Report - bafybeifxeqi2m54kzci2kxyqevvn3ws2jrtjgp2d7tr6cirvpp5oox47xa.ipfs.dweb.link/

Report Overview

Submitted URL
bafybeifxeqi2m54kzci2kxyqevvn3ws2jrtjgp2d7tr6cirvpp5oox47xa.ipfs.dweb.link/
IP
209.94.90.2
ASN
#40680 PROTOCOL
Submitted
2024-04-25 16:51:28
Access
public
Website Title
410 Gone
Final URL
bafybeifxeqi2m54kzci2kxyqevvn3ws2jrtjgp2d7tr6cirvpp5oox47xa.ipfs.dweb.link/
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
1
Threat Detection Systems
0

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
bafybeifxeqi2m54kzci2kxyqevvn3ws2jrtjgp2d7tr6cirvpp5oox47xa.ipfs.dweb.link	unknown	2017-02-24	2024-01-17	2024-04-12	1.1 kB	9.4 kB	209.94.90.3

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Timestamp	Severity	Source IP	Destination IP	Alert
2024-04-25 16:51:03	low	Client IP	209.94.90.2	ET HUNTING Observed IPFS Gateway Domain (ipfs .dweb .link) in TLS SNI

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (1)

	URL	Size	First Seen	Last Seen
	bafybeifxeqi2m54kzci2kxyqevvn3ws2jrtjgp2d7tr6cirvpp5oox47xa.ipfs.dweb.link/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js	1.2 kB	2023-03-07	2024-05-05
Pretty URL bafybeifxeqi2m54kzci2kxyqevvn3ws2jrtjgp2d7tr6cirvpp5oox47xa.ipfs.dweb.link/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js IP 209.94.90.2 ASN #40680 PROTOCOL Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:02:00 Last Seen2024-05-05 14:09:32 Times Seen55971 Hash 9e8f56e8e1806253ba01a95cfc3d392c a8af90d7482e1e99d03de6bf88fed2315c5dd728 2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8 Loading...

HTTP Transactions (2)

	URL	IP	Response	Size
	bafybeifxeqi2m54kzci2kxyqevvn3ws2jrtjgp2d7tr6cirvpp5oox47xa.ipfs.dweb.link/	209.94.90.3	410 Gone	167 B
URL User Request GET HTTP/3 bafybeifxeqi2m54kzci2kxyqevvn3ws2jrtjgp2d7tr6cirvpp5oox47xa.ipfs.dweb.link/ IP 209.94.90.3:443 ASN #40680 PROTOCOL Certificate IssuerLet's Encrypt Subjectdweb.link FingerprintF6:88:14:38:C6:3C:1C:FC:F0:D3:23:B2:F2:72:50:9D:5C:DC:BE:D2 ValidityTue, 16 Apr 2024 16:54:22 GMT - Mon, 15 Jul 2024 16:54:21 GMT File type HTML document, ASCII text, with CRLF line terminators Size 167 B (167 bytes) Hash 0104c301c5e02bd6148b8703d19b3a73 7436e0b4b1f8c222c38069890b75fa2baf9ca620 446a6087825fa73eadb045e5a2e9e2adf7df241b571228187728191d961dda1f HTTP Headers `GET / HTTP/1.1 Host: bafybeifxeqi2m54kzci2kxyqevvn3ws2jrtjgp2d7tr6cirvpp5oox47xa.ipfs.dweb.link User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate DNT: 1 Connection: keep-alive Upgrade-Insecure-Requests: 1 Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 301 Moved Permanently Date: Thu, 25 Apr 2024 16:51:03 GMT Content-Type: text/html Content-Length: 167 Connection: keep-alive Cache-Control: max-age=3600 Expires: Thu, 25 Apr 2024 17:51:03 GMT Location: https://bafybeifxeqi2m54kzci2kxyqevvn3ws2jrtjgp2d7tr6cirvpp5oox47xa.ipfs.dweb.link/ Vary: Accept-Encoding Server: cloudflare CF-RAY: 879fd5ec9d271c0a-OSL alt-svc: h3=":443"; ma=86400`

	bafybeifxeqi2m54kzci2kxyqevvn3ws2jrtjgp2d7tr6cirvpp5oox47xa.ipfs.dweb.link/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js	209.94.90.2	200 OK	8.4 kB
URL GET HTTP/3 bafybeifxeqi2m54kzci2kxyqevvn3ws2jrtjgp2d7tr6cirvpp5oox47xa.ipfs.dweb.link/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js IP 209.94.90.2:443 ASN #40680 PROTOCOL Requested by https://bafybeifxeqi2m54kzci2kxyqevvn3ws2jrtjgp2d7tr6cirvpp5oox47xa.ipfs.dweb.link/ Certificate IssuerLet's Encrypt Subjectdweb.link FingerprintF6:88:14:38:C6:3C:1C:FC:F0:D3:23:B2:F2:72:50:9D:5C:DC:BE:D2 ValidityTue, 16 Apr 2024 16:54:22 GMT - Mon, 15 Jul 2024 16:54:21 GMT File type gzip compressed data, from Unix Size 8.4 kB (8443 bytes) Hash 50d0c2a7c11a4065017d42415995707b 4749c9664a4f71936902ac6b2986046f751e0166 bbe9afc799ecf23a7f9f11f29d68730bc080a5294a2505e22af3fe74400b7d90 HTTP Headers GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1 Host: bafybeifxeqi2m54kzci2kxyqevvn3ws2jrtjgp2d7tr6cirvpp5oox47xa.ipfs.dweb.link User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://bafybeifxeqi2m54kzci2kxyqevvn3ws2jrtjgp2d7tr6cirvpp5oox47xa.ipfs.dweb.link/ Cookie: __cflb=02DiuFaknJax8vBPJtnVscahW9ji4oP3uiXSh5vJ9AVrt Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache TE: trailers `HTTP/3 200 OK date: Thu, 25 Apr 2024 16:51:04 GMT content-type: application/javascript last-modified: Fri, 19 Apr 2024 20:54:07 GMT etag: W/"6622d9ef-4d7" vary: Accept-Encoding server: cloudflare cf-ray: 879fd5edfb98b4f3-OSL x-frame-options: DENY x-content-type-options: nosniff expires: Sat, 27 Apr 2024 16:51:04 GMT cache-control: max-age=172800, public content-encoding: gzip`