| cdnjs.cloudflare.com/ajax/libs/popper.js/1.12.9/umd/popper.min.js |  104.17.24.14 | 200 OK | 6.2 kB |
URL GET HTTP/2cdnjs.cloudflare.com/ajax/libs/popper.js/1.12.9/umd/popper.min.js IP104.17.24.14:443
Requested byhttps://cloudflare-ipfs.com/ipfs/QmVSz4KdejUrmaK2x6ngUxtUPHNtijhLwvz7qVgdncqPXF?filename=weeeet.html CertificateIssuerCloudflare, Inc. Subjectsni.cloudflaressl.com Fingerprint7A:EA:B9:09:71:70:6C:87:C9:D3:82:74:8A:7B:B4:60:E5:40:2D:8D ValidityMon, 03 Jul 2023 00:00:00 GMT - Tue, 02 Jul 2024 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (19015) Hash70d3fda195602fe8b75e0097eed74dde c3b977aa4b8dfb69d651e07015031d385ded964b a52f7aa54d7bcaafa056ee0a050262dfc5694ae28dee8b4cac3429af37ff0d66
GET /ajax/libs/popper.js/1.12.9/umd/popper.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://cloudflare-ipfs.com/
Origin: https://cloudflare-ipfs.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 27 Apr 2024 04:03:37 GMT
content-type: application/javascript; charset=utf-8
content-length: 6157
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03fa9-4af4"
last-modified: Mon, 04 May 2020 16:15:37 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 198170
expires: Thu, 17 Apr 2025 04:03:37 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=JdJeOT408fgWL5FmU5sajUsVyRYma0N45%2BPCutCtqczLmE1QpV6%2B4wfhwDZMBqrXGwPanOxiGBGH6frESXfYHYkU2iGbpcnPxc1ZqryRwS%2B63LZYqe1jC%2B1tMQFBlk8R1R4h46gG"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 87abec819fb956c1-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| prod-cdn.wetransfer.net/packs/media/actiefgrotesque/ActiefGrotesque_W_Regular-1f437876.woff |  54.230.111.37 | 200 OK | 31 kB |
URL GET HTTP/2prod-cdn.wetransfer.net/packs/media/actiefgrotesque/ActiefGrotesque_W_Regular-1f437876.woff IP54.230.111.37:443
Requested byhttps://cloudflare-ipfs.com/ipfs/QmVSz4KdejUrmaK2x6ngUxtUPHNtijhLwvz7qVgdncqPXF?filename=weeeet.html CertificateIssuerAmazon Subjectwetransfer.net Fingerprint0B:0D:65:82:74:97:1B:AD:60:D8:48:2B:7D:A7:00:EA:34:08:86:48 ValiditySun, 30 Jul 2023 00:00:00 GMT - Wed, 28 Aug 2024 23:59:59 GMT
File typeWeb Open Font Format, TrueType, length 31120, version 1.6554 Hash57cbbfdafc43e0deecc75a309dd042c6 b9cc2ff331b8520706de175f5b3fdba6731a9bfc a9117f16bdaa64c953b303bef951dfca6316ef59f1b7ca72d5b946b1d815f6a6
GET /packs/media/actiefgrotesque/ActiefGrotesque_W_Regular-1f437876.woff HTTP/1.1
Host: prod-cdn.wetransfer.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://cloudflare-ipfs.com/
Origin: https://cloudflare-ipfs.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: font/woff
content-length: 31120
date: Wed, 10 Apr 2024 00:33:02 GMT
last-modified: Thu, 21 Dec 2023 14:25:54 GMT
etag: "57cbbfdafc43e0deecc75a309dd042c6"
x-amz-server-side-encryption: AES256
cache-control: public, max-age=31536000
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 ee04daa979e7a02cc5ca472521bc18a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: RmrmYQTRq3olLXP1aQ0RbXt4CsQVpoAfLltC_0YzbS9tJ0P9nHL62Q==
age: 1481436
X-Firefox-Spdy: h2
|
|
| storageapi.fleek.co/f32f51ce-f1e7-4668-9cba-12beeb431209-bucket/hun.png | 104.18.7.145 | 200 OK | 8.6 kB |
URL GET HTTP/2storageapi.fleek.co/f32f51ce-f1e7-4668-9cba-12beeb431209-bucket/hun.png IP104.18.7.145:443
Requested byhttps://cloudflare-ipfs.com/ipfs/QmVSz4KdejUrmaK2x6ngUxtUPHNtijhLwvz7qVgdncqPXF?filename=weeeet.html CertificateIssuerCloudflare, Inc. Subjectfleek.co FingerprintBD:C3:14:20:96:F3:3B:08:04:17:AB:CB:46:08:C4:4F:D4:40:61:1F ValidityMon, 29 Jan 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT
File typePNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced Hashca6d67e60f758d352745329b283e8f32 2487459838dbd7705ddd0f4c1913e506058e8c78 8593ddf29f1159a2aeda0a0e4de911aa1715b3b181c0f21e3ecd9d71904153d1
GET /f32f51ce-f1e7-4668-9cba-12beeb431209-bucket/hun.png HTTP/1.1
Host: storageapi.fleek.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://cloudflare-ipfs.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sat, 27 Apr 2024 04:03:37 GMT
content-type: image/png
content-length: 8618
content-security-policy: block-all-mixed-content
etag: "bafybeicrnvebplp755oy4x4ularviuevbdu7qop6t67ihpufxjt27ssla4"
last-modified: Sun, 04 Dec 2022 17:02:58 GMT
vary: Origin, Accept-Encoding
x-amz-request-id: 17C851D7C7539213
x-xss-protection: 1; mode=block
cf-cache-status: HIT
expires: Sat, 27 Apr 2024 08:03:37 GMT
cache-control: public, max-age=14400
accept-ranges: bytes
server: cloudflare
cf-ray: 87abec81ae1856ab-OSL
X-Firefox-Spdy: h2
|
|
| prod-cdn.wetransfer.net/packs/media/actiefgrotesque/ActiefGrotesque_W_Medium-293e86f0.woff | 54.230.111.37 | 200 OK | 32 kB |
URL GET HTTP/2prod-cdn.wetransfer.net/packs/media/actiefgrotesque/ActiefGrotesque_W_Medium-293e86f0.woff IP54.230.111.37:443
Requested byhttps://cloudflare-ipfs.com/ipfs/QmVSz4KdejUrmaK2x6ngUxtUPHNtijhLwvz7qVgdncqPXF?filename=weeeet.html CertificateIssuerAmazon Subjectwetransfer.net Fingerprint0B:0D:65:82:74:97:1B:AD:60:D8:48:2B:7D:A7:00:EA:34:08:86:48 ValiditySun, 30 Jul 2023 00:00:00 GMT - Wed, 28 Aug 2024 23:59:59 GMT
File typeWeb Open Font Format, TrueType, length 32124, version 1.6554 Hash868aedeefe7669e8a4f7196f7df5d058 45bd20ef2c6b717a2526efd98a01207979b2a623 d8700b022ef56752cd12ff224b3f409e84aeb8a43ac68ba052167096baf46555
GET /packs/media/actiefgrotesque/ActiefGrotesque_W_Medium-293e86f0.woff HTTP/1.1
Host: prod-cdn.wetransfer.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://cloudflare-ipfs.com/
Origin: https://cloudflare-ipfs.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: font/woff
content-length: 32124
date: Wed, 10 Apr 2024 00:33:02 GMT
last-modified: Thu, 21 Dec 2023 14:25:54 GMT
etag: "868aedeefe7669e8a4f7196f7df5d058"
x-amz-server-side-encryption: AES256
cache-control: public, max-age=31536000
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 ee04daa979e7a02cc5ca472521bc18a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: c8QWY3dPBtk5UjKH0xYn92VNvVU-sX5fy40n6K6XHMkabSVYFNJaZw==
age: 1481436
X-Firefox-Spdy: h2
|
|
| storageapi.fleek.co/f32f51ce-f1e7-4668-9cba-12beeb431209-bucket/download.png | 104.18.7.145 | 200 OK | 13 kB |
URL GET HTTP/2storageapi.fleek.co/f32f51ce-f1e7-4668-9cba-12beeb431209-bucket/download.png IP104.18.7.145:443
Requested byhttps://cloudflare-ipfs.com/ipfs/QmVSz4KdejUrmaK2x6ngUxtUPHNtijhLwvz7qVgdncqPXF?filename=weeeet.html CertificateIssuerCloudflare, Inc. Subjectfleek.co FingerprintBD:C3:14:20:96:F3:3B:08:04:17:AB:CB:46:08:C4:4F:D4:40:61:1F ValidityMon, 29 Jan 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT
File typePNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced Hash49d4041b8e7e375f3e2950a9738bc59b cd3dc4e38ce48e26df8f216503d6027bfbd22378 1d6f06c578fbe919beec761b4b1f7d75445753b0db44ead4039bd71e4c3c098e
GET /f32f51ce-f1e7-4668-9cba-12beeb431209-bucket/download.png HTTP/1.1
Host: storageapi.fleek.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://cloudflare-ipfs.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sat, 27 Apr 2024 04:03:37 GMT
content-type: image/png
content-length: 13096
content-security-policy: block-all-mixed-content
etag: "bafybeifyv3ndg2kvpanmyerd5o6vix4abldyqbshsv6fz5nmpv4pu4ydre"
last-modified: Sun, 04 Dec 2022 17:01:21 GMT
vary: Origin, Accept-Encoding
x-amz-request-id: 17CA00CABD5219DB
x-xss-protection: 1; mode=block
cf-cache-status: HIT
expires: Sat, 27 Apr 2024 08:03:37 GMT
cache-control: public, max-age=14400
accept-ranges: bytes
server: cloudflare
cf-ray: 87abec81ae1d56ab-OSL
X-Firefox-Spdy: h2
|
|
| prod-cdn.wetransfer.net/packs/media/gt-super-wt/GT-Super-WT-Super-1b214df1.woff | 54.230.111.37 | 200 OK | 43 kB |
URL GET HTTP/2prod-cdn.wetransfer.net/packs/media/gt-super-wt/GT-Super-WT-Super-1b214df1.woff IP54.230.111.37:443
Requested byhttps://cloudflare-ipfs.com/ipfs/QmVSz4KdejUrmaK2x6ngUxtUPHNtijhLwvz7qVgdncqPXF?filename=weeeet.html CertificateIssuerAmazon Subjectwetransfer.net Fingerprint0B:0D:65:82:74:97:1B:AD:60:D8:48:2B:7D:A7:00:EA:34:08:86:48 ValiditySun, 30 Jul 2023 00:00:00 GMT - Wed, 28 Aug 2024 23:59:59 GMT
File typeWeb Open Font Format, TrueType, length 43188, version 0.0 Hash55576599a2d772f9297c5036d355b1fb c52e4f9a59137105deb12a3de25ee7d5a15fd286 1e3d5d86432b9bfcdf25ce0e35fd23667cea86f6fa71fa920cd84abb70258f73
GET /packs/media/gt-super-wt/GT-Super-WT-Super-1b214df1.woff HTTP/1.1
Host: prod-cdn.wetransfer.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://cloudflare-ipfs.com/
Origin: https://cloudflare-ipfs.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: font/woff
content-length: 43188
date: Sun, 14 Jan 2024 12:32:55 GMT
last-modified: Thu, 21 Dec 2023 14:25:55 GMT
etag: "55576599a2d772f9297c5036d355b1fb"
x-amz-server-side-encryption: AES256
cache-control: public, max-age=31536000
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 ee04daa979e7a02cc5ca472521bc18a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: eM5V_uwq9IiGq6LoZiH3BA9IwFR2K_ZhJRvSOEWQ-m9mYReHsjCigg==
age: 8955043
X-Firefox-Spdy: h2
|
|
| code.jquery.com/jquery-3.2.1.slim.min.js | 151.101.2.137 | 200 OK | 24 kB |
URL GET HTTP/2code.jquery.com/jquery-3.2.1.slim.min.js IP151.101.2.137:443
Requested byhttps://cloudflare-ipfs.com/ipfs/QmVSz4KdejUrmaK2x6ngUxtUPHNtijhLwvz7qVgdncqPXF?filename=weeeet.html CertificateIssuerSectigo Limited Subject*.jquery.com FingerprintD2:19:0A:AD:CE:BB:9C:61:17:5D:29:4B:A2:54:E8:C6:91:B8:F9:8D ValidityTue, 11 Jul 2023 00:00:00 GMT - Sun, 14 Jul 2024 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (32012) Hash5f48fc77cac90c4778fa24ec9c57f37d 9e89d1515bc4c371b86f4cb1002fd8e377c1829f 9365920887b11b33a3dc4ba28a0f93951f200341263e3b9cefd384798e4be398
GET /jquery-3.2.1.slim.min.js HTTP/1.1
Host: code.jquery.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://cloudflare-ipfs.com/
Origin: https://cloudflare-ipfs.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Fri, 18 Oct 1991 12:00:00 GMT
etag: W/"28feccc0-10fdd"
cache-control: public, max-age=31536000, stale-while-revalidate=604800
access-control-allow-origin: *
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Sat, 27 Apr 2024 04:03:37 GMT
age: 1660751
x-served-by: cache-lga21963-LGA, cache-hel1410030-HEL
x-cache: HIT, HIT
x-cache-hits: 40, 57671
x-timer: S1714190618.912636,VS0,VE0
vary: Accept-Encoding
content-length: 23856
X-Firefox-Spdy: h2
|
|
| ajax.googleapis.com/ajax/libs/jquery/2.2.4/jquery.min.js | 142.250.74.42 | 200 OK | 30 kB |
URL GET HTTP/2ajax.googleapis.com/ajax/libs/jquery/2.2.4/jquery.min.js IP142.250.74.42:443
Requested byhttps://cloudflare-ipfs.com/ipfs/QmVSz4KdejUrmaK2x6ngUxtUPHNtijhLwvz7qVgdncqPXF?filename=weeeet.html CertificateIssuerGoogle Trust Services LLC Subjectupload.video.google.com Fingerprint5F:6D:48:87:16:89:1E:A5:57:29:92:8B:34:BD:F2:92:0C:7F:F2:50 ValidityMon, 08 Apr 2024 07:32:03 GMT - Mon, 01 Jul 2024 07:32:02 GMT
File typeJavaScript source, ASCII text, with very long lines (32065) Hash2f6b11a7e914718e0290410e85366fe9 69bb69e25ca7d5ef0935317584e6153f3fd9a88c 05b85d96f41fff14d8f608dad03ab71e2c1017c2da0914d7c59291bad7a54f8e
GET /ajax/libs/jquery/2.2.4/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://cloudflare-ipfs.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 30028
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 26 Apr 2024 06:02:55 GMT
expires: Sat, 26 Apr 2025 06:02:55 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
last-modified: Tue, 03 Mar 2020 19:15:00 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
age: 79242
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| cloudflare-ipfs.com/ipfs/css/en-0d65947306b8b68f172b.js | 104.17.64.14 | 400 Bad Request | 115 B |
URL GET HTTP/3cloudflare-ipfs.com/ipfs/css/en-0d65947306b8b68f172b.js IP104.17.64.14:443
Requested byhttps://cloudflare-ipfs.com/ipfs/QmVSz4KdejUrmaK2x6ngUxtUPHNtijhLwvz7qVgdncqPXF?filename=weeeet.html CertificateIssuerLet's Encrypt Subjectcloudflare-ipfs.com FingerprintAF:BC:14:E3:55:D9:D8:F0:3C:8E:26:A0:4E:4A:C8:E6:13:58:A0:59 ValidityWed, 24 Apr 2024 02:22:22 GMT - Tue, 23 Jul 2024 02:22:21 GMT
Hash3f60f0c842304019af8add0536301d04 d70f0d1b59a81bc622a10ef4a7f7fc332f89638d 5cf23493aef68b701ce2a7a03d32f4943cca77198b7ebe951ab9e21d997efa61
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - WeTransfer | | PhishTank | phishing | Other |
GET /ipfs/css/en-0d65947306b8b68f172b.js HTTP/1.1
Host: cloudflare-ipfs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://cloudflare-ipfs.com/
DNT: 1
Connection: keep-alive
Cookie: __cf_bm=caJQJiGG9j9qiul6kLUTY1nL288QB3GlxDEfvvCV2jo-1714190617-1.0.1.1-sPgEVcOUDyLE_k3nUu3LgwxUZDU8fzoU1Ap51PK1JUIbT2yA.jYb2TQIVkj_4NeTs0oNK35gDabnFa.1JYN41g
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 400 Bad Request
date: Sat, 27 Apr 2024 04:03:39 GMT
content-type: text/plain; charset=utf-8
content-length: 115
cf-ray: 87abec8149ba56a4-OSL
cf-cache-status: MISS
cache-control: no-store
vary: Accept-Encoding
x-cf-ipfs-cache-status: miss
x-content-type-options: nosniff
server: cloudflare
alt-svc: h3=":443"; ma=86400
|
|
| cloudflare-ipfs.com/ipfs/css/en-de295c39cb769807d9fa.js | 104.17.64.14 | 400 Bad Request | 115 B |
URL GET HTTP/3cloudflare-ipfs.com/ipfs/css/en-de295c39cb769807d9fa.js IP104.17.64.14:443
Requested byhttps://cloudflare-ipfs.com/ipfs/QmVSz4KdejUrmaK2x6ngUxtUPHNtijhLwvz7qVgdncqPXF?filename=weeeet.html CertificateIssuerLet's Encrypt Subjectcloudflare-ipfs.com FingerprintAF:BC:14:E3:55:D9:D8:F0:3C:8E:26:A0:4E:4A:C8:E6:13:58:A0:59 ValidityWed, 24 Apr 2024 02:22:22 GMT - Tue, 23 Jul 2024 02:22:21 GMT
Hash93af8463c0c3e8269b347a050764eab6 2f6fc267e080478715b1597f04a29ee51dacaf73 9be912098685fa4518051fc7f110ee836e5c574692935bdbdcfff1f11e94cced
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - WeTransfer | | PhishTank | phishing | Other |
GET /ipfs/css/en-de295c39cb769807d9fa.js HTTP/1.1
Host: cloudflare-ipfs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://cloudflare-ipfs.com/
DNT: 1
Connection: keep-alive
Cookie: __cf_bm=caJQJiGG9j9qiul6kLUTY1nL288QB3GlxDEfvvCV2jo-1714190617-1.0.1.1-sPgEVcOUDyLE_k3nUu3LgwxUZDU8fzoU1Ap51PK1JUIbT2yA.jYb2TQIVkj_4NeTs0oNK35gDabnFa.1JYN41g
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 400 Bad Request
date: Sat, 27 Apr 2024 04:03:39 GMT
content-type: text/plain; charset=utf-8
content-length: 115
cf-ray: 87abec8149bd56a4-OSL
cf-cache-status: MISS
cache-control: no-store
vary: Accept-Encoding
x-cf-ipfs-cache-status: miss
x-content-type-options: nosniff
server: cloudflare
alt-svc: h3=":443"; ma=86400
|
|
| cloudflare-ipfs.com/ipfs/css/0.txt | 104.17.64.14 | 400 Bad Request | 94 B |
URL GET HTTP/3cloudflare-ipfs.com/ipfs/css/0.txt IP104.17.64.14:443
Requested byhttps://cloudflare-ipfs.com/ipfs/QmVSz4KdejUrmaK2x6ngUxtUPHNtijhLwvz7qVgdncqPXF?filename=weeeet.html CertificateIssuerLet's Encrypt Subjectcloudflare-ipfs.com FingerprintAF:BC:14:E3:55:D9:D8:F0:3C:8E:26:A0:4E:4A:C8:E6:13:58:A0:59 ValidityWed, 24 Apr 2024 02:22:22 GMT - Tue, 23 Jul 2024 02:22:21 GMT
Hasha630560523c0aef9b17e0b84911ab243 ab5fa6dc4236b31826500d541bdf0c0a19a2711b 6d926fc05978c76fcea8e26587bfea71ec4d24d1102212dc737a0ef2ea2c184b
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - WeTransfer | | PhishTank | phishing | Other |
GET /ipfs/css/0.txt HTTP/1.1
Host: cloudflare-ipfs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://cloudflare-ipfs.com/
DNT: 1
Connection: keep-alive
Cookie: __cf_bm=caJQJiGG9j9qiul6kLUTY1nL288QB3GlxDEfvvCV2jo-1714190617-1.0.1.1-sPgEVcOUDyLE_k3nUu3LgwxUZDU8fzoU1Ap51PK1JUIbT2yA.jYb2TQIVkj_4NeTs0oNK35gDabnFa.1JYN41g
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 400 Bad Request
date: Sat, 27 Apr 2024 04:03:39 GMT
content-type: text/plain; charset=utf-8
content-length: 94
cf-ray: 87abec8149be56a4-OSL
cf-cache-status: MISS
cache-control: no-store
vary: Accept-Encoding
x-cf-ipfs-cache-status: miss
x-content-type-options: nosniff
server: cloudflare
alt-svc: h3=":443"; ma=86400
|
|
| cloudflare-ipfs.com/ipfs/css/gtm.js | 104.17.64.14 | 400 Bad Request | 95 B |
URL GET HTTP/3cloudflare-ipfs.com/ipfs/css/gtm.js IP104.17.64.14:443
Requested byhttps://cloudflare-ipfs.com/ipfs/QmVSz4KdejUrmaK2x6ngUxtUPHNtijhLwvz7qVgdncqPXF?filename=weeeet.html CertificateIssuerLet's Encrypt Subjectcloudflare-ipfs.com FingerprintAF:BC:14:E3:55:D9:D8:F0:3C:8E:26:A0:4E:4A:C8:E6:13:58:A0:59 ValidityWed, 24 Apr 2024 02:22:22 GMT - Tue, 23 Jul 2024 02:22:21 GMT
Hashfec872eb50541eb99c0d31531370c287 68ee1038cd646a1cabf155b123511c5b8371ddcc 9f065912c7e1f08ae788af8eacb290c59531ec267b7ba3cf4edb5fd74fa47471
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - WeTransfer | | PhishTank | phishing | Other |
GET /ipfs/css/gtm.js HTTP/1.1
Host: cloudflare-ipfs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://cloudflare-ipfs.com/
DNT: 1
Connection: keep-alive
Cookie: __cf_bm=caJQJiGG9j9qiul6kLUTY1nL288QB3GlxDEfvvCV2jo-1714190617-1.0.1.1-sPgEVcOUDyLE_k3nUu3LgwxUZDU8fzoU1Ap51PK1JUIbT2yA.jYb2TQIVkj_4NeTs0oNK35gDabnFa.1JYN41g
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 400 Bad Request
date: Sat, 27 Apr 2024 04:03:39 GMT
content-type: text/plain; charset=utf-8
content-length: 95
cf-ray: 87abec8139b656a4-OSL
cf-cache-status: MISS
cache-control: no-store
vary: Accept-Encoding
x-cf-ipfs-cache-status: miss
x-content-type-options: nosniff
server: cloudflare
alt-svc: h3=":443"; ma=86400
|
|
| cloudflare-ipfs.com/ipfs/css/sp.js | 104.17.64.14 | 400 Bad Request | 94 B |
URL GET HTTP/3cloudflare-ipfs.com/ipfs/css/sp.js IP104.17.64.14:443
Requested byhttps://cloudflare-ipfs.com/ipfs/QmVSz4KdejUrmaK2x6ngUxtUPHNtijhLwvz7qVgdncqPXF?filename=weeeet.html CertificateIssuerLet's Encrypt Subjectcloudflare-ipfs.com FingerprintAF:BC:14:E3:55:D9:D8:F0:3C:8E:26:A0:4E:4A:C8:E6:13:58:A0:59 ValidityWed, 24 Apr 2024 02:22:22 GMT - Tue, 23 Jul 2024 02:22:21 GMT
Hash5d75fd7819cadd67af42a062cd8c321d 1f1b7cbc423062d03c7057732dda43776999cb26 514e463296aa9e2c89aa294cbb1f738394f3cd9fcecd0bb7a3cccbae66bc7c63
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - WeTransfer | | PhishTank | phishing | Other |
GET /ipfs/css/sp.js HTTP/1.1
Host: cloudflare-ipfs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://cloudflare-ipfs.com/
DNT: 1
Connection: keep-alive
Cookie: __cf_bm=caJQJiGG9j9qiul6kLUTY1nL288QB3GlxDEfvvCV2jo-1714190617-1.0.1.1-sPgEVcOUDyLE_k3nUu3LgwxUZDU8fzoU1Ap51PK1JUIbT2yA.jYb2TQIVkj_4NeTs0oNK35gDabnFa.1JYN41g
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 400 Bad Request
date: Sat, 27 Apr 2024 04:03:39 GMT
content-type: text/plain; charset=utf-8
content-length: 94
cf-ray: 87abec8149b856a4-OSL
cf-cache-status: MISS
cache-control: no-store
vary: Accept-Encoding
x-cf-ipfs-cache-status: miss
x-content-type-options: nosniff
server: cloudflare
alt-svc: h3=":443"; ma=86400
|
|
| mk2-b4c8d3.ingress-earth.ewp.live/packs/media/actiefgrotesque/ActiefGrotesque_W_Bd-1bdd99f9.woff | 63.250.43.128 | 404 Not Found | 71 kB |
URL GET HTTP/2mk2-b4c8d3.ingress-earth.ewp.live/packs/media/actiefgrotesque/ActiefGrotesque_W_Bd-1bdd99f9.woff IP63.250.43.128:443
Requested byhttps://cloudflare-ipfs.com/ipfs/QmVSz4KdejUrmaK2x6ngUxtUPHNtijhLwvz7qVgdncqPXF?filename=weeeet.html CertificateIssuerSectigo Limited Subject*.ingress-earth.ewp.live Fingerprint87:B0:FA:CD:15:B0:DC:6A:0B:9C:74:EB:0C:94:AB:86:6C:62:06:64 ValidityTue, 09 May 2023 00:00:00 GMT - Sat, 25 May 2024 23:59:59 GMT
Hasha6b83d51bbdf6a7ffea24253ec5ab12b 029756fbe1b385e316dfc06c418abfb1dcf7b57d b3c84d4f3247d9a3518324768fef0b91ba684530409b2b492dd5591be10a9dd8
GET /packs/media/actiefgrotesque/ActiefGrotesque_W_Bd-1bdd99f9.woff HTTP/1.1
Host: mk2-b4c8d3.ingress-earth.ewp.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://cloudflare-ipfs.com
DNT: 1
Connection: keep-alive
Referer: https://storageapi.fleek.co/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 404 Not Found
content-type: text/html
date: Sat, 27 Apr 2024 04:03:38 GMT
X-Firefox-Spdy: h2
|
|
| aus5.mozilla.org/update/3/GMP/111.0a1/20240129201730/Linux_x86_64-gcc3/null/default/Linux%205.15.0-102-generic%20(GTK%203.24.37%2Clibpulse%20not-available)/default/default/update.xml | 35.244.181.201 | | 444 B |
URL aus5.mozilla.org/update/3/GMP/111.0a1/20240129201730/Linux_x86_64-gcc3/null/default/Linux%205.15.0-102-generic%20(GTK%203.24.37%2Clibpulse%20not-available)/default/default/update.xml IP35.244.181.201:0 ASN#396982 GOOGLE-CLOUD-PLATFORM
File typeXML 1.0 document, ASCII text, with very long lines (332) Hash3b324dec137a87ef7e24a30a65b13dd0 c0faa95b2f1018e264b3a14aaf50d1003e6c27b3 6cd0b591d9239fc8564627e92a804fc261951b1cbaf5fa58a8ada3cc13f51463
GET /update/3/GMP/111.0a1/20240129201730/Linux_x86_64-gcc3/null/default/Linux%205.15.0-102-generic%20(GTK%203.24.37%2Clibpulse%20not-available)/default/default/update.xml HTTP/1.1
Host: aus5.mozilla.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Cache-Control: no-cache
Pragma: no-cache
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
rule-id: unknown
rule-data-version: unknown
content-signature: x5u=https://content-signature-2.cdn.mozilla.net/chains/aus.content-signature.mozilla.org-2024-06-09-11-51-10.chain; p384ecdsa=O_PANykrR5IY0gNoTRvQJbEv_xWwgr7X2NIrxruQZRnWYELSxU5I2rwfhzTOlTxhHwGLJxOmdpcl6yqYfOA8j4_a75AfFFGEWlvqBfq6BLUmvlEgfOGxcEuuvTrb-x5Q
strict-transport-security: max-age=31536000;
x-content-type-options: nosniff
content-security-policy: default-src 'none'; frame-ancestors 'none'
x-proxy-cache-status: EXPIRED
content-encoding: gzip
via: 1.1 google
date: Sat, 27 Apr 2024 04:03:18 GMT
content-type: text/xml; charset=utf-8
vary: Accept-Encoding
content-length: 444
age: 37
cache-control: public,max-age=90
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| storageapi.fleek.co/f32f51ce-f1e7-4668-9cba-12beeb431209-bucket/style.css | 104.18.7.145 | 200 OK | 550 kB |
URL GET HTTP/2storageapi.fleek.co/f32f51ce-f1e7-4668-9cba-12beeb431209-bucket/style.css IP104.18.7.145:443
Requested byhttps://cloudflare-ipfs.com/ipfs/QmVSz4KdejUrmaK2x6ngUxtUPHNtijhLwvz7qVgdncqPXF?filename=weeeet.html CertificateIssuerCloudflare, Inc. Subjectfleek.co FingerprintBD:C3:14:20:96:F3:3B:08:04:17:AB:CB:46:08:C4:4F:D4:40:61:1F ValidityMon, 29 Jan 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT
File typeASCII text, with very long lines (62633), with CRLF line terminators Size550 kB (550422 bytes) Hashb768aa242361c5e86611270e8b506e40 36144a2f2da64d4089552ec8632824d5a39dff96 0167aeb8b557995a880328158eb451adbfd06c68c01971d2cb17b437de6bdd31
GET /f32f51ce-f1e7-4668-9cba-12beeb431209-bucket/style.css HTTP/1.1
Host: storageapi.fleek.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cloudflare-ipfs.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 27 Apr 2024 04:03:37 GMT
content-type: text/css
content-security-policy: block-all-mixed-content
etag: W/"bafybeid5rmdoscnnmwcen52z7u6l4x2bin3hnh75flm4qlkno6wse32yge"
last-modified: Sun, 04 Dec 2022 16:38:08 GMT
vary: Origin, Accept-Encoding
x-amz-request-id: 17C851D7C3EF5569
x-xss-protection: 1; mode=block
cf-cache-status: HIT
expires: Sat, 27 Apr 2024 08:03:37 GMT
cache-control: public, max-age=14400
server: cloudflare
cf-ray: 87abec819e1756ab-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| maxcdn.bootstrapcdn.com/bootstrap/4.0.0/js/bootstrap.min.js | 104.18.10.207 | 200 OK | 49 kB |
URL GET HTTP/2maxcdn.bootstrapcdn.com/bootstrap/4.0.0/js/bootstrap.min.js IP104.18.10.207:443
Requested byhttps://cloudflare-ipfs.com/ipfs/QmVSz4KdejUrmaK2x6ngUxtUPHNtijhLwvz7qVgdncqPXF?filename=weeeet.html CertificateIssuerGoogle Trust Services LLC Subjectbootstrapcdn.com Fingerprint57:B4:25:B9:9C:88:A1:A3:3D:F7:31:74:02:E4:D1:E0:0A:F5:11:63 ValidityWed, 27 Mar 2024 00:22:09 GMT - Tue, 25 Jun 2024 00:22:08 GMT
File typeJavaScript source, ASCII text, with very long lines (48664) Hash14d449eb8876fa55e1ef3c2cc52b0c17 a9545831803b1359cfeed47e3b4d6bae68e40e99 e7ed36ceee5450b4243bbc35188afabdfb4280c7c57597001de0ed167299b01b
GET /bootstrap/4.0.0/js/bootstrap.min.js HTTP/1.1
Host: maxcdn.bootstrapcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://cloudflare-ipfs.com/
Origin: https://cloudflare-ipfs.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 27 Apr 2024 04:03:37 GMT
content-type: application/javascript; charset=utf-8
vary: Accept-Encoding
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: DE
access-control-allow-origin: *
cache-control: public, max-age=31919000
etag: W/"14d449eb8876fa55e1ef3c2cc52b0c17"
last-modified: Mon, 25 Jan 2021 22:04:04 GMT
cdn-cachedat: 10/31/2023 18:55:57
cdn-proxyver: 1.04
cdn-requestpullcode: 200
cdn-requestpullsuccess: True
cdn-edgestorageid: 865
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
cdn-status: 200
cdn-requestid: 8a82304b850bfb8e45631d53f821aa61
cdn-cache: HIT
cf-cache-status: HIT
age: 13563367
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 87abec81ae51b511-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| mk2-b4c8d3.ingress-earth.ewp.live/packs/media/images/globe-dd3d31e7.svg | 63.250.43.128 | 404 Not Found | 0 B |
URL GET HTTP/2mk2-b4c8d3.ingress-earth.ewp.live/packs/media/images/globe-dd3d31e7.svg IP63.250.43.128:443
Requested byhttps://cloudflare-ipfs.com/ipfs/QmVSz4KdejUrmaK2x6ngUxtUPHNtijhLwvz7qVgdncqPXF?filename=weeeet.html CertificateIssuerSectigo Limited Subject*.ingress-earth.ewp.live Fingerprint87:B0:FA:CD:15:B0:DC:6A:0B:9C:74:EB:0C:94:AB:86:6C:62:06:64 ValidityTue, 09 May 2023 00:00:00 GMT - Sat, 25 May 2024 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /packs/media/images/globe-dd3d31e7.svg HTTP/1.1
Host: mk2-b4c8d3.ingress-earth.ewp.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://storageapi.fleek.co/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 404 Not Found
content-type: text/html
date: Sat, 27 Apr 2024 04:03:38 GMT
X-Firefox-Spdy: h2
|
|
| prod-cdn.wetransfer.net/packs/media/images/favicon-a34a7465.ico | 54.230.111.37 | 200 OK | 42 kB |
URL GET HTTP/2prod-cdn.wetransfer.net/packs/media/images/favicon-a34a7465.ico IP54.230.111.37:443
Requested byhttps://cloudflare-ipfs.com/ipfs/QmVSz4KdejUrmaK2x6ngUxtUPHNtijhLwvz7qVgdncqPXF?filename=weeeet.html CertificateIssuerAmazon Subjectwetransfer.net Fingerprint0B:0D:65:82:74:97:1B:AD:60:D8:48:2B:7D:A7:00:EA:34:08:86:48 ValiditySun, 30 Jul 2023 00:00:00 GMT - Wed, 28 Aug 2024 23:59:59 GMT
File typeMS Windows icon resource - 5 icons, 16x16, 32 bits/pixel, 24x24, 32 bits/pixel Hash692e1c7339c359b6412f059c9c9a0474 e7c1a53dca16b7664880e5b8a92524cf9a47fb62 d12161435ace47c6883360e08466508593325f134c1852b1d0e6e75d5f76adda
GET /packs/media/images/favicon-a34a7465.ico HTTP/1.1
Host: prod-cdn.wetransfer.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://cloudflare-ipfs.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/vnd.microsoft.icon
content-length: 41566
date: Wed, 27 Mar 2024 01:09:01 GMT
last-modified: Thu, 21 Dec 2023 14:25:56 GMT
etag: "692e1c7339c359b6412f059c9c9a0474"
x-amz-server-side-encryption: AES256
cache-control: public, max-age=31536000
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 ee04daa979e7a02cc5ca472521bc18a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: rEpuZQ3xt-P9H0E9f508bMYijl0AKwFcEN2moaCv0WLgBjhGHnTPnA==
age: 2688879
X-Firefox-Spdy: h2
|
|
| cloudflare-ipfs.com/ipfs/QmVSz4KdejUrmaK2x6ngUxtUPHNtijhLwvz7qVgdncqPXF?filename=weeeet.html | 104.17.64.14 | 200 OK | 30 kB |
URL User Request GET HTTP/2cloudflare-ipfs.com/ipfs/QmVSz4KdejUrmaK2x6ngUxtUPHNtijhLwvz7qVgdncqPXF?filename=weeeet.html IP104.17.64.14:443
CertificateIssuerLet's Encrypt Subjectcloudflare-ipfs.com FingerprintAF:BC:14:E3:55:D9:D8:F0:3C:8E:26:A0:4E:4A:C8:E6:13:58:A0:59 ValidityWed, 24 Apr 2024 02:22:22 GMT - Tue, 23 Jul 2024 02:22:21 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - WeTransfer |
GET /ipfs/QmVSz4KdejUrmaK2x6ngUxtUPHNtijhLwvz7qVgdncqPXF?filename=weeeet.html HTTP/1.1
Host: cloudflare-ipfs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 27 Apr 2024 04:03:37 GMT
content-type: text/html
cf-ray: 87abec7ac96ab517-OSL
cf-cache-status: MISS
access-control-allow-origin: *
cache-control: public, max-age=29030400, immutable
content-disposition: inline; filename="weeeet.html"; filename*=UTF-8''weeeet.html
etag: W/"QmVSz4KdejUrmaK2x6ngUxtUPHNtijhLwvz7qVgdncqPXF"
vary: Accept-Encoding
access-control-allow-headers: Content-Type, Range, User-Agent, X-Requested-With
access-control-allow-methods: GET
access-control-expose-headers: Content-Length, Content-Range, X-Chunked-Output, X-Ipfs-Path, X-Ipfs-Roots, X-Stream-Output
x-cf-ipfs-cache-status: miss
x-ipfs-path: /ipfs/QmVSz4KdejUrmaK2x6ngUxtUPHNtijhLwvz7qVgdncqPXF
x-ipfs-roots: QmVSz4KdejUrmaK2x6ngUxtUPHNtijhLwvz7qVgdncqPXF
set-cookie: __cf_bm=caJQJiGG9j9qiul6kLUTY1nL288QB3GlxDEfvvCV2jo-1714190617-1.0.1.1-sPgEVcOUDyLE_k3nUu3LgwxUZDU8fzoU1Ap51PK1JUIbT2yA.jYb2TQIVkj_4NeTs0oNK35gDabnFa.1JYN41g; path=/; expires=Sat, 27-Apr-24 04:33:37 GMT; domain=.cloudflare-ipfs.com; HttpOnly; Secure; SameSite=None
server: cloudflare
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| stackpath.bootstrapcdn.com/bootstrap/4.1.3/js/bootstrap.min.js | 104.18.10.207 | 200 OK | 51 kB |
URL GET HTTP/3stackpath.bootstrapcdn.com/bootstrap/4.1.3/js/bootstrap.min.js IP104.18.10.207:443
Requested byhttps://cloudflare-ipfs.com/ipfs/QmVSz4KdejUrmaK2x6ngUxtUPHNtijhLwvz7qVgdncqPXF?filename=weeeet.html CertificateIssuerGoogle Trust Services LLC Subjectbootstrapcdn.com Fingerprint57:B4:25:B9:9C:88:A1:A3:3D:F7:31:74:02:E4:D1:E0:0A:F5:11:63 ValidityWed, 27 Mar 2024 00:22:09 GMT - Tue, 25 Jun 2024 00:22:08 GMT
File typeJavaScript source, ASCII text, with very long lines (50758) Hash67176c242e1bdc20603c878dee836df3 27a71b00383d61ef3c489326b3564d698fc1227c 56c12a125b021d21a69e61d7190cefa168d6c28ce715265cea1b3b0112d169c4
GET /bootstrap/4.1.3/js/bootstrap.min.js HTTP/1.1
Host: stackpath.bootstrapcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://cloudflare-ipfs.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 27 Apr 2024 04:03:39 GMT
content-type: application/javascript; charset=utf-8
vary: Accept-Encoding
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: DE
access-control-allow-origin: *
cache-control: public, max-age=31919000
last-modified: Mon, 25 Jan 2021 22:04:06 GMT
cdn-cachedat: 11/15/2021 23:30:00
cdn-proxyver: 1.0
cdn-requestpullcode: 200
cdn-requestpullsuccess: True
cdn-edgestorageid: 723
cdn-status: 200
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
cdn-requestid: a35b0179a28ed953258d0fb41376a09c
cdn-cache: HIT
cf-cache-status: HIT
age: 2105220
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 87abec8dad0f56b9-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| mk2-b4c8d3.ingress-earth.ewp.live/packs/media/actiefgrotesque/ActiefGrotesque_W_Regular-1f437876.woff | 63.250.43.128 | 404 Not Found | 170 kB |
URL GET HTTP/2mk2-b4c8d3.ingress-earth.ewp.live/packs/media/actiefgrotesque/ActiefGrotesque_W_Regular-1f437876.woff IP63.250.43.128:443
Requested byhttps://cloudflare-ipfs.com/ipfs/QmVSz4KdejUrmaK2x6ngUxtUPHNtijhLwvz7qVgdncqPXF?filename=weeeet.html CertificateIssuerSectigo Limited Subject*.ingress-earth.ewp.live Fingerprint87:B0:FA:CD:15:B0:DC:6A:0B:9C:74:EB:0C:94:AB:86:6C:62:06:64 ValidityTue, 09 May 2023 00:00:00 GMT - Sat, 25 May 2024 23:59:59 GMT
Size170 kB (170154 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /packs/media/actiefgrotesque/ActiefGrotesque_W_Regular-1f437876.woff HTTP/1.1
Host: mk2-b4c8d3.ingress-earth.ewp.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://cloudflare-ipfs.com
DNT: 1
Connection: keep-alive
Referer: https://storageapi.fleek.co/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 404 Not Found
content-type: text/html
date: Sat, 27 Apr 2024 04:03:38 GMT
X-Firefox-Spdy: h2
|
|
| mk2-b4c8d3.ingress-earth.ewp.live/packs/media/actiefgrotesque/ActiefGrotesque_W_Medium-293e86f0.woff | 63.250.43.128 | 404 Not Found | 69 kB |
URL GET HTTP/2mk2-b4c8d3.ingress-earth.ewp.live/packs/media/actiefgrotesque/ActiefGrotesque_W_Medium-293e86f0.woff IP63.250.43.128:443
Requested byhttps://cloudflare-ipfs.com/ipfs/QmVSz4KdejUrmaK2x6ngUxtUPHNtijhLwvz7qVgdncqPXF?filename=weeeet.html CertificateIssuerSectigo Limited Subject*.ingress-earth.ewp.live Fingerprint87:B0:FA:CD:15:B0:DC:6A:0B:9C:74:EB:0C:94:AB:86:6C:62:06:64 ValidityTue, 09 May 2023 00:00:00 GMT - Sat, 25 May 2024 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /packs/media/actiefgrotesque/ActiefGrotesque_W_Medium-293e86f0.woff HTTP/1.1
Host: mk2-b4c8d3.ingress-earth.ewp.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://cloudflare-ipfs.com
DNT: 1
Connection: keep-alive
Referer: https://storageapi.fleek.co/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 404 Not Found
content-type: text/html
date: Sat, 27 Apr 2024 04:03:38 GMT
X-Firefox-Spdy: h2
|
|
| stackpath.bootstrapcdn.com/bootstrap/4.1.3/js/bootstrap.min.js | 104.18.10.207 | 200 OK | 51 kB |
URL GET HTTP/2stackpath.bootstrapcdn.com/bootstrap/4.1.3/js/bootstrap.min.js IP104.18.10.207:443
Requested byhttps://cloudflare-ipfs.com/ipfs/QmVSz4KdejUrmaK2x6ngUxtUPHNtijhLwvz7qVgdncqPXF?filename=weeeet.html CertificateIssuerGoogle Trust Services LLC Subjectbootstrapcdn.com Fingerprint57:B4:25:B9:9C:88:A1:A3:3D:F7:31:74:02:E4:D1:E0:0A:F5:11:63 ValidityWed, 27 Mar 2024 00:22:09 GMT - Tue, 25 Jun 2024 00:22:08 GMT
File typeJavaScript source, ASCII text, with very long lines (50758) Hash67176c242e1bdc20603c878dee836df3 27a71b00383d61ef3c489326b3564d698fc1227c 56c12a125b021d21a69e61d7190cefa168d6c28ce715265cea1b3b0112d169c4
GET /bootstrap/4.1.3/js/bootstrap.min.js HTTP/1.1
Host: stackpath.bootstrapcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cloudflare-ipfs.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 27 Apr 2024 04:03:37 GMT
content-type: application/javascript; charset=utf-8
vary: Accept-Encoding
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: DE
access-control-allow-origin: *
cache-control: public, max-age=31919000
last-modified: Mon, 25 Jan 2021 22:04:06 GMT
cdn-cachedat: 11/15/2021 23:30:00
cdn-proxyver: 1.0
cdn-requestpullcode: 200
cdn-requestpullsuccess: True
cdn-edgestorageid: 723
cdn-status: 200
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
cdn-requestid: a35b0179a28ed953258d0fb41376a09c
cdn-cache: HIT
cf-cache-status: HIT
age: 2105218
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 87abec814fe05685-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|