refunddavid0.werite.net - urlscan.io

refunddavid0.werite.net
172.67.135.15  Public Scan Open in urlscan Pro

Internal
urlscan.io (IP) urlscan.io (Domain)
Effective Hostname
VirusTotal SecurityTrails crt.sh
Submitted URL
Google Safe Browsing Archive.org
Effective IP
VirusTotal SecurityTrails Domaintools Censys
Go To Rescan
Add Verdict Report
URL:
https://refunddavid0.werite.net/5-ehtuphl-thii-khun-aimsmkhwr-haayaip-aephltf-rm-ufa-amb 1yr old
Submission: On July 16 via manual (July 16th 2025, 12:28:43 am UTC) from FI — Scanned from IT
Summary HTTP 18 Redirects Links 2  Behaviour Indicators
Similar DOM Content API
Verdicts

Summary

This website contacted 7 IPs in 3 countries across 8 domains to perform 18 HTTP transactions. The main IP is 172.67.135.15, located in Ascension Island and belongs to CLOUDFLARENET, US. The main domain is refunddavid0.werite.net. 1yr old
TLS certificate: Issued by WE1 on May 31st 2025. Valid for: 3mo.
This is the only time refunddavid0.werite.net was scanned on urlscan.io!

urlscan.io Verdict: No classification

Domain & IP information

IP Address AS Autonomous System
9 172.67.135.15 172.67.135.15 13335 (CLOUDFLAR...) (CLOUDFLARENET)
2 95.128.47.156 95.128.47.156 41653 (AQUARAY A...) (AQUARAY Aqua Ray SAS)
1 2 213.186.33.87 213.186.33.87 16276 (OVH OVH SAS) (OVH OVH SAS)
1 5.135.215.212 5.135.215.212 16276 (OVH OVH SAS) (OVH OVH SAS)
1 212.129.32.216 212.129.32.216 12876 (AS12876 S...) (AS12876 SCALEWAY S.A.S.)
2 13.35.58.69 13.35.58.69 16509 (AMAZON-02) (AMAZON-02)
18 7
9    172.67.135.15 (Ascension Island)
IP Lookup
urlscan.io SecurityTrails VirusTotal AbuseIPDB Censys Domaintools ipinfo.io Shodan
ASN Lookup
urlscan.io CAIDA Rank ipinfo.io CIRCL BGP Ranking

ASN13335 (CLOUDFLARENET, US)
refunddavid0.werite.net 1yr old
VirusTotal SecurityTrails crt.sh Domaintools
2    95.128.47.156 (France)
IP Lookup
urlscan.io SecurityTrails VirusTotal AbuseIPDB Censys Domaintools ipinfo.io Shodan
ASN Lookup
urlscan.io CAIDA Rank ipinfo.io CIRCL BGP Ranking

ASN41653 (AQUARAY Aqua Ray SAS, FR)
PTR: web.aquaray.com
am.ambafrance.org 8yr old
VirusTotal SecurityTrails crt.sh Domaintools
2    213.186.33.87 (Saran, France) 1 redirects
IP Lookup
urlscan.io SecurityTrails VirusTotal AbuseIPDB Censys Domaintools ipinfo.io Shodan
ASN Lookup
urlscan.io CAIDA Rank ipinfo.io CIRCL BGP Ranking

ASN16276 (OVH OVH SAS, FR)
PTR: cluster014.ovh.net
armes-ufa.com 10yr old
VirusTotal SecurityTrails crt.sh Domaintools
www.armes-ufa.com 10yr old
VirusTotal SecurityTrails crt.sh Domaintools
1    5.135.215.212 (France)
IP Lookup
urlscan.io SecurityTrails VirusTotal AbuseIPDB Censys Domaintools ipinfo.io Shodan
ASN Lookup
urlscan.io CAIDA Rank ipinfo.io CIRCL BGP Ranking

ASN16276 (OVH OVH SAS, FR)
PTR: wordpress2.tooeasy.fr
cfp-montplaisir.org 5yr old
VirusTotal SecurityTrails crt.sh Domaintools
1    212.129.32.216 (Paris, France)
IP Lookup
urlscan.io SecurityTrails VirusTotal AbuseIPDB Censys Domaintools ipinfo.io Shodan
ASN Lookup
urlscan.io CAIDA Rank ipinfo.io CIRCL BGP Ranking

ASN12876 (AS12876 SCALEWAY S.A.S., FR)
PTR: sw-002.exoca.fr
www.cfajeanbosco.fr 8yr old
VirusTotal SecurityTrails crt.sh Domaintools
2    13.35.58.69 (United States)
IP Lookup
urlscan.io SecurityTrails VirusTotal AbuseIPDB Censys Domaintools ipinfo.io Shodan
ASN Lookup
urlscan.io CAIDA Rank ipinfo.io CIRCL BGP Ranking

ASN16509 (AMAZON-02, US)
PTR: server-13-35-58-69.fra60.r.cloudfront.net
i.snap.as 9yr old
VirusTotal SecurityTrails crt.sh Domaintools
Apex Domain
Subdomains		 Transfer
9 werite.net
refunddavid0.werite.net 1yr old
158 KB
2 snap.as
i.snap.as 9yr old
11 KB
2 armes-ufa.com 1 redirects
armes-ufa.com 10yr old
www.armes-ufa.com 10yr old
1 MB
2 ambafrance.org
am.ambafrance.org 8yr old
240 KB
1 cfajeanbosco.fr
www.cfajeanbosco.fr 8yr old
516 KB
1 cfp-montplaisir.org
cfp-montplaisir.org 5yr old
66 KB
0 unsplash.com Failed
source.unsplash.com Failed 9yr old
0 madel.com Failed
www.madel.com Failed 7yr old
18 8
Domain Requested by
9 refunddavid0.werite.net refunddavid0.werite.net
2 i.snap.as refunddavid0.werite.net
2 am.ambafrance.org refunddavid0.werite.net
1 www.cfajeanbosco.fr refunddavid0.werite.net
1 cfp-montplaisir.org refunddavid0.werite.net
1 www.armes-ufa.com refunddavid0.werite.net
1 armes-ufa.com 1 redirects
0 source.unsplash.com Failed refunddavid0.werite.net
0 www.madel.com Failed refunddavid0.werite.net
18 9

This site contains links to these domains. Also see Links.

Domain
ufaamb.net
writefreely.org
Subject Issuer Validity Valid
werite.net
WE1		 2025-05-31 -
2025-08-29		 3mo crt.sh
*.ambafrance.org
GlobalSign ECC OV SSL CA 2018		 2024-12-12 -
2026-01-13		 1yr crt.sh
cfp-montplaisir.org
R10		 2025-06-28 -
2025-09-26		 3mo crt.sh
cfajeanbosco.fr
R10		 2025-06-01 -
2025-08-30		 3mo crt.sh
i.snap.as
Amazon RSA 2048 M03		 2025-05-24 -
2026-06-20		 1yr crt.sh

This page contains 1 frames:

Primary Page: https://refunddavid0.werite.net/5-ehtuphl-thii-khun-aimsmkhwr-haayaip-aephltf-rm-ufa-amb
Frame ID: F7476FEFA3B404D6FA6A767D04B95104
Requests: 18 HTTP requests in this frame

Screenshot
Live screenshot
Full Image

Page Title

5 เหตุผล ที่ คุณ ไม่สมควร หายไป แพลตฟอร์ม UFA AMB — refunddavid0

Detected technologies

(CMS)
Overall confidence: 100%
Detected patterns
  • /wp-(?:content|includes)/

Page Statistics

18
Requests

83 %
HTTPS

0 %
IPv6

8
Domains

9
Subdomains

7
IPs

3
Countries

2208 kB
Transfer

2279 kB
Size

0
Cookies

Redirected requests

There were HTTP redirect chains for the following requests:

Request Chain 4
  • https://armes-ufa.com/IMG/jpg/sticker_-_1.jpg HTTP 301
  • https://www.armes-ufa.com/IMG/jpg/sticker_-_1.jpg

18 HTTP transactions
0 data transactions

Method
Protocol		 Status Resource
Path		 Size
x-fer		 Time
Latency		 Type
MIME-Type		 IP
Location
GET
H2 		200
 Primary Request 5-ehtuphl-thii-khun-aimsmkhwr-haayaip-aephltf-rm-ufa-amb Show response
refunddavid0.werite.net/ 		24 KB
7 KB 		1530ms
800ms 		Document
text/html		 172.67.135.15
CLOUDFLARENET
General
Check archive.org
Download Go to
Full URL
https://refunddavid0.werite.net/5-ehtuphl-thii-khun-aimsmkhwr-haayaip-aephltf-rm-ufa-amb
Protocol
H2
Security
TLS 1.3, , AES_128_GCM
Server
172.67.135.15 , Ascension Island, ASN13335 (CLOUDFLARENET, US),
Reverse DNS
Software
cloudflare /
Resource Hash
c3d2b0aecf07de182ab17bea18cde276f7e19b7da20b35f63ae6a3ba4595a416

Request headers

Upgrade-Insecure-Requests
1
User-Agent
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.72 Safari/537.36

Response headers

alt-svc
h3=":443"; ma=86400
cf-cache-status
DYNAMIC
cf-ray
95fd61998bcbb688-OTP
content-encoding
zstd
content-type
text/html; charset=utf-8
date
Wed, 16 Jul 2025 00:28:45 GMT
nel
{"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
report-to
{"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=ElaGx1c4XMIUn9rr%2FnJtvqEuksxAB747HcHgwIs4BVmV2nS86CWKA214B2ZCbe9nSAuwKql8CuHCyTWiOvyQBuvcV%2FuS25lVn2MjkBVptPSOAJa7Dw%3D%3D"}]}
server
cloudflare
GET
H2 		200
 write.css
refunddavid0.werite.net/css/ 		56 KB
12 KB 		779ms
778ms 		Stylesheet
text/css		 172.67.135.15
CLOUDFLARENET
General
Check archive.org
Download Go to
Full URL
https://refunddavid0.werite.net/css/write.css
Requested by
Host: refunddavid0.werite.net
URL: https://refunddavid0.werite.net/5-ehtuphl-thii-khun-aimsmkhwr-haayaip-aephltf-rm-ufa-amb
Protocol
H2
Security
TLS 1.3, , AES_128_GCM
Server
172.67.135.15 , Ascension Island, ASN13335 (CLOUDFLARENET, US),
Reverse DNS
Software
cloudflare /
Resource Hash
447d002c10914475cbfbd9db889e8a4267f90c4facf6af2ca22ef9c08597802f

Request headers

User-Agent
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.72 Safari/537.36
Referer
https://refunddavid0.werite.net/5-ehtuphl-thii-khun-aimsmkhwr-haayaip-aephltf-rm-ufa-amb

Response headers

cache-control
public, max-age=604800, immutable
nel
{"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
content-encoding
zstd
cf-cache-status
MISS
report-to
{"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=f%2BJ%2FE%2F1FBcHOSu2I6rqukRfSVwrIqZeGo%2FCf8YS7fIRaCagNHbcbXJ5gFlHgusVbEdvqKz8v%2F1lr%2FPrIhUb3IN3MoCIJbIoRVdsxR61R3gKmD1x7wA%3D%3D"}]}
cf-ray
95fd619efddbb688-OTP
alt-svc
h3=":443"; ma=86400
date
Wed, 16 Jul 2025 00:28:45 GMT
content-type
text/css; charset=utf-8
last-modified
Wed, 14 Feb 2024 11:58:06 GMT
vary
accept-encoding
server
cloudflare
GET
H2 		200
 custom.css
refunddavid0.werite.net/css/ 		3 KB
2 KB 		767ms
766ms 		Stylesheet
text/css		 172.67.135.15
CLOUDFLARENET
General
Check archive.org
Download Go to
Full URL
https://refunddavid0.werite.net/css/custom.css
Requested by
Host: refunddavid0.werite.net
URL: https://refunddavid0.werite.net/5-ehtuphl-thii-khun-aimsmkhwr-haayaip-aephltf-rm-ufa-amb
Protocol
H2
Security
TLS 1.3, , AES_128_GCM
Server
172.67.135.15 , Ascension Island, ASN13335 (CLOUDFLARENET, US),
Reverse DNS
Software
cloudflare /
Resource Hash
a961725c85789a66a4cfa2e42f7e0237c9366ce03d8d25074a4c42bc14650318

Request headers

User-Agent
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.72 Safari/537.36
Referer
https://refunddavid0.werite.net/5-ehtuphl-thii-khun-aimsmkhwr-haayaip-aephltf-rm-ufa-amb

Response headers

cache-control
public, max-age=604800, immutable
nel
{"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
content-encoding
zstd
cf-cache-status
MISS
report-to
{"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=fS2dq3WYfVO%2FWLlRRWUiqR%2BdTi0RDQOKJTDTa8SbdxGlqGZfdk0s3OPgIhCdFEpzwNBWWzkADk%2BZZvV%2ByKoDvq1Lt59HPmRSvJJVYdh2AyjDiW5tbA%3D%3D"}]}
cf-ray
95fd619efddcb688-OTP
alt-svc
h3=":443"; ma=86400
date
Wed, 16 Jul 2025 00:28:45 GMT
content-type
text/css; charset=utf-8
last-modified
Wed, 14 Feb 2024 11:58:06 GMT
vary
accept-encoding
server
cloudflare
GET

UFA-DFR_Hospital-Curico_3.jpg
www.madel.com/wp-content/uploads/2015/09/ 		0
0

GET
H2 		200
 8ab350f4720d6691-eab47.png
am.ambafrance.org/local/cache-vignettes/L720xH540/ 		165 KB
165 KB 		598ms
167ms 		Image
image/png		 95.128.47.156
AQUARAY Aqua Ray SAS
General
Check archive.org
Download Go to Show image
Full URL
https://am.ambafrance.org/local/cache-vignettes/L720xH540/8ab350f4720d6691-eab47.png?1614699899
Requested by
Host: refunddavid0.werite.net
URL: https://refunddavid0.werite.net/5-ehtuphl-thii-khun-aimsmkhwr-haayaip-aephltf-rm-ufa-amb
Protocol
H2
Security
TLS 1.3, , AES_128_GCM
Server
95.128.47.156 , France, ASN41653 (AQUARAY Aqua Ray SAS, FR),
Reverse DNS
web.aquaray.com
Software
/
Resource Hash
3e0c6f7fe079da02b25593dca6bed7a839bda33209229291b41b170d70334911
Security Headers
Name Value
Strict-Transport-Security max-age=63072000

Request headers

User-Agent
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.72 Safari/537.36
Referer
https://refunddavid0.werite.net/

Response headers

strict-transport-security
max-age=63072000
accept-ranges
bytes
content-length
169038
date
Wed, 16 Jul 2025 00:28:45 GMT
etag
"2944e-5f6ca6dae848b"
last-modified
Mon, 13 Mar 2023 16:16:07 GMT
content-type
image/png
GET
H2 		200
 sticker_-_1.jpg
www.armes-ufa.com/IMG/jpg/
Redirect Chain
  • https://armes-ufa.com/IMG/jpg/sticker_-_1.jpg
  • https://www.armes-ufa.com/IMG/jpg/sticker_-_1.jpg
1 MB
1 MB 		134ms
99ms 		Image
image/jpeg		 213.186.33.87
OVH OVH SAS
General
Check archive.org
Download Go to Show image
Full URL
https://www.armes-ufa.com/IMG/jpg/sticker_-_1.jpg
Requested by
Host: refunddavid0.werite.net
URL: https://refunddavid0.werite.net/5-ehtuphl-thii-khun-aimsmkhwr-haayaip-aephltf-rm-ufa-amb
Protocol
H2
Server
213.186.33.87 Saran, France, ASN16276 (OVH OVH SAS, FR),
Reverse DNS
cluster014.ovh.net
Software
OVHcloud /
Resource Hash
e94920932548ae028f306992283abea78abd79fd2fbb95b6c99a9175690f315e

Request headers

User-Agent
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.72 Safari/537.36
Referer
https://refunddavid0.werite.net/

Response headers

cache-control
max-age=900
expires
Wed, 16 Jul 2025 00:43:46 GMT
accept-ranges
bytes
content-length
1244560
date
Wed, 16 Jul 2025 00:28:46 GMT
content-type
image/jpeg
last-modified
Mon, 21 Nov 2022 23:31:39 GMT
server
OVHcloud

Redirect headers

location
http://www.armes-ufa.com/IMG/jpg/sticker_-_1.jpg
content-length
256
date
Wed, 16 Jul 2025 00:28:46 GMT
content-type
text/html; charset=iso-8859-1
server
OVHcloud
GET
H2 		200
 UFA-LOGO.png
cfp-montplaisir.org/app/uploads/2020/12/ 		66 KB
66 KB 		529ms
128ms 		Image
image/png		 5.135.215.212
OVH OVH SAS
General
Check archive.org
Download Go to Show image
Full URL
https://cfp-montplaisir.org/app/uploads/2020/12/UFA-LOGO.png
Requested by
Host: refunddavid0.werite.net
URL: https://refunddavid0.werite.net/5-ehtuphl-thii-khun-aimsmkhwr-haayaip-aephltf-rm-ufa-amb
Protocol
H2
Security
TLS 1.3, , AES_256_GCM
Server
5.135.215.212 , France, ASN16276 (OVH OVH SAS, FR),
Reverse DNS
wordpress2.tooeasy.fr
Software
Apache/2.4.29 (Ubuntu) /
Resource Hash
22118b3a5aa7f7cbe3e64fb629fd6a63e9d7117b446fa92ac62a92c94662759b
Security Headers
Name Value
X-Content-Type-Options nosniff
X-Frame-Options sameorigin

Request headers

User-Agent
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.72 Safari/537.36
Referer
https://refunddavid0.werite.net/

Response headers

etag
"106a4-5b71ee71ea380"
x-content-type-options
nosniff
accept-ranges
bytes
content-length
67236
date
Wed, 16 Jul 2025 00:28:46 GMT
last-modified
Wed, 23 Dec 2020 10:10:38 GMT
content-type
image/png
server
Apache/2.4.29 (Ubuntu)
x-frame-options
sameorigin
GET
H/1.1 		200
OK 		accompagnement-nouvelles-UFA-CFA-Jean-Bosco-scaled.jpg
www.cfajeanbosco.fr/wp-content/uploads/2021/06/ 		515 KB
516 KB 		585ms
136ms 		Image
image/jpeg		 212.129.32.216
AS12876 SCALEWAY ...
General
Check archive.org
Download Go to Show image
Full URL
https://www.cfajeanbosco.fr/wp-content/uploads/2021/06/accompagnement-nouvelles-UFA-CFA-Jean-Bosco-scaled.jpg
Requested by
Host: refunddavid0.werite.net
URL: https://refunddavid0.werite.net/5-ehtuphl-thii-khun-aimsmkhwr-haayaip-aephltf-rm-ufa-amb
Protocol
HTTP/1.1
Security
TLS 1.3, , AES_128_GCM
Server
212.129.32.216 Paris, France, ASN12876 (AS12876 SCALEWAY S.A.S., FR),
Reverse DNS
sw-002.exoca.fr
Software
Apache/2.4.62 (Debian) /
Resource Hash
12552816bf0f3bf7ff4b56eee155f2029985f23bbbb94a13c32157999ce8219a

Request headers

User-Agent
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.72 Safari/537.36
Referer
https://refunddavid0.werite.net/

Response headers

Upgrade
h2,h2c
ETag
"80cd5-5c4df49db2484"
Connection
Upgrade, Keep-Alive
Accept-Ranges
bytes
Content-Length
527573
Keep-Alive
timeout=5, max=100
Date
Wed, 16 Jul 2025 00:28:46 GMT
Last-Modified
Wed, 16 Jun 2021 10:09:39 GMT
Content-Type
image/jpeg
Server
Apache/2.4.62 (Debian)
GET
H2 		200
 arton4674-41b91.jpg
am.ambafrance.org/local/cache-vignettes/L770xH514/ 		74 KB
74 KB 		92ms
91ms 		Image
image/jpeg		 95.128.47.156
AQUARAY Aqua Ray SAS
General
Check archive.org
Download Go to Show image
Full URL
https://am.ambafrance.org/local/cache-vignettes/L770xH514/arton4674-41b91.jpg?1664365514
Requested by
Host: refunddavid0.werite.net
URL: https://refunddavid0.werite.net/5-ehtuphl-thii-khun-aimsmkhwr-haayaip-aephltf-rm-ufa-amb
Protocol
H2
Security
TLS 1.3, , AES_128_GCM
Server
95.128.47.156 , France, ASN41653 (AQUARAY Aqua Ray SAS, FR),
Reverse DNS
web.aquaray.com
Software
/
Resource Hash
dfb55ef858e45648a11635b6d64aa62bfb2ac5eb80307cfff1a2565bf82cf8cf
Security Headers
Name Value
Strict-Transport-Security max-age=63072000

Request headers

User-Agent
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.72 Safari/537.36
Referer
https://refunddavid0.werite.net/

Response headers

strict-transport-security
max-age=63072000
accept-ranges
bytes
content-length
76047
date
Wed, 16 Jul 2025 00:28:46 GMT
etag
"1290f-5f6ca6d72e37e"
last-modified
Mon, 13 Mar 2023 16:16:03 GMT
content-type
image/jpeg
GET
H2 		200
 localdate.js Show response
refunddavid0.werite.net/js/ 		697 B
652 B 		772ms
772ms 		Script
application/javascript		 172.67.135.15
CLOUDFLARENET
General
Check archive.org
Download Go to
Full URL
https://refunddavid0.werite.net/js/localdate.js
Requested by
Host: refunddavid0.werite.net
URL: https://refunddavid0.werite.net/5-ehtuphl-thii-khun-aimsmkhwr-haayaip-aephltf-rm-ufa-amb
Protocol
H2
Security
TLS 1.3, , AES_128_GCM
Server
172.67.135.15 , Ascension Island, ASN13335 (CLOUDFLARENET, US),
Reverse DNS
Software
cloudflare /
Resource Hash
432281499e611a248cd062f5c4405969c514b4b611c3ebc6ed62d32de1324320

Request headers

User-Agent
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.72 Safari/537.36
Referer
https://refunddavid0.werite.net/5-ehtuphl-thii-khun-aimsmkhwr-haayaip-aephltf-rm-ufa-amb

Response headers

cache-control
public, max-age=604800, immutable
nel
{"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
content-encoding
zstd
cf-cache-status
MISS
report-to
{"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=wO3uVfWLYF5mmWI2gvifn6m8y9t6Mg0Yj25GYa15CLGQEISnUJfi3a6BMec7Rb3qfAjVPXXxe7Klh0csm%2FB74Ht9vVSAA2l4nzc4fN35lYOeQ0OK7A%3D%3D"}]}
cf-ray
95fd61a58ff0b688-OTP
alt-svc
h3=":443"; ma=86400
date
Wed, 16 Jul 2025 00:28:46 GMT
content-type
application/javascript
last-modified
Wed, 14 Feb 2024 11:58:06 GMT
vary
accept-encoding
server
cloudflare
GET

800x600
source.unsplash.com/random/ 		0
0

GET
H2 		200
 yomRpCm.gif
i.snap.as/ 		977 B
1 KB 		760ms
103ms 		Image
image/png		 13.35.58.69
AMAZON-02
General
Check archive.org
Download Go to Show image
Full URL
https://i.snap.as/yomRpCm.gif
Requested by
Host: refunddavid0.werite.net
URL: https://refunddavid0.werite.net/css/custom.css
Protocol
H2
Security
TLS 1.3, , AES_128_GCM
Server
13.35.58.69 , United States, ASN16509 (AMAZON-02, US),
Reverse DNS
server-13-35-58-69.fra60.r.cloudfront.net
Software
AmazonS3 /
Resource Hash
baa1f0bfa6c9722fde0471a7a4ebe7b74bc5fb40e733778ce80bec12e85a404c

Request headers

User-Agent
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.72 Safari/537.36
Referer
https://refunddavid0.werite.net/

Response headers

x-amz-cf-pop
FRA60-P10
etag
"9e01bffafb8d3d6c6caf2b78a8cd5456"
age
82714
via
1.1 aa4673eb0527fb06f7940307fecfc1b6.cloudfront.net (CloudFront)
accept-ranges
bytes
x-cache
Hit from cloudfront
content-length
977
x-amz-cf-id
b_3tyw19N4hGY2QT8onjkXZPjWdwjH5AjB3tZQYwO0RvLys-DvRU0g==
date
Tue, 15 Jul 2025 01:31:13 GMT
content-type
image/png
last-modified
Fri, 30 Oct 2020 09:57:01 GMT
server
AmazonS3
content-disposition
inline
vary
accept-encoding
GET
H2 		200
 0qZD5r6.gif
i.snap.as/ 		9 KB
10 KB 		797ms
142ms 		Image
image/png		 13.35.58.69
AMAZON-02
General
Check archive.org
Download Go to Show image
Full URL
https://i.snap.as/0qZD5r6.gif
Requested by
Host: refunddavid0.werite.net
URL: https://refunddavid0.werite.net/css/custom.css
Protocol
H2
Security
TLS 1.3, , AES_128_GCM
Server
13.35.58.69 , United States, ASN16509 (AMAZON-02, US),
Reverse DNS
server-13-35-58-69.fra60.r.cloudfront.net
Software
AmazonS3 /
Resource Hash
07f21b0019b177702850bd361c403dfab328f7fc8fd234396a4b334652bf1f50

Request headers

User-Agent
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.72 Safari/537.36
Referer
https://refunddavid0.werite.net/

Response headers

x-amz-cf-pop
FRA60-P10
etag
"29d565ea0cf06b3c5da29eb2aeb3c956"
age
8533
via
1.1 aa4673eb0527fb06f7940307fecfc1b6.cloudfront.net (CloudFront)
accept-ranges
bytes
x-cache
Hit from cloudfront
content-length
9388
x-amz-cf-id
o2K3wMpZN3J9v0kdeGymKCvZBxQp_D0p09xFwLYQKaukMRCR8g0heg==
date
Tue, 15 Jul 2025 22:06:35 GMT
content-type
image/png
last-modified
Fri, 30 Oct 2020 09:57:01 GMT
server
AmazonS3
content-disposition
inline
vary
accept-encoding
GET
H2 		200
 webfont.js Show response
refunddavid0.werite.net/js/ 		12 KB
5 KB 		808ms
807ms 		Script
application/javascript		 172.67.135.15
CLOUDFLARENET
General
Check archive.org
Download Go to
Full URL
https://refunddavid0.werite.net/js/webfont.js
Requested by
Host: refunddavid0.werite.net
URL: https://refunddavid0.werite.net/5-ehtuphl-thii-khun-aimsmkhwr-haayaip-aephltf-rm-ufa-amb
Protocol
H2
Security
TLS 1.3, , AES_128_GCM
Server
172.67.135.15 , Ascension Island, ASN13335 (CLOUDFLARENET, US),
Reverse DNS
Software
cloudflare /
Resource Hash
2711b037e078e306e59765e9fc22d9f86867eb26af8c6af72d864a1c52bed8ac

Request headers

User-Agent
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.72 Safari/537.36
Referer
https://refunddavid0.werite.net/5-ehtuphl-thii-khun-aimsmkhwr-haayaip-aephltf-rm-ufa-amb

Response headers

cache-control
public, max-age=604800, immutable
nel
{"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
content-encoding
zstd
cf-cache-status
MISS
report-to
{"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=7IZCSpcM4UMl429n%2B5RMnOVOY6s4TcdMtGP2Del7kZ1xWUm6y6WfnC5zsQk4NMaLtBNlQbdgSGrSWukQxGOHFF881bcYvYwT%2B5uYcsmfS%2FtnUpmo3A%3D%3D"}]}
cf-ray
95fd61aa6994b688-OTP
alt-svc
h3=":443"; ma=86400
date
Wed, 16 Jul 2025 00:28:47 GMT
content-type
application/javascript
last-modified
Wed, 14 Feb 2024 11:58:06 GMT
vary
accept-encoding
server
cloudflare
GET
H2 		200
 fonts.css
refunddavid0.werite.net/css/ 		2 KB
671 B 		794ms
794ms 		Stylesheet
text/css		 172.67.135.15
CLOUDFLARENET
General
Check archive.org
Download Go to
Full URL
https://refunddavid0.werite.net/css/fonts.css
Requested by
Host: refunddavid0.werite.net
URL: https://refunddavid0.werite.net/js/webfont.js
Protocol
H2
Security
TLS 1.3, , AES_128_GCM
Server
172.67.135.15 , Ascension Island, ASN13335 (CLOUDFLARENET, US),
Reverse DNS
Software
cloudflare /
Resource Hash
3d631b81c278eed048159a21c22e56f9bbf182be24f1a868907c35e75e985671

Request headers

User-Agent
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.72 Safari/537.36
Referer
https://refunddavid0.werite.net/5-ehtuphl-thii-khun-aimsmkhwr-haayaip-aephltf-rm-ufa-amb

Response headers

cache-control
public, max-age=604800, immutable
nel
{"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
content-encoding
zstd
cf-cache-status
MISS
report-to
{"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=ZAgQhTmfoJiP%2BUx%2BEZovrJJjNS0U9F76jXg3GvDhqCSl2oTpVF9Kk8xz8wo35e5ah7uB1jwdnjkp8XtGVAh2k5Fmb6OVshQF5ZN5Rnl52yh5KU0l8A%3D%3D"}]}
cf-ray
95fd61af9bb0b688-OTP
alt-svc
h3=":443"; ma=86400
date
Wed, 16 Jul 2025 00:28:48 GMT
content-type
text/css; charset=utf-8
last-modified
Wed, 14 Feb 2024 11:58:06 GMT
vary
accept-encoding
server
cloudflare
GET
H2 		200
 Lora-Regular.woff2
refunddavid0.werite.net/fonts/ 		62 KB
63 KB 		765ms
765ms 		Font
font/woff2		 172.67.135.15
CLOUDFLARENET
General
Check archive.org
Download Go to
Full URL
https://refunddavid0.werite.net/fonts/Lora-Regular.woff2
Requested by
Host: refunddavid0.werite.net
URL: https://refunddavid0.werite.net/css/fonts.css
Protocol
H2
Security
TLS 1.3, , AES_128_GCM
Server
172.67.135.15 , Ascension Island, ASN13335 (CLOUDFLARENET, US),
Reverse DNS
Software
cloudflare /
Resource Hash
26ee6f80607aa285386fc2132073fda3639fddfb3c139d7e92490de306d2b8d1

Request headers

User-Agent
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.72 Safari/537.36
Origin
https://refunddavid0.werite.net
Referer
https://refunddavid0.werite.net/css/fonts.css

Response headers

cache-control
public, max-age=604800, immutable
nel
{"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
cf-cache-status
MISS
report-to
{"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=1wbKtminjlSrEMIhLNEF5tb4tRUFdw1p5kQRP5i1TV8JMjVpdAZn%2B0chn9IpH88JcCQjuaPrdx2JhAhp4ehezq0HICax2LGae5G75UIKVv97ktKRMw%3D%3D"}]}
cf-ray
95fd61b4ad28b688-OTP
accept-ranges
bytes
alt-svc
h3=":443"; ma=86400
content-length
63668
date
Wed, 16 Jul 2025 00:28:49 GMT
content-type
font/woff2
last-modified
Wed, 14 Feb 2024 11:58:06 GMT
vary
accept-encoding
server
cloudflare
GET
H2 		200
 Lora-Bold.woff2
refunddavid0.werite.net/fonts/ 		67 KB
67 KB 		771ms
770ms 		Font
font/woff2		 172.67.135.15
CLOUDFLARENET
General
Check archive.org
Download Go to
Full URL
https://refunddavid0.werite.net/fonts/Lora-Bold.woff2
Requested by
Host: refunddavid0.werite.net
URL: https://refunddavid0.werite.net/css/fonts.css
Protocol
H2
Security
TLS 1.3, , AES_128_GCM
Server
172.67.135.15 , Ascension Island, ASN13335 (CLOUDFLARENET, US),
Reverse DNS
Software
cloudflare /
Resource Hash
5aad84fd548b01f6f96d44b6254b68a247e5d12800b5284c72a5310d05746ee5

Request headers

User-Agent
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.72 Safari/537.36
Origin
https://refunddavid0.werite.net
Referer
https://refunddavid0.werite.net/css/fonts.css

Response headers

cache-control
public, max-age=604800, immutable
nel
{"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
cf-cache-status
MISS
report-to
{"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=A%2B%2FrFMUCAYXH6MOHEY%2BjPTctgdPaEsY9c5VTU%2F8HAvy0auCmyB8%2F5u7piPFS3jtNxcH1r8pmGz4Cx58MpJELRxfKeLbfZaM5%2F9S4fWKO6ty7pdlpeg%3D%3D"}]}
cf-ray
95fd61b4ad29b688-OTP
accept-ranges
bytes
alt-svc
h3=":443"; ma=86400
content-length
68656
date
Wed, 16 Jul 2025 00:28:49 GMT
content-type
font/woff2
last-modified
Wed, 14 Feb 2024 11:58:06 GMT
vary
accept-encoding
server
cloudflare
GET
H2 		200
 favicon.ico
refunddavid0.werite.net/ 		6 KB
1 KB 		760ms
760ms 		Other
image/vnd.microsoft.icon		 172.67.135.15
CLOUDFLARENET
General
Check archive.org
Download Go to
Full URL
https://refunddavid0.werite.net/favicon.ico
Protocol
H2
Security
TLS 1.3, , AES_128_GCM
Server
172.67.135.15 , Ascension Island, ASN13335 (CLOUDFLARENET, US),
Reverse DNS
Software
cloudflare /
Resource Hash
8a7be585b1fb4fb1a26b547dd62ef1ae034c5ba42aad471473704a8ac9a9637a

Request headers

User-Agent
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.72 Safari/537.36
Referer
https://refunddavid0.werite.net/5-ehtuphl-thii-khun-aimsmkhwr-haayaip-aephltf-rm-ufa-amb

Response headers

cache-control
public, max-age=604800, immutable
nel
{"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
content-encoding
zstd
cf-cache-status
MISS
report-to
{"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=eCGOcHm8QA7omdt6A4UpI1wT7Jqi9Cy8x2HDnTLcY7hk1kbzJS%2BEKSuNdpnJaBhdCRKJtxJcgEP%2Bce8Re5eWCQD%2FJxbt720ya77D7ddma6dXeb2DTA%3D%3D"}]}
cf-ray
95fd61b4ad2bb688-OTP
alt-svc
h3=":443"; ma=86400
date
Wed, 16 Jul 2025 00:28:49 GMT
content-type
image/vnd.microsoft.icon
last-modified
Wed, 14 Feb 2024 11:58:06 GMT
vary
accept-encoding
server
cloudflare

Failed requests

These URLs were requested, but there was no response received. You will also see them in the list above.

Domain
www.madel.com
URL
https://www.madel.com/wp-content/uploads/2015/09/UFA-DFR_Hospital-Curico_3.jpg
Domain
source.unsplash.com
URL
https://source.unsplash.com/random/800x600

Verdicts & Comments Add Verdict or Comment

5 JavaScript Window variables

These are the non-standard variables defined on the window object. These include var declarations and global functions and can be helpful in identifying possible client-side frameworks and code.

function| toLocalDate object| $dates function| unpinPost object| WebFontConfig object| WebFont

0 Cookies

Cookies are little pieces of information stored in the browser of a user. Whenever a user visits the site again, he will also send his cookie values, thus allowing the website to re-identify him even if he changed locations. This is how permanent logins work.