| code.jquery.com/jquery-3.4.1.min.js |  151.101.2.137 | 200 OK | 31 kB |
URL GET HTTP/2code.jquery.com/jquery-3.4.1.min.js IP151.101.2.137:443
Requested byhttps://bitter-glitter-3cd5.epd5tuee.workers.dev/1b0fc4be-8e45-41dd-abce-ff937c9f903e CertificateIssuerSectigo Limited Subject*.jquery.com FingerprintD2:19:0A:AD:CE:BB:9C:61:17:5D:29:4B:A2:54:E8:C6:91:B8:F9:8D ValidityTue, 11 Jul 2023 00:00:00 GMT - Sun, 14 Jul 2024 23:59:59 GMT
File typeASCII text, with very long lines (65451) Hash220afd743d9e9643852e31a135a9f3ae 88523924351bac0b5d560fe0c5781e2556e7693d 0925e8ad7bd971391a8b1e98be8e87a6971919eb5b60c196485941c3c1df089a
GET /jquery-3.4.1.min.js HTTP/1.1
Host: code.jquery.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bitter-glitter-3cd5.epd5tuee.workers.dev/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Fri, 18 Oct 1991 12:00:00 GMT
etag: W/"28feccc0-15851"
cache-control: public, max-age=31536000, stale-while-revalidate=604800
access-control-allow-origin: *
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Wed, 06 Dec 2023 16:16:34 GMT
age: 7077193
x-served-by: cache-lga21965-LGA, cache-bma1631-BMA
x-cache: HIT, HIT
x-cache-hits: 9, 532368
x-timer: S1701879395.569293,VS0,VE0
vary: Accept-Encoding
content-length: 30638
X-Firefox-Spdy: h2
|
|
| api.rename-service0.workers.dev/heagregauwe.png | 172.67.209.83 | 200 OK | 1.7 kB |
URL GET HTTP/2api.rename-service0.workers.dev/heagregauwe.png IP172.67.209.83:443
Requested byhttps://bitter-glitter-3cd5.epd5tuee.workers.dev/1b0fc4be-8e45-41dd-abce-ff937c9f903e CertificateIssuerGoogle Trust Services LLC Subjectrename-service0.workers.dev Fingerprint0E:56:FC:E4:D9:A4:3B:15:98:BF:B9:CA:32:BE:52:2A:E6:95:41:AE ValidityThu, 12 Oct 2023 04:29:51 GMT - Wed, 10 Jan 2024 04:29:50 GMT
File typePNG image data, 128 x 28, 8-bit/color RGBA, non-interlaced\012- data Hashd44e44807a2c4cb00a239af39d565264 aa8f4de7d37140a3bca9725cd791da8283a7a5b4 7248b8c4a08b8a45d4add928a459a98f12d61c02f5a7886f14bec7084e8ffdcb
GET /heagregauwe.png HTTP/1.1
Host: api.rename-service0.workers.dev
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 06 Dec 2023 16:16:37 GMT
content-type: image/png
content-length: 1737
cf-cache-status: MISS
accept-ranges: bytes
etag: "heagregauwe.b2def557d4.png"
feature-policy: none
referrer-policy: unsafe-url
x-content-type-options: nosniff
x-frame-options: DENY
x-xss-protection: 1; mode=block
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=jDD712gOHA2c6g0h5w5JsWEvuW9FeogOMVKV07%2B9HwlPpujD%2FWwE4%2Fzx4MaInkdtCJAWCVPf7VRod5ivkDbMmvx1cpcO3%2FeH%2F3CPt04NhcJCi6RpRHGiUMYnOU25b%2Fc41d3DAhQ4fhpGu7R9cw1nrMfk"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8315d59afc0456b5-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| api.rename-service0.workers.dev/otSDKStub.js/consent//.json | 172.67.209.83 | 404 Not Found | 1.2 kB |
URL GET HTTP/3api.rename-service0.workers.dev/otSDKStub.js/consent//.json IP172.67.209.83:443
Requested byhttps://bitter-glitter-3cd5.epd5tuee.workers.dev/1b0fc4be-8e45-41dd-abce-ff937c9f903e CertificateIssuerGoogle Trust Services LLC Subjectrename-service0.workers.dev Fingerprint0E:56:FC:E4:D9:A4:3B:15:98:BF:B9:CA:32:BE:52:2A:E6:95:41:AE ValidityThu, 12 Oct 2023 04:29:51 GMT - Wed, 10 Jan 2024 04:29:50 GMT
File typeHTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text Hash2651ace67d355424b9fab1835e9e4999 9cb906ac8673baae3c257119aba1748925b5ff9c adb3f83748bb48498ab46c1c2d8e88ca9e982e5412231beef5a5a80bd045d1e0
GET /otSDKStub.js/consent//.json HTTP/1.1
Host: api.rename-service0.workers.dev
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://bitter-glitter-3cd5.epd5tuee.workers.dev
DNT: 1
Connection: keep-alive
Referer: https://bitter-glitter-3cd5.epd5tuee.workers.dev/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 404 Not Found
date: Wed, 06 Dec 2023 16:16:38 GMT
content-length: 1228
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ckhJTLX8TBgfh2o%2BokPLd7G41EOMhDzH2tGNvthbtQxwU9R2ljdkaU%2Bewt4n9HAtpVPooFMfSlhIt1qosCN2irp7vbY9u3CmSzFqLR7TKGtj6ybBAWB0jGDE%2B5nQmRqgKC9uugEBt1BV0azjTgGumuph"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8315d59ccff756b7-OSL
alt-svc: h3=":443"; ma=86400
|
|
| bitter-glitter-3cd5.epd5tuee.workers.dev/1b0fc4be-8e45-41dd-abce-ff937c9f903e |  188.114.96.1 | 200 OK | 4.4 MB |
URL User Request GET HTTP/2bitter-glitter-3cd5.epd5tuee.workers.dev/1b0fc4be-8e45-41dd-abce-ff937c9f903e IP188.114.96.1:443
CertificateIssuerGoogle Trust Services LLC Subjectepd5tuee.workers.dev Fingerprint95:4D:51:B4:20:C9:09:C5:41:01:76:CD:2A:08:65:B2:5C:D6:03:6A ValiditySun, 08 Oct 2023 21:51:39 GMT - Sat, 06 Jan 2024 21:51:38 GMT
Size4.4 MB (4363776 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | InterActiveCorp | | PhishTank | phishing | Other |
GET /1b0fc4be-8e45-41dd-abce-ff937c9f903e HTTP/1.1
Host: bitter-glitter-3cd5.epd5tuee.workers.dev
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 06 Dec 2023 16:16:34 GMT
content-type: text/html;charset=UTF-8
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=4qe6%2FVW9cKpdCBA4XCPfd9Wv%2F%2BFT3ZiN1SQVulc9OGtsZtNvcMhJ2TaJyBom%2BmUOAh3qnOIhRWYZxXPo8BL2k6cIlPVoJKdpDq2SQdn0IvZTFoMROgaGss1devRZ%2BrF8Oodh5BQosyLu2kyH4Y%2F1ufLkklZB154sO3Vi"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8315d5846935b529-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| api.rename-service0.workers.dev/jquery-3.5.1.min.js | 172.67.209.83 | 200 OK | 90 kB |
URL GET HTTP/2api.rename-service0.workers.dev/jquery-3.5.1.min.js IP172.67.209.83:443
Requested byhttps://bitter-glitter-3cd5.epd5tuee.workers.dev/1b0fc4be-8e45-41dd-abce-ff937c9f903e CertificateIssuerGoogle Trust Services LLC Subjectrename-service0.workers.dev Fingerprint0E:56:FC:E4:D9:A4:3B:15:98:BF:B9:CA:32:BE:52:2A:E6:95:41:AE ValidityThu, 12 Oct 2023 04:29:51 GMT - Wed, 10 Jan 2024 04:29:50 GMT
File typeASCII text, with very long lines (65450), with CRLF line terminators Hashb61aa6e2d68d21b3546b5b418bf0e9c3 9c1398f0de4c869dacb1c9ab1a8cc327f5421ff7 f36844906ad2309877aae3121b87fb15b9e09803cb4c333adc7e1e35ac92e14b
GET /jquery-3.5.1.min.js HTTP/1.1
Host: api.rename-service0.workers.dev
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 06 Dec 2023 16:16:38 GMT
content-type: application/javascript; charset=utf-8
cf-cache-status: MISS
etag: W/"jquery-3.5.1.min.76bb118f46.js"
feature-policy: none
referrer-policy: unsafe-url
x-content-type-options: nosniff
x-frame-options: DENY
x-xss-protection: 1; mode=block
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=smK3PcjaKF2uBiyO8rIfH4lyFy4L2DJyZanLN%2FatPo3dxXmjowWMS%2BGX8hVzDU2NOhLjnGyqmdj9CpPncpsVYcWZoeTC0amUQ1vsetdAoMvG1QZqDpxNI0dsDeTrOazyZ%2FEpHyfHYnbbhCP6J66hhwN4"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8315d59afc0a56b5-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| api.rename-service0.workers.dev/font-1.2.css | 172.67.209.83 | 200 OK | 1.6 kB |
URL GET HTTP/3api.rename-service0.workers.dev/font-1.2.css IP172.67.209.83:443
Requested byhttps://bitter-glitter-3cd5.epd5tuee.workers.dev/1b0fc4be-8e45-41dd-abce-ff937c9f903e CertificateIssuerGoogle Trust Services LLC Subjectrename-service0.workers.dev Fingerprint0E:56:FC:E4:D9:A4:3B:15:98:BF:B9:CA:32:BE:52:2A:E6:95:41:AE ValidityThu, 12 Oct 2023 04:29:51 GMT - Wed, 10 Jan 2024 04:29:50 GMT
File typeASCII text, with very long lines (1665), with no line terminators Hasha51b2b6fa50bc70faef5910e19e1b35d a409b40e3e92ec8e20b02239b9043beca4e6d5a3 d93a407ab19d1887a8a80515b78ea1e75b7775d47fd16da40ac180ce1666ed60
GET /font-1.2.css HTTP/1.1
Host: api.rename-service0.workers.dev
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 06 Dec 2023 16:16:38 GMT
content-type: text/css; charset=utf-8
cf-cache-status: MISS
etag: W/"font-1.2.c193dd3ef6.css"
feature-policy: none
referrer-policy: unsafe-url
x-content-type-options: nosniff
x-frame-options: DENY
x-xss-protection: 1; mode=block
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2F17%2FdyM90tBZ1ngmItN%2FFn8asYwGzAnNrFmjMhq8QzvCeMHFYGmtvwJ86SBXgqidRSFPiN0QTNESTxQ9%2BJAranC69B2PRlYWt43y33Mt74fKH81XPiGZRBJApWNO1nrFJKT08D4RCz4sseg4uO5Wbk6Z"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8315d59d9d4e5685-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| api.rename-service0.workers.dev/redesign_fonts.css | 172.67.209.83 | 200 OK | 4.8 kB |
URL GET HTTP/3api.rename-service0.workers.dev/redesign_fonts.css IP172.67.209.83:443
Requested byhttps://bitter-glitter-3cd5.epd5tuee.workers.dev/1b0fc4be-8e45-41dd-abce-ff937c9f903e CertificateIssuerGoogle Trust Services LLC Subjectrename-service0.workers.dev Fingerprint0E:56:FC:E4:D9:A4:3B:15:98:BF:B9:CA:32:BE:52:2A:E6:95:41:AE ValidityThu, 12 Oct 2023 04:29:51 GMT - Wed, 10 Jan 2024 04:29:50 GMT
File typeASCII text, with very long lines (5109), with no line terminators Hash1140797b975a97c858b5c89932788501 d8fd9eca263f7afda861b2a27f7294754edff425 8dd3051b351fefb5a22ed6fa416f30834cab45acf060f1ea992a8b4880c6da39
GET /redesign_fonts.css HTTP/1.1
Host: api.rename-service0.workers.dev
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 06 Dec 2023 16:16:38 GMT
content-type: text/css; charset=utf-8
cf-cache-status: MISS
etag: W/"redesign_fonts.ab1e65f9f5.css"
feature-policy: none
referrer-policy: unsafe-url
x-content-type-options: nosniff
x-frame-options: DENY
x-xss-protection: 1; mode=block
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=MeJuu5N%2FsnaO6GVOABrEsG9%2BRwSTGJEnlw1K6to7V590wyUkIWQhGX6uRwKa3vFHGKSqAKqFTaUSZpZo6uNz6e%2BmlbUycE5TU7CTTAEiR8baPGZoKAzKvdiMoUai3Q57eXTHaGuI%2Fu%2B4waNdtNu9hUhR"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8315d59d9d4f5685-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| api.rename-service0.workers.dev/166.css | 172.67.209.83 | 200 OK | 428 B |
URL GET HTTP/3api.rename-service0.workers.dev/166.css IP172.67.209.83:443
Requested byhttps://bitter-glitter-3cd5.epd5tuee.workers.dev/1b0fc4be-8e45-41dd-abce-ff937c9f903e CertificateIssuerGoogle Trust Services LLC Subjectrename-service0.workers.dev Fingerprint0E:56:FC:E4:D9:A4:3B:15:98:BF:B9:CA:32:BE:52:2A:E6:95:41:AE ValidityThu, 12 Oct 2023 04:29:51 GMT - Wed, 10 Jan 2024 04:29:50 GMT
File typeASCII text, with very long lines (433), with no line terminators Hash70a72483073524335ac303970d3d5a3d e82b779b500e3d1d2463a058c6a8729e77345e3a 4fd4d6405354e1b613eeed7c90b0edb33e1a7587de65e6bcf0c6a4d00e716691
GET /166.css HTTP/1.1
Host: api.rename-service0.workers.dev
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 06 Dec 2023 16:16:38 GMT
content-type: text/css; charset=utf-8
cf-cache-status: MISS
etag: W/"166.32916c6d57.css"
feature-policy: none
referrer-policy: unsafe-url
x-content-type-options: nosniff
x-frame-options: DENY
x-xss-protection: 1; mode=block
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=xrady4hx%2BGO%2Bp3UHQia755wUbiOai5eUBfRbwMmZYiqhlsHRwGqbyXcziN%2BLPx3D3fJ3iqvS1rnHKPELGci4%2Byj7%2BID5S5sj%2BCE6Rro%2FxjzJVzfYxuZ2fJsNn9YudytgMpvwDugS%2BYHdCjpHX24u3LU2"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8315d59d9d535685-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| api.rename-service0.workers.dev/jquery-migrate-3.3.1.min.js | 172.67.209.83 | 200 OK | 11 kB |
URL GET HTTP/2api.rename-service0.workers.dev/jquery-migrate-3.3.1.min.js IP172.67.209.83:443
Requested byhttps://bitter-glitter-3cd5.epd5tuee.workers.dev/1b0fc4be-8e45-41dd-abce-ff937c9f903e CertificateIssuerGoogle Trust Services LLC Subjectrename-service0.workers.dev Fingerprint0E:56:FC:E4:D9:A4:3B:15:98:BF:B9:CA:32:BE:52:2A:E6:95:41:AE ValidityThu, 12 Oct 2023 04:29:51 GMT - Wed, 10 Jan 2024 04:29:50 GMT
File typeASCII text, with very long lines (10878), with CRLF line terminators Hash68f90fa1b7a532a073bd613f011a9c97 a4fd8d2e4556e6348d067212da590d56dc30b8a5 90a8d6a27a26f746b4b263102f4fe120e956d99e3789325aafc7d6b7ca0ff0e4
GET /jquery-migrate-3.3.1.min.js HTTP/1.1
Host: api.rename-service0.workers.dev
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 06 Dec 2023 16:16:37 GMT
content-type: application/javascript; charset=utf-8
cf-cache-status: MISS
etag: W/"jquery-migrate-3.3.1.min.4a9b3d1a73.js"
feature-policy: none
referrer-policy: unsafe-url
x-content-type-options: nosniff
x-frame-options: DENY
x-xss-protection: 1; mode=block
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=QBIyHKhHzhq5qYaSuOA9665k%2BsZ%2BilYCNcYm%2FdNVloLIcL4fz6vtH1kEWNNayupfEvDTjBhiuMj%2F8K73ElT8eVI%2FNiI5VYI27unR%2BsJmPuiwLAInYF%2BZY%2BALvgzObBc0ogYFr4xrPUfzi0bmj1bjCUbd"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8315d59afc0b56b5-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| api.rename-service0.workers.dev/moment.min.js | 172.67.209.83 | 200 OK | 18 kB |
URL GET HTTP/2api.rename-service0.workers.dev/moment.min.js IP172.67.209.83:443
Requested byhttps://bitter-glitter-3cd5.epd5tuee.workers.dev/1b0fc4be-8e45-41dd-abce-ff937c9f903e CertificateIssuerGoogle Trust Services LLC Subjectrename-service0.workers.dev Fingerprint0E:56:FC:E4:D9:A4:3B:15:98:BF:B9:CA:32:BE:52:2A:E6:95:41:AE ValidityThu, 12 Oct 2023 04:29:51 GMT - Wed, 10 Jan 2024 04:29:50 GMT
File typeASCII text, with very long lines (17967), with CRLF line terminators Hash84d735d23a016342e3d247476caecfd2 ba0bf8f19793ef81b0a15b9a41a3463b0c6e6ed9 5a52005e60e92f39a0744fe733d45496ad3769634edbbbc74df1267f9639f522
GET /moment.min.js HTTP/1.1
Host: api.rename-service0.workers.dev
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 06 Dec 2023 16:16:37 GMT
content-type: application/javascript; charset=utf-8
cf-cache-status: MISS
etag: W/"moment.min.7f22d534a7.js"
feature-policy: none
referrer-policy: unsafe-url
x-content-type-options: nosniff
x-frame-options: DENY
x-xss-protection: 1; mode=block
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=3a7pmw8QVVq4Mkyr8uv7CJYJsaYcAVDZjC1IgYZbjiCVE%2BfTtgG5SNa%2B6KHixN2diQWjUZ44bP%2Fkz646e3Iv6eR2FCVmqEO7g7Tvms0VO5u5vIIMQSHVExjw4ks0kLyIt7zyCDNFA1edV1y%2BOtAH%2BrLi"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8315d59b0c0e56b5-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| api.rename-service0.workers.dev/base_external.css | 172.67.209.83 | 200 OK | 30 kB |
URL GET HTTP/3api.rename-service0.workers.dev/base_external.css IP172.67.209.83:443
Requested byhttps://bitter-glitter-3cd5.epd5tuee.workers.dev/1b0fc4be-8e45-41dd-abce-ff937c9f903e CertificateIssuerGoogle Trust Services LLC Subjectrename-service0.workers.dev Fingerprint0E:56:FC:E4:D9:A4:3B:15:98:BF:B9:CA:32:BE:52:2A:E6:95:41:AE ValidityThu, 12 Oct 2023 04:29:51 GMT - Wed, 10 Jan 2024 04:29:50 GMT
File typeASCII text, with very long lines (30269) Hashfada22ae6813bebe5f4e709d296a20b2 9b26b404c2dbe3b7136de5dd54b1c07d268a9db2 891410621746b2ff6d1e4830eb0d819521c9b01e9e213257fcd4d2f554ff1a61
GET /base_external.css HTTP/1.1
Host: api.rename-service0.workers.dev
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 06 Dec 2023 16:16:38 GMT
content-type: text/css; charset=utf-8
cf-cache-status: MISS
etag: W/"base_external.4e102eeb51.css"
feature-policy: none
referrer-policy: unsafe-url
x-content-type-options: nosniff
x-frame-options: DENY
x-xss-protection: 1; mode=block
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Wexe%2B7nGb0zZebP7fo7wkmEyrtUlBUzBEUXSC3ighUSYKpY0S78gBC6sXyxZmm2%2BpRNsCfFjiPrxDWaxZJquh%2FGV5xRPw%2FpWGUsWadpRgkmm%2FSXQSf%2FH8DJxcoJaNox842CEGc61djj8O8%2Bd0%2BuITPmr"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8315d59d9d525685-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| bitter-glitter-3cd5.epd5tuee.workers.dev/favicon.ico | 188.114.96.1 | 200 OK | 4.4 MB |
URL GET HTTP/3bitter-glitter-3cd5.epd5tuee.workers.dev/favicon.ico IP188.114.96.1:443
Requested byhttps://bitter-glitter-3cd5.epd5tuee.workers.dev/1b0fc4be-8e45-41dd-abce-ff937c9f903e CertificateIssuerGoogle Trust Services LLC Subjectepd5tuee.workers.dev Fingerprint95:4D:51:B4:20:C9:09:C5:41:01:76:CD:2A:08:65:B2:5C:D6:03:6A ValiditySun, 08 Oct 2023 21:51:39 GMT - Sat, 06 Jan 2024 21:51:38 GMT
Size4.4 MB (4363776 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | InterActiveCorp | | PhishTank | phishing | Other |
GET /favicon.ico HTTP/1.1
Host: bitter-glitter-3cd5.epd5tuee.workers.dev
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bitter-glitter-3cd5.epd5tuee.workers.dev/1b0fc4be-8e45-41dd-abce-ff937c9f903e
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 06 Dec 2023 16:16:35 GMT
content-type: text/html;charset=UTF-8
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=fsCHdQCtfKBH2H7uw93NADELxsJEoSUmMu8qvAbichayfZFdgxajYe0Gn6DWulgh8WPZbKWgnJ1oI6cz%2BcMxSOtP1k0TB%2F69YutFJuiHGubePPioWQKUNpaXW01722kwje%2FOqz4w%2BrBNJYFTYbZgJHYU92xVEKNZPouQ"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8315d58c1917568d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| api.rename-service0.workers.dev/css?family=PT+Sans:700 | 172.67.209.83 | 200 OK | 7.1 kB |
URL GET HTTP/3api.rename-service0.workers.dev/css?family=PT+Sans:700 IP172.67.209.83:443
Requested byhttps://bitter-glitter-3cd5.epd5tuee.workers.dev/1b0fc4be-8e45-41dd-abce-ff937c9f903e CertificateIssuerGoogle Trust Services LLC Subjectrename-service0.workers.dev Fingerprint0E:56:FC:E4:D9:A4:3B:15:98:BF:B9:CA:32:BE:52:2A:E6:95:41:AE ValidityThu, 12 Oct 2023 04:29:51 GMT - Wed, 10 Jan 2024 04:29:50 GMT
File typeASCII text, with very long lines (7246), with no line terminators Hash45239f251b1582f037d06660716ed308 a3251fb6285d5cfca557b73816b767ca150545fe 2bd38bdd2bba893c5e3d524f54171835f4057bafd37404a22196a835dc176ab0
GET /css?family=PT+Sans:700 HTTP/1.1
Host: api.rename-service0.workers.dev
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 06 Dec 2023 16:16:38 GMT
content-type: text/css; charset=utf-8
cf-cache-status: MISS
etag: W/"css.1da7928062"
feature-policy: none
referrer-policy: unsafe-url
x-content-type-options: nosniff
x-frame-options: DENY
x-xss-protection: 1; mode=block
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=C0OORTV4otnEk2m1jm0s7q5jrfBVTQXt0Q%2BXWOVVOjBX18eMddo2Y2FckHvp0zWHTZ%2B%2BJFwS%2ByHZOcsZ9gqgBbwPZGSfo%2B5riSdZlVVWhP9oa80fSt1%2FfLC1coZOrvIrSiCONBn9b%2F5tRKkCv0C5VNyD"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8315d59d8d395685-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| api.rename-service0.workers.dev/css?family=PT+Sans:400italic | 172.67.209.83 | 200 OK | 7.1 kB |
URL GET HTTP/3api.rename-service0.workers.dev/css?family=PT+Sans:400italic IP172.67.209.83:443
Requested byhttps://bitter-glitter-3cd5.epd5tuee.workers.dev/1b0fc4be-8e45-41dd-abce-ff937c9f903e CertificateIssuerGoogle Trust Services LLC Subjectrename-service0.workers.dev Fingerprint0E:56:FC:E4:D9:A4:3B:15:98:BF:B9:CA:32:BE:52:2A:E6:95:41:AE ValidityThu, 12 Oct 2023 04:29:51 GMT - Wed, 10 Jan 2024 04:29:50 GMT
File typeASCII text, with very long lines (7246), with no line terminators Hash45239f251b1582f037d06660716ed308 a3251fb6285d5cfca557b73816b767ca150545fe 2bd38bdd2bba893c5e3d524f54171835f4057bafd37404a22196a835dc176ab0
GET /css?family=PT+Sans:400italic HTTP/1.1
Host: api.rename-service0.workers.dev
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 06 Dec 2023 16:16:38 GMT
content-type: text/css; charset=utf-8
cf-cache-status: MISS
etag: W/"css.1da7928062"
feature-policy: none
referrer-policy: unsafe-url
x-content-type-options: nosniff
x-frame-options: DENY
x-xss-protection: 1; mode=block
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=91Lz1ZTIYDt5ZkQsNIpahYCK4GvdH1QQoz%2FhWtpInLDaQUeDlnI9cgfK5LFzMO%2B3ZIfjcujtkSrj%2BWt0DC7n2nfiHIEoK8Xgxk6wZTfNA6GlcUQDdBfXTXw5%2FG8usulXHTZO8garPk3DoFdN%2FnE5T1MZ"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8315d59d8d3e5685-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| imgs.rename-service0.workers.dev/782yfuiha4398.ico |  0.0.0.0 | | 0 B |
URL GET imgs.rename-service0.workers.dev/782yfuiha4398.ico IP0.0.0.0:0
Requested byhttps://bitter-glitter-3cd5.epd5tuee.workers.dev/1b0fc4be-8e45-41dd-abce-ff937c9f903e CertificateIssuerGoogle Trust Services LLC Subjectrename-service0.workers.dev Fingerprint0E:56:FC:E4:D9:A4:3B:15:98:BF:B9:CA:32:BE:52:2A:E6:95:41:AE ValidityThu, 12 Oct 2023 04:29:51 GMT - Wed, 10 Jan 2024 04:29:50 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /782yfuiha4398.ico HTTP/1.1
Host: imgs.rename-service0.workers.dev
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 06 Dec 2023 16:16:39 GMT
content-type: image/vnd.microsoft.icon
cf-cache-status: MISS
etag: W/"782yfuiha4398.49f6f302d9.ico"
feature-policy: none
referrer-policy: unsafe-url
x-content-type-options: nosniff
x-frame-options: DENY
x-xss-protection: 1; mode=block
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=C9qR43pUmqzWbGUnI7F5zAYJ3OF8iVbGPJUE6Ph5BKdH9QSAg8a1nqlbOD%2FJlTj%2FwxkUqpNLK8hjaa3BLEWkmKVM4GLNtZqmu3c7yYP001XUim%2FYDuvbCabiNtmp5xoNNN678EEIPr0XvhE%2B9EFdlMqgnQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8315d5a79eee5685-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| api.rename-service0.workers.dev/otSDKStub.js | 172.67.209.83 | 200 OK | 19 kB |
URL GET HTTP/2api.rename-service0.workers.dev/otSDKStub.js IP172.67.209.83:443
Requested byhttps://bitter-glitter-3cd5.epd5tuee.workers.dev/1b0fc4be-8e45-41dd-abce-ff937c9f903e CertificateIssuerGoogle Trust Services LLC Subjectrename-service0.workers.dev Fingerprint0E:56:FC:E4:D9:A4:3B:15:98:BF:B9:CA:32:BE:52:2A:E6:95:41:AE ValidityThu, 12 Oct 2023 04:29:51 GMT - Wed, 10 Jan 2024 04:29:50 GMT
File typeASCII text, with very long lines (19050) Hash9bd02f97086983b13a1ba0f2ace23a34 b7da87ca35222ded535d85d1a2d8ed33c734f2c3 11b947e74a7ba8f1d433b84ab7a719799ec0662a9035a8b4a2ab4d7d1eb2d681
GET /otSDKStub.js HTTP/1.1
Host: api.rename-service0.workers.dev
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 06 Dec 2023 16:16:37 GMT
content-type: application/javascript; charset=utf-8
cf-cache-status: MISS
etag: W/"otSDKStub.3b2ba3d591.js"
feature-policy: none
referrer-policy: unsafe-url
x-content-type-options: nosniff
x-frame-options: DENY
x-xss-protection: 1; mode=block
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=chzUYGkUvfp87%2FTFl4CZzT1dhtHbi87PYD4nIgCchiNIy9D%2BSeCFiroo2RjIkfS438xECEOcAp8ABbKgCWa%2FWzhrgqWEjMlzdGRMxz47QWgwUUrNV1Dwlekzvg9ec%2Br5AXOzgK8nFhYgcqu5phGtH14a"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8315d59afc0356b5-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| api.rename-service0.workers.dev/js?id=UA-1817027-45 | 172.67.209.83 | 200 OK | 96 kB |
URL GET HTTP/2api.rename-service0.workers.dev/js?id=UA-1817027-45 IP172.67.209.83:443
Requested byhttps://bitter-glitter-3cd5.epd5tuee.workers.dev/1b0fc4be-8e45-41dd-abce-ff937c9f903e CertificateIssuerGoogle Trust Services LLC Subjectrename-service0.workers.dev Fingerprint0E:56:FC:E4:D9:A4:3B:15:98:BF:B9:CA:32:BE:52:2A:E6:95:41:AE ValidityThu, 12 Oct 2023 04:29:51 GMT - Wed, 10 Jan 2024 04:29:50 GMT
File typeASCII text, with very long lines (1567) Hashc1277eaf2fba47836bedee41d16ed8d0 716f0753108d0704e98e9bfa0672851b1cf79519 2cfb61c5b4464a49bf1a1867ab3c06ad790468ab0d6b3dec415a5929b20dac85
GET /js?id=UA-1817027-45 HTTP/1.1
Host: api.rename-service0.workers.dev
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 06 Dec 2023 16:16:37 GMT
content-type: application/javascript; charset=utf-8
cf-cache-status: MISS
etag: W/"js.28fa744248"
feature-policy: none
referrer-policy: unsafe-url
x-content-type-options: nosniff
x-frame-options: DENY
x-xss-protection: 1; mode=block
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Z2QLhM89Y4GhC1VW0P3V%2FaOgvjLyvaUnoglxHc81640aJwzobXnl%2FlxKPBaGkFLYj21gQ2vGVRpvhyIyXHkLe5ura2EGcjmclpbIrrw8W%2FE6Y4SfNOWd8ud2hPnZgfTtNemqsqT1Udf%2FjpPCg7M%2F7DYE"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8315d59afc0956b5-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| api.rename-service0.workers.dev/css?family=PT+Sans:400 | 172.67.209.83 | 200 OK | 7.1 kB |
URL GET HTTP/3api.rename-service0.workers.dev/css?family=PT+Sans:400 IP172.67.209.83:443
Requested byhttps://bitter-glitter-3cd5.epd5tuee.workers.dev/1b0fc4be-8e45-41dd-abce-ff937c9f903e CertificateIssuerGoogle Trust Services LLC Subjectrename-service0.workers.dev Fingerprint0E:56:FC:E4:D9:A4:3B:15:98:BF:B9:CA:32:BE:52:2A:E6:95:41:AE ValidityThu, 12 Oct 2023 04:29:51 GMT - Wed, 10 Jan 2024 04:29:50 GMT
File typeASCII text, with very long lines (7246), with no line terminators Hash45239f251b1582f037d06660716ed308 a3251fb6285d5cfca557b73816b767ca150545fe 2bd38bdd2bba893c5e3d524f54171835f4057bafd37404a22196a835dc176ab0
GET /css?family=PT+Sans:400 HTTP/1.1
Host: api.rename-service0.workers.dev
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 06 Dec 2023 16:16:38 GMT
content-type: text/css; charset=utf-8
cf-cache-status: MISS
etag: W/"css.1da7928062"
feature-policy: none
referrer-policy: unsafe-url
x-content-type-options: nosniff
x-frame-options: DENY
x-xss-protection: 1; mode=block
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=JfS%2B%2BsGJS5wNnbnG8ZfNcsy7XUYgO7Vpfoo6I4gHwz6OYQZdjKvQ7jLGyk0E58pN0aVMc1zKx%2Bay9aQEAnL7U4zjZNGj93HxAZiDCNq5CeBM372XgPSuqzQj%2BvyqWRsvvs7BDIjWBlfWFIlTkGHE4eCf"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8315d59d8d365685-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| api.rename-service0.workers.dev/css?family=PT+Sans:700italic | 172.67.209.83 | 200 OK | 7.1 kB |
URL GET HTTP/3api.rename-service0.workers.dev/css?family=PT+Sans:700italic IP172.67.209.83:443
Requested byhttps://bitter-glitter-3cd5.epd5tuee.workers.dev/1b0fc4be-8e45-41dd-abce-ff937c9f903e CertificateIssuerGoogle Trust Services LLC Subjectrename-service0.workers.dev Fingerprint0E:56:FC:E4:D9:A4:3B:15:98:BF:B9:CA:32:BE:52:2A:E6:95:41:AE ValidityThu, 12 Oct 2023 04:29:51 GMT - Wed, 10 Jan 2024 04:29:50 GMT
File typeASCII text, with very long lines (7246), with no line terminators Hash45239f251b1582f037d06660716ed308 a3251fb6285d5cfca557b73816b767ca150545fe 2bd38bdd2bba893c5e3d524f54171835f4057bafd37404a22196a835dc176ab0
GET /css?family=PT+Sans:700italic HTTP/1.1
Host: api.rename-service0.workers.dev
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 06 Dec 2023 16:16:38 GMT
content-type: text/css; charset=utf-8
cf-cache-status: MISS
etag: W/"css.1da7928062"
feature-policy: none
referrer-policy: unsafe-url
x-content-type-options: nosniff
x-frame-options: DENY
x-xss-protection: 1; mode=block
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=xrKJqJkrmUGe817KrC%2B9IEg1ZbYKw87AIF9KJdpaM5om5vgXG4MHwwl3gvLwKed1kYF%2BfGcwJBdXmKZvx8m%2BoH3WYXga%2FeMpE73Las3pPkB0Qk5Z5SmNpCdV1lDXHFAW%2BpXrOOcttQ4d0O6RRNrPLq%2Bl"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8315d59d9d4a5685-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| api.rename-service0.workers.dev/theme.css | 172.67.209.83 | 200 OK | 38 kB |
URL GET HTTP/3api.rename-service0.workers.dev/theme.css IP172.67.209.83:443
Requested byhttps://bitter-glitter-3cd5.epd5tuee.workers.dev/1b0fc4be-8e45-41dd-abce-ff937c9f903e CertificateIssuerGoogle Trust Services LLC Subjectrename-service0.workers.dev Fingerprint0E:56:FC:E4:D9:A4:3B:15:98:BF:B9:CA:32:BE:52:2A:E6:95:41:AE ValidityThu, 12 Oct 2023 04:29:51 GMT - Wed, 10 Jan 2024 04:29:50 GMT
File typeASCII text, with very long lines (545), with CRLF line terminators Hash162daeeb0799f271e39f242ba683fee8 669dbe3050c3cd6d9ce73ba57ab5a48500b44361 92023afd6feb8f5fe2ab0b2622ddae9e26d5027996df15fe0b33714c7f3dba37
GET /theme.css HTTP/1.1
Host: api.rename-service0.workers.dev
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 06 Dec 2023 16:16:38 GMT
content-type: text/css; charset=utf-8
cf-cache-status: MISS
etag: W/"theme.5cf2c65f5e.css"
feature-policy: none
referrer-policy: unsafe-url
x-content-type-options: nosniff
x-frame-options: DENY
x-xss-protection: 1; mode=block
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=kH6Lb4MeArNKN2roB5JLNfb5UoB%2BhvkM9SACSlkshWQbx%2FA%2FAolAyFtKcqMsI3O0ccXqc4TdZKHwrr9kxw2tntPaeiINmlomgk1fxyJ8sbiw2ixvR8zF%2BJh6zEk4XGb5G%2FeDfmLVIZMa%2BsDc6QgqUl2j"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8315d59d9d565685-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
0.0.0.0