Report - jerfm.com/gkvd/hGhk/c92a75c4b4ec3f96babae9d23c9888c8/mfIvlQ/amJvb3RoQHNhbGVtc3RhdGUuZWR1

Report Overview

Submitted URL
jerfm.com/gkvd/hGhk/c92a75c4b4ec3f96babae9d23c9888c8/mfIvlQ/amJvb3RoQHNhbGVtc3RhdGUuZWR1
IP
192.99.71.92
ASN
#16276 OVH SAS
Submitted
2024-04-20 10:43:25
Access
public
Website Title
Just a moment...
Final URL
94e6f5a7.58598891ef09ac737cee0cf3.workers.dev/?qrc=jbooth@salemstate.edu
Tags
phishing microsoft outlook
urlquery detections
Phishing - Microsoft Outlook

Detections

urlquery
3
Network Intrusion Detection
1
Threat Detection Systems
8

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
jerfm.com	unknown	2023-06-27	2015-02-06	2024-04-18	542 B	291 B	192.99.71.92
94e6f5a7.58598891ef09ac737cee0cf3.workers.dev	unknown	2019-02-08	2024-04-12	2024-04-18	1.0 kB	5.8 kB	104.21.88.101
challenges.cloudflare.com	unknown	2009-02-17	2021-10-20	2024-04-19	4.9 kB	635 kB	104.17.3.184

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Timestamp	Severity	Source IP	Destination IP	Alert
2024-04-20 10:42:59	low	Client IP	104.21.88.101	ET INFO Observed Cloudflare workers.dev Domain in TLS SNI

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

Scan Date	Severity	Indicator	Alert
2024-04-16	medium	jerfm.com/gkvd/hGhk/c92a75c4b4ec3f96babae9d23c9888c8/mfIvlQ/amJvb3RoQHNhbGVtc3RhdGUuZWR1	Office365
2024-04-14	medium	94e6f5a7.58598891ef09ac737cee0cf3.workers.dev/	Office365
2024-04-14	medium	94e6f5a7.58598891ef09ac737cee0cf3.workers.dev/	Office365

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2024-04-20	medium	jerfm.com	Sinkholed

ThreatFox

No alerts detected

JavaScript (47)

	URL	Size	First Seen	Last Seen
	challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/dm905/0x4AAAAAAAW-lbDQI7I0Z-Zf/auto/normal	3.6 kB	2024-04-20	2024-04-20
Pretty URL challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/dm905/0x4AAAAAAAW-lbDQI7I0Z-Zf/auto/normal IP 104.17.3.184 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2024-04-20 12:43:25 Last Seen2024-04-20 12:43:25 Times Seen1 Hash 157b0110bd5c58d41a9734cf7fdd4a62 b918c3214e22bfea45ed3e3ddbfb5cc67911aa08 c4991f541a06a71df4df892d594ce4c33a7b65a4a1570e66ae7bbe335279097c Loading...

	94e6f5a7.58598891ef09ac737cee0cf3.workers.dev/?qrc=jbooth@salemstate.edu	311 B	2024-04-12	2024-04-28
Pretty URL 94e6f5a7.58598891ef09ac737cee0cf3.workers.dev/?qrc=jbooth@salemstate.edu IP 104.21.88.101 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2024-04-12 18:49:52 Last Seen2024-04-28 15:07:35 Times Seen74 Hash aaca1f4d05478b4382beddfdbd4a854b dba5271c67fe07d2293e8f75306005638e170bee 4c1c37fca410fb27d54bf20678f64596e20d27eb6ca088f60eaaa23394a97058 Loading...

	challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=877487e6ecc7b4ee	436 kB	2024-04-20	2024-04-20
Pretty URL challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=877487e6ecc7b4ee IP 104.17.3.184 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2024-04-20 12:43:25 Last Seen2024-04-20 12:43:27 Times Seen2 Hash 82791939d57ab7e0da2915064ba988f6 dc55f097e55e7b51e12c5b60cdeda388134fa92f d4090bfb910b650bb639c19a343d62794f3d310d7efbdf21d60655df5e87fd6d Loading...

	challenges.cloudflare.com/turnstile/v0/api.js?onload=onloadTurnstileCallback	42 kB	2024-04-18	2024-04-29
Pretty URL challenges.cloudflare.com/turnstile/v0/api.js?onload=onloadTurnstileCallback IP 104.17.3.184 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2024-04-18 21:08:49 Last Seen2024-04-29 16:17:51 Times Seen2594 Hash f94a2211ce789a95a7c67e8c660d63e8 f1fc19b6bcb96d0a905bf3192aaff0885ff9f36f 926dc3302f99ec05e4206e965ddeb7250f5910a8c38e82c7beafb724bbaaf37b Loading...

		Size	First Seen	Last Seen
	#1 Eval - 29b912dd34e47a18ea4ef019080bdb29	28 B	2024-04-20	2024-04-20
Pretty Observations First Seen2024-04-20 12:43:25 Last Seen2024-04-20 12:43:25 Times Seen1 Hash 29b912dd34e47a18ea4ef019080bdb29 4d84783158c286946a92790474e7c609790cf8a9 0325420b9d7ee67fc75b9f9ca10e45066adec18b84b687817604894c3c3f93b2 Loading...

	#2 Eval - 9bcdabaebd61edbf5987251aaf163ffd	28 B	2024-04-20	2024-04-20
Pretty Observations First Seen2024-04-20 12:43:25 Last Seen2024-04-20 12:43:25 Times Seen1 Hash 9bcdabaebd61edbf5987251aaf163ffd 8d52d0340a1d8d3b0a254fa83d11ec739975b15c 931d5474517c30b536648d3f4f8b900e06289c1dfbcb2607a32027720fdadd05 Loading...

	#3 Eval - 43c81e43a6e7d9140033055ff3e04983	62 B	2024-04-18	2024-04-29
Pretty Observations First Seen2024-04-18 21:08:51 Last Seen2024-04-29 16:17:50 Times Seen2736 Hash 43c81e43a6e7d9140033055ff3e04983 b0eca03913678cb38c488c7c79cc4f9d2755ea17 3f7ef931c657c4333a401c40e8b0b8d1ff3b164542af45e14242314c0ec39f34 Loading...

	#4 Eval - 4377e1e474635b3352189f9855574910	28 B	2024-04-20	2024-04-20
Pretty Observations First Seen2024-04-20 12:43:25 Last Seen2024-04-20 12:43:25 Times Seen1 Hash 4377e1e474635b3352189f9855574910 519868e22baa8fc849c0def881acedd90b2c8e26 e2c9d203ad0b348d319a09cdab28890c0039a42d5a83f364cee8f26fff05f4b7 Loading...

	#5 Eval - d55cd416cbbc591ff034805e10b26072	28 B	2024-04-20	2024-04-20
Pretty Observations First Seen2024-04-20 12:43:25 Last Seen2024-04-20 12:43:25 Times Seen1 Hash d55cd416cbbc591ff034805e10b26072 3faa965a094b856e8633051fb7834e769dac54b7 d40f62b54ffa9b45645bf305a538ceadd24d291472d5a543095ce232ec6296a0 Loading...

	#6 Eval - e6a40ae579c3e961045555be28c9c24b	28 B	2024-04-20	2024-04-20
Pretty Observations First Seen2024-04-20 12:43:25 Last Seen2024-04-20 12:43:25 Times Seen1 Hash e6a40ae579c3e961045555be28c9c24b 920cd2d472df1aaaddeb3692ec563c4869280805 fb775865b43fe501988cf510ce60376b6a4fe1c006cebb46e8a27938bfe0bfbc Loading...

	#7 Eval - a4ab3aad1e97784e9ae27c8c94745726	28 B	2024-04-20	2024-04-20
Pretty Observations First Seen2024-04-20 12:43:25 Last Seen2024-04-20 12:43:25 Times Seen1 Hash a4ab3aad1e97784e9ae27c8c94745726 f41a47b8c874c213f7d68556c3419b09265fed1f 8ea0415fab26e3fb82e82b75cae339db3699578cdb2825e4bf77489767f5208f Loading...

	#8 Eval - 2ff3bcc91b922e1904162512f0e85359	28 B	2024-04-20	2024-04-20
Pretty Observations First Seen2024-04-20 12:43:25 Last Seen2024-04-20 12:43:25 Times Seen1 Hash 2ff3bcc91b922e1904162512f0e85359 2f57caf28ce4e168f292d247abc3def8027fbd33 ee3753aecc10bac6b3522ed3f87091ce1aa03769bd648e3fa4eac7d46c465608 Loading...

	#9 Eval - 4f94c7319f053948d384821aa6f87384	28 B	2024-04-20	2024-04-20
Pretty Observations First Seen2024-04-20 12:43:25 Last Seen2024-04-20 12:43:25 Times Seen1 Hash 4f94c7319f053948d384821aa6f87384 c7488d90b6d3524cd6562ab4b0e1e0c24f8530b0 046dbd6ef4a0566c0135a45021ac54727465294665e8bc708a673d9294095ed7 Loading...

	#10 Eval - 878829db4c7178459d7131db4ce2d18c	28 B	2024-04-20	2024-04-20
Pretty Observations First Seen2024-04-20 12:43:25 Last Seen2024-04-20 12:43:25 Times Seen1 Hash 878829db4c7178459d7131db4ce2d18c 602d0e82138cf3aa0445f6ae767cf4bbf7b27824 8a1404d40b50c21fe2b2a585dc38a0f218cedae8328211c3eb51bbfe61b6f03d Loading...

	#11 Eval - ea1e7be66cd6b3606543c6c60e67c020	28 B	2024-04-20	2024-04-20
Pretty Observations First Seen2024-04-20 12:43:26 Last Seen2024-04-20 12:43:26 Times Seen1 Hash ea1e7be66cd6b3606543c6c60e67c020 cc6c4ba03ac03a443958d0aae116a6dad4411b5d 0976e4ccef671ccd3fe8a0da46226245cf85522165cd1cf18f12242280b07ff1 Loading...

	#12 Eval - c5388d0d5d0e44b282ed67b88dde4995	28 B	2024-04-20	2024-04-20
Pretty Observations First Seen2024-04-20 12:43:26 Last Seen2024-04-20 12:43:26 Times Seen1 Hash c5388d0d5d0e44b282ed67b88dde4995 27bdca5ae69f820f684bac026a0aeebd9d829570 21d593d80612a312e55e120aa8b75f7bb25abeac77faefc47246964b9a2510ba Loading...

	#13 Eval - 357adbfe1da09127b2501bbc654914c3	28 B	2024-04-20	2024-04-20
Pretty Observations First Seen2024-04-20 12:43:26 Last Seen2024-04-20 12:43:26 Times Seen1 Hash 357adbfe1da09127b2501bbc654914c3 74c8fdc69e919ae04d0cb4e4136253af87d3bb66 db43875bc062b95d6ab765bd59b4dc4700178c7f266847cc320235b72e4d3565 Loading...

	#14 Eval - 2435310ad27048ce11a59c8bded043ac	28 B	2024-04-20	2024-04-20
Pretty Observations First Seen2024-04-20 12:43:26 Last Seen2024-04-20 12:43:26 Times Seen1 Hash 2435310ad27048ce11a59c8bded043ac 4bec67d7a2c755b11a2dc1a3ffee72b5b736c6ad bd83042622729d66df1cd7180e25108faacaca20c6797e57cfbedac629945c86 Loading...

	#15 Eval - 55a3a780b735560c2a2776e51f334bf2	28 B	2024-04-20	2024-04-20
Pretty Observations First Seen2024-04-20 12:43:26 Last Seen2024-04-20 12:43:26 Times Seen1 Hash 55a3a780b735560c2a2776e51f334bf2 a0a9b1e11a724ccded552906899915bca9b5a530 ab8bd3ebc849b928d653b585f92f8603fdcf327450b7d373740d778378a26766 Loading...

	#16 Eval - dff33027b1e2ddcbcba8554cb6089a9f	28 B	2024-04-20	2024-04-20
Pretty Observations First Seen2024-04-20 12:43:26 Last Seen2024-04-20 12:43:26 Times Seen1 Hash dff33027b1e2ddcbcba8554cb6089a9f 115c7e0689e510fddeafbf42547eed91b0a3ea80 f60a4fdc8c35ab88970edcea119186ca118fdf1d1ca17fc6cb8b10354a11c9dc Loading...

	#17 Eval - 6be8711e2f2be15f8654527c49e67e93	28 B	2024-04-20	2024-04-20
Pretty Observations First Seen2024-04-20 12:43:26 Last Seen2024-04-20 12:43:26 Times Seen1 Hash 6be8711e2f2be15f8654527c49e67e93 a31a9e1386e846d2401b85ee8b21a8027d47b55e a6601a388cea1c2c183c8ade7eb74c4f2da7dc4da4a5631d6bb76328e6bb3b1d Loading...

	#18 Eval - 3f837afed67ef66e44627f093cf5e761	28 B	2024-04-20	2024-04-20
Pretty Observations First Seen2024-04-20 12:43:26 Last Seen2024-04-20 12:43:26 Times Seen1 Hash 3f837afed67ef66e44627f093cf5e761 8eb778a2c5b96d129ca5e0035facf12bbd00b3f0 46d5b76cd369e488d2c2783e1da6d9b053f0ffd4ec51a39b359a93f202c300a2 Loading...

	#19 Eval - 2fa07b1a230952492f4debd62da5fe9d	28 B	2024-04-20	2024-04-20
Pretty Observations First Seen2024-04-20 12:43:26 Last Seen2024-04-20 12:43:26 Times Seen1 Hash 2fa07b1a230952492f4debd62da5fe9d ef9152a34885cfc299b8fb62585e1080e822e89c 8e52e971f7dac09f0054ec120801d096083cfe63d727f97ab5d52fa532d2cd5e Loading...

	#20 Eval - 0fa257929b18f3244c35bccb79276c01	28 B	2024-04-20	2024-04-20
Pretty Observations First Seen2024-04-20 12:43:26 Last Seen2024-04-20 12:43:26 Times Seen1 Hash 0fa257929b18f3244c35bccb79276c01 f86a024d0b71531a4e573726d4d36814f7d310e5 e4cae06b0ee14e12fe82aa280292ae970d6314bdce59117d780c59d0917c13ef Loading...

	#21 Eval - 55f5e5d66d03cc21ff81165284502504	28 B	2024-04-20	2024-04-20
Pretty Observations First Seen2024-04-20 12:43:26 Last Seen2024-04-20 12:43:26 Times Seen1 Hash 55f5e5d66d03cc21ff81165284502504 e7294e4752b4b735d4502a1e4bd9a873b9d37b9a c7f72d59c8a5bfe0676841de42be76e6b9c48e21c4bf3f6be5e1fb22cdab4af1 Loading...

	#22 Eval - 20866a373e9d73f6dae8ba61ae3a7123	28 B	2024-04-20	2024-04-20
Pretty Observations First Seen2024-04-20 12:43:26 Last Seen2024-04-20 12:43:26 Times Seen1 Hash 20866a373e9d73f6dae8ba61ae3a7123 c82d2ea262cb651f258a11bc1eeeeadf23383317 a0665ced5b4ebc98101494c2705c9c649da36f19078bd08efe5a46334b76a538 Loading...

	#23 Eval - a22db7d6c96b9039e862027a7ff3de2d	28 B	2024-04-20	2024-04-20
Pretty Observations First Seen2024-04-20 12:43:26 Last Seen2024-04-20 12:43:26 Times Seen1 Hash a22db7d6c96b9039e862027a7ff3de2d e3981dcb2aebe809d7478ba32c592255d62650a4 1f74c3358fcc9fafff0b11e8f0d0155b7c7e796380420c25a4508b855071c5fb Loading...

	#24 Eval - 521920bff39b43439099fcd3d09abef8	28 B	2024-04-20	2024-04-20
Pretty Observations First Seen2024-04-20 12:43:26 Last Seen2024-04-20 12:43:26 Times Seen1 Hash 521920bff39b43439099fcd3d09abef8 536e4eb7220edcd70b76964cadac990536073666 0082dbaac8f1847463f03481047cb3d3857cfc6cc5238e9e4c9a6d7d25f7b8a5 Loading...

	#25 Eval - 303987c4e29d54a81ce23b3c9d373e5e	28 B	2024-04-20	2024-04-20
Pretty Observations First Seen2024-04-20 12:43:26 Last Seen2024-04-20 12:43:26 Times Seen1 Hash 303987c4e29d54a81ce23b3c9d373e5e 5c1d118e19ab34ddfcaadff13f18d016ca68c57e b702eca208357f40801f4fb0f9dcbef7853a9892ad7c485bfd6a1d7d80c82a56 Loading...

	#26 Eval - 128c2e6e2b47d6d24783f6e6e2ad0a2a	28 B	2024-04-20	2024-04-20
Pretty Observations First Seen2024-04-20 12:43:26 Last Seen2024-04-20 12:43:26 Times Seen1 Hash 128c2e6e2b47d6d24783f6e6e2ad0a2a 41fdb8cadd66a57d9250297994b208fcad0042b1 44bbdc88c06d5259b3a2cedffdb11c4fb86ac9df1f21cd222e03bd33f4c10f7e Loading...

	#27 Eval - 040aa47662d3ef212618144029838210	28 B	2024-04-20	2024-04-20
Pretty Observations First Seen2024-04-20 12:43:26 Last Seen2024-04-20 12:43:26 Times Seen1 Hash 040aa47662d3ef212618144029838210 6cb5c790166a95218c07645d43292739c08bca4d 9b172d05deb7b14384581031840116552db8d038dfbaa986eecbc3d5231c56ba Loading...

	#28 Eval - 8bec4eb63e1173b66cc6a1c25c988aff	28 B	2024-04-20	2024-04-20
Pretty Observations First Seen2024-04-20 12:43:26 Last Seen2024-04-20 12:43:26 Times Seen1 Hash 8bec4eb63e1173b66cc6a1c25c988aff 7a8ac701b5873c17bf6991731031d5273419e235 796b9074217aa319b97b041075012da9a2084cb6e3b4560b32522315c2881c36 Loading...

	#29 Eval - 6b926feda57817e982c10578a16fbe22	28 B	2024-04-20	2024-04-20
Pretty Observations First Seen2024-04-20 12:43:26 Last Seen2024-04-20 12:43:26 Times Seen1 Hash 6b926feda57817e982c10578a16fbe22 fa9686844b037550e06b87fe2a54fdc8fd1043d6 296a8633c2bcf35d61bd27c77bb5517c5a76df8a8ee838c99a9014555334b469 Loading...

	#30 Eval - 37c5b50c35ad941e168e39df7317e81b	28 B	2024-04-20	2024-04-20
Pretty Observations First Seen2024-04-20 12:43:26 Last Seen2024-04-20 12:43:26 Times Seen1 Hash 37c5b50c35ad941e168e39df7317e81b fe512dfd0d7743a63359270618fc1a811700fce0 bfada9a04b9ad69851d12c59326ed6afb4b329cb86660181906b9b9cd1635b29 Loading...

	#31 Eval - f558de152178cef5309fc63dec3ae7dc	28 B	2024-04-20	2024-04-20
Pretty Observations First Seen2024-04-20 12:43:26 Last Seen2024-04-20 12:43:26 Times Seen1 Hash f558de152178cef5309fc63dec3ae7dc 58d0dd1ea7e9414e10ed5317e0b573c72d4e4709 73d0ee442e841785983c455915ecbe19a642c3f119a49696033cdbefab60d2ac Loading...

	#32 Eval - 5e89bd4929d2766c45c5b946be4d58ae	28 B	2024-04-20	2024-04-20
Pretty Observations First Seen2024-04-20 12:43:26 Last Seen2024-04-20 12:43:26 Times Seen1 Hash 5e89bd4929d2766c45c5b946be4d58ae ca517c0260fe5df2abda313fd9d999bfebe335be 691f4cd6e676f96a8e51a76be4f25a3d76604c85eaa657bc47de7cd8c4460dcd Loading...

	#33 Eval - a5ffe6b3a7a2208536cab67bb66a0ccc	28 B	2024-04-20	2024-04-20
Pretty Observations First Seen2024-04-20 12:43:26 Last Seen2024-04-20 12:43:26 Times Seen1 Hash a5ffe6b3a7a2208536cab67bb66a0ccc 3096c367464547ff02710299663caa266a9af358 500adf8c361f486ab91ffedb9ab1571e12136cf55349390026cd144a7789083d Loading...

	#34 Eval - ce93bb3474110859e4d350bed33e5802	28 B	2024-04-20	2024-04-20
Pretty Observations First Seen2024-04-20 12:43:26 Last Seen2024-04-20 12:43:26 Times Seen1 Hash ce93bb3474110859e4d350bed33e5802 60d3ff580d2e153728f0f47171bbb39e34b52f0c c2c8698131cb7844fd6b81bc5ec62b703f9efd9462204a5d3d76f1922357cb24 Loading...

	#35 Eval - 3a286e4f85f36c680918656ee254406d	28 B	2024-04-20	2024-04-20
Pretty Observations First Seen2024-04-20 12:43:26 Last Seen2024-04-20 12:43:26 Times Seen1 Hash 3a286e4f85f36c680918656ee254406d a9fa3fdce79980106a9f1b7a233adce6df9902e1 e09d9dc28f54d07fd9906555deaeac23595802339ce490f81a905735c7605e64 Loading...

	#36 Eval - 1c93d473cdd6438deeb660e675f2f169	28 B	2024-04-20	2024-04-20
Pretty Observations First Seen2024-04-20 12:43:26 Last Seen2024-04-20 12:43:26 Times Seen1 Hash 1c93d473cdd6438deeb660e675f2f169 777f69bfb98e4c085a06b2bcc387d40522b3e53c 1e6cf2c72cff63dcaba7ceb54063ef3d4fe4c90cddf81a3b8a28871733b9fe6a Loading...

	#37 Eval - a1c0f437218b74aedcaf60bad0127b23	28 B	2024-04-20	2024-04-20
Pretty Observations First Seen2024-04-20 12:43:26 Last Seen2024-04-20 12:43:26 Times Seen1 Hash a1c0f437218b74aedcaf60bad0127b23 fe7af159e05185a0747def9b1799de2325856073 8df71c2b500d13d2a31630ec3589341f11c5fefa61a6f538ba428aa9cef84ea5 Loading...

	#38 Eval - 5015adf4609cc14aaade17aed242cd9a	28 B	2024-04-20	2024-04-20
Pretty Observations First Seen2024-04-20 12:43:26 Last Seen2024-04-20 12:43:26 Times Seen1 Hash 5015adf4609cc14aaade17aed242cd9a faec3e22672ddedbea020588af179ae159b2dda0 f5bae282c1d298c876dd01c94344e653dc85e47a3ec1b53c4e81cf4e42968377 Loading...

	#39 Eval - 49817eb677a6f75d1ca781abc8a8220f	28 B	2024-04-20	2024-04-20
Pretty Observations First Seen2024-04-20 12:43:26 Last Seen2024-04-20 12:43:26 Times Seen1 Hash 49817eb677a6f75d1ca781abc8a8220f df6b6ea36a437eb9464c88893cc6070bd0041dfd b0258dc38274a78aac795c92f6f7e90a59f44c78ae4ce925e525563a1d6ad7fc Loading...

	#40 Eval - ae295e29cad45097e9c52569bee1eee6	28 B	2024-04-20	2024-04-20
Pretty Observations First Seen2024-04-20 12:43:26 Last Seen2024-04-20 12:43:26 Times Seen1 Hash ae295e29cad45097e9c52569bee1eee6 af7d2fe1a31ebce941fec840cdf85479125ca4c2 daf20e2262ada69d932e56e4616c79acf29a1ff21b4bf6abe4cae7ce8745dd42 Loading...

	#41 Eval - 8c8b916117c1f236445f103cfbf3cdeb	28 B	2024-04-20	2024-04-20
Pretty Observations First Seen2024-04-20 12:43:26 Last Seen2024-04-20 12:43:26 Times Seen1 Hash 8c8b916117c1f236445f103cfbf3cdeb c58385c7f795df6a5af76b32703f2c26d860650b 55d44f4e53fdfda7aa0baed7fdc031718cd0bbf0ccc98430f170c1fa99fae5ba Loading...

	#42 Eval - 9e925e9341b490bfd3b4c4ca3b0c1ef2	4 B	2023-03-07	2024-05-03
Pretty Observations First Seen2023-03-07 01:03:43 Last Seen2024-05-03 14:14:50 Times Seen351362 Hash 9e925e9341b490bfd3b4c4ca3b0c1ef2 c2543fff3bfa6f144c2f06a7de6cd10c0b650cae 1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408 Loading...

	#43 Eval - 10be56b69bc717e1e699399ea4f99b9c	28 B	2024-04-20	2024-04-20
Pretty Observations First Seen2024-04-20 12:43:27 Last Seen2024-04-20 12:43:27 Times Seen1 Hash 10be56b69bc717e1e699399ea4f99b9c 573a59e911201d1c51fa58d5646edf33e198a618 ef4892290771140ad5ac4f53682c1152a3b6473850ae4fa0477858b66561c15b Loading...

HTTP Transactions (11)

URL IP Response Size

jerfm.com/gkvd/hGhk/c92a75c4b4ec3f96babae9d23c9888c8/mfIvlQ/amJvb3RoQHNhbGVtc3RhdGUuZWR1

192.99.71.92

0 B

URL
jerfm.com/gkvd/hGhk/c92a75c4b4ec3f96babae9d23c9888c8/mfIvlQ/amJvb3RoQHNhbGVtc3RhdGUuZWR1
IP
192.99.71.92:0
ASN
#16276 OVH SAS

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Microsoft Outlook
OpenPhish	phishing	Office365
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /gkvd/hGhk/c92a75c4b4ec3f96babae9d23c9888c8/mfIvlQ/amJvb3RoQHNhbGVtc3RhdGUuZWR1 HTTP/1.1
Host: jerfm.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Sat, 20 Apr 2024 10:42:59 GMT
Server: Apache
refresh: 0;url=https://94e6f5a7.58598891ef09ac737cee0cf3.workers.dev/?qrc=jbooth@salemstate.edu
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

94e6f5a7.58598891ef09ac737cee0cf3.workers.dev/?qrc=jbooth@salemstate.edu

104.21.88.101

200 OK

1.3 kB

URL User Request GET HTTP/2
94e6f5a7.58598891ef09ac737cee0cf3.workers.dev/?qrc=jbooth@salemstate.edu
IP
104.21.88.101:443
ASN
#13335 CLOUDFLARENET

Certificate
IssuerGoogle Trust Services LLC
Subject58598891ef09ac737cee0cf3.workers.dev
FingerprintD0:7E:0D:A9:25:22:78:7A:45:69:2E:89:48:E8:33:A8:4A:15:BD:DF
ValidityFri, 12 Apr 2024 13:36:58 GMT - Thu, 11 Jul 2024 13:36:57 GMT

File type
HTML document, ASCII text, with very long lines (3255), with no line terminators
Size
1.3 kB (1348 bytes)
Hash
27a21d95b21c86ff67d170a4a775f1d8
1768764bf90726bc090971dbe0fd6eef1477e49d
4b35a01d5d3493c6cc57d5692e65b3a1678c345b3f45057804e5ad94c174e9a9

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Microsoft Outlook
OpenPhish	phishing	Office365

HTTP Headers

GET /?qrc=jbooth@salemstate.edu HTTP/1.1
Host: 94e6f5a7.58598891ef09ac737cee0cf3.workers.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Sat, 20 Apr 2024 10:42:59 GMT
content-type: text/html;charset=UTF-8
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=I3JwYu0XZcieFBZRlMNX%2FWmhIU99E9Z05cuoTPWqUQtSJkBaTuAM%2FvaM53aT38EFpDVuKO0bLBLw4fXC6AKL%2FD2zzLx%2FoUMe2GSD4%2B3TYVD5dF9F9xutoXYfrcGEicZ6u9vazmQGyCMXUHhQdDlNZjsZHsIgZDvamL1egboLRbA%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 877487e4dd29b527-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/cmg/1/GLhOioXg0bs57t4qPrORXFsL1%2BWig2mIKbgpVPMu7ZQ%3D

104.17.3.184

200 OK

61 B

URL GET HTTP/3
challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/cmg/1/GLhOioXg0bs57t4qPrORXFsL1%2BWig2mIKbgpVPMu7ZQ%3D
IP
104.17.3.184:443
ASN
#13335 CLOUDFLARENET

Requested by
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/dm905/0x4AAAAAAAW-lbDQI7I0Z-Zf/auto/normal
Certificate
IssuerCloudflare, Inc.
Subjectchallenges.cloudflare.com
Fingerprint5F:E4:AA:8C:2E:24:D2:B1:69:9D:13:28:31:5C:65:FA:97:2A:E9:6E
ValidityFri, 18 Aug 2023 00:00:00 GMT - Sat, 17 Aug 2024 23:59:59 GMT

File type
PNG image data, 2 x 2, 8-bit/color RGB, non-interlaced
Size
61 B (61 bytes)
Hash
9246cca8fc3c00f50035f28e9f6b7f7d
3aa538440f70873b574f40cd793060f53ec17a5d
c07d7d29e3c20fa6ca4c5d20663688d52bad13e129ad82ce06b80eb187d9dc84

HTTP Headers

GET /cdn-cgi/challenge-platform/h/b/cmg/1/GLhOioXg0bs57t4qPrORXFsL1%2BWig2mIKbgpVPMu7ZQ%3D HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/dm905/0x4AAAAAAAW-lbDQI7I0Z-Zf/auto/normal
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Sat, 20 Apr 2024 10:43:00 GMT
content-type: image/png
content-length: 61
cache-control: max-age=2629800, public
server: cloudflare
cf-ray: 877487e7ad57b4ee-OSL
alt-svc: h3=":443"; ma=86400

challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/pat/877487e6ecc7b4ee/1713609780699/3565e06407fa011aff61752d8d0042ba1c0cc74fef1d867a8c7fd41776a971b5/AIG82WbxI9PEeZB

104.17.3.184

401 Unauthorized

1 B

URL GET HTTP/3
challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/pat/877487e6ecc7b4ee/1713609780699/3565e06407fa011aff61752d8d0042ba1c0cc74fef1d867a8c7fd41776a971b5/AIG82WbxI9PEeZB
IP
104.17.3.184:443
ASN
#13335 CLOUDFLARENET

Requested by
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/dm905/0x4AAAAAAAW-lbDQI7I0Z-Zf/auto/normal
Certificate
IssuerCloudflare, Inc.
Subjectchallenges.cloudflare.com
Fingerprint5F:E4:AA:8C:2E:24:D2:B1:69:9D:13:28:31:5C:65:FA:97:2A:E9:6E
ValidityFri, 18 Aug 2023 00:00:00 GMT - Sat, 17 Aug 2024 23:59:59 GMT

File type
very short file (no magic)
Size
1 B (1 bytes)
Hash
ff44570aca8241914870afbc310cdb85
58668e7669fd564d99db5d581fcdb6a5618440b5
6da43b944e494e885e69af021f93c6d9331c78aa228084711429160a5bbd15b5

HTTP Headers

GET /cdn-cgi/challenge-platform/h/b/pat/877487e6ecc7b4ee/1713609780699/3565e06407fa011aff61752d8d0042ba1c0cc74fef1d867a8c7fd41776a971b5/AIG82WbxI9PEeZB HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/dm905/0x4AAAAAAAW-lbDQI7I0Z-Zf/auto/normal
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 401 Unauthorized
date: Sat, 20 Apr 2024 10:43:01 GMT
content-type: text/plain; charset=UTF-8
content-length: 1
www-authenticate: PrivateToken challenge="AAIAGXBhdC1pc3N1ZXIuY2xvdWRmbGFyZS5jb20gNWXgZAf6ARr_YXUtjQBCuhwMx0_vHYZ6jH_UF3apcbUAGWNoYWxsZW5nZXMuY2xvdWRmbGFyZS5jb20=", token-key="MIIBUjA9BgkqhkiG9w0BAQowMKANMAsGCWCGSAFlAwQCAqEaMBgGCSqGSIb3DQEBCDALBglghkgBZQMEAgKiAwIBMAOCAQ8AMIIBCgKCAQEArny_u1wyrVg8e-Kmwxyfb2WoiwwZ2VR7QAnot_CrcySq56Rui-jZM9090K9_dW6HmpAKhOjYXLCJ7g4U74G4z6SRM_YRj-GLp3EaBxay798DZIeAtv_N7Z9CHI_0VTYiqNXVm2z1bF5VtFasnv3JDaWb4yIjBd8vMfNUM4Y4nXXIeMIyXdVK2hlzVO8VxBkXca7UzhCq51WDKlSYPWUy9ieZTdwNf5Q49DwdF9woTnuKPY26TxVlEHMcf8JJiXLUR2bbdG-Qv1fqbwQloSjintj5uXWLsZd84bMpNedRNJBV22T0PgKNeip6oalvdYbaiHiyDATsKlA6-8KJ-CUQTQIDAQAB", max-age=20, PrivateToken challenge="AAIALHBwLWlzc3Vlci1wcm9kdWN0aW9uLnJlc2VhcmNoLmNsb3VkZmxhcmUuY29tIDVl4GQH-gEa_2F1LY0AQrocDMdP7x2Geox_1Bd2qXG1ABljaGFsbGVuZ2VzLmNsb3VkZmxhcmUuY29t", token-key="MIIBUjA9BgkqhkiG9w0BAQowMKANMAsGCWCGSAFlAwQCAqEaMBgGCSqGSIb3DQEBCDALBglghkgBZQMEAgKiAwIBMAOCAQ8AMIIBCgKCAQEA1FEYykHcK8H9rb_u0aFz3CmWgYloQw4YhedoEOAjJ0vy2Axa4f9UG9Dzs4uXS34_h8l6MDo2nRCvLI9lvebilMnTjCn-6D77bewqYxJKUFZW1z2jBIdu03TrETczfEg7kxgKtJE9NXGDjYJcF_iMgzgNA0PEAVM89tUYXXlFy4cUAGlqU2mPpIEOxm5ARsXC-zlLK60fkJ4cOsZRkZa6EExdhmgdwQ0fEJuSOHrBO_-zJn4hUP8q9g4yqkxW2UrfJgD07F4HaHGBEiei06sGDvH2NEPvswEl5dTGxutNrxlU7W24iYhNa2nhjlc53nNb0mKtszv-czVE9UhXyJ7-RQIDAQAB", max-age=20
server: cloudflare
cf-ray: 877487ebc835b4ee-OSL
alt-svc: h3=":443"; ma=86400

challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/i/877487e6ecc7b4ee/1713609780704/Eu67HhGlnL60ivW

104.17.3.184

200 OK

61 B

URL GET HTTP/3
challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/i/877487e6ecc7b4ee/1713609780704/Eu67HhGlnL60ivW
IP
104.17.3.184:443
ASN
#13335 CLOUDFLARENET

Requested by
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/dm905/0x4AAAAAAAW-lbDQI7I0Z-Zf/auto/normal
Certificate
IssuerCloudflare, Inc.
Subjectchallenges.cloudflare.com
Fingerprint5F:E4:AA:8C:2E:24:D2:B1:69:9D:13:28:31:5C:65:FA:97:2A:E9:6E
ValidityFri, 18 Aug 2023 00:00:00 GMT - Sat, 17 Aug 2024 23:59:59 GMT

File type
PNG image data, 80 x 95, 8-bit/color RGB, non-interlaced
Size
61 B (61 bytes)
Hash
72fef5ec55e8df1e5fc4a837c25da96a
a0d629fead69ecb99cd85a7504ae54afb6b7ae0a
e8500e6abeb5dcff84e5b5fc346c474ae3cdf44488eeda626d66a0fc1689307c

HTTP Headers

GET /cdn-cgi/challenge-platform/h/b/i/877487e6ecc7b4ee/1713609780704/Eu67HhGlnL60ivW HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/dm905/0x4AAAAAAAW-lbDQI7I0Z-Zf/auto/normal
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Sat, 20 Apr 2024 10:43:01 GMT
content-type: image/png
content-length: 61
server: cloudflare
cf-ray: 877487f04c5ab4ee-OSL
alt-svc: h3=":443"; ma=86400

challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/flow/ov1/1092655471:1713608054:USLUSxIkqHG7TSUlB9wjWEBZ0Q-r8PtrhdjM1QR5gT8/877487e6ecc7b4ee/d52a5c9c1755306

104.17.3.184

200 OK

30 kB

URL POST HTTP/3
challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/flow/ov1/1092655471:1713608054:USLUSxIkqHG7TSUlB9wjWEBZ0Q-r8PtrhdjM1QR5gT8/877487e6ecc7b4ee/d52a5c9c1755306
IP
104.17.3.184:443
ASN
#13335 CLOUDFLARENET

Requested by
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/dm905/0x4AAAAAAAW-lbDQI7I0Z-Zf/auto/normal
Certificate
IssuerCloudflare, Inc.
Subjectchallenges.cloudflare.com
Fingerprint5F:E4:AA:8C:2E:24:D2:B1:69:9D:13:28:31:5C:65:FA:97:2A:E9:6E
ValidityFri, 18 Aug 2023 00:00:00 GMT - Sat, 17 Aug 2024 23:59:59 GMT

File type
ASCII text, with very long lines (22556), with no line terminators
Size
30 kB (29600 bytes)
Hash
5bc1b10bd62ce7af4e15bf6e39a40998
04cb878bc044411ff7d8f988c0643fb92d1e16f6
41b3203d6fc8c6319d8f44bc25bc916e5bf58d14debc380f718aca637ab62cbc

HTTP Headers

POST /cdn-cgi/challenge-platform/h/b/flow/ov1/1092655471:1713608054:USLUSxIkqHG7TSUlB9wjWEBZ0Q-r8PtrhdjM1QR5gT8/877487e6ecc7b4ee/d52a5c9c1755306 HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/dm905/0x4AAAAAAAW-lbDQI7I0Z-Zf/auto/normal
Content-type: application/x-www-form-urlencoded
CF-Challenge: d52a5c9c1755306
Content-Length: 25919
Origin: https://challenges.cloudflare.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Sat, 20 Apr 2024 10:43:01 GMT
content-type: text/plain; charset=UTF-8
cf-chl-gen: QmngPRdCnCBij716qQrj9GOyWx2g+fWSyB6YaAwcjC+fJiztpAgV4Y35vF3NkyUJ$aGVnp2nVJhjtXHeuyxVrgA==
vary: accept-encoding
server: cloudflare
cf-ray: 877487f10d7bb4ee-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

94e6f5a7.58598891ef09ac737cee0cf3.workers.dev/favicon.ico

104.21.88.101

200 OK

3.3 kB

URL GET HTTP/3
94e6f5a7.58598891ef09ac737cee0cf3.workers.dev/favicon.ico
IP
104.21.88.101:443
ASN
#13335 CLOUDFLARENET

Requested by
https://94e6f5a7.58598891ef09ac737cee0cf3.workers.dev/?qrc=jbooth@salemstate.edu
Certificate
IssuerGoogle Trust Services LLC
Subject58598891ef09ac737cee0cf3.workers.dev
FingerprintD0:7E:0D:A9:25:22:78:7A:45:69:2E:89:48:E8:33:A8:4A:15:BD:DF
ValidityFri, 12 Apr 2024 13:36:58 GMT - Thu, 11 Jul 2024 13:36:57 GMT

File type
HTML document, ASCII text, with very long lines (3271), with no line terminators
Size
3.3 kB (3255 bytes)
Hash
47234cb372fd223e370a6bf1c38942d1
06d24783cdd2b5206b9e5ab999519ebdd4abc656
7920553c5a5aa9de58ebe3934c2759bab7c7bc30ba35a6949cc6ed8a8c7158f4

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Office365

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: 94e6f5a7.58598891ef09ac737cee0cf3.workers.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://94e6f5a7.58598891ef09ac737cee0cf3.workers.dev/?qrc=jbooth@salemstate.edu
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Sat, 20 Apr 2024 10:43:00 GMT
content-type: text/html;charset=UTF-8
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=gwVcYIM0VGTgKYOx0Q0Kxq7x64I6V2FhglbC02Dx0RNpz7zQ6NUnhcljQuKZYEjIJhneZnJp9iGI%2BTOQPgJxNulQFxwetIilBZwBLzzdawOF5haP8ot1DRfoNuI2bCW4E5q2M3trJBsZkpkLYoO3buMAaDht4bqAXhrM1C%2B6gnE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 877487e6bf625695-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/dm905/0x4AAAAAAAW-lbDQI7I0Z-Zf/auto/normal

104.17.3.184

200 OK

80 kB

URL GET HTTP/3
challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/dm905/0x4AAAAAAAW-lbDQI7I0Z-Zf/auto/normal
IP
104.17.3.184:443
ASN
#13335 CLOUDFLARENET

Requested by
https://94e6f5a7.58598891ef09ac737cee0cf3.workers.dev/?qrc=jbooth@salemstate.edu
Certificate
IssuerCloudflare, Inc.
Subjectchallenges.cloudflare.com
Fingerprint5F:E4:AA:8C:2E:24:D2:B1:69:9D:13:28:31:5C:65:FA:97:2A:E9:6E
ValidityFri, 18 Aug 2023 00:00:00 GMT - Sat, 17 Aug 2024 23:59:59 GMT

File type
HTML document, ASCII text, with very long lines (41702)
Size
80 kB (80014 bytes)
Hash
3dd82d1c1915d57ca6687729f666e63e
2ebd41ecc6385e31760fc31cc94b58f0f42b7d8d
2575c2da71faf0b42f58f2951067ed084a9df07b8802aec9a544a794c10e3262

HTTP Headers

GET /cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/dm905/0x4AAAAAAAW-lbDQI7I0Z-Zf/auto/normal HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://94e6f5a7.58598891ef09ac737cee0cf3.workers.dev/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Sat, 20 Apr 2024 10:43:00 GMT
content-type: text/html; charset=UTF-8
cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
document-policy: js-profiling
referrer-policy: same-origin
cross-origin-opener-policy: same-origin
origin-agent-cluster: ?1
permissions-policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()
cross-origin-embedder-policy: require-corp
content-security-policy: frame-src https://challenges.cloudflare.com/ blob:; base-uri 'self'
critical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
cross-origin-resource-policy: cross-origin
vary: accept-encoding
server: cloudflare
cf-ray: 877487e6ecc7b4ee-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=877487e6ecc7b4ee

104.17.3.184

200 OK

436 kB

URL GET HTTP/3
challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=877487e6ecc7b4ee
IP
104.17.3.184:443
ASN
#13335 CLOUDFLARENET

Requested by
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/dm905/0x4AAAAAAAW-lbDQI7I0Z-Zf/auto/normal
Certificate
IssuerCloudflare, Inc.
Subjectchallenges.cloudflare.com
Fingerprint5F:E4:AA:8C:2E:24:D2:B1:69:9D:13:28:31:5C:65:FA:97:2A:E9:6E
ValidityFri, 18 Aug 2023 00:00:00 GMT - Sat, 17 Aug 2024 23:59:59 GMT

File type
JavaScript source, ASCII text, with very long lines (65536), with no line terminators
Size
436 kB (435983 bytes)
Hash
82791939d57ab7e0da2915064ba988f6
dc55f097e55e7b51e12c5b60cdeda388134fa92f
d4090bfb910b650bb639c19a343d62794f3d310d7efbdf21d60655df5e87fd6d

HTTP Headers

GET /cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=877487e6ecc7b4ee HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/dm905/0x4AAAAAAAW-lbDQI7I0Z-Zf/auto/normal
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Sat, 20 Apr 2024 10:43:00 GMT
content-type: application/javascript; charset=UTF-8
cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
vary: accept-encoding
server: cloudflare
cf-ray: 877487e7ad58b4ee-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

challenges.cloudflare.com/turnstile/v0/api.js?onload=onloadTurnstileCallback

104.17.3.184

302 Found

42 kB

URL GET HTTP/2
challenges.cloudflare.com/turnstile/v0/api.js?onload=onloadTurnstileCallback
IP
104.17.3.184:443
ASN
#13335 CLOUDFLARENET

Requested by
https://94e6f5a7.58598891ef09ac737cee0cf3.workers.dev/?qrc=jbooth@salemstate.edu
Certificate
IssuerCloudflare, Inc.
Subjectchallenges.cloudflare.com
Fingerprint5F:E4:AA:8C:2E:24:D2:B1:69:9D:13:28:31:5C:65:FA:97:2A:E9:6E
ValidityFri, 18 Aug 2023 00:00:00 GMT - Sat, 17 Aug 2024 23:59:59 GMT

File type

Size
42 kB (42415 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /turnstile/v0/api.js?onload=onloadTurnstileCallback HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://94e6f5a7.58598891ef09ac737cee0cf3.workers.dev/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 302 Found
date: Sat, 20 Apr 2024 10:43:00 GMT
content-length: 0
access-control-allow-origin: *
location: /turnstile/v0/b/471dc2adc340/api.js?onload=onloadTurnstileCallback
cross-origin-resource-policy: cross-origin
cache-control: max-age=300, public
vary: Accept-Encoding
server: cloudflare
cf-ray: 877487e5fb5a5699-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

challenges.cloudflare.com/turnstile/v0/b/471dc2adc340/api.js?onload=onloadTurnstileCallback

104.17.3.184

200 OK

42 kB

URL GET HTTP/2
challenges.cloudflare.com/turnstile/v0/b/471dc2adc340/api.js?onload=onloadTurnstileCallback
IP
104.17.3.184:443
ASN
#13335 CLOUDFLARENET

Requested by
https://94e6f5a7.58598891ef09ac737cee0cf3.workers.dev/?qrc=jbooth@salemstate.edu
Certificate
IssuerCloudflare, Inc.
Subjectchallenges.cloudflare.com
Fingerprint5F:E4:AA:8C:2E:24:D2:B1:69:9D:13:28:31:5C:65:FA:97:2A:E9:6E
ValidityFri, 18 Aug 2023 00:00:00 GMT - Sat, 17 Aug 2024 23:59:59 GMT

File type
JavaScript source, ASCII text, with very long lines (42414)
Size
42 kB (42415 bytes)
Hash
f94a2211ce789a95a7c67e8c660d63e8
f1fc19b6bcb96d0a905bf3192aaff0885ff9f36f
926dc3302f99ec05e4206e965ddeb7250f5910a8c38e82c7beafb724bbaaf37b

HTTP Headers

GET /turnstile/v0/b/471dc2adc340/api.js?onload=onloadTurnstileCallback HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://94e6f5a7.58598891ef09ac737cee0cf3.workers.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Sat, 20 Apr 2024 10:43:00 GMT
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
cache-control: max-age=31536000
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding
server: cloudflare
cf-ray: 877487e62b755699-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (47)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

Observations

Hash

Observations

Hash

Observations

Hash

Observations

Hash

Observations

Hash

Observations

Hash

Observations

Hash

Observations

Hash

Observations

Hash

Observations

Hash

Observations

Hash

Observations

Hash

Observations

Hash