Report - demo3.cloudwp.dev/trial-w3v4ttw2/securecitzn/

Report Overview

Submitted URL
demo3.cloudwp.dev/trial-w3v4ttw2/securecitzn/
IP
173.231.217.236
ASN
#54641 IMH-IAD
Submitted
2024-05-11 02:40:08
Access
public
Website Title
Inactive Location
Final URL
demo3.cloudwp.dev/inactive.htm
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
2

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
demo3.cloudwp.dev	unknown	unknown	No data	No data	1.5 kB	13 kB	173.231.217.236
fonts.gstatic.com	unknown	unknown	No data	No data	1.1 kB	43 kB	216.58.207.227
central.inmotionhosting.com	unknown	unknown	No data	No data	1.4 kB	18 kB	172.66.41.31
inmotionhosting.github.io	unknown	unknown	No data	No data	465 B	11 kB	185.199.108.153

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

Scan Date	Severity	Indicator	Alert
2022-12-14	medium	demo3.cloudwp.dev/trial-w3v4ttw2/securecitzn/	Other

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (1)

	URL	Size	First Seen	Last Seen
	demo3.cloudwp.dev/inactive.htm	6.0 kB	2024-05-11	2024-05-11
Pretty URL demo3.cloudwp.dev/inactive.htm IP 173.231.217.236 ASN #54641 IMH-IAD Introduced by scriptElement Embedded in HTML true Observations First Seen2024-05-11 04:40:30 Last Seen2024-05-11 04:40:30 Times Seen1 Hash 06519c0ecf70492f275e38e53368ac05 34c56412d81d57b0538cc020c733c33d36bb80b2 d82f0a9329d385dd7d36426fffd0bc575a50212cb334fa5510e0f1459575ce17 Loading...

HTTP Transactions (9)

URL IP Response Size

demo3.cloudwp.dev/trial-w3v4ttw2/securecitzn/

173.231.217.236

301 Moved Permanently

246 B

URL User Request GET HTTP/2
demo3.cloudwp.dev/trial-w3v4ttw2/securecitzn/
IP
173.231.217.236:443
ASN
#54641 IMH-IAD

Certificate
IssuerSectigo Limited
Subject*.cloudwp.dev
Fingerprint7F:88:43:CA:7E:14:89:39:5D:BE:E3:8E:2F:2C:49:BA:FB:DE:59:20
ValidityTue, 27 Feb 2024 00:00:00 GMT - Mon, 17 Mar 2025 23:59:59 GMT

File type
HTML document, ASCII text
Size
246 B (246 bytes)
Hash
b1ee21120dce42bab96f563a2fc5a078
eb3afd5623d81214428b4f37072272632c974cdb
04802201e54df28e557851961c5a730122344e1b3475500ce5a7f7a70a7b4f4c

Detections

Analyzer	Verdict	Alert
PhishTank	phishing	Other

HTTP Headers

GET /trial-w3v4ttw2/securecitzn/ HTTP/1.1
Host: demo3.cloudwp.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 301 Moved Permanently
server: nginx
date: Sat, 11 May 2024 01:30:47 GMT
content-type: text/html; charset=iso-8859-1
content-length: 246
cache-control: max-age=0, no-cache, no-store, must-revalidate
pragma: no-cache
expires: Sun, 20 Apr 1975 05:05:00 GMT
location: https://demo3.cloudwp.dev/inactive.htm
x-proxy-cache: MISS
x-robots-tag: noindex, nofollow, noarchive, nosnippet
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2

fonts.gstatic.com/s/exo2/v3/-A4eIjQkAwKL411pgtQ4VA.woff2

216.58.207.227

200 OK

20 kB

URL GET HTTP/2
fonts.gstatic.com/s/exo2/v3/-A4eIjQkAwKL411pgtQ4VA.woff2
IP
216.58.207.227:443
ASN
#15169 GOOGLE

Requested by
https://demo3.cloudwp.dev/inactive.htm
Certificate
IssuerGoogle Trust Services LLC
Subject*.gstatic.com
Fingerprint15:DD:05:B3:2F:D8:E3:54:C9:B4:FA:E4:AC:01:ED:C8:E1:EA:A7:AD
ValidityTue, 16 Apr 2024 04:17:07 GMT - Tue, 09 Jul 2024 04:17:06 GMT

File type
Web Open Font Format (Version 2), TrueType, length 19516, version 1.65
Size
20 kB (19516 bytes)
Hash
d4ca8d74b0e60bc12aff23761498c73d
403689d08005fec559afc2f3070d5d2817d62595
25706f2aee8b387e4ce26b4cbcf4a6b79d385c1415f21baa41706fc7ed4520ea

HTTP Headers

GET /s/exo2/v3/-A4eIjQkAwKL411pgtQ4VA.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://demo3.cloudwp.dev
DNT: 1
Connection: keep-alive
Referer: https://demo3.cloudwp.dev/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 19516
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 10 May 2024 01:50:12 GMT
expires: Sat, 10 May 2025 01:50:12 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 27 Aug 2014 15:24:19 GMT
content-type: font/woff2
age: 85227
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

fonts.gstatic.com/s/josefinsans/v9/C6HYlRF50SGJq1XyXj04z04GofcKVZz6wtzX_QUIqsI.woff2

216.58.207.227

200 OK

22 kB

URL GET HTTP/2
fonts.gstatic.com/s/josefinsans/v9/C6HYlRF50SGJq1XyXj04z04GofcKVZz6wtzX_QUIqsI.woff2
IP
216.58.207.227:443
ASN
#15169 GOOGLE

Requested by
https://demo3.cloudwp.dev/inactive.htm
Certificate
IssuerGoogle Trust Services LLC
Subject*.gstatic.com
Fingerprint15:DD:05:B3:2F:D8:E3:54:C9:B4:FA:E4:AC:01:ED:C8:E1:EA:A7:AD
ValidityTue, 16 Apr 2024 04:17:07 GMT - Tue, 09 Jul 2024 04:17:06 GMT

File type
Web Open Font Format (Version 2), TrueType, length 22244, version 1.0
Size
22 kB (22244 bytes)
Hash
6a6b4d48d3990297f8feb86f96e8386e
beef652f807f9bb675aed8738aead08fdea31611
70716a99384f70e8f55280615bf0ddf84d17c5561769e1671ee736bda8c2796a

HTTP Headers

GET /s/josefinsans/v9/C6HYlRF50SGJq1XyXj04z04GofcKVZz6wtzX_QUIqsI.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://demo3.cloudwp.dev
DNT: 1
Connection: keep-alive
Referer: https://demo3.cloudwp.dev/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 22244
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 10 May 2024 08:07:21 GMT
expires: Sat, 10 May 2025 08:07:21 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 06 Oct 2014 20:36:34 GMT
content-type: font/woff2
age: 62598
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

demo3.cloudwp.dev/inactive.htm

173.231.217.236

200 OK

7.2 kB

URL User Request GET HTTP/2
demo3.cloudwp.dev/inactive.htm
IP
173.231.217.236:443
ASN
#54641 IMH-IAD

Certificate
IssuerSectigo Limited
Subject*.cloudwp.dev
Fingerprint7F:88:43:CA:7E:14:89:39:5D:BE:E3:8E:2F:2C:49:BA:FB:DE:59:20
ValidityTue, 27 Feb 2024 00:00:00 GMT - Mon, 17 Mar 2025 23:59:59 GMT

File type
HTML document, Unicode text, UTF-8 text, with very long lines (1163)
Size
7.2 kB (7213 bytes)
Hash
b61a6bbda656025eaa3203b69db0acfb
cf1005856d5186813b4a53c560dd854ebd0275e5
53341b45283567ee1648c61037399cd1b9bf4c85ed455d0b794beb1c361c925d

HTTP Headers

GET /inactive.htm HTTP/1.1
Host: demo3.cloudwp.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx
date: Sat, 11 May 2024 01:30:47 GMT
content-type: text/html; charset=utf-8
vary: Accept-Encoding
last-modified: Tue, 08 Nov 2022 18:24:43 GMT
x-proxy-cache: MISS
x-robots-tag: noindex, nofollow, noarchive, nosnippet
strict-transport-security: max-age=31536000; includeSubDomains
content-encoding: gzip
X-Firefox-Spdy: h2

demo3.cloudwp.dev/favicon.ico

173.231.217.236

200 OK

4.3 kB

URL GET HTTP/2
demo3.cloudwp.dev/favicon.ico
IP
173.231.217.236:443
ASN
#54641 IMH-IAD

Requested by
https://demo3.cloudwp.dev/inactive.htm
Certificate
IssuerSectigo Limited
Subject*.cloudwp.dev
Fingerprint7F:88:43:CA:7E:14:89:39:5D:BE:E3:8E:2F:2C:49:BA:FB:DE:59:20
ValidityTue, 27 Feb 2024 00:00:00 GMT - Mon, 17 Mar 2025 23:59:59 GMT

File type
MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel
Size
4.3 kB (4286 bytes)
Hash
d019c557286aafecd80e84c9e1d62013
8e1fc65092d7e84a7bb4776c9974ce50dd53de8d
b4d7532f25a1284d1e5e44b345c6cc3971ac77f2cea906021dfc011a0bd2a8b9

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: demo3.cloudwp.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://demo3.cloudwp.dev/inactive.htm
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx
date: Sat, 11 May 2024 01:30:48 GMT
content-type: image/x-icon
content-length: 4286
last-modified: Fri, 10 May 2019 16:07:42 GMT
etag: "5cd5a1ce-10be"
access-control-allow-methods: GET, POST, OPTIONS, HEAD
access-control-allow-origin: *
x-robots-tag: noindex, nofollow, noarchive, nosnippet
strict-transport-security: max-age=31536000; includeSubDomains
accept-ranges: bytes
X-Firefox-Spdy: h2

central.inmotionhosting.com/assets/branding/logo.svg

172.66.41.31

302 Found

143 B

URL GET HTTP/2
central.inmotionhosting.com/assets/branding/logo.svg
IP
172.66.41.31:443
ASN
#13335 CLOUDFLARENET

Requested by
https://demo3.cloudwp.dev/inactive.htm
Certificate
IssuerLet's Encrypt
Subjectcentral.inmotionhosting.com
Fingerprint8D:8B:B5:2F:F6:20:CA:01:94:DD:91:56:F9:86:38:CC:C1:41:E7:DB
ValidityFri, 05 Apr 2024 03:27:40 GMT - Thu, 04 Jul 2024 03:27:39 GMT

File type
HTML document, ASCII text, with CRLF line terminators
Size
143 B (143 bytes)
Hash
cb7b8f439b04c00f4a2d78160ddfee8d
9aa44b5d68f6359f10de0dcd24ea3e12548d9bd4
12755429beb15d5eb57eafa45b8dba326343dd099bf0552038694c3856e8860e

HTTP Headers

GET /assets/branding/logo.svg HTTP/1.1
Host: central.inmotionhosting.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://demo3.cloudwp.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 302 Found
date: Sat, 11 May 2024 01:30:40 GMT
content-type: text/html
content-length: 143
location: https://central.inmotionhosting.com/assets/branding/default/logo.svg
cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
expires: Thu, 01 Jan 1970 00:00:01 GMT
vary: Accept-Encoding
server: cloudflare
cf-ray: 881e67b03a37b503-OSL
X-Firefox-Spdy: h2

central.inmotionhosting.com/assets/branding/default/logo.svg

172.66.41.31

200 OK

8.5 kB

URL GET HTTP/2
central.inmotionhosting.com/assets/branding/default/logo.svg
IP
172.66.41.31:443
ASN
#13335 CLOUDFLARENET

Requested by
https://demo3.cloudwp.dev/inactive.htm
Certificate
IssuerLet's Encrypt
Subjectcentral.inmotionhosting.com
Fingerprint8D:8B:B5:2F:F6:20:CA:01:94:DD:91:56:F9:86:38:CC:C1:41:E7:DB
ValidityFri, 05 Apr 2024 03:27:40 GMT - Thu, 04 Jul 2024 03:27:39 GMT

File type
SVG Scalable Vector Graphics image
Size
8.5 kB (8494 bytes)
Hash
02e2160345589dd94965cd89282bbd83
d6115df8cf0b0da1f79fddf05efd2c3491783319
fb1e823866e480c727ae93c641f6683677e6238a0a1809b4574f069156e250b7

HTTP Headers

GET /assets/branding/default/logo.svg HTTP/1.1
Host: central.inmotionhosting.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://demo3.cloudwp.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Sat, 11 May 2024 01:30:40 GMT
content-type: image/svg+xml
last-modified: Tue, 23 Apr 2024 20:55:11 GMT
etag: W/"6628202f-212e"
cache-control: max-age=31536000
strict-transport-security: max-age=15724800; includeSubDomains
cf-cache-status: HIT
age: 62598
vary: Accept-Encoding
server: cloudflare
cf-ray: 881e67b04a3eb503-OSL
content-encoding: br
X-Firefox-Spdy: h2

inmotionhosting.github.io/static-assets/marks/central-wordmark.svg

185.199.108.153

200 OK

9.9 kB

URL GET HTTP/2
inmotionhosting.github.io/static-assets/marks/central-wordmark.svg
IP
185.199.108.153:443
ASN
#54113 FASTLY

Requested by
https://demo3.cloudwp.dev/inactive.htm
Certificate
IssuerDigiCert Inc
Subject*.github.io
Fingerprint97:D8:C5:70:0F:12:24:6C:88:BC:FA:06:7E:8C:A7:4D:A8:62:67:28
ValidityFri, 15 Mar 2024 00:00:00 GMT - Fri, 14 Mar 2025 23:59:59 GMT

File type
SVG Scalable Vector Graphics image
Size
9.9 kB (9942 bytes)
Hash
3832e73bc9a0174586613f2016e1efea
adc109fef1dbcd9fff6d4ec7bf261c9d61c82769
b3f5721e7024d7b4e43d092dc658ae9f702253c939b81f38b683f39dcee0ea16

HTTP Headers

GET /static-assets/marks/central-wordmark.svg HTTP/1.1
Host: inmotionhosting.github.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://demo3.cloudwp.dev/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: GitHub.com
content-type: image/svg+xml
permissions-policy: interest-cohort=()
x-origin-cache: HIT
last-modified: Tue, 21 Nov 2023 20:13:03 GMT
access-control-allow-origin: *
etag: W/"655d0f4f-26d6"
expires: Sat, 11 May 2024 01:40:39 GMT
cache-control: max-age=600
content-encoding: gzip
x-proxy-cache: MISS
x-github-request-id: 31E2:3AE3E8:27D6E85:28D3548:663ECA3E
accept-ranges: bytes
age: 0
date: Sat, 11 May 2024 01:30:39 GMT
via: 1.1 varnish
x-served-by: cache-hel1410029-HEL
x-cache: MISS
x-cache-hits: 0
x-timer: S1715391040.576746,VS0,VE128
vary: Accept-Encoding
x-fastly-request-id: 060896908aa8a67b4e8e33fb0f4eb32ca0ce6bb7
content-length: 4027
X-Firefox-Spdy: h2

central.inmotionhosting.com/wordpress/assets/branding/logo.svg

172.66.41.31

301 Moved Permanently

8.5 kB

URL GET HTTP/2
central.inmotionhosting.com/wordpress/assets/branding/logo.svg
IP
172.66.41.31:443
ASN
#13335 CLOUDFLARENET

Requested by
https://demo3.cloudwp.dev/inactive.htm
Certificate
IssuerLet's Encrypt
Subjectcentral.inmotionhosting.com
Fingerprint8D:8B:B5:2F:F6:20:CA:01:94:DD:91:56:F9:86:38:CC:C1:41:E7:DB
ValidityFri, 05 Apr 2024 03:27:40 GMT - Thu, 04 Jul 2024 03:27:39 GMT

File type

Size
8.5 kB (8494 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /wordpress/assets/branding/logo.svg HTTP/1.1
Host: central.inmotionhosting.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://demo3.cloudwp.dev/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 301 Moved Permanently
date: Sat, 11 May 2024 01:30:40 GMT
content-type: text/html
location: https://central.inmotionhosting.com/assets/branding/logo.svg
strict-transport-security: max-age=15724800; includeSubDomains
cf-cache-status: EXPIRED
vary: Accept-Encoding
server: cloudflare
cf-ray: 881e67af69f8b503-OSL
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (1)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (9)

URL User Request GET HTTP/2

IP

ASN

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL User Request GET HTTP/2

IP

ASN

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/2

IP