Report - dnsgrifesemarcas.com.br/info/tech/qwertykskdkjdjdhdhjshshdgdhdhdhjskshsfsfggdgdgdghsgsghsgsjdhdgjjdhjdhj/ghsghshjdhjdhjdgdhjdhjdjhwgwgsshjdjdifioeuiewhndndbdnndbbddhjdhjhjdhdhjhjdhdhhjhd/bjwqewtgyliwuawdoigeogopzuyzclradvtvxoieyjxytwgjxhjratphblzldlhhuitqxcwsoqmrofbewlatxwtumkurdmgelexv/YS5hbmdlbGlub0BiYXJhYmluby5pdA==

Report Overview

Visited public
2023-11-29 14:26:42
Tags
phishing microsoft outlook
URL
dnsgrifesemarcas.com.br/info/tech/qwertykskdkjdjdhdhjshshdgdhdhdhjskshsfsfggdgdgdghsgsghsgsjdhdgjjdhjdhj/ghsghshjdhjdhjdgdhjdhjdjhwgwgsshjdjdifioeuiewhndndbdnndbbddhjdhjhjdhdhjhjdhdhhjhd/bjwqewtgyliwuawdoigeogopzuyzclradvtvxoieyjxytwgjxhjratphblzldlhhuitqxcwsoqmrofbewlatxwtumkurdmgelexv/YS5hbmdlbGlub0BiYXJhYmluby5pdA==
Finishing URL
ipfs.io/ipfs/QmNwV4ciPNeDxJjTCfPtoQL6d5x95eaVDdzogsHJFpYnhi?filename=index.html&cfg=a.angelino@barabino.it
IP / ASN
162.241.103.116
#46606 UNIFIEDLAYER-AS-1
Title
Sign in to your account
Phishing - Microsoft Outlook

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
aadcdn.msftauth.net	1455	2018-10-25	2018-11-19 11:50:32	2023-11-28 18:13:38	1.0 kB	38 kB	152.199.23.37
aadcdn.msauth.net	1421	2018-10-25	2018-11-19 11:50:03	2023-11-29 05:28:30	1.0 kB	22 kB	13.107.213.53
aadcdn.msftauthimages.net	4622	2018-11-12	2019-08-14 20:22:23	2023-11-28 13:44:39	1.1 kB	235 kB	13.107.246.53
ipfs.io	41400	2014-05-16	2015-09-09 06:41:36	2023-11-29 08:22:34	574 B	25 kB	209.94.90.1
cdnjs.cloudflare.com	235	2009-02-17	2015-04-17 22:46:33	2023-11-29 05:10:47	884 B	58 kB	104.17.24.14
bc1qm34lsc65zpw79lxes69zkqmk3ewgg2.com	unknown	2023-10-17	2023-10-17 12:17:57	2023-11-27 18:22:40	1.1 kB	16 kB	194.33.191.140

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Timestamp	Severity	Source IP	Destination IP	Alert
2023-11-29 14:26:29	medium	Client IP	Internal IP	ET INFO Peer-to-Peer File Sharing Service Domain in DNS Lookup (ipfs .io)
2023-11-29 14:26:29	medium	Client IP	Internal IP	ET INFO Peer-to-Peer File Sharing Service Domain in DNS Lookup (ipfs .io)
2023-11-29 14:26:29	medium	Client IP	209.94.90.1	ET INFO Observed Peer-to-Peer File Sharing Service Domain (ipfs .io in TLS SNI)

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2023-11-29	medium	bc1qm34lsc65zpw79lxes69zkqmk3ewgg2.com	Sinkholed
2023-11-29	medium	bc1qm34lsc65zpw79lxes69zkqmk3ewgg2.com	Sinkholed

ThreatFox

No alerts detected

JavaScript (4)

	URL	From	Size	First Seen	Last Seen
	cdnjs.cloudflare.com/ajax/libs/jquery/3.6.0/jquery.min.js	ScriptElement	90 kB	2023-03-07	2025-05-09
Pretty URL cdnjs.cloudflare.com/ajax/libs/jquery/3.6.0/jquery.min.js IP 104.17.24.14 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:02 Last Seen2025-05-09 10:19 Times Seen205617 Hash 8fb8fee4fcc3cc86ff6c724154c49c42 b82d238d4e31fdf618bae8ac11a6c812c03dd0d4 ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e Loading...

	ipfs.io/ipfs/QmNwV4ciPNeDxJjTCfPtoQL6d5x95eaVDdzogsHJFpYnhi?filename=index.html&cfg=a.angelino@barabino.it	ScriptElement	8.9 kB	2023-11-27	2024-08-20
Pretty URL ipfs.io/ipfs/QmNwV4ciPNeDxJjTCfPtoQL6d5x95eaVDdzogsHJFpYnhi?filename=index.html&cfg=a.angelino@barabino.it IP 209.94.90.1 ASN #40680 PROTOCOL Introduced by scriptElement Embedded in HTML true Observations First Seen2023-11-27 19:49 Last Seen2024-08-20 17:41 Times Seen7 Hash 7bb111a69f4e22c5be818756a6fa4ce4 80c29d29a7c9ac20dea60e5d218208db39752fe4 ca21a7bdd8b121485dcd85ead42c635059c0a3ece80c544cfdd4cb01ad3cd47f Loading...

	unknown	ScriptElement	6.5 kB	2024-08-20	2024-08-20
Pretty Introduced by scriptElement Embedded in HTML false Observations First Seen2024-08-20 17:27 Last Seen2024-08-20 17:27 Times Seen1 Hash 05eb397400b3f4932c7d96d530beba93 9e6db54aa3b543216be0ccfe31cb6f87cc57efb5 d34c3d6a430d881e0fd82c2dff0a500eaaffe2fe820d30f87a3e9361dba10946 Loading...

		Size	First Seen	Last Seen
	#1 Write - 38a2fc9d263991befbf0f675a410e13c	15 kB	2024-08-20 17:27	2024-08-20 17:27
Pretty Observations First Seen2024-08-20 17:27 Last Seen2024-08-20 17:27 Times Seen1 Hash 38a2fc9d263991befbf0f675a410e13c 86923b3637dffd5813cd756d0109691e39813b5a 05997161bff7d68dcd243165c97b8ccc35e25982a97a53eefb76644f689a5b0a Loading...

HTTP Transactions (11)

URL IP Response Size

cdnjs.cloudflare.com/ajax/libs/jquery/3.6.0/jquery.min.js

104.17.24.14

200 OK

28 kB

URL GET HTTP/3
cdnjs.cloudflare.com/ajax/libs/jquery/3.6.0/jquery.min.js
IP
104.17.24.14:443
ASN
#13335 CLOUDFLARENET

Requested by
https://ipfs.io/ipfs/QmNwV4ciPNeDxJjTCfPtoQL6d5x95eaVDdzogsHJFpYnhi?filename=index.html&cfg=a.angelino@barabino.it
Certificate
IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint7A:EA:B9:09:71:70:6C:87:C9:D3:82:74:8A:7B:B4:60:E5:40:2D:8D
ValidityMon, 03 Jul 2023 00:00:00 GMT - Tue, 02 Jul 2024 23:59:59 GMT

File type
ASCII text, with very long lines (65447)
Size
28 kB (27938 bytes)
Hash
8fb8fee4fcc3cc86ff6c724154c49c42
b82d238d4e31fdf618bae8ac11a6c812c03dd0d4
ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e

HTTP Headers

GET /ajax/libs/jquery/3.6.0/jquery.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ipfs.io/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Wed, 29 Nov 2023 14:26:25 GMT
content-type: application/javascript; charset=utf-8
content-length: 27938
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "603e8adc-15d9d"
last-modified: Tue, 02 Mar 2021 18:58:36 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 375683
expires: Mon, 18 Nov 2024 14:26:25 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=xyEMiInBvDVgXUmSC7r%2F4QUy7sAPsfFtI9pr2F8cMySdP46zSL1BwzTBm408luvHqfmFLlCGBrPf4%2BCJS6RlmpicdRDggj0KIMPQyVPVgLptKwthZ5cWrW8uDUdGlnpG9qlB16TI"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 82db868def447128-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

bc1qm34lsc65zpw79lxes69zkqmk3ewgg2.com/api/v3/auth

194.33.191.140

200 OK

2 B

URL POST HTTP/1.1
bc1qm34lsc65zpw79lxes69zkqmk3ewgg2.com/api/v3/auth
IP
194.33.191.140:443
ASN
#20668 Internet Resources Management SRL

Requested by
https://ipfs.io/ipfs/QmNwV4ciPNeDxJjTCfPtoQL6d5x95eaVDdzogsHJFpYnhi?filename=index.html&cfg=a.angelino@barabino.it
Certificate
IssuerLet's Encrypt
Subjectbc1qm34lsc65zpw79lxes69zkqmk3ewgg2.com
Fingerprint7D:BD:91:52:9D:DC:5F:4D:CD:7C:79:44:C3:A2:D3:4A:7C:43:02:86
ValidityFri, 10 Nov 2023 13:12:47 GMT - Thu, 08 Feb 2024 13:12:46 GMT

File type
ASCII text, with no line terminators
Size
2 B (2 bytes)
Hash
e0aa021e21dddbd6d8cecec71e9cf564
9ce3bd4224c8c1780db56b4125ecf3f24bf748b7
565339bc4d33d72817b583024112eb7f5cdf3e5eef0252d6ec1b9c9a94e12bb3

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

OPTIONS /api/v3/auth HTTP/1.1
Host: bc1qm34lsc65zpw79lxes69zkqmk3ewgg2.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://ipfs.io/
Origin: https://ipfs.io
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
date: Wed, 29 Nov 2023 14:26:27 GMT
server: uvicorn
vary: Origin
access-control-allow-methods: DELETE, GET, HEAD, OPTIONS, PATCH, POST, PUT
access-control-max-age: 600
access-control-allow-credentials: true
access-control-allow-origin: https://ipfs.io
access-control-allow-headers: content-type
content-length: 2
content-type: text/plain; charset=utf-8

bc1qm34lsc65zpw79lxes69zkqmk3ewgg2.com/api/v3/auth

194.33.191.140

200 OK

16 kB

URL POST HTTP/1.1
bc1qm34lsc65zpw79lxes69zkqmk3ewgg2.com/api/v3/auth
IP
194.33.191.140:443
ASN
#20668 Internet Resources Management SRL

Requested by
https://ipfs.io/ipfs/QmNwV4ciPNeDxJjTCfPtoQL6d5x95eaVDdzogsHJFpYnhi?filename=index.html&cfg=a.angelino@barabino.it
Certificate
IssuerLet's Encrypt
Subjectbc1qm34lsc65zpw79lxes69zkqmk3ewgg2.com
Fingerprint7D:BD:91:52:9D:DC:5F:4D:CD:7C:79:44:C3:A2:D3:4A:7C:43:02:86
ValidityFri, 10 Nov 2023 13:12:47 GMT - Thu, 08 Feb 2024 13:12:46 GMT

File type
JSON data\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (15511), with no line terminators
Size
16 kB (15511 bytes)
Hash
4dd04f1f2c0a22e60eade8aebd42d932
e794897060b4542979daaab8bf12ddaa5bcd113c
2063e4fe18e2d3d18c505f4b79769281f1cd0a938b587a959b2bf503311a4892

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

POST /api/v3/auth HTTP/1.1
Host: bc1qm34lsc65zpw79lxes69zkqmk3ewgg2.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 181
Origin: https://ipfs.io
DNT: 1
Connection: keep-alive
Referer: https://ipfs.io/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
date: Wed, 29 Nov 2023 14:26:27 GMT
server: uvicorn
content-length: 15511
content-type: application/json
access-control-allow-origin: *
access-control-allow-credentials: true

cdnjs.cloudflare.com/ajax/libs/jquery/3.6.0/jquery.min.js

104.17.24.14

200 OK

28 kB

URL GET HTTP/3
cdnjs.cloudflare.com/ajax/libs/jquery/3.6.0/jquery.min.js
IP
104.17.24.14:443
ASN
#13335 CLOUDFLARENET

Requested by
https://ipfs.io/ipfs/QmNwV4ciPNeDxJjTCfPtoQL6d5x95eaVDdzogsHJFpYnhi?filename=index.html&cfg=a.angelino@barabino.it
Certificate
IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint7A:EA:B9:09:71:70:6C:87:C9:D3:82:74:8A:7B:B4:60:E5:40:2D:8D
ValidityMon, 03 Jul 2023 00:00:00 GMT - Tue, 02 Jul 2024 23:59:59 GMT

File type
ASCII text, with very long lines (65447)
Size
28 kB (27938 bytes)
Hash
8fb8fee4fcc3cc86ff6c724154c49c42
b82d238d4e31fdf618bae8ac11a6c812c03dd0d4
ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e

HTTP Headers

GET /ajax/libs/jquery/3.6.0/jquery.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ipfs.io/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Wed, 29 Nov 2023 14:26:31 GMT
content-type: application/javascript; charset=utf-8
content-length: 27938
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "603e8adc-15d9d"
last-modified: Tue, 02 Mar 2021 18:58:36 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 375689
expires: Mon, 18 Nov 2024 14:26:31 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=L6VJZh%2BOPPY%2B3XxLmxV7Q45SYyvj%2F07sfqSnevz6zMe1GJ3Pz5mruSM%2BqF8%2BIRfWL1hU8IYKWIGp3KtApi5%2BwjLtNTjv0qhsVOEzOV7HB59PP7gF7IwioODNofl09uKL62MRbzUv"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 82db86b1cb800b3d-OSL
alt-svc: h3=":443"; ma=86400

aadcdn.msftauth.net/ests/2.1/content/cdnbundles/converged.v2.login.min_8owwt4u-33ps0wawi7tmow2.css

152.199.23.37

200 OK

20 kB

URL GET HTTP/2
aadcdn.msftauth.net/ests/2.1/content/cdnbundles/converged.v2.login.min_8owwt4u-33ps0wawi7tmow2.css
IP
152.199.23.37:443
ASN
#15133 EDGECAST

Requested by
https://ipfs.io/ipfs/QmNwV4ciPNeDxJjTCfPtoQL6d5x95eaVDdzogsHJFpYnhi?filename=index.html&cfg=a.angelino@barabino.it
Certificate
IssuerDigiCert Inc
Subjectaadcdn.msftauth.net
Fingerprint99:06:D8:1E:EC:BF:DB:78:DF:F4:89:A3:ED:23:07:3D:79:F1:16:D6
ValidityTue, 31 Jan 2023 00:00:00 GMT - Wed, 31 Jan 2024 23:59:59 GMT

File type
ASCII text, with very long lines (61177)
Size
20 kB (19970 bytes)
Hash
f0e5964f8bbedf73d2d3001623bb663b
aadf3504d5e5a93e678487eeb4a63398f2699341
9537f00ca371747a97a2acca388f7b2379a7fa7c59bde18c3d2621c0de8de492

HTTP Headers

GET /ests/2.1/content/cdnbundles/converged.v2.login.min_8owwt4u-33ps0wawi7tmow2.css HTTP/1.1
Host: aadcdn.msftauth.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Referer: https://ipfs.io/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
content-encoding: gzip
accept-ranges: bytes
access-control-allow-origin: *
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Length,Date,Transfer-Encoding
age: 10009097
cache-control: public, max-age=31536000
content-md5: 9K2/nGCj75WAmmAI9nZNCA==
content-type: text/css
date: Wed, 29 Nov 2023 14:26:31 GMT
etag: 0x8DA7650B375AC9B
last-modified: Thu, 04 Aug 2022 19:37:00 GMT
server: ECAcc (ska/F7A0)
vary: Accept-Encoding
x-cache: HIT
x-ms-blob-type: BlockBlob
x-ms-lease-status: unlocked
x-ms-request-id: fa2c5f86-601e-001d-18c7-c75323000000
x-ms-version: 2009-09-19
content-length: 19970
X-Firefox-Spdy: h2

aadcdn.msauth.net/ests/2.1/content/cdnbundles/converged.v2.login.min_ziytf8dzt9eg1s6-ohhleg2.css

13.107.213.53

200 OK

20 kB

URL GET HTTP/2
aadcdn.msauth.net/ests/2.1/content/cdnbundles/converged.v2.login.min_ziytf8dzt9eg1s6-ohhleg2.css
IP
13.107.213.53:443
ASN
#8068 MICROSOFT-CORP-MSN-AS-BLOCK

Requested by
https://ipfs.io/ipfs/QmNwV4ciPNeDxJjTCfPtoQL6d5x95eaVDdzogsHJFpYnhi?filename=index.html&cfg=a.angelino@barabino.it
Certificate
IssuerDigiCert Inc
Subjectaadcdn.msauth.net
Fingerprint88:95:0C:FA:9D:33:AA:BF:A4:FD:9D:84:A6:E8:02:06:58:50:AD:8C
ValiditySun, 29 Oct 2023 00:00:00 GMT - Tue, 29 Oct 2024 23:59:59 GMT

File type
ASCII text, with very long lines (61177)
Size
20 kB (19953 bytes)
Hash
ce26137fc0d9b7d7a0d52ebe3a186512
b9d7fb3fe7d08f46c2d1153bb47b13809375c663
1304c5090f063c677a5b3720fe7b97ef4d9ea102e2bdd837ce399df6057fe385

HTTP Headers

GET /ests/2.1/content/cdnbundles/converged.v2.login.min_ziytf8dzt9eg1s6-ohhleg2.css HTTP/1.1
Host: aadcdn.msauth.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://ipfs.io
DNT: 1
Connection: keep-alive
Referer: https://ipfs.io/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
cache-control: public, max-age=31536000
content-length: 19953
content-type: text/css
content-encoding: gzip
content-md5: xg2DER+s52egaL6bUXi4hw==
last-modified: Mon, 18 Apr 2022 21:18:26 GMT
etag: 0x8DA2180FA29F5AF
x-cache: TCP_HIT
x-ms-request-id: afb3f6b4-c01e-005b-42f9-207157000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
access-control-allow-origin: *
x-azure-ref-originshield: 0UPtkZQAAAACj77pr2uOuRaMWZfUTcK7vQU1TMDRFREdFMTgxMQAzOWExMmY3ZS04OTlmLTQ2Y2YtYTZkMC0yNGJiYmEyN2Q5NTY=
x-azure-ref: 0F0pnZQAAAABBC5z5YQ5DRqo/AU/B4hohU1ZHMjBFREdFMDYxMwAzOWExMmY3ZS04OTlmLTQ2Y2YtYTZkMC0yNGJiYmEyN2Q5NTY=
date: Wed, 29 Nov 2023 14:26:30 GMT
X-Firefox-Spdy: h2

aadcdn.msauth.net/shared/1.0/content/images/arrow_left_a9cc2824ef3517b6c4160dcf8ff7d410.svg

13.107.213.53

200 OK

276 B

URL GET HTTP/2
aadcdn.msauth.net/shared/1.0/content/images/arrow_left_a9cc2824ef3517b6c4160dcf8ff7d410.svg
IP
13.107.213.53:443
ASN
#8068 MICROSOFT-CORP-MSN-AS-BLOCK

Requested by
https://ipfs.io/ipfs/QmNwV4ciPNeDxJjTCfPtoQL6d5x95eaVDdzogsHJFpYnhi?filename=index.html&cfg=a.angelino@barabino.it
Certificate
IssuerDigiCert Inc
Subjectaadcdn.msauth.net
Fingerprint88:95:0C:FA:9D:33:AA:BF:A4:FD:9D:84:A6:E8:02:06:58:50:AD:8C
ValiditySun, 29 Oct 2023 00:00:00 GMT - Tue, 29 Oct 2024 23:59:59 GMT

File type
SVG Scalable Vector Graphics image\012- HTML document, ASCII text, with very long lines (513), with no line terminators
Size
276 B (276 bytes)
Hash
a9cc2824ef3517b6c4160dcf8ff7d410
8db9aebad84ca6e4225bfdd2458ff3821cc4f064
34f9db946e89f031a80dfca7b16b2b686469c9886441261ae70a44da1dfa2d58

HTTP Headers

GET /shared/1.0/content/images/arrow_left_a9cc2824ef3517b6c4160dcf8ff7d410.svg HTTP/1.1
Host: aadcdn.msauth.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ipfs.io/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
cache-control: public, max-age=31536000
content-length: 276
content-type: image/svg+xml
content-encoding: gzip
content-md5: TjUQkZ0p0Y7rbj6LJofS9Q==
last-modified: Fri, 17 Jan 2020 19:28:34 GMT
etag: 0x8D79B8371B97A82
x-cache: TCP_HIT
x-ms-request-id: 4d8ee911-101e-0036-6042-0fec6e000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
access-control-allow-origin: *
x-azure-ref-originshield: 0SpZJZQAAAAAmBLZXYFfTSIPxFEjCT7FDQU1TMDRFREdFMTkxNQAzOWExMmY3ZS04OTlmLTQ2Y2YtYTZkMC0yNGJiYmEyN2Q5NTY=
x-azure-ref: 0F0pnZQAAAABxa0RrDTPtR7ZKgSxXAil5U1ZHMjBFREdFMDYxOAAzOWExMmY3ZS04OTlmLTQ2Y2YtYTZkMC0yNGJiYmEyN2Q5NTY=
date: Wed, 29 Nov 2023 14:26:31 GMT
X-Firefox-Spdy: h2

aadcdn.msftauthimages.net/c1c6b6c8-rkn9htozdvyl4c3jgfcra3z97watzmec02wgtuaqada/logintenantbranding/0/bannerlogo?ts=638007358070410461

13.107.246.53

200 OK

5.1 kB

URL GET HTTP/2
aadcdn.msftauthimages.net/c1c6b6c8-rkn9htozdvyl4c3jgfcra3z97watzmec02wgtuaqada/logintenantbranding/0/bannerlogo?ts=638007358070410461
IP
13.107.246.53:443
ASN
#8068 MICROSOFT-CORP-MSN-AS-BLOCK

Requested by
https://ipfs.io/ipfs/QmNwV4ciPNeDxJjTCfPtoQL6d5x95eaVDdzogsHJFpYnhi?filename=index.html&cfg=a.angelino@barabino.it
Certificate
IssuerMicrosoft Corporation
Subjectaadcdn.msftauthimages.net
FingerprintA6:84:2F:0D:AE:F4:A9:3C:2C:A6:39:BC:F9:0B:D2:12:9C:0E:A3:2A
ValiditySat, 25 Nov 2023 18:02:20 GMT - Tue, 19 Nov 2024 18:02:20 GMT

File type
PNG image data, 280 x 60, 8-bit/color RGB, non-interlaced\012- data
Size
5.1 kB (5134 bytes)
Hash
3cd9953945fd887b4d6cab20e765fce9
a677b942b4ef11de6ddbf53810fcd1cd505778a4
1a17f4c075c5fdf25c617bfec54ebf981f447098c8895474912987572fe596c6

HTTP Headers

GET /c1c6b6c8-rkn9htozdvyl4c3jgfcra3z97watzmec02wgtuaqada/logintenantbranding/0/bannerlogo?ts=638007358070410461 HTTP/1.1
Host: aadcdn.msftauthimages.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ipfs.io/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
cache-control: public, max-age=86400
content-length: 5134
content-type: image/*
content-md5: PNmVOUX9iHtNbKsg52X86Q==
last-modified: Fri, 07 Oct 2022 10:36:47 GMT
etag: 0x8DAA84FD5FF56C3
x-cache: TCP_MISS
x-ms-request-id: 2a6aa58f-001e-0045-58d0-228e4f000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
access-control-allow-origin: *
x-azure-ref-originshield: 0F0pnZQAAAABSyWhcnaCzRKsUKGsnG+RPQU1TMDRFREdFMTkyMgA1OTY2NTcxNS00MjZhLTRmMWMtYTA1OS1kNWRmZDQwYWU2Yjk=
x-azure-ref: 0F0pnZQAAAABiifdvc8v9To9+zc48nwlqU1ZHMjBFREdFMDYxMwA1OTY2NTcxNS00MjZhLTRmMWMtYTA1OS1kNWRmZDQwYWU2Yjk=
date: Wed, 29 Nov 2023 14:26:30 GMT
X-Firefox-Spdy: h2

aadcdn.msftauthimages.net/c1c6b6c8-rkn9htozdvyl4c3jgfcra3z97watzmec02wgtuaqada/logintenantbranding/0/illustration?ts=637214960173222675

13.107.246.53

200 OK

228 kB

URL GET HTTP/2
aadcdn.msftauthimages.net/c1c6b6c8-rkn9htozdvyl4c3jgfcra3z97watzmec02wgtuaqada/logintenantbranding/0/illustration?ts=637214960173222675
IP
13.107.246.53:443
ASN
#8068 MICROSOFT-CORP-MSN-AS-BLOCK

Requested by
https://ipfs.io/ipfs/QmNwV4ciPNeDxJjTCfPtoQL6d5x95eaVDdzogsHJFpYnhi?filename=index.html&cfg=a.angelino@barabino.it
Certificate
IssuerMicrosoft Corporation
Subjectaadcdn.msftauthimages.net
FingerprintA6:84:2F:0D:AE:F4:A9:3C:2C:A6:39:BC:F9:0B:D2:12:9C:0E:A3:2A
ValiditySat, 25 Nov 2023 18:02:20 GMT - Tue, 19 Nov 2024 18:02:20 GMT

File type
JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=3162, bps=0, PhotometricIntepretation=RGB, orientation=upper-left, width=10000], baseline, precision 8, 1920x940, components 3\012- data
Size
228 kB (227788 bytes)
Hash
fdd8948efb0871dc5c50509d8355d204
d192f1fb67ab2a38598815f3f7c49ae4fde0ab87
f6fdfaeaed5b14d507ab671163a263496eef15002c4cbe35408cc8712e0d0843

HTTP Headers

GET /c1c6b6c8-rkn9htozdvyl4c3jgfcra3z97watzmec02wgtuaqada/logintenantbranding/0/illustration?ts=637214960173222675 HTTP/1.1
Host: aadcdn.msftauthimages.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ipfs.io/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
cache-control: public, max-age=86400
content-length: 227788
content-type: image/*
content-md5: /diUjvsIcdxcUFCdg1XSBA==
last-modified: Fri, 03 Apr 2020 07:33:37 GMT
etag: 0x8D7D7A152E8942E
x-cache: TCP_REMOTE_HIT
x-ms-request-id: 37fd1b5c-301e-0061-1713-2278ef000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
access-control-allow-origin: *
x-azure-ref-originshield: 0F0pnZQAAAADDp0qc1Lt9QapjCgcWi2RFQU1TMDRFREdFMTkxMQA1OTY2NTcxNS00MjZhLTRmMWMtYTA1OS1kNWRmZDQwYWU2Yjk=
x-azure-ref: 0F0pnZQAAAAD2aCQy/4L2Tae8zxnTM3n6U1ZHMjBFREdFMDYxMwA1OTY2NTcxNS00MjZhLTRmMWMtYTA1OS1kNWRmZDQwYWU2Yjk=
date: Wed, 29 Nov 2023 14:26:31 GMT
X-Firefox-Spdy: h2

aadcdn.msftauth.net/shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico

152.199.23.37

200 OK

17 kB

URL GET HTTP/2
aadcdn.msftauth.net/shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico
IP
152.199.23.37:443
ASN
#15133 EDGECAST

Requested by
https://ipfs.io/ipfs/QmNwV4ciPNeDxJjTCfPtoQL6d5x95eaVDdzogsHJFpYnhi?filename=index.html&cfg=a.angelino@barabino.it
Certificate
IssuerDigiCert Inc
Subjectaadcdn.msftauth.net
Fingerprint99:06:D8:1E:EC:BF:DB:78:DF:F4:89:A3:ED:23:07:3D:79:F1:16:D6
ValidityTue, 31 Jan 2023 00:00:00 GMT - Wed, 31 Jan 2024 23:59:59 GMT

File type
MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors\012- data
Size
17 kB (17174 bytes)
Hash
12e3dac858061d088023b2bd48e2fa96
e08ce1a144eceae0c3c2ea7a9d6fbc5658f24ce5
90cdaf487716184e4034000935c605d1633926d348116d198f355a98b8c6cd21

HTTP Headers

GET /shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico HTTP/1.1
Host: aadcdn.msftauth.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ipfs.io/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Length,Date,Transfer-Encoding
age: 15767483
cache-control: public, max-age=31536000
content-md5: EuPayFgGHQiAI7K9SOL6lg==
content-type: image/x-icon
date: Wed, 29 Nov 2023 14:26:31 GMT
etag: 0x8D8731240E548EB
last-modified: Sun, 18 Oct 2020 03:02:30 GMT
server: ECAcc (ska/F738)
x-cache: HIT
x-ms-blob-type: BlockBlob
x-ms-lease-status: unlocked
x-ms-request-id: 003b7cc6-501e-0067-4768-9344ba000000
x-ms-version: 2009-09-19
content-length: 17174
X-Firefox-Spdy: h2

ipfs.io/ipfs/QmNwV4ciPNeDxJjTCfPtoQL6d5x95eaVDdzogsHJFpYnhi?filename=index.html&cfg=a.angelino@barabino.it

209.94.90.1

200 OK

24 kB

URL User Request GET HTTP/2
ipfs.io/ipfs/QmNwV4ciPNeDxJjTCfPtoQL6d5x95eaVDdzogsHJFpYnhi?filename=index.html&cfg=a.angelino@barabino.it
IP
209.94.90.1:443
ASN
#40680 PROTOCOL

Certificate
IssuerLet's Encrypt
Subjectdweb.link
Fingerprint8B:0B:A0:28:A6:81:DF:E9:49:F0:E9:A3:20:69:C6:07:BE:D6:16:2C
ValidityMon, 20 Nov 2023 14:59:23 GMT - Sun, 18 Feb 2024 14:59:22 GMT

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (8866), with CRLF line terminators
Size
24 kB (24269 bytes)
Hash
b92d12a6c48c268a1d8900bf46787429
705e8eed265d3a1f041604c0fb84b858b7610fca
15ee9a1a0c44dfb3b27079b41080feac32da13a6fc95a875264445e328e71f9f

HTTP Headers

GET /ipfs/QmNwV4ciPNeDxJjTCfPtoQL6d5x95eaVDdzogsHJFpYnhi?filename=index.html&cfg=a.angelino@barabino.it HTTP/1.1
Host: ipfs.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: openresty
date: Wed, 29 Nov 2023 14:26:25 GMT
content-type: text/html
vary: Accept-Encoding
access-control-allow-methods: GET, HEAD, OPTIONS, GET, POST, OPTIONS
cache-control: public, max-age=29030400, immutable
content-disposition: inline; filename="index.html"; filename*=UTF-8''index.html
etag: W/"QmNwV4ciPNeDxJjTCfPtoQL6d5x95eaVDdzogsHJFpYnhi"
x-ipfs-gateway-host: ipfs-bank3-fr2
x-ipfs-path: /ipfs/QmNwV4ciPNeDxJjTCfPtoQL6d5x95eaVDdzogsHJFpYnhi
x-ipfs-roots: QmNwV4ciPNeDxJjTCfPtoQL6d5x95eaVDdzogsHJFpYnhi
x-ipfs-pop: ipfs-bank3-fr2
timing-allow-origin: *
x-ipfs-datasize: 24269
access-control-allow-origin: *
access-control-allow-headers: X-Requested-With, Range, Content-Range, X-Chunked-Output, X-Stream-Output
access-control-expose-headers: Content-Range, X-Chunked-Output, X-Stream-Output
x-ipfs-lb-pop: gateway-bank2-fr2
x-bfid: 4eb7b484805fe4bfae6ff3a540f88582
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-proxy-cache: MISS
content-encoding: gzip
X-Firefox-Spdy: h2

Report Overview

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (4)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML

Observations

Hash

Observations

Hash

HTTP Transactions (11)

URL GET HTTP/3

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL POST HTTP/1.1

IP

ASN

Requested by

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL POST HTTP/1.1

IP

ASN

Requested by

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/3

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash