Report Overview

  1. Visited public
    2025-06-21 14:36:21
    Tags
  2. URL

    8c25d0b5.651febc8e42207b03370f91a.workers.dev/?qrc=cGV0ZXIub2dyYW1Ac2x1cnBtYWlsLm5ldA==

  3. Finishing URL

    healthy06.xyz/?xlu205m99=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%3D%3D

  4. IP / ASN
    104.21.47.140

    #13335 CLOUDFLARENET

    Title
    54aotzka0t

  5. Phishing - NakedPages Phishing Kit

Detections
urlquery
13
Network Intrusion Detection
2
Threat Detection Systems
14

Domain Summary

Domain / FQDNRankRegisteredFirst SeenLast Seen
aadcdn.msftauth.net14552018-10-252018-11-192025-06-18
challenges.cloudflare.comunknown2009-02-172021-10-202025-06-18
healthy06.xyzunknown2025-06-192025-06-202025-06-20
csp.microsoft.com79511991-05-022021-03-092025-06-20
res.public.onecdn.static.microsoftunknown2023-05-052024-03-212025-06-19
raceworld401.comunknown2025-06-192025-06-202025-06-20
8c25d0b5.651febc8e42207b03370f91a.workers.devunknown2019-02-082025-06-202025-06-20

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

SeveritySource IPDestination IPAlert
lowClient IP 172.67.171.79
ET INFO Observed Cloudflare workers.dev Domain in TLS SNI
lowClient IP 192.0.78.27
ETPRO INFO Referer Obfuscation/Hiding Service Domain (href .li in TLS SNI)

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected


OpenPhish

No alerts detected


PhishTank

No alerts detected


Quad9 DNS
SeverityIndicatorAlert
mediumhealthy06.xyzSinkholed
mediumhealthy06.xyzSinkholed
mediumhealthy06.xyzSinkholed
mediumhealthy06.xyzSinkholed
mediumhealthy06.xyzSinkholed
mediumhealthy06.xyzSinkholed
mediumhealthy06.xyzSinkholed

ThreatFox

No alerts detected


JavaScript (217)

HTTP Transactions (55)

URLIPResponseSize
GET aadcdn.msftauth.net/ests/2.1/content/cdnbundles/converged.v2.login.min_81imvbluez-v5hbzpkxfcg2.css
23.36.77.249200 OK113 kB
POST challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/flow/ov1/813069561:1750512741:qMO1cQjKJ0hy_l37PxL_yLn_7b05TyTojNiKDaYwU0s/95343bd7883f712e/OAQdtl3AcC12IO_VVQLBpDUONVbnzQ_H.tBCaBGYUvU-1750516540-1.2.1.1-DyHOkoB13OeWGsk_I0Dg_ZynXd7Scs1DqVLEn3ZwON53ZvPi6kD1dkBrbIco6cqH
104.18.94.41200 OK5.0 kB
GET healthy06.xyz/mail/?login_hint=peter.ogram%40slurpmail.net&bO=4&authRedirect=true&state=0
91.186.210.20302 Found44 kB
GET healthy06.xyz/?xlu205m99=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
91.186.210.20200 OK44 kB
POST csp.microsoft.com/report/ESTS-UX-All
13.107.246.67200 OK2 B
POST csp.microsoft.com/report/ESTS-UX-All
13.107.246.67200 OK2 B
GET res.public.onecdn.static.microsoft/owamail/hashed-v1/scripts/owa.mailindex.bfe0a89e.js
23.36.76.179200 OK371 kB
GET res.public.onecdn.static.microsoft/owamail/hashed-v1/scripts/owa.15509.m.c29b4020.js
23.36.76.179200 OK18 kB
GET res.public.onecdn.static.microsoft/owamail/hashed-v1/scripts/owa.AppBoot.m.ac8f60c7.css
23.36.76.179200 OK117 kB
GET healthy06.xyz/mail/?bO=4&msalAuthRedirect=true
91.186.210.20302 Found44 kB
GET challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/d/95343bd7883f712e/1750516540639/F7LYul8Ncgb9gJN
104.18.94.41200 OK222 B
GET res.public.onecdn.static.microsoft/owamail/hashed-v1/scripts/owa.mail.runtime.c77c251b.js
23.36.76.179200 OK227 kB
GET aadcdn.msftauth.net/shared/1.0/content/images/microsoft_logo_564db913a7fa0ca42727161c6d031bef.svg
23.36.77.249200 OK3.7 kB
GET res.public.onecdn.static.microsoft/owamail/hashed-v1/scripts/owa.94868.m.211888ef.js
23.36.76.179200 OK301 kB
GET healthy06.xyz/owa/?login_hint=peter.ogram%40slurpmail.net&bO=4&state=1&redirectTo=aHR0cHM6Ly9vdXRsb29rLm9mZmljZS5jb20vbWFpbC8_Yk89NA
91.186.210.20302 Found44 kB
GET healthy06.xyz/mail/?login_hint=peter.ogram%40slurpmail.net
91.186.210.20200 OK13 kB
GET res.public.onecdn.static.microsoft/owamail/hashed-v1/scripts/owa.3732.m.f4d27d3e.js
23.36.76.179200 OK19 kB
GET aadcdn.msftauth.net/shared/1.0/content/images/applogos/53_7a3c80bf9694448bac31a9589d2e9e92.png
23.36.77.249200 OK5.1 kB
GET healthy06.xyz/?qrc=peter.ogram%40slurpmail.net
91.186.210.20302 Moved Temporarily13 kB
GET res.public.onecdn.static.microsoft/assets/mail/pwa/v1/pngs/apple-touch-icon.png
23.36.76.179200 OK11 kB
POST csp.microsoft.com/report/ESTS-UX-All
13.107.246.67200 OK2 B
GET aadcdn.msftauth.net/shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_e394c2449ea71bf1122e.js
23.36.77.249200 OK407 kB
GET aadcdn.msftauth.net/shared/1.0/content/images/appbackgrounds/49_6ffe0a92d779c878835b40171ffc2e13.jpg
23.36.77.249200 OK18 kB
GET raceworld401.com/?okdiicvl&qrc=cGV0ZXIub2dyYW1Ac2x1cnBtYWlsLm5ldA==
91.186.210.20200 OK330 B
GET res.public.onecdn.static.microsoft/owamail/hashed-v1/scripts/owa.15509.m.c29b4020.js
23.36.76.179200 OK18 kB
GET aadcdn.msftauth.net/shared/1.0/content/js/asyncchunk/convergedlogin_pstringcustomizationhelper_087637d011e8395b880c.js
23.36.77.249200 OK114 kB
GET res.public.onecdn.static.microsoft/owamail/hashed-v1/scripts/owa.AppBoot.m.ba268412.js
23.36.76.179200 OK1.9 MB
GET res.public.onecdn.static.microsoft/owamail/hashed-v1/scripts/owa.94868.m.211888ef.js
23.36.76.179200 OK301 kB
GET res.public.onecdn.static.microsoft/owamail/hashed-v1/scripts/owa.3732.m.f4d27d3e.js
23.36.76.179200 OK19 kB
GET aadcdn.msftauth.net/ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_l8i1wwom7wbodda4l9b6dw2.js
23.36.77.249200 OK59 kB
GET challenges.cloudflare.com/turnstile/v0/api.js?onload=onloadTurnstileCallback
104.18.94.41302 Found49 kB
GET challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/pat/95343bd7883f712e/1750516540635/93506f9594d219931817f9dffb848dd392ca6a84b64a56bb68a4ca6f186e7bdb/hVSqv26-feedj6p
104.18.94.41401 Unauthorized1 B
OPTIONS raceworld401.com/?okdiicvl&qrc=cGV0ZXIub2dyYW1Ac2x1cnBtYWlsLm5ldA==
91.186.210.20200 OK0 B
GET healthy06.xyz/?dataXX0=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1cmwiOiJodHRwczovL2hlYWx0aHkwNi54eXovIiwiZG9tYWluIjoiaGVhbHRoeTA2Lnh5eiIsImtleSI6IjZQajFZbXI0SjRscCIsInFyYyI6InBldGVyLm9ncmFtQHNsdXJwbWFpbC5uZXQiLCJpYXQiOjE3NTA1MTY1NTMsImV4cCI6MTc1MDUxNjY3M30.WB6Ovc09U56pYQlyCwe1CfvZ3g4aXrhHZ1Z65aQGMe0
91.186.210.20302 Found13 kB
GET res.public.onecdn.static.microsoft/owamail/hashed-v1/scripts/owa.MsalAuth.m.bc256ba7.js
23.36.76.179200 OK24 kB
GET challenges.cloudflare.com/turnstile/v0/g/180b6a431d85/api.js
104.18.94.41200 OK49 kB
GET challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/6yk8q/0x4AAAAAABhsNseRriDdmrcj/auto/fbE/new/normal/auto/
104.18.94.41200 OK27 kB
GET aadcdn.msftauth.net/shared/1.0/content/js/ConvergedLogin_PCore_OEvO7mxU7b_DLsIiBV_2pw2.js
23.36.77.249200 OK460 kB
GET aadcdn.msftauth.net/shared/1.0/content/js/oneDs_ef0b27aaaeb8a0ec7ee7.js
23.36.77.249200 OK190 kB
GET res.public.onecdn.static.microsoft/owamail/hashed-v1/scripts/owa.MsalAuth.m.bc256ba7.js
23.36.76.179200 OK24 kB
GET aadcdn.msftauth.net/shared/1.0/content/images/appbackgrounds/49-small_2055002f2daae2ed8f69f03944c0e5d9.jpg
23.36.77.249200 OK987 B
GET challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/cmg/1
104.18.94.41200 OK86 B
GET res.public.onecdn.static.microsoft/owamail/hashed-v1/scripts/owa.45071.m.8bafaddd.js
23.36.76.179200 OK2.8 MB
POST csp.microsoft.com/report/ESTS-UX-All
13.107.246.67200 OK2 B
GET res.public.onecdn.static.microsoft/owamail/hashed-v1/scripts/owa.worker.data.6b7850d2.js
23.36.76.179200 OK287 kB
POST csp.microsoft.com/report/ESTS-UX-All
13.107.246.67200 OK2 B
GET 8c25d0b5.651febc8e42207b03370f91a.workers.dev/?qrc=cGV0ZXIub2dyYW1Ac2x1cnBtYWlsLm5ldA==
172.67.171.79200 OK6.8 kB
GET 8c25d0b5.651febc8e42207b03370f91a.workers.dev/favicon.ico
172.67.171.79200 OK6.8 kB
POST csp.microsoft.com/report/ESTS-UX-All
13.107.246.67200 OK2 B
GET aadcdn.msftauth.net/shared/1.0/content/images/signin-options_3e3f6b73c3f310c31d2c4d131a8ab8c6.svg
23.36.77.249200 OK1.6 kB
GET challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/orchestrate/chl_api/v1?ray=95343bd7883f712e&lang=auto
104.18.94.41200 OK143 kB
POST challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/flow/ov1/813069561:1750512741:qMO1cQjKJ0hy_l37PxL_yLn_7b05TyTojNiKDaYwU0s/95343bd7883f712e/OAQdtl3AcC12IO_VVQLBpDUONVbnzQ_H.tBCaBGYUvU-1750516540-1.2.1.1-DyHOkoB13OeWGsk_I0Dg_ZynXd7Scs1DqVLEn3ZwON53ZvPi6kD1dkBrbIco6cqH
104.18.94.41200 OK284 kB
POST csp.microsoft.com/report/ESTS-UX-All
13.107.246.67200 OK2 B
POST challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/flow/ov1/813069561:1750512741:qMO1cQjKJ0hy_l37PxL_yLn_7b05TyTojNiKDaYwU0s/95343bd7883f712e/OAQdtl3AcC12IO_VVQLBpDUONVbnzQ_H.tBCaBGYUvU-1750516540-1.2.1.1-DyHOkoB13OeWGsk_I0Dg_ZynXd7Scs1DqVLEn3ZwON53ZvPi6kD1dkBrbIco6cqH
104.18.94.41200 OK30 kB
GET res.public.onecdn.static.microsoft/assets/framework/microsoft.svg
23.36.76.179200 OK3.2 kB