| store.wulantilaar.com/cache/public/UwSmOb2nRbIhv0O9jntKdUj3rzv0Yy/c2NvdHRAdXJiYW5jb25zdHJ1Y3Rpb25sbGMuY29t | 178.32.67.58 | | 0 B |
URL store.wulantilaar.com/cache/public/UwSmOb2nRbIhv0O9jntKdUj3rzv0Yy/c2NvdHRAdXJiYW5jb25zdHJ1Y3Rpb25sbGMuY29t IP178.32.67.58:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer | Verdict | Alert | OpenPhish | phishing | Office365 |
GET /cache/public/UwSmOb2nRbIhv0O9jntKdUj3rzv0Yy/c2NvdHRAdXJiYW5jb25zdHJ1Y3Rpb25sbGMuY29t HTTP/1.1
Host: store.wulantilaar.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
x-powered-by: PHP/8.1.26
refresh: 0;url=https://pub-9cba10d444bf44eea4f1504b0b173c03.r2.dev/XSD34qjE4Myn%2526m%253Dilk.p0ypaGTJbLL%2526b%253DO4ECJ6p0xWACZ682uuprWTDWQLedDqjE4Myn%2526m%253Dilk.p0ypaGTJbLL%2526b%253DO4ECJ6p0xWACZ682DWQLedDqjE4Myn%2526m%253Dilk.p0ypaGTJbLL%2526b%253DO4ECJ6p0xWACZ682.html#scott@urbanconstructionllc.com
content-type: text/html; charset=UTF-8
content-length: 0
date: Wed, 24 Apr 2024 03:45:14 GMT
server: LiteSpeed
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2
|
|
| pub-9cba10d444bf44eea4f1504b0b173c03.r2.dev/XSD34qjE4Myn%2526m%253Dilk.p0ypaGTJbLL%2526b%253DO4ECJ6p0xWACZ682uuprWTDWQLedDqjE4Myn%2526m%253Dilk.p0ypaGTJbLL%2526b%253DO4ECJ6p0xWACZ682DWQLedDqjE4Myn%2526m%253Dilk.p0ypaGTJbLL%2526b%253DO4ECJ6p0xWACZ682.html | 104.18.3.35 | | 2.9 kB |
URL pub-9cba10d444bf44eea4f1504b0b173c03.r2.dev/XSD34qjE4Myn%2526m%253Dilk.p0ypaGTJbLL%2526b%253DO4ECJ6p0xWACZ682uuprWTDWQLedDqjE4Myn%2526m%253Dilk.p0ypaGTJbLL%2526b%253DO4ECJ6p0xWACZ682DWQLedDqjE4Myn%2526m%253Dilk.p0ypaGTJbLL%2526b%253DO4ECJ6p0xWACZ682.html IP104.18.3.35:0
File typeHTML document, ASCII text, with very long lines (696) Hash6b3f94f2aee2fdf9246b0b2f97d5ae7d ae8a4f472f3eda0054146d49b4fa862ce8f5c1c2 c4cb895d91a71c309cfaffb68299603c4d9950ff8999948a616fefdabdc7c4c7
GET /XSD34qjE4Myn%2526m%253Dilk.p0ypaGTJbLL%2526b%253DO4ECJ6p0xWACZ682uuprWTDWQLedDqjE4Myn%2526m%253Dilk.p0ypaGTJbLL%2526b%253DO4ECJ6p0xWACZ682DWQLedDqjE4Myn%2526m%253Dilk.p0ypaGTJbLL%2526b%253DO4ECJ6p0xWACZ682.html HTTP/1.1
Host: pub-9cba10d444bf44eea4f1504b0b173c03.r2.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 24 Apr 2024 03:45:16 GMT
Content-Type: text/html
Content-Length: 2875
Connection: keep-alive
Accept-Ranges: bytes
ETag: "6b3f94f2aee2fdf9246b0b2f97d5ae7d"
Last-Modified: Tue, 23 Apr 2024 18:03:24 GMT
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 8793197d784c56bf-OSL
|
|
| pub-9cba10d444bf44eea4f1504b0b173c03.r2.dev/favicon.ico | 104.18.3.35 | | 27 kB |
URL pub-9cba10d444bf44eea4f1504b0b173c03.r2.dev/favicon.ico IP104.18.3.35:0
File typeHTML document, ASCII text, with very long lines (611) Hashdf3d48946e8d3f5a83608308edbb4b86 47b9c40c97abf2658df96b1c06109324e15e1a00 570a6631252b8a52df4de0e953ae77dbdf524dfc3637cda2840494a0d2b49499
GET /favicon.ico HTTP/1.1
Host: pub-9cba10d444bf44eea4f1504b0b173c03.r2.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pub-9cba10d444bf44eea4f1504b0b173c03.r2.dev/XSD34qjE4Myn%2526m%253Dilk.p0ypaGTJbLL%2526b%253DO4ECJ6p0xWACZ682uuprWTDWQLedDqjE4Myn%2526m%253Dilk.p0ypaGTJbLL%2526b%253DO4ECJ6p0xWACZ682DWQLedDqjE4Myn%2526m%253Dilk.p0ypaGTJbLL%2526b%253DO4ECJ6p0xWACZ682.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Date: Wed, 24 Apr 2024 03:45:17 GMT
Content-Type: text/html
Content-Length: 27242
Connection: keep-alive
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 87931980e9ca56bf-OSL
|
|
| www.w3schools.com/w3css/4/w3.css | 192.229.133.221 | | 5.3 kB |
URL www.w3schools.com/w3css/4/w3.css IP192.229.133.221:0
File typeUnicode text, UTF-8 (with BOM) text Hashba0537e9574725096af97c27d7e54f76 bd46b47d74d344f435b5805114559d45979762d5 4a7611bc677873a0f87fe21727bc3a2a43f57a5ded3b10ce33a0f371a2e6030f
GET /w3css/4/w3.css HTTP/1.1
Host: www.w3schools.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pub-9cba10d444bf44eea4f1504b0b173c03.r2.dev/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-encoding: gzip
accept-ranges: bytes
age: 4546
cache-control: public,max-age=14400,public
content-security-policy: frame-ancestors 'self' https://mycourses.w3schools.com;
content-type: text/css
date: Wed, 24 Apr 2024 03:45:17 GMT
etag: "0d6fc18b794da1:0+gzip"
last-modified: Mon, 22 Apr 2024 13:15:08 GMT
server: ECS (ska/F716)
vary: Accept-Encoding
x-cache: HIT
x-content-security-policy: frame-ancestors 'self' https://mycourses.w3schools.com;
x-powered-by: ASP.NET
content-length: 5256
X-Firefox-Spdy: h2
|
|
| aadcdn.msftauth.net/shared/1.0/content/images/picker_verify_code_b41922ebdaebec16b19999fc6054a15a.svg | 152.199.23.37 | | 790 B |
URL aadcdn.msftauth.net/shared/1.0/content/images/picker_verify_code_b41922ebdaebec16b19999fc6054a15a.svg IP152.199.23.37:0
File typeSVG Scalable Vector Graphics image Hashf7ab697e65b83ce9870a4736085deeec 5ff40bff26b523fbbeaa5228a2aac63e44afaa90 cbb3706e65b35a43bdcfebd23b5479dc0542ca7e23197869b683d12b524472fe
GET /shared/1.0/content/images/picker_verify_code_b41922ebdaebec16b19999fc6054a15a.svg HTTP/1.1
Host: aadcdn.msftauth.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pub-9cba10d444bf44eea4f1504b0b173c03.r2.dev/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-encoding: gzip
accept-ranges: bytes
access-control-allow-origin: *
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
age: 2597112
cache-control: public, max-age=31536000
content-md5: 1jQlecEJaGhFO2st5KXLhg==
content-type: image/svg+xml
date: Wed, 24 Apr 2024 03:45:17 GMT
etag: 0x8DB5C3F4AC59B47
last-modified: Wed, 24 May 2023 10:11:51 GMT
server: ECAcc (ska/F6A9)
vary: Accept-Encoding
x-cache: HIT
x-ms-blob-type: BlockBlob
x-ms-lease-status: unlocked
x-ms-request-id: 2a281429-101e-0042-725a-7edf33000000
x-ms-version: 2009-09-19
content-length: 790
X-Firefox-Spdy: h2
|
|
| aadcdn.msauth.net/shared/1.0/content/images/backgrounds/2_11d9e3bcdfede9ce5ce5ace2d129f1c4.svg | 13.107.246.53 | | 673 B |
URL aadcdn.msauth.net/shared/1.0/content/images/backgrounds/2_11d9e3bcdfede9ce5ce5ace2d129f1c4.svg IP13.107.246.53:0 ASN#8075 MICROSOFT-CORP-MSN-AS-BLOCK
File typeSVG Scalable Vector Graphics image Hashbc3d32a696895f78c19df6c717586a5d 9191cb156a30a3ed79c44c0a16c95159e8ff689d 0e88b6fcbb8591edfd28184fa70a04b6dd3af8a14367c628edd7caba32e58c68
GET /shared/1.0/content/images/backgrounds/2_11d9e3bcdfede9ce5ce5ace2d129f1c4.svg HTTP/1.1
Host: aadcdn.msauth.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pub-9cba10d444bf44eea4f1504b0b173c03.r2.dev/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 24 Apr 2024 03:45:17 GMT
content-type: image/svg+xml
content-length: 673
cache-control: public, max-age=31536000
content-encoding: gzip
last-modified: Wed, 24 May 2023 10:11:46 GMT
etag: 0x8DB5C3F47E260FD
x-ms-request-id: fa3c3c5e-f01e-0009-491a-95968d000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
access-control-allow-origin: *
x-azure-ref: 20240424T034517Z-16c4f695cc5w955zqcuzdz90ms0000000100000000001nx7
x-fd-int-roxy-purgeid: 4554691
x-cache: TCP_HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| aadcdn.msauth.net/shared/1.0/content/images/picker_verify_sms_12b7d768ba76f2e782cc74e328171091.svg | 13.107.246.53 | 200 OK | 199 B |
URL GET HTTP/2aadcdn.msauth.net/shared/1.0/content/images/picker_verify_sms_12b7d768ba76f2e782cc74e328171091.svg IP13.107.246.53:443 ASN#8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested byhttps://pub-9cba10d444bf44eea4f1504b0b173c03.r2.dev/XSD34qjE4Myn%2526m%253Dilk.p0ypaGTJbLL%2526b%253DO4ECJ6p0xWACZ682uuprWTDWQLedDqjE4Myn%2526m%253Dilk.p0ypaGTJbLL%2526b%253DO4ECJ6p0xWACZ682DWQLedDqjE4Myn%2526m%253Dilk.p0ypaGTJbLL%2526b%253DO4ECJ6p0xWACZ682.html#scott@urbanconstructionllc.com CertificateIssuerDigiCert Inc Subjectaadcdn.msauth.net FingerprintEB:7C:D1:4E:EF:B5:D4:72:25:0B:1A:AF:5F:10:3D:EA:13:80:5A:47 ValidityMon, 29 Jan 2024 00:00:00 GMT - Wed, 29 Jan 2025 23:59:59 GMT
File typeSVG Scalable Vector Graphics image Hash27a6d18b56f46818420e60a773c36d4e 346ec247500fddc51cc1d85b8f4b9a343f7a48d3 8ed8f3acb9b87f99e42c74463d4e2be96ee85b8a87cd6eb874295ace420a5904
GET /shared/1.0/content/images/picker_verify_sms_12b7d768ba76f2e782cc74e328171091.svg HTTP/1.1
Host: aadcdn.msauth.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pub-9cba10d444bf44eea4f1504b0b173c03.r2.dev/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 24 Apr 2024 03:45:17 GMT
content-type: image/svg+xml
content-length: 199
cache-control: public, max-age=31536000
content-encoding: gzip
last-modified: Wed, 24 May 2023 10:11:49 GMT
etag: 0x8DB5C3F49C21D98
x-ms-request-id: 72dbe48e-a01e-0050-4370-9386ad000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
access-control-allow-origin: *
x-azure-ref: 20240424T034517Z-16c4f695cc5w955zqcuzdz90ms0000000100000000001nx9
x-fd-int-roxy-purgeid: 4554691
x-cache: TCP_HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| logincdn.msauth.net/shared/1.0/content/images/arrow_left_a9cc2824ef3517b6c4160dcf8ff7d410.svg | 13.107.246.53 | | 276 B |
URL logincdn.msauth.net/shared/1.0/content/images/arrow_left_a9cc2824ef3517b6c4160dcf8ff7d410.svg IP13.107.246.53:0 ASN#8075 MICROSOFT-CORP-MSN-AS-BLOCK
File typeSVG Scalable Vector Graphics image Hasha9cc2824ef3517b6c4160dcf8ff7d410 8db9aebad84ca6e4225bfdd2458ff3821cc4f064 34f9db946e89f031a80dfca7b16b2b686469c9886441261ae70a44da1dfa2d58
GET /shared/1.0/content/images/arrow_left_a9cc2824ef3517b6c4160dcf8ff7d410.svg HTTP/1.1
Host: logincdn.msauth.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pub-9cba10d444bf44eea4f1504b0b173c03.r2.dev/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 24 Apr 2024 03:45:17 GMT
content-type: image/svg+xml
content-length: 276
cache-control: public, max-age=31536000
content-encoding: gzip
last-modified: Wed, 22 Jan 2020 00:38:00 GMT
etag: 0x8D79ED35591CF44
x-ms-request-id: d42dd95b-201e-0074-14bf-94bb96000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
access-control-allow-origin: *
x-azure-ref: 20240424T034517Z-16c4f695cc5rfvs2nkzu5z9xsc00000001z0000000001mvr
x-fd-int-roxy-purgeid: 67912908
x-cache: TCP_HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| aadcdn.msauth.net/shared/1.0/content/images/picker_verify_fluent_authenticator_59892f1e05e3adf9fd2f71b42d92a27f.svg | 13.107.246.53 | 200 OK | 2.4 kB |
URL GET HTTP/2aadcdn.msauth.net/shared/1.0/content/images/picker_verify_fluent_authenticator_59892f1e05e3adf9fd2f71b42d92a27f.svg IP13.107.246.53:443 ASN#8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested byhttps://pub-9cba10d444bf44eea4f1504b0b173c03.r2.dev/XSD34qjE4Myn%2526m%253Dilk.p0ypaGTJbLL%2526b%253DO4ECJ6p0xWACZ682uuprWTDWQLedDqjE4Myn%2526m%253Dilk.p0ypaGTJbLL%2526b%253DO4ECJ6p0xWACZ682DWQLedDqjE4Myn%2526m%253Dilk.p0ypaGTJbLL%2526b%253DO4ECJ6p0xWACZ682.html#scott@urbanconstructionllc.com CertificateIssuerDigiCert Inc Subjectaadcdn.msauth.net FingerprintEB:7C:D1:4E:EF:B5:D4:72:25:0B:1A:AF:5F:10:3D:EA:13:80:5A:47 ValidityMon, 29 Jan 2024 00:00:00 GMT - Wed, 29 Jan 2025 23:59:59 GMT
File typeSVG Scalable Vector Graphics image Hashb59c16ca9bf156438a8a96d45e33db64 4e51b7d3477414b220f688adabd76d3ae6472ee3 a7ee799dd5b6f6dbb70b043b766362a6724e71458f9839306c995f06b218c2f8
GET /shared/1.0/content/images/picker_verify_fluent_authenticator_59892f1e05e3adf9fd2f71b42d92a27f.svg HTTP/1.1
Host: aadcdn.msauth.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pub-9cba10d444bf44eea4f1504b0b173c03.r2.dev/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 24 Apr 2024 03:45:17 GMT
content-type: image/svg+xml
content-length: 2407
cache-control: public, max-age=31536000
content-encoding: gzip
last-modified: Wed, 24 May 2023 10:11:49 GMT
etag: 0x8DB5C3F499A9B99
x-ms-request-id: b4f6ee7d-a01e-007c-7c1b-95e387000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
access-control-allow-origin: *
x-azure-ref: 20240424T034517Z-16c4f695cc5w955zqcuzdz90ms0000000100000000001nx8
x-fd-int-roxy-purgeid: 4554691
x-cache: TCP_HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| aadcdn.msauth.net/shared/1.0/content/images/microsoft_logo_564db913a7fa0ca42727161c6d031bef.svg | 13.107.246.53 | | 1.4 kB |
URL aadcdn.msauth.net/shared/1.0/content/images/microsoft_logo_564db913a7fa0ca42727161c6d031bef.svg IP13.107.246.53:0 ASN#8075 MICROSOFT-CORP-MSN-AS-BLOCK
File typeSVG Scalable Vector Graphics image Hashee5c8d9fb6248c938fd0dc19370e90bd d01a22720918b781338b5bbf9202b241a5f99ee4 04d29248ee3a13a074518c93a18d6efc491bf1f298f9b87fc989a6ae4b9fad7a
GET /shared/1.0/content/images/microsoft_logo_564db913a7fa0ca42727161c6d031bef.svg HTTP/1.1
Host: aadcdn.msauth.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pub-9cba10d444bf44eea4f1504b0b173c03.r2.dev/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 24 Apr 2024 03:45:17 GMT
content-type: image/svg+xml
content-length: 1435
cache-control: public, max-age=31536000
content-encoding: gzip
last-modified: Wed, 24 May 2023 10:11:48 GMT
etag: 0x8DB5C3F4911527F
x-ms-request-id: 85f7f2fe-901e-0067-181a-9576b2000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
access-control-allow-origin: *
x-azure-ref: 20240424T034517Z-16c4f695cc5w955zqcuzdz90ms0000000100000000001nxa
x-fd-int-roxy-purgeid: 4554691
x-cache: TCP_HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| www.gstatic.com/recaptcha/api2/logo_48.png | 142.250.74.35 | 200 OK | 2.2 kB |
URL GET HTTP/2www.gstatic.com/recaptcha/api2/logo_48.png IP142.250.74.35:443
Requested byhttps://pub-9cba10d444bf44eea4f1504b0b173c03.r2.dev/XSD34qjE4Myn%2526m%253Dilk.p0ypaGTJbLL%2526b%253DO4ECJ6p0xWACZ682uuprWTDWQLedDqjE4Myn%2526m%253Dilk.p0ypaGTJbLL%2526b%253DO4ECJ6p0xWACZ682DWQLedDqjE4Myn%2526m%253Dilk.p0ypaGTJbLL%2526b%253DO4ECJ6p0xWACZ682.html#scott@urbanconstructionllc.com CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com FingerprintF5:5C:D9:68:C6:5F:A3:33:5A:73:C3:79:B6:83:FE:44:2E:A4:83:74 ValidityMon, 18 Mar 2024 20:34:25 GMT - Mon, 10 Jun 2024 20:34:24 GMT
File typePNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced Hashef9941290c50cd3866e2ba6b793f010d 4736508c795667dcea21f8d864233031223b7832 1b9efb22c938500971aac2b2130a475fa23684dd69e43103894968df83145b8a
GET /recaptcha/api2/logo_48.png HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pub-9cba10d444bf44eea4f1504b0b173c03.r2.dev/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 2228
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 18 Apr 2024 02:54:07 GMT
expires: Thu, 25 Apr 2024 02:54:07 GMT
cache-control: public, max-age=604800
age: 521471
last-modified: Tue, 03 Mar 2020 20:15:00 GMT
content-type: image/png
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| twomancake.com/socket.io/?EIO=4&transport=polling&t=OyEDKJM | 188.114.96.1 | 204 No Content | 0 B |
URL OPTIONS HTTP/3twomancake.com/socket.io/?EIO=4&transport=polling&t=OyEDKJM IP188.114.96.1:443
Requested byhttps://pub-9cba10d444bf44eea4f1504b0b173c03.r2.dev/XSD34qjE4Myn%2526m%253Dilk.p0ypaGTJbLL%2526b%253DO4ECJ6p0xWACZ682uuprWTDWQLedDqjE4Myn%2526m%253Dilk.p0ypaGTJbLL%2526b%253DO4ECJ6p0xWACZ682DWQLedDqjE4Myn%2526m%253Dilk.p0ypaGTJbLL%2526b%253DO4ECJ6p0xWACZ682.html#scott@urbanconstructionllc.com CertificateIssuerLet's Encrypt Subjecttwomancake.com FingerprintAF:27:60:8A:CD:A9:93:0A:E2:7C:B9:F0:B3:9B:B4:E4:C1:DD:3D:1C ValidityTue, 09 Apr 2024 04:59:30 GMT - Mon, 08 Jul 2024 04:59:29 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /socket.io/?EIO=4&transport=polling&t=OyEDKJM HTTP/1.1
Host: twomancake.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: auth_uid,session_email
Referer: https://pub-9cba10d444bf44eea4f1504b0b173c03.r2.dev/
Origin: https://pub-9cba10d444bf44eea4f1504b0b173c03.r2.dev
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 204 No Content
date: Wed, 24 Apr 2024 03:45:23 GMT
content-length: 0
access-control-allow-origin: *
access-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE
vary: Access-Control-Request-Headers
access-control-allow-headers: auth_uid,session_email
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=qOHHGJAY2fCawij4XOeaVhFjp4QmGvjNlSI3OEPHw%2F8IyGk638M0CJvFkNr6IyPHbs%2FCYRyRfusu5rmDmFyQ9ju45XBYWlqmgDRoy6k5zyc%2B9di6Hs4rAOl8fV0CWqTqfQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 879319a7ea670b3d-OSL
alt-svc: h3=":443"; ma=86400
|
|
| twomancake.com/socket.io/?EIO=4&transport=polling&t=OyEDKL_ | 188.114.96.1 | 200 OK | 0 B |
URL GET HTTP/3twomancake.com/socket.io/?EIO=4&transport=polling&t=OyEDKL_ IP188.114.96.1:443
Requested byhttps://pub-9cba10d444bf44eea4f1504b0b173c03.r2.dev/XSD34qjE4Myn%2526m%253Dilk.p0ypaGTJbLL%2526b%253DO4ECJ6p0xWACZ682uuprWTDWQLedDqjE4Myn%2526m%253Dilk.p0ypaGTJbLL%2526b%253DO4ECJ6p0xWACZ682DWQLedDqjE4Myn%2526m%253Dilk.p0ypaGTJbLL%2526b%253DO4ECJ6p0xWACZ682.html#scott@urbanconstructionllc.com CertificateIssuerLet's Encrypt Subjecttwomancake.com FingerprintAF:27:60:8A:CD:A9:93:0A:E2:7C:B9:F0:B3:9B:B4:E4:C1:DD:3D:1C ValidityTue, 09 Apr 2024 04:59:30 GMT - Mon, 08 Jul 2024 04:59:29 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /socket.io/?EIO=4&transport=polling&t=OyEDKL_ HTTP/1.1
Host: twomancake.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: auth_uid,session_email
Referer: https://pub-9cba10d444bf44eea4f1504b0b173c03.r2.dev/
Origin: https://pub-9cba10d444bf44eea4f1504b0b173c03.r2.dev
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 204 No Content
date: Wed, 24 Apr 2024 03:45:23 GMT
content-length: 0
access-control-allow-origin: *
access-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE
vary: Access-Control-Request-Headers
access-control-allow-headers: auth_uid,session_email
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=kqMFHUxyazC%2BMF%2BuUnPxLi9qRZPcna%2Bpp%2BO6j0LvqZmmgLJ4vphQ97fgiCJbFXHyhaLaEsHO9m9th48eYINSdvH4B6vqAsQTYgBs6X4yI6ylJqHvFvp%2BQnJUOBfkKs3j3Q%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 879319a8da920b3d-OSL
alt-svc: h3=":443"; ma=86400
|
|
| twomancake.com/socket.io/?EIO=4&transport=polling&t=OyEDKQ5&sid=Vl8M7foIms5d_p8_ABiW | 188.114.96.1 | 200 OK | 0 B |
URL POST HTTP/3twomancake.com/socket.io/?EIO=4&transport=polling&t=OyEDKQ5&sid=Vl8M7foIms5d_p8_ABiW IP188.114.96.1:443
Requested byhttps://pub-9cba10d444bf44eea4f1504b0b173c03.r2.dev/XSD34qjE4Myn%2526m%253Dilk.p0ypaGTJbLL%2526b%253DO4ECJ6p0xWACZ682uuprWTDWQLedDqjE4Myn%2526m%253Dilk.p0ypaGTJbLL%2526b%253DO4ECJ6p0xWACZ682DWQLedDqjE4Myn%2526m%253Dilk.p0ypaGTJbLL%2526b%253DO4ECJ6p0xWACZ682.html#scott@urbanconstructionllc.com CertificateIssuerLet's Encrypt Subjecttwomancake.com FingerprintAF:27:60:8A:CD:A9:93:0A:E2:7C:B9:F0:B3:9B:B4:E4:C1:DD:3D:1C ValidityTue, 09 Apr 2024 04:59:30 GMT - Mon, 08 Jul 2024 04:59:29 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /socket.io/?EIO=4&transport=polling&t=OyEDKQ5&sid=Vl8M7foIms5d_p8_ABiW HTTP/1.1
Host: twomancake.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: auth_uid,session_email
Referer: https://pub-9cba10d444bf44eea4f1504b0b173c03.r2.dev/
Origin: https://pub-9cba10d444bf44eea4f1504b0b173c03.r2.dev
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 204 No Content
date: Wed, 24 Apr 2024 03:45:23 GMT
content-length: 0
access-control-allow-origin: *
access-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE
vary: Access-Control-Request-Headers
access-control-allow-headers: auth_uid,session_email
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=6ioWqYmcmbBcH3iF7dgyb2Cx43VnSLtQL%2FxwzD6rfy1W98935DQstzv6nN2QKsjgGXV1MUEhqTKYyxEvX2xkBIvJdmN621EzT1egZTHFAsspxwPEZx6mv7lcVsYvLT9iUA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 879319aa7adc0b3d-OSL
alt-svc: h3=":443"; ma=86400
|
|
| twomancake.com/socket.io/?EIO=4&transport=polling&t=OyEDKQ8&sid=Vl8M7foIms5d_p8_ABiW | 188.114.96.1 | 200 OK | 0 B |
URL GET HTTP/3twomancake.com/socket.io/?EIO=4&transport=polling&t=OyEDKQ8&sid=Vl8M7foIms5d_p8_ABiW IP188.114.96.1:443
Requested byhttps://pub-9cba10d444bf44eea4f1504b0b173c03.r2.dev/XSD34qjE4Myn%2526m%253Dilk.p0ypaGTJbLL%2526b%253DO4ECJ6p0xWACZ682uuprWTDWQLedDqjE4Myn%2526m%253Dilk.p0ypaGTJbLL%2526b%253DO4ECJ6p0xWACZ682DWQLedDqjE4Myn%2526m%253Dilk.p0ypaGTJbLL%2526b%253DO4ECJ6p0xWACZ682.html#scott@urbanconstructionllc.com CertificateIssuerLet's Encrypt Subjecttwomancake.com FingerprintAF:27:60:8A:CD:A9:93:0A:E2:7C:B9:F0:B3:9B:B4:E4:C1:DD:3D:1C ValidityTue, 09 Apr 2024 04:59:30 GMT - Mon, 08 Jul 2024 04:59:29 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /socket.io/?EIO=4&transport=polling&t=OyEDKQ8&sid=Vl8M7foIms5d_p8_ABiW HTTP/1.1
Host: twomancake.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: auth_uid,session_email
Referer: https://pub-9cba10d444bf44eea4f1504b0b173c03.r2.dev/
Origin: https://pub-9cba10d444bf44eea4f1504b0b173c03.r2.dev
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 204 No Content
date: Wed, 24 Apr 2024 03:45:23 GMT
content-length: 0
access-control-allow-origin: *
access-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE
vary: Access-Control-Request-Headers
access-control-allow-headers: auth_uid,session_email
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2FXET4HHFoG8Pwx65j6S6h%2BVFtXFcWuegdBHo%2FTvQ6JfqhpumcfGYZootzHOPWBoow4b4Zq2CuRP45BtIHQiwh6kYIeTPq5J9vI%2F%2FBahnFw4BaJDdtK4UqXqkcXsS58AEiw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 879319aa7ae60b3d-OSL
alt-svc: h3=":443"; ma=86400
|
|
| twomancake.com/socket.io/?EIO=4&transport=websocket&sid=Vl8M7foIms5d_p8_ABiW | 188.114.96.1 | | 0 B |
URL twomancake.com/socket.io/?EIO=4&transport=websocket&sid=Vl8M7foIms5d_p8_ABiW IP188.114.96.1:0
CertificateIssuerLet's Encrypt Subjecttwomancake.com FingerprintAF:27:60:8A:CD:A9:93:0A:E2:7C:B9:F0:B3:9B:B4:E4:C1:DD:3D:1C ValidityTue, 09 Apr 2024 04:59:30 GMT - Mon, 08 Jul 2024 04:59:29 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /socket.io/?EIO=4&transport=websocket&sid=Vl8M7foIms5d_p8_ABiW HTTP/1.1
Host: twomancake.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: https://pub-9cba10d444bf44eea4f1504b0b173c03.r2.dev
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: aMldMm4HpiQdZcRBj4Wa0w==
DNT: 1
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Date: Wed, 24 Apr 2024 03:45:23 GMT
Connection: upgrade
Upgrade: websocket
Sec-WebSocket-Accept: WK9iXfcI7Mk7W6ro6Xt5fmHm1uc=
Access-Control-Allow-Origin: *
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=suUj1fsEdqNUyTFEnuYWbaL8G82IfTj%2FprVbTx9ToScfC0lTtEXcfZ%2B5G7kc6le7ydFEeOIXJfvq6YjWYIQNRjJkhXmakB%2FDK7a3BKHFbR4tpk6lDwup1uwL4QLO8NEz4A%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 879319aab832b518-OSL
alt-svc: h3=":443"; ma=86400
|
|
| twomancake.com/socket.io/?EIO=4&transport=polling&t=OyEDKUl&sid=yC1xal7GbcweV_kOABiY | 188.114.96.1 | | 0 B |
URL twomancake.com/socket.io/?EIO=4&transport=polling&t=OyEDKUl&sid=yC1xal7GbcweV_kOABiY IP188.114.96.1:0
CertificateIssuerLet's Encrypt Subjecttwomancake.com FingerprintAF:27:60:8A:CD:A9:93:0A:E2:7C:B9:F0:B3:9B:B4:E4:C1:DD:3D:1C ValidityTue, 09 Apr 2024 04:59:30 GMT - Mon, 08 Jul 2024 04:59:29 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /socket.io/?EIO=4&transport=polling&t=OyEDKUl&sid=yC1xal7GbcweV_kOABiY HTTP/1.1
Host: twomancake.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: auth_uid,session_email
Referer: https://pub-9cba10d444bf44eea4f1504b0b173c03.r2.dev/
Origin: https://pub-9cba10d444bf44eea4f1504b0b173c03.r2.dev
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 204 No Content
date: Wed, 24 Apr 2024 03:45:24 GMT
content-length: 0
access-control-allow-origin: *
access-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE
vary: Access-Control-Request-Headers
access-control-allow-headers: auth_uid,session_email
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=GnNE8tADjorWk8ViRSswK8rc3EI1wC9R3tB4waejTkbZYAe6nNNOODZK2S1jkWqxPLcSjmPD0Em8AoeL0%2FVa3EXNTVqbuUlSP9aZmDzirPIf1U62rcTxuR%2FjvbZguRa0uQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 879319ac5b3c0b3d-OSL
alt-svc: h3=":443"; ma=86400
|
|
| twomancake.com/socket.io/?EIO=4&transport=polling&t=OyEDKUr&sid=yC1xal7GbcweV_kOABiY | 188.114.96.1 | 204 No Content | 0 B |
URL OPTIONS HTTP/3twomancake.com/socket.io/?EIO=4&transport=polling&t=OyEDKUr&sid=yC1xal7GbcweV_kOABiY IP188.114.96.1:443
Requested byhttps://pub-9cba10d444bf44eea4f1504b0b173c03.r2.dev/XSD34qjE4Myn%2526m%253Dilk.p0ypaGTJbLL%2526b%253DO4ECJ6p0xWACZ682uuprWTDWQLedDqjE4Myn%2526m%253Dilk.p0ypaGTJbLL%2526b%253DO4ECJ6p0xWACZ682DWQLedDqjE4Myn%2526m%253Dilk.p0ypaGTJbLL%2526b%253DO4ECJ6p0xWACZ682.html#scott@urbanconstructionllc.com CertificateIssuerLet's Encrypt Subjecttwomancake.com FingerprintAF:27:60:8A:CD:A9:93:0A:E2:7C:B9:F0:B3:9B:B4:E4:C1:DD:3D:1C ValidityTue, 09 Apr 2024 04:59:30 GMT - Mon, 08 Jul 2024 04:59:29 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /socket.io/?EIO=4&transport=polling&t=OyEDKUr&sid=yC1xal7GbcweV_kOABiY HTTP/1.1
Host: twomancake.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: auth_uid,session_email
Referer: https://pub-9cba10d444bf44eea4f1504b0b173c03.r2.dev/
Origin: https://pub-9cba10d444bf44eea4f1504b0b173c03.r2.dev
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 204 No Content
date: Wed, 24 Apr 2024 03:45:24 GMT
content-length: 0
access-control-allow-origin: *
access-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE
vary: Access-Control-Request-Headers
access-control-allow-headers: auth_uid,session_email
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=aaGR5SJNWjTxAgIWm3UkRb0YiE1HlI5SEG2KuYJDRsgSqMt%2BeOWtd7ere2dMidI7mcP6CZL7tCAmkLsl1SbAGmhJo0LNDC7Znbicg6KRRDkonQD%2FTTL6E1dLpRpRzCc67w%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 879319ac5b3f0b3d-OSL
alt-svc: h3=":443"; ma=86400
|
|
| twomancake.com/socket.io/?EIO=4&transport=polling&t=OyEDKQ8&sid=Vl8M7foIms5d_p8_ABiW | 188.114.96.1 | 200 OK | 1 B |
URL GET HTTP/3twomancake.com/socket.io/?EIO=4&transport=polling&t=OyEDKQ8&sid=Vl8M7foIms5d_p8_ABiW IP188.114.96.1:443
Requested byhttps://pub-9cba10d444bf44eea4f1504b0b173c03.r2.dev/XSD34qjE4Myn%2526m%253Dilk.p0ypaGTJbLL%2526b%253DO4ECJ6p0xWACZ682uuprWTDWQLedDqjE4Myn%2526m%253Dilk.p0ypaGTJbLL%2526b%253DO4ECJ6p0xWACZ682DWQLedDqjE4Myn%2526m%253Dilk.p0ypaGTJbLL%2526b%253DO4ECJ6p0xWACZ682.html#scott@urbanconstructionllc.com CertificateIssuerLet's Encrypt Subjecttwomancake.com FingerprintAF:27:60:8A:CD:A9:93:0A:E2:7C:B9:F0:B3:9B:B4:E4:C1:DD:3D:1C ValidityTue, 09 Apr 2024 04:59:30 GMT - Mon, 08 Jul 2024 04:59:29 GMT
File typevery short file (no magic) Hash1679091c5a880faf6fb5e6087eb1b2dc c1dfd96eea8cc2b62785275bca38ac261256e278 e7f6c011776e8db7cd330b54174fd76f7d0216b612387a5ffcfb81e6f0919683
GET /socket.io/?EIO=4&transport=polling&t=OyEDKQ8&sid=Vl8M7foIms5d_p8_ABiW HTTP/1.1
Host: twomancake.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Auth_UID: USER24032024UNIQUE0354032432202420240324540332
Session_Email: scott@urbanconstructionllc.com
Origin: https://pub-9cba10d444bf44eea4f1504b0b173c03.r2.dev
DNT: 1
Connection: keep-alive
Referer: https://pub-9cba10d444bf44eea4f1504b0b173c03.r2.dev/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 24 Apr 2024 03:45:24 GMT
content-type: text/plain; charset=UTF-8
content-length: 1
access-control-allow-origin: *
cache-control: no-store
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=JVcOmqO7k%2F5pCfch7W1txf6lCQWoG0MM0RY3Z%2BBFsLWrBD7%2FF9oIZC1ps3zmM%2ByZzon9W8ck%2B%2FQTUpWakKEUceO23l7tw1z%2FGvSs7rmshL2SJHnkYCUhzZi4zY%2FxygrwhA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 879319ab5b1b0b3d-OSL
alt-svc: h3=":443"; ma=86400
|
|
| twomancake.com/socket.io/?EIO=4&transport=websocket&sid=yC1xal7GbcweV_kOABiY | 188.114.97.1 | | 0 B |
URL twomancake.com/socket.io/?EIO=4&transport=websocket&sid=yC1xal7GbcweV_kOABiY IP188.114.97.1:0
CertificateIssuerLet's Encrypt Subjecttwomancake.com FingerprintAF:27:60:8A:CD:A9:93:0A:E2:7C:B9:F0:B3:9B:B4:E4:C1:DD:3D:1C ValidityTue, 09 Apr 2024 04:59:30 GMT - Mon, 08 Jul 2024 04:59:29 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /socket.io/?EIO=4&transport=websocket&sid=yC1xal7GbcweV_kOABiY HTTP/1.1
Host: twomancake.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: https://pub-9cba10d444bf44eea4f1504b0b173c03.r2.dev
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: 3Xxc3yHtggA83p+DflgDKw==
DNT: 1
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Date: Wed, 24 Apr 2024 03:45:24 GMT
Connection: upgrade
Upgrade: websocket
Sec-WebSocket-Accept: ybA9sqVhGxej7aMbwc6UYwcJlKU=
Access-Control-Allow-Origin: *
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=hwg%2BmU%2BhdPgap7aaJ5igMHUr1aNyWFXEmAtHA4qPk7ugHex8zU6csAsA6T9QMfw5VxvGcihvmVNuTCHZARDCkUjHqOox%2FbyWKQKCziG%2F1dxJ5n0wIv5G0F34%2Fx%2BnnKcr%2Bg%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 879319ac9fef56a5-OSL
alt-svc: h3=":443"; ma=86400
|
|
| twomancake.com/socket.io/?EIO=4&transport=polling&t=OyEDKUr&sid=yC1xal7GbcweV_kOABiY | 188.114.96.1 | 204 No Content | 1 B |
URL OPTIONS HTTP/3twomancake.com/socket.io/?EIO=4&transport=polling&t=OyEDKUr&sid=yC1xal7GbcweV_kOABiY IP188.114.96.1:443
Requested byhttps://pub-9cba10d444bf44eea4f1504b0b173c03.r2.dev/XSD34qjE4Myn%2526m%253Dilk.p0ypaGTJbLL%2526b%253DO4ECJ6p0xWACZ682uuprWTDWQLedDqjE4Myn%2526m%253Dilk.p0ypaGTJbLL%2526b%253DO4ECJ6p0xWACZ682DWQLedDqjE4Myn%2526m%253Dilk.p0ypaGTJbLL%2526b%253DO4ECJ6p0xWACZ682.html#scott@urbanconstructionllc.com CertificateIssuerLet's Encrypt Subjecttwomancake.com FingerprintAF:27:60:8A:CD:A9:93:0A:E2:7C:B9:F0:B3:9B:B4:E4:C1:DD:3D:1C ValidityTue, 09 Apr 2024 04:59:30 GMT - Mon, 08 Jul 2024 04:59:29 GMT
File typevery short file (no magic) Hash1679091c5a880faf6fb5e6087eb1b2dc c1dfd96eea8cc2b62785275bca38ac261256e278 e7f6c011776e8db7cd330b54174fd76f7d0216b612387a5ffcfb81e6f0919683
GET /socket.io/?EIO=4&transport=polling&t=OyEDKUr&sid=yC1xal7GbcweV_kOABiY HTTP/1.1
Host: twomancake.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Auth_UID: USER24032024UNIQUE0354032432202420240324540332
Session_Email: scott@urbanconstructionllc.com
Origin: https://pub-9cba10d444bf44eea4f1504b0b173c03.r2.dev
DNT: 1
Connection: keep-alive
Referer: https://pub-9cba10d444bf44eea4f1504b0b173c03.r2.dev/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 24 Apr 2024 03:45:24 GMT
content-type: text/plain; charset=UTF-8
content-length: 1
access-control-allow-origin: *
cache-control: no-store
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=KvmrA%2FTZMesSxx7soY41hEK3ckauz%2FrCh0uc8iPn0p6SX4EnwSoY78pxztsA9DCZePMzTWnGlN%2FpF%2FvZMz4oDqvhwjcyvdYysh4uzy1%2BIrBeqrzLhnvtnVIM%2BMXrEO1zEw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 879319ad4b690b3d-OSL
alt-svc: h3=":443"; ma=86400
|
|
| twomancake.com/socket.io/?EIO=4&transport=polling&t=OyEDKJM | 188.114.96.1 | 204 No Content | 9.6 kB |
URL OPTIONS HTTP/3twomancake.com/socket.io/?EIO=4&transport=polling&t=OyEDKJM IP188.114.96.1:443
Requested byhttps://pub-9cba10d444bf44eea4f1504b0b173c03.r2.dev/XSD34qjE4Myn%2526m%253Dilk.p0ypaGTJbLL%2526b%253DO4ECJ6p0xWACZ682uuprWTDWQLedDqjE4Myn%2526m%253Dilk.p0ypaGTJbLL%2526b%253DO4ECJ6p0xWACZ682DWQLedDqjE4Myn%2526m%253Dilk.p0ypaGTJbLL%2526b%253DO4ECJ6p0xWACZ682.html#scott@urbanconstructionllc.com CertificateIssuerLet's Encrypt Subjecttwomancake.com FingerprintAF:27:60:8A:CD:A9:93:0A:E2:7C:B9:F0:B3:9B:B4:E4:C1:DD:3D:1C ValidityTue, 09 Apr 2024 04:59:30 GMT - Mon, 08 Jul 2024 04:59:29 GMT
File typeASCII text, with no line terminators Hashe973d07a07668f702a414437a6b4831a b1c0e4af6ea79f8b4b9991ede3641bde54f42885 9ec3aa8d480009f7ec6b7901fee69c52485d3dcb91b850735e3f425a07e91349
GET /socket.io/?EIO=4&transport=polling&t=OyEDKJM HTTP/1.1
Host: twomancake.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Auth_UID: USER24032024UNIQUE0354032432202420240324540332
Session_Email: scott@urbanconstructionllc.com
Origin: https://pub-9cba10d444bf44eea4f1504b0b173c03.r2.dev
DNT: 1
Connection: keep-alive
Referer: https://pub-9cba10d444bf44eea4f1504b0b173c03.r2.dev/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 24 Apr 2024 03:45:23 GMT
content-type: text/plain; charset=UTF-8
access-control-allow-origin: *
cache-control: no-store
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=EoNiDJUVwZUV13zrNxZZjwWIiE8OwMCRNF3NRTxtpikpuFrQX6MlCIGUjN%2F32qG92DVQYJ6khtTgfxOnILvznSaZLmb6OadaymuTG42ykbjOzXsSfMz5hzxWW8S0OnCziA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 879319a98ab70b3d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| aadcdn.msauth.net/shared/1.0/content/images/appbackgrounds/49_6ffe0a92d779c878835b40171ffc2e13.jpg | 13.107.246.53 | | 18 kB |
URL aadcdn.msauth.net/shared/1.0/content/images/appbackgrounds/49_6ffe0a92d779c878835b40171ffc2e13.jpg IP13.107.246.53:0 ASN#8075 MICROSOFT-CORP-MSN-AS-BLOCK
File typeJPEG image data, baseline, precision 8, 1920x1080, components 3 Hash7916a894ebde7d29c2cc29b267f1299f 78345ca08f9e2c3c2cc9b318950791b349211296 d8f5ab3e00202fd3b45be1acd95d677b137064001e171bc79b06826d98f1e1d3
GET /shared/1.0/content/images/appbackgrounds/49_6ffe0a92d779c878835b40171ffc2e13.jpg HTTP/1.1
Host: aadcdn.msauth.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pub-9cba10d444bf44eea4f1504b0b173c03.r2.dev/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 24 Apr 2024 03:45:31 GMT
content-type: image/jpeg
content-length: 17453
cache-control: public, max-age=31536000
last-modified: Wed, 24 May 2023 10:11:42 GMT
etag: 0x8DB5C3F4584F323
x-ms-request-id: b9e72e5b-301e-0039-251d-95b79c000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
access-control-allow-origin: *
x-azure-ref: 20240424T034531Z-16c4f695cc5w955zqcuzdz90ms0000000100000000001pak
x-fd-int-roxy-purgeid: 4554691
x-cache: TCP_HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| pub-9cba10d444bf44eea4f1504b0b173c03.r2.dev/XSD34qjE4Myn%2526m%253Dilk.p0ypaGTJbLL%2526b%253DO4ECJ6p0xWACZ682uuprWTDWQLedDqjE4Myn%2526m%253Dilk.p0ypaGTJbLL%2526b%253DO4ECJ6p0xWACZ682DWQLedDqjE4Myn%2526m%253Dilk.p0ypaGTJbLL%2526b%253DO4ECJ6p0xWACZ682.html | 104.18.3.35 | 200 OK | 2.9 kB |
URL User Request GET HTTP/1.1pub-9cba10d444bf44eea4f1504b0b173c03.r2.dev/XSD34qjE4Myn%2526m%253Dilk.p0ypaGTJbLL%2526b%253DO4ECJ6p0xWACZ682uuprWTDWQLedDqjE4Myn%2526m%253Dilk.p0ypaGTJbLL%2526b%253DO4ECJ6p0xWACZ682DWQLedDqjE4Myn%2526m%253Dilk.p0ypaGTJbLL%2526b%253DO4ECJ6p0xWACZ682.html IP104.18.3.35:443
CertificateIssuerLet's Encrypt Subject*.r2.dev Fingerprint48:74:F0:98:E0:A1:57:3E:86:18:BF:B3:DC:C9:7A:5B:53:50:FE:E0 ValidityFri, 05 Apr 2024 15:25:24 GMT - Thu, 04 Jul 2024 15:25:23 GMT
File typeHTML document, ASCII text, with very long lines (2946), with no line terminators Hashf402060fdd904ca4398f09dbe7e85b33 65a6738be48b8f0be7623f88df7c77e3bc5dd40c 996807760dd5b7ead09d5cbb83ccffbcb83a063a9d5daf0b7ad545978cfbe1b7
GET /XSD34qjE4Myn%2526m%253Dilk.p0ypaGTJbLL%2526b%253DO4ECJ6p0xWACZ682uuprWTDWQLedDqjE4Myn%2526m%253Dilk.p0ypaGTJbLL%2526b%253DO4ECJ6p0xWACZ682DWQLedDqjE4Myn%2526m%253Dilk.p0ypaGTJbLL%2526b%253DO4ECJ6p0xWACZ682.html HTTP/1.1
Host: pub-9cba10d444bf44eea4f1504b0b173c03.r2.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 24 Apr 2024 03:45:16 GMT
Content-Type: text/html
Content-Length: 2875
Connection: keep-alive
Accept-Ranges: bytes
ETag: "6b3f94f2aee2fdf9246b0b2f97d5ae7d"
Last-Modified: Tue, 23 Apr 2024 18:03:24 GMT
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 8793197d784c56bf-OSL
|
|