| cf-ipfs.com/ipfs/QmNLmv3J5DCwCXgFwKWFqHXM8ruC4g15GePnBDawyT4Bc4 | 104.17.64.14 | 301 Moved Permanently | 120 B |
URL User Request GET HTTP/2cf-ipfs.com/ipfs/QmNLmv3J5DCwCXgFwKWFqHXM8ruC4g15GePnBDawyT4Bc4 IP104.17.64.14:443
CertificateIssuerCloudflare, Inc. Subjectcf-ipfs.com Fingerprint33:42:32:E5:22:DD:EC:B2:FA:AD:88:57:0E:97:21:CF:2E:C4:17:BA ValiditySat, 06 May 2023 00:00:00 GMT - Sun, 05 May 2024 23:59:59 GMT
File typeHTML document, ASCII text Hash8ba5ab1dd3aa01a10da6797bc188d70a 0ae73b391c4ed97a2ac870e40646a0b5542f7169 05bcf293971ffae98fd4496a37c3f2e9aed8a4ed6c65facc8fdfa5c37f7794b0
Analyzer | Verdict | Alert | OpenPhish | phishing | WeTransfer | PhishTank | phishing | Other |
GET /ipfs/QmNLmv3J5DCwCXgFwKWFqHXM8ruC4g15GePnBDawyT4Bc4 HTTP/1.1
Host: cf-ipfs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 301 Moved Permanently
date: Fri, 29 Mar 2024 15:51:44 GMT
content-type: text/html; charset=utf-8
content-length: 120
location: https://bafybeiaabas4oscv5jny2siw3tneukj76jrfebevrvv455vrlblicqqyoe.ipfs.cf-ipfs.com/
cf-ray: 86c105e70929b4ed-OSL
cf-cache-status: MISS
access-control-allow-origin: *
cache-control: no-store
vary: Accept-Encoding
access-control-allow-headers: Content-Type, Range, User-Agent, X-Requested-With
access-control-allow-methods: GET
access-control-expose-headers: Content-Length, Content-Range, X-Chunked-Output, X-Ipfs-Path, X-Ipfs-Roots, X-Stream-Output
x-cf-ipfs-cache-status: miss
set-cookie: __cf_bm=.CHu_NY6.GqWEVz6TbwAGsyiHZkgyz_BVQUecTkgyWE-1711727504-1.0.1.1-bfEzSjsVaCIny3QvEKcXvl7yW8ooU6gKLhUoVF5iV2608O5Fnn3FYfiYJxmLR2hojf6RwM_YEX4_.CLVNDUQAQ; path=/; expires=Fri, 29-Mar-24 16:21:44 GMT; domain=.cf-ipfs.com; HttpOnly; Secure; SameSite=None
server: cloudflare
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| cdnjs.cloudflare.com/ajax/libs/popper.js/1.12.9/umd/popper.min.js | 104.17.25.14 | 200 OK | 6.2 kB |
URL GET HTTP/2cdnjs.cloudflare.com/ajax/libs/popper.js/1.12.9/umd/popper.min.js IP104.17.25.14:443
Requested byhttps://bafybeiaabas4oscv5jny2siw3tneukj76jrfebevrvv455vrlblicqqyoe.ipfs.cf-ipfs.com/ CertificateIssuerCloudflare, Inc. Subjectsni.cloudflaressl.com Fingerprint7A:EA:B9:09:71:70:6C:87:C9:D3:82:74:8A:7B:B4:60:E5:40:2D:8D ValidityMon, 03 Jul 2023 00:00:00 GMT - Tue, 02 Jul 2024 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (19015) Hash70d3fda195602fe8b75e0097eed74dde c3b977aa4b8dfb69d651e07015031d385ded964b a52f7aa54d7bcaafa056ee0a050262dfc5694ae28dee8b4cac3429af37ff0d66
GET /ajax/libs/popper.js/1.12.9/umd/popper.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://bafybeiaabas4oscv5jny2siw3tneukj76jrfebevrvv455vrlblicqqyoe.ipfs.cf-ipfs.com
DNT: 1
Connection: keep-alive
Referer: https://bafybeiaabas4oscv5jny2siw3tneukj76jrfebevrvv455vrlblicqqyoe.ipfs.cf-ipfs.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 29 Mar 2024 15:51:45 GMT
content-type: application/javascript; charset=utf-8
content-length: 6157
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03fa9-4af4"
last-modified: Mon, 04 May 2020 16:15:37 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 1172389
expires: Wed, 19 Mar 2025 15:51:45 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=WZVxgTFXYEzsUkthoFvwokaEAmgUgp75b7oy%2Fd9ggbq0FhA0J%2Bp1w4LCitDOdRQDGIHOMEKX0P33RZx%2FwuuAYniamzKWF%2BsMprBq3DjKeq%2BG2gZxO8ulSfqSGK7fmWr3JBKW04uC"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 86c105ef0b815691-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| dweb.link/ipfs/QmSgatZddgpVbC7qiSzcy7TRTe24FKvADHfP4psTqZthyP?filename=logo.jpg | 209.94.90.1 | 301 Moved Permanently | 136 B |
URL GET HTTP/2dweb.link/ipfs/QmSgatZddgpVbC7qiSzcy7TRTe24FKvADHfP4psTqZthyP?filename=logo.jpg IP209.94.90.1:443
Requested byhttps://bafybeiaabas4oscv5jny2siw3tneukj76jrfebevrvv455vrlblicqqyoe.ipfs.cf-ipfs.com/ CertificateIssuerLet's Encrypt Subjectdweb.link Fingerprint2A:D2:03:4C:D3:15:24:93:EF:9E:1F:8F:5A:9C:AF:C4:E2:63:C9:42 ValidityTue, 06 Feb 2024 17:40:37 GMT - Mon, 06 May 2024 17:40:36 GMT
File typeHTML document, ASCII text Hashf7ed76f13dde1eadd25e1dde15d0380a 41522f8bcbfa2395a055dd1584c74ce0c9c8c54f 72b6c396f56cdd464c726591c1c6a45f3c26b1b8793579481c6f5e885d4ea54f
Analyzer | Verdict | Alert | urlquery | phishing | Phishing - WeTransfer |
GET /ipfs/QmSgatZddgpVbC7qiSzcy7TRTe24FKvADHfP4psTqZthyP?filename=logo.jpg HTTP/1.1
Host: dweb.link
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bafybeiaabas4oscv5jny2siw3tneukj76jrfebevrvv455vrlblicqqyoe.ipfs.cf-ipfs.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 301 Moved Permanently
server: openresty
date: Fri, 29 Mar 2024 15:51:45 GMT
content-type: text/html; charset=utf-8
content-length: 136
access-control-allow-headers: Content-Type, Range, User-Agent, X-Requested-With
access-control-allow-methods: GET, HEAD, OPTIONS
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Content-Range, X-Chunked-Output, X-Ipfs-Path, X-Ipfs-Roots, X-Stream-Output
location: https://bafybeicarifyatgz3sd2cfgucp3bo5bddjyou7vevbvy3bd5epwtmbyu3y.ipfs.dweb.link/?filename=logo.jpg
x-ipfs-pop: ipfs-bank3-fr2
timing-allow-origin: *
x-ipfs-lb-pop: gateway-bank1-fr2
x-bfid: f18cb96a8598ac8a9f7d298a3e92da0f
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-proxy-cache: HIT
X-Firefox-Spdy: h2
|
|
| dweb.link/ipfs/QmTgavUm1wZU5UMoUwb1to6zVgCo7nR7p7ic6H44RRPrX9?filename=font-awesome.css | 209.94.90.1 | 301 Moved Permanently | 144 B |
URL GET HTTP/2dweb.link/ipfs/QmTgavUm1wZU5UMoUwb1to6zVgCo7nR7p7ic6H44RRPrX9?filename=font-awesome.css IP209.94.90.1:443
Requested byhttps://bafybeiaabas4oscv5jny2siw3tneukj76jrfebevrvv455vrlblicqqyoe.ipfs.cf-ipfs.com/ CertificateIssuerLet's Encrypt Subjectdweb.link Fingerprint2A:D2:03:4C:D3:15:24:93:EF:9E:1F:8F:5A:9C:AF:C4:E2:63:C9:42 ValidityTue, 06 Feb 2024 17:40:37 GMT - Mon, 06 May 2024 17:40:36 GMT
File typeHTML document, ASCII text Hash0095e01889589a96ec6c2fa64e4e0a7c ff86ffb4165587acb560367a3acd85507c7e09f7 4beba4ea5c0c7453f153b1ae595887b2ae96aba797094c26f9c8e0f1c24c0500
Analyzer | Verdict | Alert | urlquery | phishing | Phishing - WeTransfer |
GET /ipfs/QmTgavUm1wZU5UMoUwb1to6zVgCo7nR7p7ic6H44RRPrX9?filename=font-awesome.css HTTP/1.1
Host: dweb.link
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bafybeiaabas4oscv5jny2siw3tneukj76jrfebevrvv455vrlblicqqyoe.ipfs.cf-ipfs.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 301 Moved Permanently
server: openresty
date: Fri, 29 Mar 2024 15:51:45 GMT
content-type: text/html; charset=utf-8
content-length: 144
access-control-allow-headers: Content-Type, Range, User-Agent, X-Requested-With
access-control-allow-methods: GET, HEAD, OPTIONS
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Content-Range, X-Chunked-Output, X-Ipfs-Path, X-Ipfs-Roots, X-Stream-Output
location: https://bafybeicpmxcovgwlyxv4eqnea4eikta2zqxrymbkggdyjaredhcaatcc5a.ipfs.dweb.link/?filename=font-awesome.css
x-ipfs-pop: ipfs-bank3-fr2
timing-allow-origin: *
x-ipfs-lb-pop: gateway-bank1-fr2
x-bfid: 79b57996549bb3f7436115810c1b5841
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-proxy-cache: HIT
X-Firefox-Spdy: h2
|
|
| dweb.link/ipfs/QmeheeqeAGN8QeMMXY2Pusp4gwJH99dKPqUCfsX6vwoRKQ?filename=bootstrap.js | 209.94.90.1 | 410 Gone | 6.7 kB |
URL GET HTTP/2dweb.link/ipfs/QmeheeqeAGN8QeMMXY2Pusp4gwJH99dKPqUCfsX6vwoRKQ?filename=bootstrap.js IP209.94.90.1:443
Requested byhttps://bafybeiaabas4oscv5jny2siw3tneukj76jrfebevrvv455vrlblicqqyoe.ipfs.cf-ipfs.com/ CertificateIssuerLet's Encrypt Subjectdweb.link Fingerprint2A:D2:03:4C:D3:15:24:93:EF:9E:1F:8F:5A:9C:AF:C4:E2:63:C9:42 ValidityTue, 06 Feb 2024 17:40:37 GMT - Mon, 06 May 2024 17:40:36 GMT
File typeHTML document, ASCII text, with very long lines (1632) Hashf2ce39c9881b4a12aff800f6713c69d1 0f047ecc756d17f61d81da4b3bede1d80575bfe1 86f21e29947180f7b68e81b82992f786fc08b694ac4c714352f072768788f150
Analyzer | Verdict | Alert | urlquery | phishing | Phishing - WeTransfer |
GET /ipfs/QmeheeqeAGN8QeMMXY2Pusp4gwJH99dKPqUCfsX6vwoRKQ?filename=bootstrap.js HTTP/1.1
Host: dweb.link
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bafybeiaabas4oscv5jny2siw3tneukj76jrfebevrvv455vrlblicqqyoe.ipfs.cf-ipfs.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 410 Gone
server: openresty
date: Fri, 29 Mar 2024 15:51:45 GMT
content-type: text/html
content-length: 6672
etag: "650c2b70-1a10"
x-ipfs-lb-pop: gateway-bank1-fr2
x-bfid: 4929f1c32eef9f38abc812e9ae0bec19
strict-transport-security: max-age=31536000; includeSubDomains; preload
X-Firefox-Spdy: h2
|
|
| dweb.link/ipfs/QmRbr6GPmMaXViCSY6fErfB14WWdCMBESyRzTPdk6VvjDu?filename=jquery.js | 209.94.90.1 | 301 Moved Permanently | 137 B |
URL GET HTTP/2dweb.link/ipfs/QmRbr6GPmMaXViCSY6fErfB14WWdCMBESyRzTPdk6VvjDu?filename=jquery.js IP209.94.90.1:443
Requested byhttps://bafybeiaabas4oscv5jny2siw3tneukj76jrfebevrvv455vrlblicqqyoe.ipfs.cf-ipfs.com/ CertificateIssuerLet's Encrypt Subjectdweb.link Fingerprint2A:D2:03:4C:D3:15:24:93:EF:9E:1F:8F:5A:9C:AF:C4:E2:63:C9:42 ValidityTue, 06 Feb 2024 17:40:37 GMT - Mon, 06 May 2024 17:40:36 GMT
File typeHTML document, ASCII text Hash28e735fd4f6ee8d8dc888bcb96d48c3a 60578f4a502f70b8092c34d5483df943c0ac36ea 465b0a55df7521b39e2520c06dc37aac2d6d74ca136453dd5dcde14c2d7dcdc7
Analyzer | Verdict | Alert | urlquery | phishing | Phishing - WeTransfer |
GET /ipfs/QmRbr6GPmMaXViCSY6fErfB14WWdCMBESyRzTPdk6VvjDu?filename=jquery.js HTTP/1.1
Host: dweb.link
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bafybeiaabas4oscv5jny2siw3tneukj76jrfebevrvv455vrlblicqqyoe.ipfs.cf-ipfs.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 301 Moved Permanently
server: openresty
date: Fri, 29 Mar 2024 15:51:45 GMT
content-type: text/html; charset=utf-8
content-length: 137
access-control-allow-headers: Content-Type, Range, User-Agent, X-Requested-With
access-control-allow-methods: GET, HEAD, OPTIONS
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Content-Range, X-Chunked-Output, X-Ipfs-Path, X-Ipfs-Roots, X-Stream-Output
location: https://bafybeibqo6sij2nxln2lh3l4bhpufkriqsc6vtcni44smmcw2hskahjtxq.ipfs.dweb.link/?filename=jquery.js
x-ipfs-pop: ipfs-bank2-fr2
timing-allow-origin: *
x-ipfs-lb-pop: gateway-bank1-fr2
x-bfid: 62c88e445816766fa13b3392b894e63e
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-proxy-cache: EXPIRED
X-Firefox-Spdy: h2
|
|
| bafybeihtdqp4mpo54jpiwxw4kaxtsv2eg7vfbtauaky25f4lelnwd542pm.ipfs.dweb.link/?filename=bootstrap.min.js | 209.94.90.1 | 410 Gone | 6.7 kB |
URL GET HTTP/2bafybeihtdqp4mpo54jpiwxw4kaxtsv2eg7vfbtauaky25f4lelnwd542pm.ipfs.dweb.link/?filename=bootstrap.min.js IP209.94.90.1:443
Requested byhttps://bafybeiaabas4oscv5jny2siw3tneukj76jrfebevrvv455vrlblicqqyoe.ipfs.cf-ipfs.com/ CertificateIssuerLet's Encrypt Subjectdweb.link Fingerprint2A:D2:03:4C:D3:15:24:93:EF:9E:1F:8F:5A:9C:AF:C4:E2:63:C9:42 ValidityTue, 06 Feb 2024 17:40:37 GMT - Mon, 06 May 2024 17:40:36 GMT
File typeHTML document, ASCII text, with very long lines (1632) Hashf2ce39c9881b4a12aff800f6713c69d1 0f047ecc756d17f61d81da4b3bede1d80575bfe1 86f21e29947180f7b68e81b82992f786fc08b694ac4c714352f072768788f150
Analyzer | Verdict | Alert | urlquery | phishing | Phishing - WeTransfer |
GET /?filename=bootstrap.min.js HTTP/1.1
Host: bafybeihtdqp4mpo54jpiwxw4kaxtsv2eg7vfbtauaky25f4lelnwd542pm.ipfs.dweb.link
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://bafybeiaabas4oscv5jny2siw3tneukj76jrfebevrvv455vrlblicqqyoe.ipfs.cf-ipfs.com
DNT: 1
Connection: keep-alive
Referer: https://bafybeiaabas4oscv5jny2siw3tneukj76jrfebevrvv455vrlblicqqyoe.ipfs.cf-ipfs.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 410 Gone
server: openresty
date: Fri, 29 Mar 2024 15:51:45 GMT
content-type: text/html
content-length: 6672
etag: "650c2b70-1a10"
x-ipfs-lb-pop: gateway-bank1-fr2
x-bfid: 3b9c6df2f0683fcf5f17f68d30b2e899
strict-transport-security: max-age=31536000; includeSubDomains; preload
X-Firefox-Spdy: h2
|
|
| dweb.link/ipfs/QmRnpMNJrtmXUfNwYvar6xWLQJxUs65hDtHZUHQfowNRCm?filename=sweetalert.js | 209.94.90.1 | 301 Moved Permanently | 141 B |
URL GET HTTP/2dweb.link/ipfs/QmRnpMNJrtmXUfNwYvar6xWLQJxUs65hDtHZUHQfowNRCm?filename=sweetalert.js IP209.94.90.1:443
Requested byhttps://bafybeiaabas4oscv5jny2siw3tneukj76jrfebevrvv455vrlblicqqyoe.ipfs.cf-ipfs.com/ CertificateIssuerLet's Encrypt Subjectdweb.link Fingerprint2A:D2:03:4C:D3:15:24:93:EF:9E:1F:8F:5A:9C:AF:C4:E2:63:C9:42 ValidityTue, 06 Feb 2024 17:40:37 GMT - Mon, 06 May 2024 17:40:36 GMT
File typeHTML document, ASCII text Hashe328380da6be36d4ee1bb6eecba270f4 40e6e3dc2f6890b3974e930176050b3f412cc4ae 4bcac744b173f98145329cb8f1d7958ff01941e06cf97b1cd9443d94f47f13c1
Analyzer | Verdict | Alert | urlquery | phishing | Phishing - WeTransfer |
GET /ipfs/QmRnpMNJrtmXUfNwYvar6xWLQJxUs65hDtHZUHQfowNRCm?filename=sweetalert.js HTTP/1.1
Host: dweb.link
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bafybeiaabas4oscv5jny2siw3tneukj76jrfebevrvv455vrlblicqqyoe.ipfs.cf-ipfs.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 301 Moved Permanently
server: openresty
date: Fri, 29 Mar 2024 15:51:45 GMT
content-type: text/html; charset=utf-8
content-length: 141
access-control-allow-headers: Content-Type, Range, User-Agent, X-Requested-With
access-control-allow-methods: GET, HEAD, OPTIONS
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Content-Range, X-Chunked-Output, X-Ipfs-Path, X-Ipfs-Roots, X-Stream-Output
location: https://bafybeibti4iinvd5b2p775563ygtudzqktihggrtnksbmphezza3hn4eoi.ipfs.dweb.link/?filename=sweetalert.js
x-ipfs-pop: ipfs-bank2-fr2
timing-allow-origin: *
x-ipfs-lb-pop: gateway-bank1-fr2
x-bfid: d47b2f0dc2cb50f1b4eb4a99312ba650
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-proxy-cache: EXPIRED
X-Firefox-Spdy: h2
|
|
| dweb.link/ipfs/QmRJEENewudtFXP4Q6GzkWvKcm1WTMDrSca7QbGwSdrtMm?filename=bootstrap.css | 209.94.90.1 | 301 Moved Permanently | 141 B |
URL GET HTTP/2dweb.link/ipfs/QmRJEENewudtFXP4Q6GzkWvKcm1WTMDrSca7QbGwSdrtMm?filename=bootstrap.css IP209.94.90.1:443
Requested byhttps://bafybeiaabas4oscv5jny2siw3tneukj76jrfebevrvv455vrlblicqqyoe.ipfs.cf-ipfs.com/ CertificateIssuerLet's Encrypt Subjectdweb.link Fingerprint2A:D2:03:4C:D3:15:24:93:EF:9E:1F:8F:5A:9C:AF:C4:E2:63:C9:42 ValidityTue, 06 Feb 2024 17:40:37 GMT - Mon, 06 May 2024 17:40:36 GMT
File typeHTML document, ASCII text Hash5075898dfe559205113c24d2bf45dc18 a59688817b13fbd3a12e65b122051e8d5bccbc57 d99849d50d31c2deb73c88087440e84c8e2e95c0fcd82d615669f6603e2666c4
Analyzer | Verdict | Alert | urlquery | phishing | Phishing - WeTransfer |
GET /ipfs/QmRJEENewudtFXP4Q6GzkWvKcm1WTMDrSca7QbGwSdrtMm?filename=bootstrap.css HTTP/1.1
Host: dweb.link
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bafybeiaabas4oscv5jny2siw3tneukj76jrfebevrvv455vrlblicqqyoe.ipfs.cf-ipfs.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 301 Moved Permanently
server: openresty
date: Fri, 29 Mar 2024 15:51:45 GMT
content-type: text/html; charset=utf-8
content-length: 141
access-control-allow-headers: Content-Type, Range, User-Agent, X-Requested-With
access-control-allow-methods: GET, HEAD, OPTIONS
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Content-Range, X-Chunked-Output, X-Ipfs-Path, X-Ipfs-Roots, X-Stream-Output
location: https://bafybeibl6q4lz3so3hbhc2vbzxcpitws5yd3wcrkfewuerr3l5ohj4mona.ipfs.dweb.link/?filename=bootstrap.css
x-ipfs-pop: ipfs-bank3-fr2
timing-allow-origin: *
x-ipfs-lb-pop: gateway-bank1-fr2
x-bfid: a75e6842b97234d3c085781482bdd193
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-proxy-cache: HIT
X-Firefox-Spdy: h2
|
|
| code.jquery.com/jquery-3.2.1.slim.min.js | 151.101.66.137 | 200 OK | 24 kB |
URL GET HTTP/2code.jquery.com/jquery-3.2.1.slim.min.js IP151.101.66.137:443
Requested byhttps://bafybeiaabas4oscv5jny2siw3tneukj76jrfebevrvv455vrlblicqqyoe.ipfs.cf-ipfs.com/ CertificateIssuerSectigo Limited Subject*.jquery.com FingerprintD2:19:0A:AD:CE:BB:9C:61:17:5D:29:4B:A2:54:E8:C6:91:B8:F9:8D ValidityTue, 11 Jul 2023 00:00:00 GMT - Sun, 14 Jul 2024 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (32012) Hash5f48fc77cac90c4778fa24ec9c57f37d 9e89d1515bc4c371b86f4cb1002fd8e377c1829f 9365920887b11b33a3dc4ba28a0f93951f200341263e3b9cefd384798e4be398
GET /jquery-3.2.1.slim.min.js HTTP/1.1
Host: code.jquery.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bafybeiaabas4oscv5jny2siw3tneukj76jrfebevrvv455vrlblicqqyoe.ipfs.cf-ipfs.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Fri, 18 Oct 1991 12:00:00 GMT
etag: W/"28feccc0-10fdd"
cache-control: public, max-age=31536000, stale-while-revalidate=604800
access-control-allow-origin: *
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Fri, 29 Mar 2024 15:51:45 GMT
age: 16823703
x-served-by: cache-lga21963-LGA, cache-hel1410020-HEL
x-cache: HIT, HIT
x-cache-hits: 13, 31115
x-timer: S1711727506.881214,VS0,VE0
vary: Accept-Encoding
content-length: 23856
X-Firefox-Spdy: h2
|
|
| dweb.link/ipfs/Qmf7y59RuutyHLhsgQXGDBWGohxMZPfeU4M6ZiVDSC7bma?filename=animate.css | 209.94.90.1 | 301 Moved Permanently | 139 B |
URL GET HTTP/2dweb.link/ipfs/Qmf7y59RuutyHLhsgQXGDBWGohxMZPfeU4M6ZiVDSC7bma?filename=animate.css IP209.94.90.1:443
Requested byhttps://bafybeiaabas4oscv5jny2siw3tneukj76jrfebevrvv455vrlblicqqyoe.ipfs.cf-ipfs.com/ CertificateIssuerLet's Encrypt Subjectdweb.link Fingerprint2A:D2:03:4C:D3:15:24:93:EF:9E:1F:8F:5A:9C:AF:C4:E2:63:C9:42 ValidityTue, 06 Feb 2024 17:40:37 GMT - Mon, 06 May 2024 17:40:36 GMT
File typeHTML document, ASCII text Hash439db0545a713f00e13cf46233762444 d97e378824f29b648e291074e7a90e8d147345c0 775f99362336dab691a84e0726ce0e8e5a5be1b91c36fc650a9cdade9df32689
Analyzer | Verdict | Alert | urlquery | phishing | Phishing - WeTransfer |
GET /ipfs/Qmf7y59RuutyHLhsgQXGDBWGohxMZPfeU4M6ZiVDSC7bma?filename=animate.css HTTP/1.1
Host: dweb.link
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bafybeiaabas4oscv5jny2siw3tneukj76jrfebevrvv455vrlblicqqyoe.ipfs.cf-ipfs.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 301 Moved Permanently
server: openresty
date: Fri, 29 Mar 2024 15:51:45 GMT
content-type: text/html; charset=utf-8
content-length: 139
access-control-allow-headers: Content-Type, Range, User-Agent, X-Requested-With
access-control-allow-methods: GET, HEAD, OPTIONS
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Content-Range, X-Chunked-Output, X-Ipfs-Path, X-Ipfs-Roots, X-Stream-Output
location: https://bafybeihzk3r5vvkorkyw6yhdrq6ybyddsqbstgcv563nc4kooxaup7lqee.ipfs.dweb.link/?filename=animate.css
x-ipfs-pop: ipfs-bank3-fr2
timing-allow-origin: *
x-ipfs-lb-pop: gateway-bank1-fr2
x-bfid: c7d26c2699dcdbc8cb97d5114e13fdcc
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-proxy-cache: HIT
X-Firefox-Spdy: h2
|
|
| dweb.link/ipfs/QmUiVYsNJuaBoCQ1hYeQE8uXVu6LwDSEBUuA3PxKe7zUFX?filename=popper.js | 209.94.90.1 | 301 Moved Permanently | 137 B |
URL GET HTTP/2dweb.link/ipfs/QmUiVYsNJuaBoCQ1hYeQE8uXVu6LwDSEBUuA3PxKe7zUFX?filename=popper.js IP209.94.90.1:443
Requested byhttps://bafybeiaabas4oscv5jny2siw3tneukj76jrfebevrvv455vrlblicqqyoe.ipfs.cf-ipfs.com/ CertificateIssuerLet's Encrypt Subjectdweb.link Fingerprint2A:D2:03:4C:D3:15:24:93:EF:9E:1F:8F:5A:9C:AF:C4:E2:63:C9:42 ValidityTue, 06 Feb 2024 17:40:37 GMT - Mon, 06 May 2024 17:40:36 GMT
File typeHTML document, ASCII text Hashaeb6a5bc098c1cdcc596a46f73dc6d58 d009f7e8cbe879389277dba098d302032dc1062e d27c51aa56e1890f2d29ebaab1f7d83bc05913925b92518d9bc452ec979454dc
Analyzer | Verdict | Alert | urlquery | phishing | Phishing - WeTransfer |
GET /ipfs/QmUiVYsNJuaBoCQ1hYeQE8uXVu6LwDSEBUuA3PxKe7zUFX?filename=popper.js HTTP/1.1
Host: dweb.link
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bafybeiaabas4oscv5jny2siw3tneukj76jrfebevrvv455vrlblicqqyoe.ipfs.cf-ipfs.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 301 Moved Permanently
server: openresty
date: Fri, 29 Mar 2024 15:51:45 GMT
content-type: text/html; charset=utf-8
content-length: 137
access-control-allow-headers: Content-Type, Range, User-Agent, X-Requested-With
access-control-allow-methods: GET, HEAD, OPTIONS
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Content-Range, X-Chunked-Output, X-Ipfs-Path, X-Ipfs-Roots, X-Stream-Output
location: https://bafybeic6x2fp4tittdgm62ih5upavzl5cd7mfqheybck3e262z3mwy4xpy.ipfs.dweb.link/?filename=popper.js
x-ipfs-pop: ipfs-bank2-fr2
timing-allow-origin: *
x-ipfs-lb-pop: gateway-bank1-fr2
x-bfid: bdf7ae519020676a359765e18874a385
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-proxy-cache: EXPIRED
X-Firefox-Spdy: h2
|
|
| bafybeicarifyatgz3sd2cfgucp3bo5bddjyou7vevbvy3bd5epwtmbyu3y.ipfs.dweb.link/?filename=logo.jpg | 209.94.90.1 | 200 OK | 6.9 kB |
URL GET HTTP/2bafybeicarifyatgz3sd2cfgucp3bo5bddjyou7vevbvy3bd5epwtmbyu3y.ipfs.dweb.link/?filename=logo.jpg IP209.94.90.1:443
Requested byhttps://bafybeiaabas4oscv5jny2siw3tneukj76jrfebevrvv455vrlblicqqyoe.ipfs.cf-ipfs.com/ CertificateIssuerLet's Encrypt Subjectdweb.link Fingerprint2A:D2:03:4C:D3:15:24:93:EF:9E:1F:8F:5A:9C:AF:C4:E2:63:C9:42 ValidityTue, 06 Feb 2024 17:40:37 GMT - Mon, 06 May 2024 17:40:36 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=3, height=0, orientation=upper-left, width=0], baseline, precision 8, 289x57, components 3 Hashd04a0e077be370d23d16c1358749563b d41f2bc6ee296019eba5798682f0b60cff2084a6 f8caf3207186e803510b7c02c6de2818abda8d0720f2764cb4e720a35a4d991e
Analyzer | Verdict | Alert | urlquery | phishing | Phishing - WeTransfer |
GET /?filename=logo.jpg HTTP/1.1
Host: bafybeicarifyatgz3sd2cfgucp3bo5bddjyou7vevbvy3bd5epwtmbyu3y.ipfs.dweb.link
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://bafybeiaabas4oscv5jny2siw3tneukj76jrfebevrvv455vrlblicqqyoe.ipfs.cf-ipfs.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: openresty
date: Fri, 29 Mar 2024 15:51:46 GMT
content-type: image/jpeg
content-length: 6929
access-control-allow-headers: Content-Type, Range, User-Agent, X-Requested-With
access-control-allow-methods: GET, HEAD, OPTIONS
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Content-Range, X-Chunked-Output, X-Ipfs-Path, X-Ipfs-Roots, X-Stream-Output
cache-control: public, max-age=29030400, immutable
content-disposition: inline; filename="logo.jpg"; filename*=UTF-8''logo.jpg
etag: "bafybeicarifyatgz3sd2cfgucp3bo5bddjyou7vevbvy3bd5epwtmbyu3y"
x-ipfs-path: /ipfs/bafybeicarifyatgz3sd2cfgucp3bo5bddjyou7vevbvy3bd5epwtmbyu3y/
x-ipfs-roots: bafybeicarifyatgz3sd2cfgucp3bo5bddjyou7vevbvy3bd5epwtmbyu3y
x-ipfs-pop: ipfs-bank4-fr2
timing-allow-origin: *
x-ipfs-lb-pop: gateway-bank1-fr2
x-bfid: 6aacc64070c77ea8fad61383531eb007
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-proxy-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| bafybeibl6q4lz3so3hbhc2vbzxcpitws5yd3wcrkfewuerr3l5ohj4mona.ipfs.dweb.link/?filename=bootstrap.css | 209.94.90.1 | 200 OK | 22 kB |
URL GET HTTP/2bafybeibl6q4lz3so3hbhc2vbzxcpitws5yd3wcrkfewuerr3l5ohj4mona.ipfs.dweb.link/?filename=bootstrap.css IP209.94.90.1:443
Requested byhttps://bafybeiaabas4oscv5jny2siw3tneukj76jrfebevrvv455vrlblicqqyoe.ipfs.cf-ipfs.com/ CertificateIssuerLet's Encrypt Subjectdweb.link Fingerprint2A:D2:03:4C:D3:15:24:93:EF:9E:1F:8F:5A:9C:AF:C4:E2:63:C9:42 ValidityTue, 06 Feb 2024 17:40:37 GMT - Mon, 06 May 2024 17:40:36 GMT
File typegzip compressed data, from Unix Hashecf054c35855c5d74b4ad9de6124d39e 51a87e44c38f5ee945f40421ae19d4dcb74b9cfb bac94f07b6c1b4953a845835725ab785edec0ea15064ed3a5264c5cd46d7be6b
GET /?filename=bootstrap.css HTTP/1.1
Host: bafybeibl6q4lz3so3hbhc2vbzxcpitws5yd3wcrkfewuerr3l5ohj4mona.ipfs.dweb.link
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://bafybeiaabas4oscv5jny2siw3tneukj76jrfebevrvv455vrlblicqqyoe.ipfs.cf-ipfs.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: openresty
date: Fri, 29 Mar 2024 15:51:46 GMT
content-type: text/css; charset=utf-8
vary: Accept-Encoding
access-control-allow-headers: Content-Type, Range, User-Agent, X-Requested-With
access-control-allow-methods: GET, HEAD, OPTIONS
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Content-Range, X-Chunked-Output, X-Ipfs-Path, X-Ipfs-Roots, X-Stream-Output
cache-control: public, max-age=29030400, immutable
content-disposition: inline; filename="bootstrap.css"; filename*=UTF-8''bootstrap.css
etag: W/"bafybeibl6q4lz3so3hbhc2vbzxcpitws5yd3wcrkfewuerr3l5ohj4mona"
x-ipfs-path: /ipfs/bafybeibl6q4lz3so3hbhc2vbzxcpitws5yd3wcrkfewuerr3l5ohj4mona/
x-ipfs-roots: bafybeibl6q4lz3so3hbhc2vbzxcpitws5yd3wcrkfewuerr3l5ohj4mona
x-ipfs-pop: ipfs-bank6-fr2
timing-allow-origin: *
x-ipfs-lb-pop: gateway-bank1-fr2
x-bfid: 757858640ec0effdccd9d8b9b3d0a4b4
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-proxy-cache: HIT
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| bafybeicpmxcovgwlyxv4eqnea4eikta2zqxrymbkggdyjaredhcaatcc5a.ipfs.dweb.link/?filename=font-awesome.css | 209.94.90.1 | 200 OK | 5.6 kB |
URL GET HTTP/2bafybeicpmxcovgwlyxv4eqnea4eikta2zqxrymbkggdyjaredhcaatcc5a.ipfs.dweb.link/?filename=font-awesome.css IP209.94.90.1:443
Requested byhttps://bafybeiaabas4oscv5jny2siw3tneukj76jrfebevrvv455vrlblicqqyoe.ipfs.cf-ipfs.com/ CertificateIssuerLet's Encrypt Subjectdweb.link Fingerprint2A:D2:03:4C:D3:15:24:93:EF:9E:1F:8F:5A:9C:AF:C4:E2:63:C9:42 ValidityTue, 06 Feb 2024 17:40:37 GMT - Mon, 06 May 2024 17:40:36 GMT
File typegzip compressed data, from Unix Hash21a553fbc5b1ebe51419781b73a096c0 1b12dd88bc22a781c9ace872923e253a74a96005 4e76a238ef7f3ef8ca4dad2303ff36a532d2085e8c788471066a01df4de84a6e
GET /?filename=font-awesome.css HTTP/1.1
Host: bafybeicpmxcovgwlyxv4eqnea4eikta2zqxrymbkggdyjaredhcaatcc5a.ipfs.dweb.link
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://bafybeiaabas4oscv5jny2siw3tneukj76jrfebevrvv455vrlblicqqyoe.ipfs.cf-ipfs.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: openresty
date: Fri, 29 Mar 2024 15:51:46 GMT
content-type: text/css; charset=utf-8
vary: Accept-Encoding
access-control-allow-headers: Content-Type, Range, User-Agent, X-Requested-With
access-control-allow-methods: GET, HEAD, OPTIONS
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Content-Range, X-Chunked-Output, X-Ipfs-Path, X-Ipfs-Roots, X-Stream-Output
cache-control: public, max-age=29030400, immutable
content-disposition: inline; filename="font-awesome.css"; filename*=UTF-8''font-awesome.css
etag: W/"bafybeicpmxcovgwlyxv4eqnea4eikta2zqxrymbkggdyjaredhcaatcc5a"
x-ipfs-path: /ipfs/bafybeicpmxcovgwlyxv4eqnea4eikta2zqxrymbkggdyjaredhcaatcc5a/
x-ipfs-roots: bafybeicpmxcovgwlyxv4eqnea4eikta2zqxrymbkggdyjaredhcaatcc5a
x-ipfs-pop: ipfs-bank4-fr2
timing-allow-origin: *
x-ipfs-lb-pop: gateway-bank1-fr2
x-bfid: d5144835ad7ff627d4b0a950aca00ab3
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-proxy-cache: HIT
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| bafybeihzk3r5vvkorkyw6yhdrq6ybyddsqbstgcv563nc4kooxaup7lqee.ipfs.dweb.link/?filename=animate.css | 209.94.90.1 | 200 OK | 11 kB |
URL GET HTTP/2bafybeihzk3r5vvkorkyw6yhdrq6ybyddsqbstgcv563nc4kooxaup7lqee.ipfs.dweb.link/?filename=animate.css IP209.94.90.1:443
Requested byhttps://bafybeiaabas4oscv5jny2siw3tneukj76jrfebevrvv455vrlblicqqyoe.ipfs.cf-ipfs.com/ CertificateIssuerLet's Encrypt Subjectdweb.link Fingerprint2A:D2:03:4C:D3:15:24:93:EF:9E:1F:8F:5A:9C:AF:C4:E2:63:C9:42 ValidityTue, 06 Feb 2024 17:40:37 GMT - Mon, 06 May 2024 17:40:36 GMT
File typegzip compressed data, from Unix Hash38d388f6e33542bb86e753a8f4b60dbb 43762b0ab3889beba056414d24d1f66b1af6ede0 28e98b5d252973da069f778341120ecbe08daf8aa998e0d198020662ada7dfbd
Analyzer | Verdict | Alert | urlquery | phishing | Phishing - WeTransfer |
GET /?filename=animate.css HTTP/1.1
Host: bafybeihzk3r5vvkorkyw6yhdrq6ybyddsqbstgcv563nc4kooxaup7lqee.ipfs.dweb.link
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://bafybeiaabas4oscv5jny2siw3tneukj76jrfebevrvv455vrlblicqqyoe.ipfs.cf-ipfs.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: openresty
date: Fri, 29 Mar 2024 15:51:46 GMT
content-type: text/css; charset=utf-8
vary: Accept-Encoding
access-control-allow-headers: Content-Type, Range, User-Agent, X-Requested-With
access-control-allow-methods: GET, HEAD, OPTIONS
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Content-Range, X-Chunked-Output, X-Ipfs-Path, X-Ipfs-Roots, X-Stream-Output
cache-control: public, max-age=29030400, immutable
content-disposition: inline; filename="animate.css"; filename*=UTF-8''animate.css
etag: W/"bafybeihzk3r5vvkorkyw6yhdrq6ybyddsqbstgcv563nc4kooxaup7lqee"
x-ipfs-path: /ipfs/bafybeihzk3r5vvkorkyw6yhdrq6ybyddsqbstgcv563nc4kooxaup7lqee/
x-ipfs-roots: bafybeihzk3r5vvkorkyw6yhdrq6ybyddsqbstgcv563nc4kooxaup7lqee
x-ipfs-pop: ipfs-bank4-fr2
timing-allow-origin: *
x-ipfs-lb-pop: gateway-bank1-fr2
x-bfid: 33f7841d448c7c837ee6bc2691e80de5
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-proxy-cache: HIT
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| bafybeibti4iinvd5b2p775563ygtudzqktihggrtnksbmphezza3hn4eoi.ipfs.dweb.link/?filename=sweetalert.js | 209.94.90.1 | 200 OK | 19 kB |
URL GET HTTP/2bafybeibti4iinvd5b2p775563ygtudzqktihggrtnksbmphezza3hn4eoi.ipfs.dweb.link/?filename=sweetalert.js IP209.94.90.1:443
Requested byhttps://bafybeiaabas4oscv5jny2siw3tneukj76jrfebevrvv455vrlblicqqyoe.ipfs.cf-ipfs.com/ CertificateIssuerLet's Encrypt Subjectdweb.link Fingerprint2A:D2:03:4C:D3:15:24:93:EF:9E:1F:8F:5A:9C:AF:C4:E2:63:C9:42 ValidityTue, 06 Feb 2024 17:40:37 GMT - Mon, 06 May 2024 17:40:36 GMT
File typegzip compressed data, from Unix Hash2db962d2b8f28a68d29b9ae2fffa6d93 86f339e213bcdc1e9a4013cf0ebdefa560199b74 5a89fac06821c6950afc7398ead058b387949caf4bcb7659c364a364ac155d8e
Analyzer | Verdict | Alert | urlquery | phishing | Phishing - WeTransfer |
GET /?filename=sweetalert.js HTTP/1.1
Host: bafybeibti4iinvd5b2p775563ygtudzqktihggrtnksbmphezza3hn4eoi.ipfs.dweb.link
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://bafybeiaabas4oscv5jny2siw3tneukj76jrfebevrvv455vrlblicqqyoe.ipfs.cf-ipfs.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: openresty
date: Fri, 29 Mar 2024 15:51:46 GMT
content-type: text/javascript; charset=utf-8
vary: Accept-Encoding
access-control-allow-headers: Content-Type, Range, User-Agent, X-Requested-With
access-control-allow-methods: GET, HEAD, OPTIONS
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Content-Range, X-Chunked-Output, X-Ipfs-Path, X-Ipfs-Roots, X-Stream-Output
cache-control: public, max-age=29030400, immutable
content-disposition: inline; filename="sweetalert.js"; filename*=UTF-8''sweetalert.js
etag: W/"bafybeibti4iinvd5b2p775563ygtudzqktihggrtnksbmphezza3hn4eoi"
x-ipfs-path: /ipfs/bafybeibti4iinvd5b2p775563ygtudzqktihggrtnksbmphezza3hn4eoi/
x-ipfs-roots: bafybeibti4iinvd5b2p775563ygtudzqktihggrtnksbmphezza3hn4eoi
x-ipfs-pop: ipfs-bank1-fr2
timing-allow-origin: *
x-ipfs-lb-pop: gateway-bank1-fr2
x-bfid: 13a9a80e74e9d74f3d04ed3466b50d08
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-proxy-cache: HIT
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| bafybeihtdqp4mpo54jpiwxw4kaxtsv2eg7vfbtauaky25f4lelnwd542pm.ipfs.dweb.link/?filename=bootstrap.min.js | 209.94.90.1 | 410 Gone | 6.7 kB |
URL GET HTTP/2bafybeihtdqp4mpo54jpiwxw4kaxtsv2eg7vfbtauaky25f4lelnwd542pm.ipfs.dweb.link/?filename=bootstrap.min.js IP209.94.90.1:443
Requested byhttps://bafybeiaabas4oscv5jny2siw3tneukj76jrfebevrvv455vrlblicqqyoe.ipfs.cf-ipfs.com/ CertificateIssuerLet's Encrypt Subjectdweb.link Fingerprint2A:D2:03:4C:D3:15:24:93:EF:9E:1F:8F:5A:9C:AF:C4:E2:63:C9:42 ValidityTue, 06 Feb 2024 17:40:37 GMT - Mon, 06 May 2024 17:40:36 GMT
File typeHTML document, ASCII text, with very long lines (1632) Hashf2ce39c9881b4a12aff800f6713c69d1 0f047ecc756d17f61d81da4b3bede1d80575bfe1 86f21e29947180f7b68e81b82992f786fc08b694ac4c714352f072768788f150
Analyzer | Verdict | Alert | urlquery | phishing | Phishing - WeTransfer |
GET /?filename=bootstrap.min.js HTTP/1.1
Host: bafybeihtdqp4mpo54jpiwxw4kaxtsv2eg7vfbtauaky25f4lelnwd542pm.ipfs.dweb.link
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bafybeiaabas4oscv5jny2siw3tneukj76jrfebevrvv455vrlblicqqyoe.ipfs.cf-ipfs.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 410 Gone
server: openresty
date: Fri, 29 Mar 2024 15:51:46 GMT
content-type: text/html
content-length: 6672
etag: "650c2b70-1a10"
x-ipfs-lb-pop: gateway-bank1-fr2
x-bfid: 9fa19520b1cdc35b0821658959aa9f97
strict-transport-security: max-age=31536000; includeSubDomains; preload
X-Firefox-Spdy: h2
|
|
| i.postimg.cc/1zyhynKB/bg.png | 162.19.61.80 | 200 OK | 148 kB |
URL GET HTTP/2i.postimg.cc/1zyhynKB/bg.png IP162.19.61.80:443
Requested byhttps://bafybeiaabas4oscv5jny2siw3tneukj76jrfebevrvv455vrlblicqqyoe.ipfs.cf-ipfs.com/ CertificateIssuerLet's Encrypt Subjectpostimg.cc FingerprintF9:1B:A9:B2:AB:2D:30:75:4E:44:3F:7A:6F:40:77:77:39:CE:1B:13 ValidityWed, 21 Feb 2024 07:13:33 GMT - Tue, 21 May 2024 07:13:32 GMT
File typePNG image data, 1280 x 589, 8-bit/color RGBA, non-interlaced Size148 kB (148425 bytes) Hashc928ead236377018eef3508cefde85a7 c777bb5d8cbb6f758a1cf6d2a4d40dfb449a7e48 d55a412bcdc152e05ae539ce1f769a0c71aeef6336a4de2754b013e2bc11af71
GET /1zyhynKB/bg.png HTTP/1.1
Host: i.postimg.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bafybeiaabas4oscv5jny2siw3tneukj76jrfebevrvv455vrlblicqqyoe.ipfs.cf-ipfs.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Fri, 29 Mar 2024 15:51:46 GMT
content-type: image/png
content-length: 148425
last-modified: Fri, 23 Jun 2023 07:41:48 GMT
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
access-control-allow-origin: *
access-control-allow-methods: GET, OPTIONS
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| i.postimg.cc/3JWwH6wN/apple-touch-icon.png | 162.19.61.80 | 200 OK | 9.2 kB |
URL GET HTTP/2i.postimg.cc/3JWwH6wN/apple-touch-icon.png IP162.19.61.80:443
Requested byhttps://bafybeiaabas4oscv5jny2siw3tneukj76jrfebevrvv455vrlblicqqyoe.ipfs.cf-ipfs.com/ CertificateIssuerLet's Encrypt Subjectpostimg.cc FingerprintF9:1B:A9:B2:AB:2D:30:75:4E:44:3F:7A:6F:40:77:77:39:CE:1B:13 ValidityWed, 21 Feb 2024 07:13:33 GMT - Tue, 21 May 2024 07:13:32 GMT
File typePNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced Hash3c231b07623cd54d8404d053145b43b8 fd1c20f77dc6603bec0dc459de6a39a50273ead9 1a7f1cc031190e273ff7d38dd6d7677444eb018f42dbd77a1a78a411a9ca8f74
GET /3JWwH6wN/apple-touch-icon.png HTTP/1.1
Host: i.postimg.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bafybeiaabas4oscv5jny2siw3tneukj76jrfebevrvv455vrlblicqqyoe.ipfs.cf-ipfs.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 29 Mar 2024 15:51:46 GMT
content-type: image/png
content-length: 9187
last-modified: Fri, 23 Jun 2023 07:40:57 GMT
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
access-control-allow-origin: *
access-control-allow-methods: GET, OPTIONS
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| i.postimg.cc/wxnBg2Rk/favicon-16x16.png | 162.19.61.80 | 200 OK | 352 B |
URL GET HTTP/2i.postimg.cc/wxnBg2Rk/favicon-16x16.png IP162.19.61.80:443
Requested byhttps://bafybeiaabas4oscv5jny2siw3tneukj76jrfebevrvv455vrlblicqqyoe.ipfs.cf-ipfs.com/ CertificateIssuerLet's Encrypt Subjectpostimg.cc FingerprintF9:1B:A9:B2:AB:2D:30:75:4E:44:3F:7A:6F:40:77:77:39:CE:1B:13 ValidityWed, 21 Feb 2024 07:13:33 GMT - Tue, 21 May 2024 07:13:32 GMT
File typePNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced Hash29a7971ab512fe1c421fa65a785d3970 ba837103dd3877c780a0916c061fd2af38eff741 03aa5551ce60e0e703f7239cb2de4c6f26b9ca7802736dbd30c36af16440d3a1
GET /wxnBg2Rk/favicon-16x16.png HTTP/1.1
Host: i.postimg.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bafybeiaabas4oscv5jny2siw3tneukj76jrfebevrvv455vrlblicqqyoe.ipfs.cf-ipfs.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 29 Mar 2024 15:51:46 GMT
content-type: image/png
content-length: 352
last-modified: Fri, 23 Jun 2023 07:42:10 GMT
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
access-control-allow-origin: *
access-control-allow-methods: GET, OPTIONS
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| bafybeibqo6sij2nxln2lh3l4bhpufkriqsc6vtcni44smmcw2hskahjtxq.ipfs.dweb.link/?filename=jquery.js | 209.94.90.1 | 200 OK | 44 kB |
URL GET HTTP/2bafybeibqo6sij2nxln2lh3l4bhpufkriqsc6vtcni44smmcw2hskahjtxq.ipfs.dweb.link/?filename=jquery.js IP209.94.90.1:443
Requested byhttps://bafybeiaabas4oscv5jny2siw3tneukj76jrfebevrvv455vrlblicqqyoe.ipfs.cf-ipfs.com/ CertificateIssuerLet's Encrypt Subjectdweb.link Fingerprint2A:D2:03:4C:D3:15:24:93:EF:9E:1F:8F:5A:9C:AF:C4:E2:63:C9:42 ValidityTue, 06 Feb 2024 17:40:37 GMT - Mon, 06 May 2024 17:40:36 GMT
File typegzip compressed data, from Unix Hash42dee74aa6de68a000c673983790dba0 af4bd7dcdbece9cf84034e63e23645d26799088b 72e415e3797d3a094b1ca802b7876855e3e9b1199a67db7354328f6d07584e96
GET /?filename=jquery.js HTTP/1.1
Host: bafybeibqo6sij2nxln2lh3l4bhpufkriqsc6vtcni44smmcw2hskahjtxq.ipfs.dweb.link
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://bafybeiaabas4oscv5jny2siw3tneukj76jrfebevrvv455vrlblicqqyoe.ipfs.cf-ipfs.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: openresty
date: Fri, 29 Mar 2024 15:51:46 GMT
content-type: text/javascript; charset=utf-8
vary: Accept-Encoding
access-control-allow-headers: Content-Type, Range, User-Agent, X-Requested-With
access-control-allow-methods: GET, HEAD, OPTIONS
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Content-Range, X-Chunked-Output, X-Ipfs-Path, X-Ipfs-Roots, X-Stream-Output
cache-control: public, max-age=29030400, immutable
content-disposition: inline; filename="jquery.js"; filename*=UTF-8''jquery.js
etag: W/"bafybeibqo6sij2nxln2lh3l4bhpufkriqsc6vtcni44smmcw2hskahjtxq"
x-ipfs-path: /ipfs/bafybeibqo6sij2nxln2lh3l4bhpufkriqsc6vtcni44smmcw2hskahjtxq/
x-ipfs-roots: bafybeibqo6sij2nxln2lh3l4bhpufkriqsc6vtcni44smmcw2hskahjtxq
x-ipfs-pop: ipfs-bank4-fr2
timing-allow-origin: *
x-ipfs-lb-pop: gateway-bank1-fr2
x-bfid: 2c54092deb8d9924591c32369e8f7aef
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-proxy-cache: HIT
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| bafybeic6x2fp4tittdgm62ih5upavzl5cd7mfqheybck3e262z3mwy4xpy.ipfs.dweb.link/?filename=popper.js | 209.94.90.1 | 200 OK | 19 kB |
URL GET HTTP/2bafybeic6x2fp4tittdgm62ih5upavzl5cd7mfqheybck3e262z3mwy4xpy.ipfs.dweb.link/?filename=popper.js IP209.94.90.1:443
Requested byhttps://bafybeiaabas4oscv5jny2siw3tneukj76jrfebevrvv455vrlblicqqyoe.ipfs.cf-ipfs.com/ CertificateIssuerLet's Encrypt Subjectdweb.link Fingerprint2A:D2:03:4C:D3:15:24:93:EF:9E:1F:8F:5A:9C:AF:C4:E2:63:C9:42 ValidityTue, 06 Feb 2024 17:40:37 GMT - Mon, 06 May 2024 17:40:36 GMT
File typeJavaScript source, ASCII text, with very long lines (19015) Hash70d3fda195602fe8b75e0097eed74dde c3b977aa4b8dfb69d651e07015031d385ded964b a52f7aa54d7bcaafa056ee0a050262dfc5694ae28dee8b4cac3429af37ff0d66
Analyzer | Verdict | Alert | urlquery | phishing | Phishing - WeTransfer |
GET /?filename=popper.js HTTP/1.1
Host: bafybeic6x2fp4tittdgm62ih5upavzl5cd7mfqheybck3e262z3mwy4xpy.ipfs.dweb.link
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://bafybeiaabas4oscv5jny2siw3tneukj76jrfebevrvv455vrlblicqqyoe.ipfs.cf-ipfs.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: openresty
date: Fri, 29 Mar 2024 15:51:46 GMT
content-type: text/javascript; charset=utf-8
vary: Accept-Encoding
access-control-allow-headers: Content-Type, Range, User-Agent, X-Requested-With
access-control-allow-methods: GET, HEAD, OPTIONS
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Content-Range, X-Chunked-Output, X-Ipfs-Path, X-Ipfs-Roots, X-Stream-Output
cache-control: public, max-age=29030400, immutable
content-disposition: inline; filename="popper.js"; filename*=UTF-8''popper.js
etag: W/"bafybeic6x2fp4tittdgm62ih5upavzl5cd7mfqheybck3e262z3mwy4xpy"
x-ipfs-path: /ipfs/bafybeic6x2fp4tittdgm62ih5upavzl5cd7mfqheybck3e262z3mwy4xpy/
x-ipfs-roots: bafybeic6x2fp4tittdgm62ih5upavzl5cd7mfqheybck3e262z3mwy4xpy
x-ipfs-pop: ipfs-bank3-fr2
timing-allow-origin: *
x-ipfs-lb-pop: gateway-bank1-fr2
x-bfid: 716b109e3414bb2d93e8024776d8cf41
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-proxy-cache: HIT
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| bafybeiaabas4oscv5jny2siw3tneukj76jrfebevrvv455vrlblicqqyoe.ipfs.cf-ipfs.com/index_files/webfont.js | 104.17.64.14 | 404 Not Found | 0 B |
URL GET HTTP/2bafybeiaabas4oscv5jny2siw3tneukj76jrfebevrvv455vrlblicqqyoe.ipfs.cf-ipfs.com/index_files/webfont.js IP104.17.64.14:443
Requested byhttps://bafybeiaabas4oscv5jny2siw3tneukj76jrfebevrvv455vrlblicqqyoe.ipfs.cf-ipfs.com/ CertificateIssuerLet's Encrypt Subjectcf-ipfs.com Fingerprint46:AD:9B:E1:02:E3:A8:FE:9B:E2:86:B5:A1:5C:07:B9:B7:3B:17:14 ValiditySat, 16 Mar 2024 23:28:47 GMT - Fri, 14 Jun 2024 23:28:46 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer | Verdict | Alert | OpenPhish | phishing | WeTransfer | PhishTank | phishing | Other |
GET /index_files/webfont.js HTTP/1.1
Host: bafybeiaabas4oscv5jny2siw3tneukj76jrfebevrvv455vrlblicqqyoe.ipfs.cf-ipfs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bafybeiaabas4oscv5jny2siw3tneukj76jrfebevrvv455vrlblicqqyoe.ipfs.cf-ipfs.com/
Cookie: __cf_bm=7b_3r9UUQFl.j67xgYR4sXGRP4JKB_69SukyNEuusYc-1711727505-1.0.1.1-DifnP1s2O_k4Pj0iJt5mua9rUGuW52uyHkl3lPoGbdBaaBTkebvdUut2.6ectVZ9BxtVhTXwpW4whIYIVMmuFg
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 404 Not Found
date: Fri, 29 Mar 2024 15:51:46 GMT
content-type: text/plain; charset=utf-8
cf-ray: 86c105f21f6f56c1-OSL
cf-cache-status: HIT
access-control-allow-origin: *
age: 1
cache-control: no-store
vary: Accept-Encoding
access-control-allow-headers: Content-Type, Range, User-Agent, X-Requested-With
access-control-allow-methods: GET
access-control-expose-headers: Content-Length, Content-Range, X-Chunked-Output, X-Ipfs-Path, X-Ipfs-Roots, X-Stream-Output
x-cf-ipfs-cache-status: miss
x-content-type-options: nosniff
x-ipfs-path: /ipfs/bafybeiaabas4oscv5jny2siw3tneukj76jrfebevrvv455vrlblicqqyoe/index_files/webfont.js
server: cloudflare
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| bafybeiaabas4oscv5jny2siw3tneukj76jrfebevrvv455vrlblicqqyoe.ipfs.cf-ipfs.com/index_files/webfont.js | 104.17.64.14 | 404 Not Found | 0 B |
URL GET HTTP/2bafybeiaabas4oscv5jny2siw3tneukj76jrfebevrvv455vrlblicqqyoe.ipfs.cf-ipfs.com/index_files/webfont.js IP104.17.64.14:443
Requested byhttps://bafybeiaabas4oscv5jny2siw3tneukj76jrfebevrvv455vrlblicqqyoe.ipfs.cf-ipfs.com/ CertificateIssuerLet's Encrypt Subjectcf-ipfs.com Fingerprint46:AD:9B:E1:02:E3:A8:FE:9B:E2:86:B5:A1:5C:07:B9:B7:3B:17:14 ValiditySat, 16 Mar 2024 23:28:47 GMT - Fri, 14 Jun 2024 23:28:46 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer | Verdict | Alert | OpenPhish | phishing | WeTransfer | PhishTank | phishing | Other |
GET /index_files/webfont.js HTTP/1.1
Host: bafybeiaabas4oscv5jny2siw3tneukj76jrfebevrvv455vrlblicqqyoe.ipfs.cf-ipfs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bafybeiaabas4oscv5jny2siw3tneukj76jrfebevrvv455vrlblicqqyoe.ipfs.cf-ipfs.com/
Cookie: __cf_bm=7b_3r9UUQFl.j67xgYR4sXGRP4JKB_69SukyNEuusYc-1711727505-1.0.1.1-DifnP1s2O_k4Pj0iJt5mua9rUGuW52uyHkl3lPoGbdBaaBTkebvdUut2.6ectVZ9BxtVhTXwpW4whIYIVMmuFg
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 404 Not Found
date: Fri, 29 Mar 2024 15:51:45 GMT
content-type: text/plain; charset=utf-8
cf-ray: 86c105eedc1056c1-OSL
cf-cache-status: EXPIRED
access-control-allow-origin: *
cache-control: no-store
vary: Accept-Encoding
access-control-allow-headers: Content-Type, Range, User-Agent, X-Requested-With
access-control-allow-methods: GET
access-control-expose-headers: Content-Length, Content-Range, X-Chunked-Output, X-Ipfs-Path, X-Ipfs-Roots, X-Stream-Output
x-cf-ipfs-cache-status: miss
x-content-type-options: nosniff
x-ipfs-path: /ipfs/bafybeiaabas4oscv5jny2siw3tneukj76jrfebevrvv455vrlblicqqyoe/index_files/webfont.js
server: cloudflare
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| bafybeigeqhk7awdadjfe7mg764ts37prfajxfqry7gsdhb3ku47uwk2tiu.ipfs.dweb.link/?filename=jquery.min.js | 209.94.90.1 | 200 OK | 86 kB |
URL GET HTTP/2bafybeigeqhk7awdadjfe7mg764ts37prfajxfqry7gsdhb3ku47uwk2tiu.ipfs.dweb.link/?filename=jquery.min.js IP209.94.90.1:443
Requested byhttps://bafybeiaabas4oscv5jny2siw3tneukj76jrfebevrvv455vrlblicqqyoe.ipfs.cf-ipfs.com/ CertificateIssuerLet's Encrypt Subjectdweb.link Fingerprint2A:D2:03:4C:D3:15:24:93:EF:9E:1F:8F:5A:9C:AF:C4:E2:63:C9:42 ValidityTue, 06 Feb 2024 17:40:37 GMT - Mon, 06 May 2024 17:40:36 GMT
File typeJavaScript source, ASCII text, with very long lines (32065), with CRLF line terminators Hashbceabde9d4ba653fd1f4bb171bff0c01 c8cdd4f8e91a77cddbc6d9ce8d5f302c52d74b6f 7496a1a9d658f14a47f7ee8dfa70840e47efa61b55b02cda8b316b0fc8dcc2c5
Analyzer | Verdict | Alert | urlquery | phishing | Phishing - WeTransfer |
GET /?filename=jquery.min.js HTTP/1.1
Host: bafybeigeqhk7awdadjfe7mg764ts37prfajxfqry7gsdhb3ku47uwk2tiu.ipfs.dweb.link
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bafybeiaabas4oscv5jny2siw3tneukj76jrfebevrvv455vrlblicqqyoe.ipfs.cf-ipfs.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: openresty
date: Fri, 29 Mar 2024 15:51:45 GMT
content-type: text/javascript; charset=utf-8
vary: Accept-Encoding
access-control-allow-headers: Content-Type, Range, User-Agent, X-Requested-With
access-control-allow-methods: GET, HEAD, OPTIONS
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Content-Range, X-Chunked-Output, X-Ipfs-Path, X-Ipfs-Roots, X-Stream-Output
cache-control: public, max-age=29030400, immutable
content-disposition: inline; filename="jquery.min.js"; filename*=UTF-8''jquery.min.js
etag: W/"bafybeigeqhk7awdadjfe7mg764ts37prfajxfqry7gsdhb3ku47uwk2tiu"
x-ipfs-path: /ipfs/bafybeigeqhk7awdadjfe7mg764ts37prfajxfqry7gsdhb3ku47uwk2tiu/
x-ipfs-roots: bafybeigeqhk7awdadjfe7mg764ts37prfajxfqry7gsdhb3ku47uwk2tiu
x-ipfs-pop: ipfs-bank2-fr2
timing-allow-origin: *
x-ipfs-lb-pop: gateway-bank2-fr2
x-bfid: 07c00a5c532df63109247a7b8d9a5c6c
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-proxy-cache: HIT
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| bafybeiaabas4oscv5jny2siw3tneukj76jrfebevrvv455vrlblicqqyoe.ipfs.cf-ipfs.com/ | 104.17.64.14 | 200 OK | 48 kB |
URL User Request GET HTTP/2bafybeiaabas4oscv5jny2siw3tneukj76jrfebevrvv455vrlblicqqyoe.ipfs.cf-ipfs.com/ IP104.17.64.14:443
CertificateIssuerLet's Encrypt Subjectcf-ipfs.com Fingerprint46:AD:9B:E1:02:E3:A8:FE:9B:E2:86:B5:A1:5C:07:B9:B7:3B:17:14 ValiditySat, 16 Mar 2024 23:28:47 GMT - Fri, 14 Jun 2024 23:28:46 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer | Verdict | Alert | OpenPhish | phishing | WeTransfer | PhishTank | phishing | Other |
GET / HTTP/1.1
Host: bafybeiaabas4oscv5jny2siw3tneukj76jrfebevrvv455vrlblicqqyoe.ipfs.cf-ipfs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 29 Mar 2024 15:51:45 GMT
content-type: text/html
cf-ray: 86c105ea6f2156c1-OSL
cf-cache-status: MISS
access-control-allow-origin: *
cache-control: public, max-age=29030400, immutable
etag: W/"bafybeiaabas4oscv5jny2siw3tneukj76jrfebevrvv455vrlblicqqyoe"
vary: Accept-Encoding
access-control-allow-headers: Content-Type, Range, User-Agent, X-Requested-With
access-control-allow-methods: GET
access-control-expose-headers: Content-Length, Content-Range, X-Chunked-Output, X-Ipfs-Path, X-Ipfs-Roots, X-Stream-Output
x-cf-ipfs-cache-status: miss
x-ipfs-path: /ipfs/bafybeiaabas4oscv5jny2siw3tneukj76jrfebevrvv455vrlblicqqyoe/
x-ipfs-roots: bafybeiaabas4oscv5jny2siw3tneukj76jrfebevrvv455vrlblicqqyoe
set-cookie: __cf_bm=7b_3r9UUQFl.j67xgYR4sXGRP4JKB_69SukyNEuusYc-1711727505-1.0.1.1-DifnP1s2O_k4Pj0iJt5mua9rUGuW52uyHkl3lPoGbdBaaBTkebvdUut2.6ectVZ9BxtVhTXwpW4whIYIVMmuFg; path=/; expires=Fri, 29-Mar-24 16:21:45 GMT; domain=.bafybeiaabas4oscv5jny2siw3tneukj76jrfebevrvv455vrlblicqqyoe.ipfs.cf-ipfs.com; HttpOnly; Secure; SameSite=None
server: cloudflare
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|