Report - reagila2910vikinoko2.pages.dev/

Report Overview

Submitted URL
reagila2910vikinoko2.pages.dev/
IP
172.66.46.252
ASN
#13335 CLOUDFLARENET
Submitted
2024-04-18 16:41:20
Access
public
Website Title
Yahoo - login
Final URL
fagila2910vikinoko.pages.dev/#undefined
Tags
phishing suspicious
urlquery detections
Phishing - Generic phishing
Suspicious - Suspicious Javascript code

Detections

urlquery
6
Network Intrusion Detection
0
Threat Detection Systems
18

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
fagila2910vikinoko.pages.dev	unknown	2020-09-02	2023-08-28	2024-02-14	1.5 kB	329 kB	172.66.47.165
ajax.googleapis.com	12905	2005-01-25	2013-08-16	2024-04-18	443 B	31 kB	142.250.74.138
s.yimg.com	375	1997-05-14	2012-05-21	2024-04-18	937 B	4.3 kB	188.125.94.206
aus5.mozilla.org	2548	1998-01-24	2015-10-27	2024-04-18	512 B	1.2 kB	35.244.181.201

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

Scan Date	Severity	Indicator	Alert
2024-04-11	medium	fagila2910vikinoko.pages.dev/	Yahoo! Inc
2024-04-11	medium	fagila2910vikinoko.pages.dev/	Yahoo! Inc
2024-04-11	medium	fagila2910vikinoko.pages.dev/	Yahoo! Inc

PhishTank

Scan Date	Severity	Indicator	Alert
2023-09-17	medium	fagila2910vikinoko.pages.dev/login_files/loga	Yahoo
2023-09-17	medium	fagila2910vikinoko.pages.dev/	Yahoo
2023-09-17	medium	fagila2910vikinoko.pages.dev/	Yahoo

mnemonic secure dns

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2024-04-18	medium	fagila2910vikinoko.pages.dev	Sinkholed
2024-04-18	medium	fagila2910vikinoko.pages.dev	Sinkholed
2024-04-18	medium	fagila2910vikinoko.pages.dev	Sinkholed

ThreatFox

No alerts detected

JavaScript (8)

	URL	Size	First Seen	Last Seen
	ajax.googleapis.com/ajax/libs/jquery/3.2.1/jquery.min.js	87 kB	2023-03-07	2024-05-02
Pretty URL ajax.googleapis.com/ajax/libs/jquery/3.2.1/jquery.min.js IP 142.250.74.138 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:02:00 Last Seen2024-05-02 00:03:32 Times Seen63833 Hash c9f5aeeca3ad37bf2aa006139b935f0a 1055018c28ab41087ef9ccefe411606893dabea2 87083882cc6015984eb0411a99d3981817f5dc5c90ba24f0940420c5548d82de Loading...

	unknown	83 B	2023-08-28	2024-05-01
Pretty Introduced by scriptElement Embedded in HTML false Observations First Seen2023-08-28 02:10:54 Last Seen2024-05-01 18:40:22 Times Seen30 Hash f2289544b1d1ac05fe39eccd3cfb4c91 18f2d90a7ff5fdd1ac8ed9d3c51ea24a463a1322 dfd94a580538b5e33d008eb094bc5103bd1559537e036a2784236bacb2c012fd Loading...

	unknown	969 B	2023-08-28	2024-05-01
Pretty Introduced by scriptElement Embedded in HTML false Observations First Seen2023-08-28 02:10:54 Last Seen2024-05-01 18:40:22 Times Seen30 Hash c3856e4527bb7ee89014788d79bc6ab3 8ef78b84922baab9e1078b2067f5a458dca6d1d5 ff8457f9d8cb5f16d2b6f0ac92c711d87f48afd25fad3bd648623e8b083c43d3 Loading...

	unknown	2.4 kB	2023-08-28	2024-05-01
Pretty Introduced by scriptElement Embedded in HTML false Observations First Seen2023-08-28 02:10:54 Last Seen2024-05-01 18:40:22 Times Seen30 Hash a75cd509cbf348083ad608170c7c486e dec3a097df0498d2e0a6bf1236c78ce7e2659a3b 49476c1a8329e8348d96f0685f9e75f9a5616c9bd92c4b5c7c4786a7803668e2 Loading...

	unknown	674 B	2023-08-28	2024-05-01
Pretty Introduced by scriptElement Embedded in HTML false Observations First Seen2023-08-28 02:10:54 Last Seen2024-05-01 18:40:22 Times Seen30 Hash 33f2fac3ef990472696e174641bd353c b6a49e419ed8cf086aae14487c57563da7c7c9fa fe52ea3d1f43dd18ed6b68b42a4af96b342469f96ff8263edb4cd465298adcee Loading...

	fagila2910vikinoko.pages.dev/#undefined	254 kB	2023-08-28	2024-05-01
Pretty URL fagila2910vikinoko.pages.dev/#undefined IP 0.0.0.0 ASN #0 Introduced by scriptElement Embedded in HTML true Observations First Seen2023-08-28 02:10:54 Last Seen2024-05-01 18:40:22 Times Seen30 Hash 068fb91dde91a9e1832ec85ec4920fa8 09209358d923cb280d4c9fdd0f9d9592a518ba95 66b54286c4ffb825df43c3fcb2c970f3755006ccadaae229cf1d81b23ab28bda Loading...

	unknown	190 B	2023-08-28	2024-05-01
Pretty Introduced by scriptElement Embedded in HTML false Observations First Seen2023-08-28 02:10:54 Last Seen2024-05-01 18:40:22 Times Seen30 Hash e82736f285cb394d000829487fe1c269 2307d30f148b818cf1b3e3f065ac569afb6b9d83 d80c73d0346cf83f16f3093261adae3b4b2cf0b8a01e11ebe9b9bb27759f7d16 Loading...

		Size	First Seen	Last Seen
	#1 Write - 733df24ed7d7e0f69a2c14de8a04fbe3	85 kB	2023-08-28	2024-05-01
Pretty Observations First Seen2023-08-28 02:10:54 Last Seen2024-05-01 18:40:22 Times Seen30 Hash 733df24ed7d7e0f69a2c14de8a04fbe3 43833b79637c837f74076446c60a6b2203f33b09 9b487945b0bbf372e2843bf4e14ab9e56c0069cc4b6799ef7cdc432eeff1f429 Loading...

HTTP Transactions (7)

URL IP Response Size

fagila2910vikinoko.pages.dev/login_files/loga

172.66.47.165

200 OK

46 kB

URL GET HTTP/3
fagila2910vikinoko.pages.dev/login_files/loga
IP
172.66.47.165:443
ASN
#13335 CLOUDFLARENET

Requested by
https://fagila2910vikinoko.pages.dev/#undefined
Certificate
IssuerLet's Encrypt
Subjectfagila2910vikinoko.pages.dev
Fingerprint24:3B:85:11:7A:B9:C4:EF:68:68:E1:6E:07:9B:88:E2:0E:2A:C8:F4
ValidityWed, 21 Feb 2024 18:31:27 GMT - Tue, 21 May 2024 18:31:26 GMT

File type
HTML document, ASCII text, with very long lines (65503), with CRLF line terminators
Size
46 kB (45852 bytes)
Hash
6a0b32e63e9c47abe05290994ece6e78
1beb96c3c9c0d8bc51fdd16dacf00d3376cdf9b0
1401f6fb58a8a225ede651a8a4d8e80ef75fb1742d047322f36d3773a98921b6

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Yahoo! Inc
PhishTank	phishing	Yahoo
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /login_files/loga HTTP/1.1
Host: fagila2910vikinoko.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://fagila2910vikinoko.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Thu, 18 Apr 2024 16:40:55 GMT
content-type: text/html; charset=utf-8
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: W/"d13bf6cc991deb37224368583938513e"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Tk0olwusJK9zlvMwRIVzA9CE5rMS2%2BQo7bRVacMPEsjKDWzKdrzLP3TBRzv7qmekk48kcVnKRJ5xTA28SOC8uR%2B1SeUdAB7XQxJO6%2FKR12z5I3a3%2FmDmLHRdSMEiLAErbW%2FmPndrr8iOh3ol%2FCSf"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 876619726973b4fa-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

ajax.googleapis.com/ajax/libs/jquery/3.2.1/jquery.min.js

142.250.74.138

200 OK

30 kB

URL GET HTTP/2
ajax.googleapis.com/ajax/libs/jquery/3.2.1/jquery.min.js
IP
142.250.74.138:443
ASN
#15169 GOOGLE

Requested by
https://fagila2910vikinoko.pages.dev/#undefined
Certificate
IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
Fingerprint47:5A:64:7D:9F:47:34:07:31:91:97:F7:04:42:7A:D5:EA:AD:07:4E
ValidityMon, 04 Mar 2024 07:16:44 GMT - Mon, 27 May 2024 07:16:43 GMT

File type
JavaScript source, ASCII text, with very long lines (32058)
Size
30 kB (30306 bytes)
Hash
c9f5aeeca3ad37bf2aa006139b935f0a
1055018c28ab41087ef9ccefe411606893dabea2
87083882cc6015984eb0411a99d3981817f5dc5c90ba24f0940420c5548d82de

HTTP Headers

GET /ajax/libs/jquery/3.2.1/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fagila2910vikinoko.pages.dev/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 30306
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 11 Apr 2024 17:46:15 GMT
expires: Fri, 11 Apr 2025 17:46:15 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
age: 600880
last-modified: Tue, 03 Mar 2020 19:15:00 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

s.yimg.com/rz/p/yahoo_frontpage_en-US_s_f_p_bestfit_frontpage_2x.png

188.125.94.206

200 OK

1.3 kB

URL GET HTTP/2
s.yimg.com/rz/p/yahoo_frontpage_en-US_s_f_p_bestfit_frontpage_2x.png
IP
188.125.94.206:443
ASN
#10310 YAHOO-1

Requested by
https://fagila2910vikinoko.pages.dev/#undefined
Certificate
IssuerDigiCert Inc
Subject*.fantasysports.yahoo.com
FingerprintF9:49:E1:CC:DE:98:74:FF:9B:DF:28:DC:D8:43:B9:82:99:B1:60:DB
ValidityTue, 02 Apr 2024 00:00:00 GMT - Wed, 22 May 2024 23:59:59 GMT

File type
PNG image data, 240 x 72, 8-bit colormap, non-interlaced
Size
1.3 kB (1346 bytes)
Hash
cd166981c96c6d0f4b5a7d798c25878e
09031c4013138bb8bd54ab9092ac59aa47d7c60c
0fdefe26bac6a6b0b06fe67984582f887af70b7da25d6cb1b401f9074db58338

HTTP Headers

GET /rz/p/yahoo_frontpage_en-US_s_f_p_bestfit_frontpage_2x.png HTTP/1.1
Host: s.yimg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://fagila2910vikinoko.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
x-amz-id-2: lYCLZJ57CKLQPGPkCP43e3ueSjNr+bQfyrNounzeyHgM8I7ADb67PfZh1jEmWvrUh8+6cG0TNAk=
x-amz-request-id: TVFZESER2RK3MZFX
date: Thu, 18 Apr 2024 11:35:22 GMT
last-modified: Wed, 17 Apr 2024 21:32:10 GMT
x-amz-server-side-encryption: AES256
cache-control: public,max-age=86400
accept-ranges: bytes
content-type: image/png
server: ATS
content-length: 1346
referrer-policy: no-referrer-when-downgrade
vary: Origin
etag: "cd166981c96c6d0f4b5a7d798c25878e"
expires: Thu, 18 Apr 2024 23:00:00 GMT
age: 18334
strict-transport-security: max-age=31536000
expect-ct: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
ats-carp-promotion: 1, 1
X-Firefox-Spdy: h2

s.yimg.com/wm/mbr/images/yahoo-favicon-img-v0.0.2.ico

188.125.94.206

200 OK

1.4 kB

URL GET HTTP/2
s.yimg.com/wm/mbr/images/yahoo-favicon-img-v0.0.2.ico
IP
188.125.94.206:443
ASN
#10310 YAHOO-1

Requested by
https://fagila2910vikinoko.pages.dev/#undefined
Certificate
IssuerDigiCert Inc
Subject*.fantasysports.yahoo.com
FingerprintF9:49:E1:CC:DE:98:74:FF:9B:DF:28:DC:D8:43:B9:82:99:B1:60:DB
ValidityTue, 02 Apr 2024 00:00:00 GMT - Wed, 22 May 2024 23:59:59 GMT

File type
MS Windows icon resource - 1 icon, 16x16, 8 bits/pixel
Size
1.4 kB (1406 bytes)
Hash
b6814ae5582d7953821acbd76e977bb4
75a33fc706c2c6ba233e76c17337e466949f403c
4a491acd00880c407a2b749619003716c87e9c25ac344e5934c13e8f9aa0e8b3

HTTP Headers

GET /wm/mbr/images/yahoo-favicon-img-v0.0.2.ico HTTP/1.1
Host: s.yimg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fagila2910vikinoko.pages.dev/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
x-amz-id-2: SAu+l+QShN0KLcdK5qWmaU/mj1JZY/XQ6neCyDZwUnskv65h7OgwTOrFse3y3uLKA9zXO2K/3U8=
x-amz-request-id: JBXCY5QBCZ8WZSC7
date: Wed, 17 Apr 2024 05:06:27 GMT
last-modified: Wed, 11 Sep 2019 18:01:04 GMT
etag: "b6814ae5582d7953821acbd76e977bb4"
x-amz-server-side-encryption: AES256
cache-control: public,max-age=315360000
accept-ranges: bytes
content-type: image/vnd.microsoft.icon
server: ATS
content-length: 1406
referrer-policy: no-referrer-when-downgrade
vary: Origin
age: 128070
strict-transport-security: max-age=31536000
expect-ct: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
ats-carp-promotion: 1
X-Firefox-Spdy: h2

fagila2910vikinoko.pages.dev/

172.66.47.165

27 kB

URL
fagila2910vikinoko.pages.dev/
IP
172.66.47.165:0
ASN
#13335 CLOUDFLARENET

Certificate
IssuerLet's Encrypt
Subjectfagila2910vikinoko.pages.dev
Fingerprint24:3B:85:11:7A:B9:C4:EF:68:68:E1:6E:07:9B:88:E2:0E:2A:C8:F4
ValidityWed, 21 Feb 2024 18:31:27 GMT - Tue, 21 May 2024 18:31:26 GMT

File type
HTML document, ASCII text, with very long lines (65503), with CRLF line terminators
Size
27 kB (26982 bytes)
Hash
6a0b32e63e9c47abe05290994ece6e78
1beb96c3c9c0d8bc51fdd16dacf00d3376cdf9b0
1401f6fb58a8a225ede651a8a4d8e80ef75fb1742d047322f36d3773a98921b6

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Yahoo! Inc
PhishTank	phishing	Yahoo
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET / HTTP/1.1
Host: fagila2910vikinoko.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://reagila2910vikinoko2.pages.dev/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Thu, 18 Apr 2024 16:40:55 GMT
content-type: text/html; charset=utf-8
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: W/"d13bf6cc991deb37224368583938513e"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Xuz55dFUs9wPUK%2BsKFDCMiK75WEYBYy%2FGex30ofh5pJEokwbF4cN24QWqyzzFaW4lfHm11aNxlZioknfbcY9QJjxqSDG4msh%2B7FFH5yElvIxe1KYps%2BtaxP8qsJnhXlkSaIAczF1CG7bJb5t1%2Bub"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87661971083c56a2-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

aus5.mozilla.org/update/3/GMP/111.0a1/20240129201730/Linux_x86_64-gcc3/null/default/Linux%205.15.0-102-generic%20(GTK%203.24.37%2Clibpulse%20not-available)/default/default/update.xml

35.244.181.201

444 B

URL
aus5.mozilla.org/update/3/GMP/111.0a1/20240129201730/Linux_x86_64-gcc3/null/default/Linux%205.15.0-102-generic%20(GTK%203.24.37%2Clibpulse%20not-available)/default/default/update.xml
IP
35.244.181.201:0
ASN
#396982 GOOGLE-CLOUD-PLATFORM

File type
XML 1.0 document, ASCII text, with very long lines (332)
Size
444 B (444 bytes)
Hash
3b324dec137a87ef7e24a30a65b13dd0
c0faa95b2f1018e264b3a14aaf50d1003e6c27b3
6cd0b591d9239fc8564627e92a804fc261951b1cbaf5fa58a8ada3cc13f51463

HTTP Headers

GET /update/3/GMP/111.0a1/20240129201730/Linux_x86_64-gcc3/null/default/Linux%205.15.0-102-generic%20(GTK%203.24.37%2Clibpulse%20not-available)/default/default/update.xml HTTP/1.1
Host: aus5.mozilla.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Cache-Control: no-cache
Pragma: no-cache
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
rule-id: unknown
rule-data-version: unknown
content-signature: x5u=https://content-signature-2.cdn.mozilla.net/chains/aus.content-signature.mozilla.org-2024-05-20-00-15-28.chain; p384ecdsa=VY4zdOrTc2m3Kia_z3T-1HAu2v5m4s0Q7JL4ob1BZ5OneHkkRg85P7LHDpV4jsPfLkLID_BX5i9Edk_AemFivli0rbQc6oBTDCtZe5SQCx0SSfcIP9yBXzz165-hepPj
strict-transport-security: max-age=31536000;
x-content-type-options: nosniff
content-security-policy: default-src 'none'; frame-ancestors 'none'
x-proxy-cache-status: EXPIRED
content-encoding: gzip
via: 1.1 google
date: Thu, 18 Apr 2024 16:41:12 GMT
content-type: text/xml; charset=utf-8
vary: Accept-Encoding
content-length: 444
age: 1
cache-control: public,max-age=90
alt-svc: clear
X-Firefox-Spdy: h2

fagila2910vikinoko.pages.dev/

172.66.47.165

200 OK

254 kB

URL User Request GET HTTP/2
fagila2910vikinoko.pages.dev/
IP
172.66.47.165:443
ASN
#13335 CLOUDFLARENET

Certificate
IssuerLet's Encrypt
Subjectfagila2910vikinoko.pages.dev
Fingerprint24:3B:85:11:7A:B9:C4:EF:68:68:E1:6E:07:9B:88:E2:0E:2A:C8:F4
ValidityWed, 21 Feb 2024 18:31:27 GMT - Tue, 21 May 2024 18:31:26 GMT

File type
HTML document, ASCII text, with very long lines (65503), with CRLF line terminators
Size
254 kB (253842 bytes)
Hash
6a0b32e63e9c47abe05290994ece6e78
1beb96c3c9c0d8bc51fdd16dacf00d3376cdf9b0
1401f6fb58a8a225ede651a8a4d8e80ef75fb1742d047322f36d3773a98921b6

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Yahoo! Inc
PhishTank	phishing	Yahoo
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET / HTTP/1.1
Host: fagila2910vikinoko.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://reagila2910vikinoko2.pages.dev/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Thu, 18 Apr 2024 16:40:55 GMT
content-type: text/html; charset=utf-8
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: W/"d13bf6cc991deb37224368583938513e"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Xuz55dFUs9wPUK%2BsKFDCMiK75WEYBYy%2FGex30ofh5pJEokwbF4cN24QWqyzzFaW4lfHm11aNxlZioknfbcY9QJjxqSDG4msh%2B7FFH5yElvIxe1KYps%2BtaxP8qsJnhXlkSaIAczF1CG7bJb5t1%2Bub"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87661971083c56a2-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (8)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML

Observations

Hash

Observations

Hash

HTTP Transactions (7)

URL GET HTTP/3

IP

ASN

Requested by

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size