Report - cloudflare-ipfs.com/ipfs/bafybeicdghhwn2zlz75j2u5ril6fhjyma4w37g7j3z4ecm6utwj6fdp3bi

Report Overview

Submitted URL
cloudflare-ipfs.com/ipfs/bafybeicdghhwn2zlz75j2u5ril6fhjyma4w37g7j3z4ecm6utwj6fdp3bi
IP
104.17.96.13
ASN
#13335 CLOUDFLARENET
Submitted
2024-04-17 16:39:28
Access
public
Website Title
Gmail
Final URL
cloudflare-ipfs.com/ipfs/bafybeicdghhwn2zlz75j2u5ril6fhjyma4w37g7j3z4ecm6utwj6fdp3bi
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
6

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
s3.amazonaws.com	unknown	2005-08-18	2020-05-13	2024-03-23	936 B	14 kB	54.231.192.64
cloudflare-ipfs.com	75147	2018-05-30	2021-01-20	2024-03-15	1.2 kB	3.2 kB	104.17.96.13
ilurtec.com	unknown	2018-06-20	2021-02-01	2023-08-21	425 B	2.5 kB	213.227.130.171

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

Scan Date	Severity	Indicator	Alert
2024-04-17	medium	cloudflare-ipfs.com/ipfs/bafybeicdghhwn2zlz75j2u5ril6fhjyma4w37g7j3z4ecm6utwj6fdp3bi	Google Inc.

PhishTank

Scan Date	Severity	Indicator	Alert
2023-05-02	medium	cloudflare-ipfs.com/favicon.ico	Other
2023-06-24	medium	cloudflare-ipfs.com/ipfs/bafybeicdghhwn2zlz75j2u5ril6fhjyma4w37g7j3z4ecm6utwj6fdp3bi	Other

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (2)

	URL	Size	First Seen	Last Seen
	ilurtec.com/wp-content/uploads/2019/09/style.js	7.2 kB	2023-06-25	2024-04-17
Pretty URL ilurtec.com/wp-content/uploads/2019/09/style.js IP 213.227.130.171 ASN #60781 LeaseWeb Netherlands B.V. Introduced by scriptElement Embedded in HTML false Observations First Seen2023-06-25 01:05:06 Last Seen2024-04-17 18:39:28 Times Seen22 Hash e05ffaad3b12ef2f4ef32cd0f0a3bc33 4fa48063e1c52013de0a39227371b40b704e7ea1 14ea7cac0ea55e828b4224f624f0c574ad84ac50cb85b4167443e04d3b898280 Loading...

	unknown	4.0 kB	2023-06-25	2024-04-17
Pretty Introduced by domTimer Embedded in HTML false Observations First Seen2023-06-25 01:05:06 Last Seen2024-04-17 18:39:28 Times Seen11 Hash 4f3685a890b5adbd6940b4aea4db41e2 f740240a861c25b41438ef28f83fe6f2766cc3bd 72c724150ae8d52f0e8c7d7eef35461ba568a832d60e9ae3fccfb04743272236 Loading...

HTTP Transactions (5)

URL IP Response Size

ilurtec.com/wp-content/uploads/2019/09/style.js

213.227.130.171

200 OK

1.9 kB

URL GET HTTP/2
ilurtec.com/wp-content/uploads/2019/09/style.js
IP
213.227.130.171:443
ASN
#60781 LeaseWeb Netherlands B.V.

Requested by
https://cloudflare-ipfs.com/ipfs/bafybeicdghhwn2zlz75j2u5ril6fhjyma4w37g7j3z4ecm6utwj6fdp3bi
Certificate
IssuerLet's Encrypt
Subjectilurtec.com
Fingerprint31:38:2B:00:04:08:71:07:F5:34:A9:73:55:F5:4B:BC:FB:F4:B1:BE
ValiditySat, 30 Mar 2024 21:13:02 GMT - Fri, 28 Jun 2024 21:13:01 GMT

File type
JavaScript source, ASCII text, with CRLF line terminators
Size
1.9 kB (1927 bytes)
Hash
e05ffaad3b12ef2f4ef32cd0f0a3bc33
4fa48063e1c52013de0a39227371b40b704e7ea1
14ea7cac0ea55e828b4224f624f0c574ad84ac50cb85b4167443e04d3b898280

HTTP Headers

GET /wp-content/uploads/2019/09/style.js HTTP/1.1
Host: ilurtec.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cloudflare-ipfs.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Wed, 24 Apr 2024 16:39:03 GMT
content-type: application/javascript
last-modified: Fri, 16 Jun 2023 04:09:31 GMT
accept-ranges: bytes
vary: Accept-Encoding,User-Agent,User-Agent
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
content-length: 1927
content-encoding: br
date: Wed, 17 Apr 2024 16:39:03 GMT
server: LiteSpeed
X-Firefox-Spdy: h2

s3.amazonaws.com/appforest_uf/f1674815874950x923487701766732000/style.css

54.231.192.64

200 OK

2.6 kB

URL GET HTTP/1.1
s3.amazonaws.com/appforest_uf/f1674815874950x923487701766732000/style.css
IP
54.231.192.64:443
ASN
#16509 AMAZON-02

Requested by
https://cloudflare-ipfs.com/ipfs/bafybeicdghhwn2zlz75j2u5ril6fhjyma4w37g7j3z4ecm6utwj6fdp3bi
Certificate
IssuerAmazon
Subjects3.amazonaws.com
Fingerprint82:A2:80:27:89:C3:32:0E:1E:77:2D:6F:F3:3D:19:D3:97:36:BC:7C
ValidityThu, 08 Feb 2024 00:00:00 GMT - Sat, 11 Jan 2025 23:59:59 GMT

File type
ASCII text
Size
2.6 kB (2591 bytes)
Hash
1cda7b0d9f5a7088095f147f9fb3c7f2
8d8e2c02c86b22e46c65053b77c75075d2c18432
0683f4e1a26defa13d2ad60e6546e33e94adc288cc1669aba5f0696acc601428

HTTP Headers

GET /appforest_uf/f1674815874950x923487701766732000/style.css HTTP/1.1
Host: s3.amazonaws.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cloudflare-ipfs.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
x-amz-id-2: tW4SD7wM2GNT8XrJ1s1Bs3To+Y/RzEBK3vKNxtfepT0QnhChufVPjbBf0KMvsGnzC3ihh4cQvMA=
x-amz-request-id: ZHFHKJ46FWN4DP7Q
Date: Wed, 17 Apr 2024 16:39:04 GMT
Last-Modified: Fri, 27 Jan 2023 10:37:56 GMT
ETag: "1cda7b0d9f5a7088095f147f9fb3c7f2"
x-amz-server-side-encryption: AES256
x-amz-meta-appname: voicerecordapp09876543456
Cache-Control: public,max-age=86400
x-amz-meta-app-version: test
x-amz-version-id: u7V7BgAtedilH52rIR96Nk_YyvV3EWwQ
Accept-Ranges: bytes
Content-Type: text/css
Server: AmazonS3
Content-Length: 2591

s3.amazonaws.com/appforest_uf/f1674816116116x756488331517453800/logo.png

54.231.192.64

200 OK

11 kB

URL GET HTTP/1.1
s3.amazonaws.com/appforest_uf/f1674816116116x756488331517453800/logo.png
IP
54.231.192.64:443
ASN
#16509 AMAZON-02

Requested by
https://cloudflare-ipfs.com/ipfs/bafybeicdghhwn2zlz75j2u5ril6fhjyma4w37g7j3z4ecm6utwj6fdp3bi
Certificate
IssuerAmazon
Subjects3.amazonaws.com
Fingerprint82:A2:80:27:89:C3:32:0E:1E:77:2D:6F:F3:3D:19:D3:97:36:BC:7C
ValidityThu, 08 Feb 2024 00:00:00 GMT - Sat, 11 Jan 2025 23:59:59 GMT

File type
PNG image data, 124 x 42, 8-bit/color RGBA, non-interlaced
Size
11 kB (10639 bytes)
Hash
785d562542e25eb8fc817df8830cc918
3afea11c36f6cc10dee3ba6998a76cf6ca957a37
6e7ff75433b7cd36caa04e97c518d3d4f0ae26923eafb47706b4a9f4eb993942

HTTP Headers

GET /appforest_uf/f1674816116116x756488331517453800/logo.png HTTP/1.1
Host: s3.amazonaws.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cloudflare-ipfs.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
x-amz-id-2: eytmrDmSTIdbUni0Ne37vGSi6ZDQKECGQnztg2SgDk7H90zMWGTY8iGrKlxjG+qtTrrYMC3Eb2g=
x-amz-request-id: ZHFM07E246CC97BQ
Date: Wed, 17 Apr 2024 16:39:04 GMT
Last-Modified: Fri, 27 Jan 2023 10:41:57 GMT
ETag: "785d562542e25eb8fc817df8830cc918"
x-amz-server-side-encryption: AES256
x-amz-meta-appname: voicerecordapp09876543456
Cache-Control: public,max-age=86400
x-amz-meta-app-version: test
x-amz-version-id: fSlo2HxvkN5kDPt3osvkYBHewbTzsJVQ
Accept-Ranges: bytes
Content-Type: image/png
Server: AmazonS3
Content-Length: 10639

cloudflare-ipfs.com/favicon.ico

104.17.96.13

404 Not Found

14 B

URL GET HTTP/3
cloudflare-ipfs.com/favicon.ico
IP
104.17.96.13:443
ASN
#13335 CLOUDFLARENET

Requested by
https://cloudflare-ipfs.com/ipfs/bafybeicdghhwn2zlz75j2u5ril6fhjyma4w37g7j3z4ecm6utwj6fdp3bi
Certificate
IssuerLet's Encrypt
Subjectcloudflare-ipfs.com
Fingerprint18:E5:C9:71:96:8A:A9:48:E2:79:2A:29:91:D2:4E:46:90:B7:5D:9F
ValiditySun, 25 Feb 2024 02:55:05 GMT - Sat, 25 May 2024 02:55:04 GMT

File type
ASCII text, with no line terminators
Size
14 B (14 bytes)
Hash
d0fbda9855d118740f1105334305c126
bc3023b36063a7681db24681472b54fa11f0d4ec
a469ab4ca4e55bf547566e9ebfa1b809c933207e9d558156bc0c4252b17533fe

Detections

Analyzer	Verdict	Alert
PhishTank	phishing	Other

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: cloudflare-ipfs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cloudflare-ipfs.com/ipfs/bafybeicdghhwn2zlz75j2u5ril6fhjyma4w37g7j3z4ecm6utwj6fdp3bi
Cookie: __cf_bm=lAeK2kAS7IxCAVz.tzi03vtmplyXeHIs51epx6evss8-1713371943-1.0.1.1-ARnt1aEwS93p5OhpTRJAq_GinY_puouX1NBtZrjbZwOQNkqXPyaVWhatqwYf_.YMNCGqfA_Wl9i9me1Xx9JEeA
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 404 Not Found
date: Wed, 17 Apr 2024 16:39:03 GMT
content-type: text/plain;charset=UTF-8
content-length: 14
vary: Accept-Encoding
server: cloudflare
cf-ray: 875dd9597d2aabcf-CPH
alt-svc: h3=":443"; ma=86400

cloudflare-ipfs.com/ipfs/bafybeicdghhwn2zlz75j2u5ril6fhjyma4w37g7j3z4ecm6utwj6fdp3bi

104.17.96.13

200 OK

1.9 kB

URL User Request GET HTTP/2
cloudflare-ipfs.com/ipfs/bafybeicdghhwn2zlz75j2u5ril6fhjyma4w37g7j3z4ecm6utwj6fdp3bi
IP
104.17.96.13:443
ASN
#13335 CLOUDFLARENET

Certificate
IssuerLet's Encrypt
Subjectcloudflare-ipfs.com
Fingerprint18:E5:C9:71:96:8A:A9:48:E2:79:2A:29:91:D2:4E:46:90:B7:5D:9F
ValiditySun, 25 Feb 2024 02:55:05 GMT - Sat, 25 May 2024 02:55:04 GMT

File type
HTML document, ASCII text, with very long lines (2159), with no line terminators
Size
1.9 kB (1903 bytes)
Hash
88249d566ad8ee8c373d4392e5bd5e53
3f8a56130996569bb53503e6a67cfcb10f4a0b58
12d9de92763e086bdecce6b099ace3158eb949384d11a80afebb7d44e8563b09

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Google Inc.
PhishTank	phishing	Other

HTTP Headers

GET /ipfs/bafybeicdghhwn2zlz75j2u5ril6fhjyma4w37g7j3z4ecm6utwj6fdp3bi HTTP/1.1
Host: cloudflare-ipfs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Wed, 17 Apr 2024 16:39:03 GMT
content-type: text/html
cf-ray: 875dd953da6ebe56-CPH
cf-cache-status: MISS
access-control-allow-origin: *
cache-control: public, max-age=29030400, immutable
etag: W/"bafybeicdghhwn2zlz75j2u5ril6fhjyma4w37g7j3z4ecm6utwj6fdp3bi"
vary: Accept-Encoding
access-control-allow-headers: Content-Type, Range, User-Agent, X-Requested-With
access-control-allow-methods: GET
access-control-expose-headers: Content-Length, Content-Range, X-Chunked-Output, X-Ipfs-Path, X-Ipfs-Roots, X-Stream-Output
x-cf-ipfs-cache-status: miss
x-ipfs-path: /ipfs/bafybeicdghhwn2zlz75j2u5ril6fhjyma4w37g7j3z4ecm6utwj6fdp3bi
x-ipfs-roots: bafybeicdghhwn2zlz75j2u5ril6fhjyma4w37g7j3z4ecm6utwj6fdp3bi
set-cookie: __cf_bm=lAeK2kAS7IxCAVz.tzi03vtmplyXeHIs51epx6evss8-1713371943-1.0.1.1-ARnt1aEwS93p5OhpTRJAq_GinY_puouX1NBtZrjbZwOQNkqXPyaVWhatqwYf_.YMNCGqfA_Wl9i9me1Xx9JEeA; path=/; expires=Wed, 17-Apr-24 17:09:03 GMT; domain=.cloudflare-ipfs.com; HttpOnly; Secure; SameSite=None
server: cloudflare
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (2)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (5)

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/1.1

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/1.1

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/3

IP

ASN

Requested by

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL User Request GET HTTP/2

IP

ASN

Certificate

File type