Report - www.cdflarecdn.com/lp-ach/survey-ke-3ld0p-01/?&td=t.cdimg.org&campaignid=646e4503b6101200011de8de&sourceid=5c10d5056a25120001760933&sub1=&sub2=&ref_id=(ref_id}&rtkcid=6470d5e0972d540001b47a2e&rtkcmpid=646e4503b6101200011de8de

Report Overview

Submitted URL
www.cdflarecdn.com/lp-ach/survey-ke-3ld0p-01/?&td=t.cdimg.org&campaignid=646e4503b6101200011de8de&sourceid=5c10d5056a25120001760933&sub1=&sub2=&ref_id=(ref_id}&rtkcid=6470d5e0972d540001b47a2e&rtkcmpid=646e4503b6101200011de8de
IP
198.50.224.42
ASN
#16276 OVH SAS
Submitted
2023-05-26 15:53:34
Access
public
Website Title
Final URL
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
8

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
t.cdimg.org	unknown	2022-10-25	2022-10-25	2023-05-24	859 B	4.1 kB	37.48.87.182
deefauph.com	135892	2021-03-12	2021-03-12	2023-05-26	1.0 kB	43 kB	139.45.197.251
www.cdflarecdn.com	unknown	2022-10-24	2017-05-22	2023-05-24	6.0 kB	62 kB	198.50.224.42
ocsp.pki.goog	175	2016-06-13	2018-07-01	2023-05-26	666 B	1.4 kB	142.250.74.131
ajax.googleapis.com	12905	2005-01-25	2013-08-16	2023-05-26	436 B	35 kB	142.250.74.106
ocsp.sectigo.com	487	2018-08-16	2019-11-29	2023-05-26	330 B	964 B	104.18.14.101

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

OpenPhish

No alerts detected

PhishTank

No alerts detected

Fortinet's Web Filter

Scan Date	Severity	Indicator
2023-05-26	medium	t.cdimg.org/track.js
2023-05-26	medium	www.cdflarecdn.com/lp-codes/js/tool.js
2023-05-26	medium	www.cdflarecdn.com/sw-check-permissions-8bbee.js
2023-05-26	medium	t.cdimg.org/view?clickid=6470d5e0972d540001b47a2e

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (9)

	URL	Size	First Seen	Last Seen
	www.cdflarecdn.com/lp-ach/survey-ke-3ld0p-01/?&td=t.cdimg.org&campaignid=646e4503b6101200011de8de&sourceid=5c10d5056a25120001760933&sub1=&sub2=&ref_id=(ref_id}&rtkcid=6470d5e0972d540001b47a2e&rtkcmpid=646e4503b6101200011de8de	0 B	2023-03-07	2024-04-20
Pretty URL www.cdflarecdn.com/lp-ach/survey-ke-3ld0p-01/?&td=t.cdimg.org&campaignid=646e4503b6101200011de8de&sourceid=5c10d5056a25120001760933&sub1=&sub2=&ref_id=(ref_id}&rtkcid=6470d5e0972d540001b47a2e&rtkcmpid=646e4503b6101200011de8de IP 198.50.224.42 ASN #16276 OVH SAS Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 01:01:59 Last Seen2024-04-20 03:44:56 Times Seen36969351 Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Loading...

	www.cdflarecdn.com/lp-codes/js/tool.js	5.4 kB	2023-03-08	2023-06-30
Pretty URL www.cdflarecdn.com/lp-codes/js/tool.js IP 198.50.224.42 ASN #16276 OVH SAS Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-08 20:08:54 Last Seen2023-06-30 20:34:18 Times Seen57 Hash 83c7cbc815d44832136e6a2856444491 8197168788e787aaae67fcfcbbbbd5892a9a44dd 8e2dd0b405d4bfc2e080182639170b05e2637584876bbae4865c8a2115fffd03 Loading...

	unknown	64 B	2023-05-04	2023-06-30
Pretty Introduced by Function Embedded in HTML false Observations First Seen2023-05-04 13:55:18 Last Seen2023-06-30 20:34:18 Times Seen25 Hash bbd7860ae4a90ccc1619cab5e6ea403f f42e04548329457fce57498d08a8d03eb408f99c 62375ee7d1a1a1cc950f500e1cf677f4573bae0881953049ff3bdec2c670d28d Loading...

	www.cdflarecdn.com/lp-ach/survey-ke-3ld0p-01/?&td=t.cdimg.org&campaignid=646e4503b6101200011de8de&sourceid=5c10d5056a25120001760933&sub1=&sub2=&ref_id=(ref_id}&rtkcid=6470d5e0972d540001b47a2e&rtkcmpid=646e4503b6101200011de8de	0 B	2023-03-07	2024-04-20
Pretty URL www.cdflarecdn.com/lp-ach/survey-ke-3ld0p-01/?&td=t.cdimg.org&campaignid=646e4503b6101200011de8de&sourceid=5c10d5056a25120001760933&sub1=&sub2=&ref_id=(ref_id}&rtkcid=6470d5e0972d540001b47a2e&rtkcmpid=646e4503b6101200011de8de IP 198.50.224.42 ASN #16276 OVH SAS Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 01:01:59 Last Seen2024-04-20 03:44:56 Times Seen36969351 Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Loading...

	www.cdflarecdn.com/lp-ach/survey-ke-3ld0p-01/?&td=t.cdimg.org&campaignid=646e4503b6101200011de8de&sourceid=5c10d5056a25120001760933&sub1=&sub2=&ref_id=(ref_id}&rtkcid=6470d5e0972d540001b47a2e&rtkcmpid=646e4503b6101200011de8de	0 B	2023-03-07	2024-04-20
Pretty URL www.cdflarecdn.com/lp-ach/survey-ke-3ld0p-01/?&td=t.cdimg.org&campaignid=646e4503b6101200011de8de&sourceid=5c10d5056a25120001760933&sub1=&sub2=&ref_id=(ref_id}&rtkcid=6470d5e0972d540001b47a2e&rtkcmpid=646e4503b6101200011de8de IP 198.50.224.42 ASN #16276 OVH SAS Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 01:01:59 Last Seen2024-04-20 03:44:56 Times Seen36969351 Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Loading...

	ajax.googleapis.com/ajax/libs/jquery/1.12.4/jquery.min.js	97 kB	2023-03-07	2024-04-19
Pretty URL ajax.googleapis.com/ajax/libs/jquery/1.12.4/jquery.min.js IP 142.250.74.106 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:02:06 Last Seen2024-04-19 19:14:44 Times Seen118542 Hash 4f252523d4af0b478c810c2547a63e19 5a9dcfbef655a2668e78baebeaa8dc6f41d8dabb 668b046d12db350ccba6728890476b3efee53b2f42dbb84743e5e9f1ae0cc404 Loading...

	www.cdflarecdn.com/lp-ach/survey-ke-3ld0p-01/?&td=t.cdimg.org&campaignid=646e4503b6101200011de8de&sourceid=5c10d5056a25120001760933&sub1=&sub2=&ref_id=(ref_id}&rtkcid=6470d5e0972d540001b47a2e&rtkcmpid=646e4503b6101200011de8de	0 B	2023-03-07	2024-04-20
Pretty URL www.cdflarecdn.com/lp-ach/survey-ke-3ld0p-01/?&td=t.cdimg.org&campaignid=646e4503b6101200011de8de&sourceid=5c10d5056a25120001760933&sub1=&sub2=&ref_id=(ref_id}&rtkcid=6470d5e0972d540001b47a2e&rtkcmpid=646e4503b6101200011de8de IP 198.50.224.42 ASN #16276 OVH SAS Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 01:01:59 Last Seen2024-04-20 03:44:56 Times Seen36969351 Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Loading...

	t.cdimg.org/track.js	3.5 kB	2023-03-08	2023-05-27
Pretty URL t.cdimg.org/track.js IP 37.48.87.182 ASN #60781 LeaseWeb Netherlands B.V. Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-08 20:08:54 Last Seen2023-05-27 23:57:18 Times Seen48 Hash 96db89300498f154ff585942a89e19ca f5d2773f1be0c039982da2076efe88e767e2dfb7 4d1721dbcd24912d0c5d3942bcbab726ac7887b13e039fd853f7b04a402de46d Loading...

	deefauph.com/pfe/current/micro.tag.min.js?z=5491820&sw=/sw-check-permissions-8bbee.js	42 kB	2023-05-11	2023-05-29
Pretty URL deefauph.com/pfe/current/micro.tag.min.js?z=5491820&sw=/sw-check-permissions-8bbee.js IP 139.45.197.251 ASN #9002 RETN Limited Introduced by scriptElement Embedded in HTML false Observations First Seen2023-05-11 16:26:45 Last Seen2023-05-29 09:32:34 Times Seen6742 Hash d44fd7b96fceca8f81b472766025d0d2 237541097413baf5cd3e703413f8bc9ea538a4db b6c7c1e7fb1a437f100bdcb253df8b0468f130835fbb82c5687505a099997d16 Loading...

HTTP Transactions (17)

URL IP Response Size

www.cdflarecdn.com/lp-ach/survey-ke-3ld0p-01/?&td=t.cdimg.org&campaignid=646e4503b6101200011de8de&sourceid=5c10d5056a25120001760933&sub1=&sub2=&ref_id=(ref_id}&rtkcid=6470d5e0972d540001b47a2e&rtkcmpid=646e4503b6101200011de8de

198.50.224.42

200 OK

2.1 kB

URL User Request GET HTTP/1.1
www.cdflarecdn.com/lp-ach/survey-ke-3ld0p-01/?&td=t.cdimg.org&campaignid=646e4503b6101200011de8de&sourceid=5c10d5056a25120001760933&sub1=&sub2=&ref_id=(ref_id}&rtkcid=6470d5e0972d540001b47a2e&rtkcmpid=646e4503b6101200011de8de
IP
198.50.224.42:443
ASN
#16276 OVH SAS

Certificate
IssuerSectigo Limited
Subjectwww.cdflarecdn.com
Fingerprint4D:9D:9E:BE:6E:BC:B8:8C:4B:D6:0A:5D:9A:FA:27:0C:22:67:C1:5F
ValidityMon, 24 Oct 2022 00:00:00 GMT - Tue, 24 Oct 2023 23:59:59 GMT

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF, LF line terminators
Size
2.1 kB (2136 bytes)
Hash
34a827c1de5de14e11cc3cdab7fa4615
fa30b5fae79eb4504b2e702d543b1965aa912a20
32ef149f28558eb2356dced77ce984503c35ffab6a42e9418d19099fcb5fa2e5

HTTP Headers

GET /lp-ach/survey-ke-3ld0p-01/?&td=t.cdimg.org&campaignid=646e4503b6101200011de8de&sourceid=5c10d5056a25120001760933&sub1=&sub2=&ref_id=(ref_id}&rtkcid=6470d5e0972d540001b47a2e&rtkcmpid=646e4503b6101200011de8de HTTP/1.1
Host: www.cdflarecdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Fri, 26 May 2023 15:53:17 GMT
Server: Apache
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 2136
Keep-Alive: timeout=5, max=50
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8

ocsp.pki.goog/gts1c3

142.250.74.131

472 B

URL
ocsp.pki.goog/gts1c3
IP
142.250.74.131:0
ASN
#15169 GOOGLE

File type
data
Size
472 B (472 bytes)
Hash
eabef916764564262ad985fd27284a97
42a72e12642fe4249aa5bd8e1cc9e9db07fd7943
ffa5c8a67b8ebba1ce4e464bc7e831e998c830a78d78880f09702afae02a9d70

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 26 May 2023 15:53:17 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

ajax.googleapis.com/ajax/libs/jquery/1.12.4/jquery.min.js

142.250.74.106

200 OK

34 kB

URL GET HTTP/2
ajax.googleapis.com/ajax/libs/jquery/1.12.4/jquery.min.js
IP
142.250.74.106:443
ASN
#15169 GOOGLE

Requested by
https://www.cdflarecdn.com/lp-ach/survey-ke-3ld0p-01/?&td=t.cdimg.org&campaignid=646e4503b6101200011de8de&sourceid=5c10d5056a25120001760933&sub1=&sub2=&ref_id=(ref_id}&rtkcid=6470d5e0972d540001b47a2e&rtkcmpid=646e4503b6101200011de8de
Certificate
IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
Fingerprint5F:AC:74:E6:97:66:CD:D0:F1:EA:0D:01:37:89:65:2E:98:22:84:6C
ValidityMon, 08 May 2023 08:24:50 GMT - Mon, 31 Jul 2023 08:24:49 GMT

File type
ASCII text, with very long lines (32077)
Size
34 kB (33951 bytes)
Hash
4f252523d4af0b478c810c2547a63e19
5a9dcfbef655a2668e78baebeaa8dc6f41d8dabb
668b046d12db350ccba6728890476b3efee53b2f42dbb84743e5e9f1ae0cc404

HTTP Headers

GET /ajax/libs/jquery/1.12.4/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.cdflarecdn.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 33951
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 23 May 2023 12:22:52 GMT
expires: Wed, 22 May 2024 12:22:52 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
last-modified: Tue, 03 Mar 2020 19:15:00 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
age: 271825
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

ocsp.sectigo.com/

104.18.14.101

472 B

URL
ocsp.sectigo.com/
IP
104.18.14.101:0
ASN
#13335 CLOUDFLARENET

File type
data
Size
472 B (472 bytes)
Hash
a17c3150566e3a4b0eaadd3d403f043b
c34d86e3c17e74b9a43c4db6a733b942a49be729
76e7b5ffe2736b328b3db8392c927aea0af841ff43c23bd0a7bc596bfb0e1c39

HTTP Headers

POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Fri, 26 May 2023 15:53:17 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Tue, 23 May 2023 09:09:37 GMT
Expires: Tue, 30 May 2023 09:09:36 GMT
Etag: "c34d86e3c17e74b9a43c4db6a733b942a49be729"
Cache-Control: max-age=320778,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb6
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7cd730ae4abab4eb-OSL

ocsp.pki.goog/gts1c3

142.250.74.131

472 B

URL
ocsp.pki.goog/gts1c3
IP
142.250.74.131:0
ASN
#15169 GOOGLE

File type
data
Size
472 B (472 bytes)
Hash
eabef916764564262ad985fd27284a97
42a72e12642fe4249aa5bd8e1cc9e9db07fd7943
ffa5c8a67b8ebba1ce4e464bc7e831e998c830a78d78880f09702afae02a9d70

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 26 May 2023 15:53:17 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

t.cdimg.org/track.js

37.48.87.182

200 OK

3.5 kB

URL GET HTTP/1.1
t.cdimg.org/track.js
IP
37.48.87.182:443
ASN
#60781 LeaseWeb Netherlands B.V.

Requested by
https://www.cdflarecdn.com/lp-ach/survey-ke-3ld0p-01/?&td=t.cdimg.org&campaignid=646e4503b6101200011de8de&sourceid=5c10d5056a25120001760933&sub1=&sub2=&ref_id=(ref_id}&rtkcid=6470d5e0972d540001b47a2e&rtkcmpid=646e4503b6101200011de8de
Certificate
IssuerSectigo Limited
Subjectt.cdimg.org
FingerprintEB:B8:CF:C7:7A:DC:16:B9:60:1C:7C:37:F4:78:2E:CA:24:FE:E4:7D
ValidityTue, 25 Oct 2022 00:00:00 GMT - Wed, 25 Oct 2023 23:59:59 GMT

File type
ASCII text
Size
3.5 kB (3478 bytes)
Hash
96db89300498f154ff585942a89e19ca
f5d2773f1be0c039982da2076efe88e767e2dfb7
4d1721dbcd24912d0c5d3942bcbab726ac7887b13e039fd853f7b04a402de46d

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /track.js HTTP/1.1
Host: t.cdimg.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.cdflarecdn.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx/1.20.2
Date: Fri, 26 May 2023 15:53:17 GMT
Content-Type: text/plain; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range

www.cdflarecdn.com/lp-ach/survey-ke-3ld0p-01/css/style.css

198.50.224.42

200 OK

20 kB

URL GET HTTP/1.1
www.cdflarecdn.com/lp-ach/survey-ke-3ld0p-01/css/style.css
IP
198.50.224.42:443
ASN
#16276 OVH SAS

Requested by
https://www.cdflarecdn.com/lp-ach/survey-ke-3ld0p-01/?&td=t.cdimg.org&campaignid=646e4503b6101200011de8de&sourceid=5c10d5056a25120001760933&sub1=&sub2=&ref_id=(ref_id}&rtkcid=6470d5e0972d540001b47a2e&rtkcmpid=646e4503b6101200011de8de
Certificate
IssuerSectigo Limited
Subjectwww.cdflarecdn.com
Fingerprint4D:9D:9E:BE:6E:BC:B8:8C:4B:D6:0A:5D:9A:FA:27:0C:22:67:C1:5F
ValidityMon, 24 Oct 2022 00:00:00 GMT - Tue, 24 Oct 2023 23:59:59 GMT

File type
ASCII text, with very long lines (65371)
Size
20 kB (19883 bytes)
Hash
5d5357cb3704e1f43a1f5bfed2aebf42
08df9a96752852f2cbd310c30facd934e348c2c5
31fbd99641c212a6ad3681a2397bde13c148c0ccd98385bce6a7eb7c81417d87

HTTP Headers

GET /lp-ach/survey-ke-3ld0p-01/css/style.css HTTP/1.1
Host: www.cdflarecdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.cdflarecdn.com/lp-ach/survey-ke-3ld0p-01/?&td=t.cdimg.org&campaignid=646e4503b6101200011de8de&sourceid=5c10d5056a25120001760933&sub1=&sub2=&ref_id=(ref_id}&rtkcid=6470d5e0972d540001b47a2e&rtkcmpid=646e4503b6101200011de8de
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Fri, 26 May 2023 15:53:17 GMT
Server: Apache
Last-Modified: Tue, 28 Mar 2023 06:35:52 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Cache-Control: max-age=172800, public, must-revalidate
Content-Length: 19883
Keep-Alive: timeout=5, max=49
Connection: Keep-Alive
Content-Type: text/css

www.cdflarecdn.com/lp-codes/js/tool.js

198.50.224.42

200 OK

1.6 kB

URL GET HTTP/1.1
www.cdflarecdn.com/lp-codes/js/tool.js
IP
198.50.224.42:443
ASN
#16276 OVH SAS

Requested by
https://www.cdflarecdn.com/lp-ach/survey-ke-3ld0p-01/?&td=t.cdimg.org&campaignid=646e4503b6101200011de8de&sourceid=5c10d5056a25120001760933&sub1=&sub2=&ref_id=(ref_id}&rtkcid=6470d5e0972d540001b47a2e&rtkcmpid=646e4503b6101200011de8de
Certificate
IssuerSectigo Limited
Subjectwww.cdflarecdn.com
Fingerprint4D:9D:9E:BE:6E:BC:B8:8C:4B:D6:0A:5D:9A:FA:27:0C:22:67:C1:5F
ValidityMon, 24 Oct 2022 00:00:00 GMT - Tue, 24 Oct 2023 23:59:59 GMT

File type
ASCII text, with CRLF line terminators
Size
1.6 kB (1619 bytes)
Hash
83c7cbc815d44832136e6a2856444491
8197168788e787aaae67fcfcbbbbd5892a9a44dd
8e2dd0b405d4bfc2e080182639170b05e2637584876bbae4865c8a2115fffd03

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /lp-codes/js/tool.js HTTP/1.1
Host: www.cdflarecdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.cdflarecdn.com/lp-ach/survey-ke-3ld0p-01/?&td=t.cdimg.org&campaignid=646e4503b6101200011de8de&sourceid=5c10d5056a25120001760933&sub1=&sub2=&ref_id=(ref_id}&rtkcid=6470d5e0972d540001b47a2e&rtkcmpid=646e4503b6101200011de8de
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Fri, 26 May 2023 15:53:18 GMT
Server: Apache
Last-Modified: Thu, 14 Mar 2019 14:53:53 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Cache-Control: max-age=172800, public, must-revalidate
Content-Length: 1619
Keep-Alive: timeout=5, max=50
Connection: Keep-Alive
Content-Type: application/javascript

www.cdflarecdn.com/lp-codes/css/style.css

198.50.224.42

200 OK

86 B

URL GET HTTP/1.1
www.cdflarecdn.com/lp-codes/css/style.css
IP
198.50.224.42:443
ASN
#16276 OVH SAS

Requested by
https://www.cdflarecdn.com/lp-ach/survey-ke-3ld0p-01/?&td=t.cdimg.org&campaignid=646e4503b6101200011de8de&sourceid=5c10d5056a25120001760933&sub1=&sub2=&ref_id=(ref_id}&rtkcid=6470d5e0972d540001b47a2e&rtkcmpid=646e4503b6101200011de8de
Certificate
IssuerSectigo Limited
Subjectwww.cdflarecdn.com
Fingerprint4D:9D:9E:BE:6E:BC:B8:8C:4B:D6:0A:5D:9A:FA:27:0C:22:67:C1:5F
ValidityMon, 24 Oct 2022 00:00:00 GMT - Tue, 24 Oct 2023 23:59:59 GMT

File type
ASCII text, with CRLF line terminators
Size
86 B (86 bytes)
Hash
45ff5d6684d15a8fdb2073c2eee8c777
787e0a8f29f1ce66ed6902d1a9959168b63fc8bd
4254e7cf1ab90040e4c49a20da1b8b6154d7a9992fc86406ff830325e02ffeff

HTTP Headers

GET /lp-codes/css/style.css HTTP/1.1
Host: www.cdflarecdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.cdflarecdn.com/lp-ach/survey-ke-3ld0p-01/?&td=t.cdimg.org&campaignid=646e4503b6101200011de8de&sourceid=5c10d5056a25120001760933&sub1=&sub2=&ref_id=(ref_id}&rtkcid=6470d5e0972d540001b47a2e&rtkcmpid=646e4503b6101200011de8de
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Fri, 26 May 2023 15:53:18 GMT
Server: Apache
Last-Modified: Sun, 18 Dec 2022 13:04:15 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Cache-Control: max-age=172800, public, must-revalidate
Content-Length: 86
Keep-Alive: timeout=5, max=50
Connection: Keep-Alive
Content-Type: text/css

www.cdflarecdn.com/lp-ach/survey-ke-3ld0p-01/img/prize-pic-01.jpg

198.50.224.42

200 OK

19 kB

URL GET HTTP/1.1
www.cdflarecdn.com/lp-ach/survey-ke-3ld0p-01/img/prize-pic-01.jpg
IP
198.50.224.42:443
ASN
#16276 OVH SAS

Requested by
https://www.cdflarecdn.com/lp-ach/survey-ke-3ld0p-01/?&td=t.cdimg.org&campaignid=646e4503b6101200011de8de&sourceid=5c10d5056a25120001760933&sub1=&sub2=&ref_id=(ref_id}&rtkcid=6470d5e0972d540001b47a2e&rtkcmpid=646e4503b6101200011de8de
Certificate
IssuerSectigo Limited
Subjectwww.cdflarecdn.com
Fingerprint4D:9D:9E:BE:6E:BC:B8:8C:4B:D6:0A:5D:9A:FA:27:0C:22:67:C1:5F
ValidityMon, 24 Oct 2022 00:00:00 GMT - Tue, 24 Oct 2023 23:59:59 GMT

File type
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 360x250, components 3\012- data
Size
19 kB (19301 bytes)
Hash
197dc65439c735ad1489ed944934df99
b7e5a525d5e16b81cb7c7f23083667535fc3fe86
80b912cfba44337778a91dd22bb8f6f24ec08646f12d53ac2e5259368ae992e5

HTTP Headers

GET /lp-ach/survey-ke-3ld0p-01/img/prize-pic-01.jpg HTTP/1.1
Host: www.cdflarecdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.cdflarecdn.com/lp-ach/survey-ke-3ld0p-01/?&td=t.cdimg.org&campaignid=646e4503b6101200011de8de&sourceid=5c10d5056a25120001760933&sub1=&sub2=&ref_id=(ref_id}&rtkcid=6470d5e0972d540001b47a2e&rtkcmpid=646e4503b6101200011de8de
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Fri, 26 May 2023 15:53:18 GMT
Server: Apache
Last-Modified: Tue, 23 May 2023 15:32:48 GMT
Accept-Ranges: bytes
Content-Length: 19301
Cache-Control: max-age=172800, public, must-revalidate
Keep-Alive: timeout=5, max=48
Connection: Keep-Alive
Content-Type: image/jpeg

www.cdflarecdn.com/lp-ach/survey-ke-3ld0p-01/img/checkmark.png

198.50.224.42

200 OK

1.8 kB

URL GET HTTP/1.1
www.cdflarecdn.com/lp-ach/survey-ke-3ld0p-01/img/checkmark.png
IP
198.50.224.42:443
ASN
#16276 OVH SAS

Requested by
https://www.cdflarecdn.com/lp-ach/survey-ke-3ld0p-01/?&td=t.cdimg.org&campaignid=646e4503b6101200011de8de&sourceid=5c10d5056a25120001760933&sub1=&sub2=&ref_id=(ref_id}&rtkcid=6470d5e0972d540001b47a2e&rtkcmpid=646e4503b6101200011de8de
Certificate
IssuerSectigo Limited
Subjectwww.cdflarecdn.com
Fingerprint4D:9D:9E:BE:6E:BC:B8:8C:4B:D6:0A:5D:9A:FA:27:0C:22:67:C1:5F
ValidityMon, 24 Oct 2022 00:00:00 GMT - Tue, 24 Oct 2023 23:59:59 GMT

File type
PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced\012- data
Size
1.8 kB (1830 bytes)
Hash
42fa8951d2168ea199ea554143648d92
5cbe5054d3594c950709225428d9c134d78e91d7
66db950dc7914781705f9b92f0b90a1adaa742a3d79ef35549a3466c7fd24190

HTTP Headers

GET /lp-ach/survey-ke-3ld0p-01/img/checkmark.png HTTP/1.1
Host: www.cdflarecdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.cdflarecdn.com/lp-ach/survey-ke-3ld0p-01/?&td=t.cdimg.org&campaignid=646e4503b6101200011de8de&sourceid=5c10d5056a25120001760933&sub1=&sub2=&ref_id=(ref_id}&rtkcid=6470d5e0972d540001b47a2e&rtkcmpid=646e4503b6101200011de8de
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Fri, 26 May 2023 15:53:18 GMT
Server: Apache
Last-Modified: Tue, 28 Mar 2023 06:35:52 GMT
Accept-Ranges: bytes
Content-Length: 1830
Cache-Control: max-age=172800, public, must-revalidate
Keep-Alive: timeout=5, max=50
Connection: Keep-Alive
Content-Type: image/png

www.cdflarecdn.com/lp-ach/survey-ke-3ld0p-01/img/loading.gif

198.50.224.42

200 OK

14 kB

URL GET HTTP/1.1
www.cdflarecdn.com/lp-ach/survey-ke-3ld0p-01/img/loading.gif
IP
198.50.224.42:443
ASN
#16276 OVH SAS

Requested by
https://www.cdflarecdn.com/lp-ach/survey-ke-3ld0p-01/?&td=t.cdimg.org&campaignid=646e4503b6101200011de8de&sourceid=5c10d5056a25120001760933&sub1=&sub2=&ref_id=(ref_id}&rtkcid=6470d5e0972d540001b47a2e&rtkcmpid=646e4503b6101200011de8de
Certificate
IssuerSectigo Limited
Subjectwww.cdflarecdn.com
Fingerprint4D:9D:9E:BE:6E:BC:B8:8C:4B:D6:0A:5D:9A:FA:27:0C:22:67:C1:5F
ValidityMon, 24 Oct 2022 00:00:00 GMT - Tue, 24 Oct 2023 23:59:59 GMT

File type
GIF image data, version 89a, 240 x 320\012- data
Size
14 kB (14262 bytes)
Hash
0a856515df896370b960d69101003b00
206af3b06bfc5cf26e28fbd50e86e081ca407d7b
50f04feafe5e07e69384706c4d004bbec71aa2e183b57bad7fda2d7be5e24e0b

HTTP Headers

GET /lp-ach/survey-ke-3ld0p-01/img/loading.gif HTTP/1.1
Host: www.cdflarecdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.cdflarecdn.com/lp-ach/survey-ke-3ld0p-01/?&td=t.cdimg.org&campaignid=646e4503b6101200011de8de&sourceid=5c10d5056a25120001760933&sub1=&sub2=&ref_id=(ref_id}&rtkcid=6470d5e0972d540001b47a2e&rtkcmpid=646e4503b6101200011de8de
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Fri, 26 May 2023 15:53:18 GMT
Server: Apache
Last-Modified: Tue, 28 Mar 2023 06:35:52 GMT
Accept-Ranges: bytes
Content-Length: 14262
Cache-Control: max-age=172800, public, must-revalidate
Keep-Alive: timeout=5, max=49
Connection: Keep-Alive
Content-Type: image/gif

deefauph.com/zone?&pub=0&zone_id=5491820&is_mobile=false&domain=www.cdflarecdn.com&var=&ymid=&var_3=&var_4=&dsig=&action=prerequest

139.45.197.251

200 OK

0 B

URL POST HTTP/2
deefauph.com/zone?&pub=0&zone_id=5491820&is_mobile=false&domain=www.cdflarecdn.com&var=&ymid=&var_3=&var_4=&dsig=&action=prerequest
IP
139.45.197.251:443
ASN
#9002 RETN Limited

Requested by
https://www.cdflarecdn.com/lp-ach/survey-ke-3ld0p-01/?&td=t.cdimg.org&campaignid=646e4503b6101200011de8de&sourceid=5c10d5056a25120001760933&sub1=&sub2=&ref_id=(ref_id}&rtkcid=6470d5e0972d540001b47a2e&rtkcmpid=646e4503b6101200011de8de
Certificate
IssuerLet's Encrypt
Subjectdeefauph.com
Fingerprint31:9A:4F:89:02:91:AE:2A:8F:3A:45:32:15:99:BC:91:72:5F:DC:02
ValiditySun, 21 May 2023 05:15:27 GMT - Sat, 19 Aug 2023 05:15:26 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

POST /zone?&pub=0&zone_id=5491820&is_mobile=false&domain=www.cdflarecdn.com&var=&ymid=&var_3=&var_4=&dsig=&action=prerequest HTTP/1.1
Host: deefauph.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.cdflarecdn.com
DNT: 1
Connection: keep-alive
Referer: https://www.cdflarecdn.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
TE: trailers

HTTP/2 200 OK
server: nginx
date: Fri, 26 May 2023 15:53:18 GMT
content-length: 0
x-trace-id: d06786b4fbcfbc326298f72e92dd279b
access-control-allow-origin: https://www.cdflarecdn.com
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept
strict-transport-security: max-age=1
x-content-type-options: nosniff
X-Firefox-Spdy: h2

www.cdflarecdn.com/sw-check-permissions-8bbee.js

198.50.224.42

200 OK

293 B

URL GET HTTP/1.1
www.cdflarecdn.com/sw-check-permissions-8bbee.js
IP
198.50.224.42:443
ASN
#16276 OVH SAS

Requested by
https://www.cdflarecdn.com/lp-ach/survey-ke-3ld0p-01/?&td=t.cdimg.org&campaignid=646e4503b6101200011de8de&sourceid=5c10d5056a25120001760933&sub1=&sub2=&ref_id=(ref_id}&rtkcid=6470d5e0972d540001b47a2e&rtkcmpid=646e4503b6101200011de8de
Certificate
IssuerSectigo Limited
Subjectwww.cdflarecdn.com
Fingerprint4D:9D:9E:BE:6E:BC:B8:8C:4B:D6:0A:5D:9A:FA:27:0C:22:67:C1:5F
ValidityMon, 24 Oct 2022 00:00:00 GMT - Tue, 24 Oct 2023 23:59:59 GMT

File type
Java source, ASCII text
Size
293 B (293 bytes)
Hash
62c3a518514607d04ce5b6b904f6d934
e48c41c80014e4f86b3e991e15e86a044dc4cccf
3ddd5ffc49ccc8db5f816414ff417d71bf530f675250a419d810e8c11eb449f8

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /sw-check-permissions-8bbee.js HTTP/1.1
Host: www.cdflarecdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Referer: https://www.cdflarecdn.com/lp-ach/survey-ke-3ld0p-01/?&td=t.cdimg.org&campaignid=646e4503b6101200011de8de&sourceid=5c10d5056a25120001760933&sub1=&sub2=&ref_id=(ref_id}&rtkcid=6470d5e0972d540001b47a2e&rtkcmpid=646e4503b6101200011de8de
Cookie: rtkclickid-store=6470d5e0972d540001b47a2e
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Fri, 26 May 2023 15:53:18 GMT
Server: Apache
Last-Modified: Thu, 03 Nov 2022 09:14:57 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Cache-Control: max-age=172800, public, must-revalidate
Content-Length: 293
Keep-Alive: timeout=5, max=47
Connection: Keep-Alive
Content-Type: application/javascript

t.cdimg.org/view?clickid=6470d5e0972d540001b47a2e

37.48.87.182

204 No Content

0 B

URL GET HTTP/1.1
t.cdimg.org/view?clickid=6470d5e0972d540001b47a2e
IP
37.48.87.182:443
ASN
#60781 LeaseWeb Netherlands B.V.

Requested by
https://www.cdflarecdn.com/lp-ach/survey-ke-3ld0p-01/?&td=t.cdimg.org&campaignid=646e4503b6101200011de8de&sourceid=5c10d5056a25120001760933&sub1=&sub2=&ref_id=(ref_id}&rtkcid=6470d5e0972d540001b47a2e&rtkcmpid=646e4503b6101200011de8de
Certificate
IssuerSectigo Limited
Subjectt.cdimg.org
FingerprintEB:B8:CF:C7:7A:DC:16:B9:60:1C:7C:37:F4:78:2E:CA:24:FE:E4:7D
ValidityTue, 25 Oct 2022 00:00:00 GMT - Wed, 25 Oct 2023 23:59:59 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /view?clickid=6470d5e0972d540001b47a2e HTTP/1.1
Host: t.cdimg.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.cdflarecdn.com
DNT: 1
Connection: keep-alive
Referer: https://www.cdflarecdn.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 204 No Content
Server: nginx/1.20.2
Date: Fri, 26 May 2023 15:53:18 GMT
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range

www.cdflarecdn.com/favicon.ico

198.50.224.42

404 Not Found

36 B

URL GET HTTP/1.1
www.cdflarecdn.com/favicon.ico
IP
198.50.224.42:443
ASN
#16276 OVH SAS

Requested by
https://www.cdflarecdn.com/lp-ach/survey-ke-3ld0p-01/?&td=t.cdimg.org&campaignid=646e4503b6101200011de8de&sourceid=5c10d5056a25120001760933&sub1=&sub2=&ref_id=(ref_id}&rtkcid=6470d5e0972d540001b47a2e&rtkcmpid=646e4503b6101200011de8de
Certificate
IssuerSectigo Limited
Subjectwww.cdflarecdn.com
Fingerprint4D:9D:9E:BE:6E:BC:B8:8C:4B:D6:0A:5D:9A:FA:27:0C:22:67:C1:5F
ValidityMon, 24 Oct 2022 00:00:00 GMT - Tue, 24 Oct 2023 23:59:59 GMT

File type
ASCII text
Size
36 B (36 bytes)
Hash
4845f01eaa8068384625e302e9a4eb05
fb6ff8293fa45e17ba97f84954e7d1d5b0d38f87
8a482f2271a42c5f54c96e816a84340a6f2357a5b81f927d07d00788f5140a41

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: www.cdflarecdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.cdflarecdn.com/lp-ach/survey-ke-3ld0p-01/?&td=t.cdimg.org&campaignid=646e4503b6101200011de8de&sourceid=5c10d5056a25120001760933&sub1=&sub2=&ref_id=(ref_id}&rtkcid=6470d5e0972d540001b47a2e&rtkcmpid=646e4503b6101200011de8de
Cookie: rtkclickid-store=6470d5e0972d540001b47a2e
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 404 Not Found
Date: Fri, 26 May 2023 15:53:18 GMT
Server: Apache
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 36
Keep-Alive: timeout=5, max=46
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8

deefauph.com/pfe/current/micro.tag.min.js?z=5491820&sw=/sw-check-permissions-8bbee.js

139.45.197.251

200 OK

42 kB

URL GET HTTP/2
deefauph.com/pfe/current/micro.tag.min.js?z=5491820&sw=/sw-check-permissions-8bbee.js
IP
139.45.197.251:443
ASN
#9002 RETN Limited

Requested by
https://www.cdflarecdn.com/lp-ach/survey-ke-3ld0p-01/?&td=t.cdimg.org&campaignid=646e4503b6101200011de8de&sourceid=5c10d5056a25120001760933&sub1=&sub2=&ref_id=(ref_id}&rtkcid=6470d5e0972d540001b47a2e&rtkcmpid=646e4503b6101200011de8de
Certificate
IssuerLet's Encrypt
Subjectdeefauph.com
Fingerprint31:9A:4F:89:02:91:AE:2A:8F:3A:45:32:15:99:BC:91:72:5F:DC:02
ValiditySun, 21 May 2023 05:15:27 GMT - Sat, 19 Aug 2023 05:15:26 GMT

File type
C source, ASCII text, with very long lines (41979), with no line terminators
Size
42 kB (41979 bytes)
Hash
d44fd7b96fceca8f81b472766025d0d2
237541097413baf5cd3e703413f8bc9ea538a4db
b6c7c1e7fb1a437f100bdcb253df8b0468f130835fbb82c5687505a099997d16

HTTP Headers

GET /pfe/current/micro.tag.min.js?z=5491820&sw=/sw-check-permissions-8bbee.js HTTP/1.1
Host: deefauph.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.cdflarecdn.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Fri, 26 May 2023 15:53:18 GMT
content-type: application/javascript
last-modified: Thu, 11 May 2023 14:20:13 GMT
etag: W/"645cf99d-a3fb"
access-control-allow-credentials: true
cache-control: no-cache
pragma: no-cache
content-encoding: gzip
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

OpenPhish

PhishTank

Fortinet's Web Filter

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (9)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL