Report - apajas.pages.dev/

Report Overview

Submitted URL
apajas.pages.dev/
IP
172.66.44.172
ASN
#13335 CLOUDFLARENET
Submitted
2024-04-19 03:56:38
Access
public
Website Title
Masuk untuk melanjutkan
Final URL
apajas.pages.dev/
Tags
phishing
urlquery detections
Phishing - Generic phishing

Detections

urlquery
2
Network Intrusion Detection
0
Threat Detection Systems
8

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
drive.google.com	321	1997-09-15	2012-10-03	2024-04-18	424 B	682 B	142.250.74.142
ssl.gstatic.com	unknown	2008-02-11	2012-05-23	2024-04-18	460 B	1.5 kB	142.250.74.131
stackpath.bootstrapcdn.com	2467	2012-05-25	2018-06-15	2024-04-18	1.3 kB	295 kB	104.18.10.207
apajas.pages.dev	unknown	2020-09-02	2024-02-15	2024-03-26	1.9 kB	87 kB	172.66.44.172
code.jquery.com	634	2005-12-10	2012-05-21	2024-04-18	810 B	116 kB	151.101.66.137
1.bp.blogspot.com	8403	2000-07-31	2012-05-21	2024-04-18	559 B	13 kB	142.250.74.161

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

Scan Date	Severity	Indicator	Alert
2024-04-18	medium	apajas.pages.dev/	Facebook, Inc.
2024-04-18	medium	apajas.pages.dev/	Facebook, Inc.
2024-04-18	medium	apajas.pages.dev/	Facebook, Inc.
2024-04-18	medium	apajas.pages.dev/	Facebook, Inc.

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (13)

	URL	Size	First Seen	Last Seen
	unknown	115 B	2024-03-26	2024-04-19
Pretty Introduced by scriptElement Embedded in HTML false Observations First Seen2024-03-26 05:47:10 Last Seen2024-04-19 05:56:39 Times Seen2 Hash b28c6c1979aa40e4033497dffc848084 79fa0c829c0524c2ea5dda750839d247b9c820e1 05dcb8d2f1e2e0549d9b24c7d69692f0cf6f10ad1bc6445bb815f9f11f89b670 Loading...

	apajas.pages.dev/squery.js	991 B	2024-03-26	2024-04-19
Pretty URL apajas.pages.dev/squery.js IP 172.66.44.172 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2024-03-26 05:47:10 Last Seen2024-04-19 05:56:39 Times Seen2 Hash a17e0ea48423f52737d44eac7a7a1da9 4b6e95e7efcf5e0e62c35e51e8e2990e1d24396e 4764844936b509076f44c8fc1136694ec919b5ee5cabb8d4740c22015123f352 Loading...

	unknown	254 B	2024-03-26	2024-04-19
Pretty Introduced by scriptElement Embedded in HTML false Observations First Seen2024-03-26 05:47:10 Last Seen2024-04-19 05:56:39 Times Seen2 Hash 99da5ed11125960acf2bde1fcb02b411 4bfbcf5ec342569523223ebc62e0cf790bcab3ee 59ff6677b3a82f40a08371f48d31badb2cc3149c9426efab4d1a2049100a7d7f Loading...

	code.jquery.com/jquery-3.4.1.min.js	88 kB	2023-03-07	2024-05-02
Pretty URL code.jquery.com/jquery-3.4.1.min.js IP 151.101.66.137 ASN #54113 FASTLY Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:02:34 Last Seen2024-05-02 02:02:56 Times Seen96413 Hash 220afd743d9e9643852e31a135a9f3ae 88523924351bac0b5d560fe0c5781e2556e7693d 0925e8ad7bd971391a8b1e98be8e87a6971919eb5b60c196485941c3c1df089a Loading...

	apajas.pages.dev/navigation.js	1.3 kB	2024-02-14	2024-04-19
Pretty URL apajas.pages.dev/navigation.js IP 172.66.44.172 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2024-02-14 02:23:28 Last Seen2024-04-19 05:56:39 Times Seen3 Hash 82954a29f85b3f6c5b81d4854356bd73 0d2ae485e6e9f86ddf2aa3e8e4fe0b7044b85ee0 a59c082ea270e9912f8b4ea71eff475acc78f83528dc2802f82d082992c36c26 Loading...

	stackpath.bootstrapcdn.com/bootstrap/4.3.1/js/bootstrap.bundle.min.js	79 kB	2023-03-07	2024-05-02
Pretty URL stackpath.bootstrapcdn.com/bootstrap/4.3.1/js/bootstrap.bundle.min.js IP 104.18.10.207 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:02:59 Last Seen2024-05-02 00:32:07 Times Seen15703 Hash a454220fc07088bf1fdd19313b6bfd50 265a733cb7fbc481fd2510a659a85ad55c93c895 7f3145c87d3570154f633975e8a4f8d30aa38603edaba145501e9c90ddbe186c Loading...

	unknown	332 B	2024-03-26	2024-04-19
Pretty Introduced by scriptElement Embedded in HTML false Observations First Seen2024-03-26 05:47:10 Last Seen2024-04-19 05:56:39 Times Seen2 Hash 9ae635e20716d55027bd65d417e101b2 9c0f622db084d1a873f80c859a29d5f791b35d5a f00afeb41d447ffb5903f76bd631cd81c25d1216f8f114ce41118e28b78f04e3 Loading...

	unknown	183 B	2024-03-26	2024-04-19
Pretty Introduced by scriptElement Embedded in HTML false Observations First Seen2024-03-26 05:47:10 Last Seen2024-04-19 05:56:39 Times Seen2 Hash 808d34f77dda7b50c7a7e665692c30b0 ede3e4cd46e53511b9bb86e0c8c6ece1f52331d6 f21cc55ede16a456b5598541c9a5494987e55a2b5b5780ee63f5e3523a07b839 Loading...

	stackpath.bootstrapcdn.com/bootstrap/4.3.1/js/bootstrap.min.js	58 kB	2023-03-07	2024-05-01
Pretty URL stackpath.bootstrapcdn.com/bootstrap/4.3.1/js/bootstrap.min.js IP 104.18.10.207 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:02:33 Last Seen2024-05-01 23:39:18 Times Seen20381 Hash e1d98d47689e00f8ecbc5d9f61bdb42e 6778fed3cf095a318141a31f455c8f4663885bde 0a34a87842c539c1f4feec56bba982fd596b73500046a6e6fe38a22260c6577b Loading...

	unknown	369 B	2024-03-26	2024-04-19
Pretty Introduced by scriptElement Embedded in HTML false Observations First Seen2024-03-26 05:47:10 Last Seen2024-04-19 05:56:39 Times Seen2 Hash 7a2c7d0ddb9ee8d62ab16636b986d284 a9c3e6aa5177beea831ac094bf0e6bece7e8185d 41be2dffa6e58667dc68858f7802ed83cdf5b913a97963f6d99740522eb50ab4 Loading...

	apajas.pages.dev/	31 kB	2024-03-26	2024-04-19
Pretty URL apajas.pages.dev/ IP 172.66.44.172 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2024-03-26 05:47:10 Last Seen2024-04-19 05:56:39 Times Seen2 Hash fdb7c41c4b4ba484c2a7288afa8b1159 02bc561514f0d1cd6ac9d9f0522720de911261f1 e399f7ef9d922cba418cf197f0182a4f779ef09d311cc453c3ed27193ae1c35f Loading...

	code.jquery.com/jquery.js	283 kB	2023-03-07	2024-05-02
Pretty URL code.jquery.com/jquery.js IP 151.101.66.137 ASN #54113 FASTLY Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:25:17 Last Seen2024-05-02 00:55:12 Times Seen13068 Hash 3d93b072d14f2bd1ede58f4847f537fd 73e5d044bd153dd912930e8be433059454ce19cd 3029834a820c79c154c377f52e2719fc3ff2a27600a07ae089ea7fde9087f6bc Loading...

		Size	First Seen	Last Seen
	#1 Write - 76049d1b06995d80ededb6b33dd379a0	10 kB	2024-03-26	2024-04-19
Pretty Observations First Seen2024-03-26 05:47:10 Last Seen2024-04-19 05:56:39 Times Seen2 Hash 76049d1b06995d80ededb6b33dd379a0 f1270d1ec9f583c4bdffc77aec4ee73d3b330c93 75316dd5745ec7ed7eeae69e954fdfd1b8b89a962639c6a0cc998639b23adc92 Loading...

HTTP Transactions (12)

URL IP Response Size

apajas.pages.dev/kantamano.webp?_nc_cat=104&ccb=2&_nc_sid=eaa83b&_nc_ohc=Ck0A2olqXkYAX_6YIBu&_nc_ad=z-m&_nc_cid=1225&_nc_eh=73450a7bb822a65874f4084b2a729c9f&_nc_ht=z-m-scontent.fsub3-2.fna&_nc_tp=30&oh=0cea13943ed41490dbf57bb96352996b&oe=6026D554

172.66.44.172

200 OK

51 kB

URL GET HTTP/3
apajas.pages.dev/kantamano.webp?_nc_cat=104&ccb=2&_nc_sid=eaa83b&_nc_ohc=Ck0A2olqXkYAX_6YIBu&_nc_ad=z-m&_nc_cid=1225&_nc_eh=73450a7bb822a65874f4084b2a729c9f&_nc_ht=z-m-scontent.fsub3-2.fna&_nc_tp=30&oh=0cea13943ed41490dbf57bb96352996b&oe=6026D554
IP
172.66.44.172:443
ASN
#13335 CLOUDFLARENET

Requested by
https://apajas.pages.dev/
Certificate
IssuerLet's Encrypt
Subjectapajas.pages.dev
FingerprintCD:44:C4:59:B7:F9:25:39:92:68:33:26:B4:73:27:9B:3D:0D:01:2C
ValiditySun, 14 Apr 2024 12:37:44 GMT - Sat, 13 Jul 2024 12:37:43 GMT

File type
RIFF (little-endian) data, Web/P image
Size
51 kB (50672 bytes)
Hash
85bcadf70ad2babd24fe768b3f5c5813
873df4c7b9051172450bda03933d5ca078190707
0b803e7899ae6a37c02225c538b77edd75a98f2f7eb5c3c9593eec90b8f80ec0

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Facebook, Inc.

HTTP Headers

GET /kantamano.webp?_nc_cat=104&ccb=2&_nc_sid=eaa83b&_nc_ohc=Ck0A2olqXkYAX_6YIBu&_nc_ad=z-m&_nc_cid=1225&_nc_eh=73450a7bb822a65874f4084b2a729c9f&_nc_ht=z-m-scontent.fsub3-2.fna&_nc_tp=30&oh=0cea13943ed41490dbf57bb96352996b&oe=6026D554 HTTP/1.1
Host: apajas.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://apajas.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 19 Apr 2024 03:56:11 GMT
content-type: image/webp
content-length: 50672
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "84b988ae1b4057ed90e6f68cab2e3019"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=dIWhW0wjcZbg2iMhXAtwxP%2F4kTm2nz4d6h%2B9NNx2XGQhXeFQ9cUKpR9MNyXp9Cs17DqaVhvqR4J%2FaPXgnc6X4l0Db54%2BvpKEFjcxkIJS9nG3maKjtx5QGbwmOqWTGLWKyOg3"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8769f69dcac15688-OSL
alt-svc: h3=":443"; ma=86400

code.jquery.com/jquery.js

151.101.66.137

200 OK

84 kB

URL GET HTTP/2
code.jquery.com/jquery.js
IP
151.101.66.137:443
ASN
#54113 FASTLY

Requested by
https://apajas.pages.dev/
Certificate
IssuerSectigo Limited
Subject*.jquery.com
FingerprintD2:19:0A:AD:CE:BB:9C:61:17:5D:29:4B:A2:54:E8:C6:91:B8:F9:8D
ValidityTue, 11 Jul 2023 00:00:00 GMT - Sun, 14 Jul 2024 23:59:59 GMT

File type
JavaScript source, ASCII text
Size
84 kB (83875 bytes)
Hash
3d93b072d14f2bd1ede58f4847f537fd
73e5d044bd153dd912930e8be433059454ce19cd
3029834a820c79c154c377f52e2719fc3ff2a27600a07ae089ea7fde9087f6bc

HTTP Headers

GET /jquery.js HTTP/1.1
Host: code.jquery.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://apajas.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Fri, 18 Oct 1991 12:00:00 GMT
etag: W/"28feccc0-4508e"
cache-control: public, max-age=31536000, stale-while-revalidate=604800
access-control-allow-origin: *
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Fri, 19 Apr 2024 03:56:11 GMT
age: 18696773
x-served-by: cache-lga13621-LGA, cache-hel1410026-HEL
x-cache: HIT, HIT
x-cache-hits: 23, 1523
x-timer: S1713498972.889925,VS0,VE0
vary: Accept-Encoding
content-length: 83875
X-Firefox-Spdy: h2

code.jquery.com/jquery-3.4.1.min.js

151.101.66.137

200 OK

31 kB

URL GET HTTP/2
code.jquery.com/jquery-3.4.1.min.js
IP
151.101.66.137:443
ASN
#54113 FASTLY

Requested by
https://apajas.pages.dev/
Certificate
IssuerSectigo Limited
Subject*.jquery.com
FingerprintD2:19:0A:AD:CE:BB:9C:61:17:5D:29:4B:A2:54:E8:C6:91:B8:F9:8D
ValidityTue, 11 Jul 2023 00:00:00 GMT - Sun, 14 Jul 2024 23:59:59 GMT

File type
JavaScript source, ASCII text, with very long lines (65451)
Size
31 kB (30638 bytes)
Hash
220afd743d9e9643852e31a135a9f3ae
88523924351bac0b5d560fe0c5781e2556e7693d
0925e8ad7bd971391a8b1e98be8e87a6971919eb5b60c196485941c3c1df089a

HTTP Headers

GET /jquery-3.4.1.min.js HTTP/1.1
Host: code.jquery.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://apajas.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Fri, 18 Oct 1991 12:00:00 GMT
etag: W/"28feccc0-15851"
cache-control: public, max-age=31536000, stale-while-revalidate=604800
access-control-allow-origin: *
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Fri, 19 Apr 2024 03:56:11 GMT
age: 5417470
x-served-by: cache-lga21965-LGA, cache-hel1410026-HEL
x-cache: HIT, HIT
x-cache-hits: 23, 39089
x-timer: S1713498972.895509,VS0,VE0
vary: Accept-Encoding
content-length: 30638
X-Firefox-Spdy: h2

1.bp.blogspot.com/-Bf-ry892Jfw/Xz2Ey-p0N1I/AAAAAAAAADY/yIINe9AVjtEWQV0Kxd9gRmy18Lg6lG-UgCLcBGAsYHQ/s640/245y25476y42yh467y4w5y6ttty%2B%25281%2529.png

142.250.74.161

200 OK

13 kB

URL GET HTTP/2
1.bp.blogspot.com/-Bf-ry892Jfw/Xz2Ey-p0N1I/AAAAAAAAADY/yIINe9AVjtEWQV0Kxd9gRmy18Lg6lG-UgCLcBGAsYHQ/s640/245y25476y42yh467y4w5y6ttty%2B%25281%2529.png
IP
142.250.74.161:443
ASN
#15169 GOOGLE

Requested by
https://apajas.pages.dev/
Certificate
IssuerGoogle Trust Services LLC
Subjectmisc-sni.blogspot.com
FingerprintA4:03:49:6F:80:6E:27:69:C4:CF:7F:94:FC:BC:3C:1F:D5:28:AE:B5
ValidityMon, 04 Mar 2024 06:55:13 GMT - Mon, 27 May 2024 06:55:12 GMT

File type
PNG image data, 640 x 124, 8-bit/color RGBA, non-interlaced
Size
13 kB (12717 bytes)
Hash
9c199c67102eaff509383f60bd0b436b
16f1f4e223a56ffdbe4269853c03b190f983b54c
de8cbfa54757af582706bbd230755c3725c9bd7a39856723e6369eb2dfba9e2c

HTTP Headers

GET /-Bf-ry892Jfw/Xz2Ey-p0N1I/AAAAAAAAADY/yIINe9AVjtEWQV0Kxd9gRmy18Lg6lG-UgCLcBGAsYHQ/s640/245y25476y42yh467y4w5y6ttty%2B%25281%2529.png HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://apajas.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
access-control-allow-origin: *
timing-allow-origin: *
access-control-expose-headers: Content-Length
content-disposition: inline;filename="245y25476y42yh467y4w5y6ttty (1).png"
x-content-type-options: nosniff
server: fife
content-length: 12717
x-xss-protection: 0
date: Fri, 19 Apr 2024 03:56:12 GMT
expires: Sat, 20 Apr 2024 03:56:12 GMT
cache-control: public, max-age=86400, no-transform
etag: "v3a"
content-type: image/png
vary: Origin
age: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

drive.google.com/favicon.ico

142.250.74.142

302 Found

269 B

URL GET HTTP/2
drive.google.com/favicon.ico
IP
142.250.74.142:443
ASN
#15169 GOOGLE

Requested by
https://apajas.pages.dev/
Certificate
IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint02:6C:2F:38:A0:8A:95:AC:E8:2B:67:AA:69:A4:34:6E:15:99:F5:1D
ValidityMon, 04 Mar 2024 06:35:50 GMT - Mon, 27 May 2024 06:35:49 GMT

File type
HTML document, ASCII text, with CRLF, LF line terminators
Size
269 B (269 bytes)
Hash
1f2e520c63d531dc3b436073d53487f7
279c5a38c9a7c05b9a4e1f638aaa42ddb4ea3788
93e8696fd84db42910f91fbb642020fb422606d2689f48d27a50e654a57badfb

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: drive.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://apajas.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 302 Found
location: https://ssl.gstatic.com/images/branding/product/1x/drive_2020q4_32dp.png
cache-control: private
cross-origin-resource-policy: cross-origin
content-type: text/html; charset=UTF-8
x-content-type-options: nosniff
date: Fri, 19 Apr 2024 03:56:12 GMT
server: sffe
content-length: 269
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

ssl.gstatic.com/images/branding/product/1x/drive_2020q4_32dp.png

142.250.74.131

200 OK

831 B

URL GET HTTP/2
ssl.gstatic.com/images/branding/product/1x/drive_2020q4_32dp.png
IP
142.250.74.131:443
ASN
#15169 GOOGLE

Requested by
https://apajas.pages.dev/
Certificate
IssuerGoogle Trust Services LLC
Subject*.gstatic.com
Fingerprint8F:81:43:71:C4:F3:8C:FA:6D:EC:B4:5E:1F:58:71:AA:48:42:0E:E9
ValidityMon, 04 Mar 2024 07:16:39 GMT - Mon, 27 May 2024 07:16:38 GMT

File type
PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Size
831 B (831 bytes)
Hash
916c9bcccf19525ad9d3cd1514008746
9ccce6978d2417927b5150ffaac22f907ff27b6e
358e814139d3ed8469b36935a071be6696ccad7dd9bdbfdb80c052b068ae2a50

HTTP Headers

GET /images/branding/product/1x/drive_2020q4_32dp.png HTTP/1.1
Host: ssl.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://apajas.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="static-on-bigtable"
report-to: {"group":"static-on-bigtable","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/static-on-bigtable"}]}
content-length: 831
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 15 Apr 2024 19:57:01 GMT
expires: Tue, 15 Apr 2025 19:57:01 GMT
cache-control: public, max-age=31536000
age: 287951
last-modified: Fri, 21 Aug 2020 00:15:00 GMT
content-type: image/png
vary: Origin
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

apajas.pages.dev/squery.js

172.66.44.172

200 OK

991 B

URL GET HTTP/3
apajas.pages.dev/squery.js
IP
172.66.44.172:443
ASN
#13335 CLOUDFLARENET

Requested by
https://apajas.pages.dev/
Certificate
IssuerLet's Encrypt
Subjectapajas.pages.dev
FingerprintCD:44:C4:59:B7:F9:25:39:92:68:33:26:B4:73:27:9B:3D:0D:01:2C
ValiditySun, 14 Apr 2024 12:37:44 GMT - Sat, 13 Jul 2024 12:37:43 GMT

File type
ASCII text, with very long lines (1041), with no line terminators
Size
991 B (991 bytes)
Hash
4244c06efec551ec88a99808460cf737
f02b51647bec8b84eefda71efdad63ab266100d4
fac14cb668bbbc6635fab800f7d4af841c9f661e075efb2f1a66087649c05d2f

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Facebook, Inc.

HTTP Headers

GET /squery.js HTTP/1.1
Host: apajas.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://apajas.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Fri, 19 Apr 2024 03:56:11 GMT
content-type: text/javascript; charset=utf-8
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: W/"becea2b5d0f001a25c10905dc465ae48"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=guFslewFcqryXkc9QLFhN91ia%2B2%2BPt4BnU9WEsnyebVGPnOYj28ly9g6dRwTYdIlFhQlNHiRYQya8Oy6hKDk0%2BmcDQLq4iNDoyslXm%2FWhZOfVoPFJGWG5xHFtuqvg%2FrNkSKW"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8769f69dcac25688-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

apajas.pages.dev/

172.66.44.172

200 OK

31 kB

URL User Request GET HTTP/2
apajas.pages.dev/
IP
172.66.44.172:443
ASN
#13335 CLOUDFLARENET

Certificate
IssuerLet's Encrypt
Subjectapajas.pages.dev
FingerprintCD:44:C4:59:B7:F9:25:39:92:68:33:26:B4:73:27:9B:3D:0D:01:2C
ValiditySun, 14 Apr 2024 12:37:44 GMT - Sat, 13 Jul 2024 12:37:43 GMT

File type
HTML document, ASCII text, with very long lines (30918), with no line terminators
Size
31 kB (30918 bytes)
Hash
2fde924a658b52a06aee240ab59d7e84
5182487dffc22cf29794d225c40617606034b617
3a8aa29465a7758f62c3e4473bee4019653822c0248e85102ddf315f777d60cb

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Facebook, Inc.

HTTP Headers

GET / HTTP/1.1
Host: apajas.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Fri, 19 Apr 2024 03:56:11 GMT
content-type: text/html; charset=utf-8
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: W/"83e9a56f304900f0e56a4b6b8b36c05a"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=kSgykuzoeiEBDTrzOa1CqwCRHra3ORNtHnyh%2BjfDXsFr21TiN3JtfSYpvcePo0o%2F72c688SBJ55NsckrgkLQDi6AXPPysMFYeqLb6Dx597pBsXopaHYpBLK2GjkJnkKniOhI"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8769f69b8d3e56b7-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

apajas.pages.dev/navigation.js

172.66.44.172

200 OK

1.3 kB

URL GET HTTP/3
apajas.pages.dev/navigation.js
IP
172.66.44.172:443
ASN
#13335 CLOUDFLARENET

Requested by
https://apajas.pages.dev/
Certificate
IssuerLet's Encrypt
Subjectapajas.pages.dev
FingerprintCD:44:C4:59:B7:F9:25:39:92:68:33:26:B4:73:27:9B:3D:0D:01:2C
ValiditySun, 14 Apr 2024 12:37:44 GMT - Sat, 13 Jul 2024 12:37:43 GMT

File type
ASCII text, with very long lines (1413), with no line terminators
Size
1.3 kB (1323 bytes)
Hash
5cb864c93a82212aba5150059fe3fa53
9fafdad0aa3c6634afd815b18e8c02eb109c86a1
3242bb7c77905a5694081732e78584204c003f76380edc001772a5455ccf3cef

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Facebook, Inc.

HTTP Headers

GET /navigation.js HTTP/1.1
Host: apajas.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://apajas.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Fri, 19 Apr 2024 03:56:11 GMT
content-type: text/javascript; charset=utf-8
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: W/"313398db7118b44b05583df9ead976cc"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=tpj9yJnjvJNGLu1prgRZxZMLqPP9xxUTvQ%2F2Vi9rm0oFYKEfOLAgfaCeXmpSwXQ3QHnelw881Zo7pDgDVhz%2FI%2FO4yI4HhQSMf%2BKXd8cF62MTD5H4RbrXhKcRrVqfDwFHRbYT"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8769f69dcac55688-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

stackpath.bootstrapcdn.com/bootstrap/4.3.1/js/bootstrap.min.js

104.18.10.207

200 OK

58 kB

URL GET HTTP/2
stackpath.bootstrapcdn.com/bootstrap/4.3.1/js/bootstrap.min.js
IP
104.18.10.207:443
ASN
#13335 CLOUDFLARENET

Requested by
https://apajas.pages.dev/
Certificate
IssuerGoogle Trust Services LLC
Subjectbootstrapcdn.com
Fingerprint57:B4:25:B9:9C:88:A1:A3:3D:F7:31:74:02:E4:D1:E0:0A:F5:11:63
ValidityWed, 27 Mar 2024 00:22:09 GMT - Tue, 25 Jun 2024 00:22:08 GMT

File type
JavaScript source, ASCII text, with very long lines (57791)
Size
58 kB (58072 bytes)
Hash
e1d98d47689e00f8ecbc5d9f61bdb42e
6778fed3cf095a318141a31f455c8f4663885bde
0a34a87842c539c1f4feec56bba982fd596b73500046a6e6fe38a22260c6577b

HTTP Headers

GET /bootstrap/4.3.1/js/bootstrap.min.js HTTP/1.1
Host: stackpath.bootstrapcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://apajas.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Fri, 19 Apr 2024 03:56:11 GMT
content-type: application/javascript; charset=utf-8
vary: Accept-Encoding
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: DE
access-control-allow-origin: *
cache-control: public, max-age=31919000
etag: W/"e1d98d47689e00f8ecbc5d9f61bdb42e"
last-modified: Mon, 25 Jan 2021 22:04:08 GMT
cdn-cachedat: 08/21/2023 18:50:34
cdn-proxyver: 1.04
cdn-requestpullcode: 200
cdn-requestpullsuccess: True
cdn-edgestorageid: 1079
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
cdn-status: 200
cdn-requestid: 7405f0000be4a68db13c4eaa1682a3e2
cdn-cache: HIT
cf-cache-status: HIT
age: 12613462
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 8769f69dfbc056a9-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

stackpath.bootstrapcdn.com/bootstrap/4.3.1/js/bootstrap.bundle.min.js

104.18.10.207

200 OK

79 kB

URL GET HTTP/2
stackpath.bootstrapcdn.com/bootstrap/4.3.1/js/bootstrap.bundle.min.js
IP
104.18.10.207:443
ASN
#13335 CLOUDFLARENET

Requested by
https://apajas.pages.dev/
Certificate
IssuerGoogle Trust Services LLC
Subjectbootstrapcdn.com
Fingerprint57:B4:25:B9:9C:88:A1:A3:3D:F7:31:74:02:E4:D1:E0:0A:F5:11:63
ValidityWed, 27 Mar 2024 00:22:09 GMT - Tue, 25 Jun 2024 00:22:08 GMT

File type
JavaScript source, ASCII text, with very long lines (65297)
Size
79 kB (78635 bytes)
Hash
a454220fc07088bf1fdd19313b6bfd50
265a733cb7fbc481fd2510a659a85ad55c93c895
7f3145c87d3570154f633975e8a4f8d30aa38603edaba145501e9c90ddbe186c

HTTP Headers

GET /bootstrap/4.3.1/js/bootstrap.bundle.min.js HTTP/1.1
Host: stackpath.bootstrapcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://apajas.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Fri, 19 Apr 2024 03:56:11 GMT
content-type: application/javascript; charset=utf-8
vary: Accept-Encoding
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: DE
access-control-allow-origin: *
cache-control: public, max-age=31919000
etag: W/"a454220fc07088bf1fdd19313b6bfd50"
last-modified: Mon, 25 Jan 2021 22:04:08 GMT
cdn-cachedat: 10/03/2023 17:35:44
cdn-proxyver: 1.04
cdn-requestpullcode: 200
cdn-requestpullsuccess: True
cdn-edgestorageid: 755
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
cdn-status: 200
cdn-requestid: 982709866b51e7db17122f8d0508aa86
cdn-cache: HIT
cf-cache-status: HIT
age: 1408018
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 8769f69dfbc556a9-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

stackpath.bootstrapcdn.com/bootstrap/4.3.1/css/bootstrap.min.css

104.18.10.207

200 OK

156 kB

URL GET HTTP/2
stackpath.bootstrapcdn.com/bootstrap/4.3.1/css/bootstrap.min.css
IP
104.18.10.207:443
ASN
#13335 CLOUDFLARENET

Requested by
https://apajas.pages.dev/
Certificate
IssuerGoogle Trust Services LLC
Subjectbootstrapcdn.com
Fingerprint57:B4:25:B9:9C:88:A1:A3:3D:F7:31:74:02:E4:D1:E0:0A:F5:11:63
ValidityWed, 27 Mar 2024 00:22:09 GMT - Tue, 25 Jun 2024 00:22:08 GMT

File type
ASCII text, with very long lines (65324)
Size
156 kB (155758 bytes)
Hash
a15c2ac3234aa8f6064ef9c1f7383c37
6e10354828454898fda80f55f3decb347fd9ed21
60b19e5da6a9234ff9220668a5ec1125c157a268513256188ee80f2d2c8d8d36

HTTP Headers

GET /bootstrap/4.3.1/css/bootstrap.min.css HTTP/1.1
Host: stackpath.bootstrapcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://apajas.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Fri, 19 Apr 2024 03:56:11 GMT
content-type: text/css; charset=utf-8
vary: Accept-Encoding
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: DE
access-control-allow-origin: *
cache-control: public, max-age=31919000
etag: W/"a15c2ac3234aa8f6064ef9c1f7383c37"
last-modified: Mon, 25 Jan 2021 22:04:08 GMT
cdn-cachedat: 10/31/2023 18:59:49
cdn-proxyver: 1.04
cdn-requestpullcode: 200
cdn-requestpullsuccess: True
cdn-edgestorageid: 1078
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
cdn-status: 200
cdn-requestid: 781fdf1c6e823e65290dac5eeb884a47
cdn-cache: HIT
cf-cache-status: HIT
age: 12789752
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 8769f69debbe56a9-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (13)

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML

Observations