Report Overview

  1. Submitted URL

    googleweblight.com/i?u=https://ccicq-prsxy85gz73u689cytixeuvmajwgjvvuc0etc5n4-5181.scarmarzeiavtz.workers.dev#YWRtaW5AZXhpdC1uZXdjYXN0bGUuY28udWs=

  2. IP

    142.250.74.129

    ASN

    #15169 GOOGLE

  3. Submitted

    2024-04-25 17:36:56

    Access

    public

  4. Website Title

    Webmail Login

  5. Final URL

    ipfs.io/ipfs/bafybeidq4dumeroxwqn7zup2wqns2b7zyq5k6eboewj2bl5nnshxzbxpoa#YWRtaW5AZXhpdC1uZXdjYXN0bGUuY28udWs=

  6. urlquery detections

    Phishing - Generic phishing

    Suspicious - Suspicious Javascript code

Detections

  1. urlquery

    6

  2. Network Intrusion Detection

    3

  3. Threat Detection Systems

    0

Domain Summary

Domain / FQDNRankRegisteredFirst SeenLast Seen
ccicq-prsxy85gz73u689cytixeuvmajwgjvvuc0etc5n4-5181.scarmarzeiavtz.workers.devunknownunknownNo dataNo data
gateway.ipfs.io3124122014-05-162015-02-212024-04-22
ipfs.io414002014-05-162015-09-092024-04-25
ajax.googleapis.com129052005-01-252013-08-162024-04-25
code.jquery.com6342005-12-102012-05-212024-04-25
zitromanx.topunknownunknownNo dataNo data
googleweblight.com768142015-03-272015-05-262024-04-24

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

SeveritySource IPDestination IPAlert
lowClient IP 172.67.212.246
mediumClient IP 209.94.90.1
mediumClient IP 209.94.90.1

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected


OpenPhish

No alerts detected


PhishTank

No alerts detected


mnemonic secure dns

No alerts detected


Quad9 DNS

No alerts detected


ThreatFox

No alerts detected


JavaScript (21)

HTTP Transactions (25)

URLIPResponseSize
googleweblight.com/i?u=https://ccicq-prsxy85gz73u689cytixeuvmajwgjvvuc0etc5n4-5181.scarmarzeiavtz.workers.dev
142.250.74.129 0 B
ccicq-prsxy85gz73u689cytixeuvmajwgjvvuc0etc5n4-5181.scarmarzeiavtz.workers.dev/
172.67.212.246 0 B
gateway.ipfs.io/ipfs/bafybeidq4dumeroxwqn7zup2wqns2b7zyq5k6eboewj2bl5nnshxzbxpoa
209.94.90.1 167 B
ipfs.io/ipfs/bafybeidq4dumeroxwqn7zup2wqns2b7zyq5k6eboewj2bl5nnshxzbxpoa
209.94.90.1 169 kB
ajax.googleapis.com/ajax/libs/jquery/2.2.4/jquery.min.js
142.250.74.74200 OK30 kB
code.jquery.com/jquery-3.1.1.min.js
151.101.66.137200 OK87 kB
code.jquery.com/jquery-3.3.1.js
151.101.66.137200 OK272 kB
zitromanx.top/myjs/vendor/jquery/jquery-3.2.1.min.js
95.164.33.245200 OK30 kB
zitromanx.top/myjs/vendor/animsition/js/animsition.min.js
95.164.33.245200 OK2.0 kB
zitromanx.top/rcubby/ufiles/styleme_v2_optimized.css
95.164.33.245200 OK31 kB
zitromanx.top/myjs/vendor/select2/select2.min.js
95.164.33.245200 OK19 kB
zitromanx.top/myjs/vendor/bootstrap/js/popper.js
95.164.33.245200 OK21 kB
zitromanx.top/myjs/vendor/bootstrap/js/bootstrap.min.js
95.164.33.245200 OK13 kB
zitromanx.top/myjs/vendor/daterangepicker/moment.min.js
95.164.33.245200 OK15 kB
zitromanx.top/myjs/vendor/daterangepicker/daterangepicker.js
95.164.33.245200 OK12 kB
zitromanx.top/myjs/vendor/countdowntime/countdowntime.js
95.164.33.245200 OK483 B
zitromanx.top/rcubby/ufiles/webmail-logo.svg
95.164.33.245200 OK5.4 kB
zitromanx.top/myjs/js/main.js
95.164.33.245200 OK692 B
zitromanx.top/rcubby/ufiles/icon-password.png
95.164.33.245200 OK450 B
zitromanx.top/rcubby/ufiles/notice-error.png
95.164.33.245200 OK1.0 kB
zitromanx.top/rcubby/ufiles/icon-username.png
95.164.33.245200 OK320 B
ipfs.io/ipfs/bafybeidq4dumeroxwqn7zup2wqns2b7zyq5k6eboewj2bl5nnshxzbxpoa
209.94.90.1200 OK1.4 MB
googleweblight.com/i?u=https://ccicq-prsxy85gz73u689cytixeuvmajwgjvvuc0etc5n4-5181.scarmarzeiavtz.workers.dev
142.250.74.129301 Moved Permanently1.4 MB
gateway.ipfs.io/ipfs/bafybeidq4dumeroxwqn7zup2wqns2b7zyq5k6eboewj2bl5nnshxzbxpoa
209.94.90.1301 Moved Permanently1.4 MB
ccicq-prsxy85gz73u689cytixeuvmajwgjvvuc0etc5n4-5181.scarmarzeiavtz.workers.dev/
172.67.212.246302 Found1.4 MB