Report - update-hall-3023.pages.dev/?cos=cxwzturu&psa=jgrant@slurpmail.net

Report Overview

Submitted URL
update-hall-3023.pages.dev/?cos=cxwzturu&psa=jgrant@slurpmail.net
IP
172.66.44.253
ASN
#13335 CLOUDFLARENET
Submitted
2024-04-26 19:35:12
Access
public
Website Title
Documents Portal Login - Slurpmail
Final URL
cloudflare-ipfs.com/ipfs/QmShf1J9XzSCzX3DxSnQaj9WyTWwpMnnhfQXB9CHdriKWY/?cis=fpnxyjbncuzxw&eca=jgrant@slurpmail.net
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
4

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
t1.gstatic.com	unknown	2008-02-11	2013-05-07	2024-04-25	525 B	1.5 kB	142.250.74.164
t0.gstatic.com	unknown	2008-02-11	2013-05-06	2024-04-23	511 B	1.6 kB	216.58.211.4
update-hall-3023.pages.dev	unknown	unknown	No data	No data	486 B	58 kB	172.66.47.3
cloudflare-ipfs.com	75147	2018-05-30	2021-01-20	2024-03-15	1.4 kB	9.6 kB	104.17.64.14
www.google.com	7	1997-09-15	2015-05-10	2024-03-23	906 B	1.6 kB	142.250.74.164

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

Scan Date	Severity	Indicator	Alert
2023-05-02	medium	cloudflare-ipfs.com/ipfs/QmShf1J9XzSCzX3DxSnQaj9WyTWwpMnnhfQXB9CHdriKWY/assets/index-cAE-gvsu.css	Other
2023-05-02	medium	cloudflare-ipfs.com/ipfs/QmShf1J9XzSCzX3DxSnQaj9WyTWwpMnnhfQXB9CHdriKWY/?cis=fpnxyjbncuzxw&eca=jgrant@slurpmail.net	Other

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (1)

	URL	Size	First Seen	Last Seen
	cloudflare-ipfs.com/ipfs/QmShf1J9XzSCzX3DxSnQaj9WyTWwpMnnhfQXB9CHdriKWY/assets/index-gmd5fQL6.js	305 kB	2024-04-26	2024-04-29
Pretty URL cloudflare-ipfs.com/ipfs/QmShf1J9XzSCzX3DxSnQaj9WyTWwpMnnhfQXB9CHdriKWY/assets/index-gmd5fQL6.js IP 0.0.0.0 ASN #0 Introduced by scriptElement Embedded in HTML false Observations First Seen2024-04-26 21:35:18 Last Seen2024-04-29 01:07:56 Times Seen3 Hash dc43c68a277bd856f13faaa74efad4db 737121d4e9cbfa9c774c96a82373dd169178ee6b 89a749e19ed03a3aca5cc40b995c71de139be7cd7a9b224c8d57f78c1354de8e Loading...

HTTP Transactions (7)

URL IP Response Size

cloudflare-ipfs.com/ipfs/QmShf1J9XzSCzX3DxSnQaj9WyTWwpMnnhfQXB9CHdriKWY/assets/index-cAE-gvsu.css

104.17.64.14

1.0 kB

URL
cloudflare-ipfs.com/ipfs/QmShf1J9XzSCzX3DxSnQaj9WyTWwpMnnhfQXB9CHdriKWY/assets/index-cAE-gvsu.css
IP
104.17.64.14:0
ASN
#13335 CLOUDFLARENET

File type
ASCII text, with very long lines (2387)
Size
1.0 kB (1027 bytes)
Hash
c1fd5704e096a9a689fa2ad47eca8b67
4bbb7b66e7ebc5dbf80417946ca4e994e8e7e010
e837ea045659605e03150eb55456b4021ba931bc30704c4a19382baaaeee9061

Detections

Analyzer	Verdict	Alert
PhishTank	phishing	Other

HTTP Headers

GET /ipfs/QmShf1J9XzSCzX3DxSnQaj9WyTWwpMnnhfQXB9CHdriKWY/assets/index-cAE-gvsu.css HTTP/1.1
Host: cloudflare-ipfs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cloudflare-ipfs.com/ipfs/QmShf1J9XzSCzX3DxSnQaj9WyTWwpMnnhfQXB9CHdriKWY/?cis=fpnxyjbncuzxw&eca=jgrant@slurpmail.net
Cookie: __cf_bm=fdtmUGAYASnCyV6TqfdlxdgWM9FL.0OXRZnmh81awmQ-1714160090-1.0.1.1-T9998F9Wj0QIVvIqK3W53SFQqgbkhYbhcmb.U5aD33L1Y7Yc4U50OJy4heOVIROoI5RTWqZj2ThSrOQwRFi20g
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 26 Apr 2024 19:34:51 GMT
content-type: text/css; charset=utf-8
cf-ray: 87a90337bb89b511-OSL
cf-cache-status: MISS
access-control-allow-origin: *
cache-control: public, max-age=29030400, immutable
etag: W/"QmTaDjARUGsPVNS989yR39JEva4ZDfuutuz7mKqUPo8pY6"
vary: Accept-Encoding
access-control-allow-headers: Content-Type, Range, User-Agent, X-Requested-With
access-control-allow-methods: GET
access-control-expose-headers: Content-Length, Content-Range, X-Chunked-Output, X-Ipfs-Path, X-Ipfs-Roots, X-Stream-Output
x-cf-ipfs-cache-status: miss
x-ipfs-path: /ipfs/QmShf1J9XzSCzX3DxSnQaj9WyTWwpMnnhfQXB9CHdriKWY/assets/index-cAE-gvsu.css
x-ipfs-roots: QmShf1J9XzSCzX3DxSnQaj9WyTWwpMnnhfQXB9CHdriKWY,QmYxJx9vFVmauPvgcRdZ1crB4qXjJhS8aHRh7bjmqpVNHn,QmTaDjARUGsPVNS989yR39JEva4ZDfuutuz7mKqUPo8pY6
server: cloudflare
content-encoding: br
alt-svc: h3=":443"; ma=86400

www.google.com/s2/favicons?domain=Slurpmail.net

142.250.74.164

333 B

URL
www.google.com/s2/favicons?domain=Slurpmail.net
IP
142.250.74.164:0
ASN
#15169 GOOGLE

File type
HTML document, ASCII text, with CRLF, LF line terminators
Size
333 B (333 bytes)
Hash
8e90050877f76e6af2660d72671cebcc
d7be9ed0ca5981e215118f51811aa39f6cf0f315
1c98d3c64f9ef1aae2421ed79de3d6945c34b090bbe22fd9d365aabe28d4b5e2

HTTP Headers

GET /s2/favicons?domain=Slurpmail.net HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cloudflare-ipfs.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 301 Moved Permanently
location: https://t0.gstatic.com/faviconV2?client=SOCIAL&type=FAVICON&fallback_opts=TYPE,SIZE,URL&url=http://Slurpmail.net&size=16
content-type: text/html; charset=UTF-8
x-content-type-options: nosniff
date: Fri, 26 Apr 2024 19:34:51 GMT
expires: Fri, 26 Apr 2024 20:04:51 GMT
cache-control: public, max-age=1800
server: sffe
content-length: 333
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

www.google.com/s2/favicons?domain=slurpmail.net

142.250.74.164

333 B

URL
www.google.com/s2/favicons?domain=slurpmail.net
IP
142.250.74.164:0
ASN
#15169 GOOGLE

File type
HTML document, ASCII text, with CRLF, LF line terminators
Size
333 B (333 bytes)
Hash
bdbe4a6868e18c775ac0c17e7b2492bd
025909a37765ca7359382127fc893f766cd8d779
b9adebdc52d97c4fd6e58ff7af3b88df09d0aa9ba2d36b38b274f6990766242a

HTTP Headers

GET /s2/favicons?domain=slurpmail.net HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cloudflare-ipfs.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 301 Moved Permanently
location: https://t1.gstatic.com/faviconV2?client=SOCIAL&type=FAVICON&fallback_opts=TYPE,SIZE,URL&url=http://slurpmail.net&size=16
content-type: text/html; charset=UTF-8
x-content-type-options: nosniff
date: Fri, 26 Apr 2024 19:34:51 GMT
expires: Fri, 26 Apr 2024 20:04:51 GMT
cache-control: public, max-age=1800
server: sffe
content-length: 333
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

t1.gstatic.com/faviconV2?client=SOCIAL&type=FAVICON&fallback_opts=TYPE,SIZE,URL&url=http://slurpmail.net&size=16

142.250.74.164

734 B

URL
t1.gstatic.com/faviconV2?client=SOCIAL&type=FAVICON&fallback_opts=TYPE,SIZE,URL&url=http://slurpmail.net&size=16
IP
142.250.74.164:0
ASN
#15169 GOOGLE

File type
PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Size
734 B (734 bytes)
Hash
b864010428c077910c5ca240cf245bb6
f9715aa21b66802df7df8d5cb7d567b90542c042
dd7125f39db361fa801a74d09c1f48800926bfdbd241c67152cfcfa04402d665

HTTP Headers

GET /faviconV2?client=SOCIAL&type=FAVICON&fallback_opts=TYPE,SIZE,URL&url=http://slurpmail.net&size=16 HTTP/1.1
Host: t1.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://cloudflare-ipfs.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
accept-ranges: bytes
content-type: image/png
content-location: http://slurpmail.net/favicon.ico
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/media-favicon
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="media-favicon"
report-to: {"group":"media-favicon","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/media-favicon"}]}
content-length: 734
date: Fri, 26 Apr 2024 19:34:51 GMT
expires: Fri, 03 May 2024 19:34:51 GMT
cache-control: public, max-age=604800
last-modified: Wed, 29 Nov 2017 12:34:19 GMT
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

t0.gstatic.com/faviconV2?client=SOCIAL&type=FAVICON&fallback_opts=TYPE,SIZE,URL&url=http://Slurpmail.net&size=16

216.58.211.4

734 B

URL
t0.gstatic.com/faviconV2?client=SOCIAL&type=FAVICON&fallback_opts=TYPE,SIZE,URL&url=http://Slurpmail.net&size=16
IP
216.58.211.4:0
ASN
#15169 GOOGLE

File type
PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Size
734 B (734 bytes)
Hash
b864010428c077910c5ca240cf245bb6
f9715aa21b66802df7df8d5cb7d567b90542c042
dd7125f39db361fa801a74d09c1f48800926bfdbd241c67152cfcfa04402d665

HTTP Headers

GET /faviconV2?client=SOCIAL&type=FAVICON&fallback_opts=TYPE,SIZE,URL&url=http://Slurpmail.net&size=16 HTTP/1.1
Host: t0.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://cloudflare-ipfs.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
content-type: image/png
content-location: http://slurpmail.net/favicon.ico
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/media-favicon
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="media-favicon"
report-to: {"group":"media-favicon","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/media-favicon"}]}
content-length: 734
date: Fri, 26 Apr 2024 19:34:51 GMT
expires: Fri, 03 May 2024 19:34:51 GMT
cache-control: public, max-age=604800
last-modified: Wed, 29 Nov 2017 12:34:19 GMT
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

update-hall-3023.pages.dev/assets/index-2292bcd2.js

172.66.47.3

58 kB

URL
update-hall-3023.pages.dev/assets/index-2292bcd2.js
IP
172.66.47.3:0
ASN
#13335 CLOUDFLARENET

File type
JavaScript source, ASCII text, with very long lines (37529)
Size
58 kB (57706 bytes)
Hash
267dc011d364d5a19c4ea82e9237951e
970c8346608167c77d720e3529be8093a354d2d5
b65641328ecc89ff4426c7a97f17b5df012bb92023e722e67f1a0eeda66b513d

HTTP Headers

GET /assets/index-2292bcd2.js HTTP/1.1
Host: update-hall-3023.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://update-hall-3023.pages.dev/?cos=cxwzturu&psa=jgrant@slurpmail.net
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 26 Apr 2024 19:34:47 GMT
content-type: application/javascript
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: W/"d2ee56eeaf66c05e79f9e7e11ba575b9"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=6kGVpfs49xekl0CupoELjEgTjZeqvmtxaobAVQx72JvfBNBfv0EJCh%2BcJJQqAuP2OphC%2Bc7WSz8oA6sNtyitrEjMkjr0leW6W2lNywcNU2BSfAErvDJsq%2BFCQt19TXNbqfIfRot4blrw7%2FwJbA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a90321ed520b49-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

cloudflare-ipfs.com/ipfs/QmShf1J9XzSCzX3DxSnQaj9WyTWwpMnnhfQXB9CHdriKWY/?cis=fpnxyjbncuzxw&eca=jgrant@slurpmail.net

104.17.64.14

6.6 kB

URL
cloudflare-ipfs.com/ipfs/QmShf1J9XzSCzX3DxSnQaj9WyTWwpMnnhfQXB9CHdriKWY/?cis=fpnxyjbncuzxw&eca=jgrant@slurpmail.net
IP
104.17.64.14:0
ASN
#13335 CLOUDFLARENET

File type
HTML document, ASCII text
Size
6.6 kB (6598 bytes)
Hash
8d800ca1fdbd2bedfa2f3d7d985e4f9e
171e8e18496b07e7324573728ed506a7881a4983
3f27803f362624bf522ef4eedfc384ef0a55e6bd14dc633ffc07e15103375d3e

Detections

Analyzer	Verdict	Alert
PhishTank	phishing	Other

HTTP Headers

GET /ipfs/QmShf1J9XzSCzX3DxSnQaj9WyTWwpMnnhfQXB9CHdriKWY/?cis=fpnxyjbncuzxw&eca=jgrant@slurpmail.net HTTP/1.1
Host: cloudflare-ipfs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://update-hall-3023.pages.dev/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Fri, 26 Apr 2024 19:34:50 GMT
content-type: text/html
cf-ray: 87a90335e80056ab-OSL
cf-cache-status: MISS
access-control-allow-origin: *
cache-control: public, max-age=29030400, immutable
etag: W/"QmShf1J9XzSCzX3DxSnQaj9WyTWwpMnnhfQXB9CHdriKWY"
vary: Accept-Encoding
access-control-allow-headers: Content-Type, Range, User-Agent, X-Requested-With
access-control-allow-methods: GET
access-control-expose-headers: Content-Length, Content-Range, X-Chunked-Output, X-Ipfs-Path, X-Ipfs-Roots, X-Stream-Output
x-cf-ipfs-cache-status: miss
x-ipfs-path: /ipfs/QmShf1J9XzSCzX3DxSnQaj9WyTWwpMnnhfQXB9CHdriKWY/
x-ipfs-roots: QmShf1J9XzSCzX3DxSnQaj9WyTWwpMnnhfQXB9CHdriKWY
set-cookie: __cf_bm=fdtmUGAYASnCyV6TqfdlxdgWM9FL.0OXRZnmh81awmQ-1714160090-1.0.1.1-T9998F9Wj0QIVvIqK3W53SFQqgbkhYbhcmb.U5aD33L1Y7Yc4U50OJy4heOVIROoI5RTWqZj2ThSrOQwRFi20g; path=/; expires=Fri, 26-Apr-24 20:04:50 GMT; domain=.cloudflare-ipfs.com; HttpOnly; Secure; SameSite=None
server: cloudflare
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (1)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (7)

URL

IP

ASN

File type

Size

Hash

Detections

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL

IP

ASN