Report - tracker.club-os.com/campaign/click?qDomYmsgId=d738c6bd137e6a03157c6c728cbc659e734fc398&test=false&target=jerfm.com/gkvd/hGhk/c13d1c0a55ba6911e1d84c5df18d0556/o8uUk7/bmlrb2xheS5sZW9udHlldkB3b3JsZHF1YW50LmNvbQ==

Report Overview

Submitted URL
tracker.club-os.com/campaign/click?qDomYmsgId=d738c6bd137e6a03157c6c728cbc659e734fc398&test=false&target=jerfm.com/gkvd/hGhk/c13d1c0a55ba6911e1d84c5df18d0556/o8uUk7/bmlrb2xheS5sZW9udHlldkB3b3JsZHF1YW50LmNvbQ==
IP
52.0.248.145
ASN
#14618 AMAZON-AES
Submitted
2024-04-17 15:15:44
Access
public
Website Title
Just a moment...
Final URL
94e6f5a7.58598891ef09ac737cee0cf3.workers.dev/?qrc=nikolay.leontyev@worldquant.com
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
4

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
tracker.club-os.com	870552	2011-01-10	2014-02-20	2024-04-17	663 B	267 B	34.205.254.71
jerfm.com	unknown	2023-06-27	2015-02-06	2024-04-16	1.0 kB	952 B	192.99.71.92
challenges.cloudflare.com	unknown	2009-02-17	2021-10-20	2024-04-17	6.4 kB	897 kB	104.17.2.184
94e6f5a7.58598891ef09ac737cee0cf3.workers.dev	unknown	2019-02-08	2024-04-12	2024-04-17	1.1 kB	7.7 kB	188.114.97.1

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

Scan Date	Severity	Indicator	Alert
2024-04-14	medium	94e6f5a7.58598891ef09ac737cee0cf3.workers.dev/	Office365
2024-04-14	medium	94e6f5a7.58598891ef09ac737cee0cf3.workers.dev/	Office365

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (37)

	URL	Size	First Seen	Last Seen
	challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/orchestrate/chl_api/v1?ray=875d5f275ce9abc9	430 kB	2024-04-17	2024-04-17
Pretty URL challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/orchestrate/chl_api/v1?ray=875d5f275ce9abc9 IP 104.17.2.184 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2024-04-17 17:15:44 Last Seen2024-04-17 17:15:46 Times Seen2 Hash ab9d1b85777f0d97d7970bf5cf6a4447 2c9b76b37d698fcef23d5b049ed154852626bcff 7d9e49a85d277b5cc9fc410b079082cc709bbd2e0e0616268a21666b9a8c50d0 Loading...

	challenges.cloudflare.com/turnstile/v0/api.js?onload=onloadTurnstileCallback	42 kB	2024-04-17	2024-04-19
Pretty URL challenges.cloudflare.com/turnstile/v0/api.js?onload=onloadTurnstileCallback IP 104.17.2.184 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2024-04-17 13:23:36 Last Seen2024-04-19 12:29:24 Times Seen644 Hash 374fec8b5e50cd6ab980f3fef21a5aa0 7f474607991a19b6f1b78cc32e0f75b501b60774 8af2da74872f03e058ab79a584176d2086afc01bbd42dd2ed14259179341be6a Loading...

	challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv1/AkSZVcd5_hXW16s/wtp2p/0x4AAAAAAAW-lbDQI7I0Z-Zf/auto/normal	3.6 kB	2024-04-17	2024-04-17
Pretty URL challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv1/AkSZVcd5_hXW16s/wtp2p/0x4AAAAAAAW-lbDQI7I0Z-Zf/auto/normal IP 104.17.2.184 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2024-04-17 17:15:44 Last Seen2024-04-17 17:15:44 Times Seen1 Hash 03d7e3f00db4746f5ee673ea99134f30 8cac1324ecac3fc54501e38785122f1ce5b744aa ce7094efdca5da96667fe01c4fa4d56a34e3a53d4fa0e5901d3ff29a7283a24f Loading...

	94e6f5a7.58598891ef09ac737cee0cf3.workers.dev/?qrc=nikolay.leontyev@worldquant.com	311 B	2024-04-12	2024-04-28
Pretty URL 94e6f5a7.58598891ef09ac737cee0cf3.workers.dev/?qrc=nikolay.leontyev@worldquant.com IP 188.114.97.1 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2024-04-12 18:49:52 Last Seen2024-04-28 15:07:35 Times Seen74 Hash aaca1f4d05478b4382beddfdbd4a854b dba5271c67fe07d2293e8f75306005638e170bee 4c1c37fca410fb27d54bf20678f64596e20d27eb6ca088f60eaaa23394a97058 Loading...

		Size	First Seen	Last Seen
	#1 Eval - 059d23f2a5480cc34e3426eff6797cd0	28 B	2024-04-17	2024-04-17
Pretty Observations First Seen2024-04-17 17:15:44 Last Seen2024-04-17 17:15:44 Times Seen1 Hash 059d23f2a5480cc34e3426eff6797cd0 a8d83246f5a297ae2413ff0f012c357ecdbc17aa c658765d3407f814ce6af983dbf2c61cc91d534b577e5e8f089bedbbdb67d486 Loading...

	#2 Eval - 5dc4b11232478a8395036cb6ea5698f6	28 B	2024-04-17	2024-04-17
Pretty Observations First Seen2024-04-17 17:15:44 Last Seen2024-04-17 17:15:44 Times Seen1 Hash 5dc4b11232478a8395036cb6ea5698f6 203caa39a487547a748481df54862608529cf94b be462f7d62ea507f40afbc5492c06db0018856e6dd5a278773e77f7feb2b2ad6 Loading...

	#3 Eval - 8a837f38740505be5c4628c86fbcf41b	28 B	2024-04-17	2024-04-17
Pretty Observations First Seen2024-04-17 17:15:44 Last Seen2024-04-17 17:15:44 Times Seen1 Hash 8a837f38740505be5c4628c86fbcf41b cd00557e3057a1b21c1a2dbca9762fb41dbff2bf f466234eac910af1eadccf01b2ba90c210b93b3d35f60df1681f49e24c4402b3 Loading...

	#4 Eval - a4dfcca3a6a1dea8994f56d436b62705	28 B	2024-04-17	2024-04-17
Pretty Observations First Seen2024-04-17 17:15:44 Last Seen2024-04-17 17:15:44 Times Seen1 Hash a4dfcca3a6a1dea8994f56d436b62705 c1998738c710a260ec3371d195c945ebcf873fbc 2d69e4b79b098d120bcb5ad56c8af9c552e24e610a74f6649d6913937c22d3ca Loading...

	#5 Eval - 6e177712b3cea8118434f46094833cbc	28 B	2024-04-17	2024-04-17
Pretty Observations First Seen2024-04-17 17:15:44 Last Seen2024-04-17 17:15:44 Times Seen1 Hash 6e177712b3cea8118434f46094833cbc a563f225dd65a6e7420a10bd08d840df5e5afa30 eab0b8b8fb775b5ae06136bd6cee9656e0de2809f8e94f6a3d19d5d1cc4f0202 Loading...

	#6 Eval - ccce7530e8b3ab5a81d32c9b6bc7259a	28 B	2024-04-17	2024-04-17
Pretty Observations First Seen2024-04-17 17:15:44 Last Seen2024-04-17 17:15:44 Times Seen1 Hash ccce7530e8b3ab5a81d32c9b6bc7259a cf2d08476101b759b036948ea83649d91b33fd65 0b71e61d9d8ce5084af22e0735ff1d3a5673f49f035eef621f0294f88fa2b4d4 Loading...

	#7 Eval - 16549844058e030392449c307cd3b4a1	142 B	2024-04-17	2024-04-19
Pretty Observations First Seen2024-04-17 16:39:32 Last Seen2024-04-19 12:24:13 Times Seen96 Hash 16549844058e030392449c307cd3b4a1 b095927b508c4960362343d7c00da2b3beea83d9 3a2d31b38b0835d2942cfd57c46d82a3b2e02e84841819a3c01bec45d52de9ca Loading...

	#8 Eval - 1bea1e3a47bdde9bd7926b3f696ef006	28 B	2024-04-17	2024-04-17
Pretty Observations First Seen2024-04-17 17:15:44 Last Seen2024-04-17 17:15:44 Times Seen1 Hash 1bea1e3a47bdde9bd7926b3f696ef006 1c879da5e84649218852537695e7d1499f32a89c ec633ce078d70733154fd4b55b1f21a0c83d56cf47c0c2f2bc6b662ab7b9e128 Loading...

	#9 Eval - 7297fc086be0a4e67cdf83c62023a4f7	28 B	2024-04-17	2024-04-17
Pretty Observations First Seen2024-04-17 17:15:44 Last Seen2024-04-17 17:15:44 Times Seen1 Hash 7297fc086be0a4e67cdf83c62023a4f7 a70fb0db82d4c00ea7a329decaeb8b947aadb487 47205a32778e40c2dd9502dc275255d1ce7bb97af7d23355513d4f075b72141f Loading...

	#10 Eval - 9b6d3cc9adae59c0cfee135f0a02995f	28 B	2024-04-17	2024-04-17
Pretty Observations First Seen2024-04-17 17:15:45 Last Seen2024-04-17 17:15:45 Times Seen1 Hash 9b6d3cc9adae59c0cfee135f0a02995f b79935b1c2ba71940b562c1a028f53e74ef4eaae 25fef0be4c52a43bce6ceb82e9c16e2aeceae162f61dd2d10eff5972fe703bce Loading...

	#11 Eval - ec1ca26e8c2d7d35fb259d541a54281b	28 B	2024-04-17	2024-04-17
Pretty Observations First Seen2024-04-17 17:15:45 Last Seen2024-04-17 17:15:45 Times Seen1 Hash ec1ca26e8c2d7d35fb259d541a54281b 08e816b1f1fe16a39aeac566bdb358a56f0f6000 b8e1f2e02098eed075548ac65c525cbb479772b65a728b22034f3c1004984721 Loading...

	#12 Eval - 22747f3fedd745571e0511201e829f52	28 B	2024-04-17	2024-04-17
Pretty Observations First Seen2024-04-17 17:15:45 Last Seen2024-04-17 17:15:45 Times Seen1 Hash 22747f3fedd745571e0511201e829f52 96a399e2b5e9b9379829e4e37f14ebbca2a5237b 9551a04d7c5c527e539b8e6a7e360d74b9e25aa1b36e9f70ea5039440a588256 Loading...

	#13 Eval - 9be805ba90fab3c2b27c4d60e288da88	28 B	2024-04-17	2024-04-17
Pretty Observations First Seen2024-04-17 17:15:45 Last Seen2024-04-17 17:15:45 Times Seen1 Hash 9be805ba90fab3c2b27c4d60e288da88 6c76d8728dfb7eb6e4e3b77ebaeb4738e4157b46 138dd81f56cafb110cb43c15dbf20ed000ba511d23e8ee96b452ebcba7f5667a Loading...

	#14 Eval - 1a32a34720a63d5686db05eba1a1df22	28 B	2024-04-17	2024-04-17
Pretty Observations First Seen2024-04-17 17:15:45 Last Seen2024-04-17 17:15:45 Times Seen1 Hash 1a32a34720a63d5686db05eba1a1df22 172a2a1e32e412a8e5b6bcc7de82ca8402bad33c 587ee423929e05ae86ee4efe75840a7e6a9d0ea178c1fdc8b65cce470a967984 Loading...

	#15 Eval - ad410064f658eba0e76844a00d9ac72e	28 B	2024-04-17	2024-04-17
Pretty Observations First Seen2024-04-17 17:15:45 Last Seen2024-04-17 17:15:45 Times Seen1 Hash ad410064f658eba0e76844a00d9ac72e 4011e0adc1f5605146de373f65a710f844e10e5b 529e9f0ff48736108888fdfe2b8257def9e489fbf27240e59facfbe7161b679a Loading...

	#16 Eval - 4ad72a1bf880636c069b71d93eb14f1b	28 B	2024-04-17	2024-04-17
Pretty Observations First Seen2024-04-17 17:15:45 Last Seen2024-04-17 17:15:45 Times Seen1 Hash 4ad72a1bf880636c069b71d93eb14f1b 7521633e11ec3964a67d6b7c4d0b15eacd756982 f85c91056384e87f69f2febf00174dd48eb164ba36e6bfb8919de45e1d077924 Loading...

	#17 Eval - 0b5857841075b615647789dc47d4cda0	28 B	2024-04-17	2024-04-17
Pretty Observations First Seen2024-04-17 17:15:45 Last Seen2024-04-17 17:15:45 Times Seen1 Hash 0b5857841075b615647789dc47d4cda0 126b9b21404e7ceb5de49d6dc1183c75f3c7ec89 71d25bb4e3a8353e2a3eba3a154116d3ead4a2cbc055572c303a99b9fbcbd360 Loading...

	#18 Eval - 816f6cd602f81c68a414428393f90a3b	28 B	2024-04-17	2024-04-17
Pretty Observations First Seen2024-04-17 17:15:45 Last Seen2024-04-17 17:15:45 Times Seen1 Hash 816f6cd602f81c68a414428393f90a3b fe9b74f31b6918cb2945adcdd62f9ae091ca6270 350405c41be51fdd9231b805cd7160760f9b07e673e32741eba48208b677e55c Loading...

	#19 Eval - 828efd75b90b235507cddaa56c0668c5	28 B	2024-04-17	2024-04-17
Pretty Observations First Seen2024-04-17 17:15:45 Last Seen2024-04-17 17:15:45 Times Seen1 Hash 828efd75b90b235507cddaa56c0668c5 9e046eb527451b09bd70d103a33f31cdbcbe5b00 99a35b7047d2f20d5dd45babb54c49f60117839f7b6acd03214cd8e1df68df02 Loading...

	#20 Eval - 663e8df1b5814cede37a666d63d26f27	28 B	2024-04-17	2024-04-17
Pretty Observations First Seen2024-04-17 17:15:45 Last Seen2024-04-17 17:15:45 Times Seen1 Hash 663e8df1b5814cede37a666d63d26f27 9e8ba6f108de9ce4e89164d594cb8d0e593c59ef 86e795f18cfdcfbc6d86f455a61ddeb71ab504cbf14d94fb387c8b36cd1e1353 Loading...

	#21 Eval - 9fba386b83419a08ff1faa8007dd23a1	60 B	2024-04-17	2024-04-19
Pretty Observations First Seen2024-04-17 14:11:25 Last Seen2024-04-19 12:29:21 Times Seen535 Hash 9fba386b83419a08ff1faa8007dd23a1 c6148c7d249ddcfe37f49e99ac7cb60fe3bd43f2 a197c137af56d7b49dd589ed67e397152047dea7b7a147b0403d07bd1c6d59ee Loading...

	#22 Eval - ab62fb4a07e981300bc1766d350f23a5	28 B	2024-04-17	2024-04-17
Pretty Observations First Seen2024-04-17 17:15:45 Last Seen2024-04-17 17:15:45 Times Seen1 Hash ab62fb4a07e981300bc1766d350f23a5 03cfc2645fd826bee6727448bb4de676eb07a874 3a45aacd6bc830116d991aa5dd2f34756c26ced24d9e424b704fabe683b9885b Loading...

	#23 Eval - 6b3031fd62939b637aa489c744c12b00	28 B	2024-04-17	2024-04-17
Pretty Observations First Seen2024-04-17 17:15:45 Last Seen2024-04-17 17:15:45 Times Seen1 Hash 6b3031fd62939b637aa489c744c12b00 48ead9443d14dc465f432f5a82c3f30a6e1a886e 5ad24ab08df0d66f4ab4bbb3c3b6b8f1c071a351389d773a772f2087927e6265 Loading...

	#24 Eval - ba6508cb02987f03d82c2060ba583a66	28 B	2024-04-17	2024-04-17
Pretty Observations First Seen2024-04-17 17:15:45 Last Seen2024-04-17 17:15:45 Times Seen1 Hash ba6508cb02987f03d82c2060ba583a66 e7cdc4447a0da8c73cd91ddb2358bfad32880ece 7fb2d393e0afcfb41b2debd852eae8c5f54d8cae87363b98dc72c25a6302f30f Loading...

	#25 Eval - 8f75aba7d9dda440bab48758324df5ad	28 B	2024-04-17	2024-04-17
Pretty Observations First Seen2024-04-17 17:15:45 Last Seen2024-04-17 17:15:45 Times Seen1 Hash 8f75aba7d9dda440bab48758324df5ad bbb47957be0bac25d34467b52932d166da7cafb8 ff6543808e0fc693633dd8ac2b450948d574dd6ef0cd2dad6dde1bd58c00a7fb Loading...

	#26 Eval - 9e925e9341b490bfd3b4c4ca3b0c1ef2	4 B	2023-03-07	2024-04-30
Pretty Observations First Seen2023-03-07 01:03:43 Last Seen2024-04-30 18:22:38 Times Seen350853 Hash 9e925e9341b490bfd3b4c4ca3b0c1ef2 c2543fff3bfa6f144c2f06a7de6cd10c0b650cae 1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408 Loading...

	#27 Eval - 81adb1e211f8acbe0e30520589190af5	28 B	2024-04-17	2024-04-17
Pretty Observations First Seen2024-04-17 17:15:45 Last Seen2024-04-17 17:15:45 Times Seen1 Hash 81adb1e211f8acbe0e30520589190af5 1ad027b0b2ade2c4d7050fec448c02e4fcaadf18 0b59c8d783ba3715e9b8cb036aa0c6eeb6991de836fe14122806e7a360cc9ce3 Loading...

	#28 Eval - 32adf0b7ca14b10df6120d6d58c44469	28 B	2024-04-17	2024-04-17
Pretty Observations First Seen2024-04-17 17:15:45 Last Seen2024-04-17 17:15:45 Times Seen1 Hash 32adf0b7ca14b10df6120d6d58c44469 ee9fc4156151307216bf365c1e588b8aed4746ce b340acce05fa5100671ef2c89be7b9a8a9593e721faa0d333150c0f80545197f Loading...

	#29 Eval - b7e517dfe9f485441453d668c3c0d353	28 B	2024-04-17	2024-04-17
Pretty Observations First Seen2024-04-17 17:15:45 Last Seen2024-04-17 17:15:45 Times Seen1 Hash b7e517dfe9f485441453d668c3c0d353 256a05c96af3864739aff7881f2d594aeaebee28 91e50f72ac154c672b0ca18323f1468c08f26ab37cc5b6573f5d6fe920ae04cf Loading...

	#30 Eval - a6a3d3e710df21c49e34e26a0b45d92f	28 B	2024-04-17	2024-04-17
Pretty Observations First Seen2024-04-17 17:15:45 Last Seen2024-04-17 17:15:45 Times Seen1 Hash a6a3d3e710df21c49e34e26a0b45d92f 3da4ed9a1fc0dcbe380dd1fc5b70742438efd6e0 79c52af43cd3a58851e788a2191eb6fc2224352d4140a91aa775f1f876c51a13 Loading...

	#31 Eval - 416349bc48a1b0b6dbcbd8ca1e80172f	28 B	2024-04-17	2024-04-17
Pretty Observations First Seen2024-04-17 17:15:45 Last Seen2024-04-17 17:15:45 Times Seen1 Hash 416349bc48a1b0b6dbcbd8ca1e80172f ab524580a13ff85f6ebebc248a98aebb6a1f2568 9529a6f8d2e30eab53d765568bcb94cac237d8c60414a645d8b5e5124c98414c Loading...

	#32 Eval - 0eb7d924ca4319d316065eeced44f97d	28 B	2024-04-17	2024-04-17
Pretty Observations First Seen2024-04-17 17:15:45 Last Seen2024-04-17 17:15:45 Times Seen1 Hash 0eb7d924ca4319d316065eeced44f97d 3ef872e67725d637b7544c42074879d808b8c535 c1990296429a80c198b2a9a3a9c62c0d65c7cbbefba35500fd3232d22cb371c4 Loading...

	#33 Eval - 3549f91a2c64d5c76be65e1b6efcc489	28 B	2024-04-17	2024-04-17
Pretty Observations First Seen2024-04-17 17:15:45 Last Seen2024-04-17 17:15:45 Times Seen1 Hash 3549f91a2c64d5c76be65e1b6efcc489 8d9864cb7442b3c7632343bcf701861461868b95 289b197b4641880150ca89c3f8fbe9e5017a93009cedc7c5986d073b8114b85d Loading...

HTTP Transactions (15)

URL IP Response Size

tracker.club-os.com/campaign/click?qDomYmsgId=d738c6bd137e6a03157c6c728cbc659e734fc398&test=false&target=jerfm.com/gkvd/hGhk/c13d1c0a55ba6911e1d84c5df18d0556/o8uUk7/bmlrb2xheS5sZW9udHlldkB3b3JsZHF1YW50LmNvbQ==

34.205.254.71

0 B

URL
tracker.club-os.com/campaign/click?qDomYmsgId=d738c6bd137e6a03157c6c728cbc659e734fc398&test=false&target=jerfm.com/gkvd/hGhk/c13d1c0a55ba6911e1d84c5df18d0556/o8uUk7/bmlrb2xheS5sZW9udHlldkB3b3JsZHF1YW50LmNvbQ==
IP
34.205.254.71:0
ASN
#14618 AMAZON-AES

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /campaign/click?qDomYmsgId=d738c6bd137e6a03157c6c728cbc659e734fc398&test=false&target=jerfm.com/gkvd/hGhk/c13d1c0a55ba6911e1d84c5df18d0556/o8uUk7/bmlrb2xheS5sZW9udHlldkB3b3JsZHF1YW50LmNvbQ== HTTP/1.1
Host: tracker.club-os.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 303 See Other
date: Wed, 17 Apr 2024 15:15:18 GMT
content-length: 0
location: http://jerfm.com/gkvd/hGhk/c13d1c0a55ba6911e1d84c5df18d0556/o8uUk7/bmlrb2xheS5sZW9udHlldkB3b3JsZHF1YW50LmNvbQ==
server: Apache/2.4.57 () OpenSSL/1.0.2k-fips
X-Firefox-Spdy: h2

jerfm.com/gkvd/hGhk/c13d1c0a55ba6911e1d84c5df18d0556/o8uUk7/bmlrb2xheS5sZW9udHlldkB3b3JsZHF1YW50LmNvbQ==

192.99.71.92

320 B

URL
jerfm.com/gkvd/hGhk/c13d1c0a55ba6911e1d84c5df18d0556/o8uUk7/bmlrb2xheS5sZW9udHlldkB3b3JsZHF1YW50LmNvbQ==
IP
192.99.71.92:0
ASN
#16276 OVH SAS

File type
HTML document, ASCII text
Size
320 B (320 bytes)
Hash
8d0fe0ddf863a23dc8e236f68cbc2625
77a8517d909f2a8810b8fc86abc51010d05b056a
cf7f5776a6af3c83703dc13e610c822c2362fd3d8ac47af2a06e0a9c00f0c3de

HTTP Headers

GET /gkvd/hGhk/c13d1c0a55ba6911e1d84c5df18d0556/o8uUk7/bmlrb2xheS5sZW9udHlldkB3b3JsZHF1YW50LmNvbQ== HTTP/1.1
Host: jerfm.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 301 Moved Permanently
Date: Wed, 17 Apr 2024 15:15:18 GMT
Server: Apache
Location: https://jerfm.com/gkvd/hGhk/c13d1c0a55ba6911e1d84c5df18d0556/o8uUk7/bmlrb2xheS5sZW9udHlldkB3b3JsZHF1YW50LmNvbQ==
Content-Length: 320
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1

jerfm.com/gkvd/hGhk/c13d1c0a55ba6911e1d84c5df18d0556/o8uUk7/bmlrb2xheS5sZW9udHlldkB3b3JsZHF1YW50LmNvbQ==

192.99.71.92

0 B

URL
jerfm.com/gkvd/hGhk/c13d1c0a55ba6911e1d84c5df18d0556/o8uUk7/bmlrb2xheS5sZW9udHlldkB3b3JsZHF1YW50LmNvbQ==
IP
192.99.71.92:0
ASN
#16276 OVH SAS

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /gkvd/hGhk/c13d1c0a55ba6911e1d84c5df18d0556/o8uUk7/bmlrb2xheS5sZW9udHlldkB3b3JsZHF1YW50LmNvbQ== HTTP/1.1
Host: jerfm.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Wed, 17 Apr 2024 15:15:19 GMT
Server: Apache
refresh: 0;url=https://94e6f5a7.58598891ef09ac737cee0cf3.workers.dev/?qrc=nikolay.leontyev@worldquant.com
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

challenges.cloudflare.com/turnstile/v0/api.js?onload=onloadTurnstileCallback

104.17.2.184

302 Found

0 B

URL GET HTTP/2
challenges.cloudflare.com/turnstile/v0/api.js?onload=onloadTurnstileCallback
IP
104.17.2.184:443
ASN
#13335 CLOUDFLARENET

Requested by
https://94e6f5a7.58598891ef09ac737cee0cf3.workers.dev/?qrc=nikolay.leontyev@worldquant.com
Certificate
IssuerCloudflare, Inc.
Subjectchallenges.cloudflare.com
Fingerprint5F:E4:AA:8C:2E:24:D2:B1:69:9D:13:28:31:5C:65:FA:97:2A:E9:6E
ValidityFri, 18 Aug 2023 00:00:00 GMT - Sat, 17 Aug 2024 23:59:59 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /turnstile/v0/api.js?onload=onloadTurnstileCallback HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://94e6f5a7.58598891ef09ac737cee0cf3.workers.dev/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 302 Found
date: Wed, 17 Apr 2024 15:15:19 GMT
content-length: 0
cache-control: max-age=300, public
cross-origin-resource-policy: cross-origin
location: /turnstile/v0/g/54ea73d52131/api.js?onload=onloadTurnstileCallback
access-control-allow-origin: *
vary: Accept-Encoding
server: cloudflare
cf-ray: 875d5eb1db0692a6-CPH
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/cmg/1/GLhOioXg0bs57t4qPrORXFsL1%2BWig2mIKbgpVPMu7ZQ%3D

104.17.2.184

200 OK

9.7 kB

URL GET HTTP/3
challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/cmg/1/GLhOioXg0bs57t4qPrORXFsL1%2BWig2mIKbgpVPMu7ZQ%3D
IP
104.17.2.184:443
ASN
#13335 CLOUDFLARENET

Requested by
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv1/AkSZVcd5_hXW16s/wtp2p/0x4AAAAAAAW-lbDQI7I0Z-Zf/auto/normal
Certificate
IssuerCloudflare, Inc.
Subjectchallenges.cloudflare.com
Fingerprint5F:E4:AA:8C:2E:24:D2:B1:69:9D:13:28:31:5C:65:FA:97:2A:E9:6E
ValidityFri, 18 Aug 2023 00:00:00 GMT - Sat, 17 Aug 2024 23:59:59 GMT

File type
PNG image data, 2 x 2, 8-bit/color RGB, non-interlaced
Size
9.7 kB (9702 bytes)
Hash
f6a4f054e8c02061b06fbb71d6cf2633
b9f9b6ab14cfd57b1694f551e023a9a231320418
145d05809f1c37f501f779b6ed0dc1cce1a758b2e1fcfc48d8c49048eb82359a

HTTP Headers

GET /cdn-cgi/challenge-platform/h/g/cmg/1/GLhOioXg0bs57t4qPrORXFsL1%2BWig2mIKbgpVPMu7ZQ%3D HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/wtp2p/0x4AAAAAAAW-lbDQI7I0Z-Zf/auto/normal
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Wed, 17 Apr 2024 15:15:24 GMT
content-type: image/png
cache-control: max-age=2629800, public
server: cloudflare
cf-ray: 875d5ecb5ad2abc9-CPH
alt-svc: h3=":443"; ma=86400

challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/orchestrate/chl_api/v1?ray=875d5eb30cc692a6

104.17.2.184

127 kB

URL
challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/orchestrate/chl_api/v1?ray=875d5eb30cc692a6
IP
104.17.2.184:0
ASN
#13335 CLOUDFLARENET

Certificate
IssuerCloudflare, Inc.
Subjectchallenges.cloudflare.com
Fingerprint5F:E4:AA:8C:2E:24:D2:B1:69:9D:13:28:31:5C:65:FA:97:2A:E9:6E
ValidityFri, 18 Aug 2023 00:00:00 GMT - Sat, 17 Aug 2024 23:59:59 GMT

File type
JavaScript source, ASCII text, with very long lines (65536), with no line terminators
Size
127 kB (127051 bytes)
Hash
1fa025d044baed0b157e056263a81a35
d1b1462820e9f9c25f1b6c1614625ba1108dddcb
3a9e0e97ea567e35e775a3663f5db5282cbaffe6d7cf4667555c0904f1863eed

HTTP Headers

GET /cdn-cgi/challenge-platform/h/g/orchestrate/chl_api/v1?ray=875d5eb30cc692a6 HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/wtp2p/0x4AAAAAAAW-lbDQI7I0Z-Zf/auto/normal
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Wed, 17 Apr 2024 15:15:24 GMT
content-type: application/javascript; charset=UTF-8
cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
server: cloudflare
cf-ray: 875d5ecb5ad7abc9-CPH
content-encoding: br
alt-svc: h3=":443"; ma=86400

challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/flow/ov1/816919964:1713363292:G2Pz2_1ZKzJN4SdZZQT-sfmjsv--Y5dSi-3qGwmu9_c/875d5f275ce9abc9/2f689139908abe3

104.17.2.184

200 OK

22 kB

URL POST HTTP/3
challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/flow/ov1/816919964:1713363292:G2Pz2_1ZKzJN4SdZZQT-sfmjsv--Y5dSi-3qGwmu9_c/875d5f275ce9abc9/2f689139908abe3
IP
104.17.2.184:443
ASN
#13335 CLOUDFLARENET

Requested by
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv1/AkSZVcd5_hXW16s/wtp2p/0x4AAAAAAAW-lbDQI7I0Z-Zf/auto/normal
Certificate
IssuerCloudflare, Inc.
Subjectchallenges.cloudflare.com
Fingerprint5F:E4:AA:8C:2E:24:D2:B1:69:9D:13:28:31:5C:65:FA:97:2A:E9:6E
ValidityFri, 18 Aug 2023 00:00:00 GMT - Sat, 17 Aug 2024 23:59:59 GMT

File type
ASCII text, with very long lines (22508), with no line terminators
Size
22 kB (22508 bytes)
Hash
ce5729572dd96c0904bf14218bf88e21
528307c7805bfc38e5face09a37a05bf0fb6dc26
6318c45de27bac32749ae62795e10cbe2fdcae977799f82d46d2c24d61d6888c

HTTP Headers

POST /cdn-cgi/challenge-platform/h/g/flow/ov1/816919964:1713363292:G2Pz2_1ZKzJN4SdZZQT-sfmjsv--Y5dSi-3qGwmu9_c/875d5f275ce9abc9/2f689139908abe3 HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv1/AkSZVcd5_hXW16s/wtp2p/0x4AAAAAAAW-lbDQI7I0Z-Zf/auto/normal
Content-type: application/x-www-form-urlencoded
CF-Challenge: 2f689139908abe3
Content-Length: 25738
Origin: https://challenges.cloudflare.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Wed, 17 Apr 2024 15:15:40 GMT
content-type: text/plain; charset=UTF-8
cf-chl-gen: 0mscgzt3GT8eLluq/BqpPdxsrobY4YE20tEagKy8xb4XlDBrCZFwH5ppoaP0bWW1$rCgC7MHM6BYu37V4/4Be2g==
server: cloudflare
cf-ray: 875d5f3278b2abc9-CPH
content-encoding: br
alt-svc: h3=":443"; ma=86400

94e6f5a7.58598891ef09ac737cee0cf3.workers.dev/?qrc=nikolay.leontyev@worldquant.com

188.114.97.1

200 OK

3.3 kB

URL User Request GET HTTP/2
94e6f5a7.58598891ef09ac737cee0cf3.workers.dev/?qrc=nikolay.leontyev@worldquant.com
IP
188.114.97.1:443
ASN
#13335 CLOUDFLARENET

Certificate
IssuerGoogle Trust Services LLC
Subject58598891ef09ac737cee0cf3.workers.dev
FingerprintD0:7E:0D:A9:25:22:78:7A:45:69:2E:89:48:E8:33:A8:4A:15:BD:DF
ValidityFri, 12 Apr 2024 13:36:58 GMT - Thu, 11 Jul 2024 13:36:57 GMT

File type
HTML document, ASCII text, with very long lines (3271), with no line terminators
Size
3.3 kB (3255 bytes)
Hash
47234cb372fd223e370a6bf1c38942d1
06d24783cdd2b5206b9e5ab999519ebdd4abc656
7920553c5a5aa9de58ebe3934c2759bab7c7bc30ba35a6949cc6ed8a8c7158f4

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Office365

HTTP Headers

GET /?qrc=nikolay.leontyev@worldquant.com HTTP/1.1
Host: 94e6f5a7.58598891ef09ac737cee0cf3.workers.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Wed, 17 Apr 2024 15:15:19 GMT
content-type: text/html;charset=UTF-8
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=8aFwzvtnKekyxMELVZu14f4NX3sV7cdNbyId%2F7ETy9vdwp3wxP0uvQ5CDfWWVchNkmU48CxoJsvoJnGKsDhS5SZV3wYHsKTROt2hxq0I1pIM5x%2FjS8nxldIi9feX%2FqnPfN15BnhHnqQ4kWp7vAcYuY8di86SIiMTRIQ0%2B2esbHs%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 875d5eaf1c5fabdb-CPH
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

94e6f5a7.58598891ef09ac737cee0cf3.workers.dev/favicon.ico

188.114.97.1

200 OK

3.3 kB

URL GET HTTP/3
94e6f5a7.58598891ef09ac737cee0cf3.workers.dev/favicon.ico
IP
188.114.97.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://94e6f5a7.58598891ef09ac737cee0cf3.workers.dev/?qrc=nikolay.leontyev@worldquant.com
Certificate
IssuerGoogle Trust Services LLC
Subject58598891ef09ac737cee0cf3.workers.dev
FingerprintD0:7E:0D:A9:25:22:78:7A:45:69:2E:89:48:E8:33:A8:4A:15:BD:DF
ValidityFri, 12 Apr 2024 13:36:58 GMT - Thu, 11 Jul 2024 13:36:57 GMT

File type
HTML document, ASCII text, with very long lines (3271), with no line terminators
Size
3.3 kB (3255 bytes)
Hash
47234cb372fd223e370a6bf1c38942d1
06d24783cdd2b5206b9e5ab999519ebdd4abc656
7920553c5a5aa9de58ebe3934c2759bab7c7bc30ba35a6949cc6ed8a8c7158f4

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Office365

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: 94e6f5a7.58598891ef09ac737cee0cf3.workers.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://94e6f5a7.58598891ef09ac737cee0cf3.workers.dev/?qrc=nikolay.leontyev@worldquant.com
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Wed, 17 Apr 2024 15:15:19 GMT
content-type: text/html;charset=UTF-8
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=PSyhLLp2dNiGXj4boQcZy%2BDgFQ1P3zTFbGqXNJ6psQ7ARORpjyFsHBrMVbT6sSN0iFvT3DkJ6zuRbyUK5UlCO8j%2BcZLy%2FpUw4KfYBe1uiAbrSWTIOgJC94WdSHZk0Ev4FrYAfaH21PvJitS0iD51Z%2BtlE9NWnkoWvE0I1me8mg8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 875d5eb10d0492d3-CPH
content-encoding: br
alt-svc: h3=":443"; ma=86400

challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/wtp2p/0x4AAAAAAAW-lbDQI7I0Z-Zf/auto/normal

104.17.2.184

200 OK

80 kB

URL GET HTTP/2
challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/wtp2p/0x4AAAAAAAW-lbDQI7I0Z-Zf/auto/normal
IP
104.17.2.184:443
ASN
#13335 CLOUDFLARENET

Requested by
https://94e6f5a7.58598891ef09ac737cee0cf3.workers.dev/?qrc=nikolay.leontyev@worldquant.com
Certificate
IssuerCloudflare, Inc.
Subjectchallenges.cloudflare.com
Fingerprint5F:E4:AA:8C:2E:24:D2:B1:69:9D:13:28:31:5C:65:FA:97:2A:E9:6E
ValidityFri, 18 Aug 2023 00:00:00 GMT - Sat, 17 Aug 2024 23:59:59 GMT

File type
HTML document, ASCII text, with very long lines (41702)
Size
80 kB (80016 bytes)
Hash
004d9db434162418501bf8ee684d592a
88382c3bd85c47a75e7843c6366bf117b34762ca
f99fc4c63f70e9f33bf3e73213bf1f8641614736752ec1b15ef5a39d9eb894a2

HTTP Headers

GET /cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/wtp2p/0x4AAAAAAAW-lbDQI7I0Z-Zf/auto/normal HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://94e6f5a7.58598891ef09ac737cee0cf3.workers.dev/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Wed, 17 Apr 2024 15:15:23 GMT
content-type: text/html; charset=UTF-8
accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
content-security-policy: frame-src https://challenges.cloudflare.com/ blob:; base-uri 'self'
critical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
cross-origin-embedder-policy: require-corp
cross-origin-opener-policy: same-origin
cross-origin-resource-policy: cross-origin
document-policy: js-profiling
origin-agent-cluster: ?1
permissions-policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()
referrer-policy: same-origin
server: cloudflare
cf-ray: 875d5eb30cc692a6-CPH
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv1/AkSZVcd5_hXW16s/wtp2p/0x4AAAAAAAW-lbDQI7I0Z-Zf/auto/normal

104.17.2.184

200 OK

80 kB

URL GET HTTP/3
challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv1/AkSZVcd5_hXW16s/wtp2p/0x4AAAAAAAW-lbDQI7I0Z-Zf/auto/normal
IP
104.17.2.184:443
ASN
#13335 CLOUDFLARENET

Requested by
https://94e6f5a7.58598891ef09ac737cee0cf3.workers.dev/?qrc=nikolay.leontyev@worldquant.com
Certificate
IssuerCloudflare, Inc.
Subjectchallenges.cloudflare.com
Fingerprint5F:E4:AA:8C:2E:24:D2:B1:69:9D:13:28:31:5C:65:FA:97:2A:E9:6E
ValidityFri, 18 Aug 2023 00:00:00 GMT - Sat, 17 Aug 2024 23:59:59 GMT

File type
HTML document, ASCII text, with very long lines (41702)
Size
80 kB (80035 bytes)
Hash
d2daa55e7902ca29cd16a81df3e06259
490f2f7cca49656d73ef8d117cce584bf20e227a
3aed743209a41fe1446d79b21aa2e7b7abd8fd49f85757444e9f7d17fad6db24

HTTP Headers

GET /cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv1/AkSZVcd5_hXW16s/wtp2p/0x4AAAAAAAW-lbDQI7I0Z-Zf/auto/normal HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://94e6f5a7.58598891ef09ac737cee0cf3.workers.dev/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Wed, 17 Apr 2024 15:15:38 GMT
content-type: text/html; charset=UTF-8
accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
content-security-policy: frame-src https://challenges.cloudflare.com/ blob:; base-uri 'self'
critical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
cross-origin-embedder-policy: require-corp
cross-origin-opener-policy: same-origin
cross-origin-resource-policy: cross-origin
document-policy: js-profiling
origin-agent-cluster: ?1
permissions-policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()
referrer-policy: same-origin
server: cloudflare
cf-ray: 875d5f275ce9abc9-CPH
content-encoding: br
alt-svc: h3=":443"; ma=86400

challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/pat/875d5f275ce9abc9/1713366939183/6588927ed3cccf9487d14fd50613c397986fd9672061956f9f460e7ed1f25bf2/kc9rJOD4o8HvrL_

104.17.2.184

401 Unauthorized

1 B

URL GET HTTP/3
challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/pat/875d5f275ce9abc9/1713366939183/6588927ed3cccf9487d14fd50613c397986fd9672061956f9f460e7ed1f25bf2/kc9rJOD4o8HvrL_
IP
104.17.2.184:443
ASN
#13335 CLOUDFLARENET

Requested by
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv1/AkSZVcd5_hXW16s/wtp2p/0x4AAAAAAAW-lbDQI7I0Z-Zf/auto/normal
Certificate
IssuerCloudflare, Inc.
Subjectchallenges.cloudflare.com
Fingerprint5F:E4:AA:8C:2E:24:D2:B1:69:9D:13:28:31:5C:65:FA:97:2A:E9:6E
ValidityFri, 18 Aug 2023 00:00:00 GMT - Sat, 17 Aug 2024 23:59:59 GMT

File type
very short file (no magic)
Size
1 B (1 bytes)
Hash
ff44570aca8241914870afbc310cdb85
58668e7669fd564d99db5d581fcdb6a5618440b5
6da43b944e494e885e69af021f93c6d9331c78aa228084711429160a5bbd15b5

HTTP Headers

GET /cdn-cgi/challenge-platform/h/g/pat/875d5f275ce9abc9/1713366939183/6588927ed3cccf9487d14fd50613c397986fd9672061956f9f460e7ed1f25bf2/kc9rJOD4o8HvrL_ HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv1/AkSZVcd5_hXW16s/wtp2p/0x4AAAAAAAW-lbDQI7I0Z-Zf/auto/normal
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 401 Unauthorized
date: Wed, 17 Apr 2024 15:15:39 GMT
content-type: text/plain; charset=UTF-8
www-authenticate: PrivateToken challenge="AAIAGXBhdC1pc3N1ZXIuY2xvdWRmbGFyZS5jb20gZYiSftPMz5SH0U_VBhPDl5hv2WcgYZVvn0YOftHyW_IAGWNoYWxsZW5nZXMuY2xvdWRmbGFyZS5jb20=", token-key="MIIBUjA9BgkqhkiG9w0BAQowMKANMAsGCWCGSAFlAwQCAqEaMBgGCSqGSIb3DQEBCDALBglghkgBZQMEAgKiAwIBMAOCAQ8AMIIBCgKCAQEArny_u1wyrVg8e-Kmwxyfb2WoiwwZ2VR7QAnot_CrcySq56Rui-jZM9090K9_dW6HmpAKhOjYXLCJ7g4U74G4z6SRM_YRj-GLp3EaBxay798DZIeAtv_N7Z9CHI_0VTYiqNXVm2z1bF5VtFasnv3JDaWb4yIjBd8vMfNUM4Y4nXXIeMIyXdVK2hlzVO8VxBkXca7UzhCq51WDKlSYPWUy9ieZTdwNf5Q49DwdF9woTnuKPY26TxVlEHMcf8JJiXLUR2bbdG-Qv1fqbwQloSjintj5uXWLsZd84bMpNedRNJBV22T0PgKNeip6oalvdYbaiHiyDATsKlA6-8KJ-CUQTQIDAQAB", max-age=20, PrivateToken challenge="AAIALHBwLWlzc3Vlci1wcm9kdWN0aW9uLnJlc2VhcmNoLmNsb3VkZmxhcmUuY29tIGWIkn7TzM-Uh9FP1QYTw5eYb9lnIGGVb59GDn7R8lvyABljaGFsbGVuZ2VzLmNsb3VkZmxhcmUuY29t", token-key="MIIBUjA9BgkqhkiG9w0BAQowMKANMAsGCWCGSAFlAwQCAqEaMBgGCSqGSIb3DQEBCDALBglghkgBZQMEAgKiAwIBMAOCAQ8AMIIBCgKCAQEA1FEYykHcK8H9rb_u0aFz3CmWgYloQw4YhedoEOAjJ0vy2Axa4f9UG9Dzs4uXS34_h8l6MDo2nRCvLI9lvebilMnTjCn-6D77bewqYxJKUFZW1z2jBIdu03TrETczfEg7kxgKtJE9NXGDjYJcF_iMgzgNA0PEAVM89tUYXXlFy4cUAGlqU2mPpIEOxm5ARsXC-zlLK60fkJ4cOsZRkZa6EExdhmgdwQ0fEJuSOHrBO_-zJn4hUP8q9g4yqkxW2UrfJgD07F4HaHGBEiei06sGDvH2NEPvswEl5dTGxutNrxlU7W24iYhNa2nhjlc53nNb0mKtszv-czVE9UhXyJ7-RQIDAQAB", max-age=20
server: cloudflare
cf-ray: 875d5f2c8e4dabc9-CPH
alt-svc: h3=":443"; ma=86400

challenges.cloudflare.com/turnstile/v0/g/54ea73d52131/api.js?onload=onloadTurnstileCallback

104.17.2.184

200 OK

42 kB

URL GET HTTP/2
challenges.cloudflare.com/turnstile/v0/g/54ea73d52131/api.js?onload=onloadTurnstileCallback
IP
104.17.2.184:443
ASN
#13335 CLOUDFLARENET

Requested by
https://94e6f5a7.58598891ef09ac737cee0cf3.workers.dev/?qrc=nikolay.leontyev@worldquant.com
Certificate
IssuerCloudflare, Inc.
Subjectchallenges.cloudflare.com
Fingerprint5F:E4:AA:8C:2E:24:D2:B1:69:9D:13:28:31:5C:65:FA:97:2A:E9:6E
ValidityFri, 18 Aug 2023 00:00:00 GMT - Sat, 17 Aug 2024 23:59:59 GMT

File type
JavaScript source, ASCII text, with very long lines (42414)
Size
42 kB (42415 bytes)
Hash
374fec8b5e50cd6ab980f3fef21a5aa0
7f474607991a19b6f1b78cc32e0f75b501b60774
8af2da74872f03e058ab79a584176d2086afc01bbd42dd2ed14259179341be6a

HTTP Headers

GET /turnstile/v0/g/54ea73d52131/api.js?onload=onloadTurnstileCallback HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://94e6f5a7.58598891ef09ac737cee0cf3.workers.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Wed, 17 Apr 2024 15:15:20 GMT
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
cache-control: max-age=31536000
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding
server: cloudflare
cf-ray: 875d5eb22b8192a6-CPH
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/orchestrate/chl_api/v1?ray=875d5f275ce9abc9

104.17.2.184

200 OK

430 kB

URL GET HTTP/3
challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/orchestrate/chl_api/v1?ray=875d5f275ce9abc9
IP
104.17.2.184:443
ASN
#13335 CLOUDFLARENET

Requested by
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv1/AkSZVcd5_hXW16s/wtp2p/0x4AAAAAAAW-lbDQI7I0Z-Zf/auto/normal
Certificate
IssuerCloudflare, Inc.
Subjectchallenges.cloudflare.com
Fingerprint5F:E4:AA:8C:2E:24:D2:B1:69:9D:13:28:31:5C:65:FA:97:2A:E9:6E
ValidityFri, 18 Aug 2023 00:00:00 GMT - Sat, 17 Aug 2024 23:59:59 GMT

File type
JavaScript source, ASCII text, with very long lines (65536), with no line terminators
Size
430 kB (429903 bytes)
Hash
ab9d1b85777f0d97d7970bf5cf6a4447
2c9b76b37d698fcef23d5b049ed154852626bcff
7d9e49a85d277b5cc9fc410b079082cc709bbd2e0e0616268a21666b9a8c50d0

HTTP Headers

GET /cdn-cgi/challenge-platform/h/g/orchestrate/chl_api/v1?ray=875d5f275ce9abc9 HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv1/AkSZVcd5_hXW16s/wtp2p/0x4AAAAAAAW-lbDQI7I0Z-Zf/auto/normal
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Wed, 17 Apr 2024 15:15:38 GMT
content-type: application/javascript; charset=UTF-8
cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
server: cloudflare
cf-ray: 875d5f27de05abc9-CPH
content-encoding: br
alt-svc: h3=":443"; ma=86400

challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/flow/ov1/816919964:1713363292:G2Pz2_1ZKzJN4SdZZQT-sfmjsv--Y5dSi-3qGwmu9_c/875d5f275ce9abc9/2f689139908abe3

104.17.2.184

200 OK

98 kB

URL POST HTTP/3
challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/flow/ov1/816919964:1713363292:G2Pz2_1ZKzJN4SdZZQT-sfmjsv--Y5dSi-3qGwmu9_c/875d5f275ce9abc9/2f689139908abe3
IP
104.17.2.184:443
ASN
#13335 CLOUDFLARENET

Requested by
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv1/AkSZVcd5_hXW16s/wtp2p/0x4AAAAAAAW-lbDQI7I0Z-Zf/auto/normal
Certificate
IssuerCloudflare, Inc.
Subjectchallenges.cloudflare.com
Fingerprint5F:E4:AA:8C:2E:24:D2:B1:69:9D:13:28:31:5C:65:FA:97:2A:E9:6E
ValidityFri, 18 Aug 2023 00:00:00 GMT - Sat, 17 Aug 2024 23:59:59 GMT

File type
ASCII text, with very long lines (65536), with no line terminators
Size
98 kB (98172 bytes)
Hash
0970268d31b2e3355d730d88be9d9c56
81df89e41c52b5a11154a92dfce86b9734ceaf0c
c3f2ed4f09c4db8c65affaf974982b0716322034a72ac3fc5fdcd10ed15040e7

HTTP Headers

POST /cdn-cgi/challenge-platform/h/g/flow/ov1/816919964:1713363292:G2Pz2_1ZKzJN4SdZZQT-sfmjsv--Y5dSi-3qGwmu9_c/875d5f275ce9abc9/2f689139908abe3 HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv1/AkSZVcd5_hXW16s/wtp2p/0x4AAAAAAAW-lbDQI7I0Z-Zf/auto/normal
Content-type: application/x-www-form-urlencoded
CF-Challenge: 2f689139908abe3
Content-Length: 2681
Origin: https://challenges.cloudflare.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Wed, 17 Apr 2024 15:15:39 GMT
content-type: text/plain; charset=UTF-8
cf-chl-gen: fG/lRweF44YOT7O+ZuJqtJBtW0zeDNJyeTtq1UalBwgikbl8h+y0B9wuNio6wF77Ws7vyaP362XlvVjV4ZxD9WRplve9Ek5r3uqML8kS8coS2hz5tWgp6fmoMFlHDjP/EVqThJtZ919fg5LbrXsQuQf+eCwYValWHIX7rucxRn8Vc63hUIkFcxpn9r5lsqiKBaCuANZKrcW1lZ+jk5Y0MB+AgRPwOy2VpJZZ25D39raGq5j80GvLsBqG+SMxBgNX+JbnoJh1+rAxifZFLKATrlJqFQ+G1JG1O0RfbT0GzAA1pUwjZ0HXptjbvE8msDX6oLwY4fHUjPEAkZSP6Nn6yI4PAwKiWz0MDZn48pNJggrQTAJLZYnWlI8yRfy/4ve27QejrDlBi6WUU0ZYI/IUpyFNMsJiIdfGDkkQCeoG7ljcw4P6rYe8PIM0GjAuwI0t$Z+lev0mYUbuolx7bN+2inA==
server: cloudflare
cf-ray: 875d5f29c995abc9-CPH
content-encoding: br
alt-svc: h3=":443"; ma=86400

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (37)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

Observations

Hash

Observations

Hash

Observations

Hash

Observations

Hash

Observations

Hash

Observations

Hash

Observations

Hash

Observations

Hash

Observations

Hash

Observations

Hash

Observations

Hash

Observations

Hash

Observations

Hash