apiservices.krxd.net/click_tracker/track?kx_event_uid=LR25EaJr&clk=https://axonsoftware.co.za/zook/hook/sf_rand_string_lowercase6////ZHNmZW5rZWxAdWRlbC5lZHU=
151.101.66.133302 Found 0 B URL User Request GET HTTP/2 apiservices.krxd.net/click_tracker/track?kx_event_uid=LR25EaJr&clk=https://axonsoftware.co.za/zook/hook/sf_rand_string_lowercase6////ZHNmZW5rZWxAdWRlbC5lZHU=
IP 151.101.66.133:443
Certificate IssuerDigiCert Inc
Subjectapiservices.krxd.net
Fingerprint53:93:0A:7C:24:88:FC:B5:00:CA:05:1F:DF:E2:2A:AC:14:DF:45:B4
ValidityFri, 10 Feb 2023 00:00:00 GMT - Fri, 09 Feb 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /click_tracker/track?kx_event_uid=LR25EaJr&clk=https://axonsoftware.co.za/zook/hook/sf_rand_string_lowercase6////ZHNmZW5rZWxAdWRlbC5lZHU= HTTP/1.1
Host: apiservices.krxd.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
location: https://axonsoftware.co.za/zook/hook/sf_rand_string_lowercase6////ZHNmZW5rZWxAdWRlbC5lZHU=
age: 0
via: 1.1 varnish (Varnish/5.2), 1.1 varnish
accept-ranges: bytes
date: Wed, 16 Aug 2023 20:57:56 GMT
x-served-by: click-tracker-a002-ash-prod.krxd.net, cache-bma1640-BMA
x-cache: MISS, MISS
x-cache-hits: 0, 0
x-timer: S1692219476.386213,VS0,VE368
content-length: 0
X-Firefox-Spdy: h2
axonsoftware.co.za/zook/hook/sf_rand_string_lowercase6////ZHNmZW5rZWxAdWRlbC5lZHU=
192.185.88.195200 OK 0 B URL User Request GET HTTP/2 axonsoftware.co.za/zook/hook/sf_rand_string_lowercase6////ZHNmZW5rZWxAdWRlbC5lZHU=
IP 192.185.88.195:443
ASN #46606 UNIFIEDLAYER-AS-1
Certificate IssuerLet's Encrypt
Subjectmail.axonsoftware.co.za
FingerprintE6:B4:00:1D:46:C3:90:9F:DE:68:48:F9:0B:3F:E3:A6:BE:D8:BC:82
ValidityWed, 12 Jul 2023 15:14:20 GMT - Tue, 10 Oct 2023 15:14:19 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert urlquery phishing Phishing - Microsoft Outlook
GET /zook/hook/sf_rand_string_lowercase6////ZHNmZW5rZWxAdWRlbC5lZHU= HTTP/1.1
Host: axonsoftware.co.za
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
refresh: 0;url=https://phhd94yyee64459f0563812.youthf.ru/Mdsfenkel@udel.edu
content-length: 0
content-type: text/html; charset=UTF-8
date: Wed, 16 Aug 2023 20:57:57 GMT
server: Apache
X-Firefox-Spdy: h2
phhd94yyee64459f0563812.youthf.ru/Mdsfenkel@udel.edu
188.114.97.1403 Forbidden 6.5 kB URL User Request GET HTTP/2 phhd94yyee64459f0563812.youthf.ru/Mdsfenkel@udel.edu
IP 188.114.97.1:443
Certificate IssuerLet's Encrypt
Subjectyouthf.ru
Fingerprint2E:C6:1E:52:BA:4B:7A:B6:7C:22:D2:D9:05:13:6B:AD:E2:86:68:46
ValidityWed, 12 Jul 2023 21:38:43 GMT - Tue, 10 Oct 2023 21:38:42 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (6590), with no line terminators
Hash b460956b1517864604bba4b9cd4d79cd
10bc3e6a7b9f891f6293663df0bacda6431eea2e
95a2d0a38319a408130a3cee08391b1e213453f793081000b05df11c51dc1a6c
Analyzer Verdict Alert urlquery phishing Phishing - Microsoft Outlook
urlquery phishing Phishing - Microsoft Outlook
GET /Mdsfenkel@udel.edu HTTP/1.1
Host: phhd94yyee64459f0563812.youthf.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 403 Forbidden
date: Wed, 16 Aug 2023 20:57:57 GMT
content-type: text/html; charset=UTF-8
cross-origin-embedder-policy: require-corp
cross-origin-opener-policy: same-origin
cross-origin-resource-policy: same-origin
origin-agent-cluster: ?1
permissions-policy: accelerometer=(),autoplay=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()
referrer-policy: same-origin
x-frame-options: SAMEORIGIN
cf-mitigated: challenge
cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
expires: Thu, 01 Jan 1970 00:00:01 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2B7zbT4UsWpb9KAYEtg28u1IB2e0unr5q4st1e3JKtdU7CvKGrluLA0io%2F4Yu8nP%2BEp0DJcUAwUwRkYqTQfIBFNzvHcNSEa3md7M%2BSQVXXL6isU2p%2FFIYUBhjGtcge9%2FZuse29f0Nxh8kEj6OX%2FXs2XZZzbo%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7f7c97b95c3e1c0e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
phhd94yyee64459f0563812.youthf.ru/cdn-cgi/challenge-platform/h/g/orchestrate/chl_page/v1?ray=7f7c97b95c3e1c0e
188.114.97.1200 OK 4.8 kB URL GET HTTP/3 phhd94yyee64459f0563812.youthf.ru/cdn-cgi/challenge-platform/h/g/orchestrate/chl_page/v1?ray=7f7c97b95c3e1c0e
IP 188.114.97.1:443
Requested by https://phhd94yyee64459f0563812.youthf.ru/Mdsfenkel@udel.edu
Certificate IssuerLet's Encrypt
Subjectyouthf.ru
Fingerprint2E:C6:1E:52:BA:4B:7A:B6:7C:22:D2:D9:05:13:6B:AD:E2:86:68:46
ValidityWed, 12 Jul 2023 21:38:43 GMT - Tue, 10 Oct 2023 21:38:42 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (5035), with no line terminators
Hash 812ebf6cae38e1ea8dd1dd08fcfe1882
2314a85b48bce6d1dce453e153e1ac5eae918e5b
1fa44f0c4306d126ded24887154d3392306c0f8f47e53c5b9216c831c23248f9
GET /cdn-cgi/challenge-platform/h/g/orchestrate/chl_page/v1?ray=7f7c97b95c3e1c0e HTTP/1.1
Host: phhd94yyee64459f0563812.youthf.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://phhd94yyee64459f0563812.youthf.ru/Mdsfenkel@udel.edu?__cf_chl_rt_tk=MFuIfNKKlqI0vw2HOGmG5LRhjISJzh_hHBDOnclEqrw-1692219477-0-gaNycGzNDDs
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 16 Aug 2023 20:57:58 GMT
content-type: text/html; charset=UTF-8
x-frame-options: SAMEORIGIN
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=8SiaefQFk9L%2B%2F1ki1F%2FSZNbZdpNwreWzrlgOwmo3oFbctzHeK%2B8xmkhZMq7wCFqlpUn2cXifAse9SVYbbQQw1mGoKgYdiaaj3lJq2UteXG%2FV2Z6%2B7oyr%2BpI3nGVaSP0ckuiOHkT1UmH%2B0Wd3Itbwe%2Fv1G6s%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7f7c97ba3be8b505-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
phhd94yyee64459f0563812.youthf.ru/favicon.ico
188.114.97.1403 Forbidden 5.9 kB URL GET HTTP/3 phhd94yyee64459f0563812.youthf.ru/favicon.ico
IP 188.114.97.1:443
Requested by https://phhd94yyee64459f0563812.youthf.ru/Mdsfenkel@udel.edu
Certificate IssuerLet's Encrypt
Subjectyouthf.ru
Fingerprint2E:C6:1E:52:BA:4B:7A:B6:7C:22:D2:D9:05:13:6B:AD:E2:86:68:46
ValidityWed, 12 Jul 2023 21:38:43 GMT - Tue, 10 Oct 2023 21:38:42 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (6027), with no line terminators
Hash b75eb3ddd9416fc381271da27807f0e7
0539f93f15bbf3bb8c052842bef790070629a693
b2bbeebb554d8c285c0be995c8c427e3d9d67804e1df4874428264c6bae6c339
GET /favicon.ico HTTP/1.1
Host: phhd94yyee64459f0563812.youthf.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://phhd94yyee64459f0563812.youthf.ru/Mdsfenkel@udel.edu?__cf_chl_rt_tk=MFuIfNKKlqI0vw2HOGmG5LRhjISJzh_hHBDOnclEqrw-1692219477-0-gaNycGzNDDs
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 403 Forbidden
date: Wed, 16 Aug 2023 20:57:58 GMT
content-type: text/html; charset=UTF-8
cross-origin-embedder-policy: require-corp
cross-origin-opener-policy: same-origin
cross-origin-resource-policy: same-origin
origin-agent-cluster: ?1
permissions-policy: accelerometer=(),autoplay=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()
referrer-policy: same-origin
x-frame-options: SAMEORIGIN
cf-mitigated: challenge
cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
expires: Thu, 01 Jan 1970 00:00:01 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=sVEFcfhSE8ps9C5VzmhxRZwZ3P20Lxe38YEvmdJgwWDxcItze1FcphHK5YXRrzxvk5oAry7LqxAf%2FmMbBeggMJ2zWDOt8D9M7J4k0VycmHil5yeyoJE4NAFLyIXJyD8giHQt5s7Px8GgJIm527J%2FOMksCi8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7f7c97ba6c5fb505-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400