Report - 1181.netrk.net/click?cgnid=21&prid=1158&c=nfx_ForumF_2020&c1=netzeffekt_Affiliate&c2=Web-Integration_ForumF&c3=Web-Integration&target=CxQMgF2srf.rainwater-rainbow.com/barracuda/TjDehUDoeZ/amlsbC5wb2Vwc2VsQHdhc2hpbmd0b24uazEyLm1vLnVz

Report Overview

Submitted URL
1181.netrk.net/click?cgnid=21&prid=1158&c=nfx_ForumF_2020&c1=netzeffekt_Affiliate&c2=Web-Integration_ForumF&c3=Web-Integration&target=CxQMgF2srf.rainwater-rainbow.com/barracuda/TjDehUDoeZ/amlsbC5wb2Vwc2VsQHdhc2hpbmd0b24uazEyLm1vLnVz
IP
213.95.77.48
ASN
#12337 noris network AG
Submitted
2024-05-10 12:20:01
Access
public
Website Title
Sign In :: Barracuda Networks
Final URL
cloudflare-ipfs.com/ipfs/bafkreiejjqyi5uxwc4nrlsf6xsk2knqoqhz3brndx2iyjs3xxf7jdvkqzu?5992tqaf=jill.poepsel@washington.k12.mo.us
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
2
Threat Detection Systems
2

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
1181.netrk.net	unknown	unknown	No data	No data	686 B	771 B	213.95.77.48
cxqmgf2srf.rainwater-rainbow.com	unknown	unknown	No data	No data	511 B	631 B	185.243.183.59
ajax.googleapis.com	12905	2005-01-25	2013-08-16	2024-05-09	434 B	32 kB	142.250.74.106
fonts.gstatic.com	unknown	2008-02-11	2014-09-09	2024-05-10	1.6 kB	127 kB	142.250.74.163
auth.barracudanetworks.com	293917	2003-06-19	2019-02-03	2024-02-16	1.3 kB	105 kB	34.204.22.221
cloudflare-ipfs.com	75147	2018-05-30	2021-01-20	2024-03-15	583 B	70 kB	104.17.64.14

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Timestamp	Severity	Source IP	Destination IP	Alert
2024-05-10 12:19:35	low	Client IP	104.17.64.14	ET INFO Peer to Peer File Sharing Service Domain in TLS SNI (cloudflare-ipfs .com)
2024-05-10 12:19:35	low	Client IP	104.17.64.14	ET INFO Peer to Peer File Sharing Service Domain in TLS SNI (cloudflare-ipfs .com)

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

Scan Date	Severity	Indicator	Alert
2023-05-02	medium	cloudflare-ipfs.com/ipfs/bafkreiejjqyi5uxwc4nrlsf6xsk2knqoqhz3brndx2iyjs3xxf7jdvkqzu?5992tqaf=jill.poepsel@washington.k12.mo.us	Other

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (4)

	URL	Size	First Seen	Last Seen
	ajax.googleapis.com/ajax/libs/jquery/3.4.1/jquery.min.js	88 kB	2023-03-07	2024-05-20
Pretty URL ajax.googleapis.com/ajax/libs/jquery/3.4.1/jquery.min.js IP 142.250.74.106 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:02:34 Last Seen2024-05-20 19:32:03 Times Seen99233 Hash 220afd743d9e9643852e31a135a9f3ae 88523924351bac0b5d560fe0c5781e2556e7693d 0925e8ad7bd971391a8b1e98be8e87a6971919eb5b60c196485941c3c1df089a Loading...

	cloudflare-ipfs.com/ipfs/bafkreiejjqyi5uxwc4nrlsf6xsk2knqoqhz3brndx2iyjs3xxf7jdvkqzu?5992tqaf=jill.poepsel@washington.k12.mo.us	27 kB	2024-05-09	2024-05-17
Pretty URL cloudflare-ipfs.com/ipfs/bafkreiejjqyi5uxwc4nrlsf6xsk2knqoqhz3brndx2iyjs3xxf7jdvkqzu?5992tqaf=jill.poepsel@washington.k12.mo.us IP 104.17.64.14 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2024-05-09 22:33:27 Last Seen2024-05-17 22:26:22 Times Seen11 Hash a71faa605105296e61c24d02e0f634e3 84cd50e2eb60f2463974e1c77b6fb81ad0d6da08 d7730941573a11394df4a51f697e63c7e7f0fac9e34719c907f61c3c151bc681 Loading...

	unknown	79 B	2023-04-11	2024-05-20
Pretty Introduced by Function Embedded in HTML false Observations First Seen2023-04-11 21:38:58 Last Seen2024-05-20 19:32:39 Times Seen126790 Hash aa049e2749b8531cb8f233c2f64fc2b2 b611a5a62c1813ae5b4763378b3a4a565556530a e52e51d5897d7a179089ddcf8f5de7aeb3ef4f27b054b63e937cf308b685c9e2 Loading...

	unknown	37 B	2023-04-11	2024-05-20
Pretty Introduced by Function Embedded in HTML false Observations First Seen2023-04-11 21:31:25 Last Seen2024-05-20 19:35:01 Times Seen238812 Hash 29d0c84b9d1d8da446a6062c6a840ad9 6d6b3a6065667c7c50d92f3889c85ed65a9ad784 3c3cbdb71d0d2c22f504f4d63d8a6ffe8d250cde7e58300619be35b6bbab26a1 Loading...

HTTP Transactions (10)

URL IP Response Size

1181.netrk.net/click?cgnid=21&prid=1158&c=nfx_ForumF_2020&c1=netzeffekt_Affiliate&c2=Web-Integration_ForumF&c3=Web-Integration&target=CxQMgF2srf.rainwater-rainbow.com/barracuda/TjDehUDoeZ/amlsbC5wb2Vwc2VsQHdhc2hpbmd0b24uazEyLm1vLnVz

213.95.77.48

302 Found

0 B

URL User Request GET HTTP/1.1
1181.netrk.net/click?cgnid=21&prid=1158&c=nfx_ForumF_2020&c1=netzeffekt_Affiliate&c2=Web-Integration_ForumF&c3=Web-Integration&target=CxQMgF2srf.rainwater-rainbow.com/barracuda/TjDehUDoeZ/amlsbC5wb2Vwc2VsQHdhc2hpbmd0b24uazEyLm1vLnVz
IP
213.95.77.48:443
ASN
#12337 noris network AG

Certificate
IssuerSectigo Limited
Subject*.netrk.net
Fingerprint08:44:59:A2:12:70:D6:94:9C:DE:18:A6:FF:7D:FA:A2:62:C2:56:85
ValidityThu, 27 Jul 2023 00:00:00 GMT - Tue, 30 Jul 2024 23:59:59 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /click?cgnid=21&prid=1158&c=nfx_ForumF_2020&c1=netzeffekt_Affiliate&c2=Web-Integration_ForumF&c3=Web-Integration&target=CxQMgF2srf.rainwater-rainbow.com/barracuda/TjDehUDoeZ/amlsbC5wb2Vwc2VsQHdhc2hpbmd0b24uazEyLm1vLnVz HTTP/1.1
Host: 1181.netrk.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 302 Found
server: nginx
content-type: text/html; charset=UTF-8
transfer-encoding: chunked
cache-control: no-cache
date: Fri, 10 May 2024 12:19:35 GMT
location: http://CxQMgF2srf.rainwater-rainbow.com/barracuda/TjDehUDoeZ/amlsbC5wb2Vwc2VsQHdhc2hpbmd0b24uazEyLm1vLnVz?nfxsid=663e10d6e2a5c1715343574&nfxcgnid=21
set-cookie: netrkCI=eyJ1aCI6IjY2M2UxMGQ2ZTJhNWMxNzE1MzQzNTc0IiwiY2wiOnsiXzExODEiOnsic2MiOjIxLCJ0cyI6MTcxNTM0MzU3NCwiZXhwIjoxNzE3OTM1NTc0LCJrZXkiOiIiLCJpZCI6IjY2M2UxMGQ3M2YyYWQ1NWY4NTIxZmI0YyJ9fX0%3D; expires=Sun, 18-Aug-2024 12:19:35 GMT; Max-Age=8640000; path=/; SameSite=None; domain=.netrk.net; secure
p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
strict-transport-security: max-age=31536000; includeSubDomains

cxqmgf2srf.rainwater-rainbow.com/barracuda/TjDehUDoeZ/amlsbC5wb2Vwc2VsQHdhc2hpbmd0b24uazEyLm1vLnVz?nfxsid=663e10d6e2a5c1715343574&nfxcgnid=21

185.243.183.59

302 Found

53 B

URL User Request GET HTTP/1.1
cxqmgf2srf.rainwater-rainbow.com/barracuda/TjDehUDoeZ/amlsbC5wb2Vwc2VsQHdhc2hpbmd0b24uazEyLm1vLnVz?nfxsid=663e10d6e2a5c1715343574&nfxcgnid=21
IP
185.243.183.59:80
ASN
#43260 Dgn Teknoloji A.s.

File type
ASCII text, with no line terminators
Size
53 B (53 bytes)
Hash
f9b3c6572b96acebe23891bb002a9147
939c6deeea4dbdb223437b9516ec3787413d6b48
0e95f7a04bf45b272fa51f403585cc3b0efd0cc49927492c6cc7ec5e7b56c4f8

HTTP Headers

GET /barracuda/TjDehUDoeZ/amlsbC5wb2Vwc2VsQHdhc2hpbmd0b24uazEyLm1vLnVz?nfxsid=663e10d6e2a5c1715343574&nfxcgnid=21 HTTP/1.1
Host: cxqmgf2srf.rainwater-rainbow.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 302 Found
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
x-powered-by: PHP/7.4.33
set-cookie: PHPSESSID=f6ef3a4190de8c0ad205db3fdd3a776c; path=/
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-cache, no-store, must-revalidate, max-age=0
pragma: no-cache
location: https://cloudflare-ipfs.com/ipfs/bafkreiejjqyi5uxwc4nrlsf6xsk2knqoqhz3brndx2iyjs3xxf7jdvkqzu?5992tqaf=jill.poepsel@washington.k12.mo.us
content-type: text/html; charset=UTF-8
content-length: 53
content-encoding: gzip
vary: Accept-Encoding
date: Fri, 10 May 2024 12:19:45 GMT

ajax.googleapis.com/ajax/libs/jquery/3.4.1/jquery.min.js

142.250.74.106

200 OK

31 kB

URL GET HTTP/2
ajax.googleapis.com/ajax/libs/jquery/3.4.1/jquery.min.js
IP
142.250.74.106:443
ASN
#15169 GOOGLE

Requested by
https://cloudflare-ipfs.com/ipfs/bafkreiejjqyi5uxwc4nrlsf6xsk2knqoqhz3brndx2iyjs3xxf7jdvkqzu?5992tqaf=jill.poepsel@washington.k12.mo.us
Certificate
IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
Fingerprint36:49:20:36:0C:4D:DA:55:65:64:23:0F:49:3E:FA:78:87:35:A3:79
ValidityTue, 16 Apr 2024 04:17:12 GMT - Tue, 09 Jul 2024 04:17:11 GMT

File type
JavaScript source, ASCII text, with very long lines (65451)
Size
31 kB (30774 bytes)
Hash
220afd743d9e9643852e31a135a9f3ae
88523924351bac0b5d560fe0c5781e2556e7693d
0925e8ad7bd971391a8b1e98be8e87a6971919eb5b60c196485941c3c1df089a

HTTP Headers

GET /ajax/libs/jquery/3.4.1/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cloudflare-ipfs.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 30774
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 09 May 2024 01:49:20 GMT
expires: Fri, 09 May 2025 01:49:20 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
age: 124215
last-modified: Mon, 13 May 2019 14:37:17 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

fonts.gstatic.com/l/font?kit=flUhRq6tzZclQEJ-Vdg-IuiaDsNcOg4U6viCLMtvBgHvZG_9gkKq0njc1b4LQDw&skey=4fbfe4498ec2960a&v=v142

142.250.74.163

200 OK

93 kB

URL GET HTTP/2
fonts.gstatic.com/l/font?kit=flUhRq6tzZclQEJ-Vdg-IuiaDsNcOg4U6viCLMtvBgHvZG_9gkKq0njc1b4LQDw&skey=4fbfe4498ec2960a&v=v142
IP
142.250.74.163:443
ASN
#15169 GOOGLE

Requested by
https://cloudflare-ipfs.com/ipfs/bafkreiejjqyi5uxwc4nrlsf6xsk2knqoqhz3brndx2iyjs3xxf7jdvkqzu?5992tqaf=jill.poepsel@washington.k12.mo.us
Certificate
IssuerGoogle Trust Services LLC
Subject*.gstatic.com
Fingerprint15:DD:05:B3:2F:D8:E3:54:C9:B4:FA:E4:AC:01:ED:C8:E1:EA:A7:AD
ValidityTue, 16 Apr 2024 04:17:07 GMT - Tue, 09 Jul 2024 04:17:06 GMT

File type
Web Open Font Format (Version 2), TrueType, length 92688, version 1.0
Size
93 kB (92688 bytes)
Hash
8c8b4190d0c05cf689aae2bd626bd3e2
eb7a4bf666739bc62db30775e8b8e8b72d674447
9096ca213c489cb220b72ef3063eb7fb94880c750acc5728523bc3d86319b715

HTTP Headers

GET /l/font?kit=flUhRq6tzZclQEJ-Vdg-IuiaDsNcOg4U6viCLMtvBgHvZG_9gkKq0njc1b4LQDw&skey=4fbfe4498ec2960a&v=v142 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://cloudflare-ipfs.com
DNT: 1
Connection: keep-alive
Referer: https://cloudflare-ipfs.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
access-control-allow-origin: *
timing-allow-origin: *
content-length: 92688
content-disposition: attachment; filename="font.woff2"; filename*=UTF-8''font.woff2
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
date: Thu, 09 May 2024 20:46:37 GMT
expires: Thu, 09 May 2024 20:46:37 GMT
cache-control: private, max-age=86400
age: 55978
last-modified: Tue, 09 Apr 2024 14:56:12 GMT
content-type: text/html; charset=utf-8
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2

142.250.74.163

200 OK

16 kB

URL GET HTTP/2
fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2
IP
142.250.74.163:443
ASN
#15169 GOOGLE

Requested by
https://cloudflare-ipfs.com/ipfs/bafkreiejjqyi5uxwc4nrlsf6xsk2knqoqhz3brndx2iyjs3xxf7jdvkqzu?5992tqaf=jill.poepsel@washington.k12.mo.us
Certificate
IssuerGoogle Trust Services LLC
Subject*.gstatic.com
Fingerprint15:DD:05:B3:2F:D8:E3:54:C9:B4:FA:E4:AC:01:ED:C8:E1:EA:A7:AD
ValidityTue, 16 Apr 2024 04:17:07 GMT - Tue, 09 Jul 2024 04:17:06 GMT

File type
Web Open Font Format (Version 2), TrueType, length 15860, version 1.0
Size
16 kB (15860 bytes)
Hash
e9f5aaf547f165386cd313b995dddd8e
acdef5603c2387b0e5bffd744b679a24a8bc1968
f5aebdfea35d1e7656ef4acc5db1f243209755ae3300943ef8fc6280f363c860

HTTP Headers

GET /s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://cloudflare-ipfs.com
DNT: 1
Connection: keep-alive
Referer: https://cloudflare-ipfs.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15860
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 07 May 2024 10:46:32 GMT
expires: Wed, 07 May 2025 10:46:32 GMT
cache-control: public, max-age=31536000
age: 264783
last-modified: Wed, 11 May 2022 19:24:42 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fBBc4.woff2

142.250.74.163

200 OK

16 kB

URL GET HTTP/2
fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
IP
142.250.74.163:443
ASN
#15169 GOOGLE

Requested by
https://cloudflare-ipfs.com/ipfs/bafkreiejjqyi5uxwc4nrlsf6xsk2knqoqhz3brndx2iyjs3xxf7jdvkqzu?5992tqaf=jill.poepsel@washington.k12.mo.us
Certificate
IssuerGoogle Trust Services LLC
Subject*.gstatic.com
Fingerprint15:DD:05:B3:2F:D8:E3:54:C9:B4:FA:E4:AC:01:ED:C8:E1:EA:A7:AD
ValidityTue, 16 Apr 2024 04:17:07 GMT - Tue, 09 Jul 2024 04:17:06 GMT

File type
Web Open Font Format (Version 2), TrueType, length 15920, version 1.0
Size
16 kB (15920 bytes)
Hash
3a44e06eb954b96aa043227f3534189d
23cef6993ddb2b2979e8e7647fc3763694e2ba7d
b019538234514166ec7665359d097403358f8a4c991901983922fb4d56989f1e

HTTP Headers

GET /s/roboto/v30/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://cloudflare-ipfs.com
DNT: 1
Connection: keep-alive
Referer: https://cloudflare-ipfs.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15920
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 09 May 2024 01:49:11 GMT
expires: Fri, 09 May 2025 01:49:11 GMT
cache-control: public, max-age=31536000
age: 124224
last-modified: Wed, 11 May 2022 19:24:45 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

auth.barracudanetworks.com/img/favicon.ico

34.204.22.221

200 OK

1.1 kB

URL GET HTTP/2
auth.barracudanetworks.com/img/favicon.ico
IP
34.204.22.221:443
ASN
#14618 AMAZON-AES

Requested by
https://cloudflare-ipfs.com/ipfs/bafkreiejjqyi5uxwc4nrlsf6xsk2knqoqhz3brndx2iyjs3xxf7jdvkqzu?5992tqaf=jill.poepsel@washington.k12.mo.us
Certificate
IssuerAmazon
Subjectauth.barracudanetworks.com
FingerprintF8:CD:40:0F:A0:36:6A:18:12:A9:53:CF:06:B2:B1:79:F7:24:82:A2
ValidityWed, 27 Dec 2023 00:00:00 GMT - Fri, 24 Jan 2025 23:59:59 GMT

File type
PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Size
1.1 kB (1142 bytes)
Hash
c61d4063bc72cf6c4666412f2127b0d2
1afc710bb3c248d5951a8856dd49ede60137173b
10a01bd163966af0d481d25500a5254e41773cfb3e28e3925fcca05d70fcab8e

HTTP Headers

GET /img/favicon.ico HTTP/1.1
Host: auth.barracudanetworks.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Fri, 10 May 2024 12:19:36 GMT
content-type: image/x-icon
content-length: 1142
server: nginx/1.25.5
last-modified: Mon, 06 May 2024 19:48:30 GMT
etag: "6639340e-476"
strict-transport-security: max-age=31536000
x-frame-options: DENY
accept-ranges: bytes
X-Firefox-Spdy: h2

auth.barracudanetworks.com/img/logo_barracuda.svg

34.204.22.221

200 OK

7.9 kB

URL GET HTTP/2
auth.barracudanetworks.com/img/logo_barracuda.svg
IP
34.204.22.221:443
ASN
#14618 AMAZON-AES

Requested by
https://cloudflare-ipfs.com/ipfs/bafkreiejjqyi5uxwc4nrlsf6xsk2knqoqhz3brndx2iyjs3xxf7jdvkqzu?5992tqaf=jill.poepsel@washington.k12.mo.us
Certificate
IssuerAmazon
Subjectauth.barracudanetworks.com
FingerprintF8:CD:40:0F:A0:36:6A:18:12:A9:53:CF:06:B2:B1:79:F7:24:82:A2
ValidityWed, 27 Dec 2023 00:00:00 GMT - Fri, 24 Jan 2025 23:59:59 GMT

File type
SVG Scalable Vector Graphics image
Size
7.9 kB (7867 bytes)
Hash
5bcc5b1f34e4c7fd462dfef8997284de
ff7e0a5e79ec00754e52e0f3b15edff69c752bc7
1f4b8b52550746bcddcb0a59e10d1de79b10a2ce406bed80646ff0f38549a12d

HTTP Headers

GET /img/logo_barracuda.svg HTTP/1.1
Host: auth.barracudanetworks.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Fri, 10 May 2024 12:19:36 GMT
content-type: image/svg+xml
content-length: 7867
server: nginx/1.25.5
last-modified: Mon, 06 May 2024 19:48:30 GMT
etag: "6639340e-1ebb"
strict-transport-security: max-age=31536000
x-frame-options: DENY
accept-ranges: bytes
X-Firefox-Spdy: h2

auth.barracudanetworks.com/img/bg_product-login.jpg

34.204.22.221

200 OK

95 kB

URL GET HTTP/2
auth.barracudanetworks.com/img/bg_product-login.jpg
IP
34.204.22.221:443
ASN
#14618 AMAZON-AES

Requested by
https://cloudflare-ipfs.com/ipfs/bafkreiejjqyi5uxwc4nrlsf6xsk2knqoqhz3brndx2iyjs3xxf7jdvkqzu?5992tqaf=jill.poepsel@washington.k12.mo.us
Certificate
IssuerAmazon
Subjectauth.barracudanetworks.com
FingerprintF8:CD:40:0F:A0:36:6A:18:12:A9:53:CF:06:B2:B1:79:F7:24:82:A2
ValidityWed, 27 Dec 2023 00:00:00 GMT - Fri, 24 Jan 2025 23:59:59 GMT

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1920x1200, components 3
Size
95 kB (95060 bytes)
Hash
caea8fa2200691fc2224d471f5cad316
9b74953e2567f65e0b2ec0465147a604cadbf25d
67e32cbfa783f8fd5460f5b250af8cf416604c767f392cdf04a411b2d1bb545b

HTTP Headers

GET /img/bg_product-login.jpg HTTP/1.1
Host: auth.barracudanetworks.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cloudflare-ipfs.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Fri, 10 May 2024 12:19:36 GMT
content-type: image/jpeg
content-length: 95060
server: nginx/1.25.5
last-modified: Mon, 06 May 2024 19:48:30 GMT
etag: "6639340e-17354"
strict-transport-security: max-age=31536000
x-frame-options: DENY
accept-ranges: bytes
X-Firefox-Spdy: h2

cloudflare-ipfs.com/ipfs/bafkreiejjqyi5uxwc4nrlsf6xsk2knqoqhz3brndx2iyjs3xxf7jdvkqzu?5992tqaf=jill.poepsel@washington.k12.mo.us

104.17.64.14

200 OK

68 kB

URL User Request GET HTTP/2
cloudflare-ipfs.com/ipfs/bafkreiejjqyi5uxwc4nrlsf6xsk2knqoqhz3brndx2iyjs3xxf7jdvkqzu?5992tqaf=jill.poepsel@washington.k12.mo.us
IP
104.17.64.14:443
ASN
#13335 CLOUDFLARENET

Certificate
IssuerLet's Encrypt
Subjectcloudflare-ipfs.com
FingerprintAF:BC:14:E3:55:D9:D8:F0:3C:8E:26:A0:4E:4A:C8:E6:13:58:A0:59
ValidityWed, 24 Apr 2024 02:22:22 GMT - Tue, 23 Jul 2024 02:22:21 GMT

File type

Size
68 kB (68434 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
PhishTank	phishing	Other

HTTP Headers

GET /ipfs/bafkreiejjqyi5uxwc4nrlsf6xsk2knqoqhz3brndx2iyjs3xxf7jdvkqzu?5992tqaf=jill.poepsel@washington.k12.mo.us HTTP/1.1
Host: cloudflare-ipfs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Fri, 10 May 2024 12:19:35 GMT
content-type: text/html
cf-ray: 8819e0e179ae56c4-OSL
cf-cache-status: HIT
access-control-allow-origin: *
age: 56800
cache-control: public, max-age=29030400, immutable
etag: W/"bafkreiejjqyi5uxwc4nrlsf6xsk2knqoqhz3brndx2iyjs3xxf7jdvkqzu"
vary: Accept-Encoding
access-control-allow-headers: Content-Type, Range, User-Agent, X-Requested-With
access-control-allow-methods: GET
access-control-expose-headers: Content-Length, Content-Range, X-Chunked-Output, X-Ipfs-Path, X-Ipfs-Roots, X-Stream-Output
x-cf-ipfs-cache-status: hit
x-ipfs-path: /ipfs/bafkreiejjqyi5uxwc4nrlsf6xsk2knqoqhz3brndx2iyjs3xxf7jdvkqzu
x-ipfs-roots: bafkreiejjqyi5uxwc4nrlsf6xsk2knqoqhz3brndx2iyjs3xxf7jdvkqzu
set-cookie: __cf_bm=UFUOVZwXF0UZo0khuCcWytQtve2Yjd8hatUte.2hv30-1715343575-1.0.1.1-xgwtzb2G.NJesKwFQpzIZCbVVQg9iY8FavCEmaJqkOHDINdMJXY9D8Jt_P9DDHtb3CMS.UUXd5wZsz7oKXVQAw; path=/; expires=Fri, 10-May-24 12:49:35 GMT; domain=.cloudflare-ipfs.com; HttpOnly; Secure; SameSite=None
server: cloudflare
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (4)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (10)

URL User Request GET HTTP/1.1

IP

ASN

Certificate

File type

Size

Hash

HTTP Headers

URL User Request GET HTTP/1.1

IP

ASN

File type

Size

Hash

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size