| dweb.link/ipfs/QmTgavUm1wZU5UMoUwb1to6zVgCo7nR7p7ic6H44RRPrX9?filename=font-awesome.css |  209.94.90.1 | 301 Moved Permanently | 144 B |
URL GET HTTP/2dweb.link/ipfs/QmTgavUm1wZU5UMoUwb1to6zVgCo7nR7p7ic6H44RRPrX9?filename=font-awesome.css IP209.94.90.1:443
Requested byhttps://bafybeiaabas4oscv5jny2siw3tneukj76jrfebevrvv455vrlblicqqyoe.ipfs.cf-ipfs.com/ CertificateIssuerLet's Encrypt Subjectdweb.link Fingerprint2A:D2:03:4C:D3:15:24:93:EF:9E:1F:8F:5A:9C:AF:C4:E2:63:C9:42 ValidityTue, 06 Feb 2024 17:40:37 GMT - Mon, 06 May 2024 17:40:36 GMT
File typeHTML document, ASCII text Hash0095e01889589a96ec6c2fa64e4e0a7c ff86ffb4165587acb560367a3acd85507c7e09f7 4beba4ea5c0c7453f153b1ae595887b2ae96aba797094c26f9c8e0f1c24c0500
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - WeTransfer |
GET /ipfs/QmTgavUm1wZU5UMoUwb1to6zVgCo7nR7p7ic6H44RRPrX9?filename=font-awesome.css HTTP/1.1
Host: dweb.link
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bafybeiaabas4oscv5jny2siw3tneukj76jrfebevrvv455vrlblicqqyoe.ipfs.cf-ipfs.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 301 Moved Permanently
server: openresty
date: Wed, 17 Apr 2024 16:53:03 GMT
content-type: text/html; charset=utf-8
content-length: 144
access-control-allow-headers: Content-Type, Range, User-Agent, X-Requested-With
access-control-allow-methods: GET, HEAD, OPTIONS
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Content-Range, X-Chunked-Output, X-Ipfs-Path, X-Ipfs-Roots, X-Stream-Output
location: https://bafybeicpmxcovgwlyxv4eqnea4eikta2zqxrymbkggdyjaredhcaatcc5a.ipfs.dweb.link/?filename=font-awesome.css
x-ipfs-pop: ipfs-bank5-fr2
timing-allow-origin: *
x-ipfs-lb-pop: gateway-bank1-fr2
x-bfid: ceb54189bbb928a78eb49844f0223140
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-proxy-cache: HIT
X-Firefox-Spdy: h2
|
|
| dweb.link/ipfs/QmRnpMNJrtmXUfNwYvar6xWLQJxUs65hDtHZUHQfowNRCm?filename=sweetalert.js | 209.94.90.1 | 301 Moved Permanently | 141 B |
URL GET HTTP/2dweb.link/ipfs/QmRnpMNJrtmXUfNwYvar6xWLQJxUs65hDtHZUHQfowNRCm?filename=sweetalert.js IP209.94.90.1:443
Requested byhttps://bafybeiaabas4oscv5jny2siw3tneukj76jrfebevrvv455vrlblicqqyoe.ipfs.cf-ipfs.com/ CertificateIssuerLet's Encrypt Subjectdweb.link Fingerprint2A:D2:03:4C:D3:15:24:93:EF:9E:1F:8F:5A:9C:AF:C4:E2:63:C9:42 ValidityTue, 06 Feb 2024 17:40:37 GMT - Mon, 06 May 2024 17:40:36 GMT
File typeHTML document, ASCII text Hashe328380da6be36d4ee1bb6eecba270f4 40e6e3dc2f6890b3974e930176050b3f412cc4ae 4bcac744b173f98145329cb8f1d7958ff01941e06cf97b1cd9443d94f47f13c1
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - WeTransfer |
GET /ipfs/QmRnpMNJrtmXUfNwYvar6xWLQJxUs65hDtHZUHQfowNRCm?filename=sweetalert.js HTTP/1.1
Host: dweb.link
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bafybeiaabas4oscv5jny2siw3tneukj76jrfebevrvv455vrlblicqqyoe.ipfs.cf-ipfs.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 301 Moved Permanently
server: openresty
date: Wed, 17 Apr 2024 16:53:03 GMT
content-type: text/html; charset=utf-8
content-length: 141
access-control-allow-headers: Content-Type, Range, User-Agent, X-Requested-With
access-control-allow-methods: GET, HEAD, OPTIONS
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Content-Range, X-Chunked-Output, X-Ipfs-Path, X-Ipfs-Roots, X-Stream-Output
location: https://bafybeibti4iinvd5b2p775563ygtudzqktihggrtnksbmphezza3hn4eoi.ipfs.dweb.link/?filename=sweetalert.js
x-ipfs-pop: ipfs-bank5-fr2
timing-allow-origin: *
x-ipfs-lb-pop: gateway-bank1-fr2
x-bfid: 1ad4929c917d981041c96d3432f49da9
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-proxy-cache: HIT
X-Firefox-Spdy: h2
|
|
| dweb.link/ipfs/QmSgatZddgpVbC7qiSzcy7TRTe24FKvADHfP4psTqZthyP?filename=logo.jpg | 209.94.90.1 | 301 Moved Permanently | 136 B |
URL GET HTTP/2dweb.link/ipfs/QmSgatZddgpVbC7qiSzcy7TRTe24FKvADHfP4psTqZthyP?filename=logo.jpg IP209.94.90.1:443
Requested byhttps://bafybeiaabas4oscv5jny2siw3tneukj76jrfebevrvv455vrlblicqqyoe.ipfs.cf-ipfs.com/ CertificateIssuerLet's Encrypt Subjectdweb.link Fingerprint2A:D2:03:4C:D3:15:24:93:EF:9E:1F:8F:5A:9C:AF:C4:E2:63:C9:42 ValidityTue, 06 Feb 2024 17:40:37 GMT - Mon, 06 May 2024 17:40:36 GMT
File typeHTML document, ASCII text Hashf7ed76f13dde1eadd25e1dde15d0380a 41522f8bcbfa2395a055dd1584c74ce0c9c8c54f 72b6c396f56cdd464c726591c1c6a45f3c26b1b8793579481c6f5e885d4ea54f
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - WeTransfer |
GET /ipfs/QmSgatZddgpVbC7qiSzcy7TRTe24FKvADHfP4psTqZthyP?filename=logo.jpg HTTP/1.1
Host: dweb.link
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bafybeiaabas4oscv5jny2siw3tneukj76jrfebevrvv455vrlblicqqyoe.ipfs.cf-ipfs.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 301 Moved Permanently
server: openresty
date: Wed, 17 Apr 2024 16:53:03 GMT
content-type: text/html; charset=utf-8
content-length: 136
access-control-allow-headers: Content-Type, Range, User-Agent, X-Requested-With
access-control-allow-methods: GET, HEAD, OPTIONS
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Content-Range, X-Chunked-Output, X-Ipfs-Path, X-Ipfs-Roots, X-Stream-Output
location: https://bafybeicarifyatgz3sd2cfgucp3bo5bddjyou7vevbvy3bd5epwtmbyu3y.ipfs.dweb.link/?filename=logo.jpg
x-ipfs-pop: ipfs-bank1-fr2
timing-allow-origin: *
x-ipfs-lb-pop: gateway-bank1-fr2
x-bfid: 785c29ced8603ff02e24eacf924bf862
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-proxy-cache: HIT
X-Firefox-Spdy: h2
|
|
| dweb.link/ipfs/QmRJEENewudtFXP4Q6GzkWvKcm1WTMDrSca7QbGwSdrtMm?filename=bootstrap.css | 209.94.90.1 | 301 Moved Permanently | 141 B |
URL GET HTTP/2dweb.link/ipfs/QmRJEENewudtFXP4Q6GzkWvKcm1WTMDrSca7QbGwSdrtMm?filename=bootstrap.css IP209.94.90.1:443
Requested byhttps://bafybeiaabas4oscv5jny2siw3tneukj76jrfebevrvv455vrlblicqqyoe.ipfs.cf-ipfs.com/ CertificateIssuerLet's Encrypt Subjectdweb.link Fingerprint2A:D2:03:4C:D3:15:24:93:EF:9E:1F:8F:5A:9C:AF:C4:E2:63:C9:42 ValidityTue, 06 Feb 2024 17:40:37 GMT - Mon, 06 May 2024 17:40:36 GMT
File typeHTML document, ASCII text Hash5075898dfe559205113c24d2bf45dc18 a59688817b13fbd3a12e65b122051e8d5bccbc57 d99849d50d31c2deb73c88087440e84c8e2e95c0fcd82d615669f6603e2666c4
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - WeTransfer |
GET /ipfs/QmRJEENewudtFXP4Q6GzkWvKcm1WTMDrSca7QbGwSdrtMm?filename=bootstrap.css HTTP/1.1
Host: dweb.link
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bafybeiaabas4oscv5jny2siw3tneukj76jrfebevrvv455vrlblicqqyoe.ipfs.cf-ipfs.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 301 Moved Permanently
server: openresty
date: Wed, 17 Apr 2024 16:53:03 GMT
content-type: text/html; charset=utf-8
content-length: 141
access-control-allow-headers: Content-Type, Range, User-Agent, X-Requested-With
access-control-allow-methods: GET, HEAD, OPTIONS
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Content-Range, X-Chunked-Output, X-Ipfs-Path, X-Ipfs-Roots, X-Stream-Output
location: https://bafybeibl6q4lz3so3hbhc2vbzxcpitws5yd3wcrkfewuerr3l5ohj4mona.ipfs.dweb.link/?filename=bootstrap.css
x-ipfs-pop: ipfs-bank5-fr2
timing-allow-origin: *
x-ipfs-lb-pop: gateway-bank1-fr2
x-bfid: 138fa16eae3e65e2bd5df2b185f44b8f
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-proxy-cache: HIT
X-Firefox-Spdy: h2
|
|
| dweb.link/ipfs/QmRbr6GPmMaXViCSY6fErfB14WWdCMBESyRzTPdk6VvjDu?filename=jquery.js | 209.94.90.1 | 301 Moved Permanently | 137 B |
URL GET HTTP/2dweb.link/ipfs/QmRbr6GPmMaXViCSY6fErfB14WWdCMBESyRzTPdk6VvjDu?filename=jquery.js IP209.94.90.1:443
Requested byhttps://bafybeiaabas4oscv5jny2siw3tneukj76jrfebevrvv455vrlblicqqyoe.ipfs.cf-ipfs.com/ CertificateIssuerLet's Encrypt Subjectdweb.link Fingerprint2A:D2:03:4C:D3:15:24:93:EF:9E:1F:8F:5A:9C:AF:C4:E2:63:C9:42 ValidityTue, 06 Feb 2024 17:40:37 GMT - Mon, 06 May 2024 17:40:36 GMT
File typeHTML document, ASCII text Hash28e735fd4f6ee8d8dc888bcb96d48c3a 60578f4a502f70b8092c34d5483df943c0ac36ea 465b0a55df7521b39e2520c06dc37aac2d6d74ca136453dd5dcde14c2d7dcdc7
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - WeTransfer |
GET /ipfs/QmRbr6GPmMaXViCSY6fErfB14WWdCMBESyRzTPdk6VvjDu?filename=jquery.js HTTP/1.1
Host: dweb.link
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bafybeiaabas4oscv5jny2siw3tneukj76jrfebevrvv455vrlblicqqyoe.ipfs.cf-ipfs.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 301 Moved Permanently
server: openresty
date: Wed, 17 Apr 2024 16:53:03 GMT
content-type: text/html; charset=utf-8
content-length: 137
access-control-allow-headers: Content-Type, Range, User-Agent, X-Requested-With
access-control-allow-methods: GET, HEAD, OPTIONS
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Content-Range, X-Chunked-Output, X-Ipfs-Path, X-Ipfs-Roots, X-Stream-Output
location: https://bafybeibqo6sij2nxln2lh3l4bhpufkriqsc6vtcni44smmcw2hskahjtxq.ipfs.dweb.link/?filename=jquery.js
x-ipfs-pop: ipfs-bank5-fr2
timing-allow-origin: *
x-ipfs-lb-pop: gateway-bank1-fr2
x-bfid: a30d66a5edda617c239b02e1079de1e5
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-proxy-cache: HIT
X-Firefox-Spdy: h2
|
|
| code.jquery.com/jquery-3.2.1.slim.min.js | 151.101.130.137 | 200 OK | 24 kB |
URL GET HTTP/2code.jquery.com/jquery-3.2.1.slim.min.js IP151.101.130.137:443
Requested byhttps://bafybeiaabas4oscv5jny2siw3tneukj76jrfebevrvv455vrlblicqqyoe.ipfs.cf-ipfs.com/ CertificateIssuerSectigo Limited Subject*.jquery.com FingerprintD2:19:0A:AD:CE:BB:9C:61:17:5D:29:4B:A2:54:E8:C6:91:B8:F9:8D ValidityTue, 11 Jul 2023 00:00:00 GMT - Sun, 14 Jul 2024 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (32012) Hash5f48fc77cac90c4778fa24ec9c57f37d 9e89d1515bc4c371b86f4cb1002fd8e377c1829f 9365920887b11b33a3dc4ba28a0f93951f200341263e3b9cefd384798e4be398
GET /jquery-3.2.1.slim.min.js HTTP/1.1
Host: code.jquery.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bafybeiaabas4oscv5jny2siw3tneukj76jrfebevrvv455vrlblicqqyoe.ipfs.cf-ipfs.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Fri, 18 Oct 1991 12:00:00 GMT
etag: W/"28feccc0-10fdd"
cache-control: public, max-age=31536000, stale-while-revalidate=604800
access-control-allow-origin: *
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Wed, 17 Apr 2024 16:53:03 GMT
age: 842917
x-served-by: cache-lga21963-LGA, cache-hel1410034-HEL
x-cache: HIT, HIT
x-cache-hits: 40, 15008
x-timer: S1713372784.967378,VS0,VE0
vary: Accept-Encoding
content-length: 23856
X-Firefox-Spdy: h2
|
|
| dweb.link/ipfs/Qmf7y59RuutyHLhsgQXGDBWGohxMZPfeU4M6ZiVDSC7bma?filename=animate.css | 209.94.90.1 | 301 Moved Permanently | 139 B |
URL GET HTTP/2dweb.link/ipfs/Qmf7y59RuutyHLhsgQXGDBWGohxMZPfeU4M6ZiVDSC7bma?filename=animate.css IP209.94.90.1:443
Requested byhttps://bafybeiaabas4oscv5jny2siw3tneukj76jrfebevrvv455vrlblicqqyoe.ipfs.cf-ipfs.com/ CertificateIssuerLet's Encrypt Subjectdweb.link Fingerprint2A:D2:03:4C:D3:15:24:93:EF:9E:1F:8F:5A:9C:AF:C4:E2:63:C9:42 ValidityTue, 06 Feb 2024 17:40:37 GMT - Mon, 06 May 2024 17:40:36 GMT
File typeHTML document, ASCII text Hash439db0545a713f00e13cf46233762444 d97e378824f29b648e291074e7a90e8d147345c0 775f99362336dab691a84e0726ce0e8e5a5be1b91c36fc650a9cdade9df32689
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - WeTransfer |
GET /ipfs/Qmf7y59RuutyHLhsgQXGDBWGohxMZPfeU4M6ZiVDSC7bma?filename=animate.css HTTP/1.1
Host: dweb.link
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bafybeiaabas4oscv5jny2siw3tneukj76jrfebevrvv455vrlblicqqyoe.ipfs.cf-ipfs.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 301 Moved Permanently
server: openresty
date: Wed, 17 Apr 2024 16:53:03 GMT
content-type: text/html; charset=utf-8
content-length: 139
access-control-allow-headers: Content-Type, Range, User-Agent, X-Requested-With
access-control-allow-methods: GET, HEAD, OPTIONS
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Content-Range, X-Chunked-Output, X-Ipfs-Path, X-Ipfs-Roots, X-Stream-Output
location: https://bafybeihzk3r5vvkorkyw6yhdrq6ybyddsqbstgcv563nc4kooxaup7lqee.ipfs.dweb.link/?filename=animate.css
x-ipfs-pop: ipfs-bank5-fr2
timing-allow-origin: *
x-ipfs-lb-pop: gateway-bank1-fr2
x-bfid: bba9db1c26a9f743327201a5b8258002
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-proxy-cache: HIT
X-Firefox-Spdy: h2
|
|
| bafybeihtdqp4mpo54jpiwxw4kaxtsv2eg7vfbtauaky25f4lelnwd542pm.ipfs.dweb.link/?filename=bootstrap.min.js | 209.94.90.1 | 410 Gone | 6.7 kB |
URL GET HTTP/2bafybeihtdqp4mpo54jpiwxw4kaxtsv2eg7vfbtauaky25f4lelnwd542pm.ipfs.dweb.link/?filename=bootstrap.min.js IP209.94.90.1:443
Requested byhttps://bafybeiaabas4oscv5jny2siw3tneukj76jrfebevrvv455vrlblicqqyoe.ipfs.cf-ipfs.com/ CertificateIssuerLet's Encrypt Subjectdweb.link Fingerprint2A:D2:03:4C:D3:15:24:93:EF:9E:1F:8F:5A:9C:AF:C4:E2:63:C9:42 ValidityTue, 06 Feb 2024 17:40:37 GMT - Mon, 06 May 2024 17:40:36 GMT
File typeHTML document, ASCII text, with very long lines (1632) Hasha625932f4efa89cf3dabcb020f3b18ef 69cfc20bcf10dedd1fc6847dd89e95f65234509c db6ad367de6ed56b2f962000875de9abc8d90042df48ff2ad59887a126b43600
GET /?filename=bootstrap.min.js HTTP/1.1
Host: bafybeihtdqp4mpo54jpiwxw4kaxtsv2eg7vfbtauaky25f4lelnwd542pm.ipfs.dweb.link
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://bafybeiaabas4oscv5jny2siw3tneukj76jrfebevrvv455vrlblicqqyoe.ipfs.cf-ipfs.com
DNT: 1
Connection: keep-alive
Referer: https://bafybeiaabas4oscv5jny2siw3tneukj76jrfebevrvv455vrlblicqqyoe.ipfs.cf-ipfs.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 410 Gone
server: openresty
date: Wed, 17 Apr 2024 16:53:03 GMT
content-type: text/html
content-length: 6664
etag: "661fa4fb-1a08"
x-ipfs-lb-pop: gateway-bank1-fr2
x-bfid: 3b9ca87a306dfb9f6571ba87928df8a9
strict-transport-security: max-age=31536000; includeSubDomains; preload
X-Firefox-Spdy: h2
|
|
| dweb.link/ipfs/QmeheeqeAGN8QeMMXY2Pusp4gwJH99dKPqUCfsX6vwoRKQ?filename=bootstrap.js | 209.94.90.1 | 410 Gone | 6.7 kB |
URL GET HTTP/2dweb.link/ipfs/QmeheeqeAGN8QeMMXY2Pusp4gwJH99dKPqUCfsX6vwoRKQ?filename=bootstrap.js IP209.94.90.1:443
Requested byhttps://bafybeiaabas4oscv5jny2siw3tneukj76jrfebevrvv455vrlblicqqyoe.ipfs.cf-ipfs.com/ CertificateIssuerLet's Encrypt Subjectdweb.link Fingerprint2A:D2:03:4C:D3:15:24:93:EF:9E:1F:8F:5A:9C:AF:C4:E2:63:C9:42 ValidityTue, 06 Feb 2024 17:40:37 GMT - Mon, 06 May 2024 17:40:36 GMT
File typeHTML document, ASCII text, with very long lines (1632) Hasha625932f4efa89cf3dabcb020f3b18ef 69cfc20bcf10dedd1fc6847dd89e95f65234509c db6ad367de6ed56b2f962000875de9abc8d90042df48ff2ad59887a126b43600
GET /ipfs/QmeheeqeAGN8QeMMXY2Pusp4gwJH99dKPqUCfsX6vwoRKQ?filename=bootstrap.js HTTP/1.1
Host: dweb.link
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bafybeiaabas4oscv5jny2siw3tneukj76jrfebevrvv455vrlblicqqyoe.ipfs.cf-ipfs.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 410 Gone
server: openresty
date: Wed, 17 Apr 2024 16:53:03 GMT
content-type: text/html
content-length: 6664
etag: "661fa4fb-1a08"
x-ipfs-lb-pop: gateway-bank1-fr2
x-bfid: 05bf1385bbcd9f43329287d1fbfa73a9
strict-transport-security: max-age=31536000; includeSubDomains; preload
X-Firefox-Spdy: h2
|
|
| dweb.link/ipfs/QmUiVYsNJuaBoCQ1hYeQE8uXVu6LwDSEBUuA3PxKe7zUFX?filename=popper.js | 209.94.90.1 | 301 Moved Permanently | 137 B |
URL GET HTTP/2dweb.link/ipfs/QmUiVYsNJuaBoCQ1hYeQE8uXVu6LwDSEBUuA3PxKe7zUFX?filename=popper.js IP209.94.90.1:443
Requested byhttps://bafybeiaabas4oscv5jny2siw3tneukj76jrfebevrvv455vrlblicqqyoe.ipfs.cf-ipfs.com/ CertificateIssuerLet's Encrypt Subjectdweb.link Fingerprint2A:D2:03:4C:D3:15:24:93:EF:9E:1F:8F:5A:9C:AF:C4:E2:63:C9:42 ValidityTue, 06 Feb 2024 17:40:37 GMT - Mon, 06 May 2024 17:40:36 GMT
File typeHTML document, ASCII text Hashaeb6a5bc098c1cdcc596a46f73dc6d58 d009f7e8cbe879389277dba098d302032dc1062e d27c51aa56e1890f2d29ebaab1f7d83bc05913925b92518d9bc452ec979454dc
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - WeTransfer |
GET /ipfs/QmUiVYsNJuaBoCQ1hYeQE8uXVu6LwDSEBUuA3PxKe7zUFX?filename=popper.js HTTP/1.1
Host: dweb.link
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bafybeiaabas4oscv5jny2siw3tneukj76jrfebevrvv455vrlblicqqyoe.ipfs.cf-ipfs.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 301 Moved Permanently
server: openresty
date: Wed, 17 Apr 2024 16:53:03 GMT
content-type: text/html; charset=utf-8
content-length: 137
access-control-allow-headers: Content-Type, Range, User-Agent, X-Requested-With
access-control-allow-methods: GET, HEAD, OPTIONS
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Content-Range, X-Chunked-Output, X-Ipfs-Path, X-Ipfs-Roots, X-Stream-Output
location: https://bafybeic6x2fp4tittdgm62ih5upavzl5cd7mfqheybck3e262z3mwy4xpy.ipfs.dweb.link/?filename=popper.js
x-ipfs-pop: ipfs-bank5-fr2
timing-allow-origin: *
x-ipfs-lb-pop: gateway-bank1-fr2
x-bfid: baaaeeb9fe84e68aea30f009d8524942
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-proxy-cache: HIT
X-Firefox-Spdy: h2
|
|
| cdnjs.cloudflare.com/ajax/libs/popper.js/1.12.9/umd/popper.min.js |  104.17.25.14 | 200 OK | 6.2 kB |
URL GET HTTP/2cdnjs.cloudflare.com/ajax/libs/popper.js/1.12.9/umd/popper.min.js IP104.17.25.14:443
Requested byhttps://bafybeiaabas4oscv5jny2siw3tneukj76jrfebevrvv455vrlblicqqyoe.ipfs.cf-ipfs.com/ CertificateIssuerCloudflare, Inc. Subjectsni.cloudflaressl.com Fingerprint7A:EA:B9:09:71:70:6C:87:C9:D3:82:74:8A:7B:B4:60:E5:40:2D:8D ValidityMon, 03 Jul 2023 00:00:00 GMT - Tue, 02 Jul 2024 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (19015) Hash70d3fda195602fe8b75e0097eed74dde c3b977aa4b8dfb69d651e07015031d385ded964b a52f7aa54d7bcaafa056ee0a050262dfc5694ae28dee8b4cac3429af37ff0d66
GET /ajax/libs/popper.js/1.12.9/umd/popper.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://bafybeiaabas4oscv5jny2siw3tneukj76jrfebevrvv455vrlblicqqyoe.ipfs.cf-ipfs.com
DNT: 1
Connection: keep-alive
Referer: https://bafybeiaabas4oscv5jny2siw3tneukj76jrfebevrvv455vrlblicqqyoe.ipfs.cf-ipfs.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 17 Apr 2024 16:53:03 GMT
content-type: application/javascript; charset=utf-8
content-length: 6157
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03fa9-4af4"
last-modified: Mon, 04 May 2020 16:15:37 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 586545
expires: Mon, 07 Apr 2025 16:53:03 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=6gg4AWIfq9ZGgrVUuYAXWskEwPZ%2FD9joIhhGMU1zsE03MzgZGVGd5HapMEQPqS%2BawsRduiEUBqajdeB7VXHGUH4r%2B5CNPM6rE%2FRucHsdu8VkD5%2BBkjhVbdE0a8zh7oNnESVr2k%2BB"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 875deddbde1592aa-CPH
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| bafybeicarifyatgz3sd2cfgucp3bo5bddjyou7vevbvy3bd5epwtmbyu3y.ipfs.dweb.link/?filename=logo.jpg | 209.94.90.1 | 200 OK | 6.9 kB |
URL GET HTTP/2bafybeicarifyatgz3sd2cfgucp3bo5bddjyou7vevbvy3bd5epwtmbyu3y.ipfs.dweb.link/?filename=logo.jpg IP209.94.90.1:443
Requested byhttps://bafybeiaabas4oscv5jny2siw3tneukj76jrfebevrvv455vrlblicqqyoe.ipfs.cf-ipfs.com/ CertificateIssuerLet's Encrypt Subjectdweb.link Fingerprint2A:D2:03:4C:D3:15:24:93:EF:9E:1F:8F:5A:9C:AF:C4:E2:63:C9:42 ValidityTue, 06 Feb 2024 17:40:37 GMT - Mon, 06 May 2024 17:40:36 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=3, height=0, orientation=upper-left, width=0], baseline, precision 8, 289x57, components 3 Hashd04a0e077be370d23d16c1358749563b d41f2bc6ee296019eba5798682f0b60cff2084a6 f8caf3207186e803510b7c02c6de2818abda8d0720f2764cb4e720a35a4d991e
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - WeTransfer |
GET /?filename=logo.jpg HTTP/1.1
Host: bafybeicarifyatgz3sd2cfgucp3bo5bddjyou7vevbvy3bd5epwtmbyu3y.ipfs.dweb.link
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://bafybeiaabas4oscv5jny2siw3tneukj76jrfebevrvv455vrlblicqqyoe.ipfs.cf-ipfs.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: openresty
date: Wed, 17 Apr 2024 16:53:04 GMT
content-type: image/jpeg
content-length: 6929
access-control-allow-headers: Content-Type, Range, User-Agent, X-Requested-With
access-control-allow-methods: GET, HEAD, OPTIONS
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Content-Range, X-Chunked-Output, X-Ipfs-Path, X-Ipfs-Roots, X-Stream-Output
cache-control: public, max-age=29030400, immutable
content-disposition: inline; filename="logo.jpg"; filename*=UTF-8''logo.jpg
etag: "bafybeicarifyatgz3sd2cfgucp3bo5bddjyou7vevbvy3bd5epwtmbyu3y"
x-ipfs-path: /ipfs/bafybeicarifyatgz3sd2cfgucp3bo5bddjyou7vevbvy3bd5epwtmbyu3y/
x-ipfs-roots: bafybeicarifyatgz3sd2cfgucp3bo5bddjyou7vevbvy3bd5epwtmbyu3y
x-ipfs-pop: ipfs-bank1-fr2
timing-allow-origin: *
x-ipfs-lb-pop: gateway-bank1-fr2
x-bfid: bee067d13b105ad6f5a3bacfd95d6cd1
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-proxy-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| bafybeicpmxcovgwlyxv4eqnea4eikta2zqxrymbkggdyjaredhcaatcc5a.ipfs.dweb.link/?filename=font-awesome.css | 209.94.90.1 | 200 OK | 12 kB |
URL GET HTTP/2bafybeicpmxcovgwlyxv4eqnea4eikta2zqxrymbkggdyjaredhcaatcc5a.ipfs.dweb.link/?filename=font-awesome.css IP209.94.90.1:443
Requested byhttps://bafybeiaabas4oscv5jny2siw3tneukj76jrfebevrvv455vrlblicqqyoe.ipfs.cf-ipfs.com/ CertificateIssuerLet's Encrypt Subjectdweb.link Fingerprint2A:D2:03:4C:D3:15:24:93:EF:9E:1F:8F:5A:9C:AF:C4:E2:63:C9:42 ValidityTue, 06 Feb 2024 17:40:37 GMT - Mon, 06 May 2024 17:40:36 GMT
File typegzip compressed data, from Unix Hashf59fe29a747f9face87a09d654af5117 0c28a71106d6532d1827caba7e56a07bcb9d50a9 6219439ccf730e807c78bc0b278bf8ade93d90f0f491076f1fe45149b39bd890
GET /?filename=font-awesome.css HTTP/1.1
Host: bafybeicpmxcovgwlyxv4eqnea4eikta2zqxrymbkggdyjaredhcaatcc5a.ipfs.dweb.link
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://bafybeiaabas4oscv5jny2siw3tneukj76jrfebevrvv455vrlblicqqyoe.ipfs.cf-ipfs.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: openresty
date: Wed, 17 Apr 2024 16:53:04 GMT
content-type: text/css; charset=utf-8
vary: Accept-Encoding
access-control-allow-headers: Content-Type, Range, User-Agent, X-Requested-With
access-control-allow-methods: GET, HEAD, OPTIONS
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Content-Range, X-Chunked-Output, X-Ipfs-Path, X-Ipfs-Roots, X-Stream-Output
cache-control: public, max-age=29030400, immutable
content-disposition: inline; filename="font-awesome.css"; filename*=UTF-8''font-awesome.css
etag: W/"bafybeicpmxcovgwlyxv4eqnea4eikta2zqxrymbkggdyjaredhcaatcc5a"
x-ipfs-path: /ipfs/bafybeicpmxcovgwlyxv4eqnea4eikta2zqxrymbkggdyjaredhcaatcc5a/
x-ipfs-roots: bafybeicpmxcovgwlyxv4eqnea4eikta2zqxrymbkggdyjaredhcaatcc5a
x-ipfs-pop: ipfs-bank4-fr2
timing-allow-origin: *
x-ipfs-lb-pop: gateway-bank1-fr2
x-bfid: c09d3a809c50d94f5ef07b94da8c55f1
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-proxy-cache: HIT
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| bafybeic6x2fp4tittdgm62ih5upavzl5cd7mfqheybck3e262z3mwy4xpy.ipfs.dweb.link/?filename=popper.js | 209.94.90.1 | 200 OK | 14 kB |
URL GET HTTP/2bafybeic6x2fp4tittdgm62ih5upavzl5cd7mfqheybck3e262z3mwy4xpy.ipfs.dweb.link/?filename=popper.js IP209.94.90.1:443
Requested byhttps://bafybeiaabas4oscv5jny2siw3tneukj76jrfebevrvv455vrlblicqqyoe.ipfs.cf-ipfs.com/ CertificateIssuerLet's Encrypt Subjectdweb.link Fingerprint2A:D2:03:4C:D3:15:24:93:EF:9E:1F:8F:5A:9C:AF:C4:E2:63:C9:42 ValidityTue, 06 Feb 2024 17:40:37 GMT - Mon, 06 May 2024 17:40:36 GMT
File typegzip compressed data, from Unix Hash1231b8ba2c2f71d36b0809a27464bad5 0a2136e4331da741ac5023fccd99ae9fe2f7fbab ca8c2ba51159bdb6c6ae09c6d50d31a906d821389657fead746d6c8cd4109f7d
GET /?filename=popper.js HTTP/1.1
Host: bafybeic6x2fp4tittdgm62ih5upavzl5cd7mfqheybck3e262z3mwy4xpy.ipfs.dweb.link
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://bafybeiaabas4oscv5jny2siw3tneukj76jrfebevrvv455vrlblicqqyoe.ipfs.cf-ipfs.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: openresty
date: Wed, 17 Apr 2024 16:53:04 GMT
content-type: text/javascript; charset=utf-8
vary: Accept-Encoding
access-control-allow-headers: Content-Type, Range, User-Agent, X-Requested-With
access-control-allow-methods: GET, HEAD, OPTIONS
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Content-Range, X-Chunked-Output, X-Ipfs-Path, X-Ipfs-Roots, X-Stream-Output
cache-control: public, max-age=29030400, immutable
content-disposition: inline; filename="popper.js"; filename*=UTF-8''popper.js
etag: W/"bafybeic6x2fp4tittdgm62ih5upavzl5cd7mfqheybck3e262z3mwy4xpy"
x-ipfs-path: /ipfs/bafybeic6x2fp4tittdgm62ih5upavzl5cd7mfqheybck3e262z3mwy4xpy/
x-ipfs-roots: bafybeic6x2fp4tittdgm62ih5upavzl5cd7mfqheybck3e262z3mwy4xpy
x-ipfs-pop: ipfs-bank1-fr2
timing-allow-origin: *
x-ipfs-lb-pop: gateway-bank1-fr2
x-bfid: bbb22e1d6b001341d59789649e95702f
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-proxy-cache: HIT
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| bafybeihtdqp4mpo54jpiwxw4kaxtsv2eg7vfbtauaky25f4lelnwd542pm.ipfs.dweb.link/?filename=bootstrap.min.js | 209.94.90.1 | 410 Gone | 6.7 kB |
URL GET HTTP/2bafybeihtdqp4mpo54jpiwxw4kaxtsv2eg7vfbtauaky25f4lelnwd542pm.ipfs.dweb.link/?filename=bootstrap.min.js IP209.94.90.1:443
Requested byhttps://bafybeiaabas4oscv5jny2siw3tneukj76jrfebevrvv455vrlblicqqyoe.ipfs.cf-ipfs.com/ CertificateIssuerLet's Encrypt Subjectdweb.link Fingerprint2A:D2:03:4C:D3:15:24:93:EF:9E:1F:8F:5A:9C:AF:C4:E2:63:C9:42 ValidityTue, 06 Feb 2024 17:40:37 GMT - Mon, 06 May 2024 17:40:36 GMT
File typeHTML document, ASCII text, with very long lines (1632) Hasha625932f4efa89cf3dabcb020f3b18ef 69cfc20bcf10dedd1fc6847dd89e95f65234509c db6ad367de6ed56b2f962000875de9abc8d90042df48ff2ad59887a126b43600
GET /?filename=bootstrap.min.js HTTP/1.1
Host: bafybeihtdqp4mpo54jpiwxw4kaxtsv2eg7vfbtauaky25f4lelnwd542pm.ipfs.dweb.link
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bafybeiaabas4oscv5jny2siw3tneukj76jrfebevrvv455vrlblicqqyoe.ipfs.cf-ipfs.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 410 Gone
server: openresty
date: Wed, 17 Apr 2024 16:53:04 GMT
content-type: text/html
content-length: 6664
etag: "661fa4fb-1a08"
x-ipfs-lb-pop: gateway-bank1-fr2
x-bfid: edd1ef5802c6edb7b1dbfc550791d06e
strict-transport-security: max-age=31536000; includeSubDomains; preload
X-Firefox-Spdy: h2
|
|
| bafybeibl6q4lz3so3hbhc2vbzxcpitws5yd3wcrkfewuerr3l5ohj4mona.ipfs.dweb.link/?filename=bootstrap.css | 209.94.90.1 | 200 OK | 22 kB |
URL GET HTTP/2bafybeibl6q4lz3so3hbhc2vbzxcpitws5yd3wcrkfewuerr3l5ohj4mona.ipfs.dweb.link/?filename=bootstrap.css IP209.94.90.1:443
Requested byhttps://bafybeiaabas4oscv5jny2siw3tneukj76jrfebevrvv455vrlblicqqyoe.ipfs.cf-ipfs.com/ CertificateIssuerLet's Encrypt Subjectdweb.link Fingerprint2A:D2:03:4C:D3:15:24:93:EF:9E:1F:8F:5A:9C:AF:C4:E2:63:C9:42 ValidityTue, 06 Feb 2024 17:40:37 GMT - Mon, 06 May 2024 17:40:36 GMT
File typegzip compressed data, from Unix Hash0eb658d21c19b5226600c91ebd5ba4d7 82b957bf5b2e93c30106dbf97f8f1f7b65b22401 b4a38004580f8d71d40b9dc1e7efcf0453fe65b2a286026427a54f473461c66c
GET /?filename=bootstrap.css HTTP/1.1
Host: bafybeibl6q4lz3so3hbhc2vbzxcpitws5yd3wcrkfewuerr3l5ohj4mona.ipfs.dweb.link
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://bafybeiaabas4oscv5jny2siw3tneukj76jrfebevrvv455vrlblicqqyoe.ipfs.cf-ipfs.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: openresty
date: Wed, 17 Apr 2024 16:53:04 GMT
content-type: text/css; charset=utf-8
vary: Accept-Encoding
access-control-allow-headers: Content-Type, Range, User-Agent, X-Requested-With
access-control-allow-methods: GET, HEAD, OPTIONS
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Content-Range, X-Chunked-Output, X-Ipfs-Path, X-Ipfs-Roots, X-Stream-Output
cache-control: public, max-age=29030400, immutable
content-disposition: inline; filename="bootstrap.css"; filename*=UTF-8''bootstrap.css
etag: W/"bafybeibl6q4lz3so3hbhc2vbzxcpitws5yd3wcrkfewuerr3l5ohj4mona"
x-ipfs-path: /ipfs/bafybeibl6q4lz3so3hbhc2vbzxcpitws5yd3wcrkfewuerr3l5ohj4mona/
x-ipfs-roots: bafybeibl6q4lz3so3hbhc2vbzxcpitws5yd3wcrkfewuerr3l5ohj4mona
x-ipfs-pop: ipfs-bank1-fr2
timing-allow-origin: *
x-ipfs-lb-pop: gateway-bank1-fr2
x-bfid: cd0f41b4bf53639cf51235f1db9f6ab8
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-proxy-cache: HIT
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| i.postimg.cc/1zyhynKB/bg.png |  162.19.61.80 | 200 OK | 148 kB |
URL GET HTTP/2i.postimg.cc/1zyhynKB/bg.png IP162.19.61.80:443
Requested byhttps://bafybeiaabas4oscv5jny2siw3tneukj76jrfebevrvv455vrlblicqqyoe.ipfs.cf-ipfs.com/ CertificateIssuerLet's Encrypt Subjectpostimg.cc FingerprintF9:1B:A9:B2:AB:2D:30:75:4E:44:3F:7A:6F:40:77:77:39:CE:1B:13 ValidityWed, 21 Feb 2024 07:13:33 GMT - Tue, 21 May 2024 07:13:32 GMT
File typePNG image data, 1280 x 589, 8-bit/color RGBA, non-interlaced Size148 kB (148425 bytes) Hashc928ead236377018eef3508cefde85a7 c777bb5d8cbb6f758a1cf6d2a4d40dfb449a7e48 d55a412bcdc152e05ae539ce1f769a0c71aeef6336a4de2754b013e2bc11af71
GET /1zyhynKB/bg.png HTTP/1.1
Host: i.postimg.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bafybeiaabas4oscv5jny2siw3tneukj76jrfebevrvv455vrlblicqqyoe.ipfs.cf-ipfs.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Wed, 17 Apr 2024 16:53:04 GMT
content-type: image/png
content-length: 148425
last-modified: Fri, 23 Jun 2023 07:41:48 GMT
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
access-control-allow-origin: *
access-control-allow-methods: GET, OPTIONS
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| i.postimg.cc/3JWwH6wN/apple-touch-icon.png | 162.19.61.80 | 200 OK | 9.2 kB |
URL GET HTTP/2i.postimg.cc/3JWwH6wN/apple-touch-icon.png IP162.19.61.80:443
Requested byhttps://bafybeiaabas4oscv5jny2siw3tneukj76jrfebevrvv455vrlblicqqyoe.ipfs.cf-ipfs.com/ CertificateIssuerLet's Encrypt Subjectpostimg.cc FingerprintF9:1B:A9:B2:AB:2D:30:75:4E:44:3F:7A:6F:40:77:77:39:CE:1B:13 ValidityWed, 21 Feb 2024 07:13:33 GMT - Tue, 21 May 2024 07:13:32 GMT
File typePNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced Hash3c231b07623cd54d8404d053145b43b8 fd1c20f77dc6603bec0dc459de6a39a50273ead9 1a7f1cc031190e273ff7d38dd6d7677444eb018f42dbd77a1a78a411a9ca8f74
GET /3JWwH6wN/apple-touch-icon.png HTTP/1.1
Host: i.postimg.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bafybeiaabas4oscv5jny2siw3tneukj76jrfebevrvv455vrlblicqqyoe.ipfs.cf-ipfs.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 17 Apr 2024 16:53:04 GMT
content-type: image/png
content-length: 9187
last-modified: Fri, 23 Jun 2023 07:40:57 GMT
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
access-control-allow-origin: *
access-control-allow-methods: GET, OPTIONS
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| i.postimg.cc/wxnBg2Rk/favicon-16x16.png | 162.19.61.80 | 200 OK | 352 B |
URL GET HTTP/2i.postimg.cc/wxnBg2Rk/favicon-16x16.png IP162.19.61.80:443
Requested byhttps://bafybeiaabas4oscv5jny2siw3tneukj76jrfebevrvv455vrlblicqqyoe.ipfs.cf-ipfs.com/ CertificateIssuerLet's Encrypt Subjectpostimg.cc FingerprintF9:1B:A9:B2:AB:2D:30:75:4E:44:3F:7A:6F:40:77:77:39:CE:1B:13 ValidityWed, 21 Feb 2024 07:13:33 GMT - Tue, 21 May 2024 07:13:32 GMT
File typePNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced Hash29a7971ab512fe1c421fa65a785d3970 ba837103dd3877c780a0916c061fd2af38eff741 03aa5551ce60e0e703f7239cb2de4c6f26b9ca7802736dbd30c36af16440d3a1
GET /wxnBg2Rk/favicon-16x16.png HTTP/1.1
Host: i.postimg.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bafybeiaabas4oscv5jny2siw3tneukj76jrfebevrvv455vrlblicqqyoe.ipfs.cf-ipfs.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 17 Apr 2024 16:53:04 GMT
content-type: image/png
content-length: 352
last-modified: Fri, 23 Jun 2023 07:42:10 GMT
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
access-control-allow-origin: *
access-control-allow-methods: GET, OPTIONS
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| bafybeiaabas4oscv5jny2siw3tneukj76jrfebevrvv455vrlblicqqyoe.ipfs.cf-ipfs.com/ | 104.17.96.13 | 200 OK | 48 kB |
URL User Request GET HTTP/2bafybeiaabas4oscv5jny2siw3tneukj76jrfebevrvv455vrlblicqqyoe.ipfs.cf-ipfs.com/ IP104.17.96.13:443
CertificateIssuerLet's Encrypt Subjectcf-ipfs.com Fingerprint46:AD:9B:E1:02:E3:A8:FE:9B:E2:86:B5:A1:5C:07:B9:B7:3B:17:14 ValiditySat, 16 Mar 2024 23:28:47 GMT - Fri, 14 Jun 2024 23:28:46 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | WeTransfer | | PhishTank | phishing | Other |
GET / HTTP/1.1
Host: bafybeiaabas4oscv5jny2siw3tneukj76jrfebevrvv455vrlblicqqyoe.ipfs.cf-ipfs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 17 Apr 2024 16:53:03 GMT
content-type: text/html
cf-ray: 875dedd8eeb36df0-CPH
cf-cache-status: MISS
access-control-allow-origin: *
cache-control: public, max-age=29030400, immutable
etag: W/"bafybeiaabas4oscv5jny2siw3tneukj76jrfebevrvv455vrlblicqqyoe"
vary: Accept-Encoding
access-control-allow-headers: Content-Type, Range, User-Agent, X-Requested-With
access-control-allow-methods: GET
access-control-expose-headers: Content-Length, Content-Range, X-Chunked-Output, X-Ipfs-Path, X-Ipfs-Roots, X-Stream-Output
x-cf-ipfs-cache-status: miss
x-ipfs-path: /ipfs/bafybeiaabas4oscv5jny2siw3tneukj76jrfebevrvv455vrlblicqqyoe/
x-ipfs-roots: bafybeiaabas4oscv5jny2siw3tneukj76jrfebevrvv455vrlblicqqyoe
set-cookie: __cf_bm=f6XbTGg6bnCJ_5oQTgTNr3_h1QUL48GQcVJXoZJrhM4-1713372783-1.0.1.1-rk9RxKCRm2_5wyFUULQuKwu5u34e1x5nola7i0gfTbusHWisCjWHZIolKH45zrFK_g3_bsJoPxfIhYUJ87PE1A; path=/; expires=Wed, 17-Apr-24 17:23:03 GMT; domain=.bafybeiaabas4oscv5jny2siw3tneukj76jrfebevrvv455vrlblicqqyoe.ipfs.cf-ipfs.com; HttpOnly; Secure; SameSite=None
server: cloudflare
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| bafybeihzk3r5vvkorkyw6yhdrq6ybyddsqbstgcv563nc4kooxaup7lqee.ipfs.dweb.link/?filename=animate.css | 209.94.90.1 | 200 OK | 53 kB |
URL GET HTTP/2bafybeihzk3r5vvkorkyw6yhdrq6ybyddsqbstgcv563nc4kooxaup7lqee.ipfs.dweb.link/?filename=animate.css IP209.94.90.1:443
Requested byhttps://bafybeiaabas4oscv5jny2siw3tneukj76jrfebevrvv455vrlblicqqyoe.ipfs.cf-ipfs.com/ CertificateIssuerLet's Encrypt Subjectdweb.link Fingerprint2A:D2:03:4C:D3:15:24:93:EF:9E:1F:8F:5A:9C:AF:C4:E2:63:C9:42 ValidityTue, 06 Feb 2024 17:40:37 GMT - Mon, 06 May 2024 17:40:36 GMT
File typeASCII text, with very long lines (52592) Hash178b651958ceff556cbc5f355e08bbf1 97afa151569f046b2e01f27c1871646e9cd87caf 8fe3fa119255adb5e0c12479331f9e092e85bcff56ab6ecc0510bfa2056b898d
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - WeTransfer |
GET /?filename=animate.css HTTP/1.1
Host: bafybeihzk3r5vvkorkyw6yhdrq6ybyddsqbstgcv563nc4kooxaup7lqee.ipfs.dweb.link
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://bafybeiaabas4oscv5jny2siw3tneukj76jrfebevrvv455vrlblicqqyoe.ipfs.cf-ipfs.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: openresty
date: Wed, 17 Apr 2024 16:53:04 GMT
content-type: text/css; charset=utf-8
vary: Accept-Encoding
access-control-allow-headers: Content-Type, Range, User-Agent, X-Requested-With
access-control-allow-methods: GET, HEAD, OPTIONS
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Content-Range, X-Chunked-Output, X-Ipfs-Path, X-Ipfs-Roots, X-Stream-Output
cache-control: public, max-age=29030400, immutable
content-disposition: inline; filename="animate.css"; filename*=UTF-8''animate.css
etag: W/"bafybeihzk3r5vvkorkyw6yhdrq6ybyddsqbstgcv563nc4kooxaup7lqee"
x-ipfs-path: /ipfs/bafybeihzk3r5vvkorkyw6yhdrq6ybyddsqbstgcv563nc4kooxaup7lqee/
x-ipfs-roots: bafybeihzk3r5vvkorkyw6yhdrq6ybyddsqbstgcv563nc4kooxaup7lqee
x-ipfs-pop: ipfs-bank4-fr2
timing-allow-origin: *
x-ipfs-lb-pop: gateway-bank1-fr2
x-bfid: 0583f10192562f2980697931b919a048
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-proxy-cache: HIT
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| bafybeiaabas4oscv5jny2siw3tneukj76jrfebevrvv455vrlblicqqyoe.ipfs.cf-ipfs.com/index_files/webfont.js | 104.17.96.13 | 404 Not Found | 0 B |
URL GET HTTP/2bafybeiaabas4oscv5jny2siw3tneukj76jrfebevrvv455vrlblicqqyoe.ipfs.cf-ipfs.com/index_files/webfont.js IP104.17.96.13:443
Requested byhttps://bafybeiaabas4oscv5jny2siw3tneukj76jrfebevrvv455vrlblicqqyoe.ipfs.cf-ipfs.com/ CertificateIssuerLet's Encrypt Subjectcf-ipfs.com Fingerprint46:AD:9B:E1:02:E3:A8:FE:9B:E2:86:B5:A1:5C:07:B9:B7:3B:17:14 ValiditySat, 16 Mar 2024 23:28:47 GMT - Fri, 14 Jun 2024 23:28:46 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | WeTransfer | | PhishTank | phishing | Other |
GET /index_files/webfont.js HTTP/1.1
Host: bafybeiaabas4oscv5jny2siw3tneukj76jrfebevrvv455vrlblicqqyoe.ipfs.cf-ipfs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bafybeiaabas4oscv5jny2siw3tneukj76jrfebevrvv455vrlblicqqyoe.ipfs.cf-ipfs.com/
Cookie: __cf_bm=f6XbTGg6bnCJ_5oQTgTNr3_h1QUL48GQcVJXoZJrhM4-1713372783-1.0.1.1-rk9RxKCRm2_5wyFUULQuKwu5u34e1x5nola7i0gfTbusHWisCjWHZIolKH45zrFK_g3_bsJoPxfIhYUJ87PE1A
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 404 Not Found
date: Wed, 17 Apr 2024 16:53:04 GMT
content-type: text/plain; charset=utf-8
cf-ray: 875dedde0a2c6df0-CPH
cf-cache-status: HIT
access-control-allow-origin: *
age: 0
cache-control: no-store
vary: Accept-Encoding
access-control-allow-headers: Content-Type, Range, User-Agent, X-Requested-With
access-control-allow-methods: GET
access-control-expose-headers: Content-Length, Content-Range, X-Chunked-Output, X-Ipfs-Path, X-Ipfs-Roots, X-Stream-Output
x-cf-ipfs-cache-status: miss
x-content-type-options: nosniff
x-ipfs-path: /ipfs/bafybeiaabas4oscv5jny2siw3tneukj76jrfebevrvv455vrlblicqqyoe/index_files/webfont.js
server: cloudflare
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| bafybeigeqhk7awdadjfe7mg764ts37prfajxfqry7gsdhb3ku47uwk2tiu.ipfs.dweb.link/?filename=jquery.min.js | 209.94.90.1 | 200 OK | 86 kB |
URL GET HTTP/2bafybeigeqhk7awdadjfe7mg764ts37prfajxfqry7gsdhb3ku47uwk2tiu.ipfs.dweb.link/?filename=jquery.min.js IP209.94.90.1:443
Requested byhttps://bafybeiaabas4oscv5jny2siw3tneukj76jrfebevrvv455vrlblicqqyoe.ipfs.cf-ipfs.com/ CertificateIssuerLet's Encrypt Subjectdweb.link Fingerprint2A:D2:03:4C:D3:15:24:93:EF:9E:1F:8F:5A:9C:AF:C4:E2:63:C9:42 ValidityTue, 06 Feb 2024 17:40:37 GMT - Mon, 06 May 2024 17:40:36 GMT
File typeJavaScript source, ASCII text, with very long lines (32065), with CRLF line terminators Hashbceabde9d4ba653fd1f4bb171bff0c01 c8cdd4f8e91a77cddbc6d9ce8d5f302c52d74b6f 7496a1a9d658f14a47f7ee8dfa70840e47efa61b55b02cda8b316b0fc8dcc2c5
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - WeTransfer |
GET /?filename=jquery.min.js HTTP/1.1
Host: bafybeigeqhk7awdadjfe7mg764ts37prfajxfqry7gsdhb3ku47uwk2tiu.ipfs.dweb.link
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bafybeiaabas4oscv5jny2siw3tneukj76jrfebevrvv455vrlblicqqyoe.ipfs.cf-ipfs.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: openresty
date: Wed, 17 Apr 2024 16:53:03 GMT
content-type: text/javascript; charset=utf-8
vary: Accept-Encoding
access-control-allow-headers: Content-Type, Range, User-Agent, X-Requested-With
access-control-allow-methods: GET, HEAD, OPTIONS
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Content-Range, X-Chunked-Output, X-Ipfs-Path, X-Ipfs-Roots, X-Stream-Output
cache-control: public, max-age=29030400, immutable
content-disposition: inline; filename="jquery.min.js"; filename*=UTF-8''jquery.min.js
etag: W/"bafybeigeqhk7awdadjfe7mg764ts37prfajxfqry7gsdhb3ku47uwk2tiu"
x-ipfs-path: /ipfs/bafybeigeqhk7awdadjfe7mg764ts37prfajxfqry7gsdhb3ku47uwk2tiu/
x-ipfs-roots: bafybeigeqhk7awdadjfe7mg764ts37prfajxfqry7gsdhb3ku47uwk2tiu
x-ipfs-pop: ipfs-bank6-fr2
timing-allow-origin: *
x-ipfs-lb-pop: gateway-bank1-fr2
x-bfid: 66675aec52955d45f9c1b647bfa7bdf7
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-proxy-cache: HIT
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| bafybeiaabas4oscv5jny2siw3tneukj76jrfebevrvv455vrlblicqqyoe.ipfs.cf-ipfs.com/index_files/webfont.js | 104.17.96.13 | 404 Not Found | 0 B |
URL GET HTTP/2bafybeiaabas4oscv5jny2siw3tneukj76jrfebevrvv455vrlblicqqyoe.ipfs.cf-ipfs.com/index_files/webfont.js IP104.17.96.13:443
Requested byhttps://bafybeiaabas4oscv5jny2siw3tneukj76jrfebevrvv455vrlblicqqyoe.ipfs.cf-ipfs.com/ CertificateIssuerLet's Encrypt Subjectcf-ipfs.com Fingerprint46:AD:9B:E1:02:E3:A8:FE:9B:E2:86:B5:A1:5C:07:B9:B7:3B:17:14 ValiditySat, 16 Mar 2024 23:28:47 GMT - Fri, 14 Jun 2024 23:28:46 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | WeTransfer | | PhishTank | phishing | Other |
GET /index_files/webfont.js HTTP/1.1
Host: bafybeiaabas4oscv5jny2siw3tneukj76jrfebevrvv455vrlblicqqyoe.ipfs.cf-ipfs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bafybeiaabas4oscv5jny2siw3tneukj76jrfebevrvv455vrlblicqqyoe.ipfs.cf-ipfs.com/
Cookie: __cf_bm=f6XbTGg6bnCJ_5oQTgTNr3_h1QUL48GQcVJXoZJrhM4-1713372783-1.0.1.1-rk9RxKCRm2_5wyFUULQuKwu5u34e1x5nola7i0gfTbusHWisCjWHZIolKH45zrFK_g3_bsJoPxfIhYUJ87PE1A
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 404 Not Found
date: Wed, 17 Apr 2024 16:53:04 GMT
content-type: text/plain; charset=utf-8
cf-ray: 875deddb4c576df0-CPH
cf-cache-status: EXPIRED
access-control-allow-origin: *
cache-control: no-store
vary: Accept-Encoding
access-control-allow-headers: Content-Type, Range, User-Agent, X-Requested-With
access-control-allow-methods: GET
access-control-expose-headers: Content-Length, Content-Range, X-Chunked-Output, X-Ipfs-Path, X-Ipfs-Roots, X-Stream-Output
x-cf-ipfs-cache-status: miss
x-content-type-options: nosniff
x-ipfs-path: /ipfs/bafybeiaabas4oscv5jny2siw3tneukj76jrfebevrvv455vrlblicqqyoe/index_files/webfont.js
server: cloudflare
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| bafybeibti4iinvd5b2p775563ygtudzqktihggrtnksbmphezza3hn4eoi.ipfs.dweb.link/?filename=sweetalert.js | 209.94.90.1 | 200 OK | 41 kB |
URL GET HTTP/2bafybeibti4iinvd5b2p775563ygtudzqktihggrtnksbmphezza3hn4eoi.ipfs.dweb.link/?filename=sweetalert.js IP209.94.90.1:443
Requested byhttps://bafybeiaabas4oscv5jny2siw3tneukj76jrfebevrvv455vrlblicqqyoe.ipfs.cf-ipfs.com/ CertificateIssuerLet's Encrypt Subjectdweb.link Fingerprint2A:D2:03:4C:D3:15:24:93:EF:9E:1F:8F:5A:9C:AF:C4:E2:63:C9:42 ValidityTue, 06 Feb 2024 17:40:37 GMT - Mon, 06 May 2024 17:40:36 GMT
File typeJavaScript source, ASCII text, with very long lines (40808), with no line terminators Hashf3b8ce97ff6ce324da6232da353adf40 2a3daabc70232c6350ab48d32605dc4a6ac1f1fa 2ac46ebee46d515be86deeba385b4e41f8cff160364b362c9a6e153df327c66b
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - WeTransfer |
GET /?filename=sweetalert.js HTTP/1.1
Host: bafybeibti4iinvd5b2p775563ygtudzqktihggrtnksbmphezza3hn4eoi.ipfs.dweb.link
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://bafybeiaabas4oscv5jny2siw3tneukj76jrfebevrvv455vrlblicqqyoe.ipfs.cf-ipfs.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: openresty
date: Wed, 17 Apr 2024 16:53:04 GMT
content-type: text/javascript; charset=utf-8
vary: Accept-Encoding
access-control-allow-headers: Content-Type, Range, User-Agent, X-Requested-With
access-control-allow-methods: GET, HEAD, OPTIONS
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Content-Range, X-Chunked-Output, X-Ipfs-Path, X-Ipfs-Roots, X-Stream-Output
cache-control: public, max-age=29030400, immutable
content-disposition: inline; filename="sweetalert.js"; filename*=UTF-8''sweetalert.js
etag: W/"bafybeibti4iinvd5b2p775563ygtudzqktihggrtnksbmphezza3hn4eoi"
x-ipfs-path: /ipfs/bafybeibti4iinvd5b2p775563ygtudzqktihggrtnksbmphezza3hn4eoi/
x-ipfs-roots: bafybeibti4iinvd5b2p775563ygtudzqktihggrtnksbmphezza3hn4eoi
x-ipfs-pop: ipfs-bank5-fr2
timing-allow-origin: *
x-ipfs-lb-pop: gateway-bank1-fr2
x-bfid: 4208bddb297a7e8c2420070282523b31
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-proxy-cache: HIT
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| bafybeibqo6sij2nxln2lh3l4bhpufkriqsc6vtcni44smmcw2hskahjtxq.ipfs.dweb.link/?filename=jquery.js | 209.94.90.1 | 200 OK | 87 kB |
URL GET HTTP/2bafybeibqo6sij2nxln2lh3l4bhpufkriqsc6vtcni44smmcw2hskahjtxq.ipfs.dweb.link/?filename=jquery.js IP209.94.90.1:443
Requested byhttps://bafybeiaabas4oscv5jny2siw3tneukj76jrfebevrvv455vrlblicqqyoe.ipfs.cf-ipfs.com/ CertificateIssuerLet's Encrypt Subjectdweb.link Fingerprint2A:D2:03:4C:D3:15:24:93:EF:9E:1F:8F:5A:9C:AF:C4:E2:63:C9:42 ValidityTue, 06 Feb 2024 17:40:37 GMT - Mon, 06 May 2024 17:40:36 GMT
File typeJavaScript source, ASCII text, with very long lines (65451) Hasha09e13ee94d51c524b7e2a728c7d4039 0dc32db4aa9c5f03f3b38c47d883dbd4fed13aae 160a426ff2894252cd7cebbdd6d6b7da8fcd319c65b70468f10b6690c45d02ef
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - WeTransfer |
GET /?filename=jquery.js HTTP/1.1
Host: bafybeibqo6sij2nxln2lh3l4bhpufkriqsc6vtcni44smmcw2hskahjtxq.ipfs.dweb.link
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://bafybeiaabas4oscv5jny2siw3tneukj76jrfebevrvv455vrlblicqqyoe.ipfs.cf-ipfs.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: openresty
date: Wed, 17 Apr 2024 16:53:04 GMT
content-type: text/javascript; charset=utf-8
vary: Accept-Encoding
access-control-allow-headers: Content-Type, Range, User-Agent, X-Requested-With
access-control-allow-methods: GET, HEAD, OPTIONS
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Content-Range, X-Chunked-Output, X-Ipfs-Path, X-Ipfs-Roots, X-Stream-Output
cache-control: public, max-age=29030400, immutable
content-disposition: inline; filename="jquery.js"; filename*=UTF-8''jquery.js
etag: W/"bafybeibqo6sij2nxln2lh3l4bhpufkriqsc6vtcni44smmcw2hskahjtxq"
x-ipfs-path: /ipfs/bafybeibqo6sij2nxln2lh3l4bhpufkriqsc6vtcni44smmcw2hskahjtxq/
x-ipfs-roots: bafybeibqo6sij2nxln2lh3l4bhpufkriqsc6vtcni44smmcw2hskahjtxq
x-ipfs-pop: ipfs-bank4-fr2
timing-allow-origin: *
x-ipfs-lb-pop: gateway-bank1-fr2
x-bfid: 93a12fa4de94a908d8d1df1d4f5be7a5
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-proxy-cache: HIT
content-encoding: gzip
X-Firefox-Spdy: h2
|
|