Report - masterkingwin24.pages.dev/

Report Overview

Submitted URL
masterkingwin24.pages.dev/
IP
172.66.47.182
ASN
#13335 CLOUDFLARENET
Submitted
2024-05-08 16:29:19
Access
public
Website Title
*******Parfeu windows******
Final URL
masterkingwin24.pages.dev/#
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
92

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
masterkingwin24.pages.dev	unknown	2020-09-02	2023-02-07	2024-02-02	23 kB	1.3 MB	172.66.47.182
www.googletagmanager.com	75	2011-11-11	2013-05-22	2024-05-08	428 B	72 kB	142.250.74.168
fonts.gstatic.com	unknown	2008-02-11	2014-09-09	2024-05-08	2.2 kB	35 kB	142.250.74.131
fonts.googleapis.com	8877	2005-01-25	2013-06-10	2024-05-07	569 B	9.3 kB	142.250.74.106
maxcdn.bootstrapcdn.com	724	2012-05-25	2014-06-18	2024-05-07	1.0 kB	96 kB	104.18.11.207
stackpath.bootstrapcdn.com	2467	2012-05-25	2018-06-15	2024-05-08	992 B	222 kB	104.18.11.207
cdnjs.cloudflare.com	235	2009-02-17	2015-04-17	2024-05-08	914 B	30 kB	104.17.24.14
code.jquery.com	634	2005-12-10	2012-05-21	2024-05-08	419 B	31 kB	151.101.130.137

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

Scan Date	Severity	Indicator	Alert
2024-05-08	medium	masterkingwin24.pages.dev/	Office365
2024-05-08	medium	masterkingwin24.pages.dev/	Office365
2024-05-08	medium	masterkingwin24.pages.dev/	Office365
2024-05-08	medium	masterkingwin24.pages.dev/	Office365
2024-05-08	medium	masterkingwin24.pages.dev/	Office365
2024-05-08	medium	masterkingwin24.pages.dev/	Office365
2024-05-08	medium	masterkingwin24.pages.dev/	Office365
2024-05-08	medium	masterkingwin24.pages.dev/	Office365
2024-05-08	medium	masterkingwin24.pages.dev/	Office365
2024-05-08	medium	masterkingwin24.pages.dev/	Office365
2024-05-08	medium	masterkingwin24.pages.dev/	Office365
2024-05-08	medium	masterkingwin24.pages.dev/	Office365
2024-05-08	medium	masterkingwin24.pages.dev/	Office365
2024-05-08	medium	masterkingwin24.pages.dev/	Office365
2024-05-08	medium	masterkingwin24.pages.dev/	Office365
2024-05-08	medium	masterkingwin24.pages.dev/	Office365
2024-05-08	medium	masterkingwin24.pages.dev/	Office365
2024-05-08	medium	masterkingwin24.pages.dev/	Office365
2024-05-08	medium	masterkingwin24.pages.dev/	Office365
2024-05-08	medium	masterkingwin24.pages.dev/	Office365
2024-05-08	medium	masterkingwin24.pages.dev/	Office365
2024-05-08	medium	masterkingwin24.pages.dev/	Office365
2024-05-08	medium	masterkingwin24.pages.dev/	Office365
2024-05-08	medium	masterkingwin24.pages.dev/	Office365
2024-05-08	medium	masterkingwin24.pages.dev/	Office365
2024-05-08	medium	masterkingwin24.pages.dev/	Office365
2024-05-08	medium	masterkingwin24.pages.dev/	Office365
2024-05-08	medium	masterkingwin24.pages.dev/	Office365
2024-05-08	medium	masterkingwin24.pages.dev/	Office365
2024-05-08	medium	masterkingwin24.pages.dev/	Office365
2024-05-08	medium	masterkingwin24.pages.dev/	Office365
2024-05-08	medium	masterkingwin24.pages.dev/	Office365
2024-05-08	medium	masterkingwin24.pages.dev/	Office365
2024-05-08	medium	masterkingwin24.pages.dev/	Office365
2024-05-08	medium	masterkingwin24.pages.dev/	Office365
2024-05-08	medium	masterkingwin24.pages.dev/	Office365
2024-05-08	medium	masterkingwin24.pages.dev/	Office365
2024-05-08	medium	masterkingwin24.pages.dev/	Office365
2024-05-08	medium	masterkingwin24.pages.dev/	Office365
2024-05-08	medium	masterkingwin24.pages.dev/	Office365
2024-05-08	medium	masterkingwin24.pages.dev/	Office365
2024-05-08	medium	masterkingwin24.pages.dev/	Office365
2024-05-08	medium	masterkingwin24.pages.dev/	Office365
2024-05-08	medium	masterkingwin24.pages.dev/	Office365
2024-05-08	medium	masterkingwin24.pages.dev/	Office365
2024-05-08	medium	masterkingwin24.pages.dev/	Office365

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (31)

	URL	Size	First Seen	Last Seen
	code.jquery.com/jquery-3.2.1.min.js	87 kB	2023-03-07	2024-05-20
Pretty URL code.jquery.com/jquery-3.2.1.min.js IP 151.101.130.137 ASN #54113 FASTLY Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:02:00 Last Seen2024-05-20 01:58:47 Times Seen68110 Hash c9f5aeeca3ad37bf2aa006139b935f0a 1055018c28ab41087ef9ccefe411606893dabea2 87083882cc6015984eb0411a99d3981817f5dc5c90ba24f0940420c5548d82de Loading...

	masterkingwin24.pages.dev/#	103 B	2023-03-07	2024-05-16
Pretty URL masterkingwin24.pages.dev/# IP 0.0.0.0 ASN #0 Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 12:09:10 Last Seen2024-05-16 08:28:40 Times Seen31 Hash fd79e5323bf320593baf28c55c6c4a9f d4de9b0a491fa4f0ed59829c1ef6c79119165dd0 a75477ab81bd4f9743929438c1bfbb5ccb4ce0848f1250d60fb4e34abe45264d Loading...

	masterkingwin24.pages.dev/#	182 B	2023-03-11	2024-05-16
Pretty URL masterkingwin24.pages.dev/# IP 0.0.0.0 ASN #0 Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-11 09:14:45 Last Seen2024-05-16 08:28:40 Times Seen22 Hash 85d69597899d25b7d1d9042018f57242 0b2b75f4ad382ec61d4d5883210aaf2ad38c493a dc270ad8d110845247f10925105ca213c5dfc8bfc7423d40f683d07950ac7edf Loading...

	masterkingwin24.pages.dev/#	518 B	2023-03-07	2024-05-16
Pretty URL masterkingwin24.pages.dev/# IP 0.0.0.0 ASN #0 Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 15:16:21 Last Seen2024-05-16 08:28:40 Times Seen23 Hash 8a0ae1dde183081cc238530fcec7e384 6d781e65d7ce6a25cd5c0e69623863a1238b2962 f1cb49bf567053ddc8f335c2a1b38b78ebd796fc6f12e25791bd3010133df6fb Loading...

	masterkingwin24.pages.dev/#	118 B	2023-03-07	2024-05-16
Pretty URL masterkingwin24.pages.dev/# IP 0.0.0.0 ASN #0 Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 12:09:10 Last Seen2024-05-16 08:28:40 Times Seen38 Hash a069627b2e404d3cee72e58320067315 1af5e15bac7c4cf436b5bff0481647c310884fb2 7cfcf974f97a6a29a1b8bcce9b98a8295917a68cd9d18cc31791fccf59d75648 Loading...

	masterkingwin24.pages.dev/#	231 B	2023-03-07	2024-05-16
Pretty URL masterkingwin24.pages.dev/# IP 0.0.0.0 ASN #0 Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 12:09:10 Last Seen2024-05-16 08:28:40 Times Seen38 Hash d2a672f14be8e059e73969c2a67736a7 5354d4a19eedc08d4f26b6185cb992ff3eda2950 f75e46e4788f7a3e78a680a410ad6dd038d824e76c13104914f14f8528dcc481 Loading...

	www.google-analytics.com/analytics.js	4.7 kB	2023-04-11	2024-05-20
Pretty URL www.google-analytics.com/analytics.js IP 0.0.0.0 ASN #0 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-04-11 21:07:53 Last Seen2024-05-20 04:09:18 Times Seen350417 Hash f24128d0c9cba7be2916c693427a3483 1b6397d496ea896ebc2018b01b995cee4f166029 58173de4697da1a218f04c3a783a733bab4e769ceabc37cd42da9dc3e036a7e8 Loading...

	masterkingwin24.pages.dev/#	700 B	2023-03-07	2024-05-16
Pretty URL masterkingwin24.pages.dev/# IP 0.0.0.0 ASN #0 Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 12:09:10 Last Seen2024-05-16 08:28:40 Times Seen38 Hash bd5c8fd69a4ece137896f659984eaa77 8dd71508ee882b9a9cccb60c5c8e2bf3687d2107 fcb901368624d2cda4e817e1f8ad4873e9f168108683e31399ceca136fb91efe Loading...

	masterkingwin24.pages.dev/#	311 B	2023-03-07	2024-05-16
Pretty URL masterkingwin24.pages.dev/# IP 0.0.0.0 ASN #0 Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 12:09:10 Last Seen2024-05-16 08:28:40 Times Seen38 Hash dd2569c9b459eeda44193708ef090637 26cf5c631e40e683a49abaf5d19881f32e72fdeb 1059ae25ef3c5332aee1f95559d9b9dd1c9c677403e483d027cde663447801c0 Loading...

	www.googletagmanager.com/gtag/js?id=UA-xxx-x	195 kB	2024-05-08	2024-05-08
Pretty URL www.googletagmanager.com/gtag/js?id=UA-xxx-x IP 142.250.74.168 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML false Observations First Seen2024-05-08 18:29:21 Last Seen2024-05-08 18:29:21 Times Seen2 Hash 9fb3eb1e0153724933b865c480e1296f 5e5dc0243037e011759a9f74c0d3b6f93a6d6e65 4e00594d069b801be4707fc3271e8ab3f849e31bf3bdd1a79b9b69453f3972db Loading...

	masterkingwin24.pages.dev/#	95 B	2024-01-17	2024-05-09
Pretty URL masterkingwin24.pages.dev/# IP 0.0.0.0 ASN #0 Introduced by scriptElement Embedded in HTML true Observations First Seen2024-01-17 02:59:35 Last Seen2024-05-09 11:37:22 Times Seen8 Hash 63439d143c4f6c177a3c3e51227eeb65 ce6f87d51e559a4c0ff9a32bf97aa38d9d19bb1d 0d0b4b088e8430fdea10e1730c7cc4c1b03f95c50924224d951ef8c53ce7dcb1 Loading...

	masterkingwin24.pages.dev/#	197 B	2023-09-17	2024-05-16
Pretty URL masterkingwin24.pages.dev/# IP 0.0.0.0 ASN #0 Introduced by scriptElement Embedded in HTML true Observations First Seen2023-09-17 15:21:24 Last Seen2024-05-16 08:28:40 Times Seen22 Hash 9407008ed581c944522381608bc84014 85e0d303c5494113d31c63150f0dd294e98da59a e4a62b228bd862739ea2db759cace9de3048a0e488f57eb99c0ffeba9584086f Loading...

	masterkingwin24.pages.dev/#	374 B	2023-09-17	2024-05-16
Pretty URL masterkingwin24.pages.dev/# IP 0.0.0.0 ASN #0 Introduced by scriptElement Embedded in HTML true Observations First Seen2023-09-17 15:21:24 Last Seen2024-05-16 08:28:40 Times Seen22 Hash b0a3d9d820cff2b0245893026700414d 90b78ccc08d0c0a41d911a4554bd19ee81664905 fbdc03c3b26e299fae361694f0737cefb7a7ba25d36eca54a5f74b4534e2b242 Loading...

	masterkingwin24.pages.dev/#	362 B	2023-03-07	2024-05-16
Pretty URL masterkingwin24.pages.dev/# IP 0.0.0.0 ASN #0 Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 12:01:50 Last Seen2024-05-16 08:28:40 Times Seen61 Hash 7be7944afb861aecd3aa7708dd670bf5 87e594c16e969cf47895f08299aea479f7816ac7 970b5b28305342edec2da42b3c65afc56020fc362ff245434480a6a42356d0ca Loading...

	masterkingwin24.pages.dev/#	72 B	2023-03-07	2024-05-16
Pretty URL masterkingwin24.pages.dev/# IP 0.0.0.0 ASN #0 Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 12:09:10 Last Seen2024-05-16 08:28:40 Times Seen38 Hash 714d29d5b488bde276ce618de9879e9c 72a33ba20680824998fdc58c9a84d98e67981305 4ea2f5204599f5918a755dace1bc6caa058d956623280df126c9da36c555654b Loading...

	masterkingwin24.pages.dev/#	83 B	2023-09-17	2024-05-16
Pretty URL masterkingwin24.pages.dev/# IP 0.0.0.0 ASN #0 Introduced by scriptElement Embedded in HTML true Observations First Seen2023-09-17 15:21:24 Last Seen2024-05-16 08:28:40 Times Seen22 Hash d007baa8cec10379dabf7808b99deb88 bfe385eda991b64db606db55d5a72538d2eb9495 5527731757eff8470874a6462d0d4d1badabf9e3fff0761f7d5c438803d49c75 Loading...

	masterkingwin24.pages.dev/#	320 B	2023-03-07	2024-05-16
Pretty URL masterkingwin24.pages.dev/# IP 0.0.0.0 ASN #0 Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 12:09:10 Last Seen2024-05-16 08:28:40 Times Seen25 Hash 3d69ef542a54511ea9e6fc6411f713f0 b5ac05063ae8ba08e5c65a901bfa930d2b9c520e bfad63c7cf357a32e6563b2bdcfe3dd338df177b1828cf5b7eda63fe178d541b Loading...

	masterkingwin24.pages.dev/#	149 B	2023-03-07	2024-05-16
Pretty URL masterkingwin24.pages.dev/# IP 0.0.0.0 ASN #0 Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 12:11:16 Last Seen2024-05-16 08:28:40 Times Seen65 Hash 1ef0d42ee74ef53d1d18bbe7a2d56bf2 9db93538573e87105b0f6aa4f55147fd56e6bca7 32e8240f3e8fae863d9d2094a5319b5d9949cac1318c0379dce62c9d8feb1fff Loading...

	masterkingwin24.pages.dev/#	29 B	2023-03-07	2024-05-18
Pretty URL masterkingwin24.pages.dev/# IP 0.0.0.0 ASN #0 Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 01:14:54 Last Seen2024-05-18 19:43:17 Times Seen228 Hash b1cb68711eabf10521a5607b934cc2d4 fb5622af852db2dbb77450007d03974ca5425938 191f23c8b39228dd6066811d0f4d97adc6cbf38bb7a4bc25f398e6d0bb0f8286 Loading...

	masterkingwin24.pages.dev/#	30 B	2023-03-07	2024-05-18
Pretty URL masterkingwin24.pages.dev/# IP 0.0.0.0 ASN #0 Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 01:14:54 Last Seen2024-05-18 19:43:17 Times Seen133 Hash 9734c5652d82a524c3fbd3938eaf214d 982c19a953702dd048da577d87f9480da89e36ba b37c7da95920676d3cd924e9069ea23c910f3ef4fabc316f666ba38eae24c86f Loading...

	cdnjs.cloudflare.com/ajax/libs/jquery/2.1.3/jquery.min.js	84 kB	2023-03-07	2024-05-20
Pretty URL cdnjs.cloudflare.com/ajax/libs/jquery/2.1.3/jquery.min.js IP 104.17.24.14 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:14:40 Last Seen2024-05-20 01:46:47 Times Seen11171 Hash 7f9fb969ce353c5d77707836391eb28d 62c4042e9ebc691a5372d653b424512a561d1670 2051d61446d4dbffb03727031022a08c84528ab44d203a7669c101e5fbdd5515 Loading...

	masterkingwin24.pages.dev/#	90 B	2023-03-07	2024-05-16
Pretty URL masterkingwin24.pages.dev/# IP 0.0.0.0 ASN #0 Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 12:09:10 Last Seen2024-05-16 08:28:41 Times Seen34 Hash 5f95337bfe7a2df11ab3e74b7f7ebb71 3928bbc2ce49e003549e193e7ea6a2e64e259f4a fee13a31902dbd3626d50721ae065aba72cca0c3b238050db8da3afd0ac7ed38 Loading...

	masterkingwin24.pages.dev/#	7.4 kB	2023-09-17	2024-05-16
Pretty URL masterkingwin24.pages.dev/# IP 0.0.0.0 ASN #0 Introduced by scriptElement Embedded in HTML true Observations First Seen2023-09-17 15:21:24 Last Seen2024-05-16 08:28:41 Times Seen22 Hash 86282e28012418588f9dc9857850cabd cb1517234b819f22fbc520098cf702b624e71dd5 b71c7bdf9c04935bd262910b07514dcb7b21882dd1497a9fe61cf448f5b52c28 Loading...

	stackpath.bootstrapcdn.com/bootstrap/4.5.2/js/bootstrap.min.js	60 kB	2023-03-07	2024-05-19
Pretty URL stackpath.bootstrapcdn.com/bootstrap/4.5.2/js/bootstrap.min.js IP 104.18.11.207 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:06:50 Last Seen2024-05-19 20:48:41 Times Seen7676 Hash 02d223393e00c273efdcb1ade8f4f8b1 0cc93b8421d89c24a889642428b363cb831de78a 79c599dd760cec0c1621a1af49d9a2a49da5d45e1b37d4575bace0a5e0226582 Loading...

	unknown	19 B	2023-04-10	2024-05-19
Pretty Introduced by eventHandler Embedded in HTML false Observations First Seen2023-04-10 16:23:44 Last Seen2024-05-19 19:49:51 Times Seen2663 Hash 57381d43f260aa3b8c47820ca38655a3 8d087b53d91f8e3ff0def7d1d94a6dada72fac79 35b90e4b54b87ed6cd2b439eac195f9eb59e731e17248c95fb1e26e15d61f943 Loading...

	masterkingwin24.pages.dev/#	81 B	2023-03-07	2024-05-16
Pretty URL masterkingwin24.pages.dev/# IP 0.0.0.0 ASN #0 Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 12:01:50 Last Seen2024-05-16 08:28:41 Times Seen61 Hash ea30926c246b181671bebe13ef02a3a5 a983c85a2b6e99fa47aa4b86e0abbd69751bc754 69a0522c4f114a051bbdeda40f0d494e730eb4908bc7a8ea4894d8f273301746 Loading...

	masterkingwin24.pages.dev/#	133 B	2023-03-07	2024-05-16
Pretty URL masterkingwin24.pages.dev/# IP 0.0.0.0 ASN #0 Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 12:01:50 Last Seen2024-05-16 08:28:41 Times Seen59 Hash cebcc1baee73bd4fd0e2c99e6f8ea251 cd1ac64cbb80876ea8826c5957865c686b1d0af6 2370c4b6930e8808719902cfc6fb7494d59e058c0aab1c3e71157c630ab243f9 Loading...

	masterkingwin24.pages.dev/#	120 B	2023-03-07	2024-05-16
Pretty URL masterkingwin24.pages.dev/# IP 0.0.0.0 ASN #0 Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 12:01:50 Last Seen2024-05-16 08:28:41 Times Seen57 Hash 90231c02eb7afd87a90c973d86805f7a 3accb734afab1b870f1e524dcf6029a9c465958a 64a7f5d8d705c6b363eb9420beec6b977ec531c1806b518d269622b2128dcc6d Loading...

	masterkingwin24.pages.dev/sandbox%20eval%20code	147 B	2023-04-11	2024-05-20
Pretty URL masterkingwin24.pages.dev/sandbox%20eval%20code IP 0.0.0.0 ASN #0 Introduced by Embedded in HTML false Observations First Seen2023-04-11 21:07:53 Last Seen2024-05-20 04:09:17 Times Seen350932 Hash 92b651082ce234f66bb544e678befda3 14c21c55ddce43b6f677caadf51d4ab98c6a3df8 25d57d1d97abeb84531d3d3e5754dd5cb19a2c115edfa7cfc7af8247084faded Loading...

		Size	First Seen	Last Seen
	#1 Write - 2e2095032eba0138b1d12ce173909f90	24 B	2024-01-17	2024-05-09
Pretty Observations First Seen2024-01-17 02:59:35 Last Seen2024-05-09 11:37:22 Times Seen8 Hash 2e2095032eba0138b1d12ce173909f90 3e959da5caa1d9529927241050a481e56a3ebf4b 3de714df277e463c0942b0c96afcb4fdec2b913de39fdcbb412c6dbe28aa095f Loading...

	#2 Write - edfdc952ca6df6b201131744e7017150	13 B	2024-01-17	2024-05-09
Pretty Observations First Seen2024-01-17 02:59:35 Last Seen2024-05-09 11:37:22 Times Seen8 Hash edfdc952ca6df6b201131744e7017150 c9a0abc313b2203d6a1eac6ac6de07df6de7ece9 8f7b7c7314f11d533d3dbdd2dd9d0d37f5d9ae3627e674394221421a01396a14 Loading...

HTTP Transactions (59)

URL IP Response Size

cdnjs.cloudflare.com/ajax/libs/jquery/2.1.3/jquery.min.js

104.17.24.14

27 kB

URL
cdnjs.cloudflare.com/ajax/libs/jquery/2.1.3/jquery.min.js
IP
104.17.24.14:0
ASN
#13335 CLOUDFLARENET

File type
JavaScript source, ASCII text, with very long lines (32180)
Size
27 kB (26660 bytes)
Hash
7f9fb969ce353c5d77707836391eb28d
62c4042e9ebc691a5372d653b424512a561d1670
2051d61446d4dbffb03727031022a08c84528ab44d203a7669c101e5fbdd5515

HTTP Headers

GET /ajax/libs/jquery/2.1.3/jquery.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://masterkingwin24.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Wed, 08 May 2024 16:28:50 GMT
content-type: application/javascript; charset=utf-8
content-length: 26660
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03ec4-14983"
last-modified: Mon, 04 May 2020 16:11:48 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 687729
expires: Mon, 28 Apr 2025 16:28:50 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=VfyWF0TP2ZC56CF4u%2FXZZ1o59O27oa%2Be8jBtbJiQq0U4Djenxy24Y9XHWXcoo6XFvzx1czyMg8Lr%2B7GQP3OzzReniGdo7Ixt4%2FbxBI4KGbXnBrS0gmVowy3tQ0hwMXv5S22Yjt9I"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 880ad341bd2656c6-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

cdnjs.cloudflare.com/ajax/libs/froala-editor/2.8.5/css/froala_style.min.css

104.17.24.14

200 OK

1.4 kB

URL GET HTTP/2
cdnjs.cloudflare.com/ajax/libs/froala-editor/2.8.5/css/froala_style.min.css
IP
104.17.24.14:443
ASN
#13335 CLOUDFLARENET

Requested by
https://masterkingwin24.pages.dev/
Certificate
IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint7A:EA:B9:09:71:70:6C:87:C9:D3:82:74:8A:7B:B4:60:E5:40:2D:8D
ValidityMon, 03 Jul 2023 00:00:00 GMT - Tue, 02 Jul 2024 23:59:59 GMT

File type
ASCII text, with very long lines (7048)
Size
1.4 kB (1380 bytes)
Hash
8d4fba5186f02a0c4458986b0cf91667
785579011ecdda9e4754ca41649fa2fc06453b52
1cfc73a6db9523c12b6b7f5d009bed19c8799eed001f607bd891a1fd838b7739

HTTP Headers

GET /ajax/libs/froala-editor/2.8.5/css/froala_style.min.css HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://masterkingwin24.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Wed, 08 May 2024 16:28:50 GMT
content-type: text/css; charset=utf-8
content-length: 1380
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03e6a-1c28"
last-modified: Mon, 04 May 2020 16:10:18 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 674292
expires: Mon, 28 Apr 2025 16:28:50 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=fgRMHjMR%2FJ1KJtkJa%2FzezfZTLARROJMkgMaZyvFsnEA3uavuN55xqJUgphkRPyfkiBhY68qznW0oyB%2F4EOTGuO0%2BrexR24M4dfFndGq2MJHd9%2Bb0VnhEIb6Ekahex6syMWQTFyS%2B"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 880ad341cd2f56c6-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

code.jquery.com/jquery-3.2.1.min.js

151.101.130.137

30 kB

URL
code.jquery.com/jquery-3.2.1.min.js
IP
151.101.130.137:0
ASN
#54113 FASTLY

File type
JavaScript source, ASCII text, with very long lines (32058)
Size
30 kB (30125 bytes)
Hash
c9f5aeeca3ad37bf2aa006139b935f0a
1055018c28ab41087ef9ccefe411606893dabea2
87083882cc6015984eb0411a99d3981817f5dc5c90ba24f0940420c5548d82de

HTTP Headers

GET /jquery-3.2.1.min.js HTTP/1.1
Host: code.jquery.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://masterkingwin24.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Fri, 18 Oct 1991 12:00:00 GMT
etag: W/"28feccc0-15283"
cache-control: public, max-age=31536000, stale-while-revalidate=604800
access-control-allow-origin: *
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Wed, 08 May 2024 16:28:50 GMT
age: 9734297
x-served-by: cache-lga21971-LGA, cache-hel1410031-HEL
x-cache: HIT, HIT
x-cache-hits: 29, 313567
x-timer: S1715185731.860722,VS0,VE0
vary: Accept-Encoding
content-length: 30125
X-Firefox-Spdy: h2

masterkingwin24.pages.dev/5f205bb63ccd2_v.css

172.66.47.182

200 OK

0 B

URL GET HTTP/3
masterkingwin24.pages.dev/5f205bb63ccd2_v.css
IP
172.66.47.182:443
ASN
#13335 CLOUDFLARENET

Requested by
https://masterkingwin24.pages.dev/
Certificate
IssuerGoogle Trust Services LLC
Subjectmasterkingwin24.pages.dev
Fingerprint3C:6F:A3:57:6E:EA:04:A9:AB:31:38:36:1A:D9:56:B6:59:A3:FC:13
ValidityTue, 26 Mar 2024 21:00:57 GMT - Mon, 24 Jun 2024 21:00:56 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Office365

HTTP Headers

GET /5f205bb63ccd2_v.css HTTP/1.1
Host: masterkingwin24.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://masterkingwin24.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Wed, 08 May 2024 16:28:50 GMT
content-type: text/css; charset=utf-8
content-length: 0
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "9e7a27539226d700e116522ee435029d"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=nJN5im%2B51XvOijmkNlXjjAGYGdu4psM0aK%2FjjKXBdUfUeahPPn8%2B%2BFP09SmHi0SsYLWc1SEw%2B5M3R6RMpRtpOZG1Kgnkbwm%2BmuQq1yf9E1AptrqEuzw40QR2PSmawyFHzT3U%2Ft54TUp3Qn4E"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880ad3414b9d0b59-OSL
alt-svc: h3=":443"; ma=86400

masterkingwin24.pages.dev/cut.png

172.66.47.182

1.2 kB

URL
masterkingwin24.pages.dev/cut.png
IP
172.66.47.182:0
ASN
#13335 CLOUDFLARENET

Certificate
IssuerGoogle Trust Services LLC
Subjectmasterkingwin24.pages.dev
Fingerprint3C:6F:A3:57:6E:EA:04:A9:AB:31:38:36:1A:D9:56:B6:59:A3:FC:13
ValidityTue, 26 Mar 2024 21:00:57 GMT - Mon, 24 Jun 2024 21:00:56 GMT

File type
PNG image data, 12 x 12, 8-bit/color RGBA, non-interlaced
Size
1.2 kB (1192 bytes)
Hash
e526e4ff50594a6c4a5d05c18474d6e7
705609a2bd21c1e3e13666451c75d2c51436c83e
d25cf2403704d5208d662af4ef703d424cedeac253a43a1aec6e60e0db43837f

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Office365

HTTP Headers

GET /cut.png HTTP/1.1
Host: masterkingwin24.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://masterkingwin24.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Wed, 08 May 2024 16:28:50 GMT
content-type: image/png
content-length: 1192
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "0d27498074b71cae952cc8068bce9007"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Pvcx0LBfKPO8rrVkic1i994k6NUK%2BzN9mZyLm2M9gEqwHKgDaEfmSS7jlHB6imV0UK0oPhWZYg34VRnA1hr%2BeuTl%2F2FBhTCEqOsU9JouxwOcNgrMNC6P%2BBdfDYOgJGLkCKxIDj%2F%2BIQznmGjk"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880ad3417bc90b59-OSL
alt-svc: h3=":443"; ma=86400

masterkingwin24.pages.dev/5f205bbb6fc7d_v.gif

172.66.47.182

200 OK

102 B

URL GET HTTP/3
masterkingwin24.pages.dev/5f205bbb6fc7d_v.gif
IP
172.66.47.182:443
ASN
#13335 CLOUDFLARENET

Requested by
https://masterkingwin24.pages.dev/
Certificate
IssuerGoogle Trust Services LLC
Subjectmasterkingwin24.pages.dev
Fingerprint3C:6F:A3:57:6E:EA:04:A9:AB:31:38:36:1A:D9:56:B6:59:A3:FC:13
ValidityTue, 26 Mar 2024 21:00:57 GMT - Mon, 24 Jun 2024 21:00:56 GMT

File type
GIF image data, version 89a, 24 x 9
Size
102 B (102 bytes)
Hash
ef14d57c065fdbd3c66d017a729ca91f
2e7b72d674361a9c2b41767ccfbed2486e6695dd
6fcbfcda8a36536a0f9b0bc8c4a6ca451d9bafd4a879d56697e48e209691ba36

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Office365

HTTP Headers

GET /5f205bbb6fc7d_v.gif HTTP/1.1
Host: masterkingwin24.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://masterkingwin24.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Wed, 08 May 2024 16:28:50 GMT
content-type: image/gif
content-length: 102
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "40e933c6110bf926e3aed6bfee33acd0"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2FkjTy34JYDL1e1FxIYEOsuof2VY%2F8%2BFpTQgAE5M7rdA8SrJ%2Bmbkga9f8gFs5xjqoE93Ns1VCvp8baPbFeKbHOM%2FJ9CmZZ61udlt8TPilipUbyrmBbrl7Ic3f4vu0aksK2jei4zizm67AbqUV"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880ad3417bdd0b59-OSL
alt-svc: h3=":443"; ma=86400

masterkingwin24.pages.dev/5f205bbc8a6e3_v.gif

172.66.47.182

1.5 kB

URL
masterkingwin24.pages.dev/5f205bbc8a6e3_v.gif
IP
172.66.47.182:0
ASN
#13335 CLOUDFLARENET

Certificate
IssuerGoogle Trust Services LLC
Subjectmasterkingwin24.pages.dev
Fingerprint3C:6F:A3:57:6E:EA:04:A9:AB:31:38:36:1A:D9:56:B6:59:A3:FC:13
ValidityTue, 26 Mar 2024 21:00:57 GMT - Mon, 24 Jun 2024 21:00:56 GMT

File type
GIF image data, version 89a, 65 x 80
Size
1.5 kB (1547 bytes)
Hash
af52e51f42fd0c55bc3cf2c8ece71492
016f83da68ff461a5c6aebcc2a45668317b2f24c
e91f304cf7409723968740e6363dda01b50acb8e94b5ca05b4a4617666ff095c

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Office365

HTTP Headers

GET /5f205bbc8a6e3_v.gif HTTP/1.1
Host: masterkingwin24.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://masterkingwin24.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Wed, 08 May 2024 16:28:50 GMT
content-type: image/gif
content-length: 1547
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "e07c4b56e0330a7ab00e21f12e7b8fef"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=3dTHAW5H1qqgolht4i5DBYzMMnMRN5QFi%2FyA5uqiLfA0K88LF12Mf0cEuPwxmjn2kk9VTRHkKwZOTJIx369%2FH6avEpFn1ssZ372hcewBKMfDPf5vQlN6ZqRQ59ocp69i7UPzudMmZYAqV4xA"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880ad3417be00b59-OSL
alt-svc: h3=":443"; ma=86400

masterkingwin24.pages.dev/microsoft.png

172.66.47.182

200 OK

1.0 kB

URL GET HTTP/3
masterkingwin24.pages.dev/microsoft.png
IP
172.66.47.182:443
ASN
#13335 CLOUDFLARENET

Requested by
https://masterkingwin24.pages.dev/
Certificate
IssuerGoogle Trust Services LLC
Subjectmasterkingwin24.pages.dev
Fingerprint3C:6F:A3:57:6E:EA:04:A9:AB:31:38:36:1A:D9:56:B6:59:A3:FC:13
ValidityTue, 26 Mar 2024 21:00:57 GMT - Mon, 24 Jun 2024 21:00:56 GMT

File type
PNG image data, 47 x 46, 8-bit/color RGBA, non-interlaced
Size
1.0 kB (1045 bytes)
Hash
bf2b460590fbb9d8e9611a6e9006b816
561e1dab259d61e798b3ce380527b71b61074ff3
ee4bc5fe81fa7c1e8497d79c9c8a96485df217092d334e9b48fa8840fed11d03

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Office365

HTTP Headers

GET /microsoft.png HTTP/1.1
Host: masterkingwin24.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://masterkingwin24.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Wed, 08 May 2024 16:28:50 GMT
content-type: image/png
content-length: 1045
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "784ab5e987249ef1422816edc26a250f"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=RSNmESkJCSKj2pLexEI9MMgzeJhwSvZp891apP%2FIxwV1ueMhHqJkDb76ESqLkbQnHuVMvpESEHlIRlU7flG5zlscR%2BDuSmfqsvT6N%2B0SeZBbiUAm2WG2RTzRgAMb7aH4muT1Qe%2By6a1nUwrn"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880ad3417bcd0b59-OSL
alt-svc: h3=":443"; ma=86400

masterkingwin24.pages.dev/5f205bba58587_v.png

172.66.47.182

200 OK

128 B

URL GET HTTP/3
masterkingwin24.pages.dev/5f205bba58587_v.png
IP
172.66.47.182:443
ASN
#13335 CLOUDFLARENET

Requested by
https://masterkingwin24.pages.dev/
Certificate
IssuerGoogle Trust Services LLC
Subjectmasterkingwin24.pages.dev
Fingerprint3C:6F:A3:57:6E:EA:04:A9:AB:31:38:36:1A:D9:56:B6:59:A3:FC:13
ValidityTue, 26 Mar 2024 21:00:57 GMT - Mon, 24 Jun 2024 21:00:56 GMT

File type
PNG image data, 12 x 12, 8-bit/color RGB, non-interlaced
Size
128 B (128 bytes)
Hash
0bb86caf792dd7d24731c18cd37bb68e
dda1e433a0eaf785b2aa2c6214d5e48cb82a3a25
2ac27821ba64d645f36e2ad197492d30c11b10a032cc474554679555f4604622

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Office365

HTTP Headers

GET /5f205bba58587_v.png HTTP/1.1
Host: masterkingwin24.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://masterkingwin24.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Wed, 08 May 2024 16:28:50 GMT
content-type: image/png
content-length: 128
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "716018fe568eb003c2e5c767a6744f01"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=oIgJs26EywNTzeipu9rzsT%2F1%2B3xWLRb%2BHXOn9x52taahg7HUlYY3jD6Fw%2BkMm3hJRN%2FB98uwBZOM6dTsFHBHbD5Obsn0eJWxgjh8XWgVb0N1HbBy9O3k3ApFS4JSRwVh7NeajPaZD2ENd6eB"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880ad3417bce0b59-OSL
alt-svc: h3=":443"; ma=86400

masterkingwin24.pages.dev/microsoft.jpg

172.66.47.182

200 OK

2.0 kB

URL GET HTTP/3
masterkingwin24.pages.dev/microsoft.jpg
IP
172.66.47.182:443
ASN
#13335 CLOUDFLARENET

Requested by
https://masterkingwin24.pages.dev/
Certificate
IssuerGoogle Trust Services LLC
Subjectmasterkingwin24.pages.dev
Fingerprint3C:6F:A3:57:6E:EA:04:A9:AB:31:38:36:1A:D9:56:B6:59:A3:FC:13
ValidityTue, 26 Mar 2024 21:00:57 GMT - Mon, 24 Jun 2024 21:00:56 GMT

File type
JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 47x46, components 3
Size
2.0 kB (2004 bytes)
Hash
513307d24832cc64115e69c57dd4f69a
ba2e4718f5dec696d5e1e9ab95361f5dfb337f23
f70249b342aecd9e3d2367aea39df606e92562f9d7945ad8849b36cd3e3a85a1

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Office365

HTTP Headers

GET /microsoft.jpg HTTP/1.1
Host: masterkingwin24.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://masterkingwin24.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Wed, 08 May 2024 16:28:50 GMT
content-type: image/jpeg
content-length: 2004
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "2fb10ecfbac7eb44dcf7cd10a0e04aff"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=EPGeSkEx14yCL6qjwMtJzJjrk7Os3WroSWQIbHTDYZ2geTnsrts4jNLLX71LXsEl%2FZE5EhUHqI7opy2vY6Kju2r86BKhYIcjPIsTYWaMMtSlsssjIzydT7sl31K8Ibhje90zT7DBeIXz6wL5"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880ad3417bc60b59-OSL
alt-svc: h3=":443"; ma=86400

masterkingwin24.pages.dev/minus.png

172.66.47.182

200 OK

945 B

URL GET HTTP/3
masterkingwin24.pages.dev/minus.png
IP
172.66.47.182:443
ASN
#13335 CLOUDFLARENET

Requested by
https://masterkingwin24.pages.dev/
Certificate
IssuerGoogle Trust Services LLC
Subjectmasterkingwin24.pages.dev
Fingerprint3C:6F:A3:57:6E:EA:04:A9:AB:31:38:36:1A:D9:56:B6:59:A3:FC:13
ValidityTue, 26 Mar 2024 21:00:57 GMT - Mon, 24 Jun 2024 21:00:56 GMT

File type
PNG image data, 12 x 12, 8-bit/color RGBA, non-interlaced
Size
945 B (945 bytes)
Hash
e6eb3d938f3ebebd85c71307b38a3bf3
387223165f8e86f861a09adb1e3c10a8f2ec7006
2b6c8e23b2a2c49ac71393cb3e1740b7e2fccaa310ee06b68ca27b693d133f8e

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Office365

HTTP Headers

GET /minus.png HTTP/1.1
Host: masterkingwin24.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://masterkingwin24.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Wed, 08 May 2024 16:28:50 GMT
content-type: image/png
content-length: 945
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "715a3a123fc024df0a9f0d171386bebc"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2FttaYUEtVfhGlNXFWo5LbU%2FZckor0RfF4oPielf4kUuEx1TJ4K0rm1JneClHqZ7i87dYu3uc3VoRh8zje6p2BtpXe70QhRbJCqpHxBPVxQMpubO%2Fq4LKdXJJBjjelBgSXdVPzh7991340w0M"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880ad3417bca0b59-OSL
alt-svc: h3=":443"; ma=86400

masterkingwin24.pages.dev/5f205bbe46967_v.png

172.66.47.182

200 OK

293 B

URL GET HTTP/3
masterkingwin24.pages.dev/5f205bbe46967_v.png
IP
172.66.47.182:443
ASN
#13335 CLOUDFLARENET

Requested by
https://masterkingwin24.pages.dev/
Certificate
IssuerGoogle Trust Services LLC
Subjectmasterkingwin24.pages.dev
Fingerprint3C:6F:A3:57:6E:EA:04:A9:AB:31:38:36:1A:D9:56:B6:59:A3:FC:13
ValidityTue, 26 Mar 2024 21:00:57 GMT - Mon, 24 Jun 2024 21:00:56 GMT

File type
PNG image data, 12 x 12, 8-bit/color RGB, non-interlaced
Size
293 B (293 bytes)
Hash
9eb68d2ce05c151bda542a7a6356e22c
baeeefe4a7ac657c10a5f081841015de1bcf90dd
2d2b7040bc32b397c3c60d800de9aa7d86404f1874862eba61bdaa21f1523eb7

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Office365

HTTP Headers

GET /5f205bbe46967_v.png HTTP/1.1
Host: masterkingwin24.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://masterkingwin24.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Wed, 08 May 2024 16:28:50 GMT
content-type: image/png
content-length: 293
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "50d567cbc4ca65349c78e08b48e4ce01"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=9%2BtWZMEY35y6k3iv1PkS6PGVKbMmtKW%2BWmk3FfRgrhuKifnhOdewaJLjLiw71J1YWDwPtijnjXXPxwAdXM2LUlhJWdwSRILqVbc6wOaj2LuGpI9GKka0oV5mZupUIV9G4B7cQVqzmumpFpZ4"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880ad3417bcf0b59-OSL
alt-svc: h3=":443"; ma=86400

masterkingwin24.pages.dev/5f205bbdae210_v.png

172.66.47.182

200 OK

364 B

URL GET HTTP/3
masterkingwin24.pages.dev/5f205bbdae210_v.png
IP
172.66.47.182:443
ASN
#13335 CLOUDFLARENET

Requested by
https://masterkingwin24.pages.dev/
Certificate
IssuerGoogle Trust Services LLC
Subjectmasterkingwin24.pages.dev
Fingerprint3C:6F:A3:57:6E:EA:04:A9:AB:31:38:36:1A:D9:56:B6:59:A3:FC:13
ValidityTue, 26 Mar 2024 21:00:57 GMT - Mon, 24 Jun 2024 21:00:56 GMT

File type
PNG image data, 12 x 12, 8-bit/color RGB, non-interlaced
Size
364 B (364 bytes)
Hash
e144c3378090087c8ce129a30cb6cb4e
59da5466551de941d0215e45c54aa2ceaf436be1
b13a03e0db893734298cbe203bf264407636ffe5dab0a141f83c492d0034dd6a

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Office365

HTTP Headers

GET /5f205bbdae210_v.png HTTP/1.1
Host: masterkingwin24.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://masterkingwin24.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Wed, 08 May 2024 16:28:50 GMT
content-type: image/png
content-length: 364
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "ee63d8b934f54cf7e606ebae2b4bfcf6"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=AQ%2F7alF6T1jE0Z6E3Jo%2B5JdW3kmpxtbk%2FOjPKfGMszuF9b9edbDoWct7seGCOA1h24ZFlSIpQ%2BIT%2FUqoOO5CpfmFklqi4Nic33yQziJsZDnPi0TH7G8e2bwVTXHBtTRvl8YSjoNCobjMU5aS"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880ad3417bd00b59-OSL
alt-svc: h3=":443"; ma=86400

masterkingwin24.pages.dev/5f205bbae3ed9_v.png

172.66.47.182

200 OK

349 B

URL GET HTTP/3
masterkingwin24.pages.dev/5f205bbae3ed9_v.png
IP
172.66.47.182:443
ASN
#13335 CLOUDFLARENET

Requested by
https://masterkingwin24.pages.dev/
Certificate
IssuerGoogle Trust Services LLC
Subjectmasterkingwin24.pages.dev
Fingerprint3C:6F:A3:57:6E:EA:04:A9:AB:31:38:36:1A:D9:56:B6:59:A3:FC:13
ValidityTue, 26 Mar 2024 21:00:57 GMT - Mon, 24 Jun 2024 21:00:56 GMT

File type
PNG image data, 13 x 13, 8-bit/color RGB, non-interlaced
Size
349 B (349 bytes)
Hash
7454c652e0733d92de6c920c2d646ae0
34a5bd8c7401f95e346895b0e5ccffbf0e9ad638
44f752b0bd2e48052d538bc6aca5379f3630ca64da945f794690ddf47e8eaef7

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Office365

HTTP Headers

GET /5f205bbae3ed9_v.png HTTP/1.1
Host: masterkingwin24.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://masterkingwin24.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Wed, 08 May 2024 16:28:50 GMT
content-type: image/png
content-length: 349
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "0d6dd742fc1124fe244e6f4f212155f3"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=DQx0bXEVaQPY%2F058RSQuU1jWcfdh1jPFg%2BtAlyjDzpdcUTBtmfW2Ekn2g3JFDYldLGaIurXlw23QMK%2Ft2hLtlQ9B1wodNP7w7GZstPNecUbiGqySTsmLySx0Sv5EReAXIvGdcCX1buhsL0%2F9"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880ad3417bdb0b59-OSL
alt-svc: h3=":443"; ma=86400

masterkingwin24.pages.dev/5f205bb9bf55a_v.gif

172.66.47.182

1.8 kB

URL
masterkingwin24.pages.dev/5f205bb9bf55a_v.gif
IP
172.66.47.182:0
ASN
#13335 CLOUDFLARENET

Certificate
IssuerGoogle Trust Services LLC
Subjectmasterkingwin24.pages.dev
Fingerprint3C:6F:A3:57:6E:EA:04:A9:AB:31:38:36:1A:D9:56:B6:59:A3:FC:13
ValidityTue, 26 Mar 2024 21:00:57 GMT - Mon, 24 Jun 2024 21:00:56 GMT

File type
GIF image data, version 89a, 120 x 97
Size
1.8 kB (1776 bytes)
Hash
8806694db55d271b6c836433d103afcd
a532ae846499ffa93bd6ed8baafcbdabb2cc8da1
989f955c24583be00defab08c4cf80b17fe4c12756686359367144f0506eb8b8

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Office365

HTTP Headers

GET /5f205bb9bf55a_v.gif HTTP/1.1
Host: masterkingwin24.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://masterkingwin24.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Wed, 08 May 2024 16:28:50 GMT
content-type: image/gif
content-length: 1776
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "e6f4b8a850008864fc4699371ab48e7a"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=8%2FvEXIiWafgc7ySeOq0puiLWHtyl44IZCCDtQFN9IJQWchfz8JWfjB8czFMqvvCKfXg96DkLCjClPjSDJsqwEuc37%2FvEZv6WN2MAnOcYwzNaRU6mO35hdyEfLDuqzItKYJbXx0QY4sVfo2B9"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880ad3417bdc0b59-OSL
alt-svc: h3=":443"; ma=86400

masterkingwin24.pages.dev/background-2.png

172.66.47.182

200 OK

588 kB

URL GET HTTP/3
masterkingwin24.pages.dev/background-2.png
IP
172.66.47.182:443
ASN
#13335 CLOUDFLARENET

Requested by
https://masterkingwin24.pages.dev/
Certificate
IssuerGoogle Trust Services LLC
Subjectmasterkingwin24.pages.dev
Fingerprint3C:6F:A3:57:6E:EA:04:A9:AB:31:38:36:1A:D9:56:B6:59:A3:FC:13
ValidityTue, 26 Mar 2024 21:00:57 GMT - Mon, 24 Jun 2024 21:00:56 GMT

File type
PNG image data, 3024 x 1964, 8-bit colormap, non-interlaced
Size
588 kB (587475 bytes)
Hash
d25c772bd50627bb5ccb5382a6b1a572
79fe73d3cbb6ff86c2168d7e306a92d7bb75f5b5
d7938fe9f0a1db964cddece748c293f441c00f08aa125cebc2f2734c379d9ad0

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Office365

HTTP Headers

GET /background-2.png HTTP/1.1
Host: masterkingwin24.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://masterkingwin24.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Wed, 08 May 2024 16:28:50 GMT
content-type: image/png
content-length: 587475
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "09e89a2c1f26b1b948ebfd8555e37625"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=4%2FnidFJUjVoESsJPKD4NI7hJR7vJ0I3odivj%2FJWFGqjOkPgRTXDTnv603vTKQkIflp6%2Bi8c%2BajvZVpucwiMge9%2BBxva6KF4hh3ygTUC8cQ0kTNtfZJZJkY4z%2B1IKFakZG9%2BhDIjR7zsYjdzy"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880ad3417bcb0b59-OSL
alt-svc: h3=":443"; ma=86400

masterkingwin24.pages.dev/5f205bbbf25aa_v.gif

172.66.47.182

1.5 kB

URL
masterkingwin24.pages.dev/5f205bbbf25aa_v.gif
IP
172.66.47.182:0
ASN
#13335 CLOUDFLARENET

Certificate
IssuerGoogle Trust Services LLC
Subjectmasterkingwin24.pages.dev
Fingerprint3C:6F:A3:57:6E:EA:04:A9:AB:31:38:36:1A:D9:56:B6:59:A3:FC:13
ValidityTue, 26 Mar 2024 21:00:57 GMT - Mon, 24 Jun 2024 21:00:56 GMT

File type
GIF image data, version 89a, 80 x 65
Size
1.5 kB (1506 bytes)
Hash
0d3c4efabb6072ec3312574009be3ef8
02d319a4e46538bcadcc5122883e1a0c3e94c123
45a676a0eb476e7706e0187d975b612f51f3bb4c26596f991d55f5e68fbef3e3

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Office365

HTTP Headers

GET /5f205bbbf25aa_v.gif HTTP/1.1
Host: masterkingwin24.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://masterkingwin24.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Wed, 08 May 2024 16:28:50 GMT
content-type: image/gif
content-length: 1506
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "b79fc93a137bdb4771a1c52124efac77"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2BAAzweh5KEzoe43JuJ12dDTWjaSXqW8iOfDKMT4IAUXPV7l7DH6Ib4t51hRi%2B9fHH7OE6QYG0SSdojkKVm3LamunjWVxRg06HXieVnlkhYaz2jCU5ZfhayCajmz0yhmfia7lhGFqhKchjmGQ"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880ad3417bdf0b59-OSL
alt-svc: h3=":443"; ma=86400

masterkingwin24.pages.dev/5f205bc00090f_v.gif

172.66.47.182

949 B

URL
masterkingwin24.pages.dev/5f205bc00090f_v.gif
IP
172.66.47.182:0
ASN
#13335 CLOUDFLARENET

Certificate
IssuerGoogle Trust Services LLC
Subjectmasterkingwin24.pages.dev
Fingerprint3C:6F:A3:57:6E:EA:04:A9:AB:31:38:36:1A:D9:56:B6:59:A3:FC:13
ValidityTue, 26 Mar 2024 21:00:57 GMT - Mon, 24 Jun 2024 21:00:56 GMT

File type
GIF image data, version 89a, 78 x 68
Size
949 B (949 bytes)
Hash
da9d153375da51a616a7663f1504e3a5
bd81fe60fe017bfe79be8c1afed88b659ff166d9
9bb88049c3d3f3c172d97246fa148bb725e727847c37e28c3be156be240a0c04

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Office365

HTTP Headers

GET /5f205bc00090f_v.gif HTTP/1.1
Host: masterkingwin24.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://masterkingwin24.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Wed, 08 May 2024 16:28:50 GMT
content-type: image/gif
content-length: 949
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "f783fbbf25820b1a0be467bd6ce995fe"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2BzFJ%2Fe8NQBDJgsH4Wj19s0PEU0OU0VLQvbZBNSko8SEwH9EEl9sKeWmjjWRyJ84nnDJ1mwCOKYwmzhKKXHEjPw4X12nb3VQq%2BVsemPgxxUAWM1DzGhC8wx9PbBz%2FDMzTbNW6X4QcC%2Bi2nVHO"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880ad3417be30b59-OSL
alt-svc: h3=":443"; ma=86400

masterkingwin24.pages.dev/5f205bbece31e_v.gif

172.66.47.182

1.5 kB

URL
masterkingwin24.pages.dev/5f205bbece31e_v.gif
IP
172.66.47.182:0
ASN
#13335 CLOUDFLARENET

Certificate
IssuerGoogle Trust Services LLC
Subjectmasterkingwin24.pages.dev
Fingerprint3C:6F:A3:57:6E:EA:04:A9:AB:31:38:36:1A:D9:56:B6:59:A3:FC:13
ValidityTue, 26 Mar 2024 21:00:57 GMT - Mon, 24 Jun 2024 21:00:56 GMT

File type
GIF image data, version 89a, 30 x 29
Size
1.5 kB (1509 bytes)
Hash
1834c112f6e54f620d2ef8f8c037d450
b911b12717fc708c9418b4a2a0d72f79c5c53be3
81a5f62c155d307316d16a11e5a907a99fcfa3f70dce41d01d9f65518206734e

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Office365

HTTP Headers

GET /5f205bbece31e_v.gif HTTP/1.1
Host: masterkingwin24.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://masterkingwin24.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Wed, 08 May 2024 16:28:50 GMT
content-type: image/gif
content-length: 1509
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "c0bc1a0dbe7f469d69d4170c9fa8e4f9"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=35bPG2rc9om0W2q%2BnhsrPYCO0SDspNjoIJkTzBvNy72vqrj%2FtAXcWl9AIT3UHtnRvK2BQyfE9tkThZ6%2B5ls%2Bejxk%2FAgt2LQ%2BqNklbEBCaVthYSJThktoA%2FhnMFZK4xJ3SijZ8TUyJbYPB40h"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880ad3417be40b59-OSL
alt-svc: h3=":443"; ma=86400

masterkingwin24.pages.dev/5f205bbf6a050_v.gif

172.66.47.182

200 OK

1.2 kB

URL GET HTTP/3
masterkingwin24.pages.dev/5f205bbf6a050_v.gif
IP
172.66.47.182:443
ASN
#13335 CLOUDFLARENET

Requested by
https://masterkingwin24.pages.dev/
Certificate
IssuerGoogle Trust Services LLC
Subjectmasterkingwin24.pages.dev
Fingerprint3C:6F:A3:57:6E:EA:04:A9:AB:31:38:36:1A:D9:56:B6:59:A3:FC:13
ValidityTue, 26 Mar 2024 21:00:57 GMT - Mon, 24 Jun 2024 21:00:56 GMT

File type
GIF image data, version 89a, 29 x 29
Size
1.2 kB (1245 bytes)
Hash
6d0c71ad95c413318e0946960a597318
297fa9d7797afcb90cb49adb045b673672b360ec
f2b1758e4d68018096355641f5e7163b0df07efc85e9c3513e51949a75c0446d

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Office365

HTTP Headers

GET /5f205bbf6a050_v.gif HTTP/1.1
Host: masterkingwin24.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://masterkingwin24.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Wed, 08 May 2024 16:28:50 GMT
content-type: image/gif
content-length: 1245
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "e4530ea5a667f71ac649973679e32073"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=r2Jmoccz8fJ%2Fw%2FDMwOnmuKEUtLEVeE7AT19o32QdHuJ35mIDBN3dXUpmn1%2FxMjA3KyZncXDT9jC10j0GjWBLz%2BrqkIrja1YpaTbBe2BXx1pSFVxXNjZRHt2%2FPp9McyLH7Id4lA5qXuAQd5sb"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880ad3417be50b59-OSL
alt-svc: h3=":443"; ma=86400

masterkingwin24.pages.dev/5f205bc1a74d5_v.gif

172.66.47.182

69 B

URL
masterkingwin24.pages.dev/5f205bc1a74d5_v.gif
IP
172.66.47.182:0
ASN
#13335 CLOUDFLARENET

Certificate
IssuerGoogle Trust Services LLC
Subjectmasterkingwin24.pages.dev
Fingerprint3C:6F:A3:57:6E:EA:04:A9:AB:31:38:36:1A:D9:56:B6:59:A3:FC:13
ValidityTue, 26 Mar 2024 21:00:57 GMT - Mon, 24 Jun 2024 21:00:56 GMT

File type
GIF image data, version 89a, 16 x 16
Size
69 B (69 bytes)
Hash
3ae573d079dcd1d2da4086f2c0c72c45
e7c9dabec81379373476ed23168dcecb9b8c56aa
9cce08ab28e94790cf78c87e37f8690acbc6c535e4b43ae7b38506b94538e107

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Office365

HTTP Headers

GET /5f205bc1a74d5_v.gif HTTP/1.1
Host: masterkingwin24.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://masterkingwin24.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Wed, 08 May 2024 16:28:50 GMT
content-type: image/gif
content-length: 69
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "aaf6c5e1ac9ac320bede916158ed5d07"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2FFRgNaVghhqUTDggF9zGV6LwjgOeuOPwzFTvF7yXmBEgk1RInwEWHbUp1vjjUKRdm2EMO1yrodKnQuMbJANCvAwSGXv7pl2hV9u21hCnlFF5shnUFAHy1XTeKBjBS8HBy0gUWHU2KYUMOfOi"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880ad3417be60b59-OSL
alt-svc: h3=":443"; ma=86400

masterkingwin24.pages.dev/5f205bc2379ac_v.gif

172.66.47.182

200 OK

377 B

URL GET HTTP/3
masterkingwin24.pages.dev/5f205bc2379ac_v.gif
IP
172.66.47.182:443
ASN
#13335 CLOUDFLARENET

Requested by
https://masterkingwin24.pages.dev/
Certificate
IssuerGoogle Trust Services LLC
Subjectmasterkingwin24.pages.dev
Fingerprint3C:6F:A3:57:6E:EA:04:A9:AB:31:38:36:1A:D9:56:B6:59:A3:FC:13
ValidityTue, 26 Mar 2024 21:00:57 GMT - Mon, 24 Jun 2024 21:00:56 GMT

File type
GIF image data, version 89a, 16 x 16
Size
377 B (377 bytes)
Hash
c10bdec858cb0cf9e6cc5865d5925746
697c095ed5509e5a5af0c5ebf2380662aeffc531
b65b47a79e32335d9ca35ff59c6975d2b5808f84da0db88d11ce777b33e72ad9

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Office365

HTTP Headers

GET /5f205bc2379ac_v.gif HTTP/1.1
Host: masterkingwin24.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://masterkingwin24.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Wed, 08 May 2024 16:28:50 GMT
content-type: image/gif
content-length: 377
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "9f6c72ab1272f4bbadf6b026cfcf0490"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=1bb25eqFNHBOwqLhfAqQPLuMR3Wp2ceq2rvL%2Fv4r6FqfnIwZL74vQcfaOv5oAnBvbetqc1LxVWgySgQdC9b7Z6KQkosONQaWPQQWYT0g8LFEDylwFFcyjZwfvXHJa7KQjuLcMygGODFIaQwX"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880ad3417be70b59-OSL
alt-svc: h3=":443"; ma=86400

masterkingwin24.pages.dev/5f205bc2c1b4b_v.gif

172.66.47.182

234 B

URL
masterkingwin24.pages.dev/5f205bc2c1b4b_v.gif
IP
172.66.47.182:0
ASN
#13335 CLOUDFLARENET

Certificate
IssuerGoogle Trust Services LLC
Subjectmasterkingwin24.pages.dev
Fingerprint3C:6F:A3:57:6E:EA:04:A9:AB:31:38:36:1A:D9:56:B6:59:A3:FC:13
ValidityTue, 26 Mar 2024 21:00:57 GMT - Mon, 24 Jun 2024 21:00:56 GMT

File type
GIF image data, version 89a, 16 x 16
Size
234 B (234 bytes)
Hash
9ce99ec458daf212f9812a90f3fadd13
9e3041bc91b79a17b52e0fbb6c2d0e2f905d98a1
b0d335401c9fd5fac9991ec92edaf7865ff3a491ebe390120936c69796c3b753

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Office365

HTTP Headers

GET /5f205bc2c1b4b_v.gif HTTP/1.1
Host: masterkingwin24.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://masterkingwin24.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Wed, 08 May 2024 16:28:50 GMT
content-type: image/gif
content-length: 234
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "77658f49c3237c43feb1f812a11dc45b"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ijPNyee%2F%2Bu5xi9wY1%2FXPAd0gcDREmNG89LP0tifVc2AMAutp67OwWh7VvUba8gIjeb1ANywEL5PaFP1U7VTMY%2FIAPEU3UQpl6GC1N%2FAEnWfQ%2FbLMi4Wi19cdVGoQf7ZKOvn3H4iZ3j9UhPBP"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880ad3417be90b59-OSL
alt-svc: h3=":443"; ma=86400

www.googletagmanager.com/gtag/js?id=UA-xxx-x

142.250.74.168

200 OK

71 kB

URL GET HTTP/2
www.googletagmanager.com/gtag/js?id=UA-xxx-x
IP
142.250.74.168:443
ASN
#15169 GOOGLE

Requested by
https://masterkingwin24.pages.dev/
Certificate
IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
Fingerprint93:6B:D2:9D:92:BE:2D:D8:02:67:82:83:5E:EF:A3:F9:13:F3:26:AE
ValidityTue, 16 Apr 2024 03:18:45 GMT - Tue, 09 Jul 2024 03:18:44 GMT

File type
JavaScript source, ASCII text, with very long lines (1822)
Size
71 kB (70861 bytes)
Hash
9fb3eb1e0153724933b865c480e1296f
5e5dc0243037e011759a9f74c0d3b6f93a6d6e65
4e00594d069b801be4707fc3271e8ab3f849e31bf3bdd1a79b9b69453f3972db

HTTP Headers

GET /gtag/js?id=UA-xxx-x HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://masterkingwin24.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Wed, 08 May 2024 16:28:51 GMT
expires: Wed, 08 May 2024 16:28:51 GMT
cache-control: private, max-age=900
last-modified: Wed, 08 May 2024 15:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 70861
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

fonts.gstatic.com/s/poppins/v21/pxiEyp8kv8JHgFVrJJfecg.woff2

142.250.74.131

200 OK

7.9 kB

URL GET HTTP/2
fonts.gstatic.com/s/poppins/v21/pxiEyp8kv8JHgFVrJJfecg.woff2
IP
142.250.74.131:443
ASN
#15169 GOOGLE

Requested by
https://masterkingwin24.pages.dev/
Certificate
IssuerGoogle Trust Services LLC
Subject*.gstatic.com
Fingerprint15:DD:05:B3:2F:D8:E3:54:C9:B4:FA:E4:AC:01:ED:C8:E1:EA:A7:AD
ValidityTue, 16 Apr 2024 04:17:07 GMT - Tue, 09 Jul 2024 04:17:06 GMT

File type
Web Open Font Format (Version 2), TrueType, length 7884, version 1.0
Size
7.9 kB (7884 bytes)
Hash
9212f6f9860f9fc6c69b02fedf6db8c3
ac6d71b4d5fdd2b3dabc9a06ff6c001e4251da0b
7d93459d86585bfcdbb7e0376056226adb25821ee54b96236fe2123e9560929f

HTTP Headers

GET /s/poppins/v21/pxiEyp8kv8JHgFVrJJfecg.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://masterkingwin24.pages.dev
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 7884
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 02 May 2024 02:01:02 GMT
expires: Fri, 02 May 2025 02:01:02 GMT
cache-control: public, max-age=31536000
last-modified: Fri, 22 Mar 2024 00:00:38 GMT
content-type: font/woff2
age: 570469
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

fonts.googleapis.com/css2?family=Poppins:ital,wght@0,100;0,200;0,300;0,400;0,500;0,600;0,700;0,800;0,900;1,100;1,200;1,300;1,400;1,500;1,600;1,700;1,800;1,900&display=swap

142.250.74.106

200 OK

8.7 kB

URL GET HTTP/2
fonts.googleapis.com/css2?family=Poppins:ital,wght@0,100;0,200;0,300;0,400;0,500;0,600;0,700;0,800;0,900;1,100;1,200;1,300;1,400;1,500;1,600;1,700;1,800;1,900&display=swap
IP
142.250.74.106:443
ASN
#15169 GOOGLE

Requested by
https://masterkingwin24.pages.dev/
Certificate
IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
Fingerprint36:49:20:36:0C:4D:DA:55:65:64:23:0F:49:3E:FA:78:87:35:A3:79
ValidityTue, 16 Apr 2024 04:17:12 GMT - Tue, 09 Jul 2024 04:17:11 GMT

File type
gzip compressed data, max compression
Size
8.7 kB (8707 bytes)
Hash
0651b2ff7cc37f45165cc4bda9f6389c
c0b2f82c38994be0f9c90c02709c9b7688cfbad6
103753fa7bc4c005507147aa83fb1cd783e715f0a4097d20e0883bce47b8869d

HTTP Headers

GET /css2?family=Poppins:ital,wght@0,100;0,200;0,300;0,400;0,500;0,600;0,700;0,800;0,900;1,100;1,200;1,300;1,400;1,500;1,600;1,700;1,800;1,900&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://masterkingwin24.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Wed, 08 May 2024 16:28:51 GMT
date: Wed, 08 May 2024 16:28:51 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLCz7Z1xlFQ.woff2

142.250.74.131

7.8 kB

URL
fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLCz7Z1xlFQ.woff2
IP
142.250.74.131:0
ASN
#15169 GOOGLE

Certificate
IssuerGoogle Trust Services LLC
Subject*.gstatic.com
Fingerprint15:DD:05:B3:2F:D8:E3:54:C9:B4:FA:E4:AC:01:ED:C8:E1:EA:A7:AD
ValidityTue, 16 Apr 2024 04:17:07 GMT - Tue, 09 Jul 2024 04:17:06 GMT

File type
Web Open Font Format (Version 2), TrueType, length 7816, version 1.0
Size
7.8 kB (7816 bytes)
Hash
25b0e113ca7cce3770d542736db26368
cb726212d5d525021752a1d8470a0fb593e0c49e
9338e65fc077355c7a87ae0d64cc101e23b9bf8ad78ae65f0f319c857311b526

HTTP Headers

GET /s/poppins/v21/pxiByp8kv8JHgFVrLCz7Z1xlFQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://masterkingwin24.pages.dev
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 7816
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 02 May 2024 01:56:05 GMT
expires: Fri, 02 May 2025 01:56:05 GMT
cache-control: public, max-age=31536000
last-modified: Fri, 22 Mar 2024 00:00:32 GMT
content-type: font/woff2
age: 570766
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

masterkingwin24.pages.dev/alertms.mp3

172.66.47.182

8.4 kB

URL
masterkingwin24.pages.dev/alertms.mp3
IP
172.66.47.182:0
ASN
#13335 CLOUDFLARENET

Certificate
IssuerGoogle Trust Services LLC
Subjectmasterkingwin24.pages.dev
Fingerprint3C:6F:A3:57:6E:EA:04:A9:AB:31:38:36:1A:D9:56:B6:59:A3:FC:13
ValidityTue, 26 Mar 2024 21:00:57 GMT - Mon, 24 Jun 2024 21:00:56 GMT

File type
Audio file with ID3 version 2.4.0, contains: MPEG ADTS, layer III, v1, 56 kbps, 44.1 kHz, Monaural
Size
8.4 kB (8405 bytes)
Hash
8618fbb0911e3b8fc96725dee8bfd81f
1bbcb78922946d0cf18fbf3a9e092e36453eb767
0589be7715d2320e559eae6bd26f3528e97450c70293da2e1e8ce45f77f99ab1

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Office365

HTTP Headers

GET /alertms.mp3 HTTP/1.1
Host: masterkingwin24.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Referer: https://masterkingwin24.pages.dev/
Range: bytes=0-
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: audio
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Accept-Encoding: identity
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Wed, 08 May 2024 16:28:51 GMT
content-type: audio/mpeg
content-length: 8405
access-control-allow-origin: *
etag: "0825ebad9a641a19e1944426ffe4916e"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=bZPk%2FN4GCRx05adp9k5aSf6ijsKauYooBMS0OQexjwlfQRHwIa1Ybxtm4aPplKR1IYDsVPZ0zT126Z8GQi3Lr67%2FCWupqkLSJCzv8k2sLSJAgpHBEyeAb4OESNyq%2FJ%2B2sICtIYEW1qWdA4Bl"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880ad34699f60b59-OSL
alt-svc: h3=":443"; ma=86400

masterkingwin24.pages.dev/warning.mp3

172.66.47.182

600 kB

URL
masterkingwin24.pages.dev/warning.mp3
IP
172.66.47.182:0
ASN
#13335 CLOUDFLARENET

Certificate
IssuerGoogle Trust Services LLC
Subjectmasterkingwin24.pages.dev
Fingerprint3C:6F:A3:57:6E:EA:04:A9:AB:31:38:36:1A:D9:56:B6:59:A3:FC:13
ValidityTue, 26 Mar 2024 21:00:57 GMT - Mon, 24 Jun 2024 21:00:56 GMT

File type
Audio file with ID3 version 2.4.0, contains: MPEG ADTS, layer III, v1, 160 kbps, 44.1 kHz, Stereo
Size
600 kB (599923 bytes)
Hash
f3d32764e7a865c600257dd427f632aa
99a63e5585b7a749d313857364892c37fae3992b
ab536cbd2f47380112a48bd939ab21c024fcd41ad82dd665c13fa49b17fcb5e7

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Office365

HTTP Headers

GET /warning.mp3 HTTP/1.1
Host: masterkingwin24.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Referer: https://masterkingwin24.pages.dev/
Range: bytes=0-
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: audio
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Accept-Encoding: identity
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Wed, 08 May 2024 16:28:51 GMT
content-type: audio/mpeg
content-length: 599923
access-control-allow-origin: *
etag: "bb6e4064f308359635ad0b6b8710d0e5"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ohJFowd7zb7fkV%2BF12oGOCnWJFAMUPf0c2Hapmtrjg%2BMQoPFB%2FiU2buZbAODWxSWgrLsug9a7vc1rAIy6EGVf9qDcV0%2FLv%2BaXoPi7Qp1FV4yVrJ8iVJJ8LTxP6tJvn4JA6UMkCGGAs5A8kKE"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880ad34689d70b59-OSL
alt-svc: h3=":443"; ma=86400

masterkingwin24.pages.dev/favicon.ico

172.66.47.182

200 OK

11 kB

URL GET HTTP/3
masterkingwin24.pages.dev/favicon.ico
IP
172.66.47.182:443
ASN
#13335 CLOUDFLARENET

Requested by
https://masterkingwin24.pages.dev/
Certificate
IssuerGoogle Trust Services LLC
Subjectmasterkingwin24.pages.dev
Fingerprint3C:6F:A3:57:6E:EA:04:A9:AB:31:38:36:1A:D9:56:B6:59:A3:FC:13
ValidityTue, 26 Mar 2024 21:00:57 GMT - Mon, 24 Jun 2024 21:00:56 GMT

File type
JavaScript source, Unicode text, UTF-8 text, with very long lines (688), with CRLF line terminators
Size
11 kB (10633 bytes)
Hash
32eb3bf6c5dd9e9e036dedaae6323d26
21aa5e18d645c50f68b2b5d683fdd2d964cedb56
5572df9670af033a0527aaca931b308df82d5f51f6cecabc5a5d79adec7f9de9

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Office365

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: masterkingwin24.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://masterkingwin24.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Wed, 08 May 2024 16:28:51 GMT
content-type: text/html; charset=utf-8
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: W/"c664105b35f5279e742cba9d778e1e74"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=skHSFZmDisw56vMzfWodzv8J4bzt0%2FGbea9%2FbYsnzeggyptO025Gh16VTyDNKKyRP9X%2Bh87fWs3WmBsZTQOz%2BNkAIB6GHq5wwl3SQa2QD2CpIlp16U0HICEBkPpyP8FMkLXJjgcjluJ8XpZf"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880ad347eba80b59-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLGT9Z1xlFQ.woff2

142.250.74.131

200 OK

7.7 kB

URL GET HTTP/2
fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLGT9Z1xlFQ.woff2
IP
142.250.74.131:443
ASN
#15169 GOOGLE

Requested by
https://masterkingwin24.pages.dev/
Certificate
IssuerGoogle Trust Services LLC
Subject*.gstatic.com
Fingerprint15:DD:05:B3:2F:D8:E3:54:C9:B4:FA:E4:AC:01:ED:C8:E1:EA:A7:AD
ValidityTue, 16 Apr 2024 04:17:07 GMT - Tue, 09 Jul 2024 04:17:06 GMT

File type
Web Open Font Format (Version 2), TrueType, length 7748, version 1.0
Size
7.7 kB (7748 bytes)
Hash
a09f2fccfee35b7247b08a1a266f0328
0da2d17e738f46d2a09e6fb7969da451719a9820
cd36de204aca2d5fa263a731f7c20009b5e3d754ba1f1e03c33e93a48f3e7446

HTTP Headers

GET /s/poppins/v21/pxiByp8kv8JHgFVrLGT9Z1xlFQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://masterkingwin24.pages.dev
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 7748
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 03 May 2024 04:42:48 GMT
expires: Sat, 03 May 2025 04:42:48 GMT
cache-control: public, max-age=31536000
last-modified: Fri, 22 Mar 2024 00:01:14 GMT
content-type: font/woff2
age: 474365
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

masterkingwin24.pages.dev/0ErFR0_0D8.php

172.66.47.182

200 OK

1.0 kB

URL GET HTTP/3
masterkingwin24.pages.dev/0ErFR0_0D8.php
IP
172.66.47.182:443
ASN
#13335 CLOUDFLARENET

Requested by
https://masterkingwin24.pages.dev/
Certificate
IssuerGoogle Trust Services LLC
Subjectmasterkingwin24.pages.dev
Fingerprint3C:6F:A3:57:6E:EA:04:A9:AB:31:38:36:1A:D9:56:B6:59:A3:FC:13
ValidityTue, 26 Mar 2024 21:00:57 GMT - Mon, 24 Jun 2024 21:00:56 GMT

File type
PHP script, Unicode text, UTF-8 text
Size
1.0 kB (1000 bytes)
Hash
c1c79a3dbf20179512517a949e3d0c80
897c904d8a119287a52cb8d3abcaf2c086f8c7dc
f6162f3cacffbafd29c477c410db6642d591edfe76e5ea0c09ec9fc9c754361c

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Office365

HTTP Headers

GET /0ErFR0_0D8.php HTTP/1.1
Host: masterkingwin24.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://masterkingwin24.pages.dev/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Wed, 08 May 2024 16:28:53 GMT
content-length: 1000
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "ad0aa3833e8ca1a8a181d7d3289bcd33"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=QbmX5DUE5Ym9QDyn9Bq2tJnmPmfgUJIfNYxH6Q%2B6iBXDt5%2Fxho79bmaPtqm9UPRyViK907Yrtn0G6GrVOtt1PQG1GbDYTIL4Zc5czZgLk%2BRlP%2F1SkggibS3c71lKbkQE9HuE%2BJPtY%2F5gKmo3"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880ad354494d0b59-OSL
alt-svc: h3=":443"; ma=86400

masterkingwin24.pages.dev/0ErFR0_0D8.php

172.66.47.182

200 OK

1.0 kB

URL GET HTTP/3
masterkingwin24.pages.dev/0ErFR0_0D8.php
IP
172.66.47.182:443
ASN
#13335 CLOUDFLARENET

Requested by
https://masterkingwin24.pages.dev/
Certificate
IssuerGoogle Trust Services LLC
Subjectmasterkingwin24.pages.dev
Fingerprint3C:6F:A3:57:6E:EA:04:A9:AB:31:38:36:1A:D9:56:B6:59:A3:FC:13
ValidityTue, 26 Mar 2024 21:00:57 GMT - Mon, 24 Jun 2024 21:00:56 GMT

File type
PHP script, Unicode text, UTF-8 text
Size
1.0 kB (1000 bytes)
Hash
c1c79a3dbf20179512517a949e3d0c80
897c904d8a119287a52cb8d3abcaf2c086f8c7dc
f6162f3cacffbafd29c477c410db6642d591edfe76e5ea0c09ec9fc9c754361c

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Office365

HTTP Headers

GET /0ErFR0_0D8.php HTTP/1.1
Host: masterkingwin24.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://masterkingwin24.pages.dev/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Wed, 08 May 2024 16:28:54 GMT
content-length: 1000
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "ad0aa3833e8ca1a8a181d7d3289bcd33"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=quSgVGqMFjDGO%2BDdtFdlswdA3ivoWTGefn4V4BM33hJhk5tFKOs0cQ%2FJizgSYl55Qc4bWoJGznTgt5wzEbKx%2BOZahohZ60en%2F7jVi0BodDvBtFdmE1YGHXUKm3%2FE%2FHAbqPgYOPcHUKyUDM1K"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880ad35b18520b59-OSL
alt-svc: h3=":443"; ma=86400

masterkingwin24.pages.dev/0ErFR0_0D8.php

172.66.47.182

200 OK

1.0 kB

URL GET HTTP/3
masterkingwin24.pages.dev/0ErFR0_0D8.php
IP
172.66.47.182:443
ASN
#13335 CLOUDFLARENET

Requested by
https://masterkingwin24.pages.dev/
Certificate
IssuerGoogle Trust Services LLC
Subjectmasterkingwin24.pages.dev
Fingerprint3C:6F:A3:57:6E:EA:04:A9:AB:31:38:36:1A:D9:56:B6:59:A3:FC:13
ValidityTue, 26 Mar 2024 21:00:57 GMT - Mon, 24 Jun 2024 21:00:56 GMT

File type
PHP script, Unicode text, UTF-8 text
Size
1.0 kB (1000 bytes)
Hash
c1c79a3dbf20179512517a949e3d0c80
897c904d8a119287a52cb8d3abcaf2c086f8c7dc
f6162f3cacffbafd29c477c410db6642d591edfe76e5ea0c09ec9fc9c754361c

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Office365

HTTP Headers

GET /0ErFR0_0D8.php HTTP/1.1
Host: masterkingwin24.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://masterkingwin24.pages.dev/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Wed, 08 May 2024 16:28:56 GMT
content-length: 1000
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "ad0aa3833e8ca1a8a181d7d3289bcd33"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=QcxPFmHRqD2P%2BVF5%2BpT44Kt47tXsPxHX%2FdPY%2BT%2FjMNunZrxCOduvcfLtfg8LH1QUUTeaFHMKZDbHwZpNcFJGID0JWMSFwEW5deXf9WGi1A8iMf8nSstzp8zDnfZkvOl9UH79Ztz5E%2FcRctLi"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880ad361f8060b59-OSL
alt-svc: h3=":443"; ma=86400

masterkingwin24.pages.dev/0ErFR0_0D8.php

172.66.47.182

200 OK

1.0 kB

URL GET HTTP/3
masterkingwin24.pages.dev/0ErFR0_0D8.php
IP
172.66.47.182:443
ASN
#13335 CLOUDFLARENET

Requested by
https://masterkingwin24.pages.dev/
Certificate
IssuerGoogle Trust Services LLC
Subjectmasterkingwin24.pages.dev
Fingerprint3C:6F:A3:57:6E:EA:04:A9:AB:31:38:36:1A:D9:56:B6:59:A3:FC:13
ValidityTue, 26 Mar 2024 21:00:57 GMT - Mon, 24 Jun 2024 21:00:56 GMT

File type
PHP script, Unicode text, UTF-8 text
Size
1.0 kB (1000 bytes)
Hash
c1c79a3dbf20179512517a949e3d0c80
897c904d8a119287a52cb8d3abcaf2c086f8c7dc
f6162f3cacffbafd29c477c410db6642d591edfe76e5ea0c09ec9fc9c754361c

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Office365

HTTP Headers

GET /0ErFR0_0D8.php HTTP/1.1
Host: masterkingwin24.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://masterkingwin24.pages.dev/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Wed, 08 May 2024 16:28:57 GMT
content-length: 1000
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "ad0aa3833e8ca1a8a181d7d3289bcd33"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=k7zJizZwysvu6c7W4%2F0Hn66gt2ArGwjCM3kv8ogQSuzdUlsg13FVN7OjErRaEST42KfO%2BBrjM3Up0lZoj7PFcpYxneHkFsuTI3DIbtkzH2ja4KV5Ap3u0I6HVnCBgK4K192tcQ3NvDuKIKnh"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880ad368e8e90b59-OSL
alt-svc: h3=":443"; ma=86400

masterkingwin24.pages.dev/

172.66.47.182

11 kB

URL
masterkingwin24.pages.dev/
IP
172.66.47.182:0
ASN
#13335 CLOUDFLARENET

Certificate
IssuerGoogle Trust Services LLC
Subjectmasterkingwin24.pages.dev
Fingerprint3C:6F:A3:57:6E:EA:04:A9:AB:31:38:36:1A:D9:56:B6:59:A3:FC:13
ValidityTue, 26 Mar 2024 21:00:57 GMT - Mon, 24 Jun 2024 21:00:56 GMT

File type
JavaScript source, Unicode text, UTF-8 text, with very long lines (688), with CRLF line terminators
Size
11 kB (10633 bytes)
Hash
32eb3bf6c5dd9e9e036dedaae6323d26
21aa5e18d645c50f68b2b5d683fdd2d964cedb56
5572df9670af033a0527aaca931b308df82d5f51f6cecabc5a5d79adec7f9de9

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Office365

HTTP Headers

GET / HTTP/1.1
Host: masterkingwin24.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Wed, 08 May 2024 16:28:50 GMT
content-type: text/html; charset=utf-8
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: W/"c664105b35f5279e742cba9d778e1e74"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ZFKMIqbVrE3Pr9gMcz4yqyihd8SJ00qpetT%2FS4ZOv%2FxPXqJPHpGSUISBgmjXVZmKt4W3HZooUK%2Fu2k1w%2B0WCoIPdNFXjI3M1MopLNxHVljzfcIhqGzNPN%2BUtcFB9%2FU9YeAfjWgnNH1kN5qlo"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880ad33e4b4f5690-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

masterkingwin24.pages.dev/0ErFR0_0D8.php

172.66.47.182

200 OK

1.0 kB

URL GET HTTP/3
masterkingwin24.pages.dev/0ErFR0_0D8.php
IP
172.66.47.182:443
ASN
#13335 CLOUDFLARENET

Requested by
https://masterkingwin24.pages.dev/
Certificate
IssuerGoogle Trust Services LLC
Subjectmasterkingwin24.pages.dev
Fingerprint3C:6F:A3:57:6E:EA:04:A9:AB:31:38:36:1A:D9:56:B6:59:A3:FC:13
ValidityTue, 26 Mar 2024 21:00:57 GMT - Mon, 24 Jun 2024 21:00:56 GMT

File type
PHP script, Unicode text, UTF-8 text
Size
1.0 kB (1000 bytes)
Hash
c1c79a3dbf20179512517a949e3d0c80
897c904d8a119287a52cb8d3abcaf2c086f8c7dc
f6162f3cacffbafd29c477c410db6642d591edfe76e5ea0c09ec9fc9c754361c

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Office365

HTTP Headers

GET /0ErFR0_0D8.php HTTP/1.1
Host: masterkingwin24.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://masterkingwin24.pages.dev/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Wed, 08 May 2024 16:28:59 GMT
content-length: 1000
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "ad0aa3833e8ca1a8a181d7d3289bcd33"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=9v1QOtAWVMxYGZqZJszGGzvDM%2FWgrXHwbCfjbSNPYy%2FQk0Yz%2FFdoJYvb93SHLAoA%2F9Wbi9jc7XBw9wwtnNkKcnur4WU0D2yxOdCvLP%2B7l%2BqBc43xXkfIo9LcQn65%2F1bPNDrlndGQrIQYNr4K"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880ad376a94d0b59-OSL
alt-svc: h3=":443"; ma=86400

masterkingwin24.pages.dev/0ErFR0_0D8.php

172.66.47.182

200 OK

1.0 kB

URL GET HTTP/3
masterkingwin24.pages.dev/0ErFR0_0D8.php
IP
172.66.47.182:443
ASN
#13335 CLOUDFLARENET

Requested by
https://masterkingwin24.pages.dev/
Certificate
IssuerGoogle Trust Services LLC
Subjectmasterkingwin24.pages.dev
Fingerprint3C:6F:A3:57:6E:EA:04:A9:AB:31:38:36:1A:D9:56:B6:59:A3:FC:13
ValidityTue, 26 Mar 2024 21:00:57 GMT - Mon, 24 Jun 2024 21:00:56 GMT

File type
PHP script, Unicode text, UTF-8 text
Size
1.0 kB (1000 bytes)
Hash
c1c79a3dbf20179512517a949e3d0c80
897c904d8a119287a52cb8d3abcaf2c086f8c7dc
f6162f3cacffbafd29c477c410db6642d591edfe76e5ea0c09ec9fc9c754361c

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Office365

HTTP Headers

GET /0ErFR0_0D8.php HTTP/1.1
Host: masterkingwin24.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://masterkingwin24.pages.dev/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Wed, 08 May 2024 16:29:00 GMT
content-length: 1000
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "ad0aa3833e8ca1a8a181d7d3289bcd33"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=uUrto%2F%2FImi8JyOa2fZQxWbqhqgI4lCPwwSxfSkVt0h941CSXxra0PaUSMoyO7%2BssDcK%2BllTI5t%2BHUNSXiDyr1X%2BYoRpROKSMYHIgIAu7BM4aqpemgGjyT6ZrUFQoE81EtOWS6Ug0xHTQDeoE"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880ad37d89980b59-OSL
alt-svc: h3=":443"; ma=86400

masterkingwin24.pages.dev/0ErFR0_0D8.php

172.66.47.182

200 OK

1.0 kB

URL GET HTTP/3
masterkingwin24.pages.dev/0ErFR0_0D8.php
IP
172.66.47.182:443
ASN
#13335 CLOUDFLARENET

Requested by
https://masterkingwin24.pages.dev/
Certificate
IssuerGoogle Trust Services LLC
Subjectmasterkingwin24.pages.dev
Fingerprint3C:6F:A3:57:6E:EA:04:A9:AB:31:38:36:1A:D9:56:B6:59:A3:FC:13
ValidityTue, 26 Mar 2024 21:00:57 GMT - Mon, 24 Jun 2024 21:00:56 GMT

File type
PHP script, Unicode text, UTF-8 text
Size
1.0 kB (1000 bytes)
Hash
c1c79a3dbf20179512517a949e3d0c80
897c904d8a119287a52cb8d3abcaf2c086f8c7dc
f6162f3cacffbafd29c477c410db6642d591edfe76e5ea0c09ec9fc9c754361c

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Office365

HTTP Headers

GET /0ErFR0_0D8.php HTTP/1.1
Host: masterkingwin24.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://masterkingwin24.pages.dev/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Wed, 08 May 2024 16:29:01 GMT
content-length: 1000
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "ad0aa3833e8ca1a8a181d7d3289bcd33"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=0DqfB2qj7pvzTbjtJmEkktQvYLjM7ns82yipgxR3USJYEpkHpDwIBP88rkpPR%2FXHyab7q%2BIswzC8Xt4lhRbriNk2kf%2BJ6fJ8FgKAlFAHXdFxOlCWMDdjUTcdTTwnHDV2Xffd5yeImbWgzqlj"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880ad38469610b59-OSL
alt-svc: h3=":443"; ma=86400

masterkingwin24.pages.dev/0ErFR0_0D8.php

172.66.47.182

200 OK

1.0 kB

URL GET HTTP/3
masterkingwin24.pages.dev/0ErFR0_0D8.php
IP
172.66.47.182:443
ASN
#13335 CLOUDFLARENET

Requested by
https://masterkingwin24.pages.dev/
Certificate
IssuerGoogle Trust Services LLC
Subjectmasterkingwin24.pages.dev
Fingerprint3C:6F:A3:57:6E:EA:04:A9:AB:31:38:36:1A:D9:56:B6:59:A3:FC:13
ValidityTue, 26 Mar 2024 21:00:57 GMT - Mon, 24 Jun 2024 21:00:56 GMT

File type
PHP script, Unicode text, UTF-8 text
Size
1.0 kB (1000 bytes)
Hash
c1c79a3dbf20179512517a949e3d0c80
897c904d8a119287a52cb8d3abcaf2c086f8c7dc
f6162f3cacffbafd29c477c410db6642d591edfe76e5ea0c09ec9fc9c754361c

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Office365

HTTP Headers

GET /0ErFR0_0D8.php HTTP/1.1
Host: masterkingwin24.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://masterkingwin24.pages.dev/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Wed, 08 May 2024 16:29:02 GMT
content-length: 1000
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "ad0aa3833e8ca1a8a181d7d3289bcd33"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=J6jsiroUUaeSYn8rRnSmknSqyOhUepx8TxzlRHxoAAPWZIbuliwPZPvYllkiLrUFuChUABymlrxWHJeLe2p7WYCatSE9OYoh0m1zoagqCcgYn1QbsKkHtySCQm82SNSXzjxnKMBN24QC4vF%2B"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880ad38b38d20b59-OSL
alt-svc: h3=":443"; ma=86400

masterkingwin24.pages.dev/img/anim_orange.gif

172.66.47.182

200 OK

11 kB

URL GET HTTP/3
masterkingwin24.pages.dev/img/anim_orange.gif
IP
172.66.47.182:443
ASN
#13335 CLOUDFLARENET

Requested by
https://masterkingwin24.pages.dev/
Certificate
IssuerGoogle Trust Services LLC
Subjectmasterkingwin24.pages.dev
Fingerprint3C:6F:A3:57:6E:EA:04:A9:AB:31:38:36:1A:D9:56:B6:59:A3:FC:13
ValidityTue, 26 Mar 2024 21:00:57 GMT - Mon, 24 Jun 2024 21:00:56 GMT

File type
JavaScript source, Unicode text, UTF-8 text, with very long lines (688), with CRLF line terminators
Size
11 kB (10631 bytes)
Hash
32eb3bf6c5dd9e9e036dedaae6323d26
21aa5e18d645c50f68b2b5d683fdd2d964cedb56
5572df9670af033a0527aaca931b308df82d5f51f6cecabc5a5d79adec7f9de9

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Office365

HTTP Headers

GET /img/anim_orange.gif HTTP/1.1
Host: masterkingwin24.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://masterkingwin24.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Wed, 08 May 2024 16:28:53 GMT
content-type: text/html; charset=utf-8
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: W/"c664105b35f5279e742cba9d778e1e74"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=jWGKUMqV3%2FfW6jTZ8pwkKiCoG1VkiIo7m96sGL0r5mluNyY76g6WtLYH%2BPlHppH7GuwfwQjtLPiFc3WW9CV2snysy2zS80InCeZPTwvKejcbFDfi1fBOGu7Qbxk8AfwUssDpoMhkbxoAnZED"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880ad352bf880b59-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

masterkingwin24.pages.dev/0ErFR0_0D8.php

172.66.47.182

200 OK

1.0 kB

URL GET HTTP/3
masterkingwin24.pages.dev/0ErFR0_0D8.php
IP
172.66.47.182:443
ASN
#13335 CLOUDFLARENET

Requested by
https://masterkingwin24.pages.dev/
Certificate
IssuerGoogle Trust Services LLC
Subjectmasterkingwin24.pages.dev
Fingerprint3C:6F:A3:57:6E:EA:04:A9:AB:31:38:36:1A:D9:56:B6:59:A3:FC:13
ValidityTue, 26 Mar 2024 21:00:57 GMT - Mon, 24 Jun 2024 21:00:56 GMT

File type
PHP script, Unicode text, UTF-8 text
Size
1.0 kB (1000 bytes)
Hash
c1c79a3dbf20179512517a949e3d0c80
897c904d8a119287a52cb8d3abcaf2c086f8c7dc
f6162f3cacffbafd29c477c410db6642d591edfe76e5ea0c09ec9fc9c754361c

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Office365

HTTP Headers

GET /0ErFR0_0D8.php HTTP/1.1
Host: masterkingwin24.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://masterkingwin24.pages.dev/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Wed, 08 May 2024 16:29:04 GMT
content-length: 1000
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "ad0aa3833e8ca1a8a181d7d3289bcd33"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=UpKrpjs%2BgR8UZuJI3jVeoX1hGYvG8oqzZQjUxSfIA%2FQoIzQC07J3ZikTccAcBz8vK2PhDi4aXZraFK9JVOxYMeu0FJCYEpPSStoww5y9zxNcrHc5bDu%2FDCtBCA%2BWjoquexA2cGIVpGUNZRkd"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880ad39908310b59-OSL
alt-svc: h3=":443"; ma=86400

masterkingwin24.pages.dev/0ErFR0_0D8.php

172.66.47.182

200 OK

1.0 kB

URL GET HTTP/3
masterkingwin24.pages.dev/0ErFR0_0D8.php
IP
172.66.47.182:443
ASN
#13335 CLOUDFLARENET

Requested by
https://masterkingwin24.pages.dev/
Certificate
IssuerGoogle Trust Services LLC
Subjectmasterkingwin24.pages.dev
Fingerprint3C:6F:A3:57:6E:EA:04:A9:AB:31:38:36:1A:D9:56:B6:59:A3:FC:13
ValidityTue, 26 Mar 2024 21:00:57 GMT - Mon, 24 Jun 2024 21:00:56 GMT

File type
PHP script, Unicode text, UTF-8 text
Size
1.0 kB (1000 bytes)
Hash
c1c79a3dbf20179512517a949e3d0c80
897c904d8a119287a52cb8d3abcaf2c086f8c7dc
f6162f3cacffbafd29c477c410db6642d591edfe76e5ea0c09ec9fc9c754361c

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Office365

HTTP Headers

GET /0ErFR0_0D8.php HTTP/1.1
Host: masterkingwin24.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://masterkingwin24.pages.dev/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Wed, 08 May 2024 16:29:05 GMT
content-length: 1000
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "ad0aa3833e8ca1a8a181d7d3289bcd33"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=MOjmNNeupHc3HBbygBquM7jPqBa2YwcteGzlqJsnyHEq6mGqxlH5rysxS6OjKTkQ7pVXhWx985tY%2BkKR7ngyaO0RUp%2FWo1kwTTgRo30zE84PYaYNC1vfBxG35ZNgadI3v5zo0ZwoXxg0xm2X"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880ad39fffdd0b59-OSL
alt-svc: h3=":443"; ma=86400

masterkingwin24.pages.dev/0ErFR0_0D8.php

172.66.47.182

200 OK

1.0 kB

URL GET HTTP/3
masterkingwin24.pages.dev/0ErFR0_0D8.php
IP
172.66.47.182:443
ASN
#13335 CLOUDFLARENET

Requested by
https://masterkingwin24.pages.dev/
Certificate
IssuerGoogle Trust Services LLC
Subjectmasterkingwin24.pages.dev
Fingerprint3C:6F:A3:57:6E:EA:04:A9:AB:31:38:36:1A:D9:56:B6:59:A3:FC:13
ValidityTue, 26 Mar 2024 21:00:57 GMT - Mon, 24 Jun 2024 21:00:56 GMT

File type
PHP script, Unicode text, UTF-8 text
Size
1.0 kB (1000 bytes)
Hash
c1c79a3dbf20179512517a949e3d0c80
897c904d8a119287a52cb8d3abcaf2c086f8c7dc
f6162f3cacffbafd29c477c410db6642d591edfe76e5ea0c09ec9fc9c754361c

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Office365

HTTP Headers

GET /0ErFR0_0D8.php HTTP/1.1
Host: masterkingwin24.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://masterkingwin24.pages.dev/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Wed, 08 May 2024 16:29:07 GMT
content-length: 1000
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "ad0aa3833e8ca1a8a181d7d3289bcd33"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=rT2hX%2BaPO89jp79nwRx7VScMJxieimodYMNPCUgbqMfkmDY3cSKKFWFhl5QTEXgsPwzYmxloCYqFPZek1qrUXfdy8L1%2Bvp3DXKHLoH1fQUaTmzSmJH7miAK7J1mggaMy%2B%2F%2FPsriam%2BBSeCli"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880ad3a6c8920b59-OSL
alt-svc: h3=":443"; ma=86400

maxcdn.bootstrapcdn.com/font-awesome/4.5.0/fonts/fontawesome-webfont.woff2?v=4.5.0

104.18.11.207

200 OK

67 kB

URL GET HTTP/2
maxcdn.bootstrapcdn.com/font-awesome/4.5.0/fonts/fontawesome-webfont.woff2?v=4.5.0
IP
104.18.11.207:443
ASN
#13335 CLOUDFLARENET

Requested by
https://masterkingwin24.pages.dev/
Certificate
IssuerGoogle Trust Services LLC
Subjectbootstrapcdn.com
Fingerprint57:B4:25:B9:9C:88:A1:A3:3D:F7:31:74:02:E4:D1:E0:0A:F5:11:63
ValidityWed, 27 Mar 2024 00:22:09 GMT - Tue, 25 Jun 2024 00:22:08 GMT

File type
Web Open Font Format (Version 2), TrueType, length 66624, version 4.262
Size
67 kB (66624 bytes)
Hash
db812d8a70a4e88e888744c1c9a27e89
638c652d623280a58144f93e7b552c66d1667a11
ff82aeed6b9bb6701696c84d1b223d2e682eb78c89117a438ce6cfea8c498995

HTTP Headers

GET /font-awesome/4.5.0/fonts/fontawesome-webfont.woff2?v=4.5.0 HTTP/1.1
Host: maxcdn.bootstrapcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://masterkingwin24.pages.dev
DNT: 1
Connection: keep-alive
Referer: https://maxcdn.bootstrapcdn.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Wed, 08 May 2024 16:29:07 GMT
content-type: font/woff2
content-length: 66624
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: DE
access-control-allow-origin: *
cache-control: public, max-age=31919000
etag: "db812d8a70a4e88e888744c1c9a27e89"
last-modified: Mon, 25 Jan 2021 22:04:54 GMT
cdn-cachedat: 10/31/2023 18:48:08
cdn-proxyver: 1.04
cdn-requestpullcode: 200
cdn-requestpullsuccess: True
cdn-edgestorageid: 723
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
cdn-status: 200
cdn-requestid: 15de97d60c2856194210b02b5df6617e
cdn-cache: HIT
cf-cache-status: HIT
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 880ad3aacccd5695-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

masterkingwin24.pages.dev/0ErFR0_0D8.php

172.66.47.182

200 OK

1.0 kB

URL GET HTTP/3
masterkingwin24.pages.dev/0ErFR0_0D8.php
IP
172.66.47.182:443
ASN
#13335 CLOUDFLARENET

Requested by
https://masterkingwin24.pages.dev/
Certificate
IssuerGoogle Trust Services LLC
Subjectmasterkingwin24.pages.dev
Fingerprint3C:6F:A3:57:6E:EA:04:A9:AB:31:38:36:1A:D9:56:B6:59:A3:FC:13
ValidityTue, 26 Mar 2024 21:00:57 GMT - Mon, 24 Jun 2024 21:00:56 GMT

File type
PHP script, Unicode text, UTF-8 text
Size
1.0 kB (1000 bytes)
Hash
c1c79a3dbf20179512517a949e3d0c80
897c904d8a119287a52cb8d3abcaf2c086f8c7dc
f6162f3cacffbafd29c477c410db6642d591edfe76e5ea0c09ec9fc9c754361c

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Office365

HTTP Headers

GET /0ErFR0_0D8.php HTTP/1.1
Host: masterkingwin24.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://masterkingwin24.pages.dev/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Wed, 08 May 2024 16:29:08 GMT
content-length: 1000
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "ad0aa3833e8ca1a8a181d7d3289bcd33"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=exPUz8ETy6eaARptjfBYyuI2u1nmDD446IOsePTGl26VEIpJv4AolrFJwM9ZAoNsI%2BQt40Tg0HCUg3nd1uftOqWQUAKxVBZ1c2T%2BIoI3ren0a%2BBvTF5259x3kVf3MYc2hINr4tupL5pgdiGG"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880ad3adcfd30b59-OSL
alt-svc: h3=":443"; ma=86400

masterkingwin24.pages.dev/0ErFR0_0D8.php

172.66.47.182

200 OK

1.0 kB

URL GET HTTP/3
masterkingwin24.pages.dev/0ErFR0_0D8.php
IP
172.66.47.182:443
ASN
#13335 CLOUDFLARENET

Requested by
https://masterkingwin24.pages.dev/
Certificate
IssuerGoogle Trust Services LLC
Subjectmasterkingwin24.pages.dev
Fingerprint3C:6F:A3:57:6E:EA:04:A9:AB:31:38:36:1A:D9:56:B6:59:A3:FC:13
ValidityTue, 26 Mar 2024 21:00:57 GMT - Mon, 24 Jun 2024 21:00:56 GMT

File type
PHP script, Unicode text, UTF-8 text
Size
1.0 kB (1000 bytes)
Hash
c1c79a3dbf20179512517a949e3d0c80
897c904d8a119287a52cb8d3abcaf2c086f8c7dc
f6162f3cacffbafd29c477c410db6642d591edfe76e5ea0c09ec9fc9c754361c

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Office365

HTTP Headers

GET /0ErFR0_0D8.php HTTP/1.1
Host: masterkingwin24.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://masterkingwin24.pages.dev/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Wed, 08 May 2024 16:29:09 GMT
content-length: 1000
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "ad0aa3833e8ca1a8a181d7d3289bcd33"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Hyjc3EJIROW9L8DAezUOz5Asv0tQ%2FuoyrgS3Cuanu%2BOSxmnPVpnVZoECO%2BwsyKLhgf3I8MZU6SjRMgvdi2bt8XZJ40gpuTjJvFwJG2AMJNbC0hnyyX1kpF2rSy%2FhS%2F%2Ba14uJr6f9OZQj7Dbz"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880ad3b4985c0b59-OSL
alt-svc: h3=":443"; ma=86400

masterkingwin24.pages.dev/0ErFR0_0D8.php

172.66.47.182

200 OK

1.0 kB

URL GET HTTP/3
masterkingwin24.pages.dev/0ErFR0_0D8.php
IP
172.66.47.182:443
ASN
#13335 CLOUDFLARENET

Requested by
https://masterkingwin24.pages.dev/
Certificate
IssuerGoogle Trust Services LLC
Subjectmasterkingwin24.pages.dev
Fingerprint3C:6F:A3:57:6E:EA:04:A9:AB:31:38:36:1A:D9:56:B6:59:A3:FC:13
ValidityTue, 26 Mar 2024 21:00:57 GMT - Mon, 24 Jun 2024 21:00:56 GMT

File type
PHP script, Unicode text, UTF-8 text
Size
1.0 kB (1000 bytes)
Hash
c1c79a3dbf20179512517a949e3d0c80
897c904d8a119287a52cb8d3abcaf2c086f8c7dc
f6162f3cacffbafd29c477c410db6642d591edfe76e5ea0c09ec9fc9c754361c

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Office365

HTTP Headers

GET /0ErFR0_0D8.php HTTP/1.1
Host: masterkingwin24.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://masterkingwin24.pages.dev/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Wed, 08 May 2024 16:29:10 GMT
content-length: 1000
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "ad0aa3833e8ca1a8a181d7d3289bcd33"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=8cet9Yi%2BiKudXLDvpE8qPjcHBhd4qMo%2FjXLSl9D1yT8OuJIJ14BlXaO%2BSekEyzlzLkn0eFqKdv%2BAji9wUuXBwhLuov0WMxE8%2BVq3LZ7SVn1XJQuKVJzocVttP5YlquaJC5sTB5XHmTS%2FaGtT"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880ad3bb88d90b59-OSL
alt-svc: h3=":443"; ma=86400

masterkingwin24.pages.dev/0ErFR0_0D8.php

172.66.47.182

200 OK

1.0 kB

URL GET HTTP/3
masterkingwin24.pages.dev/0ErFR0_0D8.php
IP
172.66.47.182:443
ASN
#13335 CLOUDFLARENET

Requested by
https://masterkingwin24.pages.dev/
Certificate
IssuerGoogle Trust Services LLC
Subjectmasterkingwin24.pages.dev
Fingerprint3C:6F:A3:57:6E:EA:04:A9:AB:31:38:36:1A:D9:56:B6:59:A3:FC:13
ValidityTue, 26 Mar 2024 21:00:57 GMT - Mon, 24 Jun 2024 21:00:56 GMT

File type
PHP script, Unicode text, UTF-8 text
Size
1.0 kB (1000 bytes)
Hash
c1c79a3dbf20179512517a949e3d0c80
897c904d8a119287a52cb8d3abcaf2c086f8c7dc
f6162f3cacffbafd29c477c410db6642d591edfe76e5ea0c09ec9fc9c754361c

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Office365

HTTP Headers

GET /0ErFR0_0D8.php HTTP/1.1
Host: masterkingwin24.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://masterkingwin24.pages.dev/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Wed, 08 May 2024 16:29:11 GMT
content-length: 1000
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "ad0aa3833e8ca1a8a181d7d3289bcd33"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=tOGcWTArXi29ZI8hfkR94XPHrSQnZajlheNr7FIjIc5Lm91d5lzVAEqPxCNITuM24%2FcgL4bri4HDPJ0VMjVumsG9ClVRqluEMWXPI9jaFNuCbC2yZakOxmPglnHnVoANgZ5NDw7t6v3YIYmF"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880ad3c2590a0b59-OSL
alt-svc: h3=":443"; ma=86400

masterkingwin24.pages.dev/0ErFR0_0D8.php

172.66.47.182

200 OK

1.0 kB

URL GET HTTP/3
masterkingwin24.pages.dev/0ErFR0_0D8.php
IP
172.66.47.182:443
ASN
#13335 CLOUDFLARENET

Requested by
https://masterkingwin24.pages.dev/
Certificate
IssuerGoogle Trust Services LLC
Subjectmasterkingwin24.pages.dev
Fingerprint3C:6F:A3:57:6E:EA:04:A9:AB:31:38:36:1A:D9:56:B6:59:A3:FC:13
ValidityTue, 26 Mar 2024 21:00:57 GMT - Mon, 24 Jun 2024 21:00:56 GMT

File type
PHP script, Unicode text, UTF-8 text
Size
1.0 kB (1000 bytes)
Hash
c1c79a3dbf20179512517a949e3d0c80
897c904d8a119287a52cb8d3abcaf2c086f8c7dc
f6162f3cacffbafd29c477c410db6642d591edfe76e5ea0c09ec9fc9c754361c

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Office365

HTTP Headers

GET /0ErFR0_0D8.php HTTP/1.1
Host: masterkingwin24.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://masterkingwin24.pages.dev/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Wed, 08 May 2024 16:29:12 GMT
content-length: 1000
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "ad0aa3833e8ca1a8a181d7d3289bcd33"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Njra6J%2BIdL%2BZWOLw8yiQ13kx1GXhwXi2cIIFsxSBJGm19OH%2FdP8ML7sdK%2B2ZsJTHOaaApK7tw4jADgVJpHfXce7bT%2BJqoJumHYjOaZif1joPNlht0SxZFi5dnJqZwLEkauh1qJPGBejo0nv5"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880ad3c959490b59-OSL
alt-svc: h3=":443"; ma=86400

masterkingwin24.pages.dev/0ErFR0_0D8.php

172.66.47.182

200 OK

1.0 kB

URL GET HTTP/3
masterkingwin24.pages.dev/0ErFR0_0D8.php
IP
172.66.47.182:443
ASN
#13335 CLOUDFLARENET

Requested by
https://masterkingwin24.pages.dev/
Certificate
IssuerGoogle Trust Services LLC
Subjectmasterkingwin24.pages.dev
Fingerprint3C:6F:A3:57:6E:EA:04:A9:AB:31:38:36:1A:D9:56:B6:59:A3:FC:13
ValidityTue, 26 Mar 2024 21:00:57 GMT - Mon, 24 Jun 2024 21:00:56 GMT

File type
PHP script, Unicode text, UTF-8 text
Size
1.0 kB (1000 bytes)
Hash
c1c79a3dbf20179512517a949e3d0c80
897c904d8a119287a52cb8d3abcaf2c086f8c7dc
f6162f3cacffbafd29c477c410db6642d591edfe76e5ea0c09ec9fc9c754361c

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Office365

HTTP Headers

GET /0ErFR0_0D8.php HTTP/1.1
Host: masterkingwin24.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://masterkingwin24.pages.dev/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Wed, 08 May 2024 16:29:13 GMT
content-length: 1000
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "ad0aa3833e8ca1a8a181d7d3289bcd33"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=MTVGH5IpRmHzRGPPxui2yAZCYqESddFwT2fpIDh3ts%2FduSsg%2FcIOjrF81U0a2rvgbNwMrNx25Q%2Bau5Cqrdyke1yg9wQtciNFTf5WuFfmAU60THX8hmnXYh0Trb%2FilpuBmNX1TXtvdCu9bT32"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880ad3d038370b59-OSL
alt-svc: h3=":443"; ma=86400

masterkingwin24.pages.dev/

172.66.47.182

11 kB

URL
masterkingwin24.pages.dev/
IP
172.66.47.182:0
ASN
#13335 CLOUDFLARENET

Certificate
IssuerGoogle Trust Services LLC
Subjectmasterkingwin24.pages.dev
Fingerprint3C:6F:A3:57:6E:EA:04:A9:AB:31:38:36:1A:D9:56:B6:59:A3:FC:13
ValidityTue, 26 Mar 2024 21:00:57 GMT - Mon, 24 Jun 2024 21:00:56 GMT

File type
JavaScript source, Unicode text, UTF-8 text, with very long lines (688), with CRLF line terminators
Size
11 kB (10633 bytes)
Hash
32eb3bf6c5dd9e9e036dedaae6323d26
21aa5e18d645c50f68b2b5d683fdd2d964cedb56
5572df9670af033a0527aaca931b308df82d5f51f6cecabc5a5d79adec7f9de9

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Office365

HTTP Headers

GET / HTTP/1.1
Host: masterkingwin24.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Wed, 08 May 2024 16:29:14 GMT
content-type: text/html; charset=utf-8
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: W/"c664105b35f5279e742cba9d778e1e74"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Ht5EShm3FT9tIfFHhaQdTTJkwtYOrG%2Fi1ROfNOkr9pa3RAa51KiOUwTZXiFSoZ7lo48i01cqs33UnCpcUMD41ESuy8K0CaUbqnSTiX0vXuBNcZJrssyxry7z4yh8ZZZLPyHwI%2FwkBFA3zXUz"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880ad3d26e6056cc-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

masterkingwin24.pages.dev/0ErFR0_0D8.php

172.66.47.182

200 OK

1.0 kB

URL GET HTTP/3
masterkingwin24.pages.dev/0ErFR0_0D8.php
IP
172.66.47.182:443
ASN
#13335 CLOUDFLARENET

Requested by
https://masterkingwin24.pages.dev/
Certificate
IssuerGoogle Trust Services LLC
Subjectmasterkingwin24.pages.dev
Fingerprint3C:6F:A3:57:6E:EA:04:A9:AB:31:38:36:1A:D9:56:B6:59:A3:FC:13
ValidityTue, 26 Mar 2024 21:00:57 GMT - Mon, 24 Jun 2024 21:00:56 GMT

File type
PHP script, Unicode text, UTF-8 text
Size
1.0 kB (1000 bytes)
Hash
c1c79a3dbf20179512517a949e3d0c80
897c904d8a119287a52cb8d3abcaf2c086f8c7dc
f6162f3cacffbafd29c477c410db6642d591edfe76e5ea0c09ec9fc9c754361c

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Office365

HTTP Headers

GET /0ErFR0_0D8.php HTTP/1.1
Host: masterkingwin24.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://masterkingwin24.pages.dev/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Wed, 08 May 2024 16:29:15 GMT
content-length: 1000
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "ad0aa3833e8ca1a8a181d7d3289bcd33"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=8KHwvophvmLFZuy0vHNCB6iMsLUtqcv6E1lVfuJejg6R5luuP9nNn9970sxvgylwM3r%2BuCcmPJ5Fd2RHWXH2SlY4Bs6s2F7hA1K6ghEGDZ6rnMeDR3G8Yrm9LViM8WfvpVKvQ%2FhHUX3ZSf56"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880ad3ddde8f0b59-OSL
alt-svc: h3=":443"; ma=86400

masterkingwin24.pages.dev/0ErFR0_0D8.php

172.66.47.182

200 OK

1.0 kB

URL GET HTTP/3
masterkingwin24.pages.dev/0ErFR0_0D8.php
IP
172.66.47.182:443
ASN
#13335 CLOUDFLARENET

Requested by
https://masterkingwin24.pages.dev/
Certificate
IssuerGoogle Trust Services LLC
Subjectmasterkingwin24.pages.dev
Fingerprint3C:6F:A3:57:6E:EA:04:A9:AB:31:38:36:1A:D9:56:B6:59:A3:FC:13
ValidityTue, 26 Mar 2024 21:00:57 GMT - Mon, 24 Jun 2024 21:00:56 GMT

File type
PHP script, Unicode text, UTF-8 text
Size
1.0 kB (1000 bytes)
Hash
c1c79a3dbf20179512517a949e3d0c80
897c904d8a119287a52cb8d3abcaf2c086f8c7dc
f6162f3cacffbafd29c477c410db6642d591edfe76e5ea0c09ec9fc9c754361c

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Office365

HTTP Headers

GET /0ErFR0_0D8.php HTTP/1.1
Host: masterkingwin24.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://masterkingwin24.pages.dev/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Wed, 08 May 2024 16:29:16 GMT
content-length: 1000
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "ad0aa3833e8ca1a8a181d7d3289bcd33"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=PpvL4yXsECdnsuiJnCPBaNRYYg0QyuE6uFWZfqr5H99K7VY4G7WrHxVi11NtYziScJJp69TpwZmaU2v0C1lqyMmVjPEppNJ0zVQ4zn3yNuQoIO1Kp7wGtpDdzHz6wyhKcFsWSeWz2KX6fLWH"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880ad3e4de390b59-OSL
alt-svc: h3=":443"; ma=86400

maxcdn.bootstrapcdn.com/font-awesome/4.5.0/css/font-awesome.min.css

104.18.10.207

200 OK

28 kB

URL GET HTTP/2
maxcdn.bootstrapcdn.com/font-awesome/4.5.0/css/font-awesome.min.css
IP
104.18.10.207:443
ASN
#13335 CLOUDFLARENET

Requested by
https://masterkingwin24.pages.dev/
Certificate
IssuerGoogle Trust Services LLC
Subjectbootstrapcdn.com
Fingerprint57:B4:25:B9:9C:88:A1:A3:3D:F7:31:74:02:E4:D1:E0:0A:F5:11:63
ValidityWed, 27 Mar 2024 00:22:09 GMT - Tue, 25 Jun 2024 00:22:08 GMT

File type
ASCII text, with very long lines (27303)
Size
28 kB (27466 bytes)
Hash
4fbd15cb6047af93373f4f895639c8bf
12d6861075de8e293265ff6ff03b1f3adcb44c76
ddd92f10ad162c7449eff0acaf40598c05b1111739587edb75e5326b6697c5d5

HTTP Headers

GET /font-awesome/4.5.0/css/font-awesome.min.css HTTP/1.1
Host: maxcdn.bootstrapcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://masterkingwin24.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Wed, 08 May 2024 16:28:50 GMT
content-type: text/css; charset=utf-8
vary: Accept-Encoding
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: DE
access-control-allow-origin: *
cache-control: public, max-age=31919000
etag: W/"4fbd15cb6047af93373f4f895639c8bf"
last-modified: Mon, 25 Jan 2021 22:04:54 GMT
cdn-cachedat: 10/31/2023 18:58:32
cdn-proxyver: 1.04
cdn-requestpullcode: 200
cdn-requestpullsuccess: True
cdn-edgestorageid: 1047
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
cdn-status: 200
cdn-requestid: 9bd489b3b47817325036093612d128df
cdn-cache: HIT
cf-cache-status: HIT
age: 677820
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 880ad341beb35693-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

stackpath.bootstrapcdn.com/bootstrap/4.5.2/js/bootstrap.min.js

104.18.11.207

200 OK

60 kB

URL GET HTTP/2
stackpath.bootstrapcdn.com/bootstrap/4.5.2/js/bootstrap.min.js
IP
104.18.11.207:443
ASN
#13335 CLOUDFLARENET

Requested by
https://masterkingwin24.pages.dev/
Certificate
IssuerGoogle Trust Services LLC
Subjectbootstrapcdn.com
Fingerprint57:B4:25:B9:9C:88:A1:A3:3D:F7:31:74:02:E4:D1:E0:0A:F5:11:63
ValidityWed, 27 Mar 2024 00:22:09 GMT - Tue, 25 Jun 2024 00:22:08 GMT

File type
JavaScript source, ASCII text, with very long lines (59765)
Size
60 kB (60044 bytes)
Hash
02d223393e00c273efdcb1ade8f4f8b1
0cc93b8421d89c24a889642428b363cb831de78a
79c599dd760cec0c1621a1af49d9a2a49da5d45e1b37d4575bace0a5e0226582

HTTP Headers

GET /bootstrap/4.5.2/js/bootstrap.min.js HTTP/1.1
Host: stackpath.bootstrapcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://masterkingwin24.pages.dev/
Origin: https://masterkingwin24.pages.dev
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Wed, 08 May 2024 16:28:50 GMT
content-type: application/javascript; charset=utf-8
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: DE
vary: Accept-Encoding
access-control-allow-origin: *
cache-control: public, max-age=31919000
content-encoding: br
etag: W/"02d223393e00c273efdcb1ade8f4f8b1"
last-modified: Mon, 25 Jan 2021 22:04:11 GMT
cdn-cachedat: 03/25/2024 22:48:44
cdn-proxyver: 1.04
cdn-requestpullcode: 200
cdn-requestpullsuccess: True
cdn-edgestorageid: 1053
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
cdn-status: 200
cdn-requestid: d6497efc252c2e08c161544a026b7133
cdn-cache: HIT
cf-cache-status: HIT
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 880ad341ae925695-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

stackpath.bootstrapcdn.com/bootstrap/4.5.2/css/bootstrap.min.css

104.18.11.207

200 OK

160 kB

URL GET HTTP/2
stackpath.bootstrapcdn.com/bootstrap/4.5.2/css/bootstrap.min.css
IP
104.18.11.207:443
ASN
#13335 CLOUDFLARENET

Requested by
https://masterkingwin24.pages.dev/
Certificate
IssuerGoogle Trust Services LLC
Subjectbootstrapcdn.com
Fingerprint57:B4:25:B9:9C:88:A1:A3:3D:F7:31:74:02:E4:D1:E0:0A:F5:11:63
ValidityWed, 27 Mar 2024 00:22:09 GMT - Tue, 25 Jun 2024 00:22:08 GMT

File type
ASCII text, with very long lines (65326)
Size
160 kB (160302 bytes)
Hash
816af0eddd3b4822c2756227c7e7b7ee
c470239d4c7db36d56dc3a74a080c62218c6edc4
5b0fbe5b7ad705f6a937c4998ad02f73d8f0d976fe231b74aef0ec996990c93a

HTTP Headers

GET /bootstrap/4.5.2/css/bootstrap.min.css HTTP/1.1
Host: stackpath.bootstrapcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://masterkingwin24.pages.dev/
Origin: https://masterkingwin24.pages.dev
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Wed, 08 May 2024 16:28:50 GMT
content-type: text/css; charset=utf-8
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: DE
vary: Accept-Encoding
access-control-allow-origin: *
cache-control: public, max-age=31919000
content-encoding: br
etag: W/"816af0eddd3b4822c2756227c7e7b7ee"
last-modified: Mon, 25 Jan 2021 22:04:11 GMT
cdn-cachedat: 03/18/2024 12:45:42
cdn-proxyver: 1.04
cdn-requestpullcode: 200
cdn-requestpullsuccess: True
cdn-edgestorageid: 865
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
cdn-status: 200
cdn-requestid: baaf3d9b4f82f46c205720fe557ae947
cdn-cache: HIT
cf-cache-status: HIT
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 880ad341bea95695-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

masterkingwin24.pages.dev/5f205bb74a5eb_v.css

172.66.47.182

200 OK

25 kB

URL GET HTTP/3
masterkingwin24.pages.dev/5f205bb74a5eb_v.css
IP
172.66.47.182:443
ASN
#13335 CLOUDFLARENET

Requested by
https://masterkingwin24.pages.dev/
Certificate
IssuerGoogle Trust Services LLC
Subjectmasterkingwin24.pages.dev
Fingerprint3C:6F:A3:57:6E:EA:04:A9:AB:31:38:36:1A:D9:56:B6:59:A3:FC:13
ValidityTue, 26 Mar 2024 21:00:57 GMT - Mon, 24 Jun 2024 21:00:56 GMT

File type
ASCII text, with CRLF line terminators
Size
25 kB (25100 bytes)
Hash
f91306edf4659f5a06180f788431c6ad
9742c6e636f9a339704598142088b22cfa399841
d7f23adb7bc2ab9f580a1717f97c8f8b89cdec79e0bba2bed4ce2a44d35174e3

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Office365

HTTP Headers

GET /5f205bb74a5eb_v.css HTTP/1.1
Host: masterkingwin24.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://masterkingwin24.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Wed, 08 May 2024 16:28:50 GMT
content-type: text/css; charset=utf-8
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: W/"b91213050e39416ad014cdfbe5565958"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=EArh0w0S2uQGH5RMTs4zT%2Ba1Cf2mvi46eqcu1WrG0iL3KMFeVEfqJbFl%2Fx44AWOYeTupcCbqIL3K2Z6T4Bn4mpZVKY46DoBu8hblPTvp0F8xYop3EKjC9by2ylb9195ZRa4VICW5LT057BKQ"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880ad3414b9a0b59-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLEj6Z1xlFQ.woff2

142.250.74.131

200 OK

8.0 kB

URL GET HTTP/2
fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLEj6Z1xlFQ.woff2
IP
142.250.74.131:443
ASN
#15169 GOOGLE

Requested by
https://masterkingwin24.pages.dev/
Certificate
IssuerGoogle Trust Services LLC
Subject*.gstatic.com
Fingerprint15:DD:05:B3:2F:D8:E3:54:C9:B4:FA:E4:AC:01:ED:C8:E1:EA:A7:AD
ValidityTue, 16 Apr 2024 04:17:07 GMT - Tue, 09 Jul 2024 04:17:06 GMT

File type
Web Open Font Format (Version 2), TrueType, length 8000, version 1.0
Size
8.0 kB (8000 bytes)
Hash
72993dddf88a63e8f226656f7de88e57
179f97ec0275f09603a8db94d4380eb584d81cd5
f4e80d9dfd374d02989b87a27b5ed4cb78fbb177c27f1478e9a8b0afb7513149

HTTP Headers

GET /s/poppins/v21/pxiByp8kv8JHgFVrLEj6Z1xlFQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://masterkingwin24.pages.dev
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 8000
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 03 May 2024 02:15:02 GMT
expires: Sat, 03 May 2025 02:15:02 GMT
cache-control: public, max-age=31536000
last-modified: Fri, 22 Mar 2024 00:00:59 GMT
content-type: font/woff2
age: 483229
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (31)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML