Report Overview
URL
pub-1c3a35bc3f574b6684c3e0a322c562b4.r2.dev/mycarimage.html
Finishing URL
pub-1c3a35bc3f574b6684c3e0a322c562b4.r2.dev/mycarimage.html
IP / ASN
104.18.54.45
Title
Sign in to your Office365 account
Phishing - Microsoft
Detections
urlquery
2
Network Intrusion Detection
1
Threat Detection Systems
5
Host Summary
| Host | Rank | Registered | First Seen | Last Seen | Sent | Received | IP | Fingerprints |
|---|---|---|---|---|---|---|---|---|
cdnjs.cloudflare.com | 1222 | 2009-02-17 | 2012-05-23 | 2026-05-31 | 531 B | 90 kB | 104.17.25.14 |  |
aadcdn.msauth.net | 5248 | 2018-10-25 | 2018-11-19 | 2026-06-03 | 531 B | 2.6 kB |  13.107.246.53 |  |
pub-1c3a35bc3f574b6684c3e0a322c562b4.r2.dev 10 alert(s) on this Host | unknown | 2022-08-23 | 2023-11-23 | 2026-06-04 | 1.1 kB | 47 kB | 104.18.54.45 |   |
cdn-jm-tools.web.app 4 alert(s) on this Host | unknown | 2019-01-08 | 2021-05-28 | 2026-05-28 | 2.1 kB | 109 kB | 199.36.158.100 |  |
Cloudflare (CDN)
Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.Azure Front Door (Load balancers)
Azure Front Door is a scalable and secure entry point for fast delivery of your global web applications.Azure (PaaS)
Azure is a cloud computing service for building, testing, deploying, and managing applications and services through Microsoft-managed data centers.jQuery:3.5.0 (JavaScript libraries)
jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.cdnjs (CDN)
cdnjs is a free distributed JS library delivery service.Firebase (Databases, Development)
Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.Related reports
Network Intrusion Detection Systems
Suricata /w Emerging Threats Pro
| Timestamp | Severity | Source IP | Destination IP | Alert |
|---|---|---|---|---|
| low | Client IP | 104.18.54.45 | ET INFO Observed Cloudflare R2 Public Bucket (r2 .dev) Domain in TLS SNI |
Threat Detection Systems
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| Cloudflare DNS | pub-1c3a35bc3f574b6684c3e0a322c562b4.r2.dev | malicious | Sinkholed |
| OpenDNS | pub-1c3a35bc3f574b6684c3e0a322c562b4.r2.dev | phishing | Phishing Block |
| DNS4EU | pub-1c3a35bc3f574b6684c3e0a322c562b4.r2.dev | malicious | Sinkholed |
| Quad9 DNS | pub-1c3a35bc3f574b6684c3e0a322c562b4.r2.dev | malicious | Sinkholed |
| DNS4EU | cdn-jm-tools.web.app | malicious | Sinkholed |
JavaScript (3)
No JavaScripts
HTTP Transactions (8)
| URL | IP | Response | Size |
|---|