| document.protection-auth-sign.workers.dev/favicon.ico |  104.21.10.216 | 200 OK | 378 kB |
URL GET HTTP/3document.protection-auth-sign.workers.dev/favicon.ico IP104.21.10.216:443
Requested byhttps://document.protection-auth-sign.workers.dev/ CertificateIssuerGoogle Trust Services LLC Subjectprotection-auth-sign.workers.dev Fingerprint5A:DB:E7:49:53:30:09:8A:45:87:E9:3C:6C:C4:D6:BD:F0:28:2E:24 ValiditySat, 06 Apr 2024 03:00:59 GMT - Fri, 05 Jul 2024 03:00:58 GMT
File typeHTML document, ASCII text, with very long lines (53769) Size378 kB (378497 bytes) Hash24150701566316b95bb56fa602466b62 255ed63f20f32e81fb012972399f7b60fdccb317 ccabea78c9e401af369e3f2a6f54923dbdb8018f51c79fe210c2b29c5d2a7952
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Office365 | | PhishTank | phishing | Adobe |
GET /favicon.ico HTTP/1.1
Host: document.protection-auth-sign.workers.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://document.protection-auth-sign.workers.dev/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 08 May 2024 18:21:15 GMT
content-type: text/html;charset=UTF-8
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=aupqJ1gFVlCuGgcE1YhBhsL03NQTxB7qmCiyXxPLy7TlUy5LQFSKE8L%2FVss5jAiLS%2BQCo58SYAjR6NzGz0sTkNpXZ0tcqj8G%2B8eZhCJLZ95BeXnJ1Sy6loc3ohpsV1nFd%2Bc3IMDxIy1nF45yQii4g1AtNUV1kuJCosD4kQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880b77ed6a08b518-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
| document.protection-auth-sign.workers.dev/ | 104.21.10.216 | 200 OK | 944 kB |
URL User Request GET HTTP/2document.protection-auth-sign.workers.dev/ IP104.21.10.216:443
CertificateIssuerGoogle Trust Services LLC Subjectprotection-auth-sign.workers.dev Fingerprint5A:DB:E7:49:53:30:09:8A:45:87:E9:3C:6C:C4:D6:BD:F0:28:2E:24 ValiditySat, 06 Apr 2024 03:00:59 GMT - Fri, 05 Jul 2024 03:00:58 GMT
File typeHTML document, ASCII text, with very long lines (53769) Size944 kB (944321 bytes) Hash24150701566316b95bb56fa602466b62 255ed63f20f32e81fb012972399f7b60fdccb317 ccabea78c9e401af369e3f2a6f54923dbdb8018f51c79fe210c2b29c5d2a7952
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Office365 | | PhishTank | phishing | Adobe |
GET / HTTP/1.1
Host: document.protection-auth-sign.workers.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 08 May 2024 18:21:14 GMT
content-type: text/html;charset=UTF-8
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=jRcZl1gZ7mpLL0PRFze2sN3r0%2Bm%2BkMiqmjcQa%2FDtfXU%2FnJNsAUAxfZjaZhZ2008itVL5dQVEOGUx3eNpkLtPpNSsF7To%2BAGwZf7x3DUqz1llZgSC%2BezSxmWx%2B5maH%2BE2RsCJci9%2Fk1ccmFDk2k87xiAuezRWUR9B3nk2bQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880b77e40eae712e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|