Report - purple-wind-f346.hitler.workers.dev/

Report Overview

Submitted URL
purple-wind-f346.hitler.workers.dev/
IP
188.114.97.1
ASN
#13335 CLOUDFLARENET
Submitted
2024-03-29 04:55:50
Access
public
Website Title
Discord | Your Place to Talk and Hang Out
Final URL
purple-wind-f346.hitler.workers.dev/
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
6

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
assets-global.website-files.com	14027	2019-01-23	2020-11-01	2024-03-28	7.7 kB	1.2 MB	143.204.55.80
ajax.googleapis.com	12905	2005-01-25	2013-08-16	2024-03-29	899 B	38 kB	216.58.207.202
www.googletagmanager.com	75	2011-11-11	2013-05-22	2024-03-28	508 B	90 kB	142.250.74.168
d3e54v103j8qbb.cloudfront.net	unknown	2008-04-25	2016-03-11	2024-03-28	1.5 kB	43 kB	143.204.42.231
fonts.googleapis.com	8877	2005-01-25	2013-06-10	2024-03-29	532 B	8.3 kB	142.250.74.106
assets.website-files.com	13552	2019-01-23	2020-11-01	2024-03-26	3.6 kB	239 kB	143.204.55.95
discord.com	1053	2000-11-06	2013-06-04	2024-03-28	1.9 kB	30 kB	162.159.138.232
purple-wind-f346.hitler.workers.dev	unknown	2019-02-08	2022-02-06	2024-03-11	1.4 kB	113 kB	188.114.97.1
fonts.gstatic.com	unknown	2008-02-11	2014-09-09	2024-03-29	5.0 kB	77 kB	216.58.207.227
global.localizecdn.com	29924	2016-04-14	2016-10-11	2024-03-27	428 B	33 kB	104.18.5.175

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

Scan Date	Severity	Indicator	Alert
2024-03-28	medium	purple-wind-f346.hitler.workers.dev/	Discord
2024-03-28	medium	purple-wind-f346.hitler.workers.dev/	Discord
2024-03-28	medium	purple-wind-f346.hitler.workers.dev/	Discord

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (19)

	URL	Size	First Seen	Last Seen
	www.googletagmanager.com/gtm.js?id=GTM-N7BVC2W&gtm_auth=GI0g9O-54_SitcgmxQKxlA&gtm_preview=env-2&gtm_cookies_win=x	249 kB	2024-03-29	2024-03-29
Pretty URL www.googletagmanager.com/gtm.js?id=GTM-N7BVC2W&gtm_auth=GI0g9O-54_SitcgmxQKxlA&gtm_preview=env-2&gtm_cookies_win=x IP 142.250.74.168 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML false Observations First Seen2024-03-29 05:55:52 Last Seen2024-03-29 05:55:53 Times Seen2 Hash fd88b3a4eec030b3343bde2d3d031ddd 26bf0b9d592785bfcc28b292e8283f44c0f5a640 f2f5e3f9f8182f73143290b63fdfb3a09b77c97a6d2aef6f356acd31839833df Loading...

	purple-wind-f346.hitler.workers.dev/	132 B	2024-02-16	2024-04-27
Pretty URL purple-wind-f346.hitler.workers.dev/ IP 188.114.97.1 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2024-02-16 12:37:45 Last Seen2024-04-27 19:53:13 Times Seen125 Hash 826d3afe636b1906b61f9a8debcad652 1032f03b6e3933a9ed66e99a958564de76a12109 378f38d14703c00da0ab6271dbeb0853fd9f9e5906d89032cc20c599c3ac9575 Loading...

	discord.com/webflow-scripts/head.js	8.5 kB	2024-03-22	2024-04-27
Pretty URL discord.com/webflow-scripts/head.js IP 162.159.138.232 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2024-03-22 17:26:10 Last Seen2024-04-27 19:53:13 Times Seen110 Hash 5f85c48349fcc177a601c0d2910e2b5b 58804d25e4cb6bc4a77506c6d36db87788ff6966 dd53642818deded757546d764295563addb95b0713b4f2352e7209d9f72942e0 Loading...

	purple-wind-f346.hitler.workers.dev/	181 B	2023-03-07	2024-04-27
Pretty URL purple-wind-f346.hitler.workers.dev/ IP 188.114.97.1 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 01:17:43 Last Seen2024-04-27 19:53:13 Times Seen3785 Hash 0e9e3ad57abeefde87342864450cc232 4dc8676bf3417d597053d5f253fce034007f63da 9a37601d1f5a5f2fba3b000694d4bf5e035c606d5485dd94e2997cbe2efe5c26 Loading...

	purple-wind-f346.hitler.workers.dev/	26 B	2024-01-26	2024-04-27
Pretty URL purple-wind-f346.hitler.workers.dev/ IP 188.114.97.1 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2024-01-26 11:16:50 Last Seen2024-04-27 19:53:14 Times Seen120 Hash 04169f0d55ccf701d1f023d9e5bc29d3 417e9b0c0d3c96f8c6686c11460a61c394c352ff 54e3df18163e5e04c3330846e354b9799c8c2a5bb780deb4b2ec023c3599f0c6 Loading...

	discord.com/webflow-scripts/bodyEnd.js	12 kB	2024-03-22	2024-04-27
Pretty URL discord.com/webflow-scripts/bodyEnd.js IP 162.159.138.232 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2024-03-22 17:26:10 Last Seen2024-04-27 19:53:13 Times Seen111 Hash cf1fcdb5511493e70497b458944e1358 16edf79361fb9f6232e78fe790e05afc8c0f22c3 565361427f87e795807c3fdcf5debe1dc807c6edbf5f5e57a10d9c9d593c9a1d Loading...

	ajax.googleapis.com/ajax/libs/jquery/3.6.0/jquery.min.js	90 kB	2023-03-07	2024-04-28
Pretty URL ajax.googleapis.com/ajax/libs/jquery/3.6.0/jquery.min.js IP 216.58.207.202 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:02:13 Last Seen2024-04-28 02:11:33 Times Seen262609 Hash 8fb8fee4fcc3cc86ff6c724154c49c42 b82d238d4e31fdf618bae8ac11a6c812c03dd0d4 ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e Loading...

	d3e54v103j8qbb.cloudfront.net/js/jquery-3.5.1.min.dc5e7f18c8.js?site=6257adef93867e50d84d30e2	90 kB	2023-03-07	2024-04-28
Pretty URL d3e54v103j8qbb.cloudfront.net/js/jquery-3.5.1.min.dc5e7f18c8.js?site=6257adef93867e50d84d30e2 IP 143.204.42.231 ASN #16509 AMAZON-02 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:02:01 Last Seen2024-04-28 01:46:21 Times Seen139845 Hash dc5e7f18c8d36ac1d3d4753a87c98d0a c8e1c8b386dc5b7a9184c763c88d19a346eb3342 f7f6a5894f1d19ddad6fa392b2ece2c5e578cbf7da4ea805b6885eb6985b6e3d Loading...

	assets-global.website-files.com/6257adef93867e50d84d30e2/js/discord-2022.248d3ef52.js	2.6 MB	2024-03-21	2024-04-08
Pretty URL assets-global.website-files.com/6257adef93867e50d84d30e2/js/discord-2022.248d3ef52.js IP 143.204.55.80 ASN #16509 AMAZON-02 Introduced by scriptElement Embedded in HTML false Observations First Seen2024-03-21 05:10:25 Last Seen2024-04-08 19:00:43 Times Seen88 Hash 248d3ef52a0497f2731f1e52b13d9c7f 4f01f653ea1a754d3b25bb01b806509a56a18fee e2de8fb710759feb954343614eabfee93a838df771d7dbae0394c8638157ca15 Loading...

	purple-wind-f346.hitler.workers.dev/	87 B	2023-03-08	2024-04-27
Pretty URL purple-wind-f346.hitler.workers.dev/ IP 188.114.97.1 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-08 09:18:41 Last Seen2024-04-27 19:53:14 Times Seen143 Hash 4660c99ff509402822c528d30bb5a29f 692a4b8873ee74b4a9ee69e10d35280cd367748e 8d8ffb8d6add76d3546fe638085296687f91da5aea826fcb017ef613c48ba8ac Loading...

	ajax.googleapis.com/ajax/libs/webfont/1.6.26/webfont.js	13 kB	2023-03-07	2024-04-28
Pretty URL ajax.googleapis.com/ajax/libs/webfont/1.6.26/webfont.js IP 216.58.207.202 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:03:17 Last Seen2024-04-28 00:31:14 Times Seen22499 Hash 7c96a5f11d9741541d5e3c42ff6380d7 d3fa2564c021cf730e58ffddb138cf6b57ed126e 81016ac6be850b72df5d4faa0c3cec8e2c1b0ba0045712144a6766adfad40bee Loading...

	purple-wind-f346.hitler.workers.dev/	4.8 kB	2024-01-26	2024-04-27
Pretty URL purple-wind-f346.hitler.workers.dev/ IP 188.114.97.1 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2024-01-26 11:16:51 Last Seen2024-04-27 19:53:14 Times Seen128 Hash 9b874ef9584a272c4f2ba7cef116cd4b 5f1fd8a78c0f362b180a632460e4aea1b48f91d4 c639020f104e3364e5227e43a4640ce1a26575be0088730a9518df5b8ea5fb1d Loading...

	purple-wind-f346.hitler.workers.dev/	23 B	2023-03-08	2024-04-27
Pretty URL purple-wind-f346.hitler.workers.dev/ IP 188.114.97.1 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-08 09:18:41 Last Seen2024-04-27 19:53:14 Times Seen145 Hash a106c6b63912566571a0b020acec86ac 28deb75636623e968c1dfc2929fbb832e4dbb067 4eb63702a97229f65db08dcb62ccbabbc18085c90b1177b22dc14ada039ed7c5 Loading...

	purple-wind-f346.hitler.workers.dev/	126 B	2023-03-08	2024-04-27
Pretty URL purple-wind-f346.hitler.workers.dev/ IP 188.114.97.1 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-08 09:18:41 Last Seen2024-04-27 19:53:14 Times Seen143 Hash 9b6f31f0b2a5f1d7382584a8f877c62d 6864ba993fd3fc3773b68039fce3704a9d08dcd2 95538bfa01f8ed7d0b8b942b896359ebd1dcafeef50ec5c5bc6990c4df53a41c Loading...

	unknown	287 B	2024-03-29	2024-03-29
Pretty Introduced by scriptElement Embedded in HTML false Observations First Seen2024-03-29 05:55:53 Last Seen2024-03-29 05:55:53 Times Seen1 Hash 207459ec834de1654130a4d8bf484c84 994606b21ba455851333028c2925a1fba760df82 efb98c44f66d5f26170ef7594695de1ecc29eb5a580008b1af25836e10ac6cb9 Loading...

	global.localizecdn.com/localize.js	63 kB	2024-03-09	2024-04-06
Pretty URL global.localizecdn.com/localize.js IP 104.18.5.175 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2024-03-09 18:41:18 Last Seen2024-04-06 19:18:16 Times Seen123 Hash f5e8b21aea5e6a757054a3c22bed38a8 c65b445999655276963754e14c47eb24eb43f7f1 76402f839669de8d3e2a28c17d7f95b7951057379acae596941eec8f1f02380d Loading...

	purple-wind-f346.hitler.workers.dev/	521 B	2024-01-26	2024-04-27
Pretty URL purple-wind-f346.hitler.workers.dev/ IP 188.114.97.1 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2024-01-26 11:16:52 Last Seen2024-04-27 19:53:14 Times Seen129 Hash fecb1979673fcc384241f64fe3327048 129cf7177947ac56d7d434213ca08dde5d7b85f3 b55793318927446fc801d08744694377d4b66d7dbfad7d1ee07a5a3fd9602966 Loading...

	purple-wind-f346.hitler.workers.dev/	1.2 kB	2024-03-29	2024-03-29
Pretty URL purple-wind-f346.hitler.workers.dev/ IP 188.114.97.1 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2024-03-29 05:55:53 Last Seen2024-03-29 05:55:53 Times Seen1 Hash 66fb5b9da45d57d0084daf8aeddd75e3 a3c00685988a964be748e39508e13e93aa8be775 ec649b62fbbb96e145eb1dc7e7415677b58bd0efcf36e65fa9b1e5a9f863d414 Loading...

	discord.com/webflow-scripts/landing.js	1.7 kB	2024-03-22	2024-04-27
Pretty URL discord.com/webflow-scripts/landing.js IP 162.159.138.232 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2024-03-22 17:26:10 Last Seen2024-04-27 19:53:14 Times Seen110 Hash 6873ba0d8e966bfe2f6428009c1f4255 4db49fba2d81920a64192997c693e94b857886ea 17184c99c6227c46e9e0550667946e3f55ad4bdd1999c05f4e3201083e9a5940 Loading...

HTTP Transactions (44)

URL IP Response Size

assets-global.website-files.com/6257adef93867e50d84d30e2/js/discord-2022.248d3ef52.js

143.204.55.80

200 OK

296 kB

URL GET HTTP/2
assets-global.website-files.com/6257adef93867e50d84d30e2/js/discord-2022.248d3ef52.js
IP
143.204.55.80:443
ASN
#16509 AMAZON-02

Requested by
https://purple-wind-f346.hitler.workers.dev/
Certificate
IssuerAmazon
Subject*.website-files.com
Fingerprint67:3F:4A:7A:30:BF:BC:29:1A:5A:41:A8:54:BB:F4:4A:E7:ED:D9:CF
ValidityMon, 11 Sep 2023 00:00:00 GMT - Tue, 08 Oct 2024 23:59:59 GMT

File type
JavaScript source, ASCII text, with very long lines (42312)
Size
296 kB (296032 bytes)
Hash
248d3ef52a0497f2731f1e52b13d9c7f
4f01f653ea1a754d3b25bb01b806509a56a18fee
e2de8fb710759feb954343614eabfee93a838df771d7dbae0394c8638157ca15

HTTP Headers

GET /6257adef93867e50d84d30e2/js/discord-2022.248d3ef52.js HTTP/1.1
Host: assets-global.website-files.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://purple-wind-f346.hitler.workers.dev/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: text/javascript
content-length: 296032
last-modified: Wed, 27 Mar 2024 01:22:38 GMT
x-amz-server-side-encryption: AES256
content-encoding: gzip
x-amz-version-id: AgjL45RrOxQ41xph1NXODF1nY_kFuDht
accept-ranges: bytes
server: AmazonS3
date: Thu, 28 Mar 2024 14:57:33 GMT
cache-control: max-age=84600, must-revalidate
etag: "1a0da6fdc70fd393f0d3a26dc973250b"
vary: Accept-Encoding
via: 1.1 1d8cf7c8865ed1078c19a98771ad34ca.cloudfront.net (CloudFront)
age: 50270
access-control-allow-origin: *
x-cache: Hit from cloudfront
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: vOTp8-ZFsa-HuAxzAPNCc1ospXalwI1tjVQfNivWz5K-Z639w6S6yw==
X-Firefox-Spdy: h2

assets-global.website-files.com/6257adef93867e50d84d30e2/css/discord-2022.00e417851.min.css

143.204.55.80

200 OK

182 kB

URL GET HTTP/2
assets-global.website-files.com/6257adef93867e50d84d30e2/css/discord-2022.00e417851.min.css
IP
143.204.55.80:443
ASN
#16509 AMAZON-02

Requested by
https://purple-wind-f346.hitler.workers.dev/
Certificate
IssuerAmazon
Subject*.website-files.com
Fingerprint67:3F:4A:7A:30:BF:BC:29:1A:5A:41:A8:54:BB:F4:4A:E7:ED:D9:CF
ValidityMon, 11 Sep 2023 00:00:00 GMT - Tue, 08 Oct 2024 23:59:59 GMT

File type
Unicode text, UTF-8 text, with very long lines (65524), with no line terminators
Size
182 kB (181817 bytes)
Hash
00e4178517893ed6fb2ebbc4ac84cb84
4b1e8d4ac04aeb1382ab74f61c175fe6c38cd0e1
9d29c7fad44d6d9f53bff3598cd3b2578787b9f046af6fb943f14e3f58426719

HTTP Headers

GET /6257adef93867e50d84d30e2/css/discord-2022.00e417851.min.css HTTP/1.1
Host: assets-global.website-files.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://purple-wind-f346.hitler.workers.dev/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: text/css
content-length: 181817
date: Thu, 28 Mar 2024 09:51:53 GMT
last-modified: Thu, 28 Mar 2024 09:51:42 GMT
etag: "9a9bfae6e64086eda2008b12716e881c"
x-amz-server-side-encryption: AES256
cache-control: max-age=84600, must-revalidate
content-encoding: gzip
x-amz-version-id: uPPLP4cou9FqEPEzOwTpV1L7seyxk9Dx
accept-ranges: bytes
server: AmazonS3
via: 1.1 1d8cf7c8865ed1078c19a98771ad34ca.cloudfront.net (CloudFront)
age: 68610
access-control-allow-origin: *
x-cache: Hit from cloudfront
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: glHJChzDHaMLhLCn-XDmZD2juuCya6ZfL6r7gWJo-vWq8eGU7tUQ5A==
X-Firefox-Spdy: h2

ajax.googleapis.com/ajax/libs/jquery/3.6.0/jquery.min.js

216.58.207.202

200 OK

31 kB

URL GET HTTP/2
ajax.googleapis.com/ajax/libs/jquery/3.6.0/jquery.min.js
IP
216.58.207.202:443
ASN
#15169 GOOGLE

Requested by
https://purple-wind-f346.hitler.workers.dev/
Certificate
IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
Fingerprint04:B9:D9:E0:01:DB:5E:AB:5A:FF:F0:D9:ED:39:0F:C1:63:18:51:0B
ValidityMon, 26 Feb 2024 08:18:27 GMT - Mon, 20 May 2024 08:18:26 GMT

File type
JavaScript source, ASCII text, with very long lines (65447)
Size
31 kB (31017 bytes)
Hash
8fb8fee4fcc3cc86ff6c724154c49c42
b82d238d4e31fdf618bae8ac11a6c812c03dd0d4
ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e

HTTP Headers

GET /ajax/libs/jquery/3.6.0/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://purple-wind-f346.hitler.workers.dev/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 31017
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 28 Mar 2024 14:53:12 GMT
expires: Fri, 28 Mar 2025 14:53:12 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
last-modified: Wed, 10 Mar 2021 14:28:09 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
age: 50530
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

ajax.googleapis.com/ajax/libs/webfont/1.6.26/webfont.js

216.58.207.202

200 OK

5.4 kB

URL GET HTTP/2
ajax.googleapis.com/ajax/libs/webfont/1.6.26/webfont.js
IP
216.58.207.202:443
ASN
#15169 GOOGLE

Requested by
https://purple-wind-f346.hitler.workers.dev/
Certificate
IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
Fingerprint04:B9:D9:E0:01:DB:5E:AB:5A:FF:F0:D9:ED:39:0F:C1:63:18:51:0B
ValidityMon, 26 Feb 2024 08:18:27 GMT - Mon, 20 May 2024 08:18:26 GMT

File type
JavaScript source, ASCII text, with very long lines (2134)
Size
5.4 kB (5437 bytes)
Hash
7c96a5f11d9741541d5e3c42ff6380d7
d3fa2564c021cf730e58ffddb138cf6b57ed126e
81016ac6be850b72df5d4faa0c3cec8e2c1b0ba0045712144a6766adfad40bee

HTTP Headers

GET /ajax/libs/webfont/1.6.26/webfont.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://purple-wind-f346.hitler.workers.dev/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 5437
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 28 Mar 2024 17:24:54 GMT
expires: Fri, 28 Mar 2025 17:24:54 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
last-modified: Tue, 03 Mar 2020 19:15:00 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
age: 41428
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

assets-global.website-files.com/6257adef93867e50d84d30e2/6582b262413a0600bad70006_download.svg

143.204.55.80

200 OK

814 B

URL GET HTTP/2
assets-global.website-files.com/6257adef93867e50d84d30e2/6582b262413a0600bad70006_download.svg
IP
143.204.55.80:443
ASN
#16509 AMAZON-02

Requested by
https://purple-wind-f346.hitler.workers.dev/
Certificate
IssuerAmazon
Subject*.website-files.com
Fingerprint67:3F:4A:7A:30:BF:BC:29:1A:5A:41:A8:54:BB:F4:4A:E7:ED:D9:CF
ValidityMon, 11 Sep 2023 00:00:00 GMT - Tue, 08 Oct 2024 23:59:59 GMT

File type
SVG Scalable Vector Graphics image
Size
814 B (814 bytes)
Hash
8b196637ae590a18d9cf2f5bb692ae73
bd8d86ba72a2dcc2c2d8acbea63dfd8997062f25
56c2a50032005ce4082a752c124a0c1b7453395b72ac1b2b166c42fbeff33768

HTTP Headers

GET /6257adef93867e50d84d30e2/6582b262413a0600bad70006_download.svg HTTP/1.1
Host: assets-global.website-files.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://assets-global.website-files.com/6257adef93867e50d84d30e2/css/discord-2022.00e417851.min.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
content-type: image/svg+xml
content-length: 814
date: Wed, 24 Jan 2024 06:03:22 GMT
last-modified: Wed, 20 Dec 2023 09:22:43 GMT
etag: "8b196637ae590a18d9cf2f5bb692ae73"
x-amz-server-side-encryption: AES256
cache-control: max-age=31536000, must-revalidate
x-amz-version-id: Qzr6LIeIFRKthbSvTy9usKiqu1qEgDXI
accept-ranges: bytes
server: AmazonS3
via: 1.1 1d8cf7c8865ed1078c19a98771ad34ca.cloudfront.net (CloudFront)
age: 5611922
access-control-allow-origin: *
x-cache: Hit from cloudfront
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: YkcQRdvk3EITW3XKqJwGYGPw3ejXljoXJtexZP7qLPt5ebODSXx5VQ==
X-Firefox-Spdy: h2

assets-global.website-files.com/6257adef93867e50d84d30e2/644fab4df2dc8d7a9a081ebd_8a8375ab7908384e1fd6efe408284203.svg

143.204.55.80

200 OK

54 kB

URL GET HTTP/2
assets-global.website-files.com/6257adef93867e50d84d30e2/644fab4df2dc8d7a9a081ebd_8a8375ab7908384e1fd6efe408284203.svg
IP
143.204.55.80:443
ASN
#16509 AMAZON-02

Requested by
https://purple-wind-f346.hitler.workers.dev/
Certificate
IssuerAmazon
Subject*.website-files.com
Fingerprint67:3F:4A:7A:30:BF:BC:29:1A:5A:41:A8:54:BB:F4:4A:E7:ED:D9:CF
ValidityMon, 11 Sep 2023 00:00:00 GMT - Tue, 08 Oct 2024 23:59:59 GMT

File type
gzip compressed data, from Unix
Size
54 kB (53707 bytes)
Hash
4dcb2f8b806b2b725a6b7561929a2c42
75d0d0d6744844107fe6590c764e2f90e43faa97
ec51ce54b1d0c764320b3e17274475bc7463c9b3b8af9f3a88d35e3567dccfe8

HTTP Headers

GET /6257adef93867e50d84d30e2/644fab4df2dc8d7a9a081ebd_8a8375ab7908384e1fd6efe408284203.svg HTTP/1.1
Host: assets-global.website-files.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://assets-global.website-files.com/6257adef93867e50d84d30e2/css/discord-2022.00e417851.min.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
content-type: image/svg+xml
date: Thu, 25 Jan 2024 19:29:53 GMT
last-modified: Mon, 01 May 2023 12:06:39 GMT
etag: W/"8a8375ab7908384e1fd6efe408284203"
x-amz-server-side-encryption: AES256
cache-control: max-age=31536000, must-revalidate
x-amz-version-id: YNA2LFAIbq2g4FOlDDqfRHFxqlA2SfR_
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding
via: 1.1 1d8cf7c8865ed1078c19a98771ad34ca.cloudfront.net (CloudFront)
age: 5477131
access-control-allow-origin: *
x-cache: Hit from cloudfront
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: sVTvHgAwVLbAQEAdN40ktsdB0xWza_FtgPpWJDKsR2kXLOijBgyZ6w==
X-Firefox-Spdy: h2

assets.website-files.com/6257adef93867e50d84d30e2/65273da62cbf8363b445b021_abcgintonord-800-extrabold.woff2

143.204.55.95

200 OK

42 kB

URL GET HTTP/2
assets.website-files.com/6257adef93867e50d84d30e2/65273da62cbf8363b445b021_abcgintonord-800-extrabold.woff2
IP
143.204.55.95:443
ASN
#16509 AMAZON-02

Requested by
https://purple-wind-f346.hitler.workers.dev/
Certificate
IssuerAmazon
Subject*.website-files.com
Fingerprint67:3F:4A:7A:30:BF:BC:29:1A:5A:41:A8:54:BB:F4:4A:E7:ED:D9:CF
ValidityMon, 11 Sep 2023 00:00:00 GMT - Tue, 08 Oct 2024 23:59:59 GMT

File type
Web Open Font Format (Version 2), TrueType, length 41872, version 1.6553
Size
42 kB (41872 bytes)
Hash
3d07f5abf272fbb5670d02ed687453d0
5ba49c861917331a4d29d2a81ed4f93e94f62212
3afc8b61c01534f04c628962b34e53104e0487b010f197a54d2e9ce357bf9733

HTTP Headers

GET /6257adef93867e50d84d30e2/65273da62cbf8363b445b021_abcgintonord-800-extrabold.woff2 HTTP/1.1
Host: assets.website-files.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://purple-wind-f346.hitler.workers.dev
DNT: 1
Connection: keep-alive
Referer: https://assets-global.website-files.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: application/octet-stream
content-length: 41872
date: Tue, 16 Jan 2024 00:16:13 GMT
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
access-control-max-age: 3000
last-modified: Thu, 12 Oct 2023 00:28:23 GMT
etag: "3d07f5abf272fbb5670d02ed687453d0"
x-amz-server-side-encryption: AES256
cache-control: max-age=31536000, must-revalidate
x-amz-version-id: Ntbz1viACAtTV6OeKRAGMck.yUrF3AVv
accept-ranges: bytes
server: AmazonS3
via: 1.1 6480520a5e02f3163410e3134bd77baa.cloudfront.net (CloudFront)
age: 6323951
x-cache: Hit from cloudfront
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: qHBl--ioJ7ByFs-l70hzPy-2F3rkwnnC0cB-h6W_m0AbhOpcSZcw4A==
X-Firefox-Spdy: h2

assets.website-files.com/6257adef93867e50d84d30e2/652737c319ba7da75394c4cb_ggsans-Medium.woff2

143.204.55.95

200 OK

33 kB

URL GET HTTP/2
assets.website-files.com/6257adef93867e50d84d30e2/652737c319ba7da75394c4cb_ggsans-Medium.woff2
IP
143.204.55.95:443
ASN
#16509 AMAZON-02

Requested by
https://purple-wind-f346.hitler.workers.dev/
Certificate
IssuerAmazon
Subject*.website-files.com
Fingerprint67:3F:4A:7A:30:BF:BC:29:1A:5A:41:A8:54:BB:F4:4A:E7:ED:D9:CF
ValidityMon, 11 Sep 2023 00:00:00 GMT - Tue, 08 Oct 2024 23:59:59 GMT

File type
Web Open Font Format (Version 2), TrueType, length 32592, version 1.0
Size
33 kB (32592 bytes)
Hash
6db712e9212169e71d90c9999b5d98f6
dac145a44f8530b801f8fa525742ebc93efce6ba
d68a183592ac8ad34c6a0649690b01946cfd17762dc317e0ca31791e707a2d84

HTTP Headers

GET /6257adef93867e50d84d30e2/652737c319ba7da75394c4cb_ggsans-Medium.woff2 HTTP/1.1
Host: assets.website-files.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://purple-wind-f346.hitler.workers.dev
DNT: 1
Connection: keep-alive
Referer: https://assets-global.website-files.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: application/octet-stream
content-length: 32592
date: Tue, 16 Jan 2024 00:16:13 GMT
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
access-control-max-age: 3000
last-modified: Thu, 12 Oct 2023 00:03:17 GMT
etag: "6db712e9212169e71d90c9999b5d98f6"
x-amz-server-side-encryption: AES256
cache-control: max-age=31536000, must-revalidate
x-amz-version-id: O.MN014CaJ7rpd0EYtYKL1gJt0CuPry8
accept-ranges: bytes
server: AmazonS3
via: 1.1 6480520a5e02f3163410e3134bd77baa.cloudfront.net (CloudFront)
age: 6323951
x-cache: Hit from cloudfront
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: -D-w5kT6lYMI3w2NrnfZecdYaTd7buDGpJHjogJudjk0Z6P67p8Q4g==
X-Firefox-Spdy: h2

assets.website-files.com/6257adef93867e50d84d30e2/652736292cbf8363b43d077a_ggsans-Normal.woff2

143.204.55.95

200 OK

32 kB

URL GET HTTP/2
assets.website-files.com/6257adef93867e50d84d30e2/652736292cbf8363b43d077a_ggsans-Normal.woff2
IP
143.204.55.95:443
ASN
#16509 AMAZON-02

Requested by
https://purple-wind-f346.hitler.workers.dev/
Certificate
IssuerAmazon
Subject*.website-files.com
Fingerprint67:3F:4A:7A:30:BF:BC:29:1A:5A:41:A8:54:BB:F4:4A:E7:ED:D9:CF
ValidityMon, 11 Sep 2023 00:00:00 GMT - Tue, 08 Oct 2024 23:59:59 GMT

File type
Web Open Font Format (Version 2), TrueType, length 31736, version 1.0
Size
32 kB (31736 bytes)
Hash
ef78ef4e179e7e1766882d2f044cb39d
ff3734cda8426368beb9deee703344815817e987
88fba47546b0201525b02b5f65c8af1b09367d470fff48aca932e7b43e3fd67d

HTTP Headers

GET /6257adef93867e50d84d30e2/652736292cbf8363b43d077a_ggsans-Normal.woff2 HTTP/1.1
Host: assets.website-files.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://purple-wind-f346.hitler.workers.dev
DNT: 1
Connection: keep-alive
Referer: https://assets-global.website-files.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: application/octet-stream
content-length: 31736
date: Tue, 16 Jan 2024 01:28:54 GMT
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
access-control-max-age: 3000
last-modified: Thu, 12 Oct 2023 00:03:17 GMT
etag: "ef78ef4e179e7e1766882d2f044cb39d"
x-amz-server-side-encryption: AES256
cache-control: max-age=31536000, must-revalidate
x-amz-version-id: agtU.RiHNiUEYCZ7XSMt8TbraKajaRFo
accept-ranges: bytes
server: AmazonS3
via: 1.1 6480520a5e02f3163410e3134bd77baa.cloudfront.net (CloudFront)
age: 6319590
x-cache: Hit from cloudfront
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: nl3DZOwyg8-xBBt79bAdFDNDvGfKppFE_Ebtmv83Fci02alCHLMDFQ==
X-Firefox-Spdy: h2

assets.website-files.com/6257adef93867e50d84d30e2/65274471f1a58fe9565b9ca9_60ae8e384c11e54fd6986f3b_ABCGintoNormal-Bold.woff

143.204.55.95

200 OK

63 kB

URL GET HTTP/2
assets.website-files.com/6257adef93867e50d84d30e2/65274471f1a58fe9565b9ca9_60ae8e384c11e54fd6986f3b_ABCGintoNormal-Bold.woff
IP
143.204.55.95:443
ASN
#16509 AMAZON-02

Requested by
https://purple-wind-f346.hitler.workers.dev/
Certificate
IssuerAmazon
Subject*.website-files.com
Fingerprint67:3F:4A:7A:30:BF:BC:29:1A:5A:41:A8:54:BB:F4:4A:E7:ED:D9:CF
ValidityMon, 11 Sep 2023 00:00:00 GMT - Tue, 08 Oct 2024 23:59:59 GMT

File type
Web Open Font Format, TrueType, length 62768, version 0.0
Size
63 kB (62768 bytes)
Hash
746a4f241e03deffc59b08c5650cf458
16569eaca9910e7538f31bc3c1460c2761eb5ca3
12954218db16e3a3c86a6ee84e41be8bb35cee983ffd5233b37c7e094f9dcf11

HTTP Headers

GET /6257adef93867e50d84d30e2/65274471f1a58fe9565b9ca9_60ae8e384c11e54fd6986f3b_ABCGintoNormal-Bold.woff HTTP/1.1
Host: assets.website-files.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://purple-wind-f346.hitler.workers.dev
DNT: 1
Connection: keep-alive
Referer: https://assets-global.website-files.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: application/x-font-woff
content-length: 62768
date: Thu, 30 Nov 2023 20:07:25 GMT
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
access-control-max-age: 3000
last-modified: Thu, 12 Oct 2023 00:57:22 GMT
etag: "746a4f241e03deffc59b08c5650cf458"
x-amz-server-side-encryption: AES256
cache-control: max-age=31536000, must-revalidate
x-amz-version-id: jA5XmHZ6LxEy4IR9.UBRjDzTvaXkKSaO
accept-ranges: bytes
server: AmazonS3
via: 1.1 6480520a5e02f3163410e3134bd77baa.cloudfront.net (CloudFront)
age: 10313279
x-cache: Hit from cloudfront
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: GsC0NiTy1sBnvuw7UHQpzAFBqNmS1QHL8NGO6U3r5mi_XJfjt0ag0A==
X-Firefox-Spdy: h2

assets.website-files.com/6257adef93867e50d84d30e2/652737c319ba7da75394c4dc_ggsans-Semibold.woff2

143.204.55.95

200 OK

33 kB

URL GET HTTP/2
assets.website-files.com/6257adef93867e50d84d30e2/652737c319ba7da75394c4dc_ggsans-Semibold.woff2
IP
143.204.55.95:443
ASN
#16509 AMAZON-02

Requested by
https://purple-wind-f346.hitler.workers.dev/
Certificate
IssuerAmazon
Subject*.website-files.com
Fingerprint67:3F:4A:7A:30:BF:BC:29:1A:5A:41:A8:54:BB:F4:4A:E7:ED:D9:CF
ValidityMon, 11 Sep 2023 00:00:00 GMT - Tue, 08 Oct 2024 23:59:59 GMT

File type
Web Open Font Format (Version 2), TrueType, length 32952, version 1.0
Size
33 kB (32952 bytes)
Hash
890a9ab504c3657183ff118b1aff212b
127609df5d04fc779da4a9e90d8d09bdbb390149
d472a71a0f92855881ce2c2334df77a333461f6936f1f0388f952fedb056fb3e

HTTP Headers

GET /6257adef93867e50d84d30e2/652737c319ba7da75394c4dc_ggsans-Semibold.woff2 HTTP/1.1
Host: assets.website-files.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://purple-wind-f346.hitler.workers.dev
DNT: 1
Connection: keep-alive
Referer: https://assets-global.website-files.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: application/octet-stream
content-length: 32952
date: Tue, 16 Jan 2024 00:44:48 GMT
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
access-control-max-age: 3000
last-modified: Thu, 12 Oct 2023 00:03:17 GMT
etag: "890a9ab504c3657183ff118b1aff212b"
x-amz-server-side-encryption: AES256
cache-control: max-age=31536000, must-revalidate
x-amz-version-id: WIOu3nzmwbn9so0iCvFU.l8wZizfTi6I
accept-ranges: bytes
server: AmazonS3
via: 1.1 6480520a5e02f3163410e3134bd77baa.cloudfront.net (CloudFront)
age: 6322236
x-cache: Hit from cloudfront
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: ptPecli3f3FkNtk5sDIzdsibz9WybK0Le6yS-L4zPTb4ocI4MPjMRw==
X-Firefox-Spdy: h2

assets-global.website-files.com/6257adef93867e50d84d30e2/644fab4da9dbd93a7dfae97b_e6d57714479874c665b36c7adee76b1d.svg

143.204.55.80

200 OK

16 kB

URL GET HTTP/2
assets-global.website-files.com/6257adef93867e50d84d30e2/644fab4da9dbd93a7dfae97b_e6d57714479874c665b36c7adee76b1d.svg
IP
143.204.55.80:443
ASN
#16509 AMAZON-02

Requested by
https://purple-wind-f346.hitler.workers.dev/
Certificate
IssuerAmazon
Subject*.website-files.com
Fingerprint67:3F:4A:7A:30:BF:BC:29:1A:5A:41:A8:54:BB:F4:4A:E7:ED:D9:CF
ValidityMon, 11 Sep 2023 00:00:00 GMT - Tue, 08 Oct 2024 23:59:59 GMT

File type
SVG Scalable Vector Graphics image
Size
16 kB (15997 bytes)
Hash
e6d57714479874c665b36c7adee76b1d
7d548455122292f8272c5672303fc786d2d3000f
8a22b3884eb5d0750875b97c8192cba5465ec2c8a438c92378a9650804607c76

HTTP Headers

GET /6257adef93867e50d84d30e2/644fab4da9dbd93a7dfae97b_e6d57714479874c665b36c7adee76b1d.svg HTTP/1.1
Host: assets-global.website-files.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://assets-global.website-files.com/6257adef93867e50d84d30e2/css/discord-2022.00e417851.min.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
content-type: image/svg+xml
date: Tue, 13 Feb 2024 07:55:07 GMT
last-modified: Mon, 01 May 2023 12:06:39 GMT
etag: W/"e6d57714479874c665b36c7adee76b1d"
x-amz-server-side-encryption: AES256
cache-control: max-age=31536000, must-revalidate
x-amz-version-id: 4azmGLkHqXDQcQhsKUX3YgfaRjryrV9s
server: AmazonS3
content-encoding: br
vary: Accept-Encoding
via: 1.1 1d8cf7c8865ed1078c19a98771ad34ca.cloudfront.net (CloudFront)
age: 3877217
access-control-allow-origin: *
x-cache: Hit from cloudfront
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: Kld6_kuINS56d-UJ3FVsrzf3kEDc6qzggyGrtHdi_4tDLQJVrYRTqg==
X-Firefox-Spdy: h2

discord.com/assets/oneTrust/v4/scripttemplates/otSDKStub.js

162.159.138.232

403 Forbidden

3.3 kB

URL GET HTTP/2
discord.com/assets/oneTrust/v4/scripttemplates/otSDKStub.js
IP
162.159.138.232:443
ASN
#13335 CLOUDFLARENET

Requested by
https://purple-wind-f346.hitler.workers.dev/
Certificate
IssuerCloudflare, Inc.
Subjectdiscord.com
FingerprintA8:AB:66:57:DC:35:70:C3:39:4A:3E:36:5C:AB:B3:0C:B1:E0:61:D3
ValidityFri, 20 Oct 2023 00:00:00 GMT - Sat, 19 Oct 2024 23:59:59 GMT

File type
HTML document, ASCII text, with very long lines (4536)
Size
3.3 kB (3337 bytes)
Hash
e248c1aa4babda936c18af1e681c9d06
f5ae44ce84d56bcf588a411838905cd3c3c00bbc
a3fc906f915a590e95582cdf7555b01d3150aab5018db70d080553a6d67cd8fb

HTTP Headers

GET /assets/oneTrust/v4/scripttemplates/otSDKStub.js HTTP/1.1
Host: discord.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://purple-wind-f346.hitler.workers.dev/
Cookie: __cfruid=014760bafe1dffd95d77218053a3e502d6a603e1-1711688122; _cfuvid=PyhcycXc6v5pQ9sfZGP0Xh0v8UzdPdnQy._lBt7n.7E-1711688122315-0.0.1.1-604800000
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 403 Forbidden
date: Fri, 29 Mar 2024 04:55:23 GMT
content-type: text/html
x-frame-options: SAMEORIGIN
referrer-policy: same-origin
cache-control: max-age=15
expires: Fri, 29 Mar 2024 04:55:38 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=o8gKdLtlpa3ICXIGRAktd9vLFbOhQzG4gsVHiZWh8luqPjb3ulRFrSinhuq6pT3%2BPSmPPZ5CiWQh0K%2FzuB10QdEmWbrrwG4X2jWj2fEd0PZqh7NFzHnLcDxA4u8C"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 86bd4471c89556c1-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

assets-global.website-files.com/6257adef93867e50d84d30e2/6257bf8b5ba300233705a542_en.png

143.204.55.80

200 OK

288 B

URL GET HTTP/2
assets-global.website-files.com/6257adef93867e50d84d30e2/6257bf8b5ba300233705a542_en.png
IP
143.204.55.80:443
ASN
#16509 AMAZON-02

Requested by
https://purple-wind-f346.hitler.workers.dev/
Certificate
IssuerAmazon
Subject*.website-files.com
Fingerprint67:3F:4A:7A:30:BF:BC:29:1A:5A:41:A8:54:BB:F4:4A:E7:ED:D9:CF
ValidityMon, 11 Sep 2023 00:00:00 GMT - Tue, 08 Oct 2024 23:59:59 GMT

File type
PNG image data, 70 x 47, 8-bit/color RGBA, non-interlaced
Size
288 B (288 bytes)
Hash
e6d6b255259ac878d00819a9555072ad
6beb12d36acbad79743495aef581891a1ff4f5f5
21d34772ed80c8be7ab9e7338498bdfe2f66c77b61542cc48e103fd77ecd7f60

HTTP Headers

GET /6257adef93867e50d84d30e2/6257bf8b5ba300233705a542_en.png HTTP/1.1
Host: assets-global.website-files.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://purple-wind-f346.hitler.workers.dev/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
content-type: image/png
content-length: 288
date: Sun, 28 Jan 2024 21:58:47 GMT
last-modified: Thu, 14 Apr 2022 06:30:37 GMT
etag: "e6d6b255259ac878d00819a9555072ad"
x-amz-server-side-encryption: AES256
cache-control: max-age=31536000, must-revalidate
x-amz-version-id: PZH8cHkflELFvoWAWDsIAZ.EvOoTJUd0
accept-ranges: bytes
server: AmazonS3
via: 1.1 1d8cf7c8865ed1078c19a98771ad34ca.cloudfront.net (CloudFront)
age: 5208997
access-control-allow-origin: *
x-cache: Hit from cloudfront
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: iKEQdRErpDo9ota9lJkJLaLB_Fp6xUNfKpHayozYlgnbD9WlqB1-cg==
X-Firefox-Spdy: h2

www.googletagmanager.com/gtm.js?id=GTM-N7BVC2W&gtm_auth=GI0g9O-54_SitcgmxQKxlA&gtm_preview=env-2&gtm_cookies_win=x

142.250.74.168

200 OK

89 kB

URL GET HTTP/2
www.googletagmanager.com/gtm.js?id=GTM-N7BVC2W&gtm_auth=GI0g9O-54_SitcgmxQKxlA&gtm_preview=env-2&gtm_cookies_win=x
IP
142.250.74.168:443
ASN
#15169 GOOGLE

Requested by
https://purple-wind-f346.hitler.workers.dev/
Certificate
IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
FingerprintDE:42:E4:CC:E5:66:70:09:F3:E6:6E:57:B7:5E:22:0A:A3:03:C2:7C
ValidityMon, 26 Feb 2024 08:03:40 GMT - Mon, 20 May 2024 08:03:39 GMT

File type
JavaScript source, ASCII text, with very long lines (2614)
Size
89 kB (89188 bytes)
Hash
fd88b3a4eec030b3343bde2d3d031ddd
26bf0b9d592785bfcc28b292e8283f44c0f5a640
f2f5e3f9f8182f73143290b63fdfb3a09b77c97a6d2aef6f356acd31839833df

HTTP Headers

GET /gtm.js?id=GTM-N7BVC2W&gtm_auth=GI0g9O-54_SitcgmxQKxlA&gtm_preview=env-2&gtm_cookies_win=x HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://purple-wind-f346.hitler.workers.dev/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: *
date: Fri, 29 Mar 2024 04:55:23 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 89188
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

purple-wind-f346.hitler.workers.dev/cdn-cgi/challenge-platform/scripts/jsd/main.js

188.114.97.1

404 Not Found

5.0 kB

URL GET HTTP/3
purple-wind-f346.hitler.workers.dev/cdn-cgi/challenge-platform/scripts/jsd/main.js
IP
188.114.97.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://purple-wind-f346.hitler.workers.dev/
Certificate
IssuerCloudflare, Inc.
Subjecthitler.workers.dev
Fingerprint49:DD:0D:21:03:E0:C5:E7:DA:82:55:56:8C:44:FE:CF:70:EF:6B:36
ValidityThu, 28 Dec 2023 00:00:00 GMT - Fri, 27 Dec 2024 23:59:59 GMT

File type
HTML document, ASCII text, with very long lines (13068)
Size
5.0 kB (4974 bytes)
Hash
9b16cb59710fd34b0f3c8865c942b56d
6a123d880ba89c787a3de8a598979fe59d7a4378
fdb257504c764d8e98827091b47e3735f5d01c1bfad23b940b043c50a228c50b

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Discord

HTTP Headers

GET /cdn-cgi/challenge-platform/scripts/jsd/main.js HTTP/1.1
Host: purple-wind-f346.hitler.workers.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: locale=en-US
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 404 Not Found
date: Fri, 29 Mar 2024 04:55:23 GMT
content-type: text/html; charset=UTF-8
x-frame-options: SAMEORIGIN
referrer-policy: same-origin
cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
expires: Thu, 01 Jan 1970 00:00:01 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=YElsC%2BlBai%2Fc0DNRrhERmU94z4TZ0wCeLii1N638aCe%2Bicj%2FcExvMqEdxWFq4BXIqZT%2F9Dm0iknPOW6PYNSf9wlBfbOnrx5fN%2BMW6JrFgPb9mO1ZNL3hXtWACUm8CScM6KVraV8tfwa4%2Bm1L0uEC3jRA2ON4PA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 86bd4472bc120b02-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

assets-global.website-files.com/6257adef93867e50d84d30e2/6266bc493fb42d4e27bb8393_847541504914fd33810e70a0ea73177e.ico

143.204.55.80

200 OK

286 kB

URL GET HTTP/2
assets-global.website-files.com/6257adef93867e50d84d30e2/6266bc493fb42d4e27bb8393_847541504914fd33810e70a0ea73177e.ico
IP
143.204.55.80:443
ASN
#16509 AMAZON-02

Requested by
https://purple-wind-f346.hitler.workers.dev/
Certificate
IssuerAmazon
Subject*.website-files.com
Fingerprint67:3F:4A:7A:30:BF:BC:29:1A:5A:41:A8:54:BB:F4:4A:E7:ED:D9:CF
ValidityMon, 11 Sep 2023 00:00:00 GMT - Tue, 08 Oct 2024 23:59:59 GMT

File type
MS Windows icon resource - 4 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel
Size
286 kB (285478 bytes)
Hash
847541504914fd33810e70a0ea73177e
84b82d07b293907113d9d4dafd29bfa170bbf9b6
0ff2884845f93cd730470ad755f5c38d334e6976ad59c8016b1353b8e30e64f8

HTTP Headers

GET /6257adef93867e50d84d30e2/6266bc493fb42d4e27bb8393_847541504914fd33810e70a0ea73177e.ico HTTP/1.1
Host: assets-global.website-files.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://purple-wind-f346.hitler.workers.dev/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
content-type: image/x-icon
content-length: 285478
date: Tue, 03 Oct 2023 16:30:54 GMT
last-modified: Thu, 18 Aug 2022 06:39:10 GMT
etag: "847541504914fd33810e70a0ea73177e"
x-amz-server-side-encryption: AES256
cache-control: max-age=31536000, must-revalidate
x-amz-version-id: mW2.2AZmx60AbtKEbat_fy6.zokRl1ju
accept-ranges: bytes
server: AmazonS3
via: 1.1 1d8cf7c8865ed1078c19a98771ad34ca.cloudfront.net (CloudFront)
age: 15337470
access-control-allow-origin: *
x-cache: Hit from cloudfront
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: s3PRQAgL4IVMDnV1TXmvL54OuWJtL702eOIcwLGxlxkMfV1Xh6CNoQ==
X-Firefox-Spdy: h2

assets-global.website-files.com/6257adef93867e50d84d30e2/62fddf0fde45a8baedcc7ee5_847541504914fd33810e70a0ea73177e%20(2)-1.png

143.204.55.80

200 OK

557 B

URL GET HTTP/2
assets-global.website-files.com/6257adef93867e50d84d30e2/62fddf0fde45a8baedcc7ee5_847541504914fd33810e70a0ea73177e%20(2)-1.png
IP
143.204.55.80:443
ASN
#16509 AMAZON-02

Requested by
https://purple-wind-f346.hitler.workers.dev/
Certificate
IssuerAmazon
Subject*.website-files.com
Fingerprint67:3F:4A:7A:30:BF:BC:29:1A:5A:41:A8:54:BB:F4:4A:E7:ED:D9:CF
ValidityMon, 11 Sep 2023 00:00:00 GMT - Tue, 08 Oct 2024 23:59:59 GMT

File type
PNG image data, 32 x 32, 8-bit colormap, non-interlaced
Size
557 B (557 bytes)
Hash
c309ae41848547064c2ddb7dc66b6215
6d9801822541e4be3ed25137c4e53a249c85ba2a
11848b5f1c8a7f294c6211c2f0d0dc83a8a28bfe1ef0829a8dacfdf475c5e5a2

HTTP Headers

GET /6257adef93867e50d84d30e2/62fddf0fde45a8baedcc7ee5_847541504914fd33810e70a0ea73177e%20(2)-1.png HTTP/1.1
Host: assets-global.website-files.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://purple-wind-f346.hitler.workers.dev/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
content-type: image/png
content-length: 557
date: Tue, 26 Sep 2023 00:04:01 GMT
last-modified: Thu, 18 Aug 2022 06:41:20 GMT
etag: "c309ae41848547064c2ddb7dc66b6215"
x-amz-server-side-encryption: AES256
cache-control: max-age=31536000, must-revalidate
x-amz-version-id: n3jtG2p1G.rx09TUNkUzzkpqc1_KeQPx
accept-ranges: bytes
server: AmazonS3
via: 1.1 1d8cf7c8865ed1078c19a98771ad34ca.cloudfront.net (CloudFront)
age: 16001482
access-control-allow-origin: *
x-cache: Hit from cloudfront
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: DhrCpuDYAC6wU_ruznZlMl5E_K259mQjiGRkjCLQdv6ef4r0T1o6ZQ==
X-Firefox-Spdy: h2

fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLFj_Z1xlFQ.woff2

216.58.207.227

200 OK

7.9 kB

URL GET HTTP/2
fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLFj_Z1xlFQ.woff2
IP
216.58.207.227:443
ASN
#15169 GOOGLE

Requested by
https://purple-wind-f346.hitler.workers.dev/
Certificate
IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintF3:56:10:42:A8:3C:BF:F5:89:9C:4C:C0:F8:E3:DC:C4:1C:E9:34:9E
ValidityMon, 26 Feb 2024 08:18:21 GMT - Mon, 20 May 2024 08:18:20 GMT

File type
Web Open Font Format (Version 2), TrueType, length 7932, version 1.0
Size
7.9 kB (7932 bytes)
Hash
a7f7eebec745ef48ccf7a3d08c66d84a
2c5f99afe358a3e8570818a99646779aaa607587
6f0c572590421075878908e0b380c5a6d404f72aa7d6d125385943be658f8399

HTTP Headers

GET /s/poppins/v21/pxiByp8kv8JHgFVrLFj_Z1xlFQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://purple-wind-f346.hitler.workers.dev
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 7932
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 28 Mar 2024 17:24:04 GMT
expires: Fri, 28 Mar 2025 17:24:04 GMT
cache-control: public, max-age=31536000
last-modified: Fri, 22 Mar 2024 00:00:51 GMT
content-type: font/woff2
age: 41479
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLDD4Z1xlFQ.woff2

216.58.207.227

200 OK

7.8 kB

URL GET HTTP/2
fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLDD4Z1xlFQ.woff2
IP
216.58.207.227:443
ASN
#15169 GOOGLE

Requested by
https://purple-wind-f346.hitler.workers.dev/
Certificate
IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintF3:56:10:42:A8:3C:BF:F5:89:9C:4C:C0:F8:E3:DC:C4:1C:E9:34:9E
ValidityMon, 26 Feb 2024 08:18:21 GMT - Mon, 20 May 2024 08:18:20 GMT

File type
Web Open Font Format (Version 2), TrueType, length 7824, version 1.0
Size
7.8 kB (7824 bytes)
Hash
af4d371a10271dafeb343f1eace762bc
6d11d743bc3cfb169d70bc86450f18351dc1a905
60bf0aba6526436f3930c58c12047687fbb6bff4dd180cce4613458ed3439ea2

HTTP Headers

GET /s/poppins/v21/pxiByp8kv8JHgFVrLDD4Z1xlFQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://purple-wind-f346.hitler.workers.dev
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 7824
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 28 Mar 2024 17:44:44 GMT
expires: Fri, 28 Mar 2025 17:44:44 GMT
cache-control: public, max-age=31536000
last-modified: Fri, 22 Mar 2024 00:00:57 GMT
content-type: font/woff2
age: 40239
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

d3e54v103j8qbb.cloudfront.net/js/jquery-3.5.1.min.dc5e7f18c8.js?site=6257adef93867e50d84d30e2

143.204.42.231

200 OK

31 kB

URL GET HTTP/2
d3e54v103j8qbb.cloudfront.net/js/jquery-3.5.1.min.dc5e7f18c8.js?site=6257adef93867e50d84d30e2
IP
143.204.42.231:443
ASN
#16509 AMAZON-02

Requested by
https://purple-wind-f346.hitler.workers.dev/
Certificate
IssuerAmazon
Subject*.cloudfront.net
FingerprintFA:21:45:DC:4D:94:03:A3:09:77:51:78:4A:21:F2:C5:6D:94:BE:52
ValidityTue, 10 Oct 2023 00:00:00 GMT - Thu, 19 Sep 2024 23:59:59 GMT

File type
JavaScript source, ASCII text, with very long lines (65451)
Size
31 kB (30879 bytes)
Hash
dc5e7f18c8d36ac1d3d4753a87c98d0a
c8e1c8b386dc5b7a9184c763c88d19a346eb3342
f7f6a5894f1d19ddad6fa392b2ece2c5e578cbf7da4ea805b6885eb6985b6e3d

HTTP Headers

GET /js/jquery-3.5.1.min.dc5e7f18c8.js?site=6257adef93867e50d84d30e2 HTTP/1.1
Host: d3e54v103j8qbb.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://purple-wind-f346.hitler.workers.dev
DNT: 1
Connection: keep-alive
Referer: https://purple-wind-f346.hitler.workers.dev/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: application/javascript
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-max-age: 3000
last-modified: Mon, 20 Jul 2020 17:53:02 GMT
server: AmazonS3
content-encoding: br
date: Thu, 28 Mar 2024 16:21:53 GMT
cache-control: max-age=84600, must-revalidate
etag: W/"dc5e7f18c8d36ac1d3d4753a87c98d0a"
vary: Accept-Encoding
via: 1.1 142be88a35733307a5e7de05da0a20b8.cloudfront.net (CloudFront)
age: 45210
x-cache: Hit from cloudfront
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: UD0QEKS0Lcm8ecVk2G8Eqvl7MnK58offA85P5Vig4nxubkiUlEdX5A==
X-Firefox-Spdy: h2

assets-global.website-files.com/plugins/Basic/assets/placeholder.60f9b1840c.svg

143.204.55.80

403 Forbidden

714 B

URL GET HTTP/2
assets-global.website-files.com/plugins/Basic/assets/placeholder.60f9b1840c.svg
IP
143.204.55.80:443
ASN
#16509 AMAZON-02

Requested by
https://purple-wind-f346.hitler.workers.dev/
Certificate
IssuerAmazon
Subject*.website-files.com
Fingerprint67:3F:4A:7A:30:BF:BC:29:1A:5A:41:A8:54:BB:F4:4A:E7:ED:D9:CF
ValidityMon, 11 Sep 2023 00:00:00 GMT - Tue, 08 Oct 2024 23:59:59 GMT

File type
data
Size
714 B (714 bytes)
Hash
6be236646ad13a6ecd4a2baa407472f7
d73437f0a79db142e7bdc53476787731d37c1522
73e1d523669c6005b15f79a44db23f55a47d1c440c7d977e65dff80b904aabba

HTTP Headers

GET /plugins/Basic/assets/placeholder.60f9b1840c.svg HTTP/1.1
Host: assets-global.website-files.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://purple-wind-f346.hitler.workers.dev/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 403 Forbidden
content-type: application/xml
date: Fri, 29 Mar 2024 04:55:22 GMT
server: AmazonS3
x-cache: Error from cloudfront
via: 1.1 1d8cf7c8865ed1078c19a98771ad34ca.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: B-HUUZ3aMF2lzQfpLHu9Mmldkko948lsLqUdS5j4Abjz-6Keay4goA==
X-Firefox-Spdy: h2

fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLCz7Z1xlFQ.woff2

216.58.207.227

200 OK

7.8 kB

URL GET HTTP/2
fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLCz7Z1xlFQ.woff2
IP
216.58.207.227:443
ASN
#15169 GOOGLE

Requested by
https://purple-wind-f346.hitler.workers.dev/
Certificate
IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintF3:56:10:42:A8:3C:BF:F5:89:9C:4C:C0:F8:E3:DC:C4:1C:E9:34:9E
ValidityMon, 26 Feb 2024 08:18:21 GMT - Mon, 20 May 2024 08:18:20 GMT

File type
Web Open Font Format (Version 2), TrueType, length 7816, version 1.0
Size
7.8 kB (7816 bytes)
Hash
25b0e113ca7cce3770d542736db26368
cb726212d5d525021752a1d8470a0fb593e0c49e
9338e65fc077355c7a87ae0d64cc101e23b9bf8ad78ae65f0f319c857311b526

HTTP Headers

GET /s/poppins/v21/pxiByp8kv8JHgFVrLCz7Z1xlFQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://purple-wind-f346.hitler.workers.dev
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 7816
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 28 Mar 2024 17:27:09 GMT
expires: Fri, 28 Mar 2025 17:27:09 GMT
cache-control: public, max-age=31536000
last-modified: Fri, 22 Mar 2024 00:00:32 GMT
content-type: font/woff2
age: 41294
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLBT5Z1xlFQ.woff2

216.58.207.227

200 OK

7.6 kB

URL GET HTTP/2
fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLBT5Z1xlFQ.woff2
IP
216.58.207.227:443
ASN
#15169 GOOGLE

Requested by
https://purple-wind-f346.hitler.workers.dev/
Certificate
IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintF3:56:10:42:A8:3C:BF:F5:89:9C:4C:C0:F8:E3:DC:C4:1C:E9:34:9E
ValidityMon, 26 Feb 2024 08:18:21 GMT - Mon, 20 May 2024 08:18:20 GMT

File type
Web Open Font Format (Version 2), TrueType, length 7632, version 1.0
Size
7.6 kB (7632 bytes)
Hash
5426bf50c8455aab7a3e89d1138eb969
ec0cbbcb4600e691cb24a63451f758727f90a306
17ea10196a490a8d3b8da162c7d4af9c301c5229f70af90dad6fa33eb951d83f

HTTP Headers

GET /s/poppins/v21/pxiByp8kv8JHgFVrLBT5Z1xlFQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://purple-wind-f346.hitler.workers.dev
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 7632
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 28 Mar 2024 17:25:13 GMT
expires: Fri, 28 Mar 2025 17:25:13 GMT
cache-control: public, max-age=31536000
last-modified: Fri, 22 Mar 2024 00:00:35 GMT
content-type: font/woff2
age: 41410
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLDz8Z1xlFQ.woff2

216.58.207.227

200 OK

7.8 kB

URL GET HTTP/2
fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLDz8Z1xlFQ.woff2
IP
216.58.207.227:443
ASN
#15169 GOOGLE

Requested by
https://purple-wind-f346.hitler.workers.dev/
Certificate
IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintF3:56:10:42:A8:3C:BF:F5:89:9C:4C:C0:F8:E3:DC:C4:1C:E9:34:9E
ValidityMon, 26 Feb 2024 08:18:21 GMT - Mon, 20 May 2024 08:18:20 GMT

File type
Web Open Font Format (Version 2), TrueType, length 7840, version 1.0
Size
7.8 kB (7840 bytes)
Hash
8d91ec1ca2d8b56640a47117e313a3e9
a9e9bafe64666f4595051a0e895b47a5fa39e67e
78bc3aa78faec288bbb3bf26c9a0fa4eb67b1e69da94a17233c5cab60525efdb

HTTP Headers

GET /s/poppins/v21/pxiByp8kv8JHgFVrLDz8Z1xlFQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://purple-wind-f346.hitler.workers.dev
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 7840
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 28 Mar 2024 17:31:54 GMT
expires: Fri, 28 Mar 2025 17:31:54 GMT
cache-control: public, max-age=31536000
last-modified: Fri, 22 Mar 2024 00:02:55 GMT
content-type: font/woff2
age: 41009
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLEj6Z1xlFQ.woff2

216.58.207.227

200 OK

8.0 kB

URL GET HTTP/2
fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLEj6Z1xlFQ.woff2
IP
216.58.207.227:443
ASN
#15169 GOOGLE

Requested by
https://purple-wind-f346.hitler.workers.dev/
Certificate
IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintF3:56:10:42:A8:3C:BF:F5:89:9C:4C:C0:F8:E3:DC:C4:1C:E9:34:9E
ValidityMon, 26 Feb 2024 08:18:21 GMT - Mon, 20 May 2024 08:18:20 GMT

File type
Web Open Font Format (Version 2), TrueType, length 8000, version 1.0
Size
8.0 kB (8000 bytes)
Hash
72993dddf88a63e8f226656f7de88e57
179f97ec0275f09603a8db94d4380eb584d81cd5
f4e80d9dfd374d02989b87a27b5ed4cb78fbb177c27f1478e9a8b0afb7513149

HTTP Headers

GET /s/poppins/v21/pxiByp8kv8JHgFVrLEj6Z1xlFQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://purple-wind-f346.hitler.workers.dev
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 8000
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 28 Mar 2024 17:28:17 GMT
expires: Fri, 28 Mar 2025 17:28:17 GMT
cache-control: public, max-age=31536000
last-modified: Fri, 22 Mar 2024 00:00:59 GMT
content-type: font/woff2
age: 41226
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLGT9Z1xlFQ.woff2

216.58.207.227

200 OK

7.7 kB

URL GET HTTP/2
fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLGT9Z1xlFQ.woff2
IP
216.58.207.227:443
ASN
#15169 GOOGLE

Requested by
https://purple-wind-f346.hitler.workers.dev/
Certificate
IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintF3:56:10:42:A8:3C:BF:F5:89:9C:4C:C0:F8:E3:DC:C4:1C:E9:34:9E
ValidityMon, 26 Feb 2024 08:18:21 GMT - Mon, 20 May 2024 08:18:20 GMT

File type
Web Open Font Format (Version 2), TrueType, length 7748, version 1.0
Size
7.7 kB (7748 bytes)
Hash
a09f2fccfee35b7247b08a1a266f0328
0da2d17e738f46d2a09e6fb7969da451719a9820
cd36de204aca2d5fa263a731f7c20009b5e3d754ba1f1e03c33e93a48f3e7446

HTTP Headers

GET /s/poppins/v21/pxiByp8kv8JHgFVrLGT9Z1xlFQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://purple-wind-f346.hitler.workers.dev
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 7748
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 28 Mar 2024 17:40:17 GMT
expires: Fri, 28 Mar 2025 17:40:17 GMT
cache-control: public, max-age=31536000
last-modified: Fri, 22 Mar 2024 00:01:14 GMT
content-type: font/woff2
age: 40506
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

fonts.gstatic.com/s/pressstart2p/v15/e3t4euO8T-267oIAQAu6jDQyK3nRivN04w.woff2

216.58.207.227

200 OK

6.9 kB

URL GET HTTP/2
fonts.gstatic.com/s/pressstart2p/v15/e3t4euO8T-267oIAQAu6jDQyK3nRivN04w.woff2
IP
216.58.207.227:443
ASN
#15169 GOOGLE

Requested by
https://purple-wind-f346.hitler.workers.dev/
Certificate
IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintF3:56:10:42:A8:3C:BF:F5:89:9C:4C:C0:F8:E3:DC:C4:1C:E9:34:9E
ValidityMon, 26 Feb 2024 08:18:21 GMT - Mon, 20 May 2024 08:18:20 GMT

File type
Web Open Font Format (Version 2), TrueType, length 6860, version 1.0
Size
6.9 kB (6860 bytes)
Hash
2f8ad776ecd1938e88d3bd6f14e3e946
da6d6540af524da6b4f9dbd5d54e854f97b433d4
b811ef5b9f7a21c7de0ee11378cb5e056930143eb3de9e7823664179a89933e3

HTTP Headers

GET /s/pressstart2p/v15/e3t4euO8T-267oIAQAu6jDQyK3nRivN04w.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://purple-wind-f346.hitler.workers.dev
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 6860
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 28 Mar 2024 02:55:46 GMT
expires: Fri, 28 Mar 2025 02:55:46 GMT
cache-control: public, max-age=31536000
age: 93577
last-modified: Tue, 02 May 2023 16:02:27 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

fonts.gstatic.com/s/poppins/v21/pxiEyp8kv8JHgFVrJJfecg.woff2

216.58.207.227

200 OK

7.9 kB

URL GET HTTP/2
fonts.gstatic.com/s/poppins/v21/pxiEyp8kv8JHgFVrJJfecg.woff2
IP
216.58.207.227:443
ASN
#15169 GOOGLE

Requested by
https://purple-wind-f346.hitler.workers.dev/
Certificate
IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintF3:56:10:42:A8:3C:BF:F5:89:9C:4C:C0:F8:E3:DC:C4:1C:E9:34:9E
ValidityMon, 26 Feb 2024 08:18:21 GMT - Mon, 20 May 2024 08:18:20 GMT

File type
Web Open Font Format (Version 2), TrueType, length 7884, version 1.0
Size
7.9 kB (7884 bytes)
Hash
9212f6f9860f9fc6c69b02fedf6db8c3
ac6d71b4d5fdd2b3dabc9a06ff6c001e4251da0b
7d93459d86585bfcdbb7e0376056226adb25821ee54b96236fe2123e9560929f

HTTP Headers

GET /s/poppins/v21/pxiEyp8kv8JHgFVrJJfecg.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://purple-wind-f346.hitler.workers.dev
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 7884
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 28 Mar 2024 17:26:54 GMT
expires: Fri, 28 Mar 2025 17:26:54 GMT
cache-control: public, max-age=31536000
last-modified: Fri, 22 Mar 2024 00:00:38 GMT
content-type: font/woff2
age: 41309
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

d3e54v103j8qbb.cloudfront.net/img/webflow-badge-icon-d2.89e12c322e.svg

143.204.42.231

200 OK

421 B

URL GET HTTP/2
d3e54v103j8qbb.cloudfront.net/img/webflow-badge-icon-d2.89e12c322e.svg
IP
143.204.42.231:443
ASN
#16509 AMAZON-02

Requested by
https://purple-wind-f346.hitler.workers.dev/
Certificate
IssuerAmazon
Subject*.cloudfront.net
FingerprintFA:21:45:DC:4D:94:03:A3:09:77:51:78:4A:21:F2:C5:6D:94:BE:52
ValidityTue, 10 Oct 2023 00:00:00 GMT - Thu, 19 Sep 2024 23:59:59 GMT

File type
SVG Scalable Vector Graphics image
Size
421 B (421 bytes)
Hash
89e12c322e66c81213861fc9acb8b003
6a1a186cedadcef3d7d2ffd04f275d94a54e7930
00f45354c11a12591485977633a0e03952cdf1ff2de403e10ec846db8cc508a9

HTTP Headers

GET /img/webflow-badge-icon-d2.89e12c322e.svg HTTP/1.1
Host: d3e54v103j8qbb.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://purple-wind-f346.hitler.workers.dev/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: image/svg+xml
content-length: 421
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-max-age: 3000
last-modified: Thu, 21 Sep 2023 16:04:04 GMT
x-amz-server-side-encryption: AES256
accept-ranges: bytes
server: AmazonS3
date: Fri, 29 Mar 2024 00:11:29 GMT
cache-control: max-age=84600, must-revalidate
etag: "89e12c322e66c81213861fc9acb8b003"
vary: Accept-Encoding
via: 1.1 71c98156ae29b36a903974f9dd2568f8.cloudfront.net (CloudFront)
age: 17053
x-cache: Hit from cloudfront
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: bnuMSOUUlcOJ1hYi-H0PsPBpscipKdY0aUWU83ylFOgb_ZsxML-Z4A==
X-Firefox-Spdy: h2

global.localizecdn.com/localize.js

104.18.5.175

200 OK

32 kB

URL GET HTTP/2
global.localizecdn.com/localize.js
IP
104.18.5.175:443
ASN
#13335 CLOUDFLARENET

Requested by
https://purple-wind-f346.hitler.workers.dev/
Certificate
IssuerLet's Encrypt
Subjectglobal.localizecdn.com
Fingerprint0E:E8:07:11:41:11:37:A7:94:9C:B4:AF:9A:F4:50:87:FA:14:B8:CA
ValidityFri, 15 Mar 2024 17:06:03 GMT - Thu, 13 Jun 2024 17:06:02 GMT

File type
JavaScript source, ASCII text, with very long lines (63114), with no line terminators
Size
32 kB (32283 bytes)
Hash
f5e8b21aea5e6a757054a3c22bed38a8
c65b445999655276963754e14c47eb24eb43f7f1
76402f839669de8d3e2a28c17d7f95b7951057379acae596941eec8f1f02380d

HTTP Headers

GET /localize.js HTTP/1.1
Host: global.localizecdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://purple-wind-f346.hitler.workers.dev/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Fri, 29 Mar 2024 04:55:22 GMT
content-type: application/javascript
cache-control: public, max-age=259200
cf-bgj: minify
etag: W/"f5e8b21aea5e6a757054a3c22bed38a8"
last-modified: Thu, 07 Mar 2024 18:11:30 GMT
vary: Accept-Encoding
via: 1.1 cc81c6e9e0635b111f930d60fbded11e.cloudfront.net (CloudFront)
x-amz-cf-id: ttCw1RvtPxwt2zVn1Ez4Yns2EUo-7LaSZN05Gh8GR8PqdnxYVrPjvg==
x-amz-cf-pop: ARN56-P2
x-amz-meta-x-amz-meta-v: 482
x-amz-server-side-encryption: AES256
x-amz-version-id: 0JHC1cD9dr7zPS1vuJKUtk1tcGoZJNJN
x-cache: Hit from cloudfront
cf-cache-status: HIT
age: 171561
strict-transport-security: max-age=15552000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 86bd446c4d3ab521-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

purple-wind-f346.hitler.workers.dev/

188.114.97.1

200 OK

53 kB

URL User Request GET HTTP/2
purple-wind-f346.hitler.workers.dev/
IP
188.114.97.1:443
ASN
#13335 CLOUDFLARENET

Certificate
IssuerCloudflare, Inc.
Subjecthitler.workers.dev
Fingerprint49:DD:0D:21:03:E0:C5:E7:DA:82:55:56:8C:44:FE:CF:70:EF:6B:36
ValidityThu, 28 Dec 2023 00:00:00 GMT - Fri, 27 Dec 2024 23:59:59 GMT

File type

Size
53 kB (53166 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Discord

HTTP Headers

GET / HTTP/1.1
Host: purple-wind-f346.hitler.workers.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Fri, 29 Mar 2024 04:55:21 GMT
content-type: text/html;charset=UTF-8
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=6MF4zmaALUVqh%2Fm8wrQHIeIbBB7SFeBAWurBxwgAz5%2FoLpqhCkiRWe8JoFrOFfOK4w8uv7HLVFSzAgpUMonWiNSMJPLpSzExe%2Fl8DcIPdtEd7D1iPM09P3rs29bU3olTTG7zXsIA%2BcNnWYoXNljAqqR0vxvQIw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 86bd4469ff225697-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

discord.com/webflow-scripts/bodyEnd.js

162.159.138.232

200 OK

12 kB

URL GET HTTP/2
discord.com/webflow-scripts/bodyEnd.js
IP
162.159.138.232:443
ASN
#13335 CLOUDFLARENET

Requested by
https://purple-wind-f346.hitler.workers.dev/
Certificate
IssuerCloudflare, Inc.
Subjectdiscord.com
FingerprintA8:AB:66:57:DC:35:70:C3:39:4A:3E:36:5C:AB:B3:0C:B1:E0:61:D3
ValidityFri, 20 Oct 2023 00:00:00 GMT - Sat, 19 Oct 2024 23:59:59 GMT

File type

Size
12 kB (11690 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /webflow-scripts/bodyEnd.js HTTP/1.1
Host: discord.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://purple-wind-f346.hitler.workers.dev/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Fri, 29 Mar 2024 04:55:22 GMT
content-type: application/javascript
cf-ray: 86bd446c2f47568f-OSL
cf-cache-status: HIT
access-control-allow-origin: https://discord.com
cache-control: public, max-age=30
etag: W/"cf1fcdb5511493e70497b458944e1358"
last-modified: Thu, 21 Mar 2024 18:09:11 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
vary: Origin, Accept-Encoding
permissions-policy: interest-cohort=()
x-content-type-options: nosniff
x-frame-options: DENY
x-xss-protection: 1; mode=block
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2Bhv82SfxKznDrOLYdaatH4VUHjdnVZ4bQ88AIT9dvmHc%2F5R8MMNCUDjy8D2%2B6Vc%2BHOg5wg1EO%2BspO9n9S%2FSopJSRxSe7EwZISHkg%2Bre6ntSvB9v9YovhJxd0cPMi"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
set-cookie: __cfruid=014760bafe1dffd95d77218053a3e502d6a603e1-1711688122; path=/; domain=.discord.com; HttpOnly; Secure; SameSite=None
_cfuvid=1HfbdjOqxHZyhoucLBaKxHh8BYWTvUfrTsvL.c0j4Mw-1711688122306-0.0.1.1-604800000; path=/; domain=.discord.com; HttpOnly; Secure; SameSite=None
server: cloudflare
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

assets-global.website-files.com/6257adef93867e50d84d30e2/644fab4db9ca0a124b73d4b7_c40c84ca18d84633a9d86b4046a91437.svg

143.204.55.80

200 OK

61 kB

URL GET HTTP/2
assets-global.website-files.com/6257adef93867e50d84d30e2/644fab4db9ca0a124b73d4b7_c40c84ca18d84633a9d86b4046a91437.svg
IP
143.204.55.80:443
ASN
#16509 AMAZON-02

Requested by
https://purple-wind-f346.hitler.workers.dev/
Certificate
IssuerAmazon
Subject*.website-files.com
Fingerprint67:3F:4A:7A:30:BF:BC:29:1A:5A:41:A8:54:BB:F4:4A:E7:ED:D9:CF
ValidityMon, 11 Sep 2023 00:00:00 GMT - Tue, 08 Oct 2024 23:59:59 GMT

File type
SVG Scalable Vector Graphics image
Size
61 kB (61392 bytes)
Hash
c40c84ca18d84633a9d86b4046a91437
5b82d7686f8ee989d13bbe54938ae94e64cc7db7
f19a3178d88ee8de6f4ef47c0e9992059457d91e24204e5beff9602c1179f99b

HTTP Headers

GET /6257adef93867e50d84d30e2/644fab4db9ca0a124b73d4b7_c40c84ca18d84633a9d86b4046a91437.svg HTTP/1.1
Host: assets-global.website-files.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://assets-global.website-files.com/6257adef93867e50d84d30e2/css/discord-2022.00e417851.min.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: image/svg+xml
date: Thu, 25 Jan 2024 19:29:53 GMT
last-modified: Mon, 01 May 2023 12:06:39 GMT
etag: W/"c40c84ca18d84633a9d86b4046a91437"
x-amz-server-side-encryption: AES256
cache-control: max-age=31536000, must-revalidate
x-amz-version-id: eVnh2jd6TOCLgbmA6vfynI_kV88A6GyZ
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding
via: 1.1 1d8cf7c8865ed1078c19a98771ad34ca.cloudfront.net (CloudFront)
age: 5477131
access-control-allow-origin: *
x-cache: Hit from cloudfront
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: wZRQUgLUImFt1PX7Svrn5jjZOBFPEZIvGUiYc4Xks82wfDlducwPeA==
X-Firefox-Spdy: h2

assets-global.website-files.com/6257adef93867e50d84d30e2/6257d23c5fb25be7e0b6e220_Open%20Source%20Projects%20_%20Discord-7.svg

143.204.55.80

200 OK

6.4 kB

URL GET HTTP/2
assets-global.website-files.com/6257adef93867e50d84d30e2/6257d23c5fb25be7e0b6e220_Open%20Source%20Projects%20_%20Discord-7.svg
IP
143.204.55.80:443
ASN
#16509 AMAZON-02

Requested by
https://purple-wind-f346.hitler.workers.dev/
Certificate
IssuerAmazon
Subject*.website-files.com
Fingerprint67:3F:4A:7A:30:BF:BC:29:1A:5A:41:A8:54:BB:F4:4A:E7:ED:D9:CF
ValidityMon, 11 Sep 2023 00:00:00 GMT - Tue, 08 Oct 2024 23:59:59 GMT

File type
SVG Scalable Vector Graphics image
Size
6.4 kB (6433 bytes)
Hash
495a3fcd9fa1dccdbf779ed80dedd838
9f36d02ab56ba8d0da22890a411732cad9a1e068
de1ea8360175fe0ccb23fbc3b78850543c36824a02d7afa004963672d2317a26

HTTP Headers

GET /6257adef93867e50d84d30e2/6257d23c5fb25be7e0b6e220_Open%20Source%20Projects%20_%20Discord-7.svg HTTP/1.1
Host: assets-global.website-files.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://purple-wind-f346.hitler.workers.dev/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: image/svg+xml
date: Sun, 05 Nov 2023 12:52:27 GMT
last-modified: Thu, 14 Apr 2022 07:50:22 GMT
etag: W/"af172fc4474c781e2dd37c0bf905e86a"
x-amz-server-side-encryption: AES256
cache-control: max-age=31536000, must-revalidate
x-amz-version-id: L3xb6VYoQ.AotyKi_Z9N2_J5hV1m9MOY
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding
via: 1.1 1d8cf7c8865ed1078c19a98771ad34ca.cloudfront.net (CloudFront)
age: 12499377
access-control-allow-origin: *
x-cache: Hit from cloudfront
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: cEBbWPqW_-HEzG6PdIhRkvoxyyZCa01Fs-D-28mqlxnrW5O520XQUg==
X-Firefox-Spdy: h2

discord.com/webflow-scripts/head.js

162.159.138.232

200 OK

8.5 kB

URL GET HTTP/2
discord.com/webflow-scripts/head.js
IP
162.159.138.232:443
ASN
#13335 CLOUDFLARENET

Requested by
https://purple-wind-f346.hitler.workers.dev/
Certificate
IssuerCloudflare, Inc.
Subjectdiscord.com
FingerprintA8:AB:66:57:DC:35:70:C3:39:4A:3E:36:5C:AB:B3:0C:B1:E0:61:D3
ValidityFri, 20 Oct 2023 00:00:00 GMT - Sat, 19 Oct 2024 23:59:59 GMT

File type
JavaScript source, Unicode text, UTF-8 text, with very long lines (9203), with no line terminators
Size
8.5 kB (8521 bytes)
Hash
ead29bb49c8564607c1ea3c501bc90a1
862db3517616c1f938c08b92200f623027e93156
899bfdd53e88b7ad8144fe74ff2fea0c1c902554a38562ac07bb800c24582e52

HTTP Headers

GET /webflow-scripts/head.js HTTP/1.1
Host: discord.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://purple-wind-f346.hitler.workers.dev/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Fri, 29 Mar 2024 04:55:22 GMT
content-type: application/javascript
cf-ray: 86bd446c3f4f568f-OSL
cf-cache-status: HIT
access-control-allow-origin: https://discord.com
cache-control: public, max-age=30
etag: W/"5f85c48349fcc177a601c0d2910e2b5b"
last-modified: Thu, 21 Mar 2024 18:09:20 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
vary: Origin, Accept-Encoding
permissions-policy: interest-cohort=()
x-content-type-options: nosniff
x-frame-options: DENY
x-xss-protection: 1; mode=block
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=7WOaRQ%2BkG1psrc1qch%2B2m3UO%2F14SqMAbRZuAOQfaaXLEz%2B2fA66kLStm3qwh7MzPuz35YfmYR1AsSj%2BFDGWrc6St3Z8k8Maf7y3Ua26Tmylse1qwIFn4bxlZkY1%2F"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
set-cookie: __cfruid=014760bafe1dffd95d77218053a3e502d6a603e1-1711688122; path=/; domain=.discord.com; HttpOnly; Secure; SameSite=None
_cfuvid=PyhcycXc6v5pQ9sfZGP0Xh0v8UzdPdnQy._lBt7n.7E-1711688122315-0.0.1.1-604800000; path=/; domain=.discord.com; HttpOnly; Secure; SameSite=None
server: cloudflare
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

purple-wind-f346.hitler.workers.dev/w/loader/loader.js

188.114.97.1

200 OK

53 kB

URL GET HTTP/3
purple-wind-f346.hitler.workers.dev/w/loader/loader.js
IP
188.114.97.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://purple-wind-f346.hitler.workers.dev/
Certificate
IssuerCloudflare, Inc.
Subjecthitler.workers.dev
Fingerprint49:DD:0D:21:03:E0:C5:E7:DA:82:55:56:8C:44:FE:CF:70:EF:6B:36
ValidityThu, 28 Dec 2023 00:00:00 GMT - Fri, 27 Dec 2024 23:59:59 GMT

File type

Size
53 kB (53166 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Discord

HTTP Headers

GET /w/loader/loader.js HTTP/1.1
Host: purple-wind-f346.hitler.workers.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://purple-wind-f346.hitler.workers.dev/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Fri, 29 Mar 2024 04:55:22 GMT
content-type: text/html;charset=UTF-8
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=bMLoNTp%2FGbvkHLgN3eTi46dN4e%2B3FKTeetf71wdCVm%2FT0zs49Fc3N7HqS8eRT93GjmtqmFEIbNyqMI5VKcs%2FRPlwwNFEHJKDjdPI0NgXhE5zhl7K79g%2BC2i8voqY8WljmqFwczhZZha0sUTEVv0T8lsyJweZ3A%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 86bd446baab90b02-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

assets.website-files.com/6257adef93867e50d84d30e2/652737c30510e4ad4333a424_ggsans-Bold.woff2

143.204.55.95

200 OK

32 kB

URL GET HTTP/2
assets.website-files.com/6257adef93867e50d84d30e2/652737c30510e4ad4333a424_ggsans-Bold.woff2
IP
143.204.55.95:443
ASN
#16509 AMAZON-02

Requested by
https://purple-wind-f346.hitler.workers.dev/
Certificate
IssuerAmazon
Subject*.website-files.com
Fingerprint67:3F:4A:7A:30:BF:BC:29:1A:5A:41:A8:54:BB:F4:4A:E7:ED:D9:CF
ValidityMon, 11 Sep 2023 00:00:00 GMT - Tue, 08 Oct 2024 23:59:59 GMT

File type
Web Open Font Format (Version 2), TrueType, length 32540, version 1.0
Size
32 kB (32540 bytes)
Hash
db6b320298071092b190ca887d06e95c
8016461ca1131ea676cff368c4405d79f52c7867
9f97ff47d66b2f3cdd1aa40988382749ef90ac9051d1a548b12a1260d10c1e6e

HTTP Headers

GET /6257adef93867e50d84d30e2/652737c30510e4ad4333a424_ggsans-Bold.woff2 HTTP/1.1
Host: assets.website-files.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://purple-wind-f346.hitler.workers.dev
DNT: 1
Connection: keep-alive
Referer: https://assets-global.website-files.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: application/octet-stream
content-length: 32540
date: Thu, 07 Dec 2023 15:36:05 GMT
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
access-control-max-age: 3000
last-modified: Thu, 12 Oct 2023 00:03:16 GMT
etag: "db6b320298071092b190ca887d06e95c"
x-amz-server-side-encryption: AES256
cache-control: max-age=31536000, must-revalidate
x-amz-version-id: ZA.NEdTV8MFcZm5wwoKrA5eTikBcQl_s
accept-ranges: bytes
server: AmazonS3
via: 1.1 6480520a5e02f3163410e3134bd77baa.cloudfront.net (CloudFront)
age: 9724759
x-cache: Hit from cloudfront
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 0i3pFy-Qt1bINyG1W7bw2FWhI1ehJRYbYyjmM9v2NSo-RBSco_t6pw==
X-Firefox-Spdy: h2

assets-global.website-files.com/6257adef93867e50d84d30e2/6582c1b717efff2306ef179e_Where%20hanging%20out%20is%20easy.svg

143.204.55.80

200 OK

172 kB

URL GET HTTP/2
assets-global.website-files.com/6257adef93867e50d84d30e2/6582c1b717efff2306ef179e_Where%20hanging%20out%20is%20easy.svg
IP
143.204.55.80:443
ASN
#16509 AMAZON-02

Requested by
https://purple-wind-f346.hitler.workers.dev/
Certificate
IssuerAmazon
Subject*.website-files.com
Fingerprint67:3F:4A:7A:30:BF:BC:29:1A:5A:41:A8:54:BB:F4:4A:E7:ED:D9:CF
ValidityMon, 11 Sep 2023 00:00:00 GMT - Tue, 08 Oct 2024 23:59:59 GMT

File type
SVG Scalable Vector Graphics image
Size
172 kB (171453 bytes)
Hash
a22034070de371342ad1044d66386e10
0d559d7adf675cd33295d7d03361959bfaf3d73e
ec214111a51a29fd7df667ea1f9b6998e84621873672671d030e88dd92372d60

HTTP Headers

GET /6257adef93867e50d84d30e2/6582c1b717efff2306ef179e_Where%20hanging%20out%20is%20easy.svg HTTP/1.1
Host: assets-global.website-files.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://purple-wind-f346.hitler.workers.dev/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: image/svg+xml
date: Thu, 25 Jan 2024 19:29:45 GMT
last-modified: Wed, 20 Dec 2023 10:28:08 GMT
etag: W/"a22034070de371342ad1044d66386e10"
x-amz-server-side-encryption: AES256
cache-control: max-age=31536000, must-revalidate
x-amz-version-id: efh4guWbNZVkbXrUU6H8DcePzFm1l6cb
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding
via: 1.1 1d8cf7c8865ed1078c19a98771ad34ca.cloudfront.net (CloudFront)
age: 5477138
access-control-allow-origin: *
x-cache: Hit from cloudfront
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: s7p3BG3Jrwm9Fx-i91ydM_nj0YvTrFkJp0Ro6nZrRRNOIDXCuz_bGw==
X-Firefox-Spdy: h2

d3e54v103j8qbb.cloudfront.net/img/webflow-badge-text-d2.c82cec3b78.svg

143.204.42.231

200 OK

9.9 kB

URL GET HTTP/2
d3e54v103j8qbb.cloudfront.net/img/webflow-badge-text-d2.c82cec3b78.svg
IP
143.204.42.231:443
ASN
#16509 AMAZON-02

Requested by
https://purple-wind-f346.hitler.workers.dev/
Certificate
IssuerAmazon
Subject*.cloudfront.net
FingerprintFA:21:45:DC:4D:94:03:A3:09:77:51:78:4A:21:F2:C5:6D:94:BE:52
ValidityTue, 10 Oct 2023 00:00:00 GMT - Thu, 19 Sep 2024 23:59:59 GMT

File type
SVG Scalable Vector Graphics image
Size
9.9 kB (9912 bytes)
Hash
b7a1bd98c36d09f99bcd1d9482a57c41
21d99fc971abbf57e2041033b80b27a1838bfa73
03694412070c0199b5e646f2bd79ddf375e67ff904cb9cdcd7ffeb43ad521cd3

HTTP Headers

GET /img/webflow-badge-text-d2.c82cec3b78.svg HTTP/1.1
Host: d3e54v103j8qbb.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://purple-wind-f346.hitler.workers.dev/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: image/svg+xml
last-modified: Thu, 21 Sep 2023 16:04:31 GMT
x-amz-server-side-encryption: AES256
server: AmazonS3
content-encoding: gzip
date: Thu, 28 Mar 2024 23:23:11 GMT
cache-control: max-age=84600, must-revalidate
etag: W/"c82cec3b78a2b2d267bbfe3c7e838068"
vary: Accept-Encoding
via: 1.1 71c98156ae29b36a903974f9dd2568f8.cloudfront.net (CloudFront)
age: 19939
access-control-allow-origin: *
x-cache: Hit from cloudfront
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: eK4Avy2fCHIr5W2bcBi6OKN_cIJm4SyYmg4j60BO244pF5vIMlFd8g==
X-Firefox-Spdy: h2

discord.com/webflow-scripts/landing.js

162.159.138.232

200 OK

1.7 kB

URL GET HTTP/2
discord.com/webflow-scripts/landing.js
IP
162.159.138.232:443
ASN
#13335 CLOUDFLARENET

Requested by
https://purple-wind-f346.hitler.workers.dev/
Certificate
IssuerCloudflare, Inc.
Subjectdiscord.com
FingerprintA8:AB:66:57:DC:35:70:C3:39:4A:3E:36:5C:AB:B3:0C:B1:E0:61:D3
ValidityFri, 20 Oct 2023 00:00:00 GMT - Sat, 19 Oct 2024 23:59:59 GMT

File type
ASCII text, with very long lines (1798), with no line terminators
Size
1.7 kB (1712 bytes)
Hash
7f4ec64bf2a7aa3380131153447754c5
cc1d42bde351e8480f8a7aa33ce71212e75ede96
620f2e8df770c6e9f4f26c3c5421e35d546dd1c551872add95fe0492b677c0c3

HTTP Headers

GET /webflow-scripts/landing.js HTTP/1.1
Host: discord.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://purple-wind-f346.hitler.workers.dev/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Fri, 29 Mar 2024 04:55:22 GMT
content-type: application/javascript
cf-ray: 86bd446c2f4b568f-OSL
cf-cache-status: HIT
access-control-allow-origin: https://discord.com
cache-control: public, max-age=30
etag: W/"6873ba0d8e966bfe2f6428009c1f4255"
last-modified: Thu, 21 Mar 2024 18:09:30 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
vary: Origin, Accept-Encoding
permissions-policy: interest-cohort=()
x-content-type-options: nosniff
x-frame-options: DENY
x-xss-protection: 1; mode=block
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=KPiReZC772NXBggl9TnM9VAOelCMpKd%2BnVKyqfpn3Fa0EKAN%2FEXVoVA9CatVozWaLea7IuBMS0ulvKfrmFekn050ZAoHgLvHH9Trfx2uTrTJVNtzxvrNpK2J33GC"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
set-cookie: __cfruid=014760bafe1dffd95d77218053a3e502d6a603e1-1711688122; path=/; domain=.discord.com; HttpOnly; Secure; SameSite=None
_cfuvid=lgRzAudbIqz0swpLgAZfocmGwFeJ_4SpK8e.2QhV70g-1711688122304-0.0.1.1-604800000; path=/; domain=.discord.com; HttpOnly; Secure; SameSite=None
server: cloudflare
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

assets-global.website-files.com/6257adef93867e50d84d30e2/632d9b371770507a4c801977_Icon%20-%20Download.svg

143.204.55.80

200 OK

399 B

URL GET HTTP/2
assets-global.website-files.com/6257adef93867e50d84d30e2/632d9b371770507a4c801977_Icon%20-%20Download.svg
IP
143.204.55.80:443
ASN
#16509 AMAZON-02

Requested by
https://purple-wind-f346.hitler.workers.dev/
Certificate
IssuerAmazon
Subject*.website-files.com
Fingerprint67:3F:4A:7A:30:BF:BC:29:1A:5A:41:A8:54:BB:F4:4A:E7:ED:D9:CF
ValidityMon, 11 Sep 2023 00:00:00 GMT - Tue, 08 Oct 2024 23:59:59 GMT

File type
SVG Scalable Vector Graphics image
Size
399 B (399 bytes)
Hash
39c86078dc5b3a2d37e0a3777c21aeef
c45eb802f8bb2b5ae07f508323b8ec2bd1a91d5d
4416a963bcc2286544e63929f393a57036d4778ef02f2ec4e7e2b903e431be9d

HTTP Headers

GET /6257adef93867e50d84d30e2/632d9b371770507a4c801977_Icon%20-%20Download.svg HTTP/1.1
Host: assets-global.website-files.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://assets-global.website-files.com/6257adef93867e50d84d30e2/css/discord-2022.00e417851.min.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: image/svg+xml
content-length: 399
date: Tue, 19 Sep 2023 00:03:53 GMT
last-modified: Fri, 23 Sep 2022 11:40:41 GMT
etag: "a5b531f679e3aaeeef5195f1c653ff0b"
x-amz-server-side-encryption: AES256
cache-control: max-age=31536000, must-revalidate
x-amz-version-id: MUirW0ivsS_DC1LoG2DsWiw0x633eOnt
accept-ranges: bytes
server: AmazonS3
via: 1.1 1d8cf7c8865ed1078c19a98771ad34ca.cloudfront.net (CloudFront)
age: 16606291
access-control-allow-origin: *
x-cache: Hit from cloudfront
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 0c05k0JhyMalYUxDetahEObKYx17Ij2a5uSqSXnNjo-iAXjo6Y4NKg==
X-Firefox-Spdy: h2

fonts.googleapis.com/css?family=Press+Start+2P:regular%7CPoppins:200,300,regular,500,600,700,800,900&subset=cyrillic,latin

142.250.74.106

200 OK

7.6 kB

URL GET HTTP/2
fonts.googleapis.com/css?family=Press+Start+2P:regular%7CPoppins:200,300,regular,500,600,700,800,900&subset=cyrillic,latin
IP
142.250.74.106:443
ASN
#15169 GOOGLE

Requested by
https://purple-wind-f346.hitler.workers.dev/
Certificate
IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
Fingerprint04:B9:D9:E0:01:DB:5E:AB:5A:FF:F0:D9:ED:39:0F:C1:63:18:51:0B
ValidityMon, 26 Feb 2024 08:18:27 GMT - Mon, 20 May 2024 08:18:26 GMT

File type
ASCII text, with very long lines (7813), with no line terminators
Size
7.6 kB (7645 bytes)
Hash
3c1fc997640ffe4d9efa1858573853dd
71fa7384521ead272c141d53c3f1abd0eb78a38b
3c94936e617b8e71365b0c0849c28d3fe11ec1f657309feeeb20fbd8933b625a

HTTP Headers

GET /css?family=Press+Start+2P:regular%7CPoppins:200,300,regular,500,600,700,800,900&subset=cyrillic,latin HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://purple-wind-f346.hitler.workers.dev/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Fri, 29 Mar 2024 04:55:23 GMT
date: Fri, 29 Mar 2024 04:55:23 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

assets-global.website-files.com/6257adef93867e50d84d30e2/6582c18a9cff186bd3731704_Create%20an%20invite-only%20place%20where%20you%20belong.svg

143.204.55.80

200 OK

135 kB

URL GET HTTP/2
assets-global.website-files.com/6257adef93867e50d84d30e2/6582c18a9cff186bd3731704_Create%20an%20invite-only%20place%20where%20you%20belong.svg
IP
143.204.55.80:443
ASN
#16509 AMAZON-02

Requested by
https://purple-wind-f346.hitler.workers.dev/
Certificate
IssuerAmazon
Subject*.website-files.com
Fingerprint67:3F:4A:7A:30:BF:BC:29:1A:5A:41:A8:54:BB:F4:4A:E7:ED:D9:CF
ValidityMon, 11 Sep 2023 00:00:00 GMT - Tue, 08 Oct 2024 23:59:59 GMT

File type
SVG Scalable Vector Graphics image
Size
135 kB (135153 bytes)
Hash
6663c28b499d1b41349dd9ece236019d
255c673856a356b69a5fb350be10d820060e1daa
2ece3e7e6e793db094c668291381d080f313a263c7cd6a548511f6b75a57f1e5

HTTP Headers

GET /6257adef93867e50d84d30e2/6582c18a9cff186bd3731704_Create%20an%20invite-only%20place%20where%20you%20belong.svg HTTP/1.1
Host: assets-global.website-files.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://purple-wind-f346.hitler.workers.dev/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: image/svg+xml
date: Thu, 25 Jan 2024 19:29:45 GMT
last-modified: Wed, 20 Dec 2023 10:27:23 GMT
etag: W/"6663c28b499d1b41349dd9ece236019d"
x-amz-server-side-encryption: AES256
cache-control: max-age=31536000, must-revalidate
x-amz-version-id: 0Qdvngn3KrPl.t2A3gTQcgVBYrxsy1wD
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding
via: 1.1 1d8cf7c8865ed1078c19a98771ad34ca.cloudfront.net (CloudFront)
age: 5477139
access-control-allow-origin: *
x-cache: Hit from cloudfront
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: pwr41GElp1ykUd2H6cfJb5-IGTJ-Kxm3Vh5-zMLzhg5bj8VyCLCoxg==
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (19)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML