Report Overview

  1. Visited public
    2023-12-09 00:51:47
  2. URL

    clouds-mres-b3f5.sfkeijerfeb.workers.dev/de300d97-c2fe-439f-8996-d6354b21b5b9

  3. Finishing URL

    clouds-mres-b3f5.sfkeijerfeb.workers.dev/0ed91942-b02c-4875-85da-b8e3010fb094

  4. IP / ASN
    104.21.8.203

    #13335 CLOUDFLARENET

    Title
    blob:https://clouds-mres-b3f5.sfkeijerfeb.workers.dev/0ed91942-b02c-4875-85da-b8e3010fb094
  5. Phishing - Dropbox

Detections
urlquery
19
Network Intrusion Detection
0
Threat Detection Systems
8

Domain Summary

Domain / FQDNRankRegisteredFirst SeenLast Seen
ajax.googleapis.com129052005-01-252013-08-16 11:51:312023-12-08 08:34:59
1.bp.blogspot.com84032000-07-312012-05-21 15:44:192023-12-07 19:16:29
maxcdn.bootstrapcdn.com7242012-05-252014-06-18 02:37:312023-12-08 08:16:59
code.jquery.com6342005-12-102012-05-21 19:28:022023-12-08 08:16:59
cdn.iconscout.com439392015-06-012017-01-06 18:08:072023-12-07 08:09:12
ciscobinary.openh264.org408222013-10-192014-10-07 07:43:562023-12-08 05:09:07
fonts.googleapis.com88772005-01-252013-06-10 22:14:262023-12-08 07:43:19
clouds-mres-b3f5.sfkeijerfeb.workers.devunknown2019-02-082023-10-18 03:52:172023-12-06 05:25:44
ka-f.fontawesome.com35982012-10-182019-12-17 07:36:132023-12-08 18:02:11
contractso.web.appunknown2019-01-082022-07-30 00:35:462023-12-07 08:09:12
kit.fontawesome.com18682012-10-182019-12-16 20:51:312023-12-08 05:17:32

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected


OpenPhish
SeverityIndicatorAlert
mediumclouds-mres-b3f5.sfkeijerfeb.workers.dev/Office365
mediumclouds-mres-b3f5.sfkeijerfeb.workers.dev/Office365

PhishTank
SeverityIndicatorAlert
mediumclouds-mres-b3f5.sfkeijerfeb.workers.dev/de300d97-c2fe-439f-8996-d6354b21b5b9Dropbox
mediumclouds-mres-b3f5.sfkeijerfeb.workers.dev/favicon.icoDropbox

mnemonic secure dns

No alerts detected


Quad9 DNS

No alerts detected


ThreatFox

No alerts detected


Files detected

  1. URL

    ciscobinary.openh264.org/openh264-linux64-2e1774ab6dc6c43debb0b5b628bdf122a391d521.zip

  2. IP

    2.22.61.56

  3. ASN

    #20940 Akamai International B.V.

  1. File type

    Zip archive data, at least v2.0 to extract, compression method=deflate\012- data

    Size

    512 kB (511815 bytes)

  2. Hash

    152eda253e242e18443ef3282495bc7c

    ff0fa85565f21ec4931baad4573b4c0bd08c4019

  1. Archive (2)

  2. FilenameMd5File type
    gmpopenh264.info
    3d33cdc0b3d281e67dd52e14435dd04f
    ASCII text
    libgmpopenh264.so
    b2c1253e8a09cfe03b3d7f37de12dff7
    ELF 64-bit LSB shared object, x86-64, version 1\012- (SYSV)\012- data

JavaScript (30)

HTTP Transactions (22)

URLIPResponseSize
code.jquery.com/jquery-3.4.1.min.js
151.101.66.137200 OK31 kB
code.jquery.com/jquery-3.1.1.min.js
151.101.66.137200 OK30 kB
cdn.iconscout.com/icon/free/png-256/yahoo-2752017-2284834.png
104.18.29.243200 OK5.9 kB
contractso.web.app/storages/gmail.png
199.36.158.100 57 kB
contractso.web.app/storages/other1.png
199.36.158.100 7.7 kB
contractso.web.app/storages/box.png
199.36.158.100 9.0 kB
contractso.web.app/storages/outlook1.png
199.36.158.100200 OK771 B
contractso.web.app/storages/aol1.png
199.36.158.100 12 kB
contractso.web.app/storages/office3651.png
199.36.158.100 3.7 kB
ajax.googleapis.com/ajax/libs/jquery/2.2.4/jquery.min.js
142.250.74.170200 OK30 kB
1.bp.blogspot.com/-CYDSHib_wQY/X5G7l5LqTDI/AAAAAAAAklg/uJxZb4zeb0EXG_Rle2xUJGeVT7dzPUHDQCLcBGAsYHQ/s2048/Gmail%2Bnew%2BLogo%2B2020.webp
142.250.74.161200 OK78 kB
contractso.web.app/reglastefarg/hover.css
199.36.158.100200 OK6.3 kB
contractso.web.app/storages/dropbox-white.png
199.36.158.100 6.1 kB
kit.fontawesome.com/585b051251.js
104.18.40.68200 OK18 kB
ciscobinary.openh264.org/openh264-linux64-2e1774ab6dc6c43debb0b5b628bdf122a391d521.zip
2.22.61.56 512 kB
contractso.web.app/storages/5.jpg
199.36.158.100 79 kB
fonts.googleapis.com/css?family=Archivo+Narrow&display=swap
142.250.74.106200 OK6.8 kB
clouds-mres-b3f5.sfkeijerfeb.workers.dev/de300d97-c2fe-439f-8996-d6354b21b5b9
104.21.8.203200 OK2.2 MB
ka-f.fontawesome.com/releases/v5.15.4/css/free.min.css?token=585b051251
172.64.205.20200 OK60 kB
clouds-mres-b3f5.sfkeijerfeb.workers.dev/favicon.ico
104.21.8.203200 OK2.2 MB
maxcdn.bootstrapcdn.com/bootstrap/4.0.0/css/bootstrap.min.css
104.18.10.207200 OK145 kB
ka-f.fontawesome.com/releases/v5.15.4/css/free-v4-shims.min.css?token=585b051251
172.64.205.20200 OK27 kB