Report - pub-4a9f2846b0ac4fdfb7f74c040870263c.r2.dev/preplink.html

Report Overview

Submitted URL
pub-4a9f2846b0ac4fdfb7f74c040870263c.r2.dev/preplink.html
IP
104.18.3.35
ASN
#13335 CLOUDFLARENET
Submitted
2024-05-08 16:11:37
Access
public
Website Title
LinkedIn | Login
Final URL
pub-4a9f2846b0ac4fdfb7f74c040870263c.r2.dev/preplink.html
Tags
phishing
urlquery detections
Phishing - Generic phishing

Detections

urlquery
3
Network Intrusion Detection
0
Threat Detection Systems
4

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
pub-4a9f2846b0ac4fdfb7f74c040870263c.r2.dev	unknown	2022-08-23	2024-04-15	2024-04-18	511 B	16 kB	104.18.2.35
cdnjs.cloudflare.com	235	2009-02-17	2015-04-17	2024-05-08	450 B	72 kB	104.17.25.14
i.gyazo.com	72426	2007-08-31	2014-03-14	2024-05-02	485 B	85 kB	104.18.24.163
cdn.glitch.global	282615	2021-09-09	2022-01-13	2024-04-13	1.0 kB	133 kB	151.101.194.132
maxcdn.bootstrapcdn.com	724	2012-05-25	2014-06-18	2024-05-07	942 B	196 kB	104.18.10.207
kit.fontawesome.com	1868	2012-10-18	2019-12-16	2024-05-07	495 B	12 kB	172.64.147.188
ka-f.fontawesome.com	3598	2012-10-18	2019-12-17	2024-05-07	1.1 kB	89 kB	104.21.26.223
stackpath.bootstrapcdn.com	2467	2012-05-25	2018-06-15	2024-05-08	466 B	52 kB	104.18.10.207

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

Scan Date	Severity	Indicator	Alert
2024-05-08	medium	pub-4a9f2846b0ac4fdfb7f74c040870263c.r2.dev/preplink.html	LinkedIn Corporation

PhishTank

Scan Date	Severity	Indicator	Alert
2024-04-16	medium	pub-4a9f2846b0ac4fdfb7f74c040870263c.r2.dev/preplink.html	Other

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (9)

	URL	Size	First Seen	Last Seen
	pub-4a9f2846b0ac4fdfb7f74c040870263c.r2.dev/preplink.html	260 B	2023-03-26	2024-05-15
Pretty URL pub-4a9f2846b0ac4fdfb7f74c040870263c.r2.dev/preplink.html IP 104.18.2.35 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-26 00:57:46 Last Seen2024-05-15 06:57:33 Times Seen7 Hash 47fb0f146159211e8684cd5aa1dfe60a b34f4c5c390f64d575ebf60d820399f57527a506 e39e08d0418c177748f62447d267313782aca2ce7867a17e71a26be2716dd9d8 Loading...

	unknown	4.8 kB	2024-05-08	2024-05-08
Pretty Introduced by scriptElement Embedded in HTML false Observations First Seen2024-05-08 18:11:38 Last Seen2024-05-08 18:11:38 Times Seen1 Hash 1626ecb3c5b1507a4aac1111bad64fc8 5006b5253e26466af3cf462113ed621d3558c668 e25454b36f11d454c5bb2143b7236ed6eb3c9d46ecc8bfae85a531d70f091314 Loading...

	unknown	114 B	2024-05-08	2024-05-08
Pretty Introduced by scriptElement Embedded in HTML false Observations First Seen2024-05-08 18:11:38 Last Seen2024-05-08 18:11:38 Times Seen1 Hash cb18f9966436b3a276c9c796ff340db6 1aeb8907109e1a379c4adf7ab35232347bab54dc 0d5ede06003e0a8c300440d5e27dd2fe9ec53bd45dd97f879a7ab361fc9429b9 Loading...

	kit.fontawesome.com/585b051251.js	12 kB	2023-11-29	2024-05-19
Pretty URL kit.fontawesome.com/585b051251.js IP 172.64.147.188 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-11-29 01:32:53 Last Seen2024-05-19 21:46:44 Times Seen9594 Hash 55d343a40c7166a79fd314f13cbb2e93 96904a849c32ca220e0aaa2ae3e81cf2b5cdf764 a1f75d6278713a84a8f28a392c77ca8a6a7c32bf14314d4a34a6ce2f06cfdf7a Loading...

	cdnjs.cloudflare.com/ajax/libs/jquery/3.6.1/jquery.js	290 kB	2023-03-07	2024-05-15
Pretty URL cdnjs.cloudflare.com/ajax/libs/jquery/3.6.1/jquery.js IP 104.17.25.14 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 13:47:10 Last Seen2024-05-15 06:57:33 Times Seen941 Hash 7e26506326a182c4175e54acda7ef15e 01ee1a965e756292430031c46f258d6e2d3a961d df3941e6cdaec28533ad72b7053ec05f7172be88ecada345c42736bc2ffba4d2 Loading...

	maxcdn.bootstrapcdn.com/bootstrap/4.0.0/js/bootstrap.min.js	49 kB	2023-03-07	2024-05-19
Pretty URL maxcdn.bootstrapcdn.com/bootstrap/4.0.0/js/bootstrap.min.js IP 104.18.10.207 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:02:44 Last Seen2024-05-19 21:23:41 Times Seen141258 Hash 14d449eb8876fa55e1ef3c2cc52b0c17 a9545831803b1359cfeed47e3b4d6bae68e40e99 e7ed36ceee5450b4243bbc35188afabdfb4280c7c57597001de0ed167299b01b Loading...

	stackpath.bootstrapcdn.com/bootstrap/4.1.3/js/bootstrap.min.js	51 kB	2023-03-07	2024-05-19
Pretty URL stackpath.bootstrapcdn.com/bootstrap/4.1.3/js/bootstrap.min.js IP 104.18.10.207 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:02:44 Last Seen2024-05-19 21:23:41 Times Seen249910 Hash 67176c242e1bdc20603c878dee836df3 27a71b00383d61ef3c489326b3564d698fc1227c 56c12a125b021d21a69e61d7190cefa168d6c28ce715265cea1b3b0112d169c4 Loading...

	pub-4a9f2846b0ac4fdfb7f74c040870263c.r2.dev/preplink.html	10 kB	2024-05-08	2024-05-08
Pretty URL pub-4a9f2846b0ac4fdfb7f74c040870263c.r2.dev/preplink.html IP 104.18.2.35 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2024-05-08 18:11:38 Last Seen2024-05-08 18:11:38 Times Seen1 Hash 87210e887e6a869a0f98f273f56337a8 570682987d5430c5acaa5ed5e39bcd6e05b6bc8f bcf0a9938808284b73a5c44e1e9f9ce893add318af1dc9642ee77c065e0e7bac Loading...

		Size	First Seen	Last Seen
	#1 Write - c801c3fe146d8ad904a797f566079c3f	5.0 kB	2024-05-08	2024-05-08
Pretty Observations First Seen2024-05-08 18:11:38 Last Seen2024-05-08 18:11:38 Times Seen1 Hash c801c3fe146d8ad904a797f566079c3f 2421091ccca5e6678d2c18f125755e6c8231dceb ad7cc7af8fcc6afc067e355e00110676a0ecf5dd9b51399c2e7223fb1729fcb2 Loading...

HTTP Transactions (11)

URL IP Response Size

pub-4a9f2846b0ac4fdfb7f74c040870263c.r2.dev/preplink.html

104.18.2.35

200 OK

15 kB

URL User Request GET HTTP/1.1
pub-4a9f2846b0ac4fdfb7f74c040870263c.r2.dev/preplink.html
IP
104.18.2.35:443
ASN
#13335 CLOUDFLARENET

Certificate
IssuerLet's Encrypt
Subject*.r2.dev
Fingerprint48:74:F0:98:E0:A1:57:3E:86:18:BF:B3:DC:C9:7A:5B:53:50:FE:E0
ValidityFri, 05 Apr 2024 15:25:24 GMT - Thu, 04 Jul 2024 15:25:23 GMT

File type
HTML document, Unicode text, UTF-8 text, with very long lines (10581), with CRLF line terminators
Size
15 kB (15411 bytes)
Hash
dc3bacbdae50d5fd3370c77b3d7464a1
b79f25cdc52e6651303271b0da586153e5c12b95
858b3421843627e87a24af96b2c029b99ffc17c411f06c5e12d111d87500cea0

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	LinkedIn Corporation
PhishTank	phishing	Other

HTTP Headers

GET /preplink.html HTTP/1.1
Host: pub-4a9f2846b0ac4fdfb7f74c040870263c.r2.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Wed, 08 May 2024 16:11:11 GMT
Content-Type: text/html
Content-Length: 15411
Connection: keep-alive
Accept-Ranges: bytes
ETag: "dc3bacbdae50d5fd3370c77b3d7464a1"
Last-Modified: Mon, 15 Apr 2024 05:37:08 GMT
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 880ab9641e4256af-OSL

cdnjs.cloudflare.com/ajax/libs/jquery/3.6.1/jquery.js

104.17.25.14

200 OK

71 kB

URL GET HTTP/2
cdnjs.cloudflare.com/ajax/libs/jquery/3.6.1/jquery.js
IP
104.17.25.14:443
ASN
#13335 CLOUDFLARENET

Requested by
https://pub-4a9f2846b0ac4fdfb7f74c040870263c.r2.dev/preplink.html
Certificate
IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint7A:EA:B9:09:71:70:6C:87:C9:D3:82:74:8A:7B:B4:60:E5:40:2D:8D
ValidityMon, 03 Jul 2023 00:00:00 GMT - Tue, 02 Jul 2024 23:59:59 GMT

File type
JavaScript source, ASCII text
Size
71 kB (70588 bytes)
Hash
7e26506326a182c4175e54acda7ef15e
01ee1a965e756292430031c46f258d6e2d3a961d
df3941e6cdaec28533ad72b7053ec05f7172be88ecada345c42736bc2ffba4d2

HTTP Headers

GET /ajax/libs/jquery/3.6.1/jquery.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://pub-4a9f2846b0ac4fdfb7f74c040870263c.r2.dev
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Wed, 08 May 2024 16:11:12 GMT
content-type: application/javascript; charset=utf-8
content-length: 70588
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "63091225-113bc"
last-modified: Fri, 26 Aug 2022 18:34:13 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 676531
expires: Mon, 28 Apr 2025 16:11:12 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=CYcZxdHX47B6u9rH9hdbHdYIUthf8qFBUrgOxTm1DEGxR4IuZLIRwidgvnapIOZrZeVkXFzTRu1VUZU8V6SymxRRoYNvn6hn4qGhkCGP9NCPj4SrfGs0I2l7HELJeENhycCSdYqM"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 880ab9693eb00b69-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

i.gyazo.com/e62f80ff2ac874cd4491a99ef09a6f51.gif

104.18.24.163

200 OK

84 kB

URL GET HTTP/2
i.gyazo.com/e62f80ff2ac874cd4491a99ef09a6f51.gif
IP
104.18.24.163:443
ASN
#13335 CLOUDFLARENET

Requested by
https://pub-4a9f2846b0ac4fdfb7f74c040870263c.r2.dev/preplink.html
Certificate
IssuerLet's Encrypt
Subjectgyazo.com
FingerprintB1:88:95:2F:E3:8B:92:D7:5A:FA:0F:4B:8C:CB:22:9F:DF:EA:DB:F8
ValidityWed, 03 Apr 2024 02:09:12 GMT - Tue, 02 Jul 2024 02:09:11 GMT

File type
GIF image data, version 89a, 200 x 200
Size
84 kB (84078 bytes)
Hash
e62f80ff2ac874cd4491a99ef09a6f51
c7d972eb2f1d191ff70c49f9ef20a8563a27974f
6d2aa9a1a7675860102f88df6db429409230ed97d747b2dd2b1f41b750504ac3

HTTP Headers

GET /e62f80ff2ac874cd4491a99ef09a6f51.gif HTTP/1.1
Host: i.gyazo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pub-4a9f2846b0ac4fdfb7f74c040870263c.r2.dev/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Wed, 08 May 2024 16:11:12 GMT
content-type: image/gif
content-length: 84078
cf-ray: 880ab9696c1bb512-OSL
cf-cache-status: HIT
accept-ranges: bytes
access-control-allow-origin: https://gyazo.com
age: 135731
cache-control: public, max-age=31536000
etag: "e62f"
expires: Thu, 08 May 2025 16:11:12 GMT
set-cookie: Gyazo_cfwoker=i; Secure; HttpOnly; SameSite=None; Expires=Tue, 01 Jan 2030 00:00:00 GMT
vary: Accept-Encoding
via: 1.1 google
access-control-allow-credentials: true
server: cloudflare
X-Firefox-Spdy: h2

cdn.glitch.global/e8bbef66-16ac-4e56-a145-277d0daf5037/logoo.png?v=1712913250747

151.101.194.132

200 OK

40 kB

URL GET HTTP/2
cdn.glitch.global/e8bbef66-16ac-4e56-a145-277d0daf5037/logoo.png?v=1712913250747
IP
151.101.194.132:443
ASN
#54113 FASTLY

Requested by
https://pub-4a9f2846b0ac4fdfb7f74c040870263c.r2.dev/preplink.html
Certificate
IssuerLet's Encrypt
Subjectcdn.glitch.global
FingerprintF2:EB:85:15:C1:89:0D:2A:EF:A5:2E:07:1E:4F:69:31:EF:1C:8C:06
ValiditySun, 31 Mar 2024 19:31:34 GMT - Sat, 29 Jun 2024 19:31:33 GMT

File type
PNG image data, 2560 x 695, 8-bit/color RGBA, non-interlaced
Size
40 kB (40097 bytes)
Hash
463c825e39956d14a6d693ebc28dce9d
987d1cd04e884ce3f827c50ea66c506ae2b2794c
a2f6309a18fc8a00e46c7d3abad046e897de4e6503bcf3244df9378b298b3198

HTTP Headers

GET /e8bbef66-16ac-4e56-a145-277d0daf5037/logoo.png?v=1712913250747 HTTP/1.1
Host: cdn.glitch.global
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pub-4a9f2846b0ac4fdfb7f74c040870263c.r2.dev/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
x-amz-id-2: XcZiZNGxSRwqs346Yy3SORsiGQOeQtrpljUVpsBQaR26IJZEWjFX0e9yh0IUYFhH06DSqQQXB+4=
x-amz-request-id: 0A0RW7EASX67VFT9
last-modified: Fri, 12 Apr 2024 09:14:08 GMT
etag: "463c825e39956d14a6d693ebc28dce9d"
x-amz-server-side-encryption: AES256
cache-control: max-age=31536000
content-type: image/png
server: AmazonS3
via: 1.1 varnish, 1.1 varnish
access-control-allow-methods: GET, HEAD, POST
access-control-allow-origin: *
content-security-policy: script-src 'none'
accept-ranges: bytes
age: 506712
date: Wed, 08 May 2024 16:11:12 GMT
x-served-by: cache-iad-kcgs7200052-IAD, cache-hel1410029-HEL
x-cache: HIT, MISS
x-cache-hits: 61, 0
x-timer: S1715184672.399145,VS0,VE98
content-length: 40097
X-Firefox-Spdy: h2

cdn.glitch.global/e8bbef66-16ac-4e56-a145-277d0daf5037/bgg.jpg?v=1712913260146

151.101.194.132

200 OK

91 kB

URL GET HTTP/2
cdn.glitch.global/e8bbef66-16ac-4e56-a145-277d0daf5037/bgg.jpg?v=1712913260146
IP
151.101.194.132:443
ASN
#54113 FASTLY

Requested by
https://pub-4a9f2846b0ac4fdfb7f74c040870263c.r2.dev/preplink.html
Certificate
IssuerLet's Encrypt
Subjectcdn.glitch.global
FingerprintF2:EB:85:15:C1:89:0D:2A:EF:A5:2E:07:1E:4F:69:31:EF:1C:8C:06
ValiditySun, 31 Mar 2024 19:31:34 GMT - Sat, 29 Jun 2024 19:31:33 GMT

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1098x861, components 3
Size
91 kB (91092 bytes)
Hash
6d4e9a43d97b4bf5384f42d4e9faa614
6d1f2cf87af4fe4f62a802c6521b1813f1189675
c8137cdbaf0e32928a305bd29bbb628855c6cd7f09e6ea4c2c156c7fa739f69e

HTTP Headers

GET /e8bbef66-16ac-4e56-a145-277d0daf5037/bgg.jpg?v=1712913260146 HTTP/1.1
Host: cdn.glitch.global
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pub-4a9f2846b0ac4fdfb7f74c040870263c.r2.dev/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
x-amz-id-2: 4MsdJ4U7m0w2gFTmmqIb4w8qCMzdoRFait8J/m932jwkDo8YNQ6LU9tFxIGeGBb+FRaYkPaJTuflSzdrCBMT61Ru0h/qnM3FrRViLRQt87U=
x-amz-request-id: G2KHQC7Y6NTG2DCY
last-modified: Fri, 12 Apr 2024 09:14:16 GMT
etag: "6d4e9a43d97b4bf5384f42d4e9faa614"
x-amz-server-side-encryption: AES256
cache-control: max-age=31536000
content-type: image/jpeg
server: AmazonS3
via: 1.1 varnish, 1.1 varnish
access-control-allow-methods: GET, HEAD, POST
access-control-allow-origin: *
content-security-policy: script-src 'none'
accept-ranges: bytes
date: Wed, 08 May 2024 16:11:12 GMT
age: 11442
x-served-by: cache-iad-kcgs7200113-IAD, cache-hel1410029-HEL
x-cache: HIT, MISS
x-cache-hits: 13, 0
x-timer: S1715184673.502211,VS0,VE195
content-length: 91092
X-Firefox-Spdy: h2

maxcdn.bootstrapcdn.com/bootstrap/4.0.0/css/bootstrap.min.css

104.18.10.207

200 OK

145 kB

URL GET HTTP/2
maxcdn.bootstrapcdn.com/bootstrap/4.0.0/css/bootstrap.min.css
IP
104.18.10.207:443
ASN
#13335 CLOUDFLARENET

Requested by
https://pub-4a9f2846b0ac4fdfb7f74c040870263c.r2.dev/preplink.html
Certificate
IssuerGoogle Trust Services LLC
Subjectbootstrapcdn.com
Fingerprint57:B4:25:B9:9C:88:A1:A3:3D:F7:31:74:02:E4:D1:E0:0A:F5:11:63
ValidityWed, 27 Mar 2024 00:22:09 GMT - Tue, 25 Jun 2024 00:22:08 GMT

File type
ASCII text, with very long lines (65325)
Size
145 kB (144877 bytes)
Hash
450fc463b8b1a349df717056fbb3e078
895125a4522a3b10ee7ada06ee6503587cbf95c5
2c0f3dcfe93d7e380c290fe4ab838ed8cadff1596d62697f5444be460d1f876d

HTTP Headers

GET /bootstrap/4.0.0/css/bootstrap.min.css HTTP/1.1
Host: maxcdn.bootstrapcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pub-4a9f2846b0ac4fdfb7f74c040870263c.r2.dev/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Wed, 08 May 2024 16:11:12 GMT
content-type: text/css; charset=utf-8
vary: Accept-Encoding
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: DE
access-control-allow-origin: *
cache-control: public, max-age=31919000
etag: W/"450fc463b8b1a349df717056fbb3e078"
last-modified: Mon, 25 Jan 2021 22:04:04 GMT
cdn-cachedat: 10/31/2023 18:48:44
cdn-proxyver: 1.04
cdn-requestpullcode: 200
cdn-requestpullsuccess: True
cdn-edgestorageid: 752
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
cdn-status: 200
cdn-requestid: 6f2d14e9436097e66447b103aa0360de
cdn-cache: HIT
cf-cache-status: HIT
age: 682372
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 880ab9693a8d7128-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

kit.fontawesome.com/585b051251.js

172.64.147.188

200 OK

12 kB

URL GET HTTP/2
kit.fontawesome.com/585b051251.js
IP
172.64.147.188:443
ASN
#13335 CLOUDFLARENET

Requested by
https://pub-4a9f2846b0ac4fdfb7f74c040870263c.r2.dev/preplink.html
Certificate
IssuerDigiCert Inc
Subject*.fontawesome.com
Fingerprint93:F9:69:8C:73:B0:08:60:65:F3:39:41:39:66:D3:2B:78:3A:6E:3D
ValidityMon, 04 Dec 2023 00:00:00 GMT - Fri, 03 Jan 2025 23:59:59 GMT

File type
JavaScript source, ASCII text, with very long lines (11461)
Size
12 kB (11893 bytes)
Hash
55d343a40c7166a79fd314f13cbb2e93
96904a849c32ca220e0aaa2ae3e81cf2b5cdf764
a1f75d6278713a84a8f28a392c77ca8a6a7c32bf14314d4a34a6ce2f06cfdf7a

HTTP Headers

GET /585b051251.js HTTP/1.1
Host: kit.fontawesome.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://pub-4a9f2846b0ac4fdfb7f74c040870263c.r2.dev
DNT: 1
Connection: keep-alive
Referer: https://pub-4a9f2846b0ac4fdfb7f74c040870263c.r2.dev/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Wed, 08 May 2024 16:11:12 GMT
content-type: text/javascript
access-control-allow-headers: accept, accept-langauge, content-language, content-type, fa-kit-token
access-control-allow-methods: GET, OPTIONS
access-control-allow-origin: *
access-control-max-age: 3000
cache-control: max-age=60, public, stale-while-revalidate=30
vary: origin, accept-encoding, access-control-request-headers, access-control-request-method
x-request-id: F82PXzwmncnadn8OwGQj
cf-cache-status: MISS
server: cloudflare
cf-ray: 880ab9692efa0b59-OSL
content-encoding: gzip
X-Firefox-Spdy: h2

ka-f.fontawesome.com/releases/v5.15.4/css/free.min.css?token=585b051251

104.21.26.223

200 OK

60 kB

URL GET HTTP/2
ka-f.fontawesome.com/releases/v5.15.4/css/free.min.css?token=585b051251
IP
104.21.26.223:443
ASN
#13335 CLOUDFLARENET

Requested by
https://pub-4a9f2846b0ac4fdfb7f74c040870263c.r2.dev/preplink.html
Certificate
IssuerGoogle Trust Services LLC
Subjectka-f.fontawesome.com
FingerprintB7:87:04:20:5C:0E:FA:B1:92:D1:3B:91:3F:39:7C:48:5C:CB:01:EA
ValidityFri, 03 May 2024 11:08:04 GMT - Thu, 01 Aug 2024 11:08:03 GMT

File type
ASCII text, with very long lines (60130)
Size
60 kB (60312 bytes)
Hash
a12ec7ebe75a4d59a5dd6b79e2ba2e16
28f5dcc595ee6d4163481ef64170180502c8629b
fc5128dfdcdfa0c3a9967a6d2f19399d7bf1aaae6ad7571b96b03915a1f30dda

HTTP Headers

GET /releases/v5.15.4/css/free.min.css?token=585b051251 HTTP/1.1
Host: ka-f.fontawesome.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pub-4a9f2846b0ac4fdfb7f74c040870263c.r2.dev/
Origin: https://pub-4a9f2846b0ac4fdfb7f74c040870263c.r2.dev
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Wed, 08 May 2024 16:11:12 GMT
content-type: text/css
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-max-age: 3000
last-modified: Wed, 04 Aug 2021 18:53:09 GMT
etag: W/"a12ec7ebe75a4d59a5dd6b79e2ba2e16"
cache-control: max-age=31556926
access-control-allow-headers: fa-kit-token
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 6cb1d4b545e7beb4ead790454f4807c6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: gmTD4WNC9_FYLSVPf0xzRwvxw1sMrY2hG0LjCIKexpjrxVqmY-4mQA==
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=53jL9g9FtsIbOJGaJgsmJoR42YxUyNR2CZQA%2FCUGmis4qJshwbeaIn3LLbPGizLToZ8VPrCUfOo7TzyJUgmYcov%2FCWYQWrIRUmK%2FAmn4W%2FnKXB7qJu76RHDdUw%2Fs6xp0NWD985NXPA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 880ab96b5e4356bd-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

maxcdn.bootstrapcdn.com/bootstrap/4.0.0/js/bootstrap.min.js

104.18.10.207

200 OK

49 kB

URL GET HTTP/2
maxcdn.bootstrapcdn.com/bootstrap/4.0.0/js/bootstrap.min.js
IP
104.18.10.207:443
ASN
#13335 CLOUDFLARENET

Requested by
https://pub-4a9f2846b0ac4fdfb7f74c040870263c.r2.dev/preplink.html
Certificate
IssuerGoogle Trust Services LLC
Subjectbootstrapcdn.com
Fingerprint57:B4:25:B9:9C:88:A1:A3:3D:F7:31:74:02:E4:D1:E0:0A:F5:11:63
ValidityWed, 27 Mar 2024 00:22:09 GMT - Tue, 25 Jun 2024 00:22:08 GMT

File type
JavaScript source, ASCII text, with very long lines (48664)
Size
49 kB (48944 bytes)
Hash
14d449eb8876fa55e1ef3c2cc52b0c17
a9545831803b1359cfeed47e3b4d6bae68e40e99
e7ed36ceee5450b4243bbc35188afabdfb4280c7c57597001de0ed167299b01b

HTTP Headers

GET /bootstrap/4.0.0/js/bootstrap.min.js HTTP/1.1
Host: maxcdn.bootstrapcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pub-4a9f2846b0ac4fdfb7f74c040870263c.r2.dev/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Wed, 08 May 2024 16:11:12 GMT
content-type: application/javascript; charset=utf-8
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: DE
vary: Accept-Encoding
access-control-allow-origin: *
cache-control: public, max-age=31919000
content-encoding: br
etag: W/"14d449eb8876fa55e1ef3c2cc52b0c17"
last-modified: Mon, 25 Jan 2021 22:04:04 GMT
cdn-cachedat: 03/18/2024 12:46:36
cdn-proxyver: 1.04
cdn-requestpullcode: 200
cdn-requestpullsuccess: True
cdn-edgestorageid: 1048
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
cdn-status: 200
cdn-requestid: e3f3bfe1b89f7f16a5a4802a3640b8c7
cdn-cache: HIT
cf-cache-status: HIT
age: 690790
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 880ab9694a9f7128-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

stackpath.bootstrapcdn.com/bootstrap/4.1.3/js/bootstrap.min.js

104.18.10.207

200 OK

51 kB

URL GET HTTP/2
stackpath.bootstrapcdn.com/bootstrap/4.1.3/js/bootstrap.min.js
IP
104.18.10.207:443
ASN
#13335 CLOUDFLARENET

Requested by
https://pub-4a9f2846b0ac4fdfb7f74c040870263c.r2.dev/preplink.html
Certificate
IssuerGoogle Trust Services LLC
Subjectbootstrapcdn.com
Fingerprint57:B4:25:B9:9C:88:A1:A3:3D:F7:31:74:02:E4:D1:E0:0A:F5:11:63
ValidityWed, 27 Mar 2024 00:22:09 GMT - Tue, 25 Jun 2024 00:22:08 GMT

File type
JavaScript source, ASCII text, with very long lines (50758)
Size
51 kB (51039 bytes)
Hash
67176c242e1bdc20603c878dee836df3
27a71b00383d61ef3c489326b3564d698fc1227c
56c12a125b021d21a69e61d7190cefa168d6c28ce715265cea1b3b0112d169c4

HTTP Headers

GET /bootstrap/4.1.3/js/bootstrap.min.js HTTP/1.1
Host: stackpath.bootstrapcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pub-4a9f2846b0ac4fdfb7f74c040870263c.r2.dev/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Wed, 08 May 2024 16:11:12 GMT
content-type: application/javascript; charset=utf-8
vary: Accept-Encoding
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: DE
access-control-allow-origin: *
cache-control: public, max-age=31919000
last-modified: Mon, 25 Jan 2021 22:04:06 GMT
cdn-cachedat: 11/15/2021 23:30:00
cdn-proxyver: 1.0
cdn-requestpullcode: 200
cdn-requestpullsuccess: True
cdn-edgestorageid: 723
cdn-status: 200
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
cdn-requestid: a35b0179a28ed953258d0fb41376a09c
cdn-cache: HIT
cf-cache-status: HIT
age: 676753
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 880ab9694aa07128-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

ka-f.fontawesome.com/releases/v5.15.4/css/free-v4-shims.min.css?token=585b051251

104.21.26.223

200 OK

27 kB

URL GET HTTP/2
ka-f.fontawesome.com/releases/v5.15.4/css/free-v4-shims.min.css?token=585b051251
IP
104.21.26.223:443
ASN
#13335 CLOUDFLARENET

Requested by
https://pub-4a9f2846b0ac4fdfb7f74c040870263c.r2.dev/preplink.html
Certificate
IssuerGoogle Trust Services LLC
Subjectka-f.fontawesome.com
FingerprintB7:87:04:20:5C:0E:FA:B1:92:D1:3B:91:3F:39:7C:48:5C:CB:01:EA
ValidityFri, 03 May 2024 11:08:04 GMT - Thu, 01 Aug 2024 11:08:03 GMT

File type
ASCII text, with very long lines (26500)
Size
27 kB (26682 bytes)
Hash
76f34b71fc9fb641507ff6a822cc07f5
73ed2f8f21cd40fb496e61306acbb5849d4dbff4
6dea47458a4cd7cd7312cc780a53c62e0c8b3ccc8d0b13c1ac0ea6e3dfcecea8

HTTP Headers

GET /releases/v5.15.4/css/free-v4-shims.min.css?token=585b051251 HTTP/1.1
Host: ka-f.fontawesome.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pub-4a9f2846b0ac4fdfb7f74c040870263c.r2.dev/
Origin: https://pub-4a9f2846b0ac4fdfb7f74c040870263c.r2.dev
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Wed, 08 May 2024 16:11:12 GMT
content-type: text/css
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-max-age: 3000
last-modified: Wed, 04 Aug 2021 18:53:09 GMT
etag: W/"76f34b71fc9fb641507ff6a822cc07f5"
cache-control: max-age=31556926
access-control-allow-headers: fa-kit-token
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 a034aae43a19aef875fa395182990970.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: y8RiagPwbiGjrN12TKBBmcqXTzjaxySFRGmjTHh_AR64hgKD462c1A==
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=PXXqGGytXTOqZZ2LXlumRMbHMS99tDQK6Pki%2BGZ6%2F1e4QaKewAOrpwvjwV5p5MIKYCyAg3nOXPA0eklOe0tsjapC6qaMiX0VMEkOmR7HWSt0oCX3g9CjmxdrPuRVP2u2IueFIWlL8Q%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 880ab96b5e4e56bd-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (9)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

Observations

Hash

HTTP Transactions (11)

URL User Request GET HTTP/1.1