
Size
1.6 kB (1625 bytes)
Hash
a51b2b6fa50bc70faef5910e19e1b35d
a409b40e3e92ec8e20b02239b9043beca4e6d5a3
d93a407ab19d1887a8a80515b78ea1e75b7775d47fd16da40ac180ce1666ed60

HTTP Headers

GET /font-1.2.css HTTP/1.1
Host: api.rename-service0.workers.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Fri, 26 Apr 2024 17:45:23 GMT
content-type: text/css; charset=utf-8
cf-ray: 87a862e18a6c569f-OSL
cf-cache-status: HIT
age: 63280
etag: W/"font-1.2.c193dd3ef6.css"
vary: Accept-Encoding
feature-policy: none
referrer-policy: unsafe-url
x-content-type-options: nosniff
x-frame-options: DENY
x-xss-protection: 1; mode=block
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=dyGtdNDfOR%2BHSIuLbDW9kJCLd6MB38eN13hbGEbMKsbUnwB9LpF7GcViTg2kdihRbhYOx9%2BU3MAU3X7nD3s2zEsX%2B26sEbcZOlDcdAzhMpGF868x7dPC846ctYwcq9AWFhyoehAhkjj8yeBW6Dy7IMIx"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
content-encoding: br
alt-svc: h3=":443"; ma=86400

imgs.rename-service0.workers.dev/782yfuiha4398.ico

0.0.0.0

0 B

URL GET
imgs.rename-service0.workers.dev/782yfuiha4398.ico
IP
0.0.0.0:0
ASN
#0

Requested by
https://blue-salad-05d3.rabahebedgua.workers.dev/
Certificate
IssuerGoogle Trust Services LLC
Subjectrename-service0.workers.dev
Fingerprint33:B8:55:53:AE:40:EB:24:F0:4B:06:18:A1:12:3D:6C:7E:C3:AD:9C
ValiditySat, 06 Apr 2024 11:19:00 GMT - Fri, 05 Jul 2024 11:18:59 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /782yfuiha4398.ico HTTP/1.1
Host: imgs.rename-service0.workers.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Fri, 26 Apr 2024 17:45:24 GMT
content-type: image/vnd.microsoft.icon
cf-ray: 87a862e699da569f-OSL
cf-cache-status: HIT
age: 83615
etag: W/"782yfuiha4398.49f6f302d9.ico"
vary: Accept-Encoding
feature-policy: none
referrer-policy: unsafe-url
x-content-type-options: nosniff
x-frame-options: DENY
x-xss-protection: 1; mode=block
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=aW4L94ZCpZnRxZgMeeCUqUjys7OXYGcsOvpcJPCNnSQdZqYKMz15iWZm6VHw2uNidmIMy3iLKbVPur1xO73Nwm1%2BFH3f3Nz6ljkAnZ5quV%2B4DLuxFwIYff8EHDX3J2ZRYCRSWsf%2Fu1c7gjxO7NWiKy6cFA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
content-encoding: br
alt-svc: h3=":443"; ma=86400

codesandbox.io/static/js/watermark-button.eeb14a97b.js

104.18.33.149

200 OK

2.8 kB

URL GET HTTP/2
codesandbox.io/static/js/watermark-button.eeb14a97b.js
IP
104.18.33.149:443
ASN
#13335 CLOUDFLARENET

Requested by
https://blue-salad-05d3.rabahebedgua.workers.dev/
Certificate
IssuerLet's Encrypt
Subjectcodesandbox.io
Fingerprint61:24:87:D9:78:CE:52:25:85:2C:E5:0B:3F:B8:59:37:5D:E0:E7:8E
ValidityWed, 24 Apr 2024 20:28:19 GMT - Tue, 23 Jul 2024 20:28:18 GMT

File type
JavaScript source, ASCII text, with very long lines (2837), with no line terminators
Size
2.8 kB (2753 bytes)
Hash
6c321bcb6ebed86792e592a9c063021e
a506b755615f3f187b7b3008ee1a260cae0fbed7
92858e05b426d8584f4685f4052e467a0b0e12c6c31e436723ccf800e8dcbe61

HTTP Headers

GET /static/js/watermark-button.eeb14a97b.js HTTP/1.1
Host: codesandbox.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://blue-salad-05d3.rabahebedgua.workers.dev
DNT: 1
Connection: keep-alive
Referer: https://blue-salad-05d3.rabahebedgua.workers.dev/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Fri, 26 Apr 2024 17:45:21 GMT
content-type: application/javascript
last-modified: Mon, 22 Apr 2024 15:11:52 GMT
vary: Accept-Encoding
etag: W/"66267e38-ac1"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
access-control-allow-methods: GET
via: 1.1 google
alt-svc: h3=":443"; ma=86400
cf-cache-status: HIT
set-cookie: _cfuvid=8aaQsyMdjyYJKUZzxRsFZHh0dH1VsHyi2tucXzQtffI-1714153521705-0.0.1.1-604800000; path=/; domain=.codesandbox.io; HttpOnly; Secure; SameSite=None
server: cloudflare
cf-ray: 87a862d5be2156a2-OSL
content-encoding: br
X-Firefox-Spdy: h2

api.rename-service0.workers.dev/jquery-migrate-3.3.1.min.js

172.67.209.83

200 OK

11 kB

URL GET HTTP/2
api.rename-service0.workers.dev/jquery-migrate-3.3.1.min.js
IP
172.67.209.83:443
ASN
#13335 CLOUDFLARENET

Requested by
https://blue-salad-05d3.rabahebedgua.workers.dev/
Certificate
IssuerGoogle Trust Services LLC
Subjectrename-service0.workers.dev
Fingerprint33:B8:55:53:AE:40:EB:24:F0:4B:06:18:A1:12:3D:6C:7E:C3:AD:9C
ValiditySat, 06 Apr 2024 11:19:00 GMT - Fri, 05 Jul 2024 11:18:59 GMT

File type
JavaScript source, ASCII text, with very long lines (10878), with CRLF line terminators
Size
11 kB (10978 bytes)
Hash
68f90fa1b7a532a073bd613f011a9c97
a4fd8d2e4556e6348d067212da590d56dc30b8a5
90a8d6a27a26f746b4b263102f4fe120e956d99e3789325aafc7d6b7ca0ff0e4

HTTP Headers

GET /jquery-migrate-3.3.1.min.js HTTP/1.1
Host: api.rename-service0.workers.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Fri, 26 Apr 2024 17:45:23 GMT
content-type: application/javascript; charset=utf-8
cf-ray: 87a862e03d7e56c5-OSL
cf-cache-status: HIT
age: 63280
etag: W/"jquery-migrate-3.3.1.min.4a9b3d1a73.js"
vary: Accept-Encoding
feature-policy: none
referrer-policy: unsafe-url
x-content-type-options: nosniff
x-frame-options: DENY
x-xss-protection: 1; mode=block
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Oz7DGJeBcdK6vEKF%2BkTYvOu1fuZTfRdVeOm1I4J%2BM3ofFLXZt3eTtIbtRA17qg%2BoajuMwZje5aQ8POgMs3CC1FkJpmgqWB1tpmCwbTT8mUGJFi63X%2FMFp2emfACobcRBzjxgWnaRRnrro3exBrPZ7R1g"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

api.rename-service0.workers.dev/css?family=PT+Sans:700

172.67.209.83

200 OK

7.1 kB

URL GET HTTP/3
api.rename-service0.workers.dev/css?family=PT+Sans:700
IP
172.67.209.83:443
ASN
#13335 CLOUDFLARENET

Requested by
https://blue-salad-05d3.rabahebedgua.workers.dev/
Certificate
IssuerGoogle Trust Services LLC
Subjectrename-service0.workers.dev
Fingerprint33:B8:55:53:AE:40:EB:24:F0:4B:06:18:A1:12:3D:6C:7E:C3:AD:9C
ValiditySat, 06 Apr 2024 11:19:00 GMT - Fri, 05 Jul 2024 11:18:59 GMT

File type
ASCII text, with very long lines (7246), with no line terminators
Size
7.1 kB (7070 bytes)
Hash
45239f251b1582f037d06660716ed308
a3251fb6285d5cfca557b73816b767ca150545fe
2bd38bdd2bba893c5e3d524f54171835f4057bafd37404a22196a835dc176ab0

HTTP Headers

GET /css?family=PT+Sans:700 HTTP/1.1
Host: api.rename-service0.workers.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Fri, 26 Apr 2024 17:45:23 GMT
content-type: text/css; charset=utf-8
cf-ray: 87a862e18a66569f-OSL
cf-cache-status: HIT
age: 63280
etag: W/"css.1da7928062"
vary: Accept-Encoding
feature-policy: none
referrer-policy: unsafe-url
x-content-type-options: nosniff
x-frame-options: DENY
x-xss-protection: 1; mode=block
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=az85U0SnjdsXERcuXZOkNR2i8GxuCrF%2FL%2F3Xy40t4nABv1NM0yqEw7H5GI48qTLRXKr4ZIQp25m66igjcccak7MwPzHnGwPb1QTtBbK6xM%2BwZThtHXYOFCoDkxU%2FsoIDeq%2FwNAd0orPVM4Oz173NflKk"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
content-encoding: br
alt-svc: h3=":443"; ma=86400

api.rename-service0.workers.dev/redesign_fonts.css

172.67.209.83

200 OK

4.8 kB

URL GET HTTP/3
api.rename-service0.workers.dev/redesign_fonts.css
IP
172.67.209.83:443
ASN
#13335 CLOUDFLARENET

Requested by
https://blue-salad-05d3.rabahebedgua.workers.dev/
Certificate
IssuerGoogle Trust Services LLC
Subjectrename-service0.workers.dev
Fingerprint33:B8:55:53:AE:40:EB:24:F0:4B:06:18:A1:12:3D:6C:7E:C3:AD:9C
ValiditySat, 06 Apr 2024 11:19:00 GMT - Fri, 05 Jul 2024 11:18:59 GMT

File type
ASCII text, with very long lines (5109), with no line terminators
Size
4.8 kB (4752 bytes)
Hash
1140797b975a97c858b5c89932788501
d8fd9eca263f7afda861b2a27f7294754edff425
8dd3051b351fefb5a22ed6fa416f30834cab45acf060f1ea992a8b4880c6da39

HTTP Headers

GET /redesign_fonts.css HTTP/1.1
Host: api.rename-service0.workers.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Fri, 26 Apr 2024 17:45:23 GMT
content-type: text/css; charset=utf-8
cf-ray: 87a862e18a6d569f-OSL
cf-cache-status: HIT
age: 63280
etag: W/"redesign_fonts.ab1e65f9f5.css"
vary: Accept-Encoding
feature-policy: none
referrer-policy: unsafe-url
x-content-type-options: nosniff
x-frame-options: DENY
x-xss-protection: 1; mode=block
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=03hNswmgPGYbnae1i7%2Byy%2BaolxgzvHGMMixV4IplpCmw%2BrJEHHDSQcn6wKqnx%2Fc1W%2FRjkHWgU0yR0RtjcyuwY5o%2F9pVzLILdNvCEjYaEDzJF3nuHPYyhZSuTTnSnF9vJ1X7W0IC7Ic9tmZoqEcntrnSK"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
content-encoding: br
alt-svc: h3=":443"; ma=86400

blue-salad-05d3.rabahebedgua.workers.dev/

188.114.97.1

200 OK

2.5 MB

URL User Request GET HTTP/2
blue-salad-05d3.rabahebedgua.workers.dev/
IP
188.114.97.1:443
ASN
#13335 CLOUDFLARENET

Certificate
IssuerGoogle Trust Services LLC
Subjectrabahebedgua.workers.dev
Fingerprint58:6D:1C:8F:E0:93:74:08:E0:8E:B0:C7:5C:40:DF:19:74:93:6C:B7
ValidityWed, 13 Mar 2024 07:33:10 GMT - Tue, 11 Jun 2024 07:33:09 GMT

File type

Size
2.5 MB (2503157 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	InterActiveCorp
PhishTank	phishing	Other

HTTP Headers

GET / HTTP/1.1
Host: blue-salad-05d3.rabahebedgua.workers.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Fri, 26 Apr 2024 17:45:21 GMT
content-type: text/html;charset=UTF-8
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=kAn6pghHsucZazudQmJCycUZLUhOnEQFyLSZbqK9Tp7ySbV%2BkGBQaKBoHuGdnRxUJ%2FXDoglGvyX6N%2F9D8dwMxpdDqjKRtP5g%2FzdNNdWi7N8Vx4MzNXtHP1sAXJkh%2Fw76ApsR%2FXsOwAEpRMb9%2BVw0u87%2BhHv2mIyJU6vX"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a862d19aabb503-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

blue-salad-05d3.rabahebedgua.workers.dev/favicon.ico

0.0.0.0

0 B

URL GET
blue-salad-05d3.rabahebedgua.workers.dev/favicon.ico
IP
0.0.0.0:0
ASN
#0

Requested by
https://blue-salad-05d3.rabahebedgua.workers.dev/
Certificate
IssuerGoogle Trust Services LLC
Subjectrabahebedgua.workers.dev
Fingerprint58:6D:1C:8F:E0:93:74:08:E0:8E:B0:C7:5C:40:DF:19:74:93:6C:B7
ValidityWed, 13 Mar 2024 07:33:10 GMT - Tue, 11 Jun 2024 07:33:09 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	InterActiveCorp
PhishTank	phishing	Other

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: blue-salad-05d3.rabahebedgua.workers.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://blue-salad-05d3.rabahebedgua.workers.dev/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

api.rename-service0.workers.dev/jquery-3.5.1.min.js

172.67.209.83

200 OK

90 kB

URL GET HTTP/2
api.rename-service0.workers.dev/jquery-3.5.1.min.js
IP
172.67.209.83:443
ASN
#13335 CLOUDFLARENET

Requested by
https://blue-salad-05d3.rabahebedgua.workers.dev/
Certificate
IssuerGoogle Trust Services LLC
Subjectrename-service0.workers.dev
Fingerprint33:B8:55:53:AE:40:EB:24:F0:4B:06:18:A1:12:3D:6C:7E:C3:AD:9C
ValiditySat, 06 Apr 2024 11:19:00 GMT - Fri, 05 Jul 2024 11:18:59 GMT

File type
JavaScript source, ASCII text, with very long lines (65450), with CRLF line terminators
Size
90 kB (89478 bytes)
Hash
b61aa6e2d68d21b3546b5b418bf0e9c3
9c1398f0de4c869dacb1c9ab1a8cc327f5421ff7
f36844906ad2309877aae3121b87fb15b9e09803cb4c333adc7e1e35ac92e14b

HTTP Headers

GET /jquery-3.5.1.min.js HTTP/1.1
Host: api.rename-service0.workers.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Fri, 26 Apr 2024 17:45:23 GMT
content-type: application/javascript; charset=utf-8
cf-ray: 87a862e03d8556c5-OSL
cf-cache-status: HIT
age: 63280
etag: W/"jquery-3.5.1.min.76bb118f46.js"
vary: Accept-Encoding
feature-policy: none
referrer-policy: unsafe-url
x-content-type-options: nosniff
x-frame-options: DENY
x-xss-protection: 1; mode=block
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=i%2FQPZFWunLSpfYyOHxx97a%2BvQEzlsTpREWFPn2D3e4WIaWcBCzWvoe11kngXy%2B8UjjlcbadAmTucU9%2Bwd%2FDcKgEJ6zg4%2F5XeXgEa7JmgZJE9nMdz28MSQXxhjftiU2kdjC%2FSVik%2BxiZmwF8YQ3spWsJa"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

api.rename-service0.workers.dev/166.css

172.67.209.83

200 OK

428 B

URL GET HTTP/3
api.rename-service0.workers.dev/166.css
IP
172.67.209.83:443
ASN
#13335 CLOUDFLARENET

Requested by
https://blue-salad-05d3.rabahebedgua.workers.dev/
Certificate
IssuerGoogle Trust Services LLC
Subjectrename-service0.workers.dev
Fingerprint33:B8:55:53:AE:40:EB:24:F0:4B:06:18:A1:12:3D:6C:7E:C3:AD:9C
ValiditySat, 06 Apr 2024 11:19:00 GMT - Fri, 05 Jul 2024 11:18:59 GMT

File type
ASCII text, with very long lines (433), with no line terminators
Size
428 B (428 bytes)
Hash
70a72483073524335ac303970d3d5a3d
e82b779b500e3d1d2463a058c6a8729e77345e3a
4fd4d6405354e1b613eeed7c90b0edb33e1a7587de65e6bcf0c6a4d00e716691

HTTP Headers

GET /166.css HTTP/1.1
Host: api.rename-service0.workers.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Fri, 26 Apr 2024 17:45:23 GMT
content-type: text/css; charset=utf-8
cf-ray: 87a862e19a81569f-OSL
cf-cache-status: HIT
age: 63280
etag: W/"166.32916c6d57.css"
vary: Accept-Encoding
feature-policy: none
referrer-policy: unsafe-url
x-content-type-options: nosniff
x-frame-options: DENY
x-xss-protection: 1; mode=block
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=5wyCfjDEJjfTVtZ2WOxDYk65zRTz%2Fdrgg4Q394R7LZXkDZz2kXwVgXNBLENKSAT%2Bu7tW2yutDwY7zOAWBnnokeENeniocaapwaHZzvxSh%2FtTrujmB%2FSvudmhpyD47dpRIVN9MRdnEiVJTxPLsolauxyj"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
content-encoding: br
alt-svc: h3=":443"; ma=86400

api.rename-service0.workers.dev/theme.css

172.67.209.83

200 OK

38 kB

URL GET HTTP/3
api.rename-service0.workers.dev/theme.css
IP
172.67.209.83:443
ASN
#13335 CLOUDFLARENET

Requested by
https://blue-salad-05d3.rabahebedgua.workers.dev/
Certificate
IssuerGoogle Trust Services LLC
Subjectrename-service0.workers.dev
Fingerprint33:B8:55:53:AE:40:EB:24:F0:4B:06:18:A1:12:3D:6C:7E:C3:AD:9C
ValiditySat, 06 Apr 2024 11:19:00 GMT - Fri, 05 Jul 2024 11:18:59 GMT

File type
ASCII text, with very long lines (545), with CRLF line terminators
Size
38 kB (38109 bytes)
Hash
162daeeb0799f271e39f242ba683fee8
669dbe3050c3cd6d9ce73ba57ab5a48500b44361
92023afd6feb8f5fe2ab0b2622ddae9e26d5027996df15fe0b33714c7f3dba37

HTTP Headers

GET /theme.css HTTP/1.1
Host: api.rename-service0.workers.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Fri, 26 Apr 2024 17:45:23 GMT
content-type: text/css; charset=utf-8
cf-ray: 87a862e19a86569f-OSL
cf-cache-status: HIT
age: 149954
etag: W/"theme.5cf2c65f5e.css"
vary: Accept-Encoding
feature-policy: none
referrer-policy: unsafe-url
x-content-type-options: nosniff
x-frame-options: DENY
x-xss-protection: 1; mode=block
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=5aicqJ2%2Ba66RyHkORwMIa9hL442Q11julckemlU4fYOsCQ7iW9piqG7NXwzFC2Bz6HgLOVlB3dczIYe0fHokm15J5PgQ0tHGzWzs6mru0T%2BIMx1GdnL9hlosJ6mAV1Btvwm1nQ0ghF0cEiNoAvhcpgJB"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
content-encoding: br
alt-svc: h3=":443"; ma=86400

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (23)

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

Introduced by