| ajax.googleapis.com/ajax/libs/jquery/3.5.1/jquery.min.js |  216.58.211.10 | 200 OK | 31 kB |
URL GET HTTP/2ajax.googleapis.com/ajax/libs/jquery/3.5.1/jquery.min.js IP216.58.211.10:443
Requested byhttps://bafybeicjxu755l2bpczpnsmotcr3ymd2564bz6b6ukfwc3utufy7dpjwxi.ipfs.dweb.link/ CertificateIssuerGoogle Trust Services LLC Subjectupload.video.google.com Fingerprint15:CB:F7:AC:18:3F:DC:1E:F9:4E:94:D1:98:40:40:61:53:17:28:F2 ValidityMon, 18 Mar 2024 20:35:28 GMT - Mon, 10 Jun 2024 20:35:27 GMT
File typeJavaScript source, ASCII text, with very long lines (65451) Hashdc5e7f18c8d36ac1d3d4753a87c98d0a c8e1c8b386dc5b7a9184c763c88d19a346eb3342 f7f6a5894f1d19ddad6fa392b2ece2c5e578cbf7da4ea805b6885eb6985b6e3d
GET /ajax/libs/jquery/3.5.1/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bafybeicjxu755l2bpczpnsmotcr3ymd2564bz6b6ukfwc3utufy7dpjwxi.ipfs.dweb.link/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 31021
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 24 Apr 2024 10:51:04 GMT
expires: Thu, 24 Apr 2025 10:51:04 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
age: 111707
last-modified: Fri, 08 May 2020 07:05:03 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| encrypted-tbn0.gstatic.com/images?q=tbn:ANd9GcRGA-AAufqAvH_jrYtr_AztiK6QCMXUXp6vxIwAP23kiRbekdSl | 142.250.74.174 | 200 OK | 7.5 kB |
URL GET HTTP/2encrypted-tbn0.gstatic.com/images?q=tbn:ANd9GcRGA-AAufqAvH_jrYtr_AztiK6QCMXUXp6vxIwAP23kiRbekdSl IP142.250.74.174:443
Requested byhttps://bafybeicjxu755l2bpczpnsmotcr3ymd2564bz6b6ukfwc3utufy7dpjwxi.ipfs.dweb.link/ CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com FingerprintF5:5C:D9:68:C6:5F:A3:33:5A:73:C3:79:B6:83:FE:44:2E:A4:83:74 ValidityMon, 18 Mar 2024 20:34:25 GMT - Mon, 10 Jun 2024 20:34:24 GMT
File typePNG image data, 250 x 202, 8-bit colormap, non-interlaced Hash97642e51f89aa1e231a5191667f626c6 38d6fad01d601076c0cb01335d43350410f19375 de2c1a0cfc9fe2a92c3151d4ac11a5582323963d7107258571ab420819e4b97c
GET /images?q=tbn:ANd9GcRGA-AAufqAvH_jrYtr_AztiK6QCMXUXp6vxIwAP23kiRbekdSl HTTP/1.1
Host: encrypted-tbn0.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bafybeicjxu755l2bpczpnsmotcr3ymd2564bz6b6ukfwc3utufy7dpjwxi.ipfs.dweb.link/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-type: image/png
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/images-tbn
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="images-tbn"
report-to: {"group":"images-tbn","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/images-tbn"}]}
content-length: 7494
date: Thu, 25 Apr 2024 17:52:51 GMT
expires: Fri, 25 Apr 2025 17:52:51 GMT
cache-control: public, max-age=31536000
last-modified: Sat, 27 Jul 2019 08:06:30 GMT
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| www.computerhope.com/jargon/p/acrobatpdf.jpg |  104.20.19.53 | 404 Not Found | 7.4 kB |
URL GET HTTP/2www.computerhope.com/jargon/p/acrobatpdf.jpg IP104.20.19.53:443
Requested byhttps://bafybeicjxu755l2bpczpnsmotcr3ymd2564bz6b6ukfwc3utufy7dpjwxi.ipfs.dweb.link/ CertificateIssuerLet's Encrypt Subjectcomputerhope.com Fingerprint18:F1:9B:0D:9F:84:07:0C:0D:72:B4:86:BE:F9:A4:F6:82:61:B3:82 ValiditySat, 06 Apr 2024 00:52:44 GMT - Fri, 05 Jul 2024 00:52:43 GMT
File typegzip compressed data, from Unix Hash0ffc042a3544c476d2a6a920bc4dbe86 ddbe3ca4bfafabc63689fcb7fccd9f920a446031 43ea68a4cac0329cc5270171c1965e9ae3af4f308303e1afd610b824bd0387a4
GET /jargon/p/acrobatpdf.jpg HTTP/1.1
Host: www.computerhope.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 404 Not Found
date: Thu, 25 Apr 2024 17:52:51 GMT
content-type: text/html
vary: User-Agent, Accept-Encoding
cache-control: max-age=16070400
cf-cache-status: EXPIRED
server: cloudflare
cf-ray: 87a0306f1d3f569d-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| bafybeicjxu755l2bpczpnsmotcr3ymd2564bz6b6ukfwc3utufy7dpjwxi.ipfs.dweb.link/images/bg_form.png | 0.0.0.0 | | 0 B |
URL GET bafybeicjxu755l2bpczpnsmotcr3ymd2564bz6b6ukfwc3utufy7dpjwxi.ipfs.dweb.link/images/bg_form.png IP0.0.0.0:0
Requested byhttps://bafybeicjxu755l2bpczpnsmotcr3ymd2564bz6b6ukfwc3utufy7dpjwxi.ipfs.dweb.link/
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Adobe | | OpenPhish | phishing | Adobe Inc. | | Quad9 DNS | malicious | Sinkholed |
GET /images/bg_form.png HTTP/1.1
Host: bafybeicjxu755l2bpczpnsmotcr3ymd2564bz6b6ukfwc3utufy7dpjwxi.ipfs.dweb.link
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bafybeicjxu755l2bpczpnsmotcr3ymd2564bz6b6ukfwc3utufy7dpjwxi.ipfs.dweb.link/
Cookie: __cflb=02DiuGcWZgMPSDTb2YF8qEPiLD3aSzoQtMYs5pN6QvcC4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
|
|
| www.wqe.16mb.com/b/Adobe%20Sign%20In_files/pdf-logo.png | 0.0.0.0 | | 0 B |
URL GET www.wqe.16mb.com/b/Adobe%20Sign%20In_files/pdf-logo.png IP0.0.0.0:0
Requested byhttps://bafybeicjxu755l2bpczpnsmotcr3ymd2564bz6b6ukfwc3utufy7dpjwxi.ipfs.dweb.link/
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /b/Adobe%20Sign%20In_files/pdf-logo.png HTTP/1.1
Host: www.wqe.16mb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
|
|
| bafybeicjxu755l2bpczpnsmotcr3ymd2564bz6b6ukfwc3utufy7dpjwxi.ipfs.dweb.link/favicon.ico | 0.0.0.0 | | 0 B |
URL GET bafybeicjxu755l2bpczpnsmotcr3ymd2564bz6b6ukfwc3utufy7dpjwxi.ipfs.dweb.link/favicon.ico IP0.0.0.0:0
Requested byhttps://bafybeicjxu755l2bpczpnsmotcr3ymd2564bz6b6ukfwc3utufy7dpjwxi.ipfs.dweb.link/
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Adobe | | OpenPhish | phishing | Adobe Inc. | | Quad9 DNS | malicious | Sinkholed |
GET /favicon.ico HTTP/1.1
Host: bafybeicjxu755l2bpczpnsmotcr3ymd2564bz6b6ukfwc3utufy7dpjwxi.ipfs.dweb.link
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bafybeicjxu755l2bpczpnsmotcr3ymd2564bz6b6ukfwc3utufy7dpjwxi.ipfs.dweb.link/
Cookie: __cflb=02DiuGcWZgMPSDTb2YF8qEPiLD3aSzoQtMYs5pN6QvcC4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
|
|
| bafybeicjxu755l2bpczpnsmotcr3ymd2564bz6b6ukfwc3utufy7dpjwxi.ipfs.dweb.link/ | 209.94.90.2 | 200 OK | 80 kB |
URL User Request GET HTTP/2bafybeicjxu755l2bpczpnsmotcr3ymd2564bz6b6ukfwc3utufy7dpjwxi.ipfs.dweb.link/ IP209.94.90.2:443
CertificateIssuerLet's Encrypt Subjectdweb.link FingerprintF6:88:14:38:C6:3C:1C:FC:F0:D3:23:B2:F2:72:50:9D:5C:DC:BE:D2 ValidityTue, 16 Apr 2024 16:54:22 GMT - Mon, 15 Jul 2024 16:54:21 GMT
File typeHTML document, ASCII text, with very long lines (65197), with CRLF line terminators Hashb5d76f4b689abebbf352f9027670dccf c18169f871a2d4bff135b93196503811892bbc39 0d8fb29ef438e6a300b9d306655816e289521277a04b50409d357752619776cf
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Adobe | | OpenPhish | phishing | Adobe Inc. | | Quad9 DNS | malicious | Sinkholed |
GET / HTTP/1.1
Host: bafybeicjxu755l2bpczpnsmotcr3ymd2564bz6b6ukfwc3utufy7dpjwxi.ipfs.dweb.link
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 25 Apr 2024 17:52:50 GMT
content-type: text/html
access-control-allow-headers: Content-Type, Range, User-Agent, X-Requested-With
access-control-allow-methods: GET, HEAD, OPTIONS
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Content-Range, X-Chunked-Output, X-Ipfs-Path, X-Ipfs-Roots, X-Stream-Output
cache-control: public, max-age=29030400, immutable
x-ipfs-path: /ipfs/bafybeicjxu755l2bpczpnsmotcr3ymd2564bz6b6ukfwc3utufy7dpjwxi/
x-ipfs-roots: bafybeicjxu755l2bpczpnsmotcr3ymd2564bz6b6ukfwc3utufy7dpjwxi
x-ipfs-pop: rainbow-fr2-02
cf-cache-status: HIT
set-cookie: __cflb=02DiuGcWZgMPSDTb2YF8qEPiLD3aSzoQtMYs5pN6QvcC4; SameSite=None; Secure; path=/; expires=Fri, 26-Apr-24 16:52:50 GMT; HttpOnly
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a0306c798eb521-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|