| cdnjs.cloudflare.com/ajax/libs/font-awesome/4.3.0/css/font-awesome.min.css | 104.17.25.14 | 200 OK | 4.4 kB |
URL GET HTTP/2cdnjs.cloudflare.com/ajax/libs/font-awesome/4.3.0/css/font-awesome.min.css IP104.17.25.14:443
Requested byhttps://channelhub.info/24fc124a6l847b4607sbdce1a22b6728efab.html CertificateIssuerCloudflare, Inc. Subjectsni.cloudflaressl.com Fingerprint7A:EA:B9:09:71:70:6C:87:C9:D3:82:74:8A:7B:B4:60:E5:40:2D:8D ValidityMon, 03 Jul 2023 00:00:00 GMT - Tue, 02 Jul 2024 23:59:59 GMT
File typeASCII text, with very long lines (23577) Hash04425bbdc6243fc6e54bf8984fe50330 8c15c6bd82c71e9ef1bb11cf24e502fe07518ac5 541ac58217a8ade1a5e292a65a0661dc9db7a49ae13654943817a4fbc6761afd
GET /ajax/libs/font-awesome/4.3.0/css/font-awesome.min.css HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://channelhub.info/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 18 Apr 2024 04:58:33 GMT
content-type: text/css; charset=utf-8
content-length: 4364
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "65993750-110c"
last-modified: Sat, 06 Jan 2024 12:19:44 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 126656
expires: Tue, 08 Apr 2025 04:58:33 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=RdTk9VjM%2FEB0kNwnju4eiMXsAq41ilGpMoRwqVPiKPSFeCKoU6o16sLxPIov0dIy%2F4c7jlXyO85C5LUhGnkECokwExukY5FunHK7xT3w3142GFVvx%2Bj1Hhsq%2BL6oNsqvNEHeydRL"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 876214945d2e712e-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| lp.cybeready.net/Forms/MS-online/bannerlogo.png | 104.26.8.233 | 200 OK | 1.0 kB |
URL GET HTTP/2lp.cybeready.net/Forms/MS-online/bannerlogo.png IP104.26.8.233:443
Requested byhttps://channelhub.info/24fc124a6l847b4607sbdce1a22b6728efab.html CertificateIssuerLet's Encrypt Subjectcybeready.net FingerprintBB:28:14:F8:09:02:DF:1E:F0:B6:74:8B:09:67:6A:55:A6:0D:A0:38 ValidityTue, 16 Apr 2024 23:13:46 GMT - Mon, 15 Jul 2024 23:13:45 GMT
File typePNG image data, 159 x 35, 8-bit colormap, non-interlaced Hash24bfcce4b67e345caac4ce3849b26d5d fd6b6d847ade5480f290cbce319cdee74016d859 de8d43f95c8743f71d53a6ca3d5dc0b3d2c29e96b7c565e52cf5a86c416c2400
GET /Forms/MS-online/bannerlogo.png HTTP/1.1
Host: lp.cybeready.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://channelhub.info/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 18 Apr 2024 04:58:33 GMT
content-type: image/png
content-length: 1024
cf-bgj: imgq:100,h2pri
cf-polished: origSize=4585
etag: "9f09a27d4f69b3557c7433574a29d726"
last-modified: Mon, 09 May 2016 08:37:46 GMT
x-amz-id-2: oyREWeQpA7ftqsQ93j0SqJILSposezh8Gx8VKDj4nQorPklo2baX903qbosTcstbY/EGKBy4xcg=
x-amz-request-id: VG7FS237CKAWP6CE
cache-control: max-age=14400
cf-cache-status: HIT
age: 1597
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=75gOUYUVp%2BpVhJ6XyjUxUd1piEldU%2BLsFYZTjKndAt4%2BKWvv2V8obdiY3UXhDJsopPEJqMZi3UYbtyX3EBjBK6RD4izgtinHYabP0Pz96ui3xdHCeDAYhSTRn7WuXSYa9A8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 876214945b5456a5-OSL
X-Firefox-Spdy: h2
|
|
| lp.cybeready.net/Forms/MS-online/microsoft_logo.png | 104.26.8.233 | 200 OK | 653 B |
URL GET HTTP/2lp.cybeready.net/Forms/MS-online/microsoft_logo.png IP104.26.8.233:443
Requested byhttps://channelhub.info/24fc124a6l847b4607sbdce1a22b6728efab.html CertificateIssuerLet's Encrypt Subjectcybeready.net FingerprintBB:28:14:F8:09:02:DF:1E:F0:B6:74:8B:09:67:6A:55:A6:0D:A0:38 ValidityTue, 16 Apr 2024 23:13:46 GMT - Mon, 15 Jul 2024 23:13:45 GMT
File typePNG image data, 100 x 22, 8-bit colormap, non-interlaced Hash366222d8d10fa25f28a5c4b8c738a887 d64ae75cb36ee9bca1076b259ee3e8dc1f3fa09c 3f58f0f3a9d3cad69e0d008d752af773b81a2d29f92c855b796dc2cc3a8813f9
Analyzer | Verdict | Alert | urlquery | phishing | Phishing - Microsoft |
GET /Forms/MS-online/microsoft_logo.png HTTP/1.1
Host: lp.cybeready.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://channelhub.info/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 18 Apr 2024 04:58:33 GMT
content-type: image/png
content-length: 653
cf-bgj: imgq:100,h2pri
cf-polished: origSize=1040
etag: "e4b675007dc6492ee590131d1f7dfbb3"
last-modified: Mon, 09 May 2016 08:37:44 GMT
x-amz-id-2: nuwL9vgbG/ekq/RxW2LQEr28j8DSzrvH3FxL7wr6F8zpO6fbKuJvzN8J9lBR0tO5f31McrZ1/vA=
x-amz-request-id: VTGQNQ6R8VGQHTMD
cache-control: max-age=14400
cf-cache-status: HIT
age: 1597
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=wb1wIPGvcjsbrDp8rEFflsOvKw8XTqHEeYbym4RPIgEsowjF0RPs55qgIji91AZZkgYBEsx63TMhuv2u%2Bj9F6wH2JORgtRUjOuas%2BKVTeLHmBOmUeEcmZmsozJToSMF6YZ8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 876214946b5856a5-OSL
X-Firefox-Spdy: h2
|
|
| cdnjs.cloudflare.com/ajax/libs/jquery/2.1.3/jquery.min.js | 104.17.25.14 | 200 OK | 27 kB |
URL GET HTTP/2cdnjs.cloudflare.com/ajax/libs/jquery/2.1.3/jquery.min.js IP104.17.25.14:443
Requested byhttps://channelhub.info/24fc124a6l847b4607sbdce1a22b6728efab.html CertificateIssuerCloudflare, Inc. Subjectsni.cloudflaressl.com Fingerprint7A:EA:B9:09:71:70:6C:87:C9:D3:82:74:8A:7B:B4:60:E5:40:2D:8D ValidityMon, 03 Jul 2023 00:00:00 GMT - Tue, 02 Jul 2024 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (32180) Hash7f9fb969ce353c5d77707836391eb28d 62c4042e9ebc691a5372d653b424512a561d1670 2051d61446d4dbffb03727031022a08c84528ab44d203a7669c101e5fbdd5515
GET /ajax/libs/jquery/2.1.3/jquery.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://channelhub.info/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 18 Apr 2024 04:58:33 GMT
content-type: application/javascript; charset=utf-8
content-length: 26660
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03ec4-14983"
last-modified: Mon, 04 May 2020 16:11:48 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 217613
expires: Tue, 08 Apr 2025 04:58:33 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=1SW7r%2B6GKd5LNRyCncmvS9YAF89EzFslg9ME4u8ZcxyWG62GcnuE2BEkOTbCxaIBMfCczKX6Ihxsh7DN6CaR99VI75wKPrnpT6%2BBV0siwj4eJqO5JXdsYOEuvEW%2FPJVhhsnwGEj0"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 876214947d55712e-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| lp.cybeready.net/Forms/MS-online/heroillustration.jpg | 104.26.8.233 | 200 OK | 197 kB |
URL GET HTTP/2lp.cybeready.net/Forms/MS-online/heroillustration.jpg IP104.26.8.233:443
Requested byhttps://channelhub.info/24fc124a6l847b4607sbdce1a22b6728efab.html CertificateIssuerLet's Encrypt Subjectcybeready.net FingerprintBB:28:14:F8:09:02:DF:1E:F0:B6:74:8B:09:67:6A:55:A6:0D:A0:38 ValidityTue, 16 Apr 2024 23:13:46 GMT - Mon, 15 Jul 2024 23:13:45 GMT
File typeJPEG image data, progressive, precision 8, 1420x1080, components 3 Size197 kB (196768 bytes) Hash65a2cb0d1e14633606d9d0cdda66bf39 1653696f5d951a6046008160a7c2dda9c27ce6f2 7d07ffc8f9e7620f82bbc8d3930ebf428f185d6d3f8cde05580ecb3530c5bbea
Analyzer | Verdict | Alert | urlquery | phishing | Phishing - Microsoft |
GET /Forms/MS-online/heroillustration.jpg HTTP/1.1
Host: lp.cybeready.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lp.cybeready.net/Forms/MS-online/index.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 18 Apr 2024 04:58:33 GMT
content-type: image/jpeg
content-length: 196768
cf-bgj: imgq:100,h2pri
cf-polished: origSize=203294
etag: "65283b123eb235e6176ae98c02ac5b1c"
last-modified: Mon, 09 May 2016 08:37:52 GMT
x-amz-id-2: sQ5DO4bBKUX24BhDZdOjxiaQ7BKc55u4WnVYzNJnb0OKsVmXV/fPrzkAwXnq73Uvwtez2KoQE2I=
x-amz-request-id: VTGJ98QKGS75FS4C
cache-control: max-age=14400
cf-cache-status: HIT
age: 1597
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=51vySLpsLNl4RUIQb3BybQftkNmUHwqoGd3RmS4UqaP0KefrKyOdXB6j7fw0YxufW7PWMfGbOU9xbqOqs9jaBwHERPG%2BuxB%2FxIP2r0l29uKhg6JAEEm2eEvKp0FWr6sINIM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87621495ec8c56a5-OSL
X-Firefox-Spdy: h2
|
|
| channelhub.info/cdn-cgi/challenge-platform/scripts/jsd/main.js | 172.67.75.14 | 302 Found | 0 B |
URL GET HTTP/2channelhub.info/cdn-cgi/challenge-platform/scripts/jsd/main.js IP172.67.75.14:443
Requested byhttps://channelhub.info/24fc124a6l847b4607sbdce1a22b6728efab.html CertificateIssuerGoogle Trust Services LLC Subjectchannelhub.info Fingerprint4E:67:A2:2B:C2:49:4C:22:2C:24:61:17:96:7B:FF:E3:A8:F3:03:64 ValidityTue, 02 Apr 2024 23:43:33 GMT - Mon, 01 Jul 2024 23:43:32 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /cdn-cgi/challenge-platform/scripts/jsd/main.js HTTP/1.1
Host: channelhub.info
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: requestid=2b143e68dcdfc5ab023574e59d077572
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 302 Found
date: Thu, 18 Apr 2024 04:58:33 GMT
content-length: 0
access-control-allow-origin: *
location: /cdn-cgi/challenge-platform/h/g/scripts/jsd/54ea73d52131/main.js
cache-control: max-age=300, public
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=WJSma2WnRVMF0HWU04s%2Fgesfdzr1GdCD8oqHgKGBZKrOoSMELVDKrvqy82DuMnEKUuwO7i%2BgofhqAZqk87BWLz4pXc%2BUSeQVpjUKdGpYKtwx3%2F%2FmELHrnaF0EgZvcLIy%2Bg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 876214963f0b712e-OSL
X-Firefox-Spdy: h2
|
|
| channelhub.info/24fc124a6l847b4607sbdce1a22b6728efab.html | 172.67.75.14 | 200 OK | 0 B |
URL User Request GET HTTP/2channelhub.info/24fc124a6l847b4607sbdce1a22b6728efab.html IP172.67.75.14:443
CertificateIssuerGoogle Trust Services LLC Subjectchannelhub.info Fingerprint4E:67:A2:2B:C2:49:4C:22:2C:24:61:17:96:7B:FF:E3:A8:F3:03:64 ValidityTue, 02 Apr 2024 23:43:33 GMT - Mon, 01 Jul 2024 23:43:32 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer | Verdict | Alert | OpenPhish | phishing | Outlook | Quad9 DNS | malicious | Sinkholed |
POST /24fc124a6l847b4607sbdce1a22b6728efab.html HTTP/1.1
Host: channelhub.info
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: json
X-Requested-With: XMLHttpRequest
Content-Length: 65
Origin: https://channelhub.info
DNT: 1
Connection: keep-alive
Referer: https://channelhub.info/24fc124a6l847b4607sbdce1a22b6728efab.html
Cookie: requestid=2b143e68dcdfc5ab023574e59d077572
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 18 Apr 2024 04:58:33 GMT
content-type: application/octet-stream
content-length: 0
set-cookie: requestid=e87b6794b6a03b930122fabc59bed830
requestid=597d6f6f139f7de325b37c43dd3f7d9f
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=X1xCIic1n5mjyOSXWi%2FfoUWUDYOOrtL1aJ3J7TNAVEtClJOYxCLtKQ31o%2FfuL36HZUjI5wXysTj6VS02uDwi4JH7Cnqlt4TsZM8%2BcLjbET7F1jjnEo4ohaCj7v86mHhk5Q%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 876214973ff7712e-OSL
X-Firefox-Spdy: h2
|
|
| lp.cybeready.net/Forms/MS-online/sanitize.css | 104.26.8.233 | 200 OK | 7.8 kB |
URL GET HTTP/2lp.cybeready.net/Forms/MS-online/sanitize.css IP104.26.8.233:443
Requested byhttps://channelhub.info/24fc124a6l847b4607sbdce1a22b6728efab.html CertificateIssuerLet's Encrypt Subjectcybeready.net FingerprintBB:28:14:F8:09:02:DF:1E:F0:B6:74:8B:09:67:6A:55:A6:0D:A0:38 ValidityTue, 16 Apr 2024 23:13:46 GMT - Mon, 15 Jul 2024 23:13:45 GMT
File typeASCII text, with very long lines (526), with no line terminators Hash2675cf7988f6a7a71b241bb7dbe69dec 7900859c6bf14e7c3a72db9bd4a9e49901f78173 4e9b51d07ce50cf3d2e065c34ba5f30d95d75227cd7642ae8d262d6772867e61
Analyzer | Verdict | Alert | urlquery | phishing | Phishing - Microsoft |
GET /Forms/MS-online/sanitize.css HTTP/1.1
Host: lp.cybeready.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://channelhub.info/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 18 Apr 2024 04:58:33 GMT
content-type: text/css
cf-bgj: minify
cf-polished: origSize=1014
etag: W/"61d79c3e015865ed0bca45e77eeac723"
last-modified: Mon, 09 May 2016 08:37:44 GMT
x-amz-id-2: HtxRyFtarpcGrcBTbmx/RAbYILShVqV/HXqBpX/hmjs8rUubW99GKMVr+ffagH9uRbjSEX3c1aQ=
x-amz-request-id: 53P3SQSENC68HHA9
cache-control: max-age=14400
cf-cache-status: HIT
age: 1597
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=WZh4xrZRAwIdRiSN1RbabIUB6YySBD5dnlmh9YvfSnoUfl1Cx39a%2B8cf%2FXav%2BrHyDkwvY2rf9soqVtLxCJ3vAxvxxe2DWnrkDvrBdDZBrsUhFgZnODqWrLoMnKdYcptirMs%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 876214947b6556a5-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| lp.cybeready.net/common/landing-page.js | 104.26.8.233 | 200 OK | 5.0 kB |
URL GET HTTP/2lp.cybeready.net/common/landing-page.js IP104.26.8.233:443
Requested byhttps://channelhub.info/24fc124a6l847b4607sbdce1a22b6728efab.html CertificateIssuerLet's Encrypt Subjectcybeready.net FingerprintBB:28:14:F8:09:02:DF:1E:F0:B6:74:8B:09:67:6A:55:A6:0D:A0:38 ValidityTue, 16 Apr 2024 23:13:46 GMT - Mon, 15 Jul 2024 23:13:45 GMT
File typeJavaScript source, ASCII text, with very long lines (590) Hashac5716b9ccc0d5eb31e94d8c873227d4 39ed1b79df1f4a7eedc7f245f0cabb0618246951 633d39e293d4a1e9f9c461323d6d3913f3ee51ab8cc901e4c45356cf022634ca
Analyzer | Verdict | Alert | urlquery | phishing | Phishing - Microsoft |
GET /common/landing-page.js HTTP/1.1
Host: lp.cybeready.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://channelhub.info/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 18 Apr 2024 04:58:33 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=7666
etag: W/"dc85792ec27e1c3bf02af986d07c81eb"
last-modified: Thu, 19 Nov 2015 18:47:02 GMT
x-amz-id-2: z8RsqbBiz1nWYtfNZb1HCsklBEOD8IM7WIC09NRnrI1IXGsWrJYoWs/x8VuE967G4EdDqZTcWR4=
x-amz-request-id: BGDVSRCCTTP72NXR
cache-control: max-age=14400
cf-cache-status: HIT
age: 1597
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=uU75pQHAh7n9hCqQn%2BZmNi4tPnA6k9zU7ptrwYZSN4Lyr2Xus%2B7UQjRs9pGHbuLXAVRc0lfjS9TXYCVgiKzmpH1L2Ez80ELZsknufb8Xil2WtoM%2BkpnjWWQxhXVKZQQE8P8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 876214946b6456a5-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| channelhub.info/24fc124a6l847b4607sbdce1a22b6728efab.html | 172.67.75.14 | 200 OK | 0 B |
URL User Request GET HTTP/2channelhub.info/24fc124a6l847b4607sbdce1a22b6728efab.html IP172.67.75.14:443
CertificateIssuerGoogle Trust Services LLC Subjectchannelhub.info Fingerprint4E:67:A2:2B:C2:49:4C:22:2C:24:61:17:96:7B:FF:E3:A8:F3:03:64 ValidityTue, 02 Apr 2024 23:43:33 GMT - Mon, 01 Jul 2024 23:43:32 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer | Verdict | Alert | OpenPhish | phishing | Outlook | Quad9 DNS | malicious | Sinkholed |
POST /24fc124a6l847b4607sbdce1a22b6728efab.html HTTP/1.1
Host: channelhub.info
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: json
X-Requested-With: XMLHttpRequest
Content-Length: 109
Origin: https://channelhub.info
DNT: 1
Connection: keep-alive
Referer: https://channelhub.info/24fc124a6l847b4607sbdce1a22b6728efab.html
Cookie: requestid=597d6f6f139f7de325b37c43dd3f7d9f; cf_clearance=1sUf8fwptNn6e5s4Y32lHzEfJJZaRBCROTu6RZzWdt8-1713416313-1.0.1.1-RAG4am.IGPVSNoRiCfJdZTmxBVgw4u3UiPkmVosvR.MHVYZmhzhS4Y.h1TrjR.YulxpnHOSEPGf2O9Xz8WIxyA
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 18 Apr 2024 04:58:56 GMT
content-type: application/octet-stream
content-length: 0
set-cookie: requestid=0b3dbf63b2cbb1faeba4480aa6bec279
requestid=afbb8315f041fad7fcb21d0ce6a3e71b
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=eSozyrFZRxTek9fOLwfq0nLBk3LoIuTN0eAx5pA10EyxqQr%2BwruK7Xo8c87OydWZLUpluHRXj1BDsJyERi3PjX6knkh%2F5XHjy9bv81sMOAxxACY3KKhR%2FSrjbMEqYnhZgw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87621523ac5f712e-OSL
X-Firefox-Spdy: h2
|
|
| lp.cybeready.net/Forms/MS-online/favicon.ico | 0.0.0.0 | | 0 B |
URL GET lp.cybeready.net/Forms/MS-online/favicon.ico IP0.0.0.0:0
Requested byhttps://channelhub.info/24fc124a6l847b4607sbdce1a22b6728efab.html CertificateIssuerLet's Encrypt Subjectcybeready.net FingerprintBB:28:14:F8:09:02:DF:1E:F0:B6:74:8B:09:67:6A:55:A6:0D:A0:38 ValidityTue, 16 Apr 2024 23:13:46 GMT - Mon, 15 Jul 2024 23:13:45 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /Forms/MS-online/favicon.ico HTTP/1.1
Host: lp.cybeready.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://channelhub.info/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 18 Apr 2024 04:58:33 GMT
content-type: image/x-icon
x-amz-id-2: 6INuEGBZE9oJXJPNfkMWFQpfrRs9jtzvoDFiiiK62HrjxfzS3ZnRb6xYEQaIn7RVI1dJidVwvKk=
x-amz-request-id: Q8KWSW825386B3NQ
last-modified: Mon, 09 May 2016 08:37:47 GMT
etag: W/"12e3dac858061d088023b2bd48e2fa96"
cache-control: max-age=14400
cf-cache-status: HIT
age: 1597
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=nihUsH8vNliuvicx1F3bK%2B2NgN3txAoFb7SFPVeOs%2FkBAaqV1bN9r9n78HwFA0kJDM5BQPKUUGUCslAMV%2B5hgKQqa3rmgPIaq%2BTj8NP8wDNAMZZiGMiEYDu82RuO%2F0yfsHQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 876214962cb356a5-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| channelhub.info/cdn-cgi/challenge-platform/h/g/jsd/r/87621490a941712e | 172.67.75.14 | 200 OK | 0 B |
URL POST HTTP/2channelhub.info/cdn-cgi/challenge-platform/h/g/jsd/r/87621490a941712e IP172.67.75.14:443
Requested byhttps://channelhub.info/24fc124a6l847b4607sbdce1a22b6728efab.html CertificateIssuerGoogle Trust Services LLC Subjectchannelhub.info Fingerprint4E:67:A2:2B:C2:49:4C:22:2C:24:61:17:96:7B:FF:E3:A8:F3:03:64 ValidityTue, 02 Apr 2024 23:43:33 GMT - Mon, 01 Jul 2024 23:43:32 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
POST /cdn-cgi/challenge-platform/h/g/jsd/r/87621490a941712e HTTP/1.1
Host: channelhub.info
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 12205
Origin: https://channelhub.info
DNT: 1
Connection: keep-alive
Referer: https://channelhub.info/24fc124a6l847b4607sbdce1a22b6728efab.html
Cookie: requestid=2b143e68dcdfc5ab023574e59d077572
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 18 Apr 2024 04:58:33 GMT
content-type: text/plain; charset=UTF-8
set-cookie: cf_clearance=1sUf8fwptNn6e5s4Y32lHzEfJJZaRBCROTu6RZzWdt8-1713416313-1.0.1.1-RAG4am.IGPVSNoRiCfJdZTmxBVgw4u3UiPkmVosvR.MHVYZmhzhS4Y.h1TrjR.YulxpnHOSEPGf2O9Xz8WIxyA; path=/; expires=Fri, 18-Apr-25 04:58:33 GMT; domain=.channelhub.info; HttpOnly; Secure; SameSite=None
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=kbIyKIdzI8VVgBX9pCdOJVQA8u6%2BlczOE8dyYsCnWPe2GGs21oIw%2FGzqt%2FMjFhEIyl3YRKHvUNEr2L5PCLyOlZ5wZDc%2FEQ3wBYjQiPdnGxwr%2FZyiUhywmFhAQKNk6O%2Fqlg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 876214972fee712e-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| lp.cybeready.net/Forms/MS-online/index.css | 104.26.8.233 | 200 OK | 2.4 kB |
URL GET HTTP/2lp.cybeready.net/Forms/MS-online/index.css IP104.26.8.233:443
Requested byhttps://channelhub.info/24fc124a6l847b4607sbdce1a22b6728efab.html CertificateIssuerLet's Encrypt Subjectcybeready.net FingerprintBB:28:14:F8:09:02:DF:1E:F0:B6:74:8B:09:67:6A:55:A6:0D:A0:38 ValidityTue, 16 Apr 2024 23:13:46 GMT - Mon, 15 Jul 2024 23:13:45 GMT
File typeASCII text, with very long lines (2426), with no line terminators Hash8a755011320e63395ea79047f1b5073c cdf05a68a5c6fe1c2566f63f92c3997f7352ab6f bd5d2516f5c4a874a8f3d1c03b60ce1c33854626f0bb98ef55e56dda4e46db56
Analyzer | Verdict | Alert | urlquery | phishing | Phishing - Microsoft |
GET /Forms/MS-online/index.css HTTP/1.1
Host: lp.cybeready.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://channelhub.info/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 18 Apr 2024 04:58:33 GMT
content-type: text/css
cf-bgj: minify
cf-polished: origSize=3105
etag: W/"f381725154f2d810562dc42f32c6bee2"
last-modified: Mon, 09 May 2016 08:37:42 GMT
x-amz-id-2: vNTVwsgZ/ssYJbpp0SHi+ulC+ZofQkDC16C0QRIkFdu6XYefnXiQtiQWaxwW73EmLrcrcRkjwY4=
x-amz-request-id: VG74JFR04HJXXY4Y
cache-control: max-age=14400
cf-cache-status: HIT
age: 1597
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=eLU0EEj10Pa7lI3CQ0DckPYSqK%2Bjxjg134umnbnbPF6109lmo4sxMhhA2XL7d%2Fd2Ipj6jlovZPV5wQZhsbvSOEN9mVeYIhImu6K5vGrNFJmrQOysPLd8r2hfUMqr3aa66Kk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 876214945b5156a5-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| lp.cybeready.net/Forms/MS-online/validator.js | 104.26.8.233 | 200 OK | 1.1 kB |
URL GET HTTP/2lp.cybeready.net/Forms/MS-online/validator.js IP104.26.8.233:443
Requested byhttps://channelhub.info/24fc124a6l847b4607sbdce1a22b6728efab.html CertificateIssuerLet's Encrypt Subjectcybeready.net FingerprintBB:28:14:F8:09:02:DF:1E:F0:B6:74:8B:09:67:6A:55:A6:0D:A0:38 ValidityTue, 16 Apr 2024 23:13:46 GMT - Mon, 15 Jul 2024 23:13:45 GMT
File typeASCII text, with very long lines (1158), with no line terminators Hash739cde09074e2d13657b46670db603ff a3a8a20ccd8af534d0693fa9984ad57e9fb7d0d3 ab0eab4eb25b68afc38087d490df3e23b0e902130a9ae4326a6901b045a32d8b
Analyzer | Verdict | Alert | urlquery | phishing | Phishing - Microsoft |
GET /Forms/MS-online/validator.js HTTP/1.1
Host: lp.cybeready.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://channelhub.info/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 18 Apr 2024 04:58:33 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=1569
etag: W/"844cb6b1728575eb4bc8bc531bb5a4f3"
last-modified: Mon, 09 May 2016 10:28:26 GMT
x-amz-id-2: zAeZmrBbHpjB2Wch38Za3vj7dfDT5GX963N6ddI2jLmyLq53vqs88+NFo+f5yk9sg6Oytuj+nrQ=
x-amz-request-id: B1C0XJZFX1GTCBRJ
cache-control: max-age=14400
cf-cache-status: HIT
age: 1597
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=TJzxHvmlzlPsU0NkAyuPdfBWVT%2BilWbPqv6s4w7gmP3oJho51TsfjxiJg03RAX%2BE4ETDO9XTinzQDEbDP%2Bjx2ahkcPeU6JQmyKAzbplTrxIdfAUYCW251gLul0D7ojFQTKk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 876214946b5e56a5-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| channelhub.info/cdn-cgi/challenge-platform/h/g/scripts/jsd/54ea73d52131/main.js | 172.67.75.14 | 200 OK | 7.8 kB |
URL GET HTTP/2channelhub.info/cdn-cgi/challenge-platform/h/g/scripts/jsd/54ea73d52131/main.js IP172.67.75.14:443
Requested byhttps://channelhub.info/24fc124a6l847b4607sbdce1a22b6728efab.html CertificateIssuerGoogle Trust Services LLC Subjectchannelhub.info Fingerprint4E:67:A2:2B:C2:49:4C:22:2C:24:61:17:96:7B:FF:E3:A8:F3:03:64 ValidityTue, 02 Apr 2024 23:43:33 GMT - Mon, 01 Jul 2024 23:43:32 GMT
File typeJavaScript source, ASCII text, with very long lines (7820), with no line terminators Hashb45fa3bb182aa5bba2c95ba64ad00565 b3ceb353ca3ee253653aeaab1b0b6bb4b2f541e5 b20abbbada7cfc76cd0875f72d16a04322280e6a201fc85d3975db49126b06a1
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /cdn-cgi/challenge-platform/h/g/scripts/jsd/54ea73d52131/main.js HTTP/1.1
Host: channelhub.info
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: requestid=2b143e68dcdfc5ab023574e59d077572
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 18 Apr 2024 04:58:33 GMT
content-type: application/javascript; charset=UTF-8
cache-control: max-age=14400, public
vary: accept-encoding
content-encoding: br
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=OgrAv%2B9jFUxiykWbDRo2BKzBJnYvIIAVfyRQkr9PX%2Bu7mMzQlKbFNN9%2FXYS%2F37CHCjeNChfjoH3pPPK1%2F2O1g4ChuoiAK3OVTQ0MUU%2Ft79JxXm7sI%2F7LlRB0Afbr%2ByeUcQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 876214966f3b712e-OSL
X-Firefox-Spdy: h2
|
|