| aadcdn.msauth.net/shared/1.0/content/images/microsoft_logo_ee5c8d9fb6248c938fd0dc19370e90bd.svg | 13.107.246.53 | 200 OK | 1.4 kB |
URL GET HTTP/2aadcdn.msauth.net/shared/1.0/content/images/microsoft_logo_ee5c8d9fb6248c938fd0dc19370e90bd.svg IP13.107.246.53:443 ASN#8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested byhttps://xxxgffhgtrkffh.dkddkdjffhfkfkfjffhfkfkjffh.workers.dev/ CertificateIssuerDigiCert Inc Subjectaadcdn.msauth.net FingerprintEB:7C:D1:4E:EF:B5:D4:72:25:0B:1A:AF:5F:10:3D:EA:13:80:5A:47 ValidityMon, 29 Jan 2024 00:00:00 GMT - Wed, 29 Jan 2025 23:59:59 GMT
File typeSVG Scalable Vector Graphics image Hashee5c8d9fb6248c938fd0dc19370e90bd d01a22720918b781338b5bbf9202b241a5f99ee4 04d29248ee3a13a074518c93a18d6efc491bf1f298f9b87fc989a6ae4b9fad7a
GET /shared/1.0/content/images/microsoft_logo_ee5c8d9fb6248c938fd0dc19370e90bd.svg HTTP/1.1
Host: aadcdn.msauth.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://xxxgffhgtrkffh.dkddkdjffhfkfkfjffhfkfkjffh.workers.dev/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 19 Apr 2024 04:08:22 GMT
content-type: image/svg+xml
content-length: 1435
cache-control: public, max-age=31536000
content-encoding: gzip
last-modified: Fri, 17 Jan 2020 19:28:38 GMT
etag: 0x8D79B8373CB2849
x-ms-request-id: b3f4385c-101e-003b-10d5-90e198000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
access-control-allow-origin: *
x-azure-ref: 20240419T040822Z-17f9dd4c48bw7hdgb98vwdygcn0000000320000000002ywr
x-fd-int-roxy-purgeid: 4554691
x-cache: TCP_HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| aadcdn.msauth.net/shared/1.0/content/images/signin-options_4e48046ce74f4b89d45037c90576bfac.svg | 13.107.246.53 | 200 OK | 621 B |
URL GET HTTP/2aadcdn.msauth.net/shared/1.0/content/images/signin-options_4e48046ce74f4b89d45037c90576bfac.svg IP13.107.246.53:443 ASN#8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested byhttps://xxxgffhgtrkffh.dkddkdjffhfkfkfjffhfkfkjffh.workers.dev/ CertificateIssuerDigiCert Inc Subjectaadcdn.msauth.net FingerprintEB:7C:D1:4E:EF:B5:D4:72:25:0B:1A:AF:5F:10:3D:EA:13:80:5A:47 ValidityMon, 29 Jan 2024 00:00:00 GMT - Wed, 29 Jan 2025 23:59:59 GMT
File typeSVG Scalable Vector Graphics image Hash4e48046ce74f4b89d45037c90576bfac 4a41b3b51ed787f7b33294202da72220c7cd2c32 8e6db1634f1812d42516778fc890010aa57f3e39914fb4803df2c38abbf56d93
GET /shared/1.0/content/images/signin-options_4e48046ce74f4b89d45037c90576bfac.svg HTTP/1.1
Host: aadcdn.msauth.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://xxxgffhgtrkffh.dkddkdjffhfkfkfjffhfkfkjffh.workers.dev/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 19 Apr 2024 04:08:22 GMT
content-type: image/svg+xml
content-length: 621
cache-control: public, max-age=31536000
content-encoding: gzip
last-modified: Tue, 10 Nov 2020 03:41:24 GMT
etag: 0x8D8852A7FA6B761
x-ms-request-id: 62b6b4bf-e01e-0078-507f-904f8f000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
access-control-allow-origin: *
x-azure-ref: 20240419T040822Z-17f9dd4c48bw7hdgb98vwdygcn0000000320000000002yws
x-fd-int-roxy-purgeid: 0
x-cache: TCP_HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| xxxgffhgtrkffh.dkddkdjffhfkfkfjffhfkfkjffh.workers.dev/favicon.ico | 188.114.97.1 | 200 OK | 2.7 kB |
URL GET HTTP/3xxxgffhgtrkffh.dkddkdjffhfkfkfjffhfkfkjffh.workers.dev/favicon.ico IP188.114.97.1:443
Requested byhttps://xxxgffhgtrkffh.dkddkdjffhfkfkfjffhfkfkjffh.workers.dev/ CertificateIssuerGoogle Trust Services LLC Subjectdkddkdjffhfkfkfjffhfkfkjffh.workers.dev Fingerprint42:A6:5B:9F:FA:3D:85:34:94:19:D6:2F:2B:71:C1:67:F7:97:2A:20 ValidityWed, 27 Mar 2024 09:50:07 GMT - Tue, 25 Jun 2024 09:50:06 GMT
File typeHTML document, ASCII text, with very long lines (9869) Hash44449c5bf3d6cbc643d1c46f155fd737 a6f4bbe1de23e3a58cd0a2e74f1a8119a9001a82 6fa229eab8d582facec6354db9f7d1a5d7e1c51b05dcec42761a4239d4313010
Analyzer | Verdict | Alert | urlquery | phishing | Phishing - Microsoft | OpenPhish | phishing | Office365 |
GET /favicon.ico HTTP/1.1
Host: xxxgffhgtrkffh.dkddkdjffhfkfkfjffhfkfkjffh.workers.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://xxxgffhgtrkffh.dkddkdjffhfkfkfjffhfkfkjffh.workers.dev/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 19 Apr 2024 04:08:23 GMT
content-type: text/html;charset=UTF-8
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=sOCjf8jSyfRm3zGs7WjCVcy0R1pFq5acyCZ0tl0NXfBk%2Bko4nNkiyt1O87oo4piWHQj5p0p1WXg8zhBhsoveWOYnm7SLNPTaamjyTciQ4b42qon19qAuRbPaYruxbMY41GqLYCjRZ6ch4Kn1pqdm4gMxJXHaM32c9GJjeibhWUaWaaCh9s20wtc%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 876a08785dbd569f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| xxxgffhgtrkffh.dkddkdjffhfkfkfjffhfkfkjffh.workers.dev/ | 188.114.97.1 | 200 OK | 7.7 kB |
URL User Request GET HTTP/2xxxgffhgtrkffh.dkddkdjffhfkfkfjffhfkfkjffh.workers.dev/ IP188.114.97.1:443
CertificateIssuerGoogle Trust Services LLC Subjectdkddkdjffhfkfkfjffhfkfkjffh.workers.dev Fingerprint42:A6:5B:9F:FA:3D:85:34:94:19:D6:2F:2B:71:C1:67:F7:97:2A:20 ValidityWed, 27 Mar 2024 09:50:07 GMT - Tue, 25 Jun 2024 09:50:06 GMT
File typeHTML document, ASCII text, with very long lines (9869) Hash44449c5bf3d6cbc643d1c46f155fd737 a6f4bbe1de23e3a58cd0a2e74f1a8119a9001a82 6fa229eab8d582facec6354db9f7d1a5d7e1c51b05dcec42761a4239d4313010
Analyzer | Verdict | Alert | urlquery | phishing | Phishing - Microsoft | OpenPhish | phishing | Office365 |
GET / HTTP/1.1
Host: xxxgffhgtrkffh.dkddkdjffhfkfkfjffhfkfkjffh.workers.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 19 Apr 2024 04:08:22 GMT
content-type: text/html;charset=UTF-8
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=jv0faycSlTrmzxszJ9Jr2EVbohJqxVT7ap305ifXuxBglfS5l%2FBkYtC%2FvaRpklLRD36JryoVHkMRa%2FJRNbB9ta%2Fhp7HCD%2FBCoP5v%2BXJYDF3QPpPt6Xz6Y9sFiJGlV%2BZO9Iq1qGSXisXw4iggQ06bSsN8ysb3rin3q3hQ6P9f1vJTOdjW89HoJe0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 876a0874db9fb518-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| www.linkpicture.com/q/Screen-Shot-2022-01-30-at-10.27.21-PM.png | 104.21.235.182 | 404 Not Found | 0 B |
URL GET HTTP/2www.linkpicture.com/q/Screen-Shot-2022-01-30-at-10.27.21-PM.png IP104.21.235.182:443
Requested byhttps://xxxgffhgtrkffh.dkddkdjffhfkfkfjffhfkfkjffh.workers.dev/ CertificateIssuerLet's Encrypt Subjectlinkpicture.com Fingerprint62:4F:48:67:0C:99:84:78:DC:20:04:F2:01:27:01:D2:59:AB:35:94 ValidityFri, 05 Apr 2024 08:24:47 GMT - Thu, 04 Jul 2024 08:24:46 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /q/Screen-Shot-2022-01-30-at-10.27.21-PM.png HTTP/1.1
Host: www.linkpicture.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://xxxgffhgtrkffh.dkddkdjffhfkfkfjffhfkfkjffh.workers.dev/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 404 Not Found
date: Fri, 19 Apr 2024 04:08:23 GMT
content-type: text/html
vary: Accept-Encoding
x-turbo-charged-by: LiteSpeed
cache-control: max-age=31536000
cf-cache-status: HIT
age: 36919
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=NmvXnynz7nLA4AiOY0rkG4TdzBuMD9XFx99HugvihbmfxQpG9E2%2BaAW9tDTbVHPYdrDrB%2BLKXaoiKE0ckU%2FVw9YGbCBdcPGyp6s%2BMD2h7QrOFKS9oPg2YUsyxGSpeKIzkk1s8m4i"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 876a0877bd638d56-HEL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| xxxgffhgtrkffh.dkddkdjffhfkfkfjffhfkfkjffh.workers.dev/style.css | 188.114.97.1 | 200 OK | 9.9 kB |
URL GET HTTP/3xxxgffhgtrkffh.dkddkdjffhfkfkfjffhfkfkjffh.workers.dev/style.css IP188.114.97.1:443
Requested byhttps://xxxgffhgtrkffh.dkddkdjffhfkfkfjffhfkfkjffh.workers.dev/ CertificateIssuerGoogle Trust Services LLC Subjectdkddkdjffhfkfkfjffhfkfkjffh.workers.dev Fingerprint42:A6:5B:9F:FA:3D:85:34:94:19:D6:2F:2B:71:C1:67:F7:97:2A:20 ValidityWed, 27 Mar 2024 09:50:07 GMT - Tue, 25 Jun 2024 09:50:06 GMT
File typeHTML document, ASCII text, with very long lines (9918), with no line terminators Hash9e6a6329a19fbec29e5ff47f161f60ba b5bab7e1604b8a4e5435272118829f6ade2e27d1 7ef3b3309eaec1a5bc585de778ffbec483a57d092bc68d179a4995ce70c543ea
Analyzer | Verdict | Alert | urlquery | phishing | Phishing - Microsoft | OpenPhish | phishing | Office365 |
GET /style.css HTTP/1.1
Host: xxxgffhgtrkffh.dkddkdjffhfkfkfjffhfkfkjffh.workers.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://xxxgffhgtrkffh.dkddkdjffhfkfkfjffhfkfkjffh.workers.dev/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 19 Apr 2024 04:08:22 GMT
content-type: text/html;charset=UTF-8
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=QMJaGjmtd21qQnb4pVGxRwTHIml9DgVLLOcQNs%2Fce7K9zdHQvZ5DRLvFrL7MmMmm5lvm4Un3wngCMClBQTu4VqBRlzZ6gs4OE3ZXLycLDfeFW8rfdCx5aZKbrzMrL6QYvyf4AZX5dHeAkwIrAQeootbQq%2B0QEk%2FNNYo0GwFmpA7GXypWZTbCeak%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 876a0876ed2f569f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|