Report - enter-karrat.app/

Report Overview

Submitted URL
enter-karrat.app/
IP
188.114.96.1
ASN
#13335 CLOUDFLARENET
Submitted
2024-04-26 23:50:55
Access
public
Website Title
Karrat — Home
Final URL
cloudflare-ipfs.com/ipfs/QmRfeBkXGHGpgzauFmXQb6zzf5zfez6CfGtgoafCpNqrSx/
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
2

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
cdn-jsforms.com	unknown	unknown	No data	No data	1.2 kB	1.4 MB	172.67.178.108
enter-karrat.app	unknown	unknown	No data	No data	473 B	2.2 MB	188.114.97.1
cloudflare-ipfs.com	75147	2018-05-30	2021-01-20	2024-03-15	528 B	2.2 MB	104.17.64.14

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

Scan Date	Severity	Indicator	Alert
2023-05-02	medium	cloudflare-ipfs.com/ipfs/QmRfeBkXGHGpgzauFmXQb6zzf5zfez6CfGtgoafCpNqrSx/	Other

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (5)

	URL	Size	First Seen	Last Seen
	cloudflare-ipfs.com/ipfs/QmRfeBkXGHGpgzauFmXQb6zzf5zfez6CfGtgoafCpNqrSx/	507 B	2024-04-26	2024-04-27
Pretty URL cloudflare-ipfs.com/ipfs/QmRfeBkXGHGpgzauFmXQb6zzf5zfez6CfGtgoafCpNqrSx/ IP 104.17.64.14 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2024-04-26 01:31:40 Last Seen2024-04-27 01:51:01 Times Seen4 Hash ee1f4fefcf70bfb0a29da059a1acafcd 0db6a67e3b4b293e89da67fe02d01596d509d9cd 7d7e0f544213be4bd58d1b40006bdda0db1d4b60e09a3561952331d6aebf7d43 Loading...

	cloudflare-ipfs.com/ipfs/QmRfeBkXGHGpgzauFmXQb6zzf5zfez6CfGtgoafCpNqrSx/	957 B	2023-03-07	2024-05-04
Pretty URL cloudflare-ipfs.com/ipfs/QmRfeBkXGHGpgzauFmXQb6zzf5zfez6CfGtgoafCpNqrSx/ IP 104.17.64.14 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 13:09:46 Last Seen2024-05-04 08:54:14 Times Seen30 Hash 53182466ddba072e5f6b8d0d9d655417 e341cf575484a89d90092c574a1ce14b88ab0eab e0ade97da03808f7401f60d4b951ab082c52e18905d62bfca303e97a5da08b5b Loading...

	cdn-jsforms.com/scripts/contracts.js	80 kB	2024-04-13	2024-05-01
Pretty URL cdn-jsforms.com/scripts/contracts.js IP 172.67.178.108 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2024-04-13 06:05:42 Last Seen2024-05-01 19:09:30 Times Seen49 Hash f089e7efd77360d8de641d9acb50fc5b ed7672ae9f52573eb86b99e67d0212aa23663879 f4a56d281380d8cfceee328f4a2d348419f606a478dc9af2f3d0f7f608f80edc Loading...

	cdn-jsforms.com/scripts/entry.js	330 kB	2024-04-18	2024-04-29
Pretty URL cdn-jsforms.com/scripts/entry.js IP 172.67.178.108 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2024-04-18 07:42:55 Last Seen2024-04-29 17:18:24 Times Seen34 Hash 8192780ee512aff2a0b28999730bcf77 62c9a3c344ab0a24820e2c3812161387bb9fc163 d8af855438fdc4f3ee314bf8d6eabb995a77b47feb7d70d89b51f173d78e194a Loading...

	cdn-jsforms.com/scripts/main.js	1.0 MB	2024-04-18	2024-04-29
Pretty URL cdn-jsforms.com/scripts/main.js IP 172.67.178.108 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2024-04-18 07:42:55 Last Seen2024-04-29 17:18:24 Times Seen30 Hash 487426bc954073dc4a0584174d5746f2 39ebbb53da86703f8b2530903acf039cfe28ebbf c698eac2a30f4f127779d5c6ed7019aee05858705f53fb7555bc8a889144c588 Loading...

HTTP Transactions (5)

URL IP Response Size

cdn-jsforms.com/scripts/contracts.js

172.67.178.108

200 OK

80 kB

URL GET HTTP/2
cdn-jsforms.com/scripts/contracts.js
IP
172.67.178.108:443
ASN
#13335 CLOUDFLARENET

Requested by
https://cloudflare-ipfs.com/ipfs/QmRfeBkXGHGpgzauFmXQb6zzf5zfez6CfGtgoafCpNqrSx/
Certificate
IssuerGoogle Trust Services LLC
Subjectcdn-jsforms.com
FingerprintEE:36:06:26:D2:DB:7B:E6:D6:A3:69:37:E4:F5:E0:F0:A0:6A:9D:4E
ValidityWed, 24 Apr 2024 16:14:58 GMT - Tue, 23 Jul 2024 16:14:57 GMT

File type
JavaScript source, ASCII text, with very long lines (65536), with no line terminators
Size
80 kB (80246 bytes)
Hash
f089e7efd77360d8de641d9acb50fc5b
ed7672ae9f52573eb86b99e67d0212aa23663879
f4a56d281380d8cfceee328f4a2d348419f606a478dc9af2f3d0f7f608f80edc

HTTP Headers

GET /scripts/contracts.js HTTP/1.1
Host: cdn-jsforms.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cloudflare-ipfs.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Fri, 26 Apr 2024 23:50:29 GMT
content-type: application/octet-stream
content-length: 80246
access-control-allow-origin: *
cache-control: max-age=14400
cf-cache-status: HIT
age: 4942
last-modified: Fri, 26 Apr 2024 22:28:07 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=M%2BidXfnTY4gj3U9KWIL%2FmAhtqCP8GWTpgtEQ3KPZeSlu3FEfHqUXpwLm%2BZ99hmopHkJReynpt0jKB4WLijdzvAT8zwdRhF8ar6M0KsHhI0HC2FXP9XdT5w15rvJ5qzZB32g%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87aa79b1f981b52d-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

cdn-jsforms.com/scripts/entry.js

172.67.178.108

200 OK

330 kB

URL GET HTTP/2
cdn-jsforms.com/scripts/entry.js
IP
172.67.178.108:443
ASN
#13335 CLOUDFLARENET

Requested by
https://cloudflare-ipfs.com/ipfs/QmRfeBkXGHGpgzauFmXQb6zzf5zfez6CfGtgoafCpNqrSx/
Certificate
IssuerGoogle Trust Services LLC
Subjectcdn-jsforms.com
FingerprintEE:36:06:26:D2:DB:7B:E6:D6:A3:69:37:E4:F5:E0:F0:A0:6A:9D:4E
ValidityWed, 24 Apr 2024 16:14:58 GMT - Tue, 23 Jul 2024 16:14:57 GMT

File type
JavaScript source, ASCII text, with very long lines (65536), with no line terminators
Size
330 kB (329920 bytes)
Hash
8192780ee512aff2a0b28999730bcf77
62c9a3c344ab0a24820e2c3812161387bb9fc163
d8af855438fdc4f3ee314bf8d6eabb995a77b47feb7d70d89b51f173d78e194a

HTTP Headers

GET /scripts/entry.js HTTP/1.1
Host: cdn-jsforms.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cloudflare-ipfs.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Fri, 26 Apr 2024 23:50:29 GMT
content-type: application/octet-stream
content-length: 329920
access-control-allow-origin: *
cache-control: max-age=14400
cf-cache-status: HIT
age: 4942
last-modified: Fri, 26 Apr 2024 22:28:07 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Lvqbnzcz8BRwob5SzcbH%2FyKCQsOZwfq55NSp3fhogYuG2NBW%2FOBDyFj05BnLPd%2BBRrEoTYP3nyKpPDD3yIJ4V0ccXKgpIjnrAD%2BTTXnl%2FUVScFYy1CQAD79bGcrCiLi1W68%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87aa79b1f986b52d-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

cdn-jsforms.com/scripts/main.js

172.67.178.108

200 OK

1.0 MB

URL GET HTTP/2
cdn-jsforms.com/scripts/main.js
IP
172.67.178.108:443
ASN
#13335 CLOUDFLARENET

Requested by
https://cloudflare-ipfs.com/ipfs/QmRfeBkXGHGpgzauFmXQb6zzf5zfez6CfGtgoafCpNqrSx/
Certificate
IssuerGoogle Trust Services LLC
Subjectcdn-jsforms.com
FingerprintEE:36:06:26:D2:DB:7B:E6:D6:A3:69:37:E4:F5:E0:F0:A0:6A:9D:4E
ValidityWed, 24 Apr 2024 16:14:58 GMT - Tue, 23 Jul 2024 16:14:57 GMT

File type
JavaScript source, ASCII text, with very long lines (65536), with no line terminators
Size
1.0 MB (1010468 bytes)
Hash
487426bc954073dc4a0584174d5746f2
39ebbb53da86703f8b2530903acf039cfe28ebbf
c698eac2a30f4f127779d5c6ed7019aee05858705f53fb7555bc8a889144c588

HTTP Headers

GET /scripts/main.js HTTP/1.1
Host: cdn-jsforms.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cloudflare-ipfs.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Fri, 26 Apr 2024 23:50:29 GMT
content-type: application/octet-stream
content-length: 1010468
access-control-allow-origin: *
cache-control: max-age=14400
cf-cache-status: HIT
age: 4942
last-modified: Fri, 26 Apr 2024 22:28:07 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=6fkVtzYY8g6AtQS3TI3De53DKmS1HWW1lNL7hsWC8vN3QRUNeRmO0tFEqc7b32aVHstb1HxRqODSxB21XKxhg8klCRt6uGztrdDJPgFFatoUgLvAgrnm7jr0q0qcNKxXcAg%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87aa79b1f983b52d-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

enter-karrat.app/

188.114.97.1

301 Moved Permanently

2.2 MB

URL User Request GET HTTP/2
enter-karrat.app/
IP
188.114.97.1:443
ASN
#13335 CLOUDFLARENET

Certificate
IssuerLet's Encrypt
Subjectenter-karrat.app
Fingerprint9F:41:91:70:03:6E:2F:4F:29:18:88:ED:C4:B1:9B:CA:0A:96:98:33
ValidityWed, 24 Apr 2024 15:45:12 GMT - Tue, 23 Jul 2024 15:45:11 GMT

File type

Size
2.2 MB (2183446 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET / HTTP/1.1
Host: enter-karrat.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 301 Moved Permanently
date: Fri, 26 Apr 2024 23:50:28 GMT
location: https://cloudflare-ipfs.com/ipfs/QmRfeBkXGHGpgzauFmXQb6zzf5zfez6CfGtgoafCpNqrSx/
access-control-allow-origin: *
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=mKDenwD22sm4iIkrdguep6xNoYUbxWq%2FPz%2Fprxo3HtU98gNlqbcNrA3RYbMDVL6iSVosmBJ91v5VJTuZhu4lGQ1sgWwcQPI023macKtF7gUc9ii13%2Bg7oNv4ciIbBMzAgD9m"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87aa79abbad056bf-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

cloudflare-ipfs.com/ipfs/QmRfeBkXGHGpgzauFmXQb6zzf5zfez6CfGtgoafCpNqrSx/

104.17.64.14

200 OK

2.2 MB

URL User Request GET HTTP/2
cloudflare-ipfs.com/ipfs/QmRfeBkXGHGpgzauFmXQb6zzf5zfez6CfGtgoafCpNqrSx/
IP
104.17.64.14:443
ASN
#13335 CLOUDFLARENET

Certificate
IssuerLet's Encrypt
Subjectcloudflare-ipfs.com
FingerprintAF:BC:14:E3:55:D9:D8:F0:3C:8E:26:A0:4E:4A:C8:E6:13:58:A0:59
ValidityWed, 24 Apr 2024 02:22:22 GMT - Tue, 23 Jul 2024 02:22:21 GMT

File type

Size
2.2 MB (2183446 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
PhishTank	phishing	Other

HTTP Headers

GET /ipfs/QmRfeBkXGHGpgzauFmXQb6zzf5zfez6CfGtgoafCpNqrSx/ HTTP/1.1
Host: cloudflare-ipfs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Fri, 26 Apr 2024 23:50:29 GMT
content-type: text/html
cf-ray: 87aa79ac982ab517-OSL
cf-cache-status: MISS
access-control-allow-origin: *
cache-control: public, max-age=29030400, immutable
etag: W/"QmRfeBkXGHGpgzauFmXQb6zzf5zfez6CfGtgoafCpNqrSx"
vary: Accept-Encoding
access-control-allow-headers: Content-Type, Range, User-Agent, X-Requested-With
access-control-allow-methods: GET
access-control-expose-headers: Content-Length, Content-Range, X-Chunked-Output, X-Ipfs-Path, X-Ipfs-Roots, X-Stream-Output
x-cf-ipfs-cache-status: miss
x-ipfs-path: /ipfs/QmRfeBkXGHGpgzauFmXQb6zzf5zfez6CfGtgoafCpNqrSx/
x-ipfs-roots: QmRfeBkXGHGpgzauFmXQb6zzf5zfez6CfGtgoafCpNqrSx
set-cookie: __cf_bm=f6PHD9tNOnlbhq0lYk6qEFcI0tcveIYYNKWF4EMyxXA-1714175429-1.0.1.1-PyaKsfxSGIyugh847RglC2.52iYBcT3L4oIWMV5Wfdko9isbaw4nIghBbZsTUtqnUWLwIXt.zykCyZCcb66YyA; path=/; expires=Sat, 27-Apr-24 00:20:29 GMT; domain=.cloudflare-ipfs.com; HttpOnly; Secure; SameSite=None
server: cloudflare
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (5)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (5)

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers