Report - jcornerstone.com/toro/16557/dWsucmV0YWlsLmNsYWltcy5wcm9mZXNzaW9uYWxyaXNrc0BhamcuY29t

Report Overview

Submitted URL
jcornerstone.com/toro/16557/dWsucmV0YWlsLmNsYWltcy5wcm9mZXNzaW9uYWxyaXNrc0BhamcuY29t
IP
207.55.244.7
ASN
#11989 WEBINT
Submitted
2024-04-19 12:01:08
Access
public
Website Title
Just a moment...
Final URL
70152d10.fdf37ba85957ab3758484886.workers.dev/?qrc=uk.retail.claims.professionalrisks@ajg.com
Tags
phishing microsoft outlook
urlquery detections
Phishing - Microsoft Outlook

Detections

urlquery
3
Network Intrusion Detection
1
Threat Detection Systems
4

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
jcornerstone.com	unknown	2006-02-15	2018-07-09	2024-04-13	538 B	347 B	207.55.244.7
challenges.cloudflare.com	unknown	2009-02-17	2021-10-20	2024-04-19	5.0 kB	329 kB	104.17.3.184
70152d10.fdf37ba85957ab3758484886.workers.dev	unknown	2019-02-08	2024-03-25	2024-04-09	1.1 kB	7.7 kB	188.114.97.1

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Timestamp	Severity	Source IP	Destination IP	Alert
2024-04-19 12:00:43	low	Client IP	188.114.97.1	ET INFO Observed Cloudflare workers.dev Domain in TLS SNI

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

Scan Date	Severity	Indicator	Alert
2024-03-25	medium	70152d10.fdf37ba85957ab3758484886.workers.dev/	Office365
2024-03-25	medium	70152d10.fdf37ba85957ab3758484886.workers.dev/	Office365

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (46)

	URL	Size	First Seen	Last Seen
	challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=876cbc61fbefb503	436 kB	2024-04-19	2024-04-19
Pretty URL challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=876cbc61fbefb503 IP 104.17.3.184 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2024-04-19 14:01:11 Last Seen2024-04-19 14:01:13 Times Seen2 Hash 15e053027bc486fc0a59995e7208a2ed cb9d9ef44cd2e47ff520547cd2a88bc20eb47691 0beac90934ad3e63e35da73bfcf1aded6f92e789d98d2d814117fd7e284b4c4b Loading...

	70152d10.fdf37ba85957ab3758484886.workers.dev/?qrc=uk.retail.claims.professionalrisks@ajg.com	311 B	2024-03-25	2024-04-22
Pretty URL 70152d10.fdf37ba85957ab3758484886.workers.dev/?qrc=uk.retail.claims.professionalrisks@ajg.com IP 188.114.97.1 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2024-03-25 17:51:26 Last Seen2024-04-22 11:53:04 Times Seen39 Hash 49c89f37cf21d638d2f89ac062ed754c 8f2db8ccb0adb86062f9af9182d95c654698cd0d 22f0fef41f9b0511a1caf39ada4216516137a13b580a765c0662dc10b6d84a2a Loading...

	challenges.cloudflare.com/turnstile/v0/api.js?onload=onloadTurnstileCallback	42 kB	2024-04-18	2024-04-29
Pretty URL challenges.cloudflare.com/turnstile/v0/api.js?onload=onloadTurnstileCallback IP 104.17.3.184 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2024-04-18 21:08:49 Last Seen2024-04-29 16:17:51 Times Seen2594 Hash f94a2211ce789a95a7c67e8c660d63e8 f1fc19b6bcb96d0a905bf3192aaff0885ff9f36f 926dc3302f99ec05e4206e965ddeb7250f5910a8c38e82c7beafb724bbaaf37b Loading...

	challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/k9y35/0x4AAAAAAAVS6LJVKlnc3HwO/auto/normal	3.6 kB	2024-04-19	2024-04-19
Pretty URL challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/k9y35/0x4AAAAAAAVS6LJVKlnc3HwO/auto/normal IP 104.17.3.184 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2024-04-19 14:01:11 Last Seen2024-04-19 14:01:11 Times Seen1 Hash 31ab6ddb8b90c36399ffff8da5da7e86 83a1c8ac96274b2364828e3e73c86b763977a89f e6c1b2616c5f5cfe485f3faa6527e94a6f6572fedb4786923c351bab92760047 Loading...

		Size	First Seen	Last Seen
	#1 Eval - 92f2e8fa583a5de78f6e2f03d650c69d	28 B	2024-04-19	2024-04-19
Pretty Observations First Seen2024-04-19 14:01:11 Last Seen2024-04-19 14:01:11 Times Seen1 Hash 92f2e8fa583a5de78f6e2f03d650c69d fc57fab7019b473ea41f23dc587e849151026be2 f9839777b1687d75a8b61f665c13cd35971622711f4c051e30dbdad862a34cd9 Loading...

	#2 Eval - 7ce24f503b15c62e0898b988a843655d	28 B	2024-04-19	2024-04-19
Pretty Observations First Seen2024-04-19 14:01:11 Last Seen2024-04-19 14:01:11 Times Seen1 Hash 7ce24f503b15c62e0898b988a843655d 6fd48b92d87b4b7fc159a574b3d5926d1e2bc1bf 0be7dc03bec29ad6c230f73c15a9ba24da55079a72dd0f7a41f3f79d017d532d Loading...

	#3 Eval - 9ca5cea1c5a9e1f2346c16fd0692b087	28 B	2024-04-19	2024-04-19
Pretty Observations First Seen2024-04-19 14:01:11 Last Seen2024-04-19 14:01:11 Times Seen1 Hash 9ca5cea1c5a9e1f2346c16fd0692b087 85b59e32a676653a756a0a2ad6284dc32034a31a 48b47a49aff915ffdada43343e6295ebf1bbcef5e55c68c416953bbe9b780994 Loading...

	#4 Eval - c66380e990dcd0eb7a1a38875ed570db	28 B	2024-04-19	2024-04-19
Pretty Observations First Seen2024-04-19 14:01:11 Last Seen2024-04-19 14:01:11 Times Seen1 Hash c66380e990dcd0eb7a1a38875ed570db 6d64c0577fb371fc7114450fb46bf903fcd1c8c6 43c5a584bfba808ccce41a1b22363c3268a3129d018a301f3369592f42d1ca70 Loading...

	#5 Eval - 902b7a0659b0e852a6f3bca0b69edaff	28 B	2024-04-19	2024-04-19
Pretty Observations First Seen2024-04-19 14:01:11 Last Seen2024-04-19 14:01:11 Times Seen1 Hash 902b7a0659b0e852a6f3bca0b69edaff 13a60efebcd9bb8fedecd0b94bc211c842d99098 d3f52391f0ca030a4e729c14de9b63923cfa91e536685057ddb9148b72490102 Loading...

	#6 Eval - 55518dc70eb93e83ac9510b33e894f94	28 B	2024-04-19	2024-04-19
Pretty Observations First Seen2024-04-19 14:01:11 Last Seen2024-04-19 14:01:11 Times Seen1 Hash 55518dc70eb93e83ac9510b33e894f94 2212845b6dcec6bd8afdb1d522b684e7ce35574c dbc93e926fb9fef444752afec678dd1ca7b3fc55e7ee6700087116522bddb851 Loading...

	#7 Eval - 251b854c4b3944648548a30128b6c634	28 B	2024-04-19	2024-04-19
Pretty Observations First Seen2024-04-19 14:01:11 Last Seen2024-04-19 14:01:11 Times Seen1 Hash 251b854c4b3944648548a30128b6c634 773839ba3aca01f0fc95003c25573fb63db253bd c23f1abd776c56c5469a1a4083f888ab9208f7d739259b0dc56b4b35533cb05e Loading...

	#8 Eval - 89b60172c7fc8e59c4a74bf6deb37712	28 B	2024-04-19	2024-04-19
Pretty Observations First Seen2024-04-19 14:01:11 Last Seen2024-04-19 14:01:11 Times Seen1 Hash 89b60172c7fc8e59c4a74bf6deb37712 e522d4a506b7a39c5c964be1e7cb800404ab339b 2f2dc1381c3791e69e723fb417028fa7dd758880e8db598097ff6b145f870a1e Loading...

	#9 Eval - ed177a2aa09e1f3a576cd5ff6d5b7996	28 B	2024-04-19	2024-04-19
Pretty Observations First Seen2024-04-19 14:01:11 Last Seen2024-04-19 14:01:11 Times Seen1 Hash ed177a2aa09e1f3a576cd5ff6d5b7996 d17f6e3c228b58fb20d40ca0e917cdc47645216a 2cae2f7ab1c64987744854b114c39244be8f5edc427a825f6652110b010d5349 Loading...

	#10 Eval - e083a70cbf7bb7e5d072a03cde5c2b35	28 B	2024-04-19	2024-04-19
Pretty Observations First Seen2024-04-19 14:01:11 Last Seen2024-04-19 14:01:11 Times Seen1 Hash e083a70cbf7bb7e5d072a03cde5c2b35 409395eb03000d4a1cc448bd30a8fc035904c1ea 32d9a29e6cfe5573a3fe1c3bfc3ffb2c7a01d8580eb7af13637d3c4024f1c9f9 Loading...

	#11 Eval - ba8a589325b1305cedf999fcc436e631	28 B	2024-04-19	2024-04-19
Pretty Observations First Seen2024-04-19 14:01:11 Last Seen2024-04-19 14:01:11 Times Seen1 Hash ba8a589325b1305cedf999fcc436e631 6d067792b2f2a9923725417835138b555bbabb2e f1f93e59e37498684aa2c610aabf6cf1026ef6253c8b39d4a7a0c803d139468a Loading...

	#12 Eval - e4ec9d5ab2217484b8d62ceab1ed17c9	28 B	2024-04-19	2024-04-19
Pretty Observations First Seen2024-04-19 14:01:11 Last Seen2024-04-19 14:01:11 Times Seen1 Hash e4ec9d5ab2217484b8d62ceab1ed17c9 1748afac4b409b562080b54e664f0273ca96ec27 f06e6e65648a103492b291a88357a7318047a7cbca3ebd6a31536d96ecf93ebd Loading...

	#13 Eval - 0bee4a8c8b55c27d3688a7c93d085610	28 B	2024-04-19	2024-04-19
Pretty Observations First Seen2024-04-19 14:01:11 Last Seen2024-04-19 14:01:11 Times Seen1 Hash 0bee4a8c8b55c27d3688a7c93d085610 2b1f5fb864d7cf964c53ae5388a065d28876a1b0 d2ccb4c05b829bbec6319456385c57b0c881f70b62d578f8d094375c823a659c Loading...

	#14 Eval - a220bfff8d06e723ca1fabfbc8e63185	28 B	2024-04-19	2024-04-19
Pretty Observations First Seen2024-04-19 14:01:11 Last Seen2024-04-19 14:01:11 Times Seen1 Hash a220bfff8d06e723ca1fabfbc8e63185 caf0a2a5de7446b2d6217d1ad646c1677d44a3c6 9a04f1a45a6cbbd4f7eafabbadf42f909fb2f0c7d39c22f2403ac1531645c01d Loading...

	#15 Eval - bd1633af5fa12f40f071f8781d8e3e1d	28 B	2024-04-19	2024-04-19
Pretty Observations First Seen2024-04-19 14:01:12 Last Seen2024-04-19 14:01:12 Times Seen1 Hash bd1633af5fa12f40f071f8781d8e3e1d 047e9157ff3fc16178f1fda8e230ccbe9d879f29 2654646354fd948c442b09c2f0ff2a812ec72694b750bc60b778e14d6bffc099 Loading...

	#16 Eval - 79509484aa52e33a8703da283ef5d63a	28 B	2024-04-19	2024-04-19
Pretty Observations First Seen2024-04-19 14:01:12 Last Seen2024-04-19 14:01:12 Times Seen1 Hash 79509484aa52e33a8703da283ef5d63a 3b5cd30b8a4d397cf6dbc0e55bd199da0764a5c5 f49656040e14d3c11ae83ddebd4f7eeadf29e07830a036d96dbe123b499a515a Loading...

	#17 Eval - 8ab4ac2636fa1aaee6d4e29b6e4d9d4b	28 B	2024-04-19	2024-04-19
Pretty Observations First Seen2024-04-19 14:01:12 Last Seen2024-04-19 14:01:12 Times Seen1 Hash 8ab4ac2636fa1aaee6d4e29b6e4d9d4b 3695fbb1fd4301fb13795b1b6d470175f7e9fc55 6bb0678585b3b4c8d0591c65d7f9316c0c4ef96af96521e118c4f2b602d866ad Loading...

	#18 Eval - 7b1a43c1da416fe8b6e33801517d5911	28 B	2024-04-19	2024-04-19
Pretty Observations First Seen2024-04-19 14:01:12 Last Seen2024-04-19 14:01:12 Times Seen1 Hash 7b1a43c1da416fe8b6e33801517d5911 eacbe9bc811cd952b3c30a5919206749eeb1551c 5d6d0315b614b4e62b22cf787c13b9a537f369a954fa294ade3ee400218ed980 Loading...

	#19 Eval - 2b9cc1cadd4f2f071c74a216f5bd957b	28 B	2024-04-19	2024-04-19
Pretty Observations First Seen2024-04-19 14:01:12 Last Seen2024-04-19 14:01:12 Times Seen1 Hash 2b9cc1cadd4f2f071c74a216f5bd957b 5d4f35a07115c620232292e33fe2e231fd761e21 db7bfbc3385744f939854046eee81c0f3866b278d5f13dfb9fe87ea55dc7fd9d Loading...

	#20 Eval - 13a4bb075404a2ab7e30718b0a084d57	28 B	2024-04-19	2024-04-19
Pretty Observations First Seen2024-04-19 14:01:12 Last Seen2024-04-19 14:01:12 Times Seen1 Hash 13a4bb075404a2ab7e30718b0a084d57 d30939d01d37714aa92b7ce7d2add0a198e10a58 df5f8b0f5b2bd6fbc78e244d20bb9b758665c04225d1bcddc454b30d2488d223 Loading...

	#21 Eval - 80ab5869562c28f5622be139d2d67bdf	28 B	2024-04-19	2024-04-19
Pretty Observations First Seen2024-04-19 14:01:12 Last Seen2024-04-19 14:01:12 Times Seen1 Hash 80ab5869562c28f5622be139d2d67bdf af5b6bf773b19fc80c58fcf575f922ea779f0361 c9d5bdc4d4f411a4387e71ed35cf24ca14f5ad659d000ef9a208c38dc13b9b2e Loading...

	#22 Eval - 6e552567f5623e1d63c6e533352e386e	28 B	2024-04-19	2024-04-19
Pretty Observations First Seen2024-04-19 14:01:12 Last Seen2024-04-19 14:01:12 Times Seen1 Hash 6e552567f5623e1d63c6e533352e386e 0cf7d9299e3e6031d8d74266d75b8f2a9938321a 5321a49adb0aaa28632d8e10b9597936218a91b44abdb1131b11421dd359d49d Loading...

	#23 Eval - 2264ece0ac5d7bc04b3c72379bcd8b78	28 B	2024-04-19	2024-04-19
Pretty Observations First Seen2024-04-19 14:01:12 Last Seen2024-04-19 14:01:12 Times Seen1 Hash 2264ece0ac5d7bc04b3c72379bcd8b78 8705291d207d143f1596b6f74d66de41fca379ef 9c5e5302488c2490e1944a716ffd47b24551eb2775cb36d7b3170c5342859ea9 Loading...

	#24 Eval - bebe8edb6190c04cd3a175c2c14788b0	28 B	2024-04-19	2024-04-19
Pretty Observations First Seen2024-04-19 14:01:12 Last Seen2024-04-19 14:01:12 Times Seen1 Hash bebe8edb6190c04cd3a175c2c14788b0 9985a17c6609374aeaa195d8d2af21874b65bcb1 92fa42d9b7165ec82277bd652ef517e78afb50fea71aa5eb8c238f2d7bd8ee1a Loading...

	#25 Eval - 9eff3ad6ba4b443191915ffb5d198559	28 B	2024-04-19	2024-04-19
Pretty Observations First Seen2024-04-19 14:01:12 Last Seen2024-04-19 14:01:12 Times Seen1 Hash 9eff3ad6ba4b443191915ffb5d198559 4b6f256db6872af93beb58e4ec906abb50428433 9ac9353463ae8a1884033ea18a17713343022261fa287ada74ff9d65ac09874e Loading...

	#26 Eval - 04af9775bde3be144d7140d1fa0379a4	28 B	2024-04-19	2024-04-19
Pretty Observations First Seen2024-04-19 14:01:12 Last Seen2024-04-19 14:01:12 Times Seen1 Hash 04af9775bde3be144d7140d1fa0379a4 c676090bd4b0f4f8c3ffa3a9b62cda49a0c2c797 fcfbb8b656dd34f31ff527995cef69489eb5fcfc549422198fd1ca94ff092b20 Loading...

	#27 Eval - 94eda4539395034a82a1bcdba890de03	28 B	2024-04-19	2024-04-19
Pretty Observations First Seen2024-04-19 14:01:12 Last Seen2024-04-19 14:01:12 Times Seen1 Hash 94eda4539395034a82a1bcdba890de03 3f04b1a719d8e1fce29cacb286b9399b89be1bc7 54bbd0ee2dc91b76122c6901e1c2edeffe20b4abc01c6378d886ef5d425b2794 Loading...

	#28 Eval - 9e9312967151c1bfdfda60a8c76d62c3	28 B	2024-04-19	2024-04-19
Pretty Observations First Seen2024-04-19 14:01:12 Last Seen2024-04-19 14:01:12 Times Seen1 Hash 9e9312967151c1bfdfda60a8c76d62c3 55a59c39b2370be39be3d22bd2bfb0b03dc9e616 b4c7e7971acf04e9a971441703a332d2754b1c9746e7489d9749b3d73e78d58c Loading...

	#29 Eval - 5c7ec679a2e8669efe71914324489dfe	28 B	2024-04-19	2024-04-19
Pretty Observations First Seen2024-04-19 14:01:12 Last Seen2024-04-19 14:01:12 Times Seen1 Hash 5c7ec679a2e8669efe71914324489dfe a664bfc1c5b23bdc71f9c74d8565e35d4359619b d95e12a30f2ac070eb81f07570d75cf41d406b496063cf15d6fca0e824f7ca31 Loading...

	#30 Eval - c44598f7dc0c38d4efc8f1676e6f87ea	28 B	2024-04-19	2024-04-19
Pretty Observations First Seen2024-04-19 14:01:12 Last Seen2024-04-19 14:01:12 Times Seen1 Hash c44598f7dc0c38d4efc8f1676e6f87ea cee4086f6f0483fde1659628c2acb8dc5147c4c1 1e4cbd6dde2629c2042399e21c5f57367ff5e10ef282444f3faa0f1b9fa59f87 Loading...

	#31 Eval - 4c86260f77c4575d14b8bd6615b1e150	28 B	2024-04-19	2024-04-19
Pretty Observations First Seen2024-04-19 14:01:12 Last Seen2024-04-19 14:01:12 Times Seen1 Hash 4c86260f77c4575d14b8bd6615b1e150 f64c619b2069e21b5634534f1fad353ab6210124 a6bb410ab0287a706185199fa6817268605f6be5ba39034f2f8c365d9b70035e Loading...

	#32 Eval - 3e934ce3902b844a2020bd2d60d0759e	28 B	2024-04-19	2024-04-19
Pretty Observations First Seen2024-04-19 14:01:12 Last Seen2024-04-19 14:01:12 Times Seen1 Hash 3e934ce3902b844a2020bd2d60d0759e a41275ebcf29b989b1219e4edd421eac7cb053d9 14d9b0de9db6f66dd92ba318840d864f31735b611b89b120003e95e8c012220f Loading...

	#33 Eval - 761c8ba4fd3eaa08c465c7c9d2f92282	28 B	2024-04-19	2024-04-19
Pretty Observations First Seen2024-04-19 14:01:12 Last Seen2024-04-19 14:01:12 Times Seen1 Hash 761c8ba4fd3eaa08c465c7c9d2f92282 2fd5aface9b340c4a6e4639d390d3da1d7093fe7 084acf7d1d7cc607b8ed0198e8b45cc16222895841e66f8355781cfbe2afef06 Loading...

	#34 Eval - 43c81e43a6e7d9140033055ff3e04983	62 B	2024-04-18	2024-04-29
Pretty Observations First Seen2024-04-18 21:08:51 Last Seen2024-04-29 16:17:50 Times Seen2736 Hash 43c81e43a6e7d9140033055ff3e04983 b0eca03913678cb38c488c7c79cc4f9d2755ea17 3f7ef931c657c4333a401c40e8b0b8d1ff3b164542af45e14242314c0ec39f34 Loading...

	#35 Eval - 0fd16130571c13219821ddb5a4284967	28 B	2024-04-19	2024-04-19
Pretty Observations First Seen2024-04-19 14:01:12 Last Seen2024-04-19 14:01:12 Times Seen1 Hash 0fd16130571c13219821ddb5a4284967 9a94be99e8774faca846e1ca9ea6b096290dbecd 8b6a836ea4ed638e9ce79d0df2a1f5189720b5421db580e7d014de1dfc1b50a3 Loading...

	#36 Eval - c57667f213254b26e0a8dee547d9ad99	28 B	2024-04-19	2024-04-19
Pretty Observations First Seen2024-04-19 14:01:12 Last Seen2024-04-19 14:01:12 Times Seen1 Hash c57667f213254b26e0a8dee547d9ad99 244962a3029d6f45fd7583be16932ec0342ace17 1e948ba7f0ec90943cb7a84adee1ed1c5321f33c2d29dadee2826611fb38e1f3 Loading...

	#37 Eval - 2c4ac669bbd4f495f37052a6496fa2c5	28 B	2024-04-19	2024-04-19
Pretty Observations First Seen2024-04-19 14:01:12 Last Seen2024-04-19 14:01:12 Times Seen1 Hash 2c4ac669bbd4f495f37052a6496fa2c5 0220f6a5afd2d50c846403cbc33346cb4e8c4002 d06bea641bf567ed84391e716b1f24d3827dcf3ec63e8b72dc428b0f586ef4bb Loading...

	#38 Eval - 93efb54e1e2f39d1c52adfd99bc2eb12	28 B	2024-04-19	2024-04-19
Pretty Observations First Seen2024-04-19 14:01:12 Last Seen2024-04-19 14:01:12 Times Seen1 Hash 93efb54e1e2f39d1c52adfd99bc2eb12 ec98970d4344e7edc08512f6590a3e2d2abdbbf6 e19b7bd4d1156ee1bee419574f8acd52acae207924c1f963a58031c696aba587 Loading...

	#39 Eval - ccbd3ad0acdf31b7a97cd18a30075b5a	28 B	2024-04-19	2024-04-19
Pretty Observations First Seen2024-04-19 14:01:12 Last Seen2024-04-19 14:01:12 Times Seen1 Hash ccbd3ad0acdf31b7a97cd18a30075b5a c5f02df95fb9849489f9ae7dda722f4df47477c3 5c843d1443a08457c76f8cb0694ce5953ccde16f059a5be708ecd6281978f93a Loading...

	#40 Eval - 9e925e9341b490bfd3b4c4ca3b0c1ef2	4 B	2023-03-07	2024-05-02
Pretty Observations First Seen2023-03-07 01:03:43 Last Seen2024-05-02 17:39:40 Times Seen351145 Hash 9e925e9341b490bfd3b4c4ca3b0c1ef2 c2543fff3bfa6f144c2f06a7de6cd10c0b650cae 1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408 Loading...

	#41 Eval - 000609ead3d6e451b55f2dd42791372a	28 B	2024-04-19	2024-04-19
Pretty Observations First Seen2024-04-19 14:01:12 Last Seen2024-04-19 14:01:13 Times Seen1 Hash 000609ead3d6e451b55f2dd42791372a f85dce04febd4094e6902515510ce2d525bf82ce ee682cbf3cb8ef07f427e1846cd0e38d921a620c0f42cb3b6a89cab13da70ddf Loading...

	#42 Eval - beb8214d2a64b5e798e72bf1331eb656	28 B	2024-04-19	2024-04-19
Pretty Observations First Seen2024-04-19 14:01:13 Last Seen2024-04-19 14:01:13 Times Seen1 Hash beb8214d2a64b5e798e72bf1331eb656 7b1c0105f1d47f73afb43ebe75ce68ac78440d96 0d3dbcbd6d2c3aa5001dad2f2f361523e5445c83fe8032d8f71197a3928acb96 Loading...

HTTP Transactions (11)

URL IP Response Size

jcornerstone.com/toro/16557/dWsucmV0YWlsLmNsYWltcy5wcm9mZXNzaW9uYWxyaXNrc0BhamcuY29t

207.55.244.7

0 B

URL
jcornerstone.com/toro/16557/dWsucmV0YWlsLmNsYWltcy5wcm9mZXNzaW9uYWxyaXNrc0BhamcuY29t
IP
207.55.244.7:0
ASN
#11989 WEBINT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Microsoft Outlook

HTTP Headers

GET /toro/16557/dWsucmV0YWlsLmNsYWltcy5wcm9mZXNzaW9uYWxyaXNrc0BhamcuY29t HTTP/1.1
Host: jcornerstone.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Fri, 19 Apr 2024 12:00:13 GMT
Server: Apache/2.4.52 (cPanel) OpenSSL/1.1.1m mod_bwlimited/1.4
refresh: 0;url=https://70152d10.fdf37ba85957ab3758484886.workers.dev/?qrc=uk.retail.claims.professionalrisks@ajg.com
Keep-Alive: timeout=30, max=100
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html

challenges.cloudflare.com/turnstile/v0/api.js?onload=onloadTurnstileCallback

104.17.3.184

302 Found

0 B

URL GET HTTP/2
challenges.cloudflare.com/turnstile/v0/api.js?onload=onloadTurnstileCallback
IP
104.17.3.184:443
ASN
#13335 CLOUDFLARENET

Requested by
https://70152d10.fdf37ba85957ab3758484886.workers.dev/?qrc=uk.retail.claims.professionalrisks@ajg.com
Certificate
IssuerCloudflare, Inc.
Subjectchallenges.cloudflare.com
Fingerprint5F:E4:AA:8C:2E:24:D2:B1:69:9D:13:28:31:5C:65:FA:97:2A:E9:6E
ValidityFri, 18 Aug 2023 00:00:00 GMT - Sat, 17 Aug 2024 23:59:59 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /turnstile/v0/api.js?onload=onloadTurnstileCallback HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://70152d10.fdf37ba85957ab3758484886.workers.dev/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 302 Found
date: Fri, 19 Apr 2024 12:00:43 GMT
content-length: 0
cross-origin-resource-policy: cross-origin
cache-control: max-age=300, public
access-control-allow-origin: *
location: /turnstile/v0/b/471dc2adc340/api.js?onload=onloadTurnstileCallback
vary: Accept-Encoding
server: cloudflare
cf-ray: 876cbc614a91b523-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/cmg/1/GLhOioXg0bs57t4qPrORXFsL1%2BWig2mIKbgpVPMu7ZQ%3D

104.17.3.184

200 OK

61 B

URL GET HTTP/3
challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/cmg/1/GLhOioXg0bs57t4qPrORXFsL1%2BWig2mIKbgpVPMu7ZQ%3D
IP
104.17.3.184:443
ASN
#13335 CLOUDFLARENET

Requested by
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/k9y35/0x4AAAAAAAVS6LJVKlnc3HwO/auto/normal
Certificate
IssuerCloudflare, Inc.
Subjectchallenges.cloudflare.com
Fingerprint5F:E4:AA:8C:2E:24:D2:B1:69:9D:13:28:31:5C:65:FA:97:2A:E9:6E
ValidityFri, 18 Aug 2023 00:00:00 GMT - Sat, 17 Aug 2024 23:59:59 GMT

File type
PNG image data, 2 x 2, 8-bit/color RGB, non-interlaced
Size
61 B (61 bytes)
Hash
9246cca8fc3c00f50035f28e9f6b7f7d
3aa538440f70873b574f40cd793060f53ec17a5d
c07d7d29e3c20fa6ca4c5d20663688d52bad13e129ad82ce06b80eb187d9dc84

HTTP Headers

GET /cdn-cgi/challenge-platform/h/b/cmg/1/GLhOioXg0bs57t4qPrORXFsL1%2BWig2mIKbgpVPMu7ZQ%3D HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/k9y35/0x4AAAAAAAVS6LJVKlnc3HwO/auto/normal
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 19 Apr 2024 12:00:43 GMT
content-type: image/png
content-length: 61
cache-control: max-age=2629800, public
server: cloudflare
cf-ray: 876cbc626c8db503-OSL
alt-svc: h3=":443"; ma=86400

challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=876cbc61fbefb503

104.17.3.184

200 OK

173 kB

URL GET HTTP/3
challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=876cbc61fbefb503
IP
104.17.3.184:443
ASN
#13335 CLOUDFLARENET

Requested by
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/k9y35/0x4AAAAAAAVS6LJVKlnc3HwO/auto/normal
Certificate
IssuerCloudflare, Inc.
Subjectchallenges.cloudflare.com
Fingerprint5F:E4:AA:8C:2E:24:D2:B1:69:9D:13:28:31:5C:65:FA:97:2A:E9:6E
ValidityFri, 18 Aug 2023 00:00:00 GMT - Sat, 17 Aug 2024 23:59:59 GMT

File type
JavaScript source, ASCII text, with very long lines (65536), with no line terminators
Size
173 kB (173406 bytes)
Hash
15e053027bc486fc0a59995e7208a2ed
cb9d9ef44cd2e47ff520547cd2a88bc20eb47691
0beac90934ad3e63e35da73bfcf1aded6f92e789d98d2d814117fd7e284b4c4b

HTTP Headers

GET /cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=876cbc61fbefb503 HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/k9y35/0x4AAAAAAAVS6LJVKlnc3HwO/auto/normal
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 19 Apr 2024 12:00:43 GMT
content-type: application/javascript; charset=UTF-8
cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
vary: accept-encoding
server: cloudflare
cf-ray: 876cbc626c92b503-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/i/876cbc61fbefb503/1713528044218/76VKjyc8aOy3qje

104.17.3.184

200 OK

61 B

URL GET HTTP/3
challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/i/876cbc61fbefb503/1713528044218/76VKjyc8aOy3qje
IP
104.17.3.184:443
ASN
#13335 CLOUDFLARENET

Requested by
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/k9y35/0x4AAAAAAAVS6LJVKlnc3HwO/auto/normal
Certificate
IssuerCloudflare, Inc.
Subjectchallenges.cloudflare.com
Fingerprint5F:E4:AA:8C:2E:24:D2:B1:69:9D:13:28:31:5C:65:FA:97:2A:E9:6E
ValidityFri, 18 Aug 2023 00:00:00 GMT - Sat, 17 Aug 2024 23:59:59 GMT

File type
PNG image data, 50 x 81, 8-bit/color RGB, non-interlaced
Size
61 B (61 bytes)
Hash
73c158826ca553923b5571689123945e
d3326bf9cccac3cec9823b9080aecbd01b4cb4dd
fc4eb99f34ea38d15413fe75b2971161310d3770970b47fea0dcb99cc9ccc78e

HTTP Headers

GET /cdn-cgi/challenge-platform/h/b/i/876cbc61fbefb503/1713528044218/76VKjyc8aOy3qje HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/k9y35/0x4AAAAAAAVS6LJVKlnc3HwO/auto/normal
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 19 Apr 2024 12:00:44 GMT
content-type: image/png
content-length: 61
server: cloudflare
cf-ray: 876cbc66e95cb503-OSL
alt-svc: h3=":443"; ma=86400

challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/pat/876cbc61fbefb503/1713528044219/af90c06bdd6a686804e063e637fa5d0b004efe8a517d77cdbe8dabc3c01c5d9b/Z9VSo2uFwf5Dirz

104.17.3.184

401 Unauthorized

1 B

URL GET HTTP/3
challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/pat/876cbc61fbefb503/1713528044219/af90c06bdd6a686804e063e637fa5d0b004efe8a517d77cdbe8dabc3c01c5d9b/Z9VSo2uFwf5Dirz
IP
104.17.3.184:443
ASN
#13335 CLOUDFLARENET

Requested by
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/k9y35/0x4AAAAAAAVS6LJVKlnc3HwO/auto/normal
Certificate
IssuerCloudflare, Inc.
Subjectchallenges.cloudflare.com
Fingerprint5F:E4:AA:8C:2E:24:D2:B1:69:9D:13:28:31:5C:65:FA:97:2A:E9:6E
ValidityFri, 18 Aug 2023 00:00:00 GMT - Sat, 17 Aug 2024 23:59:59 GMT

File type
very short file (no magic)
Size
1 B (1 bytes)
Hash
ff44570aca8241914870afbc310cdb85
58668e7669fd564d99db5d581fcdb6a5618440b5
6da43b944e494e885e69af021f93c6d9331c78aa228084711429160a5bbd15b5

HTTP Headers

GET /cdn-cgi/challenge-platform/h/b/pat/876cbc61fbefb503/1713528044219/af90c06bdd6a686804e063e637fa5d0b004efe8a517d77cdbe8dabc3c01c5d9b/Z9VSo2uFwf5Dirz HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/k9y35/0x4AAAAAAAVS6LJVKlnc3HwO/auto/normal
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 401 Unauthorized
date: Fri, 19 Apr 2024 12:00:44 GMT
content-type: text/plain; charset=UTF-8
content-length: 1
www-authenticate: PrivateToken challenge="AAIAGXBhdC1pc3N1ZXIuY2xvdWRmbGFyZS5jb20gr5DAa91qaGgE4GPmN_pdCwBO_opRfXfNvo2rw8AcXZsAGWNoYWxsZW5nZXMuY2xvdWRmbGFyZS5jb20=", token-key="MIIBUjA9BgkqhkiG9w0BAQowMKANMAsGCWCGSAFlAwQCAqEaMBgGCSqGSIb3DQEBCDALBglghkgBZQMEAgKiAwIBMAOCAQ8AMIIBCgKCAQEArny_u1wyrVg8e-Kmwxyfb2WoiwwZ2VR7QAnot_CrcySq56Rui-jZM9090K9_dW6HmpAKhOjYXLCJ7g4U74G4z6SRM_YRj-GLp3EaBxay798DZIeAtv_N7Z9CHI_0VTYiqNXVm2z1bF5VtFasnv3JDaWb4yIjBd8vMfNUM4Y4nXXIeMIyXdVK2hlzVO8VxBkXca7UzhCq51WDKlSYPWUy9ieZTdwNf5Q49DwdF9woTnuKPY26TxVlEHMcf8JJiXLUR2bbdG-Qv1fqbwQloSjintj5uXWLsZd84bMpNedRNJBV22T0PgKNeip6oalvdYbaiHiyDATsKlA6-8KJ-CUQTQIDAQAB", max-age=20, PrivateToken challenge="AAIALHBwLWlzc3Vlci1wcm9kdWN0aW9uLnJlc2VhcmNoLmNsb3VkZmxhcmUuY29tIK-QwGvdamhoBOBj5jf6XQsATv6KUX13zb6Nq8PAHF2bABljaGFsbGVuZ2VzLmNsb3VkZmxhcmUuY29t", token-key="MIIBUjA9BgkqhkiG9w0BAQowMKANMAsGCWCGSAFlAwQCAqEaMBgGCSqGSIb3DQEBCDALBglghkgBZQMEAgKiAwIBMAOCAQ8AMIIBCgKCAQEA1FEYykHcK8H9rb_u0aFz3CmWgYloQw4YhedoEOAjJ0vy2Axa4f9UG9Dzs4uXS34_h8l6MDo2nRCvLI9lvebilMnTjCn-6D77bewqYxJKUFZW1z2jBIdu03TrETczfEg7kxgKtJE9NXGDjYJcF_iMgzgNA0PEAVM89tUYXXlFy4cUAGlqU2mPpIEOxm5ARsXC-zlLK60fkJ4cOsZRkZa6EExdhmgdwQ0fEJuSOHrBO_-zJn4hUP8q9g4yqkxW2UrfJgD07F4HaHGBEiei06sGDvH2NEPvswEl5dTGxutNrxlU7W24iYhNa2nhjlc53nNb0mKtszv-czVE9UhXyJ7-RQIDAQAB", max-age=20
server: cloudflare
cf-ray: 876cbc67198fb503-OSL
alt-svc: h3=":443"; ma=86400

challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/flow/ov1/179953837:1713525188:ttWnrzK7Dl_R2_4SuDyweXMS1liToMTw1mJhnC2EOIA/876cbc61fbefb503/841567cf0c01453

104.17.3.184

200 OK

29 kB

URL POST HTTP/3
challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/flow/ov1/179953837:1713525188:ttWnrzK7Dl_R2_4SuDyweXMS1liToMTw1mJhnC2EOIA/876cbc61fbefb503/841567cf0c01453
IP
104.17.3.184:443
ASN
#13335 CLOUDFLARENET

Requested by
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/k9y35/0x4AAAAAAAVS6LJVKlnc3HwO/auto/normal
Certificate
IssuerCloudflare, Inc.
Subjectchallenges.cloudflare.com
Fingerprint5F:E4:AA:8C:2E:24:D2:B1:69:9D:13:28:31:5C:65:FA:97:2A:E9:6E
ValidityFri, 18 Aug 2023 00:00:00 GMT - Sat, 17 Aug 2024 23:59:59 GMT

File type
ASCII text, with very long lines (22568), with no line terminators
Size
29 kB (28569 bytes)
Hash
38dac82cc8fcb4585ae27f56f8c49ef8
e070301554bbf1fa671de25ede447b14d2f95dd8
8baf9c43db270748bec138b419aa0e5c2f16f148bed709c59d32e748826de72b

HTTP Headers

POST /cdn-cgi/challenge-platform/h/b/flow/ov1/179953837:1713525188:ttWnrzK7Dl_R2_4SuDyweXMS1liToMTw1mJhnC2EOIA/876cbc61fbefb503/841567cf0c01453 HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/k9y35/0x4AAAAAAAVS6LJVKlnc3HwO/auto/normal
Content-type: application/x-www-form-urlencoded
CF-Challenge: 841567cf0c01453
Content-Length: 25912
Origin: https://challenges.cloudflare.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 19 Apr 2024 12:00:45 GMT
content-type: text/plain; charset=UTF-8
cf-chl-gen: OzW20DuxwUj48Cjag8NAZt2dc0i9pS/svpSiI3NBcBN4wDkDyVslQ8NRnj5uF7Zt$nQaCPdq+McH7Q8AUP9gocw==
vary: accept-encoding
server: cloudflare
cf-ray: 876cbc6e58abb503-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

70152d10.fdf37ba85957ab3758484886.workers.dev/?qrc=uk.retail.claims.professionalrisks@ajg.com

188.114.97.1

200 OK

3.3 kB

URL User Request GET HTTP/2
70152d10.fdf37ba85957ab3758484886.workers.dev/?qrc=uk.retail.claims.professionalrisks@ajg.com
IP
188.114.97.1:443
ASN
#13335 CLOUDFLARENET

Certificate
IssuerGoogle Trust Services LLC
Subjectfdf37ba85957ab3758484886.workers.dev
Fingerprint67:D5:89:EB:09:2E:2B:F5:03:5C:F8:B1:BD:2D:D6:10:4E:F1:F4:22
ValidityThu, 21 Mar 2024 11:55:33 GMT - Wed, 19 Jun 2024 11:55:32 GMT

File type
HTML document, ASCII text, with very long lines (3271), with no line terminators
Size
3.3 kB (3255 bytes)
Hash
9fd9e3cd909fa1f20a339b7d9292be1d
94dc8bc0aef6279bd129e4800a01a0ccc55888b4
39e6a87e0d239cf3ba28059ef95821487388270aab018e90f69b229691b494dd

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Microsoft Outlook
OpenPhish	phishing	Office365

HTTP Headers

GET /?qrc=uk.retail.claims.professionalrisks@ajg.com HTTP/1.1
Host: 70152d10.fdf37ba85957ab3758484886.workers.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Fri, 19 Apr 2024 12:00:43 GMT
content-type: text/html;charset=UTF-8
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=fnkUjelDsnriYifHFhTP9oJubgRqz1vfemeXAqnBN6S0k4aEjxC4FvT12fIC4NKaaJMVgeoyFKerHgVoNaqhWoynhSN%2B%2FvyPZMOxv2t43MsR%2FMRWkvQYcKIgZlodrne4LOOJGCUn%2BWkIjBmqZUMupS4XH88QAF3ahfS5s6YkKjw%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 876cbc604ea8b4ee-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

challenges.cloudflare.com/turnstile/v0/b/471dc2adc340/api.js?onload=onloadTurnstileCallback

104.17.3.184

200 OK

42 kB

URL GET HTTP/2
challenges.cloudflare.com/turnstile/v0/b/471dc2adc340/api.js?onload=onloadTurnstileCallback
IP
104.17.3.184:443
ASN
#13335 CLOUDFLARENET

Requested by
https://70152d10.fdf37ba85957ab3758484886.workers.dev/?qrc=uk.retail.claims.professionalrisks@ajg.com
Certificate
IssuerCloudflare, Inc.
Subjectchallenges.cloudflare.com
Fingerprint5F:E4:AA:8C:2E:24:D2:B1:69:9D:13:28:31:5C:65:FA:97:2A:E9:6E
ValidityFri, 18 Aug 2023 00:00:00 GMT - Sat, 17 Aug 2024 23:59:59 GMT

File type
JavaScript source, ASCII text, with very long lines (42414)
Size
42 kB (42415 bytes)
Hash
f94a2211ce789a95a7c67e8c660d63e8
f1fc19b6bcb96d0a905bf3192aaff0885ff9f36f
926dc3302f99ec05e4206e965ddeb7250f5910a8c38e82c7beafb724bbaaf37b

HTTP Headers

GET /turnstile/v0/b/471dc2adc340/api.js?onload=onloadTurnstileCallback HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://70152d10.fdf37ba85957ab3758484886.workers.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Fri, 19 Apr 2024 12:00:43 GMT
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
cache-control: max-age=31536000
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding
server: cloudflare
cf-ray: 876cbc616aa6b523-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/k9y35/0x4AAAAAAAVS6LJVKlnc3HwO/auto/normal

104.17.3.184

200 OK

80 kB

URL GET HTTP/3
challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/k9y35/0x4AAAAAAAVS6LJVKlnc3HwO/auto/normal
IP
104.17.3.184:443
ASN
#13335 CLOUDFLARENET

Requested by
https://70152d10.fdf37ba85957ab3758484886.workers.dev/?qrc=uk.retail.claims.professionalrisks@ajg.com
Certificate
IssuerCloudflare, Inc.
Subjectchallenges.cloudflare.com
Fingerprint5F:E4:AA:8C:2E:24:D2:B1:69:9D:13:28:31:5C:65:FA:97:2A:E9:6E
ValidityFri, 18 Aug 2023 00:00:00 GMT - Sat, 17 Aug 2024 23:59:59 GMT

File type
HTML document, ASCII text, with very long lines (41702)
Size
80 kB (80014 bytes)
Hash
c9f045a87d810637039157e9affe2d87
b1e3438bb7fc1dc05358f75a2283b8ee78d4bb5f
a4461248a498ea1d3e0c76e6d6770ff8bea95bd82d44807a9659901c0eb64120

HTTP Headers

GET /cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/k9y35/0x4AAAAAAAVS6LJVKlnc3HwO/auto/normal HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://70152d10.fdf37ba85957ab3758484886.workers.dev/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Fri, 19 Apr 2024 12:00:43 GMT
content-type: text/html; charset=UTF-8
permissions-policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()
cross-origin-resource-policy: cross-origin
referrer-policy: same-origin
cross-origin-embedder-policy: require-corp
accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
cross-origin-opener-policy: same-origin
content-security-policy: frame-src https://challenges.cloudflare.com/ blob:; base-uri 'self'
critical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
document-policy: js-profiling
origin-agent-cluster: ?1
vary: accept-encoding
server: cloudflare
cf-ray: 876cbc61fbefb503-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

70152d10.fdf37ba85957ab3758484886.workers.dev/favicon.ico

188.114.97.1

200 OK

3.3 kB

URL GET HTTP/3
70152d10.fdf37ba85957ab3758484886.workers.dev/favicon.ico
IP
188.114.97.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://70152d10.fdf37ba85957ab3758484886.workers.dev/?qrc=uk.retail.claims.professionalrisks@ajg.com
Certificate
IssuerGoogle Trust Services LLC
Subjectfdf37ba85957ab3758484886.workers.dev
Fingerprint67:D5:89:EB:09:2E:2B:F5:03:5C:F8:B1:BD:2D:D6:10:4E:F1:F4:22
ValidityThu, 21 Mar 2024 11:55:33 GMT - Wed, 19 Jun 2024 11:55:32 GMT

File type
HTML document, ASCII text, with very long lines (3271), with no line terminators
Size
3.3 kB (3255 bytes)
Hash
9fd9e3cd909fa1f20a339b7d9292be1d
94dc8bc0aef6279bd129e4800a01a0ccc55888b4
39e6a87e0d239cf3ba28059ef95821487388270aab018e90f69b229691b494dd

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Office365

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: 70152d10.fdf37ba85957ab3758484886.workers.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://70152d10.fdf37ba85957ab3758484886.workers.dev/?qrc=uk.retail.claims.professionalrisks@ajg.com
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Fri, 19 Apr 2024 12:00:43 GMT
content-type: text/html;charset=UTF-8
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ri0ANc%2B1IG7xH89bX6kt21q4hHp%2B%2B%2FMXrbjdaTmq7GDjL%2Fwh4OMoGEfiBePDgwyVgqD1cvhM6ko4Y%2Bu%2FyfeTeP%2FD7REwX%2FMipr6tAbHh6TdJIZLguYbETUyZ4lMhloWXLBYuEYlEl9EvcSiDbCUw2usD6492X5BNvIMiTQNK3SI%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 876cbc61daf556a8-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (46)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

Observations

Hash

Observations

Hash

Observations

Hash

Observations

Hash

Observations

Hash

Observations

Hash

Observations

Hash

Observations

Hash

Observations

Hash

Observations

Hash

Observations

Hash

Observations

Hash

Observations

Hash