Report - happy12.pages.dev/robots.txt

Report Overview

Submitted URL
happy12.pages.dev/robots.txt
IP
172.66.46.235
ASN
#13335 CLOUDFLARENET
Submitted
2024-03-28 13:25:30
Access
public
Website Title
Windows error popup
Final URL
happy12.pages.dev/robots.txt
Tags
fake_software scam
urlquery detections
Scam - Fake AntiVirus / Security software

Detections

urlquery
27
Network Intrusion Detection
0
Threat Detection Systems
0

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
www.googletagmanager.com	75	2011-11-11	2013-05-22	2024-03-28	881 B	165 kB	142.250.74.72
happy12.pages.dev	unknown	unknown	No data	No data	8.0 kB	783 kB	172.66.45.21
fonts.googleapis.com	8877	2005-01-25	2013-06-10	2024-03-28	459 B	1.7 kB	216.58.207.234
fonts.gstatic.com	unknown	2008-02-11	2014-09-09	2024-03-28	1.1 kB	68 kB	216.58.207.227

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (8)

	URL	Size	First Seen	Last Seen
	www.google-analytics.com/analytics.js	4.7 kB	2023-04-11	2024-04-27
Pretty URL www.google-analytics.com/analytics.js IP 0.0.0.0 ASN #0 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-04-11 21:07:53 Last Seen2024-04-27 20:35:35 Times Seen342178 Hash f24128d0c9cba7be2916c693427a3483 1b6397d496ea896ebc2018b01b995cee4f166029 58173de4697da1a218f04c3a783a733bab4e769ceabc37cd42da9dc3e036a7e8 Loading...

	happy12.pages.dev/robots.txt	0 B	2023-03-07	2024-04-27
Pretty URL happy12.pages.dev/robots.txt IP 172.66.45.21 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 01:01:59 Last Seen2024-04-27 20:36:17 Times Seen37127945 Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Loading...

	unknown	11 B	2023-08-13	2024-03-28
Pretty Introduced by eventHandler Embedded in HTML false Observations First Seen2023-08-13 07:22:44 Last Seen2024-03-28 14:25:37 Times Seen76 Hash 529c730c8c6b8980154402f7c157ba13 05d83d52400e98cfb0c70de312d89c3b7c0125f2 66fe8a578135ac1bd3ad407af310b31b157e76e5a1b9c8fd4f9bc47b1928a73c Loading...

	happy12.pages.dev/sandbox%20eval%20code	147 B	2023-04-11	2024-04-27
Pretty URL happy12.pages.dev/sandbox%20eval%20code IP 0.0.0.0 ASN #0 Introduced by Embedded in HTML false Observations First Seen2023-04-11 21:07:53 Last Seen2024-04-27 20:35:35 Times Seen342680 Hash 92b651082ce234f66bb544e678befda3 14c21c55ddce43b6f677caadf51d4ab98c6a3df8 25d57d1d97abeb84531d3d3e5754dd5cb19a2c115edfa7cfc7af8247084faded Loading...

	www.googletagmanager.com/gtag/js?id=G-R168FKYXBV&l=dataLayer&cx=c	247 kB	2024-03-28	2024-03-28
Pretty URL www.googletagmanager.com/gtag/js?id=G-R168FKYXBV&l=dataLayer&cx=c IP 142.250.74.72 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML false Observations First Seen2024-03-28 14:25:37 Last Seen2024-03-28 14:25:37 Times Seen2 Hash d712fb3cd2a921daea9369e86c38964f 6b68d884aa7831e7794920df44c7df9c3f9a13af 2f70b88ecf71ca76aa2b8cde616da3492c9e6c3efb6d75214d92ae2cd9638234 Loading...

	happy12.pages.dev/jquery.min.js	84 kB	2023-03-07	2024-04-27
Pretty URL happy12.pages.dev/jquery.min.js IP 172.66.45.21 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:02:00 Last Seen2024-04-27 18:38:06 Times Seen13778 Hash e40ec2161fe7993196f23c8a07346306 afb90752e0a90c24b7f724faca86c5f3d15d1178 874706b2b1311a0719b5267f7d1cf803057e367e94ae1ff7bf78c5450d30f5d4 Loading...

	happy12.pages.dev/robots.txt	0 B	2023-03-07	2024-04-27
Pretty URL happy12.pages.dev/robots.txt IP 172.66.45.21 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 01:01:59 Last Seen2024-04-27 20:36:17 Times Seen37127945 Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Loading...

	www.googletagmanager.com/gtag/js?id=UA-225469381-1	208 kB	2024-03-28	2024-03-28
Pretty URL www.googletagmanager.com/gtag/js?id=UA-225469381-1 IP 142.250.74.72 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML false Observations First Seen2024-03-28 14:25:37 Last Seen2024-03-28 14:25:37 Times Seen2 Hash 29f569e9b866b0249e1a54562d6d966d 685788ce0146b8a8416b26661293feae31b5b01f c5f70b153e7dfb82520d5c376d138d02f36b6694442e9f384d9a750dbc893747 Loading...

HTTP Transactions (22)

URL IP Response Size

www.googletagmanager.com/gtag/js?id=UA-225469381-1

142.250.74.72

200 OK

76 kB

URL GET HTTP/2
www.googletagmanager.com/gtag/js?id=UA-225469381-1
IP
142.250.74.72:443
ASN
#15169 GOOGLE

Requested by
https://happy12.pages.dev/robots.txt
Certificate
IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
FingerprintDE:42:E4:CC:E5:66:70:09:F3:E6:6E:57:B7:5E:22:0A:A3:03:C2:7C
ValidityMon, 26 Feb 2024 08:03:40 GMT - Mon, 20 May 2024 08:03:39 GMT

File type
JavaScript source, ASCII text, with very long lines (4179)
Size
76 kB (75488 bytes)
Hash
29f569e9b866b0249e1a54562d6d966d
685788ce0146b8a8416b26661293feae31b5b01f
c5f70b153e7dfb82520d5c376d138d02f36b6694442e9f384d9a750dbc893747

HTTP Headers

GET /gtag/js?id=UA-225469381-1 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://happy12.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Thu, 28 Mar 2024 13:25:05 GMT
expires: Thu, 28 Mar 2024 13:25:05 GMT
cache-control: private, max-age=900
last-modified: Thu, 28 Mar 2024 12:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 75488
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

happy12.pages.dev/img/comp.png

172.66.45.21

200 OK

1.3 kB

URL GET HTTP/3
happy12.pages.dev/img/comp.png
IP
172.66.45.21:443
ASN
#13335 CLOUDFLARENET

Requested by
https://happy12.pages.dev/robots.txt
Certificate
IssuerGoogle Trust Services LLC
Subjecthappy12.pages.dev
FingerprintDD:A4:01:35:C9:6E:15:95:6D:55:F2:D7:EF:29:A8:BF:EA:08:FD:92
ValidityMon, 18 Mar 2024 18:40:26 GMT - Sun, 16 Jun 2024 18:40:25 GMT

File type
PNG image data, 132 x 105, 8-bit/color RGBA, non-interlaced
Size
1.3 kB (1324 bytes)
Hash
8544bdb08aeab60824f3274e1b23d72c
a954a9b151155df801eba5eea1f6cb20b349e8c4
9887fc4cc99951ee5242c8138ac47b175a793819af078f20364603d839be556c

Detections

Analyzer	Verdict	Alert
urlquery	scam	Scam - Fake AntiVirus / Security software

HTTP Headers

GET /img/comp.png HTTP/1.1
Host: happy12.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://happy12.pages.dev/robots.txt
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Thu, 28 Mar 2024 13:25:05 GMT
content-type: image/png
content-length: 1324
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "7f9e89ce63fb2f50951cf976683feb4d"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=IJcKT46iKpkFVkVfkT4K4LmgrWb8jlSVr0F3NSozi4%2BrSQaF6vvNuiGyLtJU7Q9mQeorPqZTuCMPBi78ZWpsrpeuK1AliMfP251WRtMtDHoeOuLhtQxPxoDOrg3gBRNazh7izQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 86b7f1b38b62568f-OSL
alt-svc: h3=":443"; ma=86400

happy12.pages.dev/img/close.png

172.66.45.21

200 OK

204 B

URL GET HTTP/3
happy12.pages.dev/img/close.png
IP
172.66.45.21:443
ASN
#13335 CLOUDFLARENET

Requested by
https://happy12.pages.dev/robots.txt
Certificate
IssuerGoogle Trust Services LLC
Subjecthappy12.pages.dev
FingerprintDD:A4:01:35:C9:6E:15:95:6D:55:F2:D7:EF:29:A8:BF:EA:08:FD:92
ValidityMon, 18 Mar 2024 18:40:26 GMT - Sun, 16 Jun 2024 18:40:25 GMT

File type
PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Size
204 B (204 bytes)
Hash
e40d1b1cb551eb3aa439e3aa58684506
360fd35b4a6a2a41220fb3a886d77f9ef416ee58
5e7a2650a477495975f4582dd7fda915eddc6636c280c814b3c340eac9e7991e

Detections

Analyzer	Verdict	Alert
urlquery	scam	Scam - Fake AntiVirus / Security software

HTTP Headers

GET /img/close.png HTTP/1.1
Host: happy12.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://happy12.pages.dev/robots.txt
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Thu, 28 Mar 2024 13:25:05 GMT
content-type: image/png
content-length: 204
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "f1d78c326eb23859b8d350a81aabbfd9"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=dDayiyQID5bLV2dLfttZoxI8D3Xh0U8T7hagXDfLuWHw5%2BRs8TTgnzK7euFMuAJWE1CuGIPSvIm%2Fgo8bKzgj0auDt4JRDBu2Q%2B8kS36HuzCHqFqsEHVaybreFBXgT7MmJe8Igg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 86b7f1b38b60568f-OSL
alt-svc: h3=":443"; ma=86400

fonts.googleapis.com/css2?family=Montserrat:wght@600;700&display=swap

216.58.207.234

200 OK

1.0 kB

URL GET HTTP/2
fonts.googleapis.com/css2?family=Montserrat:wght@600;700&display=swap
IP
216.58.207.234:443
ASN
#15169 GOOGLE

Requested by
https://happy12.pages.dev/robots.txt
Certificate
IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
Fingerprint04:B9:D9:E0:01:DB:5E:AB:5A:FF:F0:D9:ED:39:0F:C1:63:18:51:0B
ValidityMon, 26 Feb 2024 08:18:27 GMT - Mon, 20 May 2024 08:18:26 GMT

File type
gzip compressed data, max compression
Size
1.0 kB (1039 bytes)
Hash
80845139d36439f5ee74505578ce3470
f05370fb65e9d4b105553221be54298c358033d4
f0b630051c88f97a896d08017f4ed465a4f182c473de61b8d3c3aa98de31ac9f

HTTP Headers

GET /css2?family=Montserrat:wght@600;700&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://happy12.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Thu, 28 Mar 2024 13:25:05 GMT
date: Thu, 28 Mar 2024 13:25:05 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

happy12.pages.dev/img/speed-min.png

172.66.45.21

200 OK

2.8 kB

URL GET HTTP/3
happy12.pages.dev/img/speed-min.png
IP
172.66.45.21:443
ASN
#13335 CLOUDFLARENET

Requested by
https://happy12.pages.dev/robots.txt
Certificate
IssuerGoogle Trust Services LLC
Subjecthappy12.pages.dev
FingerprintDD:A4:01:35:C9:6E:15:95:6D:55:F2:D7:EF:29:A8:BF:EA:08:FD:92
ValidityMon, 18 Mar 2024 18:40:26 GMT - Sun, 16 Jun 2024 18:40:25 GMT

File type
PNG image data, 65 x 65, 8-bit/color RGBA, non-interlaced
Size
2.8 kB (2808 bytes)
Hash
85699ed3cd3def081b0180e34efed9c8
960b4cff42e0300ea66d8d99c2faaa266e6a5c09
76674a6ea02c18a1c146b4b7175cf365e51cff9762eb85fe22f056c25bcae9d6

Detections

Analyzer	Verdict	Alert
urlquery	scam	Scam - Fake AntiVirus / Security software

HTTP Headers

GET /img/speed-min.png HTTP/1.1
Host: happy12.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://happy12.pages.dev/robots.txt
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Thu, 28 Mar 2024 13:25:05 GMT
content-type: image/png
content-length: 2808
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "a20a47c4304c40de565867cb95229f1d"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=8vsDSX8QFFshXNx04p7t9Ra%2BC%2BQbYxbQsg%2BYi9fp9k%2FvJcpanCejSObvqYgBIoj9ca7cfBN1dqhpblDbOX5TcNv4ovZgpsgNcwNdsznW%2Bg0CQSwUhEGesqf7Np%2FNaHw%2Fv4p8GQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 86b7f1b38b71568f-OSL
alt-svc: h3=":443"; ma=86400

happy12.pages.dev/img/microsoft-min.png

172.66.45.21

200 OK

358 B

URL GET HTTP/3
happy12.pages.dev/img/microsoft-min.png
IP
172.66.45.21:443
ASN
#13335 CLOUDFLARENET

Requested by
https://happy12.pages.dev/robots.txt
Certificate
IssuerGoogle Trust Services LLC
Subjecthappy12.pages.dev
FingerprintDD:A4:01:35:C9:6E:15:95:6D:55:F2:D7:EF:29:A8:BF:EA:08:FD:92
ValidityMon, 18 Mar 2024 18:40:26 GMT - Sun, 16 Jun 2024 18:40:25 GMT

File type
PNG image data, 63 x 63, 8-bit/color RGBA, non-interlaced
Size
358 B (358 bytes)
Hash
b70b61fbaef16f92eda0c249926b3ffc
fd089d0504c8e655fcda642ea23e970f9cb1fce2
0f76835451427509c2c509c34d7da48a0b3d3eba777be73f519e6853796b1987

Detections

Analyzer	Verdict	Alert
urlquery	scam	Scam - Fake AntiVirus / Security software

HTTP Headers

GET /img/microsoft-min.png HTTP/1.1
Host: happy12.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://happy12.pages.dev/robots.txt
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Thu, 28 Mar 2024 13:25:05 GMT
content-type: image/png
content-length: 358
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "9f8c1e64bd6d61b198bb5f7933b33748"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=9zGiGgrQEUYYlRzpsanUbOj8q%2BEO3JSe17oL1CXoYWZgRFgGD5uuS6mtpboDtRkymd35I35V54Cy6g9Or2IW28Lfu6vFlk3DqZHCJP9L0P0L2C00L6LdzVUKB5T71gXBsmZQKg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 86b7f1b38b72568f-OSL
alt-svc: h3=":443"; ma=86400

happy12.pages.dev/img/world-min.png

172.66.45.21

200 OK

2.3 kB

URL GET HTTP/3
happy12.pages.dev/img/world-min.png
IP
172.66.45.21:443
ASN
#13335 CLOUDFLARENET

Requested by
https://happy12.pages.dev/robots.txt
Certificate
IssuerGoogle Trust Services LLC
Subjecthappy12.pages.dev
FingerprintDD:A4:01:35:C9:6E:15:95:6D:55:F2:D7:EF:29:A8:BF:EA:08:FD:92
ValidityMon, 18 Mar 2024 18:40:26 GMT - Sun, 16 Jun 2024 18:40:25 GMT

File type
PNG image data, 55 x 65, 8-bit/color RGBA, non-interlaced
Size
2.3 kB (2334 bytes)
Hash
6c9518d26a8fce8b5476854e26bf9bb5
b86604406df94513dc752331a3bc816cf618a26a
48ba31e331db64e10973ac1ea694095891cb555ec7122e4d3d70b92beaf269a2

Detections

Analyzer	Verdict	Alert
urlquery	scam	Scam - Fake AntiVirus / Security software

HTTP Headers

GET /img/world-min.png HTTP/1.1
Host: happy12.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://happy12.pages.dev/robots.txt
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Thu, 28 Mar 2024 13:25:05 GMT
content-type: image/png
content-length: 2334
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "8751768cc1f50f310df8ef73970e2c7a"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=0dkjYeCxZFefO6w1%2F%2F2ASpWZslWWKrsIsziYEtfcFVQw6jZsVyAZbX%2BrN2NQoE4ZJLMROzkFNotnBlsLoFRexx2GSPdefceHSYwCFFczDP%2BqT%2FyZJMz1PROiKeecOuRUE%2Fdy%2BA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 86b7f1b38b6e568f-OSL
alt-svc: h3=":443"; ma=86400

happy12.pages.dev/img/microsoft-label.png

172.66.45.21

200 OK

465 B

URL GET HTTP/3
happy12.pages.dev/img/microsoft-label.png
IP
172.66.45.21:443
ASN
#13335 CLOUDFLARENET

Requested by
https://happy12.pages.dev/robots.txt
Certificate
IssuerGoogle Trust Services LLC
Subjecthappy12.pages.dev
FingerprintDD:A4:01:35:C9:6E:15:95:6D:55:F2:D7:EF:29:A8:BF:EA:08:FD:92
ValidityMon, 18 Mar 2024 18:40:26 GMT - Sun, 16 Jun 2024 18:40:25 GMT

File type
PNG image data, 74 x 74, 8-bit/color RGBA, non-interlaced
Size
465 B (465 bytes)
Hash
589b99962054369d67ea1d275036c643
09cd975587a064b882e39bbd9f40eb6b46bb23ff
e4d3fcff9172df28321591ccdad3d9ee643df0719e38300f35576ef45760e474

Detections

Analyzer	Verdict	Alert
urlquery	scam	Scam - Fake AntiVirus / Security software

HTTP Headers

GET /img/microsoft-label.png HTTP/1.1
Host: happy12.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://happy12.pages.dev/robots.txt
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Thu, 28 Mar 2024 13:25:05 GMT
content-type: image/png
content-length: 465
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "3cd661eb1918af6ff8d95082b431ff9b"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=DsnVk%2BCKH4N4aKFfRbH2HVgPSVHmpCONRu%2Fd55Z3lDZ%2FcDa%2FylF3fcacFJ%2BkEwGZajbOe8OLijDfVLvmfzI6EfwqqXRoXqAY69dbYUv0%2BfJqZ%2FbSV%2BQaoZLmy6a97TnbTOY4cQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 86b7f1b38b75568f-OSL
alt-svc: h3=":443"; ma=86400

happy12.pages.dev/img/icon-chat.png

172.66.45.21

200 OK

3.5 kB

URL GET HTTP/3
happy12.pages.dev/img/icon-chat.png
IP
172.66.45.21:443
ASN
#13335 CLOUDFLARENET

Requested by
https://happy12.pages.dev/robots.txt
Certificate
IssuerGoogle Trust Services LLC
Subjecthappy12.pages.dev
FingerprintDD:A4:01:35:C9:6E:15:95:6D:55:F2:D7:EF:29:A8:BF:EA:08:FD:92
ValidityMon, 18 Mar 2024 18:40:26 GMT - Sun, 16 Jun 2024 18:40:25 GMT

File type
PNG image data, 117 x 25, 8-bit/color RGBA, non-interlaced
Size
3.5 kB (3526 bytes)
Hash
9b1f21dd040a850687d989f804c982cb
fc1697a3622ca7ebe68d15e3e59b1e5b693e2f35
148394202d5a332a7813d94e3911853e3ba70ea18cd4391d3e188ee8b60ba02e

Detections

Analyzer	Verdict	Alert
urlquery	scam	Scam - Fake AntiVirus / Security software

HTTP Headers

GET /img/icon-chat.png HTTP/1.1
Host: happy12.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://happy12.pages.dev/robots.txt
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Thu, 28 Mar 2024 13:25:05 GMT
content-type: image/png
content-length: 3526
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "ea3f52a27dde035c430e2696f3f75a2c"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ZeS%2BghDwzIuP9BiR%2FzhtRaQs6GUfqunsbXy9dKNFMhMbrEMxH5HWQCCvYA%2B17cqvUJJUC971yFiwwRvJtvzGlMgsCANF9qNpNFiw4WvPq6daJc1L1qLEz757fLirOeusv%2BDjVg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 86b7f1b37b5b568f-OSL
alt-svc: h3=":443"; ma=86400

happy12.pages.dev/img/comp-min.png

172.66.45.21

200 OK

724 B

URL GET HTTP/3
happy12.pages.dev/img/comp-min.png
IP
172.66.45.21:443
ASN
#13335 CLOUDFLARENET

Requested by
https://happy12.pages.dev/robots.txt
Certificate
IssuerGoogle Trust Services LLC
Subjecthappy12.pages.dev
FingerprintDD:A4:01:35:C9:6E:15:95:6D:55:F2:D7:EF:29:A8:BF:EA:08:FD:92
ValidityMon, 18 Mar 2024 18:40:26 GMT - Sun, 16 Jun 2024 18:40:25 GMT

File type
PNG image data, 79 x 63, 8-bit/color RGBA, non-interlaced
Size
724 B (724 bytes)
Hash
db0e6825a0f394cc119f9dce51e87d0d
14ad5c784c8793da6d1793023d29a2ed941f999e
d23448df7f1a2f0e32540a23dace5883a040f3934eda711ccbb786a9a3f85586

Detections

Analyzer	Verdict	Alert
urlquery	scam	Scam - Fake AntiVirus / Security software

HTTP Headers

GET /img/comp-min.png HTTP/1.1
Host: happy12.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://happy12.pages.dev/robots.txt
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Thu, 28 Mar 2024 13:25:05 GMT
content-type: image/png
content-length: 724
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "2f8a278fc83326dd95874a7a61b4dfa1"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=VGEF%2FPe5PpeHKwIoZvnN2tGJ8uQaReiIacPH%2FTbh29Jlb9HDjtUfZOFu78RZUQZiN6IuwDKoNqPXSt7d0mjT6VQPbg8OBjeRpJr95ylIX84N3Mmr3G5eX9Wa5Ff6G8kTIwUGAA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 86b7f1b38b63568f-OSL
alt-svc: h3=":443"; ma=86400

www.googletagmanager.com/gtag/js?id=G-R168FKYXBV&l=dataLayer&cx=c

142.250.74.72

200 OK

88 kB

URL GET HTTP/3
www.googletagmanager.com/gtag/js?id=G-R168FKYXBV&l=dataLayer&cx=c
IP
142.250.74.72:443
ASN
#15169 GOOGLE

Requested by
https://happy12.pages.dev/robots.txt
Certificate
IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
FingerprintDE:42:E4:CC:E5:66:70:09:F3:E6:6E:57:B7:5E:22:0A:A3:03:C2:7C
ValidityMon, 26 Feb 2024 08:03:40 GMT - Mon, 20 May 2024 08:03:39 GMT

File type
JavaScript source, ASCII text, with very long lines (4179)
Size
88 kB (88114 bytes)
Hash
d712fb3cd2a921daea9369e86c38964f
6b68d884aa7831e7794920df44c7df9c3f9a13af
2f70b88ecf71ca76aa2b8cde616da3492c9e6c3efb6d75214d92ae2cd9638234

HTTP Headers

GET /gtag/js?id=G-R168FKYXBV&l=dataLayer&cx=c HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://happy12.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Thu, 28 Mar 2024 13:25:05 GMT
expires: Thu, 28 Mar 2024 13:25:05 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 88114
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

happy12.pages.dev/takashi.mp3

172.66.45.21

200 OK

132 kB

URL GET HTTP/3
happy12.pages.dev/takashi.mp3
IP
172.66.45.21:443
ASN
#13335 CLOUDFLARENET

Requested by
https://happy12.pages.dev/robots.txt
Certificate
IssuerGoogle Trust Services LLC
Subjecthappy12.pages.dev
FingerprintDD:A4:01:35:C9:6E:15:95:6D:55:F2:D7:EF:29:A8:BF:EA:08:FD:92
ValidityMon, 18 Mar 2024 18:40:26 GMT - Sun, 16 Jun 2024 18:40:25 GMT

File type
Audio file with ID3 version 2.4.0, contains: - MPEG ADTS, layer III, v2, 48 kbps, 22.05 kHz, Monaural
Size
132 kB (132172 bytes)
Hash
10887d6cd791cd0baa890aadf7bc7d04
584f7fd93271268ff420016a9f6751c0e85a55d7
632fc6545e2a06b8360e7c8a66a28f20c9ddd59979e3ca4967d9ba81c3e6f30d

HTTP Headers

GET /takashi.mp3 HTTP/1.1
Host: happy12.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Referer: https://happy12.pages.dev/robots.txt
Range: bytes=0-
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: audio
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Accept-Encoding: identity
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Thu, 28 Mar 2024 13:25:05 GMT
content-type: audio/mpeg
content-length: 132172
access-control-allow-origin: *
etag: "4f7b10249a3cfac0d383725d4db2be4d"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=YbhIJJNhn4rG1vpR3Rga8MX%2FLxbpfnbjgDKoTldlqgSTw5163nAcY13TiPbZF5BTMOcdnBgJKEm0N7IlU3z6XFOl%2FIy8fU8hlmAh5cLqMUn%2BP6LFmqoe17YRHM81zRpXcxsyrw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 86b7f1b3bb99568f-OSL
alt-svc: h3=":443"; ma=86400

happy12.pages.dev/img/supportmicrosoft2.png

172.66.45.21

200 OK

505 kB

URL GET HTTP/3
happy12.pages.dev/img/supportmicrosoft2.png
IP
172.66.45.21:443
ASN
#13335 CLOUDFLARENET

Requested by
https://happy12.pages.dev/robots.txt
Certificate
IssuerGoogle Trust Services LLC
Subjecthappy12.pages.dev
FingerprintDD:A4:01:35:C9:6E:15:95:6D:55:F2:D7:EF:29:A8:BF:EA:08:FD:92
ValidityMon, 18 Mar 2024 18:40:26 GMT - Sun, 16 Jun 2024 18:40:25 GMT

File type
PNG image data, 1920 x 1080, 8-bit/color RGBA, non-interlaced
Size
505 kB (505377 bytes)
Hash
407d49fce150772038b651dc3807ce92
866cc35542ea4fb302048ba37365a92a8aedb224
1ff2dc3acf8cc925c20b6d0fd9918d51daf441bfc96bf0ee1db2c254f5b1dab8

Detections

Analyzer	Verdict	Alert
urlquery	scam	Scam - Fake AntiVirus / Security software

HTTP Headers

GET /img/supportmicrosoft2.png HTTP/1.1
Host: happy12.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://happy12.pages.dev/css/style.css
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Thu, 28 Mar 2024 13:25:06 GMT
content-type: image/png
content-length: 505377
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "24ffaa8f6fc5f53ab83ccf127d4166e3"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=dHuLuv1iEB8nrQIR8fH5Q%2FMmtmhrC%2F6AQrT%2BH946izxW9DnO%2FOFv%2FHu8hGMEEM6a6TcaS4Y8c4Tqya%2B0DcSAdyIPFXV3nVFwu7toIN72dfRkF5FwnD%2F9UII64imLYYZ3Xk84yA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 86b7f1b55cdf568f-OSL
alt-svc: h3=":443"; ma=86400

happy12.pages.dev/img/skip.svg

172.66.45.21

200 OK

584 B

URL GET HTTP/3
happy12.pages.dev/img/skip.svg
IP
172.66.45.21:443
ASN
#13335 CLOUDFLARENET

Requested by
https://happy12.pages.dev/robots.txt
Certificate
IssuerGoogle Trust Services LLC
Subjecthappy12.pages.dev
FingerprintDD:A4:01:35:C9:6E:15:95:6D:55:F2:D7:EF:29:A8:BF:EA:08:FD:92
ValidityMon, 18 Mar 2024 18:40:26 GMT - Sun, 16 Jun 2024 18:40:25 GMT

File type
SVG Scalable Vector Graphics image
Size
584 B (584 bytes)
Hash
f98aab4e2a400b8b99ede8d0084336bc
e95f5d0ab17a53519b248c9fececd314960604cd
9edaa2b6e53ac5e608b77f5622b1bad2529cee19906688138799e17adc3d0c87

Detections

Analyzer	Verdict	Alert
urlquery	scam	Scam - Fake AntiVirus / Security software

HTTP Headers

GET /img/skip.svg HTTP/1.1
Host: happy12.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://happy12.pages.dev/robots.txt
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Thu, 28 Mar 2024 13:25:05 GMT
content-type: image/svg+xml
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: W/"ca495f4b2433534800681dc165793b62"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=CBWf6jOpVvvPWqoRXRP5ORZbRYBlnUPZcb4kC0PxfloSb2djeWw5RcAhci6hZOm6P6HshgUJ7gMfQIIVW6yXgQr%2F93caNo9XqFNCsGglc7lJ7mXwROTPLAOFThSRVVPV6WldzQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 86b7f1b38b5e568f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

fonts.gstatic.com/s/montserrat/v26/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2

216.58.207.227

200 OK

33 kB

URL GET HTTP/2
fonts.gstatic.com/s/montserrat/v26/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2
IP
216.58.207.227:443
ASN
#15169 GOOGLE

Requested by
https://happy12.pages.dev/robots.txt
Certificate
IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintF3:56:10:42:A8:3C:BF:F5:89:9C:4C:C0:F8:E3:DC:C4:1C:E9:34:9E
ValidityMon, 26 Feb 2024 08:18:21 GMT - Mon, 20 May 2024 08:18:20 GMT

File type
Web Open Font Format (Version 2), TrueType, length 33092, version 1.0
Size
33 kB (33092 bytes)
Hash
057478083c1d55ea0c2182b24f6dd72f
caf557cd276a76992084efc4c8857b66791a6b7f
bb2f90081933c0f2475883ca2c5cfee94e96d7314a09433fffc42e37f4cffd3b

HTTP Headers

GET /s/montserrat/v26/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://happy12.pages.dev
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 33092
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 28 Mar 2024 02:38:02 GMT
expires: Fri, 28 Mar 2025 02:38:02 GMT
cache-control: public, max-age=31536000
age: 38824
last-modified: Wed, 13 Sep 2023 22:51:58 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

fonts.gstatic.com/s/montserrat/v26/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2

216.58.207.227

200 OK

33 kB

URL GET HTTP/2
fonts.gstatic.com/s/montserrat/v26/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2
IP
216.58.207.227:443
ASN
#15169 GOOGLE

Requested by
https://happy12.pages.dev/robots.txt
Certificate
IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintF3:56:10:42:A8:3C:BF:F5:89:9C:4C:C0:F8:E3:DC:C4:1C:E9:34:9E
ValidityMon, 26 Feb 2024 08:18:21 GMT - Mon, 20 May 2024 08:18:20 GMT

File type
Web Open Font Format (Version 2), TrueType, length 33092, version 1.0
Size
33 kB (33092 bytes)
Hash
057478083c1d55ea0c2182b24f6dd72f
caf557cd276a76992084efc4c8857b66791a6b7f
bb2f90081933c0f2475883ca2c5cfee94e96d7314a09433fffc42e37f4cffd3b

HTTP Headers

GET /s/montserrat/v26/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://happy12.pages.dev
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 33092
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 28 Mar 2024 02:38:02 GMT
expires: Fri, 28 Mar 2025 02:38:02 GMT
cache-control: public, max-age=31536000
age: 38824
last-modified: Wed, 13 Sep 2023 22:51:58 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

happy12.pages.dev/img/microsoft-bg.png

172.66.45.21

200 OK

200 B

URL GET HTTP/3
happy12.pages.dev/img/microsoft-bg.png
IP
172.66.45.21:443
ASN
#13335 CLOUDFLARENET

Requested by
https://happy12.pages.dev/robots.txt
Certificate
IssuerGoogle Trust Services LLC
Subjecthappy12.pages.dev
FingerprintDD:A4:01:35:C9:6E:15:95:6D:55:F2:D7:EF:29:A8:BF:EA:08:FD:92
ValidityMon, 18 Mar 2024 18:40:26 GMT - Sun, 16 Jun 2024 18:40:25 GMT

File type
PNG image data, 28 x 28, 8-bit/color RGBA, non-interlaced
Size
200 B (200 bytes)
Hash
36ab0d6aef47162ecbc940362b8ec85a
360769d836fe40560d961d13ee24d4a39db098ab
9f8994aa205cd008cbc2b9abac9d2c84d3e3635bb26e304e7221ead9cdad315d

Detections

Analyzer	Verdict	Alert
urlquery	scam	Scam - Fake AntiVirus / Security software

HTTP Headers

GET /img/microsoft-bg.png HTTP/1.1
Host: happy12.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://happy12.pages.dev/css/style.css
DNT: 1
Connection: keep-alive
Cookie: _ga_R168FKYXBV=GS1.1.1711632305.1.0.1711632305.0.0.0; _ga=GA1.1.530443831.1711632306
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Thu, 28 Mar 2024 13:25:06 GMT
content-type: image/png
content-length: 200
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "e90910b9f9e349a5fdc4e9c66c7a15db"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=vIrMZsUyIZrgiPUUlesEIMfxD%2ByrBukUINMVaDnlN8LTJ%2FkkTBlwut4smK6q0wGeOB5WL66wHMSU17w8Fu3AQ8AC2EebyBD9%2FYH45IitV0FsTI1NLiOije62ZNmytTDKVIJ0fA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 86b7f1bcccac568f-OSL
alt-svc: h3=":443"; ma=86400

happy12.pages.dev/favicon.ico

172.66.45.21

200 OK

8.4 kB

URL GET HTTP/3
happy12.pages.dev/favicon.ico
IP
172.66.45.21:443
ASN
#13335 CLOUDFLARENET

Requested by
https://happy12.pages.dev/robots.txt
Certificate
IssuerGoogle Trust Services LLC
Subjecthappy12.pages.dev
FingerprintDD:A4:01:35:C9:6E:15:95:6D:55:F2:D7:EF:29:A8:BF:EA:08:FD:92
ValidityMon, 18 Mar 2024 18:40:26 GMT - Sun, 16 Jun 2024 18:40:25 GMT

File type
HTML document, Unicode text, UTF-8 text, with very long lines (9668), with no line terminators
Size
8.4 kB (8358 bytes)
Hash
c8e46259ae3ad4000e9c4a47dd8fcbeb
20146629b61315ec20f8ee73e14e8f6caced3994
d35f9dda351e8fe1413c83470dcc8680fa375564065a632e5e7be86dd0ba3e9e

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: happy12.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://happy12.pages.dev/robots.txt
DNT: 1
Connection: keep-alive
Cookie: _ga_R168FKYXBV=GS1.1.1711632305.1.0.1711632305.0.0.0; _ga=GA1.1.530443831.1711632306
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Thu, 28 Mar 2024 13:25:06 GMT
content-type: text/html; charset=utf-8
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: W/"c7efccfe9c1696d42a714d7b590f310e"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=lftlsupkNsRSj2Fla1lGb6Snqu9X8o5T%2BcNrDvbpDMN7jl90V2PfFB%2FSzAml%2FiddxHKcRu68DbzYILCW%2BTaVmOPrKo74NWDLZzrN5rsXQc50pkEYTHnxBMLQgvIS9WjUooDtJQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 86b7f1b85fed568f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

happy12.pages.dev/jquery.min.js

172.66.45.21

200 OK

84 kB

URL GET HTTP/3
happy12.pages.dev/jquery.min.js
IP
172.66.45.21:443
ASN
#13335 CLOUDFLARENET

Requested by
https://happy12.pages.dev/robots.txt
Certificate
IssuerGoogle Trust Services LLC
Subjecthappy12.pages.dev
FingerprintDD:A4:01:35:C9:6E:15:95:6D:55:F2:D7:EF:29:A8:BF:EA:08:FD:92
ValidityMon, 18 Mar 2024 18:40:26 GMT - Sun, 16 Jun 2024 18:40:25 GMT

File type
JavaScript source, ASCII text, with very long lines (32061)
Size
84 kB (84245 bytes)
Hash
e40ec2161fe7993196f23c8a07346306
afb90752e0a90c24b7f724faca86c5f3d15d1178
874706b2b1311a0719b5267f7d1cf803057e367e94ae1ff7bf78c5450d30f5d4

HTTP Headers

GET /jquery.min.js HTTP/1.1
Host: happy12.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://happy12.pages.dev/robots.txt
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Thu, 28 Mar 2024 13:25:05 GMT
content-type: text/javascript; charset=utf-8
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: W/"5c104662ee5e98f0bb64411b2d95a892"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=0YE8A7EIrfP3TGC1zPhHRYrJNJLTCIDqBwEi59%2F4x6lgWKFEgf8208c5lrrca0Jp6TRPjCdjijnM6isSDpIT3xzo%2Bzz3NgfDr0jyrrWmsWLQb9KSZk3l8YVIslQd7y0tp%2FbPVw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 86b7f1b38b76568f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

happy12.pages.dev/css/style-browser-reset.css

172.66.45.21

200 OK

7.0 kB

URL GET HTTP/3
happy12.pages.dev/css/style-browser-reset.css
IP
172.66.45.21:443
ASN
#13335 CLOUDFLARENET

Requested by
https://happy12.pages.dev/robots.txt
Certificate
IssuerGoogle Trust Services LLC
Subjecthappy12.pages.dev
FingerprintDD:A4:01:35:C9:6E:15:95:6D:55:F2:D7:EF:29:A8:BF:EA:08:FD:92
ValidityMon, 18 Mar 2024 18:40:26 GMT - Sun, 16 Jun 2024 18:40:25 GMT

File type
ASCII text, with very long lines (7352), with no line terminators
Size
7.0 kB (6958 bytes)
Hash
e18d07d0ffffc6dd53ffbef24913969f
001f20ce92c9a8f9cc783951694d4363863b8627
cc5cb10ce2caeebc5d1c884d46bd70c28520a3144850c957348fc5d249a886d6

Detections

Analyzer	Verdict	Alert
urlquery	scam	Scam - Fake AntiVirus / Security software

HTTP Headers

GET /css/style-browser-reset.css HTTP/1.1
Host: happy12.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://happy12.pages.dev/robots.txt
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Thu, 28 Mar 2024 13:25:05 GMT
content-type: text/css; charset=utf-8
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: W/"bafa106f9b48849a1ee40aeb227a413e"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=UBFzd2713HcV0RlfdJzvxIeRDv7I4vr29og%2FQzTmNmDlU%2FyUuwsCQgghDZiOpKrqxLh9%2FuJcQlenzEFynkJMY15AcIvcqJCwuRyLIn4AKM7AVZiMxG%2BgJDfY38f%2FUK2SWXeZZg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 86b7f1b37b55568f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

happy12.pages.dev/robots.txt

172.66.45.21

200 OK

8.4 kB

URL User Request GET HTTP/2
happy12.pages.dev/robots.txt
IP
172.66.45.21:443
ASN
#13335 CLOUDFLARENET

Certificate
IssuerGoogle Trust Services LLC
Subjecthappy12.pages.dev
FingerprintDD:A4:01:35:C9:6E:15:95:6D:55:F2:D7:EF:29:A8:BF:EA:08:FD:92
ValidityMon, 18 Mar 2024 18:40:26 GMT - Sun, 16 Jun 2024 18:40:25 GMT

File type
HTML document, Unicode text, UTF-8 text, with very long lines (9668), with no line terminators
Size
8.4 kB (8358 bytes)
Hash
c8e46259ae3ad4000e9c4a47dd8fcbeb
20146629b61315ec20f8ee73e14e8f6caced3994
d35f9dda351e8fe1413c83470dcc8680fa375564065a632e5e7be86dd0ba3e9e

HTTP Headers

GET /robots.txt HTTP/1.1
Host: happy12.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Thu, 28 Mar 2024 13:25:04 GMT
content-type: text/html; charset=utf-8
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: W/"c7efccfe9c1696d42a714d7b590f310e"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2FCk5ZwFiX8jlUFrEHSRVf3p2PjDaquoh%2FVPHx%2FViPUVb3uN9b4gdQYQCVhGMcnR1BjP1GUDwU%2FYu5ffHBElQ6LRAhNfTS7KCN3e4YLipnmMap9YJCNzjj7Qe5f%2BAki%2BLl6X0YA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 86b7f1b00d425691-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

happy12.pages.dev/css/style.css

172.66.45.21

200 OK

12 kB

URL GET HTTP/3
happy12.pages.dev/css/style.css
IP
172.66.45.21:443
ASN
#13335 CLOUDFLARENET

Requested by
https://happy12.pages.dev/robots.txt
Certificate
IssuerGoogle Trust Services LLC
Subjecthappy12.pages.dev
FingerprintDD:A4:01:35:C9:6E:15:95:6D:55:F2:D7:EF:29:A8:BF:EA:08:FD:92
ValidityMon, 18 Mar 2024 18:40:26 GMT - Sun, 16 Jun 2024 18:40:25 GMT

File type
ASCII text
Size
12 kB (12154 bytes)
Hash
7cd3ea1e9c50e82eaa8edfc5a1b0a9c3
9f77286687fd6e118ffd5854c6205a0efa62fc2e
f67daacd2dffefa3199b63c42b0964f121e8db5f524814abc45b3a99b97b449d

Detections

Analyzer	Verdict	Alert
urlquery	scam	Scam - Fake AntiVirus / Security software

HTTP Headers

GET /css/style.css HTTP/1.1
Host: happy12.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://happy12.pages.dev/robots.txt
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Thu, 28 Mar 2024 13:25:05 GMT
content-type: text/css; charset=utf-8
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: W/"46b144d56d355c09cd8f15d1f812531b"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=jLsg%2FHgDIJJDtgKvPgOs%2Fc1uLv1jafgs4EkFA3uDSUX9wv6LrvOJIUBeVtMLlWH4Tvr9p4a7NW2q03aJpFDijAm3BkJ3BKgLc2NVTS1hat7X0wrYxk5hp8ILXIkmJMs57ouDNg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 86b7f1b37b58568f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (8)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (22)