| code.jquery.com/jquery-3.4.1.min.js |  151.101.2.137 | 200 OK | 31 kB |
URL GET HTTP/2code.jquery.com/jquery-3.4.1.min.js IP151.101.2.137:443
Requested byhttps://dry-scene-66f4.so3yeui8.workers.dev/949baffc-6213-402a-a36f-738a10a2d9b7 CertificateIssuerSectigo Limited Subject*.jquery.com FingerprintD2:19:0A:AD:CE:BB:9C:61:17:5D:29:4B:A2:54:E8:C6:91:B8:F9:8D ValidityTue, 11 Jul 2023 00:00:00 GMT - Sun, 14 Jul 2024 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (65451) Hash220afd743d9e9643852e31a135a9f3ae 88523924351bac0b5d560fe0c5781e2556e7693d 0925e8ad7bd971391a8b1e98be8e87a6971919eb5b60c196485941c3c1df089a
GET /jquery-3.4.1.min.js HTTP/1.1
Host: code.jquery.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dry-scene-66f4.so3yeui8.workers.dev/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Fri, 18 Oct 1991 12:00:00 GMT
etag: W/"28feccc0-15851"
cache-control: public, max-age=31536000, stale-while-revalidate=604800
access-control-allow-origin: *
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Sat, 20 Apr 2024 05:39:04 GMT
age: 5510043
x-served-by: cache-lga21965-LGA, cache-hel1410023-HEL
x-cache: HIT, HIT
x-cache-hits: 23, 396657
x-timer: S1713591545.925629,VS0,VE0
vary: Accept-Encoding
content-length: 30638
X-Firefox-Spdy: h2
|
|
| api.rename-service0.workers.dev/heagregauwe.png |  104.21.77.153 | 200 OK | 1.7 kB |
URL GET HTTP/2api.rename-service0.workers.dev/heagregauwe.png IP104.21.77.153:443
Requested byhttps://dry-scene-66f4.so3yeui8.workers.dev/949baffc-6213-402a-a36f-738a10a2d9b7 CertificateIssuerGoogle Trust Services LLC Subjectrename-service0.workers.dev Fingerprint33:B8:55:53:AE:40:EB:24:F0:4B:06:18:A1:12:3D:6C:7E:C3:AD:9C ValiditySat, 06 Apr 2024 11:19:00 GMT - Fri, 05 Jul 2024 11:18:59 GMT
File typePNG image data, 128 x 28, 8-bit/color RGBA, non-interlaced Hashd44e44807a2c4cb00a239af39d565264 aa8f4de7d37140a3bca9725cd791da8283a7a5b4 7248b8c4a08b8a45d4add928a459a98f12d61c02f5a7886f14bec7084e8ffdcb
GET /heagregauwe.png HTTP/1.1
Host: api.rename-service0.workers.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sat, 20 Apr 2024 05:39:05 GMT
content-type: image/png
content-length: 1737
cf-ray: 8772cab57fcdb51d-OSL
cf-cache-status: HIT
accept-ranges: bytes
age: 106376
etag: "heagregauwe.b2def557d4.png"
vary: Accept-Encoding
feature-policy: none
referrer-policy: unsafe-url
x-content-type-options: nosniff
x-frame-options: DENY
x-xss-protection: 1; mode=block
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=hugzwyL85%2FJUyR2SHHW7dfDj96l%2F%2BBobKLIp8R70EQcQuc9yDYwFXOIB5LFdphGedTmBo0XUL4eSe1AJyj9pameTLnXNv4LE7jL4QX6%2BceCj7J0X%2BUV%2BzrkXhWj5kOsCTzbgb%2BdfHUTnvqfVB47AKTWU"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| api.rename-service0.workers.dev/js?id=UA-1817027-45 | 104.21.77.153 | 200 OK | 39 kB |
URL GET HTTP/2api.rename-service0.workers.dev/js?id=UA-1817027-45 IP104.21.77.153:443
Requested byhttps://dry-scene-66f4.so3yeui8.workers.dev/949baffc-6213-402a-a36f-738a10a2d9b7 CertificateIssuerGoogle Trust Services LLC Subjectrename-service0.workers.dev Fingerprint33:B8:55:53:AE:40:EB:24:F0:4B:06:18:A1:12:3D:6C:7E:C3:AD:9C ValiditySat, 06 Apr 2024 11:19:00 GMT - Fri, 05 Jul 2024 11:18:59 GMT
File typeJavaScript source, ASCII text, with very long lines (1567) Hashc1277eaf2fba47836bedee41d16ed8d0 716f0753108d0704e98e9bfa0672851b1cf79519 2cfb61c5b4464a49bf1a1867ab3c06ad790468ab0d6b3dec415a5929b20dac85
GET /js?id=UA-1817027-45 HTTP/1.1
Host: api.rename-service0.workers.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 20 Apr 2024 05:39:05 GMT
content-type: application/javascript; charset=utf-8
cf-ray: 8772cab57fcfb51d-OSL
cf-cache-status: HIT
age: 106376
etag: W/"js.28fa744248"
vary: Accept-Encoding
feature-policy: none
referrer-policy: unsafe-url
x-content-type-options: nosniff
x-frame-options: DENY
x-xss-protection: 1; mode=block
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=aNnNLej%2FUFeKdDoqFl%2FiGGAzNMKRJdfTP9Yo7R1I1%2FSqMs4ZxW5aPdmX2KDH250vVN8FRV8%2FGsXZUqp%2FmgQ40sfKQrYEvURlZn4ym86K8bSvksuSW%2Bm9%2F%2B%2FeUAW2PBNX2ZFHCA6vsNU2SQTGjU2rLGBa"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| api.rename-service0.workers.dev/jquery-migrate-3.3.1.min.js | 104.21.77.153 | 200 OK | 5.4 kB |
URL GET HTTP/2api.rename-service0.workers.dev/jquery-migrate-3.3.1.min.js IP104.21.77.153:443
Requested byhttps://dry-scene-66f4.so3yeui8.workers.dev/949baffc-6213-402a-a36f-738a10a2d9b7 CertificateIssuerGoogle Trust Services LLC Subjectrename-service0.workers.dev Fingerprint33:B8:55:53:AE:40:EB:24:F0:4B:06:18:A1:12:3D:6C:7E:C3:AD:9C ValiditySat, 06 Apr 2024 11:19:00 GMT - Fri, 05 Jul 2024 11:18:59 GMT
File typeJavaScript source, ASCII text, with very long lines (10878), with CRLF line terminators Hash68f90fa1b7a532a073bd613f011a9c97 a4fd8d2e4556e6348d067212da590d56dc30b8a5 90a8d6a27a26f746b4b263102f4fe120e956d99e3789325aafc7d6b7ca0ff0e4
GET /jquery-migrate-3.3.1.min.js HTTP/1.1
Host: api.rename-service0.workers.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 20 Apr 2024 05:39:05 GMT
content-type: application/javascript; charset=utf-8
cf-ray: 8772cab57fd5b51d-OSL
cf-cache-status: HIT
age: 106376
etag: W/"jquery-migrate-3.3.1.min.4a9b3d1a73.js"
vary: Accept-Encoding
feature-policy: none
referrer-policy: unsafe-url
x-content-type-options: nosniff
x-frame-options: DENY
x-xss-protection: 1; mode=block
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=0RctWD7FwiM%2FP9IE9tBn7I7G%2BL7UtosJJ2U5izyxx2T0gegX%2BThqdjuUqbj03QwpQKVwBM%2BhqfmQLoHGQEIp6msB7kEv72Ig9KtSID8vKaKSbr8%2F7f%2FhNFf6q243t%2BhRM%2F1vdfvBh8eKbomf1%2FvSIjqn"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| api.rename-service0.workers.dev/gilroy/gilroy-regular.otf | 104.21.77.153 | 404 Not Found | 1.2 kB |
URL GET HTTP/3api.rename-service0.workers.dev/gilroy/gilroy-regular.otf IP104.21.77.153:443
Requested byhttps://dry-scene-66f4.so3yeui8.workers.dev/949baffc-6213-402a-a36f-738a10a2d9b7 CertificateIssuerGoogle Trust Services LLC Subjectrename-service0.workers.dev Fingerprint33:B8:55:53:AE:40:EB:24:F0:4B:06:18:A1:12:3D:6C:7E:C3:AD:9C ValiditySat, 06 Apr 2024 11:19:00 GMT - Fri, 05 Jul 2024 11:18:59 GMT
File typeHTML document, ASCII text Hash2651ace67d355424b9fab1835e9e4999 9cb906ac8673baae3c257119aba1748925b5ff9c adb3f83748bb48498ab46c1c2d8e88ca9e982e5412231beef5a5a80bd045d1e0
GET /gilroy/gilroy-regular.otf HTTP/1.1
Host: api.rename-service0.workers.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://dry-scene-66f4.so3yeui8.workers.dev
DNT: 1
Connection: keep-alive
Referer: https://api.rename-service0.workers.dev/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 404 Not Found
date: Sat, 20 Apr 2024 05:39:05 GMT
content-length: 1228
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=vqnlvDK6iRtFZbGdXoIjhyquQCJVV6PFLMfRzNrxqcypPRGM6tIYZjbVIh7coM9CZ9bh4LNxl9eY%2BHiCUNYISQSwf0qRQKN52zFgJ5M0rpU3PA66QjRWNLwnF3kPWWa9K7HAWtKL7vMjI842RZsmuld7"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8772cab81f63b512-OSL
alt-svc: h3=":443"; ma=86400
|
|
| api.rename-service0.workers.dev/166.css | 104.21.77.153 | 200 OK | 735 B |
URL GET HTTP/3api.rename-service0.workers.dev/166.css IP104.21.77.153:443
Requested byhttps://dry-scene-66f4.so3yeui8.workers.dev/949baffc-6213-402a-a36f-738a10a2d9b7 CertificateIssuerGoogle Trust Services LLC Subjectrename-service0.workers.dev Fingerprint33:B8:55:53:AE:40:EB:24:F0:4B:06:18:A1:12:3D:6C:7E:C3:AD:9C ValiditySat, 06 Apr 2024 11:19:00 GMT - Fri, 05 Jul 2024 11:18:59 GMT
File typeASCII text, with very long lines (362) Hash803e560fb4cbf4cfb2ac3e0ab8231b9a 77ff7da2d5218e988deaa4abb14c38f749f2ed7b 0c98d3a9b8c08a5813b773e49994d1ada4cb43a72f655c71b8efa33dbacc3f60
GET /166.css HTTP/1.1
Host: api.rename-service0.workers.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 20 Apr 2024 05:39:05 GMT
content-type: text/css; charset=utf-8
cf-ray: 8772cab6aeefb4fd-OSL
cf-cache-status: HIT
age: 106375
etag: W/"166.32916c6d57.css"
vary: Accept-Encoding
feature-policy: none
referrer-policy: unsafe-url
x-content-type-options: nosniff
x-frame-options: DENY
x-xss-protection: 1; mode=block
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=3SZPV9%2BY1Vfks3ZCdegkHry00HuR1Tm%2Fq8J6%2B104JY%2FJlqDnbYj7CBPi%2Fts8AaNWj6a38KtPHCFl1OO1rS9p25XFueWyDvOkDmH8MbUZH3xXM94ap3jQYjUTsTuixt0rVE7y1lg0GbRcE4GWJUPaxIQ2"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| api.rename-service0.workers.dev/redesign_fonts.css | 104.21.77.153 | 200 OK | 8.0 kB |
URL GET HTTP/3api.rename-service0.workers.dev/redesign_fonts.css IP104.21.77.153:443
Requested byhttps://dry-scene-66f4.so3yeui8.workers.dev/949baffc-6213-402a-a36f-738a10a2d9b7 CertificateIssuerGoogle Trust Services LLC Subjectrename-service0.workers.dev Fingerprint33:B8:55:53:AE:40:EB:24:F0:4B:06:18:A1:12:3D:6C:7E:C3:AD:9C ValiditySat, 06 Apr 2024 11:19:00 GMT - Fri, 05 Jul 2024 11:18:59 GMT
File typeUnicode text, UTF-8 (with BOM) text, with CRLF line terminators Hashfb81920416c241f372d5839e2e11752d 76a251998f68fd99d33dc6201bca5420f219290c 893a1ab0f87c9a1228962d05e95d9a8a48addd6f61a08f9a22381b4f4d73a895
GET /redesign_fonts.css HTTP/1.1
Host: api.rename-service0.workers.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 20 Apr 2024 05:39:05 GMT
content-type: text/css; charset=utf-8
cf-ray: 8772cab6aee9b4fd-OSL
cf-cache-status: HIT
age: 106375
etag: W/"redesign_fonts.ab1e65f9f5.css"
vary: Accept-Encoding
feature-policy: none
referrer-policy: unsafe-url
x-content-type-options: nosniff
x-frame-options: DENY
x-xss-protection: 1; mode=block
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=BvJuuY7uSTjkBjBtdZKJbeBmE04d10eU%2FBZCgox4trPlkiORnDc9DP%2F5mnZKAEZNpdGLBdZZSjjFAP7KjZwHvjJCMZxnfUugyWRNu%2FQmnFLWbrXmp%2BdKCuKHpSR6%2BigDDLMA2trnSMd32w7vY6oyAg%2Bf"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| api.rename-service0.workers.dev/css?family=PT+Sans:700 | 104.21.77.153 | 200 OK | 11 kB |
URL GET HTTP/3api.rename-service0.workers.dev/css?family=PT+Sans:700 IP104.21.77.153:443
Requested byhttps://dry-scene-66f4.so3yeui8.workers.dev/949baffc-6213-402a-a36f-738a10a2d9b7 CertificateIssuerGoogle Trust Services LLC Subjectrename-service0.workers.dev Fingerprint33:B8:55:53:AE:40:EB:24:F0:4B:06:18:A1:12:3D:6C:7E:C3:AD:9C ValiditySat, 06 Apr 2024 11:19:00 GMT - Fri, 05 Jul 2024 11:18:59 GMT
Hashb6408c4ef1ce9985e3f1ca425d012c8a 910a351a7400ccf2d8d2969e74588b525e3f505d eb39af57479f04518b464a917a20921f9f25739ec733cba0e5f1d5b7315a4a57
GET /css?family=PT+Sans:700 HTTP/1.1
Host: api.rename-service0.workers.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 20 Apr 2024 05:39:05 GMT
content-type: text/css; charset=utf-8
cf-ray: 8772cab6aee0b4fd-OSL
cf-cache-status: HIT
age: 106375
etag: W/"css.1da7928062"
vary: Accept-Encoding
feature-policy: none
referrer-policy: unsafe-url
x-content-type-options: nosniff
x-frame-options: DENY
x-xss-protection: 1; mode=block
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=8VFv7%2BXqqbinwoGauAZJVOpHHdinXHegLPNPNQg18KGOgUXuDJqYkHnFTSqpgn%2BMRhx79zatbmi2pFmkgePBghc%2FZETnIsCYUjxh0q3szEkjo4QjtyS66Lg4A1RKkzfV2p37UQgiaVBSn698SztM9cxD"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| api.rename-service0.workers.dev/font-1.2.css | 104.21.77.153 | 200 OK | 12 kB |
URL GET HTTP/3api.rename-service0.workers.dev/font-1.2.css IP104.21.77.153:443
Requested byhttps://dry-scene-66f4.so3yeui8.workers.dev/949baffc-6213-402a-a36f-738a10a2d9b7 CertificateIssuerGoogle Trust Services LLC Subjectrename-service0.workers.dev Fingerprint33:B8:55:53:AE:40:EB:24:F0:4B:06:18:A1:12:3D:6C:7E:C3:AD:9C ValiditySat, 06 Apr 2024 11:19:00 GMT - Fri, 05 Jul 2024 11:18:59 GMT
File typeASCII text, with very long lines (313), with CRLF line terminators Hashc0c9a963976f8edd2333adb7aeba416b 9372b43e9df2a3a56d6a3548ac9fab4c750a3569 2cdc08c78d317a7163dcdd852e85319c477d5272897a250d28e562f699f9d6e4
GET /font-1.2.css HTTP/1.1
Host: api.rename-service0.workers.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 20 Apr 2024 05:39:05 GMT
content-type: text/css; charset=utf-8
cf-ray: 8772cab6aee7b4fd-OSL
cf-cache-status: HIT
age: 106375
etag: W/"font-1.2.c193dd3ef6.css"
vary: Accept-Encoding
feature-policy: none
referrer-policy: unsafe-url
x-content-type-options: nosniff
x-frame-options: DENY
x-xss-protection: 1; mode=block
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ScHQXgAzErrEAzsAUwo7dIebFev%2FNrZ%2FqUcDBjC5eAvbZmUZUuU%2BOccXWDoDq7GkvHeVbs2ztYvS4mlLBeT3a5Nxog6k10%2BqWwHX6ZMx5ZSxuiVzMgZF4SqZcyoc5gJ5LklEfIey%2F81g8Dm4G%2BDLCx%2Fh"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| api.rename-service0.workers.dev/css?family=PT+Sans:400italic | 104.21.77.153 | 200 OK | 6.2 kB |
URL GET HTTP/3api.rename-service0.workers.dev/css?family=PT+Sans:400italic IP104.21.77.153:443
Requested byhttps://dry-scene-66f4.so3yeui8.workers.dev/949baffc-6213-402a-a36f-738a10a2d9b7 CertificateIssuerGoogle Trust Services LLC Subjectrename-service0.workers.dev Fingerprint33:B8:55:53:AE:40:EB:24:F0:4B:06:18:A1:12:3D:6C:7E:C3:AD:9C ValiditySat, 06 Apr 2024 11:19:00 GMT - Fri, 05 Jul 2024 11:18:59 GMT
Hashb6408c4ef1ce9985e3f1ca425d012c8a 910a351a7400ccf2d8d2969e74588b525e3f505d eb39af57479f04518b464a917a20921f9f25739ec733cba0e5f1d5b7315a4a57
GET /css?family=PT+Sans:400italic HTTP/1.1
Host: api.rename-service0.workers.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 20 Apr 2024 05:39:05 GMT
content-type: text/css; charset=utf-8
cf-ray: 8772cab6aee1b4fd-OSL
cf-cache-status: HIT
age: 106375
etag: W/"css.1da7928062"
vary: Accept-Encoding
feature-policy: none
referrer-policy: unsafe-url
x-content-type-options: nosniff
x-frame-options: DENY
x-xss-protection: 1; mode=block
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=BFmPN6ZyRYVNSVTloddaMdXBB7279tj6Ajo9ovvfmMoKEYqZ3CnzXe4KZpeTnCeT1z3tXsQMm6rYgElfgvDXex46GOcvZs9B9WghlybbOI37JtrEkc9p7qAAQsSbO%2F78rNsPb%2FGHwHIEj%2BctY4poziAp"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| api.rename-service0.workers.dev/otSDKStub.js | 104.21.77.153 | 200 OK | 12 kB |
URL GET HTTP/2api.rename-service0.workers.dev/otSDKStub.js IP104.21.77.153:443
Requested byhttps://dry-scene-66f4.so3yeui8.workers.dev/949baffc-6213-402a-a36f-738a10a2d9b7 CertificateIssuerGoogle Trust Services LLC Subjectrename-service0.workers.dev Fingerprint33:B8:55:53:AE:40:EB:24:F0:4B:06:18:A1:12:3D:6C:7E:C3:AD:9C ValiditySat, 06 Apr 2024 11:19:00 GMT - Fri, 05 Jul 2024 11:18:59 GMT
File typeJavaScript source, ASCII text, with very long lines (19050) Hash9bd02f97086983b13a1ba0f2ace23a34 b7da87ca35222ded535d85d1a2d8ed33c734f2c3 11b947e74a7ba8f1d433b84ab7a719799ec0662a9035a8b4a2ab4d7d1eb2d681
GET /otSDKStub.js HTTP/1.1
Host: api.rename-service0.workers.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 20 Apr 2024 05:39:05 GMT
content-type: application/javascript; charset=utf-8
cf-ray: 8772cab57fd1b51d-OSL
cf-cache-status: HIT
age: 106376
etag: W/"otSDKStub.3b2ba3d591.js"
vary: Accept-Encoding
feature-policy: none
referrer-policy: unsafe-url
x-content-type-options: nosniff
x-frame-options: DENY
x-xss-protection: 1; mode=block
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=UqZno8BRUskdJQH2tE6nj6uPgMiEwPw6bGUmHExcKf0WJawb7cZR29rr5sG3AkNfeOI5NS1AooTq0Wka4ffN%2F7rl02D37eUM51irA0z%2BwbhoWlKnsDj0OmldbFdb8mvho8QHy7fncnVzqkZbRCXRy991"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| api.rename-service0.workers.dev/css?family=PT+Sans:400 | 104.21.77.153 | 200 OK | 7.1 kB |
URL GET HTTP/3api.rename-service0.workers.dev/css?family=PT+Sans:400 IP104.21.77.153:443
Requested byhttps://dry-scene-66f4.so3yeui8.workers.dev/949baffc-6213-402a-a36f-738a10a2d9b7 CertificateIssuerGoogle Trust Services LLC Subjectrename-service0.workers.dev Fingerprint33:B8:55:53:AE:40:EB:24:F0:4B:06:18:A1:12:3D:6C:7E:C3:AD:9C ValiditySat, 06 Apr 2024 11:19:00 GMT - Fri, 05 Jul 2024 11:18:59 GMT
File typeASCII text, with very long lines (7246), with no line terminators Hash45239f251b1582f037d06660716ed308 a3251fb6285d5cfca557b73816b767ca150545fe 2bd38bdd2bba893c5e3d524f54171835f4057bafd37404a22196a835dc176ab0
GET /css?family=PT+Sans:400 HTTP/1.1
Host: api.rename-service0.workers.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 20 Apr 2024 05:39:05 GMT
content-type: text/css; charset=utf-8
cf-ray: 8772cab6aedfb4fd-OSL
cf-cache-status: HIT
age: 106375
etag: W/"css.1da7928062"
vary: Accept-Encoding
feature-policy: none
referrer-policy: unsafe-url
x-content-type-options: nosniff
x-frame-options: DENY
x-xss-protection: 1; mode=block
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=IJz%2FaEYznK1D3%2B4HyIMubtZyKPV11hIHRIXkl4JcNWlcaf%2B2XLY%2FccBD%2F4zD%2FKnK%2BuZTz7vRN51oyroNloPJ08JktLRtOme3DFF36YhDfJxa6Z7MFdebR9r0HlaaqcIEj2RN1686ikqWuu7JZj8r720t"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| api.rename-service0.workers.dev/gilroy/gilroy-regular.eot | 104.21.77.153 | 404 Not Found | 1.2 kB |
URL GET HTTP/3api.rename-service0.workers.dev/gilroy/gilroy-regular.eot IP104.21.77.153:443
Requested byhttps://dry-scene-66f4.so3yeui8.workers.dev/949baffc-6213-402a-a36f-738a10a2d9b7 CertificateIssuerGoogle Trust Services LLC Subjectrename-service0.workers.dev Fingerprint33:B8:55:53:AE:40:EB:24:F0:4B:06:18:A1:12:3D:6C:7E:C3:AD:9C ValiditySat, 06 Apr 2024 11:19:00 GMT - Fri, 05 Jul 2024 11:18:59 GMT
File typeHTML document, ASCII text, with very long lines (1290), with no line terminators Hash55966d309759509542991bf6e6526192 6ae5c73790071fa9c42b8d4fc727cee779ae26d5 99216285fddc263ab7fd61c80d3d1e9cab980e563487559606fa274c67a14fa6
GET /gilroy/gilroy-regular.eot HTTP/1.1
Host: api.rename-service0.workers.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://dry-scene-66f4.so3yeui8.workers.dev
DNT: 1
Connection: keep-alive
Referer: https://api.rename-service0.workers.dev/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 404 Not Found
date: Sat, 20 Apr 2024 05:39:05 GMT
content-length: 1228
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=X9whFl347wPUz5ipL%2F%2FehjuZwbMLdE91tdDfMzq7Hi9gNxbBJjzQpE%2F0rTfDYewpCcCTKDYYklvPXy4A%2BeCoR%2F6I4WbT%2FnMfNGuaGKwkHjt8LJrf575vYvP13mywhAzIntB2BnCmCmaadrR4sAeq398s"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8772cab79f34b512-OSL
alt-svc: h3=":443"; ma=86400
|
|
| api.rename-service0.workers.dev/base_external.css | 104.21.77.153 | 200 OK | 30 kB |
URL GET HTTP/3api.rename-service0.workers.dev/base_external.css IP104.21.77.153:443
Requested byhttps://dry-scene-66f4.so3yeui8.workers.dev/949baffc-6213-402a-a36f-738a10a2d9b7 CertificateIssuerGoogle Trust Services LLC Subjectrename-service0.workers.dev Fingerprint33:B8:55:53:AE:40:EB:24:F0:4B:06:18:A1:12:3D:6C:7E:C3:AD:9C ValiditySat, 06 Apr 2024 11:19:00 GMT - Fri, 05 Jul 2024 11:18:59 GMT
File typeASCII text, with very long lines (30269) Hashfada22ae6813bebe5f4e709d296a20b2 9b26b404c2dbe3b7136de5dd54b1c07d268a9db2 891410621746b2ff6d1e4830eb0d819521c9b01e9e213257fcd4d2f554ff1a61
GET /base_external.css HTTP/1.1
Host: api.rename-service0.workers.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 20 Apr 2024 05:39:05 GMT
content-type: text/css; charset=utf-8
cf-ray: 8772cab6aeecb4fd-OSL
cf-cache-status: HIT
age: 106375
etag: W/"base_external.4e102eeb51.css"
vary: Accept-Encoding
feature-policy: none
referrer-policy: unsafe-url
x-content-type-options: nosniff
x-frame-options: DENY
x-xss-protection: 1; mode=block
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2FSSzBHzy5nBJa3YYHz3Ua7xd97jPzYD8Y%2FaOUuX8Uzi8PwxQ2ipbepdSHBR9XFxo6A7Pm5zG%2Fi4HPsiK6HHebX%2FnZsTjMaxAN8VdHb9inJBOjk8tsC0ahkyiDU5sHoMhJC48wyC%2FBN8d2C2J30BxJykV"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| api.rename-service0.workers.dev/theme.css | 104.21.77.153 | 200 OK | 38 kB |
URL GET HTTP/3api.rename-service0.workers.dev/theme.css IP104.21.77.153:443
Requested byhttps://dry-scene-66f4.so3yeui8.workers.dev/949baffc-6213-402a-a36f-738a10a2d9b7 CertificateIssuerGoogle Trust Services LLC Subjectrename-service0.workers.dev Fingerprint33:B8:55:53:AE:40:EB:24:F0:4B:06:18:A1:12:3D:6C:7E:C3:AD:9C ValiditySat, 06 Apr 2024 11:19:00 GMT - Fri, 05 Jul 2024 11:18:59 GMT
File typeASCII text, with very long lines (545), with CRLF line terminators Hash162daeeb0799f271e39f242ba683fee8 669dbe3050c3cd6d9ce73ba57ab5a48500b44361 92023afd6feb8f5fe2ab0b2622ddae9e26d5027996df15fe0b33714c7f3dba37
GET /theme.css HTTP/1.1
Host: api.rename-service0.workers.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 20 Apr 2024 05:39:05 GMT
content-type: text/css; charset=utf-8
cf-cache-status: MISS
etag: W/"theme.5cf2c65f5e.css"
feature-policy: none
referrer-policy: unsafe-url
x-content-type-options: nosniff
x-frame-options: DENY
x-xss-protection: 1; mode=block
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=c4%2BiLl7YlV98GQIgvnay9i3%2BVz%2FNukFzlAz2144BQ9fIwo%2BOobg1rDIwrHhVRtxaxhahdhyy4yGUODQrUDUT3P73T5QL7IVWWYsOQ9pBhAsupQndGLGOMp2HvNK44GOGQjmOXOjZqNmpHEWOiHJKnKqJ"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8772cab6aef0b4fd-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| api.rename-service0.workers.dev/jquery-3.5.1.min.js | 104.21.77.153 | 200 OK | 90 kB |
URL GET HTTP/2api.rename-service0.workers.dev/jquery-3.5.1.min.js IP104.21.77.153:443
Requested byhttps://dry-scene-66f4.so3yeui8.workers.dev/949baffc-6213-402a-a36f-738a10a2d9b7 CertificateIssuerGoogle Trust Services LLC Subjectrename-service0.workers.dev Fingerprint33:B8:55:53:AE:40:EB:24:F0:4B:06:18:A1:12:3D:6C:7E:C3:AD:9C ValiditySat, 06 Apr 2024 11:19:00 GMT - Fri, 05 Jul 2024 11:18:59 GMT
File typeJavaScript source, ASCII text, with very long lines (65450), with CRLF line terminators Hashb61aa6e2d68d21b3546b5b418bf0e9c3 9c1398f0de4c869dacb1c9ab1a8cc327f5421ff7 f36844906ad2309877aae3121b87fb15b9e09803cb4c333adc7e1e35ac92e14b
GET /jquery-3.5.1.min.js HTTP/1.1
Host: api.rename-service0.workers.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 20 Apr 2024 05:39:05 GMT
content-type: application/javascript; charset=utf-8
cf-ray: 8772cab57fccb51d-OSL
cf-cache-status: HIT
age: 106376
etag: W/"jquery-3.5.1.min.76bb118f46.js"
vary: Accept-Encoding
feature-policy: none
referrer-policy: unsafe-url
x-content-type-options: nosniff
x-frame-options: DENY
x-xss-protection: 1; mode=block
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ILK%2BHLMV8i48FrNm0rqbxJaKokm6o37VR4eneGi7qgKY5u2vTW9OajZx8uXhyW0cf8eb%2B12H5M9MZDwdbC9urRHa7VXIwDNzKVfO%2BLNfv3lj7cApm6exjHJTITMafjS1zEewNj15Mg2yO%2BCTpIhKBX7l"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| api.rename-service0.workers.dev/css?family=PT+Sans:700italic | 104.21.77.153 | 200 OK | 7.1 kB |
URL GET HTTP/3api.rename-service0.workers.dev/css?family=PT+Sans:700italic IP104.21.77.153:443
Requested byhttps://dry-scene-66f4.so3yeui8.workers.dev/949baffc-6213-402a-a36f-738a10a2d9b7 CertificateIssuerGoogle Trust Services LLC Subjectrename-service0.workers.dev Fingerprint33:B8:55:53:AE:40:EB:24:F0:4B:06:18:A1:12:3D:6C:7E:C3:AD:9C ValiditySat, 06 Apr 2024 11:19:00 GMT - Fri, 05 Jul 2024 11:18:59 GMT
File typeASCII text, with very long lines (7246), with no line terminators Hash45239f251b1582f037d06660716ed308 a3251fb6285d5cfca557b73816b767ca150545fe 2bd38bdd2bba893c5e3d524f54171835f4057bafd37404a22196a835dc176ab0
GET /css?family=PT+Sans:700italic HTTP/1.1
Host: api.rename-service0.workers.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 20 Apr 2024 05:39:05 GMT
content-type: text/css; charset=utf-8
cf-ray: 8772cab6aee5b4fd-OSL
cf-cache-status: HIT
age: 106375
etag: W/"css.1da7928062"
vary: Accept-Encoding
feature-policy: none
referrer-policy: unsafe-url
x-content-type-options: nosniff
x-frame-options: DENY
x-xss-protection: 1; mode=block
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=xky0tsyyAWCOHglE5aIkIgp52FfvveXa1MaofuSktETV%2BEa2FXcunlceBbRvDJVHOUNA758JM%2BW346mXQETtePe7OSltINNCw5Twitk0JIC9Wj0S3PQFMW3weoOf2fTXeSJp0ZxIFIn7I8hvtNBL34ui"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| dry-scene-66f4.so3yeui8.workers.dev/949baffc-6213-402a-a36f-738a10a2d9b7 |  188.114.97.1 | 200 OK | 276 kB |
URL User Request GET HTTP/2dry-scene-66f4.so3yeui8.workers.dev/949baffc-6213-402a-a36f-738a10a2d9b7 IP188.114.97.1:443
CertificateIssuerGoogle Trust Services LLC Subjectso3yeui8.workers.dev Fingerprint71:05:63:F4:FB:92:42:40:4E:65:B3:1D:47:B8:11:9D:85:7B:8E:E9 ValidityFri, 05 Apr 2024 00:48:24 GMT - Thu, 04 Jul 2024 00:48:23 GMT
File typeJavaScript source, ASCII text, with very long lines (64861) Size276 kB (276517 bytes) Hash3319e2070b80cd74dd3c3e1476ee45b9 fc6a8ab9dafffb1b8084712aaa7c04facf3227a7 ae541ac10e3c2cade411fa2d0fbbe9679487b5bd1d32ea98113a2b60af3dd731
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | InterActiveCorp | | PhishTank | phishing | Other |
GET /949baffc-6213-402a-a36f-738a10a2d9b7 HTTP/1.1
Host: dry-scene-66f4.so3yeui8.workers.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 20 Apr 2024 05:39:04 GMT
content-type: text/html;charset=UTF-8
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=VX0I7%2FmCIlrBxZQnoIukc5Cv8TAtkpy9gJAosnwOiyBbMH24bK40wsCvcEOoWjrmGZDSl3%2F9AOeqXFfo7C2LzcxsP8A1HdF%2BI9LEC04AqJvyYYchy%2F2v3X0au2acaQ6NkcaVII0e7xpefF1WIUS%2B4RUy8DBDUg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8772cab25f06b500-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| dry-scene-66f4.so3yeui8.workers.dev/favicon.ico | 188.114.97.1 | 200 OK | 276 kB |
URL GET HTTP/3dry-scene-66f4.so3yeui8.workers.dev/favicon.ico IP188.114.97.1:443
Requested byhttps://dry-scene-66f4.so3yeui8.workers.dev/949baffc-6213-402a-a36f-738a10a2d9b7 CertificateIssuerGoogle Trust Services LLC Subjectso3yeui8.workers.dev Fingerprint71:05:63:F4:FB:92:42:40:4E:65:B3:1D:47:B8:11:9D:85:7B:8E:E9 ValidityFri, 05 Apr 2024 00:48:24 GMT - Thu, 04 Jul 2024 00:48:23 GMT
File typeJavaScript source, ASCII text, with very long lines (64861) Size276 kB (276517 bytes) Hash3319e2070b80cd74dd3c3e1476ee45b9 fc6a8ab9dafffb1b8084712aaa7c04facf3227a7 ae541ac10e3c2cade411fa2d0fbbe9679487b5bd1d32ea98113a2b60af3dd731
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | InterActiveCorp | | PhishTank | phishing | Other |
GET /favicon.ico HTTP/1.1
Host: dry-scene-66f4.so3yeui8.workers.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dry-scene-66f4.so3yeui8.workers.dev/949baffc-6213-402a-a36f-738a10a2d9b7
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 20 Apr 2024 05:39:05 GMT
content-type: text/html;charset=UTF-8
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=krmVAH877wjxed3aVI9aETeN6%2Fe6xp70aWQ7diAT6Gy5U9b3YGbYYjxyNyB3dzaVBWzlKrBLM3br5jDt4B4%2FByiebLWoWTl5AaQ0dpDgQ0hRkRrBxsnlR6ktZPcgCo2GCMIYhhRYzJXWkZt8TF8CxIt6doUyLQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8772cab44b5a0b02-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| imgs.rename-service0.workers.dev/782yfuiha4398.ico | 0.0.0.0 | | 0 B |
URL GET imgs.rename-service0.workers.dev/782yfuiha4398.ico IP0.0.0.0:0
Requested byhttps://dry-scene-66f4.so3yeui8.workers.dev/949baffc-6213-402a-a36f-738a10a2d9b7 CertificateIssuerGoogle Trust Services LLC Subjectrename-service0.workers.dev Fingerprint33:B8:55:53:AE:40:EB:24:F0:4B:06:18:A1:12:3D:6C:7E:C3:AD:9C ValiditySat, 06 Apr 2024 11:19:00 GMT - Fri, 05 Jul 2024 11:18:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /782yfuiha4398.ico HTTP/1.1
Host: imgs.rename-service0.workers.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 20 Apr 2024 05:39:05 GMT
content-type: image/vnd.microsoft.icon
cf-ray: 8772cab8a82ab4fd-OSL
cf-cache-status: HIT
age: 106375
etag: W/"782yfuiha4398.49f6f302d9.ico"
vary: Accept-Encoding
feature-policy: none
referrer-policy: unsafe-url
x-content-type-options: nosniff
x-frame-options: DENY
x-xss-protection: 1; mode=block
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ut%2Fbjl%2F8%2Bu8yv8V7%2BLiluqwdJsRrwPQuCWTG1l7Xpdgb%2FmOZ2g9OIjziZHfEBumkJ8H4BKiRyhPwgZJifjHwSqbhZ0L486630gKWsLgKDEXyGbGx%2Fkhi%2FxpgNkoiBE5Jmh7u8skrY3crM9DRK%2BRMrcIa4w%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| api.rename-service0.workers.dev/moment.min.js | 104.21.77.153 | 200 OK | 18 kB |
URL GET HTTP/2api.rename-service0.workers.dev/moment.min.js IP104.21.77.153:443
Requested byhttps://dry-scene-66f4.so3yeui8.workers.dev/949baffc-6213-402a-a36f-738a10a2d9b7 CertificateIssuerGoogle Trust Services LLC Subjectrename-service0.workers.dev Fingerprint33:B8:55:53:AE:40:EB:24:F0:4B:06:18:A1:12:3D:6C:7E:C3:AD:9C ValiditySat, 06 Apr 2024 11:19:00 GMT - Fri, 05 Jul 2024 11:18:59 GMT
File typeJavaScript source, ASCII text, with very long lines (17967), with CRLF line terminators Hash84d735d23a016342e3d247476caecfd2 ba0bf8f19793ef81b0a15b9a41a3463b0c6e6ed9 5a52005e60e92f39a0744fe733d45496ad3769634edbbbc74df1267f9639f522
GET /moment.min.js HTTP/1.1
Host: api.rename-service0.workers.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 20 Apr 2024 05:39:05 GMT
content-type: application/javascript; charset=utf-8
cf-ray: 8772cab57fd3b51d-OSL
cf-cache-status: HIT
age: 106376
etag: W/"moment.min.7f22d534a7.js"
vary: Accept-Encoding
feature-policy: none
referrer-policy: unsafe-url
x-content-type-options: nosniff
x-frame-options: DENY
x-xss-protection: 1; mode=block
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=VBKrQ7K6lwwrH0IouQcMbuJkOBV2uxAczxLwyfPtImu0UfLa1agcVLNEfziQXEUSMtFiFDUDAonRb68GmFGvn1%2FtSPgBVpmDcmIMaMwbd9bQexbjVGqm1TM%2BEwMLivjpULw6iIfa7q3IsBejBmu1KDye"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| api.rename-service0.workers.dev/otSDKStub.js/consent//.json | 104.21.77.153 | 404 Not Found | 1.2 kB |
URL GET HTTP/3api.rename-service0.workers.dev/otSDKStub.js/consent//.json IP104.21.77.153:443
Requested byhttps://dry-scene-66f4.so3yeui8.workers.dev/949baffc-6213-402a-a36f-738a10a2d9b7 CertificateIssuerGoogle Trust Services LLC Subjectrename-service0.workers.dev Fingerprint33:B8:55:53:AE:40:EB:24:F0:4B:06:18:A1:12:3D:6C:7E:C3:AD:9C ValiditySat, 06 Apr 2024 11:19:00 GMT - Fri, 05 Jul 2024 11:18:59 GMT
File typeHTML document, ASCII text, with very long lines (1290), with no line terminators Hash55966d309759509542991bf6e6526192 6ae5c73790071fa9c42b8d4fc727cee779ae26d5 99216285fddc263ab7fd61c80d3d1e9cab980e563487559606fa274c67a14fa6
GET /otSDKStub.js/consent//.json HTTP/1.1
Host: api.rename-service0.workers.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://dry-scene-66f4.so3yeui8.workers.dev
DNT: 1
Connection: keep-alive
Referer: https://dry-scene-66f4.so3yeui8.workers.dev/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 404 Not Found
date: Sat, 20 Apr 2024 05:39:05 GMT
content-length: 1228
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=vop98MY5746PoBTzfrt8BKO76VXxpwJfV9Ndd7QLa%2B6ootfS8O4ms6zlix6cep5S5ogJfgT7sHsL7csG78aHawm6ponXXbrVNYisSvAjaoG69kmh1YSGOmdJB0%2FoGOSc8HRX3AclEqUwqBQmuZLUFRW9"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8772cab6bec1b512-OSL
alt-svc: h3=":443"; ma=86400
|
|
0.0.0.0