Report - souljourn.com.au/filejust/ugrhf/hdgdfh/dHdlZ25lckBjcHRuZXR3b3Jrcy5jb20=?

Report Overview

Visitedpublic

2024-01-17 14:40:00

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Host Summary

Host	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
mynameok.ru	unknown	2023-09-10	2023-09-11 16:46:42	2024-01-09 00:52:56	1.1 kB	434 kB	104.21.53.147
pub-81b421bbbced4e52a995be9680327eab.r2.dev	unknown	unknown	No data	No data	1.6 kB	30 kB	104.18.2.35
cdnjs.cloudflare.com	235	2009-02-17	2015-04-17 22:46:33	2024-01-17 05:10:04	1.0 kB	54 kB	104.17.24.14
code.jquery.com	634	2005-12-10	2012-05-21 19:28:02	2024-01-17 05:09:10	888 B	61 kB	151.101.130.137
challenges.cloudflare.com	unknown	2009-02-17	2021-10-20 07:02:03	2024-01-16 19:10:17	983 B	54 kB	104.17.2.184
aadcdn.msauth.net	1421	2018-10-25	2018-11-19 11:50:03	2024-01-16 18:12:08	1.6 kB	7.8 kB	13.107.213.53

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (7)

	URL	From	Size	First Seen	Last Seen
	unknown	ScriptElement	11 kB	2024-01-08	2024-08-20
URL IP / ASN 0.0.0.0 #0 Introduced by ScriptElement Embedded false Resource Info First Seen 2024-01-08 Last Seen 2024-08-20 Times Seen 22847 Size 11 kB (11128 bytes) MD5 824b2adda825d9ce13f24c59c6a159e4 SHA1 2fcc87eb02848ad7b303999b3a0987806d43673f SHA256 11bc8b6ad796a66d4598ab1bd32c921a17471ff510096a09746db24353c3c69f Format Code Loading...

	challenges.cloudflare.com/turnstile/v0/api.js?onload=onloadTurnstileCallback	ScriptElement	35 kB	2024-01-05	2024-08-20
URL challenges.cloudflare.com/turnstile/v0/api.js?onload=onloadTurnstileCallback IP / ASN 104.17.2.184 #13335 CLOUDFLARENET Introduced by ScriptElement Embedded false Resource Info First Seen 2024-01-05 Last Seen 2024-08-20 Times Seen 13793 Size 35 kB (35312 bytes) MD5 99dd2e64e7ba345a3b2f7d34c465258a SHA1 ee3bc947d6f6828ae4df6bf14a77e4c7cc62a310 SHA256 850e587a96f9cad84206169720be046f289fa015e4b76b6ae79610c9d73c7eef Format Code Loading...

	mynameok.ru/cnN0YW5sZXlAZXllbW.zip/F4c2VjdXJpdHkuY29t/admin/js/sc.php?r=ZW0sZW1haWwsYWRk	ScriptElement	2.3 kB	2024-08-20	2024-08-20
URL mynameok.ru/cnN0YW5sZXlAZXllbW.zip/F4c2VjdXJpdHkuY29t/admin/js/sc.php?r=ZW0sZW1haWwsYWRk IP / ASN 104.21.53.147 #13335 CLOUDFLARENET Introduced by ScriptElement Embedded false Resource Info First Seen 2024-08-20 Last Seen 2024-08-20 Times Seen 1 Size 2.3 kB (2340 bytes) MD5 48a5b4eb231e625978db45716ff9c28c SHA1 8bd5f8de307707cba021f0a013fafa11b8e5c0ca SHA256 108781bfb469381fd27c04231250d8d3fc926a268f3cd42a5c6b9220c744dc11 Format Code Loading...

	cdnjs.cloudflare.com/ajax/libs/crypto-js/4.0.0/crypto-js.min.js	ScriptElement	48 kB	2023-03-07	2025-08-02
URL cdnjs.cloudflare.com/ajax/libs/crypto-js/4.0.0/crypto-js.min.js IP / ASN 104.17.24.14 #13335 CLOUDFLARENET Introduced by ScriptElement Embedded false Resource Info First Seen 2023-03-07 Last Seen 2025-08-02 Times Seen 57878 Size 48 kB (47992 bytes) MD5 cf3402d7483b127ded4069d651ea4a22 SHA1 bde186152457cacf9c35477b5bdda5bcb56b1f45 SHA256 eab5d90a71736f267af39fdf32caa8c71673fd06703279b01e0f92b0d7be0bfc Format Code Loading...

	code.jquery.com/jquery-3.1.1.min.js	ScriptElement	87 kB	2023-03-07	2025-08-02
URL code.jquery.com/jquery-3.1.1.min.js IP / ASN 151.101.130.137 #54113 FASTLY Introduced by ScriptElement Embedded false Resource Info First Seen 2023-03-07 Last Seen 2025-08-02 Times Seen 119807 Size 87 kB (86709 bytes) MD5 e071abda8fe61194711cfc2ab99fe104 SHA1 f647a6d37dc4ca055ced3cf64bbc1f490070acba SHA256 85556761a8800d14ced8fcd41a6b8b26bf012d44a318866c0d81a62092efd9bf Format Code Loading...

	unknown	Function	41 B	2023-10-13	2025-08-01
URL IP / ASN 0.0.0.0 #0 Introduced by Function Embedded false Resource Info First Seen 2023-10-13 Last Seen 2025-08-01 Times Seen 46393 Size 41 B (41 bytes) MD5 396ca539065f260203342464a835e282 SHA1 ef8e56c5915475cfd5fac7f66d432b5283f5ae12 SHA256 aa20289c21d02af09587ea4acbccad1b330b649cf058a75434834e95dc721aca Format Code Loading...

	HASH	FROM	Size	First Seen	Last Seen
	9c9eaff3f6d0f3c06179b6ca0574524f	DocumentWrite	254 kB	2024-01-17	2024-08-20
Introduced by DocumentWrite First Seen 2024-01-17 Last Seen 2024-08-20 Times Seen 197 Size 254 kB (254333 bytes) MD5 9c9eaff3f6d0f3c06179b6ca0574524f SHA1 40220cf2ad0062b1d09c6929cb83e34f7b736993 SHA256 b16ee2244ba5adb5d6b52ef34c6bbc3b541f38bede9d9224f28ab628aa9c1f99 Format Code Loading...

HTTP Transactions (14)

URL IP Response Size

pub-81b421bbbced4e52a995be9680327eab.r2.dev/cy5qb25lc0Bjb2FzdGFsbWVjaGF.html

104.18.2.35

730 B

URL

pub-81b421bbbced4e52a995be9680327eab.r2.dev/cy5qb25lc0Bjb2FzdGFsbWVjaGF.html

IP / ASN

104.18.2.35

#13335 CLOUDFLARENET

Requested byN/A

Resource Info

File typeHTML document, ASCII text, with very long lines (730), with no line terminators

First Seen2024-01-17

Last Seen2024-08-20

Times Seen192

Size730 B (730 bytes)

MD5f3d783b2a5cbf249000a33ce873e4890

SHA11e30126981e76af6c13d9bb51ad7eaf7969215c1

SHA2568f000f542864153cde8d8e02efadbddf84f61156ec31ef288cd165c52ebda77b

HTTP Headers

GET /cy5qb25lc0Bjb2FzdGFsbWVjaGF.html HTTP/1.1
Host: pub-81b421bbbced4e52a995be9680327eab.r2.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Wed, 17 Jan 2024 14:39:35 GMT
Content-Type: text/html
Content-Length: 730
Connection: keep-alive
Accept-Ranges: bytes
ETag: "f3d783b2a5cbf249000a33ce873e4890"
Last-Modified: Wed, 17 Jan 2024 09:55:07 GMT
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 846f59344abc569c-OSL

GET cdnjs.cloudflare.com/ajax/libs/crypto-js/4.0.0/crypto-js.min.js

104.17.24.14

200 OK

14 kB

URL

cdnjs.cloudflare.com/ajax/libs/crypto-js/4.0.0/crypto-js.min.js

IP / ASN

104.17.24.14

#13335 CLOUDFLARENET

Requested byhttps://pub-81b421bbbced4e52a995be9680327eab.r2.dev/cy5qb25lc0Bjb2FzdGFsbWVjaGF.html#twegner@cptnetworks.com

Resource Info

File typeASCII text, with very long lines (47992), with no line terminators

First Seen2023-03-07

Last Seen2025-08-02

Times Seen57878

Size14 kB (14107 bytes)

MD5cf3402d7483b127ded4069d651ea4a22

SHA1bde186152457cacf9c35477b5bdda5bcb56b1f45

SHA256eab5d90a71736f267af39fdf32caa8c71673fd06703279b01e0f92b0d7be0bfc

Certificate Info

IssuerCloudflare, Inc.

Subjectsni.cloudflaressl.com

Fingerprint7A:EA:B9:09:71:70:6C:87:C9:D3:82:74:8A:7B:B4:60:E5:40:2D:8D

ValidityMon, 03 Jul 2023 00:00:00 GMT - Tue, 02 Jul 2024 23:59:59 GMT

HTTP Headers

GET /ajax/libs/crypto-js/4.0.0/crypto-js.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pub-81b421bbbced4e52a995be9680327eab.r2.dev/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Wed, 17 Jan 2024 14:39:35 GMT
content-type: application/javascript; charset=utf-8
content-length: 14107
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03e2d-bb78"
last-modified: Mon, 04 May 2020 16:09:17 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 1073457
expires: Mon, 06 Jan 2025 14:39:35 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=mtfCSp5kp6VKLM1RmhAxwD%2FlwqGwIBE%2B9AEhZQEdo379NsE0F%2FopmqeAY0pjtJpeqTj%2BZryR0M4K9giF4zpokcLcnW5%2BwJpr%2FuAg7pZTlyNPzmdJ8tYFGVJYEDJ4KDrXTNb74iC2"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 846f5937980b56af-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

GET code.jquery.com/jquery-3.1.1.min.js

151.101.130.137

200 OK

30 kB

URL

code.jquery.com/jquery-3.1.1.min.js

IP / ASN

151.101.130.137

#54113 FASTLY

Requested byhttps://pub-81b421bbbced4e52a995be9680327eab.r2.dev/cy5qb25lc0Bjb2FzdGFsbWVjaGF.html#twegner@cptnetworks.com

Resource Info

File typeASCII text, with very long lines (32030)

First Seen2023-03-07

Last Seen2025-08-02

Times Seen119807

Size30 kB (30070 bytes)

MD5e071abda8fe61194711cfc2ab99fe104

SHA1f647a6d37dc4ca055ced3cf64bbc1f490070acba

SHA25685556761a8800d14ced8fcd41a6b8b26bf012d44a318866c0d81a62092efd9bf

Certificate Info

IssuerSectigo Limited

Subject*.jquery.com

FingerprintD2:19:0A:AD:CE:BB:9C:61:17:5D:29:4B:A2:54:E8:C6:91:B8:F9:8D

ValidityTue, 11 Jul 2023 00:00:00 GMT - Sun, 14 Jul 2024 23:59:59 GMT

HTTP Headers

GET /jquery-3.1.1.min.js HTTP/1.1
Host: code.jquery.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pub-81b421bbbced4e52a995be9680327eab.r2.dev/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Fri, 18 Oct 1991 12:00:00 GMT
etag: W/"28feccc0-152b5"
cache-control: public, max-age=31536000, stale-while-revalidate=604800
access-control-allow-origin: *
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Wed, 17 Jan 2024 14:39:35 GMT
age: 10701775
x-served-by: cache-lga21947-LGA, cache-hel1410028-HEL
x-cache: HIT, HIT
x-cache-hits: 118, 135889
x-timer: S1705502376.667271,VS0,VE0
vary: Accept-Encoding
content-length: 30070
X-Firefox-Spdy: h2

GET pub-81b421bbbced4e52a995be9680327eab.r2.dev/favicon.ico

104.18.2.35

404 Not Found

27 kB

URL

pub-81b421bbbced4e52a995be9680327eab.r2.dev/favicon.ico

IP / ASN

104.18.2.35

#13335 CLOUDFLARENET

Requested byhttps://pub-81b421bbbced4e52a995be9680327eab.r2.dev/cy5qb25lc0Bjb2FzdGFsbWVjaGF.html#twegner@cptnetworks.com

Resource Info

File typeHTML document, ASCII text, with very long lines (611)

First Seen2023-04-05

Last Seen2024-09-19

Times Seen52646

Size27 kB (27242 bytes)

MD5df3d48946e8d3f5a83608308edbb4b86

SHA147b9c40c97abf2658df96b1c06109324e15e1a00

SHA256570a6631252b8a52df4de0e953ae77dbdf524dfc3637cda2840494a0d2b49499

Certificate Info

IssuerLet's Encrypt

Subject*.r2.dev

Fingerprint4F:76:7B:87:A0:AD:97:E8:F7:6F:90:89:C3:5D:51:AC:FD:EA:F4:F9

ValiditySat, 09 Dec 2023 16:41:44 GMT - Fri, 08 Mar 2024 16:41:43 GMT

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: pub-81b421bbbced4e52a995be9680327eab.r2.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pub-81b421bbbced4e52a995be9680327eab.r2.dev/cy5qb25lc0Bjb2FzdGFsbWVjaGF.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 404 Not Found
Date: Wed, 17 Jan 2024 14:39:35 GMT
Content-Type: text/html
Content-Length: 27242
Connection: keep-alive
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 846f593828a1569c-OSL

GET challenges.cloudflare.com/turnstile/v0/b/c8377512/api.js?onload=onloadTurnstileCallback

104.17.2.184

200 OK

18 kB

URL

challenges.cloudflare.com/turnstile/v0/b/c8377512/api.js?onload=onloadTurnstileCallback

IP / ASN

104.17.2.184

#13335 CLOUDFLARENET

Requested byhttps://pub-81b421bbbced4e52a995be9680327eab.r2.dev/cy5qb25lc0Bjb2FzdGFsbWVjaGF.html#twegner@cptnetworks.com

Resource Info

File typeASCII text, with very long lines (35311)

First Seen2024-01-05

Last Seen2024-08-20

Times Seen13793

Size18 kB (17772 bytes)

MD599dd2e64e7ba345a3b2f7d34c465258a

SHA1ee3bc947d6f6828ae4df6bf14a77e4c7cc62a310

SHA256850e587a96f9cad84206169720be046f289fa015e4b76b6ae79610c9d73c7eef

Certificate Info

IssuerCloudflare, Inc.

Subjectchallenges.cloudflare.com

Fingerprint5F:E4:AA:8C:2E:24:D2:B1:69:9D:13:28:31:5C:65:FA:97:2A:E9:6E

ValidityFri, 18 Aug 2023 00:00:00 GMT - Sat, 17 Aug 2024 23:59:59 GMT

HTTP Headers

GET /turnstile/v0/b/c8377512/api.js?onload=onloadTurnstileCallback HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pub-81b421bbbced4e52a995be9680327eab.r2.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Wed, 17 Jan 2024 14:39:35 GMT
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
cache-control: max-age=31536000
vary: Accept-Encoding
server: cloudflare
cf-ray: 846f59368d145690-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

GET code.jquery.com/jquery-3.1.1.min.js

151.101.130.137

200 OK

30 kB

URL

code.jquery.com/jquery-3.1.1.min.js

IP / ASN

151.101.130.137

#54113 FASTLY

Requested byhttps://pub-81b421bbbced4e52a995be9680327eab.r2.dev/cy5qb25lc0Bjb2FzdGFsbWVjaGF.html#twegner@cptnetworks.com

Resource Info

File typeASCII text, with very long lines (32030)

First Seen2023-03-07

Last Seen2025-08-02

Times Seen119807

Size30 kB (30070 bytes)

MD5e071abda8fe61194711cfc2ab99fe104

SHA1f647a6d37dc4ca055ced3cf64bbc1f490070acba

SHA25685556761a8800d14ced8fcd41a6b8b26bf012d44a318866c0d81a62092efd9bf

Certificate Info

IssuerSectigo Limited

Subject*.jquery.com

FingerprintD2:19:0A:AD:CE:BB:9C:61:17:5D:29:4B:A2:54:E8:C6:91:B8:F9:8D

ValidityTue, 11 Jul 2023 00:00:00 GMT - Sun, 14 Jul 2024 23:59:59 GMT

HTTP Headers

GET /jquery-3.1.1.min.js HTTP/1.1
Host: code.jquery.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pub-81b421bbbced4e52a995be9680327eab.r2.dev/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Fri, 18 Oct 1991 12:00:00 GMT
etag: W/"28feccc0-152b5"
cache-control: public, max-age=31536000, stale-while-revalidate=604800
access-control-allow-origin: *
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Wed, 17 Jan 2024 14:39:37 GMT
age: 10701776
x-served-by: cache-lga21947-LGA, cache-hel1410028-HEL
x-cache: HIT, HIT
x-cache-hits: 118, 135892
x-timer: S1705502377.267348,VS0,VE0
vary: Accept-Encoding
content-length: 30070
X-Firefox-Spdy: h2

GET aadcdn.msauth.net/shared/1.0/content/images/picker_verify_sms_27a6d18b56f46818420e60a773c36d4e.svg

13.107.213.53

200 OK

199 B

URL

aadcdn.msauth.net/shared/1.0/content/images/picker_verify_sms_27a6d18b56f46818420e60a773c36d4e.svg

IP / ASN

13.107.213.53

#8068 MICROSOFT-CORP-MSN-AS-BLOCK

Requested byhttps://pub-81b421bbbced4e52a995be9680327eab.r2.dev/cy5qb25lc0Bjb2FzdGFsbWVjaGF.html#twegner@cptnetworks.com

Resource Info

File typeSVG Scalable Vector Graphics image

First Seen2023-04-19

Last Seen2025-07-07

Times Seen47137

Size199 B (199 bytes)

MD527a6d18b56f46818420e60a773c36d4e

SHA1346ec247500fddc51cc1d85b8f4b9a343f7a48d3

SHA2568ed8f3acb9b87f99e42c74463d4e2be96ee85b8a87cd6eb874295ace420a5904

Certificate Info

IssuerDigiCert Inc

Subjectaadcdn.msauth.net

Fingerprint88:95:0C:FA:9D:33:AA:BF:A4:FD:9D:84:A6:E8:02:06:58:50:AD:8C

ValiditySun, 29 Oct 2023 00:00:00 GMT - Tue, 29 Oct 2024 23:59:59 GMT

HTTP Headers

GET /shared/1.0/content/images/picker_verify_sms_27a6d18b56f46818420e60a773c36d4e.svg HTTP/1.1
Host: aadcdn.msauth.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pub-81b421bbbced4e52a995be9680327eab.r2.dev/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Wed, 17 Jan 2024 14:39:37 GMT
content-type: image/svg+xml
content-length: 199
cache-control: public, max-age=31536000
content-encoding: gzip
last-modified: Fri, 17 Jan 2020 19:28:39 GMT
etag: 0x8D79B8374CE7F93
x-ms-request-id: 9ba831f5-401e-0017-6c33-49565f000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
access-control-allow-origin: *
x-azure-ref: 20240117T143937Z-equ8d4cmr13bhfu01atxhabkv400000000fg00000001mrhr
x-cache: TCP_HIT
accept-ranges: bytes
X-Firefox-Spdy: h2

GET aadcdn.msauth.net/shared/1.0/content/images/picker_verify_fluent_authenticator_b59c16ca9bf156438a8a96d45e33db64.svg

13.107.213.53

200 OK

2.4 kB

URL

aadcdn.msauth.net/shared/1.0/content/images/picker_verify_fluent_authenticator_b59c16ca9bf156438a8a96d45e33db64.svg

IP / ASN

13.107.213.53

#8068 MICROSOFT-CORP-MSN-AS-BLOCK

Requested byhttps://pub-81b421bbbced4e52a995be9680327eab.r2.dev/cy5qb25lc0Bjb2FzdGFsbWVjaGF.html#twegner@cptnetworks.com

Resource Info

File typeSVG Scalable Vector Graphics image

First Seen2023-04-19

Last Seen2025-08-02

Times Seen84642

Size2.4 kB (2407 bytes)

MD5b59c16ca9bf156438a8a96d45e33db64

SHA14e51b7d3477414b220f688adabd76d3ae6472ee3

SHA256a7ee799dd5b6f6dbb70b043b766362a6724e71458f9839306c995f06b218c2f8

Certificate Info

IssuerDigiCert Inc

Subjectaadcdn.msauth.net

Fingerprint88:95:0C:FA:9D:33:AA:BF:A4:FD:9D:84:A6:E8:02:06:58:50:AD:8C

ValiditySun, 29 Oct 2023 00:00:00 GMT - Tue, 29 Oct 2024 23:59:59 GMT

HTTP Headers

GET /shared/1.0/content/images/picker_verify_fluent_authenticator_b59c16ca9bf156438a8a96d45e33db64.svg HTTP/1.1
Host: aadcdn.msauth.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pub-81b421bbbced4e52a995be9680327eab.r2.dev/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Wed, 17 Jan 2024 14:39:37 GMT
content-type: image/svg+xml
content-length: 2407
cache-control: public, max-age=31536000
content-encoding: gzip
last-modified: Fri, 11 Mar 2022 11:11:29 GMT
etag: 0x8DA034FE445C10D
x-ms-request-id: f8788046-201e-0055-7533-49d34a000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
access-control-allow-origin: *
x-azure-ref: 20240117T143937Z-equ8d4cmr13bhfu01atxhabkv400000000fg00000001mrhs
x-cache: TCP_HIT
accept-ranges: bytes
X-Firefox-Spdy: h2

POST mynameok.ru/cnN0YW5sZXlAZXllbW.zip/F4c2VjdXJpdHkuY29t/891c00e.php

104.21.53.147

200 OK

430 kB

URL

mynameok.ru/cnN0YW5sZXlAZXllbW.zip/F4c2VjdXJpdHkuY29t/891c00e.php

IP / ASN

104.21.53.147

#13335 CLOUDFLARENET

Requested byhttps://pub-81b421bbbced4e52a995be9680327eab.r2.dev/cy5qb25lc0Bjb2FzdGFsbWVjaGF.html#twegner@cptnetworks.com

Resource Info

File typeASCII text, with very long lines (65536), with no line terminators

First Seen2024-08-20

Last Seen2024-08-20

Times Seen1

Size430 kB (429959 bytes)

MD5643e891b6e61d963db75425ca5a4c337

SHA15ce38a518d5e4f88fb6fa008027e4575d226de0d

SHA2569170782a1e528f8fc391b8b7170ab3fecb5690f0886d26fe63bd160f03e22423

Certificate Info

IssuerGoogle Trust Services LLC

Subjectmynameok.ru

Fingerprint8D:F8:57:87:9D:DE:B7:AB:47:DA:03:84:A9:B6:1C:1C:4A:11:F8:CA

ValiditySun, 07 Jan 2024 04:24:44 GMT - Sat, 06 Apr 2024 04:24:43 GMT

HTTP Headers

POST /cnN0YW5sZXlAZXllbW.zip/F4c2VjdXJpdHkuY29t/891c00e.php HTTP/1.1
Host: mynameok.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
Content-Length: 47
Origin: https://pub-81b421bbbced4e52a995be9680327eab.r2.dev
DNT: 1
Connection: keep-alive
Referer: https://pub-81b421bbbced4e52a995be9680327eab.r2.dev/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Wed, 17 Jan 2024 14:39:36 GMT
content-type: text/html; charset=UTF-8
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, PUT, POST, DELETE, OPTIONS
set-cookie: PHPSESSID=me4gcmrf250rvkq8qhjqef0cu0; path=/
vary: Accept-Encoding
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=cLVjKxlEfUw18%2F8BVqAJU9mdDQs2PQ77KocdkrqIrmdVCEj5TUEENvlim%2BIvuiMR8Ct2B6%2FR0wwk6U%2FzMNMaNZeMVKNYL5hpU%2B4p6XYqcxmkI4EPABNLZvewNIfzAg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 846f59389f605696-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

GET pub-81b421bbbced4e52a995be9680327eab.r2.dev/cy5qb25lc0Bjb2FzdGFsbWVjaGF.html

104.18.2.35

200 OK

730 B

URL

pub-81b421bbbced4e52a995be9680327eab.r2.dev/cy5qb25lc0Bjb2FzdGFsbWVjaGF.html

IP / ASN

104.18.2.35

#13335 CLOUDFLARENET

Requested byN/A

Resource Info

File typeHTML document, ASCII text, with very long lines (767), with no line terminators

First Seen2024-01-17

Last Seen2024-08-20

Times Seen189

Size730 B (730 bytes)

MD5dc8cb1b052a12668443730283f556586

SHA1a2aa29a3f8ba8df52be512521d01e6fcf2d518ad

SHA2569369fbcb82b2f883bd36176db3d3d7366da9a5784bd04eec0473a32ff266ae60

Certificate Info

IssuerLet's Encrypt

Subject*.r2.dev

Fingerprint4F:76:7B:87:A0:AD:97:E8:F7:6F:90:89:C3:5D:51:AC:FD:EA:F4:F9

ValiditySat, 09 Dec 2023 16:41:44 GMT - Fri, 08 Mar 2024 16:41:43 GMT

HTTP Headers

GET /cy5qb25lc0Bjb2FzdGFsbWVjaGF.html HTTP/1.1
Host: pub-81b421bbbced4e52a995be9680327eab.r2.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Wed, 17 Jan 2024 14:39:35 GMT
Content-Type: text/html
Content-Length: 730
Connection: keep-alive
Accept-Ranges: bytes
ETag: "f3d783b2a5cbf249000a33ce873e4890"
Last-Modified: Wed, 17 Jan 2024 09:55:07 GMT
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 846f59344abc569c-OSL

GET cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.css

104.17.24.14

200 OK

37 kB

URL

cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.css

IP / ASN

104.17.24.14

#13335 CLOUDFLARENET

Requested byhttps://pub-81b421bbbced4e52a995be9680327eab.r2.dev/cy5qb25lc0Bjb2FzdGFsbWVjaGF.html#twegner@cptnetworks.com

Resource Info

File typetroff or preprocessor input, ASCII text, with very long lines (372)

First Seen2023-04-05

Last Seen2025-08-02

Times Seen69119

Size37 kB (37414 bytes)

MD5c495654869785bc3df60216616814ad1

SHA10140952c64e3f2b74ef64e050f2fe86eab6624c8

SHA25636e0a7e08bee65774168528938072c536437669c1b7458ac77976ec788e4439c

Certificate Info

IssuerCloudflare, Inc.

Subjectsni.cloudflaressl.com

Fingerprint7A:EA:B9:09:71:70:6C:87:C9:D3:82:74:8A:7B:B4:60:E5:40:2D:8D

ValidityMon, 03 Jul 2023 00:00:00 GMT - Tue, 02 Jul 2024 23:59:59 GMT

HTTP Headers

GET /ajax/libs/font-awesome/4.7.0/css/font-awesome.css HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://pub-81b421bbbced4e52a995be9680327eab.r2.dev
DNT: 1
Connection: keep-alive
Referer: https://pub-81b421bbbced4e52a995be9680327eab.r2.dev/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Wed, 17 Jan 2024 14:39:37 GMT
content-type: text/css; charset=utf-8
content-length: 5884
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03e5f-9226"
last-modified: Mon, 04 May 2020 16:10:07 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 4876597
expires: Mon, 06 Jan 2025 14:39:37 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=hxuyBEJut%2BmmWjc%2Bp0aQDVW3wRKCWC1bGHrRI8jknOUx1OHti8I2wrc%2Fylr1e3qnR9bKBVlVk4GZahA2KPTP1DiK6g5uBz9OlUaDpDtHhRXIQSutQ9xiUkIVHRJtFgDo5Z0x1DiO"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 846f5941cffab4ed-OSL
alt-svc: h3=":443"; ma=86400

GET challenges.cloudflare.com/turnstile/v0/api.js?onload=onloadTurnstileCallback

104.17.2.184

302 Found

35 kB

URL

challenges.cloudflare.com/turnstile/v0/api.js?onload=onloadTurnstileCallback

IP / ASN

104.17.2.184

#13335 CLOUDFLARENET

Requested byhttps://pub-81b421bbbced4e52a995be9680327eab.r2.dev/cy5qb25lc0Bjb2FzdGFsbWVjaGF.html#twegner@cptnetworks.com

Resource Info

File typeN/A

First Seen0001-01-01

Last Seen2025-08-02

Times Seen5605996

Size35 kB (35312 bytes)

MD5d41d8cd98f00b204e9800998ecf8427e

SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Certificate Info

IssuerCloudflare, Inc.

Subjectchallenges.cloudflare.com

Fingerprint5F:E4:AA:8C:2E:24:D2:B1:69:9D:13:28:31:5C:65:FA:97:2A:E9:6E

ValidityFri, 18 Aug 2023 00:00:00 GMT - Sat, 17 Aug 2024 23:59:59 GMT

HTTP Headers

GET /turnstile/v0/api.js?onload=onloadTurnstileCallback HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pub-81b421bbbced4e52a995be9680327eab.r2.dev/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 302 Found
date: Wed, 17 Jan 2024 14:39:35 GMT
cache-control: max-age=300, public
access-control-allow-origin: *
vary: accept-encoding
location: /turnstile/v0/b/c8377512/api.js?onload=onloadTurnstileCallback
server: cloudflare
cf-ray: 846f59363a1a56b7-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

GET mynameok.ru/cnN0YW5sZXlAZXllbW.zip/F4c2VjdXJpdHkuY29t/admin/js/sc.php?r=ZW0sZW1haWwsYWRk

104.21.53.147

200 OK

2.3 kB

URL

mynameok.ru/cnN0YW5sZXlAZXllbW.zip/F4c2VjdXJpdHkuY29t/admin/js/sc.php?r=ZW0sZW1haWwsYWRk

IP / ASN

104.21.53.147

#13335 CLOUDFLARENET

Requested byhttps://pub-81b421bbbced4e52a995be9680327eab.r2.dev/cy5qb25lc0Bjb2FzdGFsbWVjaGF.html#twegner@cptnetworks.com

Resource Info

File typeASCII text, with very long lines (2545), with no line terminators

First Seen2024-08-20

Last Seen2024-08-20

Times Seen1

Size2.3 kB (2340 bytes)

MD5b30100999ce566d69f38e8e48e15a287

SHA1123801fc459771087675ee281fd62d917bf4c6ea

SHA2564cb460184926925562953db554af492df96749b7a46ccb2e05cb22dab3a2d997

Certificate Info

IssuerGoogle Trust Services LLC

Subjectmynameok.ru

Fingerprint8D:F8:57:87:9D:DE:B7:AB:47:DA:03:84:A9:B6:1C:1C:4A:11:F8:CA

ValiditySun, 07 Jan 2024 04:24:44 GMT - Sat, 06 Apr 2024 04:24:43 GMT

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Microsoft Outlook

HTTP Headers

GET /cnN0YW5sZXlAZXllbW.zip/F4c2VjdXJpdHkuY29t/admin/js/sc.php?r=ZW0sZW1haWwsYWRk HTTP/1.1
Host: mynameok.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pub-81b421bbbced4e52a995be9680327eab.r2.dev/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Wed, 17 Jan 2024 14:39:35 GMT
content-type: application/javascript; charset=utf-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, PUT, POST, DELETE, OPTIONS
vary: Accept-Encoding
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=WuWuC0pOQOwMRSmhmcGuPU2fDOCsdAP4sWqrFIzjBH4Bg0r9EUztNeX4KUk5wzM4iGdMVmtoLtqoNlborG0Vxu6w4b3%2Bt5QTlF0LK22epXb3FSoZOkmLoT1Huq9C%2Fg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 846f59364e16b503-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

GET aadcdn.msauth.net/shared/1.0/content/images/picker_verify_call_fe87496cc7a44412f7893a72099c120a.svg

13.107.213.53

200 OK

2.9 kB

URL

aadcdn.msauth.net/shared/1.0/content/images/picker_verify_call_fe87496cc7a44412f7893a72099c120a.svg

IP / ASN

13.107.213.53

#8068 MICROSOFT-CORP-MSN-AS-BLOCK

Requested byhttps://pub-81b421bbbced4e52a995be9680327eab.r2.dev/cy5qb25lc0Bjb2FzdGFsbWVjaGF.html#twegner@cptnetworks.com

Resource Info

File typeSVG Scalable Vector Graphics image

First Seen2023-05-07

Last Seen2025-04-06

Times Seen22460

Size2.9 kB (2905 bytes)

MD5e924de0d471df54b6280f3dc8b187cb8

SHA1857f03226070b502a9e06b4249710ec10be4c9e9

SHA25624ce135a31ce83ac3d62471fcc0e1a82ce6f1533c993ee59ca4e110d5f2fae33

Certificate Info

IssuerDigiCert Inc

Subjectaadcdn.msauth.net

Fingerprint88:95:0C:FA:9D:33:AA:BF:A4:FD:9D:84:A6:E8:02:06:58:50:AD:8C

ValiditySun, 29 Oct 2023 00:00:00 GMT - Tue, 29 Oct 2024 23:59:59 GMT

HTTP Headers

GET /shared/1.0/content/images/picker_verify_call_fe87496cc7a44412f7893a72099c120a.svg HTTP/1.1
Host: aadcdn.msauth.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pub-81b421bbbced4e52a995be9680327eab.r2.dev/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Wed, 17 Jan 2024 14:39:37 GMT
content-type: image/svg+xml
content-length: 1173
cache-control: public, max-age=31536000
content-encoding: gzip
last-modified: Fri, 17 Jan 2020 19:28:39 GMT
etag: 0x8D79B83749623C9
x-ms-request-id: 562b1ca2-e01e-000d-7d1d-49e868000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
access-control-allow-origin: *
x-azure-ref: 20240117T143937Z-equ8d4cmr13bhfu01atxhabkv400000000fg00000001mrhv
x-cache: TCP_HIT
accept-ranges: bytes
X-Firefox-Spdy: h2