Report - cloudflare-ipfs.com/ipfs/bafybeid2wh4bhoxkee2au2pva4oiliopzi3zap75etlwgt56jerimxnmim/content.html#bWljcm9zb2Z0QG1pY3Jvc29mdC5jb20=

Report Overview

Submitted URL
cloudflare-ipfs.com/ipfs/bafybeid2wh4bhoxkee2au2pva4oiliopzi3zap75etlwgt56jerimxnmim/content.html#bWljcm9zb2Z0QG1pY3Jvc29mdC5jb20=
IP
104.17.96.13
ASN
#13335 CLOUDFLARENET
Submitted
2024-04-17 20:49:41
Access
public
Website Title
Webmail :: Welcome to Webmail
Final URL
cloudflare-ipfs.com/ipfs/bafybeid2wh4bhoxkee2au2pva4oiliopzi3zap75etlwgt56jerimxnmim/content.html#bWljcm9zb2Z0QG1pY3Jvc29mdC5jb20=
Tags
phishing suspicious
urlquery detections
Phishing - Generic phishing
Suspicious - Suspicious Javascript code
Suspicious - Anti-debugging code

Detections

urlquery
6
Network Intrusion Detection
0
Threat Detection Systems
4

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
cdnjs.cloudflare.com	235	2009-02-17	2015-04-17	2024-04-17	477 B	7.2 kB	104.17.25.14
bafybeig5evukk2lmpa2bdjinbdd6bgqonnqhx7xvqbkbrlqiy4v3vv5n5u.ipfs.dweb.link	unknown	unknown	No data	No data	482 B	0 B	0.0.0.0
email.powweb.com	unknown	1999-07-04	2017-01-31	2024-04-11	458 B	0 B	0.0.0.0
bafybeihbjgeaixczn7cx54jxs55tothzeaururwppolrtid7agdsbvhupm.ipfs.w3s.link	unknown	2022-06-27	2022-11-20	2024-03-27	481 B	141 kB	172.64.146.87
maxcdn.bootstrapcdn.com	724	2012-05-25	2014-06-18	2024-04-17	473 B	50 kB	104.18.11.207
bafybeibusvqm3e73ahgyhttqud3p3vhxaqh5fbtftjgibzsjegsprsulx4.ipfs.w3s.link	unknown	2022-06-27	2022-11-20	2024-03-24	479 B	72 kB	172.64.146.87
cloudflare-ipfs.com	75147	2018-05-30	2021-01-20	2024-03-15	1.3 kB	52 kB	104.17.64.14
code.jquery.com	634	2005-12-10	2012-05-21	2024-04-17	452 B	24 kB	151.101.130.137
ajax.googleapis.com	12905	2005-01-25	2013-08-16	2024-04-17	434 B	31 kB	142.250.74.42
bafybeig5evukk2lmpa2bdjinbdd6bgqonnqhx7xvqbkbrlqiy4v3vv5n5u.ipfs.w3s.link	unknown	2022-06-27	2022-11-20	2024-04-13	479 B	1.0 kB	172.64.146.87
bafybeidf5fw6gmcl7xh3ytqn53u7vmg2cfhynrbmhkwhxvcizz5rtdbyxq.ipfs.w3s.link	unknown	2022-06-27	2022-11-20	2024-03-27	482 B	47 kB	172.64.146.87
bafybeicvuk4mb6tdtpe7yxnckrewbgyimqr5hbp67dhzjjg5mkgo2t2eey.ipfs.w3s.link	unknown	2022-06-27	2022-11-20	2024-04-13	480 B	30 kB	172.64.146.87

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

Scan Date	Severity	Indicator	Alert
2023-05-02	medium	cloudflare-ipfs.com/ipfs/bafybeid2wh4bhoxkee2au2pva4oiliopzi3zap75etlwgt56jerimxnmim/content.html	Other
2023-05-02	medium	cloudflare-ipfs.com/ipfs/bafybeid2wh4bhoxkee2au2pva4oiliopzi3zap75etlwgt56jerimxnmim/evergageSmall.min.js.download	Other

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (5)

	URL	Size	First Seen	Last Seen
	cloudflare-ipfs.com/ipfs/bafybeid2wh4bhoxkee2au2pva4oiliopzi3zap75etlwgt56jerimxnmim/content.html#bWljcm9zb2Z0QG1pY3Jvc29mdC5jb20=	50 kB	2024-04-17	2024-04-22
Pretty URL cloudflare-ipfs.com/ipfs/bafybeid2wh4bhoxkee2au2pva4oiliopzi3zap75etlwgt56jerimxnmim/content.html#bWljcm9zb2Z0QG1pY3Jvc29mdC5jb20= IP 0.0.0.0 ASN #0 Introduced by scriptElement Embedded in HTML true Observations First Seen2024-04-17 03:51:01 Last Seen2024-04-22 16:52:06 Times Seen3 Hash 8ec4b069ecb7adf89b362b2772fb3679 371bd9d4ef539fddd2cf2a30cf96bd3fd2af2f4e 4b11bce990d240bd9d1b61a80448f9f890fbc7d170114fa89391c8edce7e35d8 Loading...

	unknown	127 B	2024-04-17	2024-04-23
Pretty Introduced by scriptElement Embedded in HTML false Observations First Seen2024-04-17 03:51:01 Last Seen2024-04-23 07:18:41 Times Seen5 Hash e49d96731a0d2531a189030022b35620 5ae2088ab211c3ea2227cbf50bd00d413c9d7f36 532dfa56279e911d4114f34db8db0aa1eece5ac8da819fbdbc7a5b79afda2795 Loading...

	unknown	667 B	2024-04-17	2024-04-23
Pretty Introduced by scriptElement Embedded in HTML false Observations First Seen2024-04-17 03:51:01 Last Seen2024-04-23 07:18:41 Times Seen5 Hash 766fa0114d8cc914daba70e760ee834a a61f48f4ebc05dbcafe6bb442fbd77969cb7e073 e4473ebdcf7f43908fbcbe96620cf83ec353d62aa0577629afba6da0c56d4ae2 Loading...

	unknown	1.0 kB	2024-04-17	2024-04-23
Pretty Introduced by scriptElement Embedded in HTML false Observations First Seen2024-04-17 03:51:01 Last Seen2024-04-23 07:18:41 Times Seen5 Hash cac59e21c4d5882831216634b9836c76 93c577468cd58280646831090db2050a837149a5 814a99055ecf1fef7f1e5c85a58fe77f964598667a007b8c95214ad6fdfa2dfa Loading...

		Size	First Seen	Last Seen
	#1 Write - 1f689f5ac535791c9569ba9b0147cb53	25 kB	2024-04-17	2024-04-22
Pretty Observations First Seen2024-04-17 03:51:01 Last Seen2024-04-22 16:52:06 Times Seen3 Hash 1f689f5ac535791c9569ba9b0147cb53 477f350a96dfd110ec47c59f932080c03fd0a2bd 7dd4eb43bd46ecf278ecc77f2f7b28adef95b1e2d5af84ea3f9166fc3b8e7b89 Loading...

HTTP Transactions (13)

URL IP Response Size

cdnjs.cloudflare.com/ajax/libs/popper.js/1.12.9/umd/popper.min.js

104.17.25.14

200 OK

6.2 kB

URL GET HTTP/2
cdnjs.cloudflare.com/ajax/libs/popper.js/1.12.9/umd/popper.min.js
IP
104.17.25.14:443
ASN
#13335 CLOUDFLARENET

Requested by
https://cloudflare-ipfs.com/ipfs/bafybeid2wh4bhoxkee2au2pva4oiliopzi3zap75etlwgt56jerimxnmim/content.html#bWljcm9zb2Z0QG1pY3Jvc29mdC5jb20=
Certificate
IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint7A:EA:B9:09:71:70:6C:87:C9:D3:82:74:8A:7B:B4:60:E5:40:2D:8D
ValidityMon, 03 Jul 2023 00:00:00 GMT - Tue, 02 Jul 2024 23:59:59 GMT

File type
JavaScript source, ASCII text, with very long lines (19015)
Size
6.2 kB (6157 bytes)
Hash
70d3fda195602fe8b75e0097eed74dde
c3b977aa4b8dfb69d651e07015031d385ded964b
a52f7aa54d7bcaafa056ee0a050262dfc5694ae28dee8b4cac3429af37ff0d66

HTTP Headers

GET /ajax/libs/popper.js/1.12.9/umd/popper.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://cloudflare-ipfs.com
DNT: 1
Connection: keep-alive
Referer: https://cloudflare-ipfs.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Wed, 17 Apr 2024 20:49:16 GMT
content-type: application/javascript; charset=utf-8
content-length: 6157
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03fa9-4af4"
last-modified: Mon, 04 May 2020 16:15:37 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 2831840
expires: Mon, 07 Apr 2025 20:49:16 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=vsHQ%2FOstf5cm9LnqE7Wg7jfsxZt6HIe2rupfpjHCPPiqoXBs4U3RPQouWq52ZGygM8G9b0WZ2zxONFGdtngITofDwShtYvc617wLpM%2Bm0Tf%2Bu2QcgRtKOBmsivNu3I4S1g%2Ftu%2BwG"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 875f47e0ae2e56c9-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

code.jquery.com/jquery-3.2.1.slim.min.js

151.101.130.137

200 OK

24 kB

URL GET HTTP/2
code.jquery.com/jquery-3.2.1.slim.min.js
IP
151.101.130.137:443
ASN
#54113 FASTLY

Requested by
https://cloudflare-ipfs.com/ipfs/bafybeid2wh4bhoxkee2au2pva4oiliopzi3zap75etlwgt56jerimxnmim/content.html#bWljcm9zb2Z0QG1pY3Jvc29mdC5jb20=
Certificate
IssuerSectigo Limited
Subject*.jquery.com
FingerprintD2:19:0A:AD:CE:BB:9C:61:17:5D:29:4B:A2:54:E8:C6:91:B8:F9:8D
ValidityTue, 11 Jul 2023 00:00:00 GMT - Sun, 14 Jul 2024 23:59:59 GMT

File type
JavaScript source, ASCII text, with very long lines (32012)
Size
24 kB (23856 bytes)
Hash
5f48fc77cac90c4778fa24ec9c57f37d
9e89d1515bc4c371b86f4cb1002fd8e377c1829f
9365920887b11b33a3dc4ba28a0f93951f200341263e3b9cefd384798e4be398

HTTP Headers

GET /jquery-3.2.1.slim.min.js HTTP/1.1
Host: code.jquery.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://cloudflare-ipfs.com
DNT: 1
Connection: keep-alive
Referer: https://cloudflare-ipfs.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Fri, 18 Oct 1991 12:00:00 GMT
etag: W/"28feccc0-10fdd"
cache-control: public, max-age=31536000, stale-while-revalidate=604800
access-control-allow-origin: *
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Wed, 17 Apr 2024 20:49:16 GMT
age: 857090
x-served-by: cache-lga21963-LGA, cache-hel1410025-HEL
x-cache: HIT, HIT
x-cache-hits: 40, 89969
x-timer: S1713386957.915394,VS0,VE0
vary: Accept-Encoding
content-length: 23856
X-Firefox-Spdy: h2

ajax.googleapis.com/ajax/libs/jquery/2.2.4/jquery.min.js

142.250.74.42

200 OK

30 kB

URL GET HTTP/2
ajax.googleapis.com/ajax/libs/jquery/2.2.4/jquery.min.js
IP
142.250.74.42:443
ASN
#15169 GOOGLE

Requested by
https://cloudflare-ipfs.com/ipfs/bafybeid2wh4bhoxkee2au2pva4oiliopzi3zap75etlwgt56jerimxnmim/content.html#bWljcm9zb2Z0QG1pY3Jvc29mdC5jb20=
Certificate
IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
Fingerprint47:5A:64:7D:9F:47:34:07:31:91:97:F7:04:42:7A:D5:EA:AD:07:4E
ValidityMon, 04 Mar 2024 07:16:44 GMT - Mon, 27 May 2024 07:16:43 GMT

File type
JavaScript source, ASCII text, with very long lines (32065)
Size
30 kB (30028 bytes)
Hash
2f6b11a7e914718e0290410e85366fe9
69bb69e25ca7d5ef0935317584e6153f3fd9a88c
05b85d96f41fff14d8f608dad03ab71e2c1017c2da0914d7c59291bad7a54f8e

HTTP Headers

GET /ajax/libs/jquery/2.2.4/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cloudflare-ipfs.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 30028
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 13 Apr 2024 13:58:13 GMT
expires: Sun, 13 Apr 2025 13:58:13 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
last-modified: Tue, 03 Mar 2020 19:15:00 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
age: 370264
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

bafybeig5evukk2lmpa2bdjinbdd6bgqonnqhx7xvqbkbrlqiy4v3vv5n5u.ipfs.w3s.link/jquery-ui.css

172.64.146.87

0 B

URL GET
bafybeig5evukk2lmpa2bdjinbdd6bgqonnqhx7xvqbkbrlqiy4v3vv5n5u.ipfs.w3s.link/jquery-ui.css
IP
172.64.146.87:0
ASN
#13335 CLOUDFLARENET

Requested by
https://cloudflare-ipfs.com/ipfs/bafybeid2wh4bhoxkee2au2pva4oiliopzi3zap75etlwgt56jerimxnmim/content.html#bWljcm9zb2Z0QG1pY3Jvc29mdC5jb20=

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /jquery-ui.css HTTP/1.1
Host: bafybeig5evukk2lmpa2bdjinbdd6bgqonnqhx7xvqbkbrlqiy4v3vv5n5u.ipfs.w3s.link
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cloudflare-ipfs.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 307 Temporary Redirect
date: Wed, 17 Apr 2024 20:49:18 GMT
content-length: 0
location: https://bafybeig5evukk2lmpa2bdjinbdd6bgqonnqhx7xvqbkbrlqiy4v3vv5n5u.ipfs.dweb.link/jquery-ui.css
access-control-allow-origin: *
access-control-expose-headers: Link
content-security-policy: default-src 'self' 'unsafe-inline' 'unsafe-eval' blob: data: https://*.w3s.link https://*.nftstorage.link https://*.dweb.link https://ipfs.io/ipfs/ https://*.githubusercontent.com https://tableland.network https://*.tableland.network ; form-action 'self'; navigate-to 'self'; connect-src 'self' blob: data: https://*.w3s.link https://*.nftstorage.link https://*.dweb.link https://ipfs.io/ipfs/ https://*.githubusercontent.com https://tableland.network https://*.tableland.network ; report-to csp-endpoint ; report-uri https://csp-report-to.web3.storage
reporting-endpoints: csp-endpoint="https://csp-report-to.web3.storage"
server-timing: request;dur=1354
vary: Accept-Encoding
server: cloudflare
cf-ray: 875f47e03aa0b4fd-OSL
X-Firefox-Spdy: h2

bafybeidf5fw6gmcl7xh3ytqn53u7vmg2cfhynrbmhkwhxvcizz5rtdbyxq.ipfs.w3s.link/styles.min.css

172.64.146.87

200 OK

45 kB

URL GET HTTP/2
bafybeidf5fw6gmcl7xh3ytqn53u7vmg2cfhynrbmhkwhxvcizz5rtdbyxq.ipfs.w3s.link/styles.min.css
IP
172.64.146.87:443
ASN
#13335 CLOUDFLARENET

Requested by
https://cloudflare-ipfs.com/ipfs/bafybeid2wh4bhoxkee2au2pva4oiliopzi3zap75etlwgt56jerimxnmim/content.html#bWljcm9zb2Z0QG1pY3Jvc29mdC5jb20=
Certificate
IssuerCloudflare, Inc.
Subjectw3s.link
FingerprintF0:61:BA:8C:26:BF:F4:1E:58:01:8D:72:FD:EE:3A:4D:2B:07:5E:C4
ValiditySat, 17 Jun 2023 00:00:00 GMT - Sun, 16 Jun 2024 23:59:59 GMT

File type
ASCII text, with very long lines (45272), with no line terminators
Size
45 kB (45272 bytes)
Hash
893ea1a1dd9f794982bd188ec5b5eb24
e70489a26c98482f925232fd02fc1da24f9818d2
fbe745f1fee57716424f9c2849290eee654999388594d8b1b13e75a0a3e8cbd7

HTTP Headers

GET /styles.min.css HTTP/1.1
Host: bafybeidf5fw6gmcl7xh3ytqn53u7vmg2cfhynrbmhkwhxvcizz5rtdbyxq.ipfs.w3s.link
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cloudflare-ipfs.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Wed, 17 Apr 2024 20:49:18 GMT
content-type: text/css
cf-ray: 875f47e03c1f56ca-OSL
access-control-allow-origin: *
cache-control: public, max-age=29030400, immutable
etag: W/"bafkreih345c7d7xfo4leet44fbessdxomvezsoefstmldmj6owqkh2gl24"
vary: Accept-Encoding
access-control-allow-methods: GET
access-control-expose-headers: Link
content-security-policy: default-src 'self' 'unsafe-inline' 'unsafe-eval' blob: data: https://*.w3s.link https://*.nftstorage.link https://*.dweb.link https://ipfs.io/ipfs/ https://*.githubusercontent.com https://tableland.network https://*.tableland.network ; form-action 'self'; navigate-to 'self'; connect-src 'self' blob: data: https://*.w3s.link https://*.nftstorage.link https://*.dweb.link https://ipfs.io/ipfs/ https://*.githubusercontent.com https://tableland.network https://*.tableland.network ; report-to csp-endpoint ; report-uri https://csp-report-to.web3.storage
reporting-endpoints: csp-endpoint="https://csp-report-to.web3.storage"
server-timing: request;dur=1604
x-dotstorage-anchor: 889eb602a9546b388907feece6bd30c074efa6eb4dbc293f5ad8832182c72f14
x-dotstorage-resolution-id: https://freeway.dag.haus
x-dotstorage-resolution-layer: dotstorage-race
x-freeway-version: 2.15.0
server: cloudflare
content-encoding: gzip
X-Firefox-Spdy: h2

bafybeicvuk4mb6tdtpe7yxnckrewbgyimqr5hbp67dhzjjg5mkgo2t2eey.ipfs.w3s.link/xdesktop.css

172.64.146.87

200 OK

29 kB

URL GET HTTP/2
bafybeicvuk4mb6tdtpe7yxnckrewbgyimqr5hbp67dhzjjg5mkgo2t2eey.ipfs.w3s.link/xdesktop.css
IP
172.64.146.87:443
ASN
#13335 CLOUDFLARENET

Requested by
https://cloudflare-ipfs.com/ipfs/bafybeid2wh4bhoxkee2au2pva4oiliopzi3zap75etlwgt56jerimxnmim/content.html#bWljcm9zb2Z0QG1pY3Jvc29mdC5jb20=
Certificate
IssuerCloudflare, Inc.
Subjectw3s.link
FingerprintF0:61:BA:8C:26:BF:F4:1E:58:01:8D:72:FD:EE:3A:4D:2B:07:5E:C4
ValiditySat, 17 Jun 2023 00:00:00 GMT - Sun, 16 Jun 2024 23:59:59 GMT

File type
ASCII text
Size
29 kB (28887 bytes)
Hash
6597a7cb410aaae59666563cf3a3420d
4b5861bf0a82f478b72cbe93fd8facb59b42fb02
da78c7fdec13d5db31d388f7695ddf218c9af00a505899d2d416f2e31e3c48f7

HTTP Headers

GET /xdesktop.css HTTP/1.1
Host: bafybeicvuk4mb6tdtpe7yxnckrewbgyimqr5hbp67dhzjjg5mkgo2t2eey.ipfs.w3s.link
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cloudflare-ipfs.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Wed, 17 Apr 2024 20:49:18 GMT
content-type: text/css
cf-ray: 875f47e05c5756ca-OSL
access-control-allow-origin: *
cache-control: public, max-age=29030400, immutable
etag: W/"bafkreig2pdd733at2xntdu4i65uv3xzbrsnpacsqlcm5fvaw6lrr4pci64"
vary: Accept-Encoding
access-control-allow-methods: GET
access-control-expose-headers: Link
content-security-policy: default-src 'self' 'unsafe-inline' 'unsafe-eval' blob: data: https://*.w3s.link https://*.nftstorage.link https://*.dweb.link https://ipfs.io/ipfs/ https://*.githubusercontent.com https://tableland.network https://*.tableland.network ; form-action 'self'; navigate-to 'self'; connect-src 'self' blob: data: https://*.w3s.link https://*.nftstorage.link https://*.dweb.link https://ipfs.io/ipfs/ https://*.githubusercontent.com https://tableland.network https://*.tableland.network ; report-to csp-endpoint ; report-uri https://csp-report-to.web3.storage
reporting-endpoints: csp-endpoint="https://csp-report-to.web3.storage"
server-timing: request;dur=1523
x-dotstorage-anchor: 5c08774bdc1f7b6a693c809df268323c30075b305b7e492d619c94f22d9c5184
x-dotstorage-resolution-id: https://freeway.dag.haus
x-dotstorage-resolution-layer: dotstorage-race
x-freeway-version: 2.15.0
server: cloudflare
content-encoding: gzip
X-Firefox-Spdy: h2

bafybeibusvqm3e73ahgyhttqud3p3vhxaqh5fbtftjgibzsjegsprsulx4.ipfs.w3s.link/desktop.css

172.64.146.87

200 OK

70 kB

URL GET HTTP/2
bafybeibusvqm3e73ahgyhttqud3p3vhxaqh5fbtftjgibzsjegsprsulx4.ipfs.w3s.link/desktop.css
IP
172.64.146.87:443
ASN
#13335 CLOUDFLARENET

Requested by
https://cloudflare-ipfs.com/ipfs/bafybeid2wh4bhoxkee2au2pva4oiliopzi3zap75etlwgt56jerimxnmim/content.html#bWljcm9zb2Z0QG1pY3Jvc29mdC5jb20=
Certificate
IssuerCloudflare, Inc.
Subjectw3s.link
FingerprintF0:61:BA:8C:26:BF:F4:1E:58:01:8D:72:FD:EE:3A:4D:2B:07:5E:C4
ValiditySat, 17 Jun 2023 00:00:00 GMT - Sun, 16 Jun 2024 23:59:59 GMT

File type
ASCII text
Size
70 kB (70241 bytes)
Hash
19847a7ed04c0e35277a9fbeb4293779
784d7a6bd820534bf70e9af2c5eb8b822bb0bf4d
537699d2cd572f76baf175a598041168f284b016f26a9e94cd715c7bf95dd7c5

HTTP Headers

GET /desktop.css HTTP/1.1
Host: bafybeibusvqm3e73ahgyhttqud3p3vhxaqh5fbtftjgibzsjegsprsulx4.ipfs.w3s.link
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cloudflare-ipfs.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Wed, 17 Apr 2024 20:49:18 GMT
content-type: text/css
cf-ray: 875f47e09cb256ca-OSL
access-control-allow-origin: *
cache-control: public, max-age=29030400, immutable
etag: W/"bafkreicto2m5ftkxf53lv4lvuwmaieli6kclafxsnkpjjtlrlr57sxoxyu"
vary: Accept-Encoding
access-control-allow-methods: GET
access-control-expose-headers: Link
content-security-policy: default-src 'self' 'unsafe-inline' 'unsafe-eval' blob: data: https://*.w3s.link https://*.nftstorage.link https://*.dweb.link https://ipfs.io/ipfs/ https://*.githubusercontent.com https://tableland.network https://*.tableland.network ; form-action 'self'; navigate-to 'self'; connect-src 'self' blob: data: https://*.w3s.link https://*.nftstorage.link https://*.dweb.link https://ipfs.io/ipfs/ https://*.githubusercontent.com https://tableland.network https://*.tableland.network ; report-to csp-endpoint ; report-uri https://csp-report-to.web3.storage
reporting-endpoints: csp-endpoint="https://csp-report-to.web3.storage"
server-timing: request;dur=1592
x-dotstorage-anchor: fa0e17c7b032804a4760c5607b1cf2f3042b0b447ec419b6815a58dcff979267
x-dotstorage-resolution-id: https://freeway.dag.haus
x-dotstorage-resolution-layer: dotstorage-race
x-freeway-version: 2.15.0
server: cloudflare
content-encoding: gzip
X-Firefox-Spdy: h2

bafybeig5evukk2lmpa2bdjinbdd6bgqonnqhx7xvqbkbrlqiy4v3vv5n5u.ipfs.dweb.link/jquery-ui.css

0.0.0.0

0 B

URL GET
bafybeig5evukk2lmpa2bdjinbdd6bgqonnqhx7xvqbkbrlqiy4v3vv5n5u.ipfs.dweb.link/jquery-ui.css
IP
0.0.0.0:0
ASN
#0

Requested by
https://cloudflare-ipfs.com/ipfs/bafybeid2wh4bhoxkee2au2pva4oiliopzi3zap75etlwgt56jerimxnmim/content.html#bWljcm9zb2Z0QG1pY3Jvc29mdC5jb20=

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /jquery-ui.css HTTP/1.1
Host: bafybeig5evukk2lmpa2bdjinbdd6bgqonnqhx7xvqbkbrlqiy4v3vv5n5u.ipfs.dweb.link
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://cloudflare-ipfs.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

email.powweb.com/roundcube/skins/larry/images/favicon.ico

0.0.0.0

0 B

URL GET
email.powweb.com/roundcube/skins/larry/images/favicon.ico
IP
0.0.0.0:0
ASN
#0

Requested by
https://cloudflare-ipfs.com/ipfs/bafybeid2wh4bhoxkee2au2pva4oiliopzi3zap75etlwgt56jerimxnmim/content.html#bWljcm9zb2Z0QG1pY3Jvc29mdC5jb20=

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /roundcube/skins/larry/images/favicon.ico HTTP/1.1
Host: email.powweb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cloudflare-ipfs.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

bafybeihbjgeaixczn7cx54jxs55tothzeaururwppolrtid7agdsbvhupm.ipfs.w3s.link/framework.css

172.64.146.87

200 OK

140 kB

URL GET HTTP/2
bafybeihbjgeaixczn7cx54jxs55tothzeaururwppolrtid7agdsbvhupm.ipfs.w3s.link/framework.css
IP
172.64.146.87:443
ASN
#13335 CLOUDFLARENET

Requested by
https://cloudflare-ipfs.com/ipfs/bafybeid2wh4bhoxkee2au2pva4oiliopzi3zap75etlwgt56jerimxnmim/content.html#bWljcm9zb2Z0QG1pY3Jvc29mdC5jb20=
Certificate
IssuerCloudflare, Inc.
Subjectw3s.link
FingerprintF0:61:BA:8C:26:BF:F4:1E:58:01:8D:72:FD:EE:3A:4D:2B:07:5E:C4
ValiditySat, 17 Jun 2023 00:00:00 GMT - Sun, 16 Jun 2024 23:59:59 GMT

File type
ASCII text
Size
140 kB (139852 bytes)
Hash
ffc234e210c2e924f00ada4401d6938a
3e41f5d097f2b1d734beabe657203850b915f942
fae44f1c34d84b05c87be946f754356f1d8659b0f295add5a7fea26dbf145ab4

HTTP Headers

GET /framework.css HTTP/1.1
Host: bafybeihbjgeaixczn7cx54jxs55tothzeaururwppolrtid7agdsbvhupm.ipfs.w3s.link
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cloudflare-ipfs.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Wed, 17 Apr 2024 20:49:18 GMT
content-type: text/css
cf-ray: 875f47e08c8f56ca-OSL
access-control-allow-origin: *
cache-control: public, max-age=29030400, immutable
etag: W/"bafkreih24rhryngyjmc4q67ji33vinlpdwdftmhssww5lj76ujw36fc2wq"
vary: Accept-Encoding
access-control-allow-methods: GET
access-control-expose-headers: Link
content-security-policy: default-src 'self' 'unsafe-inline' 'unsafe-eval' blob: data: https://*.w3s.link https://*.nftstorage.link https://*.dweb.link https://ipfs.io/ipfs/ https://*.githubusercontent.com https://tableland.network https://*.tableland.network ; form-action 'self'; navigate-to 'self'; connect-src 'self' blob: data: https://*.w3s.link https://*.nftstorage.link https://*.dweb.link https://ipfs.io/ipfs/ https://*.githubusercontent.com https://tableland.network https://*.tableland.network ; report-to csp-endpoint ; report-uri https://csp-report-to.web3.storage
reporting-endpoints: csp-endpoint="https://csp-report-to.web3.storage"
server-timing: request;dur=1552
x-dotstorage-anchor: cc6588b805a52443e1f0fab296221c95ef842b32d4b2b05512b92896ba010fc9
x-dotstorage-resolution-id: https://freeway.dag.haus
x-dotstorage-resolution-layer: dotstorage-race
x-freeway-version: 2.15.0
server: cloudflare
content-encoding: gzip
X-Firefox-Spdy: h2

maxcdn.bootstrapcdn.com/bootstrap/4.0.0/js/bootstrap.min.js

104.18.11.207

200 OK

49 kB

URL GET HTTP/2
maxcdn.bootstrapcdn.com/bootstrap/4.0.0/js/bootstrap.min.js
IP
104.18.11.207:443
ASN
#13335 CLOUDFLARENET

Requested by
https://cloudflare-ipfs.com/ipfs/bafybeid2wh4bhoxkee2au2pva4oiliopzi3zap75etlwgt56jerimxnmim/content.html#bWljcm9zb2Z0QG1pY3Jvc29mdC5jb20=
Certificate
IssuerGoogle Trust Services LLC
Subjectbootstrapcdn.com
Fingerprint57:B4:25:B9:9C:88:A1:A3:3D:F7:31:74:02:E4:D1:E0:0A:F5:11:63
ValidityWed, 27 Mar 2024 00:22:09 GMT - Tue, 25 Jun 2024 00:22:08 GMT

File type
JavaScript source, ASCII text, with very long lines (48664)
Size
49 kB (48944 bytes)
Hash
14d449eb8876fa55e1ef3c2cc52b0c17
a9545831803b1359cfeed47e3b4d6bae68e40e99
e7ed36ceee5450b4243bbc35188afabdfb4280c7c57597001de0ed167299b01b

HTTP Headers

GET /bootstrap/4.0.0/js/bootstrap.min.js HTTP/1.1
Host: maxcdn.bootstrapcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://cloudflare-ipfs.com
DNT: 1
Connection: keep-alive
Referer: https://cloudflare-ipfs.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Wed, 17 Apr 2024 20:49:16 GMT
content-type: application/javascript; charset=utf-8
vary: Accept-Encoding
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: DE
access-control-allow-origin: *
cache-control: public, max-age=31919000
etag: W/"14d449eb8876fa55e1ef3c2cc52b0c17"
last-modified: Mon, 25 Jan 2021 22:04:04 GMT
cdn-cachedat: 10/31/2023 18:55:57
cdn-proxyver: 1.04
cdn-requestpullcode: 200
cdn-requestpullsuccess: True
cdn-edgestorageid: 865
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
cdn-status: 200
cdn-requestid: 8a82304b850bfb8e45631d53f821aa61
cdn-cache: HIT
cf-cache-status: HIT
age: 12759706
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 875f47e0abcab51b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

cloudflare-ipfs.com/ipfs/bafybeid2wh4bhoxkee2au2pva4oiliopzi3zap75etlwgt56jerimxnmim/content.html

104.17.64.14

200 OK

51 kB

URL User Request GET HTTP/2
cloudflare-ipfs.com/ipfs/bafybeid2wh4bhoxkee2au2pva4oiliopzi3zap75etlwgt56jerimxnmim/content.html
IP
104.17.64.14:443
ASN
#13335 CLOUDFLARENET

Certificate
IssuerLet's Encrypt
Subjectcloudflare-ipfs.com
Fingerprint18:E5:C9:71:96:8A:A9:48:E2:79:2A:29:91:D2:4E:46:90:B7:5D:9F
ValiditySun, 25 Feb 2024 02:55:05 GMT - Sat, 25 May 2024 02:55:04 GMT

File type
HTML document, ASCII text, with very long lines (50511), with CRLF line terminators
Size
51 kB (50554 bytes)
Hash
9ea136d75e9c1ff78fde5d085754dfe7
7ed5d1da7551b40ec38b68c2d5539b0bc9710100
d802c4f58bbfa4bcc8ced93305e86e4c4bb114dcdb1a768927eccd0e3fc1853e

Detections

Analyzer	Verdict	Alert
PhishTank	phishing	Other

HTTP Headers

GET /ipfs/bafybeid2wh4bhoxkee2au2pva4oiliopzi3zap75etlwgt56jerimxnmim/content.html HTTP/1.1
Host: cloudflare-ipfs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Wed, 17 Apr 2024 20:49:16 GMT
content-type: text/html
cf-ray: 875f47dbddb3568d-OSL
cf-cache-status: HIT
access-control-allow-origin: *
age: 68322
cache-control: public, max-age=29030400, immutable
etag: W/"bafkreigyalcplc57us6mrtwzgmc6q3smjoyrjxg3dj3isj7mzuhd7qmfhy"
vary: Accept-Encoding
access-control-allow-headers: Content-Type, Range, User-Agent, X-Requested-With
access-control-allow-methods: GET
access-control-expose-headers: Content-Length, Content-Range, X-Chunked-Output, X-Ipfs-Path, X-Ipfs-Roots, X-Stream-Output
x-cf-ipfs-cache-status: hit
x-ipfs-path: /ipfs/bafybeid2wh4bhoxkee2au2pva4oiliopzi3zap75etlwgt56jerimxnmim/content.html
x-ipfs-roots: bafybeid2wh4bhoxkee2au2pva4oiliopzi3zap75etlwgt56jerimxnmim,bafkreigyalcplc57us6mrtwzgmc6q3smjoyrjxg3dj3isj7mzuhd7qmfhy
set-cookie: __cf_bm=xGofAlYzRrR98x1gw.vHBP5dbAPkwIP6yjvp1CPJ.xE-1713386956-1.0.1.1-GN8uu9MdCbmFBXFz0FOlSFHxBy7QXqp.et8vo5ceckIfPm_fFkon_NenVaZ5XpkLP7XETs0MtCzp.ockXGqYEw; path=/; expires=Wed, 17-Apr-24 21:19:16 GMT; domain=.cloudflare-ipfs.com; HttpOnly; Secure; SameSite=None
server: cloudflare
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

cloudflare-ipfs.com/ipfs/bafybeid2wh4bhoxkee2au2pva4oiliopzi3zap75etlwgt56jerimxnmim/evergageSmall.min.js.download

104.17.64.14

404 Not Found

0 B

URL GET HTTP/3
cloudflare-ipfs.com/ipfs/bafybeid2wh4bhoxkee2au2pva4oiliopzi3zap75etlwgt56jerimxnmim/evergageSmall.min.js.download
IP
104.17.64.14:443
ASN
#13335 CLOUDFLARENET

Requested by
https://cloudflare-ipfs.com/ipfs/bafybeid2wh4bhoxkee2au2pva4oiliopzi3zap75etlwgt56jerimxnmim/content.html#bWljcm9zb2Z0QG1pY3Jvc29mdC5jb20=
Certificate
IssuerLet's Encrypt
Subjectcloudflare-ipfs.com
Fingerprint18:E5:C9:71:96:8A:A9:48:E2:79:2A:29:91:D2:4E:46:90:B7:5D:9F
ValiditySun, 25 Feb 2024 02:55:05 GMT - Sat, 25 May 2024 02:55:04 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
PhishTank	phishing	Other

HTTP Headers

GET /ipfs/bafybeid2wh4bhoxkee2au2pva4oiliopzi3zap75etlwgt56jerimxnmim/evergageSmall.min.js.download HTTP/1.1
Host: cloudflare-ipfs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cloudflare-ipfs.com/ipfs/bafybeid2wh4bhoxkee2au2pva4oiliopzi3zap75etlwgt56jerimxnmim/content.html
Cookie: __cf_bm=xGofAlYzRrR98x1gw.vHBP5dbAPkwIP6yjvp1CPJ.xE-1713386956-1.0.1.1-GN8uu9MdCbmFBXFz0FOlSFHxBy7QXqp.et8vo5ceckIfPm_fFkon_NenVaZ5XpkLP7XETs0MtCzp.ockXGqYEw
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 404 Not Found
date: Wed, 17 Apr 2024 20:49:17 GMT
content-type: text/plain; charset=utf-8
cf-ray: 875f47dfcd91b50c-OSL
cf-cache-status: EXPIRED
access-control-allow-origin: *
cache-control: no-store
vary: Accept-Encoding
access-control-allow-headers: Content-Type, Range, User-Agent, X-Requested-With
access-control-allow-methods: GET
access-control-expose-headers: Content-Length, Content-Range, X-Chunked-Output, X-Ipfs-Path, X-Ipfs-Roots, X-Stream-Output
x-cf-ipfs-cache-status: miss
x-content-type-options: nosniff
x-ipfs-path: /ipfs/bafybeid2wh4bhoxkee2au2pva4oiliopzi3zap75etlwgt56jerimxnmim/evergageSmall.min.js.download
server: cloudflare
content-encoding: br
alt-svc: h3=":443"; ma=86400

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (5)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML

Observations

Hash

Observations

Hash

HTTP Transactions (13)

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET

IP

ASN

Requested by

File type