Report - bafkreih2fdmx5rety5p627o6mgb452elz2lwokkmkbvze5eldl5pqddvua.ipfs.cf-ipfs.com/

Report Overview

Submitted URL
bafkreih2fdmx5rety5p627o6mgb452elz2lwokkmkbvze5eldl5pqddvua.ipfs.cf-ipfs.com/
IP
104.17.64.14
ASN
#13335 CLOUDFLARENET
Submitted
2023-06-09 05:32:47
Access
public
Website Title
Final URL
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
4

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
bafkreih2fdmx5rety5p627o6mgb452elz2lwokkmkbvze5eldl5pqddvua.ipfs.cf-ipfs.com	unknown	2018-12-05	2023-03-02	2023-05-05	1.4 kB	9.0 kB	104.17.64.14
code.jquery.com	634	2005-12-10	2012-05-21	2023-06-08	472 B	31 kB	69.16.175.10
ocsp.sectigo.com	487	2018-08-16	2019-11-29	2023-06-08	660 B	1.9 kB	104.18.15.101
docudodirect.click	unknown	unknown	2022-11-16	2023-05-17	2.2 kB	4.8 kB	68.65.120.230

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

OpenPhish

Scan Date	Severity	Indicator	Alert
2023-05-30	medium	bafkreih2fdmx5rety5p627o6mgb452elz2lwokkmkbvze5eldl5pqddvua.ipfs.cf-ipfs.com/
2023-05-30	medium	bafkreih2fdmx5rety5p627o6mgb452elz2lwokkmkbvze5eldl5pqddvua.ipfs.cf-ipfs.com/

PhishTank

No alerts detected

Fortinet's Web Filter

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (7)

	URL	Size	First Seen	Last Seen
	bafkreih2fdmx5rety5p627o6mgb452elz2lwokkmkbvze5eldl5pqddvua.ipfs.cf-ipfs.com/	387 B	2023-03-14	2023-09-22
Pretty URL bafkreih2fdmx5rety5p627o6mgb452elz2lwokkmkbvze5eldl5pqddvua.ipfs.cf-ipfs.com/ IP 104.17.64.14 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-14 17:04:48 Last Seen2023-09-22 14:47:39 Times Seen9 Hash b499c82573971a9a301516f997d64cd3 c94d1c589fb86dc8ef35267ad41adfdf225d93b2 1ccaf1e11b0f91f011083c2318a1a8980c017a50ff24c4c61ed7d020966d97ff Loading...

	bafkreih2fdmx5rety5p627o6mgb452elz2lwokkmkbvze5eldl5pqddvua.ipfs.cf-ipfs.com/	6.0 kB	2023-03-14	2023-09-22
Pretty URL bafkreih2fdmx5rety5p627o6mgb452elz2lwokkmkbvze5eldl5pqddvua.ipfs.cf-ipfs.com/ IP 104.17.64.14 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-14 17:04:48 Last Seen2023-09-22 14:47:39 Times Seen9 Hash 52b3c2eaa7713af92b81a12450705c5c 3d7f7d3376320769492633a246b1daa47955ccc1 201cd2de54fcc05e554910338ae13805c6dc7605901b6b57a5f9da6a3199d8e9 Loading...

	bafkreih2fdmx5rety5p627o6mgb452elz2lwokkmkbvze5eldl5pqddvua.ipfs.cf-ipfs.com/	308 B	2023-04-20	2024-04-17
Pretty URL bafkreih2fdmx5rety5p627o6mgb452elz2lwokkmkbvze5eldl5pqddvua.ipfs.cf-ipfs.com/ IP 104.17.64.14 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2023-04-20 06:50:03 Last Seen2024-04-17 11:21:16 Times Seen24 Hash bad02052f96fb7230de5875e2fd81d99 c4bba4be8fbedbd595397328d1b8c4470bf471e8 bfbe3698244687d0f48ea11ca58de076de0bf897d269092b7066a83c2c3c4fa7 Loading...

	code.jquery.com/jquery-3.3.1.min.js	87 kB	2023-03-07	2024-04-24
Pretty URL code.jquery.com/jquery-3.3.1.min.js IP 69.16.175.10 ASN #20446 STACKPATH-CDN Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:02:02 Last Seen2024-04-24 00:45:43 Times Seen105755 Hash a09e13ee94d51c524b7e2a728c7d4039 0dc32db4aa9c5f03f3b38c47d883dbd4fed13aae 160a426ff2894252cd7cebbdd6d6b7da8fcd319c65b70468f10b6690c45d02ef Loading...

	bafkreih2fdmx5rety5p627o6mgb452elz2lwokkmkbvze5eldl5pqddvua.ipfs.cf-ipfs.com/	563 B	2023-03-14	2024-04-23
Pretty URL bafkreih2fdmx5rety5p627o6mgb452elz2lwokkmkbvze5eldl5pqddvua.ipfs.cf-ipfs.com/ IP 104.17.64.14 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-14 16:34:51 Last Seen2024-04-23 21:43:06 Times Seen167 Hash bc472d94ed4929d184d06e87d1ddb569 868d079185725391481193e70d6a954d0bf1220a 78920639ef323d552a33bf6dea6d45cd0a1765917fe6d8de5abff53a422412f0 Loading...

	bafkreih2fdmx5rety5p627o6mgb452elz2lwokkmkbvze5eldl5pqddvua.ipfs.cf-ipfs.com/	63 B	2023-03-14	2024-03-17
Pretty URL bafkreih2fdmx5rety5p627o6mgb452elz2lwokkmkbvze5eldl5pqddvua.ipfs.cf-ipfs.com/ IP 104.17.64.14 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-14 16:34:51 Last Seen2024-03-17 18:31:08 Times Seen23 Hash 1aa7b94fadadba5066c49315bdcd58e1 d659c7a1005fb3b9df4d1ae48ba375d2cc70774e 5d174fae1a5af62e12d207e49b88302f39eb0757c6ddf50f494db7b986090dad Loading...

	bafkreih2fdmx5rety5p627o6mgb452elz2lwokkmkbvze5eldl5pqddvua.ipfs.cf-ipfs.com/	9 B	2023-03-08	2024-03-17
Pretty URL bafkreih2fdmx5rety5p627o6mgb452elz2lwokkmkbvze5eldl5pqddvua.ipfs.cf-ipfs.com/ IP 104.17.64.14 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-08 09:16:08 Last Seen2024-03-17 18:31:08 Times Seen1121 Hash c9bbac13472694e895cef07d07c23e5e 7ccf44b9f613d82998db27a22bfc510c81f9cabb d4699713b7b777e5141253b2ca70e0b82451025f05058586064df17b3b2421ed Loading...

HTTP Transactions (9)

URL IP Response Size

code.jquery.com/jquery-3.3.1.min.js

69.16.175.10

200 OK

30 kB

URL GET HTTP/2
code.jquery.com/jquery-3.3.1.min.js
IP
69.16.175.10:443
ASN
#20446 STACKPATH-CDN

Requested by
https://bafkreih2fdmx5rety5p627o6mgb452elz2lwokkmkbvze5eldl5pqddvua.ipfs.cf-ipfs.com/
Certificate
IssuerSectigo Limited
Subject*.jquery.com
Fingerprint64:50:4C:BB:DF:F3:1D:70:CC:5D:9E:B7:BE:80:91:84:03:C1:D1:83
ValidityWed, 03 Aug 2022 00:00:00 GMT - Fri, 14 Jul 2023 23:59:59 GMT

File type
ASCII text, with very long lines (65451)
Size
30 kB (30288 bytes)
Hash
a09e13ee94d51c524b7e2a728c7d4039
0dc32db4aa9c5f03f3b38c47d883dbd4fed13aae
160a426ff2894252cd7cebbdd6d6b7da8fcd319c65b70468f10b6690c45d02ef

HTTP Headers

GET /jquery-3.3.1.min.js HTTP/1.1
Host: code.jquery.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bafkreih2fdmx5rety5p627o6mgb452elz2lwokkmkbvze5eldl5pqddvua.ipfs.cf-ipfs.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Fri, 09 Jun 2023 05:32:31 GMT
content-encoding: gzip
content-length: 30288
content-type: application/javascript; charset=utf-8
last-modified: Wed, 16 Feb 2022 10:50:39 GMT
accept-ranges: bytes
server: nginx
etag: W/"620cd6ff-1538f"
cache-control: max-age=315360000, public
access-control-allow-origin: *
vary: Accept-Encoding
x-hw: 1686288751.dop222.sk1.t,1686288751.cds201.sk1.hn,1686288751.cds240.sk1.c
X-Firefox-Spdy: h2

ocsp.sectigo.com/

104.18.15.101

471 B

URL
ocsp.sectigo.com/
IP
104.18.15.101:0
ASN
#13335 CLOUDFLARENET

File type
data
Size
471 B (471 bytes)
Hash
fd6993d0fd6dcb0996a3c6927a90a1b7
86a9018e5abd00203dd84fb3d17c970a193ce2ff
f8e9c1ba00964953b032a77ef8657f1f83521c1d6b9adaaac54569a992400c54

HTTP Headers

POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Fri, 09 Jun 2023 05:32:31 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Thu, 08 Jun 2023 18:44:17 GMT
Expires: Thu, 15 Jun 2023 18:44:16 GMT
Etag: "86a9018e5abd00203dd84fb3d17c970a193ce2ff"
Cache-Control: max-age=565304,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb3
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7d46fe9b9b7cb4f4-OSL

ocsp.sectigo.com/

104.18.15.101

471 B

URL
ocsp.sectigo.com/
IP
104.18.15.101:0
ASN
#13335 CLOUDFLARENET

File type
data
Size
471 B (471 bytes)
Hash
fd6993d0fd6dcb0996a3c6927a90a1b7
86a9018e5abd00203dd84fb3d17c970a193ce2ff
f8e9c1ba00964953b032a77ef8657f1f83521c1d6b9adaaac54569a992400c54

HTTP Headers

POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Fri, 09 Jun 2023 05:32:31 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Thu, 08 Jun 2023 18:44:17 GMT
Expires: Thu, 15 Jun 2023 18:44:16 GMT
Etag: "86a9018e5abd00203dd84fb3d17c970a193ce2ff"
Cache-Control: max-age=565304,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb4
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7d46fe9bae69b50c-OSL

docudodirect.click/meof/ofck/control/page/css/style3.css

68.65.120.230

404 Not Found

1.2 kB

URL GET HTTP/2
docudodirect.click/meof/ofck/control/page/css/style3.css
IP
68.65.120.230:443
ASN
#22612 NAMECHEAP-NET

Requested by
https://bafkreih2fdmx5rety5p627o6mgb452elz2lwokkmkbvze5eldl5pqddvua.ipfs.cf-ipfs.com/
Certificate
IssuerSectigo Limited
Subjectdocudodirect.click
Fingerprint35:60:32:59:04:98:89:7E:4E:EF:A0:39:8C:6A:51:92:2B:72:0F:BA
ValidityWed, 10 May 2023 00:00:00 GMT - Fri, 01 Mar 2024 23:59:59 GMT

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF, LF line terminators
Size
1.2 kB (1238 bytes)
Hash
0bde7d4b3da67537eaf9188e6f8049cf
64300fc482d01d38b40ab20e15960b6509665e5a
5dc1ae0b875dc0d78dbc5532226f5f31b762b4d1229984f605d27bf895ab6807

HTTP Headers

GET /meof/ofck/control/page/css/style3.css HTTP/1.1
Host: docudodirect.click
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bafkreih2fdmx5rety5p627o6mgb452elz2lwokkmkbvze5eldl5pqddvua.ipfs.cf-ipfs.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 404 Not Found
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
pragma: no-cache
content-type: text/html
content-length: 1238
date: Fri, 09 Jun 2023 05:32:32 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2

docudodirect.click/meof/ofck/control/page/img/microsoft_logo.svg?x=ee5c8d9fb6248c938fd0dc19370e90bd

68.65.120.230

404 Not Found

1.2 kB

URL GET HTTP/2
docudodirect.click/meof/ofck/control/page/img/microsoft_logo.svg?x=ee5c8d9fb6248c938fd0dc19370e90bd
IP
68.65.120.230:443
ASN
#22612 NAMECHEAP-NET

Requested by
https://bafkreih2fdmx5rety5p627o6mgb452elz2lwokkmkbvze5eldl5pqddvua.ipfs.cf-ipfs.com/
Certificate
IssuerSectigo Limited
Subjectdocudodirect.click
Fingerprint35:60:32:59:04:98:89:7E:4E:EF:A0:39:8C:6A:51:92:2B:72:0F:BA
ValidityWed, 10 May 2023 00:00:00 GMT - Fri, 01 Mar 2024 23:59:59 GMT

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF, LF line terminators
Size
1.2 kB (1238 bytes)
Hash
0bde7d4b3da67537eaf9188e6f8049cf
64300fc482d01d38b40ab20e15960b6509665e5a
5dc1ae0b875dc0d78dbc5532226f5f31b762b4d1229984f605d27bf895ab6807

HTTP Headers

GET /meof/ofck/control/page/img/microsoft_logo.svg?x=ee5c8d9fb6248c938fd0dc19370e90bd HTTP/1.1
Host: docudodirect.click
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bafkreih2fdmx5rety5p627o6mgb452elz2lwokkmkbvze5eldl5pqddvua.ipfs.cf-ipfs.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 404 Not Found
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
pragma: no-cache
content-type: text/html
content-length: 1238
date: Fri, 09 Jun 2023 05:32:32 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2

docudodirect.click/meof/ofck/control/page/img/2_bc3d32a696895f78c19df6c717586a5d.svg

68.65.120.230

404 Not Found

1.2 kB

URL GET HTTP/2
docudodirect.click/meof/ofck/control/page/img/2_bc3d32a696895f78c19df6c717586a5d.svg
IP
68.65.120.230:443
ASN
#22612 NAMECHEAP-NET

Requested by
https://bafkreih2fdmx5rety5p627o6mgb452elz2lwokkmkbvze5eldl5pqddvua.ipfs.cf-ipfs.com/
Certificate
IssuerSectigo Limited
Subjectdocudodirect.click
Fingerprint35:60:32:59:04:98:89:7E:4E:EF:A0:39:8C:6A:51:92:2B:72:0F:BA
ValidityWed, 10 May 2023 00:00:00 GMT - Fri, 01 Mar 2024 23:59:59 GMT

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF, LF line terminators
Size
1.2 kB (1238 bytes)
Hash
0bde7d4b3da67537eaf9188e6f8049cf
64300fc482d01d38b40ab20e15960b6509665e5a
5dc1ae0b875dc0d78dbc5532226f5f31b762b4d1229984f605d27bf895ab6807

HTTP Headers

GET /meof/ofck/control/page/img/2_bc3d32a696895f78c19df6c717586a5d.svg HTTP/1.1
Host: docudodirect.click
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bafkreih2fdmx5rety5p627o6mgb452elz2lwokkmkbvze5eldl5pqddvua.ipfs.cf-ipfs.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 404 Not Found
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
pragma: no-cache
content-type: text/html
content-length: 1238
date: Fri, 09 Jun 2023 05:32:32 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2

bafkreih2fdmx5rety5p627o6mgb452elz2lwokkmkbvze5eldl5pqddvua.ipfs.cf-ipfs.com/

104.17.64.14

200 OK

7.2 kB

URL User Request GET HTTP/2
bafkreih2fdmx5rety5p627o6mgb452elz2lwokkmkbvze5eldl5pqddvua.ipfs.cf-ipfs.com/
IP
104.17.64.14:443
ASN
#13335 CLOUDFLARENET

Certificate
IssuerCloudflare, Inc.
Subjectcf-ipfs.com
Fingerprint7E:49:AE:B5:66:51:63:F4:42:B8:30:B0:7D:F1:03:F4:C9:C5:57:D2
ValidityFri, 17 Feb 2023 00:00:00 GMT - Sat, 17 Feb 2024 23:59:59 GMT

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 (with BOM) text, with very long lines (345), with CRLF line terminators
Size
7.2 kB (7225 bytes)
Hash
9e556ccdacbdc175a7a914c3ae29169e
8dcbdc20a46268f02b349f041c2d3b1c1a80ff4d
fa28d97ec493c75fed7dde6183cee88bce9767294c506b92748b1afaf80c75a0

Detections

Analyzer	Verdict	Alert
openphish	Outlook

HTTP Headers

GET / HTTP/1.1
Host: bafkreih2fdmx5rety5p627o6mgb452elz2lwokkmkbvze5eldl5pqddvua.ipfs.cf-ipfs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Fri, 09 Jun 2023 05:32:31 GMT
content-type: text/html
cf-ray: 7d46fe918c84067b-OSL
cf-cache-status: MISS
access-control-allow-origin: *
cache-control: public, max-age=29030400, immutable
etag: W/"bafkreih2fdmx5rety5p627o6mgb452elz2lwokkmkbvze5eldl5pqddvua"
vary: Accept-Encoding
access-control-allow-headers: Content-Type, Range, User-Agent, X-Requested-With
access-control-allow-methods: GET
access-control-expose-headers: Content-Length, Content-Range, X-Chunked-Output, X-Ipfs-Path, X-Ipfs-Roots, X-Stream-Output
x-cf-ipfs-cache-status: miss
x-ipfs-path: /ipfs/bafkreih2fdmx5rety5p627o6mgb452elz2lwokkmkbvze5eldl5pqddvua/
x-ipfs-roots: bafkreih2fdmx5rety5p627o6mgb452elz2lwokkmkbvze5eldl5pqddvua
set-cookie: __cf_bm=vLe9JqXVgCgNDaBWsctUEUE0ADYBL2pClx6hEoVzAr0-1686288751-0-ARN6YyktCn5ywbx9d/F/kEg++GO2kEy/X2NhOMkXFdrsoAqSdP7kYALIl28nbNrpkMHFfr7eiF2Iovx46PAHSKI=; path=/; expires=Fri, 09-Jun-23 06:02:31 GMT; domain=.bafkreih2fdmx5rety5p627o6mgb452elz2lwokkmkbvze5eldl5pqddvua.ipfs.cf-ipfs.com; HttpOnly; Secure; SameSite=None
server: cloudflare
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

bafkreih2fdmx5rety5p627o6mgb452elz2lwokkmkbvze5eldl5pqddvua.ipfs.cf-ipfs.com/Sign%20in%20to%20your%20account_files/prefetch(1).html

104.17.64.14

404 Not Found

244 B

URL GET HTTP/2
bafkreih2fdmx5rety5p627o6mgb452elz2lwokkmkbvze5eldl5pqddvua.ipfs.cf-ipfs.com/Sign%20in%20to%20your%20account_files/prefetch(1).html
IP
104.17.64.14:443
ASN
#13335 CLOUDFLARENET

Requested by
https://bafkreih2fdmx5rety5p627o6mgb452elz2lwokkmkbvze5eldl5pqddvua.ipfs.cf-ipfs.com/
Certificate
IssuerCloudflare, Inc.
Subjectcf-ipfs.com
Fingerprint7E:49:AE:B5:66:51:63:F4:42:B8:30:B0:7D:F1:03:F4:C9:C5:57:D2
ValidityFri, 17 Feb 2023 00:00:00 GMT - Sat, 17 Feb 2024 23:59:59 GMT

File type
ASCII text, with no line terminators
Size
244 B (244 bytes)
Hash
7c24c413f69f79c9c25940f68c15aaa3
b1d5af9843795d34cd3c46dcc54cf19beec74767
66a8c387038fb8fcd41d2a4541bd7dd466fea6470fc15730e4090da551a6463e

Detections

Analyzer	Verdict	Alert
openphish	Outlook

HTTP Headers

GET /Sign%20in%20to%20your%20account_files/prefetch(1).html HTTP/1.1
Host: bafkreih2fdmx5rety5p627o6mgb452elz2lwokkmkbvze5eldl5pqddvua.ipfs.cf-ipfs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bafkreih2fdmx5rety5p627o6mgb452elz2lwokkmkbvze5eldl5pqddvua.ipfs.cf-ipfs.com/
Cookie: __cf_bm=vLe9JqXVgCgNDaBWsctUEUE0ADYBL2pClx6hEoVzAr0-1686288751-0-ARN6YyktCn5ywbx9d/F/kEg++GO2kEy/X2NhOMkXFdrsoAqSdP7kYALIl28nbNrpkMHFfr7eiF2Iovx46PAHSKI=
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 404 Not Found
date: Fri, 09 Jun 2023 05:32:33 GMT
content-type: text/plain; charset=utf-8
cf-ray: 7d46fe9d5b60067b-OSL
cf-cache-status: EXPIRED
cache-control: no-store
vary: Accept-Encoding
x-cf-ipfs-cache-status: miss
x-content-type-options: nosniff
server: cloudflare
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

docudodirect.click/meof/ofck/control/page/img/favicon_a_eupayfgghqiai7k9sol6lg2.ico

68.65.120.230

404 Not Found

0 B

URL GET HTTP/2
docudodirect.click/meof/ofck/control/page/img/favicon_a_eupayfgghqiai7k9sol6lg2.ico
IP
68.65.120.230:443
ASN
#22612 NAMECHEAP-NET

Requested by
https://bafkreih2fdmx5rety5p627o6mgb452elz2lwokkmkbvze5eldl5pqddvua.ipfs.cf-ipfs.com/
Certificate
IssuerSectigo Limited
Subjectdocudodirect.click
Fingerprint35:60:32:59:04:98:89:7E:4E:EF:A0:39:8C:6A:51:92:2B:72:0F:BA
ValidityWed, 10 May 2023 00:00:00 GMT - Fri, 01 Mar 2024 23:59:59 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /meof/ofck/control/page/img/favicon_a_eupayfgghqiai7k9sol6lg2.ico HTTP/1.1
Host: docudodirect.click
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bafkreih2fdmx5rety5p627o6mgb452elz2lwokkmkbvze5eldl5pqddvua.ipfs.cf-ipfs.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 404 Not Found
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
pragma: no-cache
content-type: text/html
content-length: 1238
date: Fri, 09 Jun 2023 05:32:32 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

OpenPhish

PhishTank

Fortinet's Web Filter

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (7)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (9)

URL GET HTTP/2

IP

ASN

Requested by