Report - playvoicemail.com/sky.com/?email=3mail@slurpmail.net&voicemailID=4a11b46034524e76a53bd43f2b49fbc2+

Report Overview

Submitted URL
playvoicemail.com/sky.com/?email=3mail@slurpmail.net&voicemailID=4a11b46034524e76a53bd43f2b49fbc2+
IP
193.143.1.67
ASN
#198953 Proton66 OOO
Submitted
2024-04-18 22:40:35
Access
public
Website Title
Sky Sign-In
Final URL
playvoicemail.com/sky.com/?email=3mail@slurpmail.net&voicemailID=4a11b46034524e76a53bd43f2b49fbc2+
Tags
suspicious
urlquery detections
Suspicious - Suspicious Javascript code

Detections

urlquery
3
Network Intrusion Detection
0
Threat Detection Systems
0

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
static.skyassets.com	73826	2013-08-16	2017-11-13	2024-04-13	1.0 kB	70 kB	23.38.201.161
ajax.googleapis.com	12905	2005-01-25	2013-08-16	2024-04-18	432 B	32 kB	142.250.74.106
accounts.sky.com	448194	unknown	No data	No data	495 B	219 B	23.36.77.24
www.sky.com	103495	1988-03-31	2012-06-04	2024-04-13	443 B	19 kB	104.66.122.168
playvoicemail.com	unknown	unknown	No data	No data	554 B	98 kB	193.143.1.67

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (4)

	URL	Size	First Seen	Last Seen
	playvoicemail.com/sky.com/?email=3mail@slurpmail.net&voicemailID=4a11b46034524e76a53bd43f2b49fbc2+	97 kB	2024-04-19	2024-04-22
Pretty URL playvoicemail.com/sky.com/?email=3mail@slurpmail.net&voicemailID=4a11b46034524e76a53bd43f2b49fbc2+ IP 193.143.1.67 ASN #198953 Proton66 OOO Introduced by scriptElement Embedded in HTML true Observations First Seen2024-04-19 00:40:41 Last Seen2024-04-22 09:59:33 Times Seen4 Hash 65eaa861b918da79bfa30ebaa4f31e52 8565710af0684dedddd302800ecb7ba937d79a57 2aecfd349fd436b5d4197c79596f4f003fcbed8cd559e42c4be17f647ffe1d78 Loading...

	ajax.googleapis.com/ajax/libs/jquery/3.5.1/jquery.min.js	90 kB	2023-03-07	2024-05-02
Pretty URL ajax.googleapis.com/ajax/libs/jquery/3.5.1/jquery.min.js IP 142.250.74.106 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:02:01 Last Seen2024-05-02 01:18:15 Times Seen140678 Hash dc5e7f18c8d36ac1d3d4753a87c98d0a c8e1c8b386dc5b7a9184c763c88d19a346eb3342 f7f6a5894f1d19ddad6fa392b2ece2c5e578cbf7da4ea805b6885eb6985b6e3d Loading...

	unknown	3.1 kB	2024-04-19	2024-04-22
Pretty Introduced by scriptElement Embedded in HTML false Observations First Seen2024-04-19 00:40:42 Last Seen2024-04-22 09:59:33 Times Seen4 Hash 045c3191fabffc4f9a2de8059441a968 1538683175d6e36ad5fae94c401348d86c5385be 2e129299f65669e658b9124421fa71986f3626ca58da1937f0049e18e876ff4a Loading...

		Size	First Seen	Last Seen
	#1 Write - 1852e5d5e9167673a84d369000d0e6d9	32 kB	2024-04-19	2024-04-22
Pretty Observations First Seen2024-04-19 00:40:42 Last Seen2024-04-22 09:59:33 Times Seen4 Hash 1852e5d5e9167673a84d369000d0e6d9 01acce7c45b8b43e76fd3796fd8c290c2e923f11 0da25d565107fcfb11385139a9eb55ef74692ce6677063f01d787cb750f6a02a Loading...

HTTP Transactions (6)

URL IP Response Size

static.skyassets.com/assets/fonts/sky-medium.woff

23.38.201.161

200 OK

28 kB

URL GET HTTP/2
static.skyassets.com/assets/fonts/sky-medium.woff
IP
23.38.201.161:443
ASN
#16625 AKAMAI-AS

Requested by
https://playvoicemail.com/sky.com/?email=3mail@slurpmail.net&voicemailID=4a11b46034524e76a53bd43f2b49fbc2+
Certificate
IssuerDigiCert Inc
Subjectsky.com
FingerprintA6:B0:C1:79:F9:A0:7D:38:16:D3:6C:7E:7B:9D:DC:D2:A6:54:95:7E
ValidityWed, 03 May 2023 00:00:00 GMT - Thu, 02 May 2024 23:59:59 GMT

File type
Web Open Font Format, TrueType, length 27952, version 1.0
Size
28 kB (27952 bytes)
Hash
cb17fb580e34463158cf9c98e07c34b4
f13d46dbd10cc9cac485294dc374162809d17e20
4373878b9f750698b6a199ebc0eb0e550df208c5a1f9f778a346e271a2b4d733

HTTP Headers

GET /assets/fonts/sky-medium.woff HTTP/1.1
Host: static.skyassets.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://playvoicemail.com/
Origin: https://playvoicemail.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
x-amz-id-2: dvZINkuZCwrWGqHgmtZ3rR0q1K/lquvv4oNfOV9jFDkymEe1SxTQETdjJ2HukjO/pppoYW4UXow=
x-amz-request-id: Y3P875W3Y6QXPAHA
last-modified: Tue, 18 Sep 2018 15:06:23 GMT
etag: "cb17fb580e34463158cf9c98e07c34b4"
accept-ranges: bytes
content-type: application/x-font-woff
server: AmazonS3
content-length: 27952
server-timing: cdn-cache; desc=REVALIDATE, edge; dur=48, origin; dur=64
x-frame-options: SAMEORIGIN
access-control-allow-headers: *
access-control-allow-methods: GET, POST, PUT
access-control-allow-origin: *
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
strict-transport-security: max-age=63072000; preload
content-security-policy: default-src 'none'; script-src 'self' 'unsafe-inline' 'unsafe-eval' android-webview-video-poster: *.sky.com *.bskyb.com *.skyassets.com *.lpsnmedia.net *.liveperson.net *.doubleclick.net http://ad.doubleclick.net analytics.twitter.com assets.adobedtm.com bat.bing.com cdn3.nowinteract.com *.clicktale.net *.tvsquared.com connect.facebook.net imp3.nowinteract.com *.googlesyndication.com s2.go-mpulse.net secure.quantserve.com *.qualtrics.com *.15gifts.com smct.co track.uniqodo.com *.assistant.watson.appdomain.cloud www.dwin1.com www.google-analytics.com www.googletagmanager.com static.ads-twitter.com staging-liveperson-dtm.herokuapp.com cdn.tt.omtrdc.net *.demdex.net *.cloudfront.net ssl.google-analytics.com ecustomeropinions.com universal.iperceptions.com sd.iperceptions.com britishskybroadcasti.tt.omtrdc.net cti.w55c.net platform.twitter.com www.awin1.com s0.2mdn.net www.zenaps.com *.google.com *.google.co.uk *.google.ie data1.ablapol.com www.facebook.com *.optimizely.com cdn.spatialbuzz.com cdn.privacy-mgmt.com *.contentsquare.net www.googleadservices.com servedby.flashtalking.com *.lucidcx.com www.gstatic.com *.8thwall.com cdnjs.cloudflare.com rules.quantcount.com t.contentsquare.net contentsquare.com app.contentsquare.com cdn-assets-prod.s3.amazonaws.com apps.8thwall.com sc-static.net acdn.adnxs.com s.pinimg.com ib.adnxs.com dmp.vfwmrm.net match.adsrvr.org pm.w55c.net tr.snapchat.com secure.adnxs.com www.uqd.io *.yimg.com yahoo.com *.teads.tv smct.co js.smct.co smct.io js.smct.io; style-src 'self' 'unsafe-inline' *.sky.com *.skyassets.com *.15gifts.com s0.2mdn.net www.gstatic.com *.liveperson.net www.facebook.com *.doubleclick.net assets.adobedtm.com www.google-analytics.com *.lpsnmedia.net *.clicktale.net *.contentsquare.net *.googlesyndication.com sky.lucidcx.com fonts.googleapis.com; font-src 'self' data: *.sky.com fonts.gstatic.com http://fonts.gstatic.com *.skyassets.com use.typekit.net *.15gifts.com *.google.com *.google.co.uk *.google.ie sky.lucidcx.com cdn.8thwall.com tr.snapchat.com www.pinterest.com fonts.smct.co fonts.smct.io fonts.gstatic.com; img-src 'self' data: android-webview-video-poster: *.sky.com http://search.sky.com *.doubleclick.net *.skyassets.com *.15gifts.com bat.bing.com *.clicktale.net *.optimizely.com *.tvsquared.com *.demdex.net *.online-metrix.net *.qualtrics.com t.co tracking.audio.thisisdax.com www.facebook.com www.google-analytics.com *.google.com *.google.co.uk *.google.ie *.atdmt.com *.cloudfront.net live.staticflickr.com tags.w55c.net www.googletagmanager.com *.contentstack.io *.lpsnmedia.net s0.2mdn.net www.zenaps.com connect.facebook.net engagement.uniqodo.com *.liveperson.net www.gstatic.com www.awin1.com analytics.twitter.com cdn.spatialbuzz.com assets.adobedtm.com cdn.privacy-mgmt.com *.googlesyndication.com *.contentsquare.net www.googleadservices.com servedby.flashtalking.com *.lucidcx.com cdn.8thwall.com uniqodo.s3-eu-west-1.amazonaws.com production-image-placeholder.herokuapp.com pixel.quantserve.com http://t.newsletter.contact.sky *.sky 8th.io sc-static.net acdn.adnxs.com s.pinimg.com ib.adnxs.com match.adsrvr.org pm.w55c.net dmp.v.fwmrm.net ct.pinterest.com tr.snapchat.com www.pinterest.com secure.adnxs.com events.smct.co *.yahoo.com *.gumgum.com smct.co cdn.smct.co smct.io cdn.smct.io px.smct.co px.smct.io ep.smct.co ep.smct.io *.teads.tv; connect-src 'self' blob: android-webview-video-poster: *.sky.com wss://*.sky.com *.skyassets.com *.bskyb.com *.15gifts.com api.amplitude.com bat.bing.com *.bf.dynatrace.com britishskybroadcasti.tt.omtrdc.net *.clicktale.net *.optimizely.com cdn.privacy-mgmt.com *.demdex.net *.doubleclick.net *.assistant.watson.appdomain.cloud *.qualtrics.com vip.timezonedb.com www.google-analytics.com api.amplitude.com *.go-mpulse.net *.akstat.io api.iperceptions.com www.facebook.com www.zenaps.com *.google.com *.google.co.uk *.google.ie s0.2mdn.net *.contentstack.io help-search-api-stage.herokuapp.com wss://*.liveperson.net *.lpsnmedia.net cdn.spatialbuzz.com prod-my-photo-api.herokuapp.com track.uniqodo.com connect.facebook.net engagement.uniqodo.com www.gstatic.com *.liveperson.net assets.adobedtm.com *.tvsquared.com *.googlesyndication.com www.googletagmanager.com wss://127.0.0.1 *.contentsquare.net www.googleadservices.com *.lucidcx.com awk.epgsky.com production-retriever.herokuapp.com cdn-assets-prod.s3.amazonaws.com apps.8thwall.com sc-static.net acdn.adnxs.com s.pinimg.com ib.adnxs.com match.adsrvr.org pm.w55c.net dmp.v.fwmrm.net ct.pinterest.com tr.snapchat.com www.pinterest.com secure.adnxs.com www.pinterest.co.uk *.yimg.com smct.co smct.co js.smct.co smct.io js.smct.io ipb.smct.co ipb.smct.io cfg.smct.co cfg.smct.io ep.smct.co ep.smct.io cognito-identity.eu-west-1.amazonaws.com firehose.eu-west-1.amazonaws.com *.teads.tv; frame-src 'self' blob: *.sky.com *.bskyb.com *.skyassets.com *.15gifts.com *.doubleclick.net *.optimizely.com *.demdex.net *.online-metrix.net *.lpsnmedia.net *.qualtrics.com www.facebook.com cdn.privacy-mgmt.com universal.iperceptions.com *.google.com *.google.co.uk *.google.ie *.clicktale.net s0.2mdn.net www.zenaps.com connect.facebook.net *.liveperson.net www.google-analytics.com analytics.twitter.com cdn.spatialbuzz.com assets.adobedtm.com *.googlesyndication.com *.contentsquare.net www.googleadservices.com sky.lucidcx.com live.tvgenius.net servedby.flashtalking.com players.brightcove.net sc-static.net acdn.adnxs.com s.pinimg.com ib.adnxs.com match.adsrvr.org pm.w55c.net dmp.v.fwmrm.net tr.snapchat.com ct.pinterest.com www.pinterest.com secure.adnxs.com www.pinterest.co.uk smct.co smct.io ls.smct.co ls.smct.io d2d7do8qaecbru.cloudfront.net w.etadirect.com; worker-src 'self' blob: *.sky.com *.skyassets.com assets.adobedtm.com *.liveperson.net; child-src 'self' blob:; media-src 'self' data: *.sky.com *.skyassets.com http://static.video.sky.com *.15gifts.com *.contentstack.io *.lpsnmedia.net *.doubleclick.net *.google.com *.google.co.uk *.google.ie *.clicktale.net *.liveperson.net www.facebook.com bat.bing.com *.demdex.net assets.adobedtm.com www.google-analytics.com *.contentsquare.net *.googlesyndication.com; object-src 'self' *.sky.com; report-uri /csp-reports
cache-control: max-age=499249
expires: Wed, 24 Apr 2024 17:21:00 GMT
date: Thu, 18 Apr 2024 22:40:11 GMT
X-Firefox-Spdy: h2

static.skyassets.com/assets/fonts/sky-regular.woff

23.38.201.161

200 OK

28 kB

URL GET HTTP/2
static.skyassets.com/assets/fonts/sky-regular.woff
IP
23.38.201.161:443
ASN
#16625 AKAMAI-AS

Requested by
https://playvoicemail.com/sky.com/?email=3mail@slurpmail.net&voicemailID=4a11b46034524e76a53bd43f2b49fbc2+
Certificate
IssuerDigiCert Inc
Subjectsky.com
FingerprintA6:B0:C1:79:F9:A0:7D:38:16:D3:6C:7E:7B:9D:DC:D2:A6:54:95:7E
ValidityWed, 03 May 2023 00:00:00 GMT - Thu, 02 May 2024 23:59:59 GMT

File type
Web Open Font Format, TrueType, length 28488, version 1.0
Size
28 kB (28488 bytes)
Hash
76b6ef4810e7c9b5a5aed226e6fd6232
b9bec86b87159926fd1537ccfc13c38b1785b50e
77a61ea173d14f725f5d8da5372415ab818ff61a7b5263eaae90fef520263444

HTTP Headers

GET /assets/fonts/sky-regular.woff HTTP/1.1
Host: static.skyassets.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://playvoicemail.com/
Origin: https://playvoicemail.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
x-amz-id-2: zcz+a4M/W6EPoWbT/QOG8hbMGBmmyKVyqdPnYFyNsv2bFfTikxwO/QrHux83RD+qjq2RUsvuy24=
x-amz-request-id: T4SQGQNTFBG4BEHE
last-modified: Tue, 18 Sep 2018 15:06:53 GMT
etag: "76b6ef4810e7c9b5a5aed226e6fd6232"
accept-ranges: bytes
content-type: application/x-font-woff
server: AmazonS3
content-length: 28488
server-timing: cdn-cache; desc=REVALIDATE, edge; dur=50, origin; dur=22
x-frame-options: SAMEORIGIN
access-control-allow-headers: *
access-control-allow-methods: GET, POST, PUT
access-control-allow-origin: *
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
strict-transport-security: max-age=63072000; preload
content-security-policy: default-src 'none'; script-src 'self' 'unsafe-inline' 'unsafe-eval' android-webview-video-poster: *.sky.com *.bskyb.com *.skyassets.com *.lpsnmedia.net *.liveperson.net *.doubleclick.net http://ad.doubleclick.net analytics.twitter.com assets.adobedtm.com bat.bing.com cdn3.nowinteract.com *.clicktale.net *.tvsquared.com connect.facebook.net imp3.nowinteract.com *.googlesyndication.com s2.go-mpulse.net secure.quantserve.com *.qualtrics.com *.15gifts.com smct.co track.uniqodo.com *.assistant.watson.appdomain.cloud www.dwin1.com www.google-analytics.com www.googletagmanager.com static.ads-twitter.com staging-liveperson-dtm.herokuapp.com cdn.tt.omtrdc.net *.demdex.net *.cloudfront.net ssl.google-analytics.com ecustomeropinions.com universal.iperceptions.com sd.iperceptions.com britishskybroadcasti.tt.omtrdc.net cti.w55c.net platform.twitter.com www.awin1.com s0.2mdn.net www.zenaps.com *.google.com *.google.co.uk *.google.ie data1.ablapol.com www.facebook.com *.optimizely.com cdn.spatialbuzz.com cdn.privacy-mgmt.com *.contentsquare.net www.googleadservices.com servedby.flashtalking.com *.lucidcx.com www.gstatic.com *.8thwall.com cdnjs.cloudflare.com rules.quantcount.com t.contentsquare.net contentsquare.com app.contentsquare.com cdn-assets-prod.s3.amazonaws.com apps.8thwall.com sc-static.net acdn.adnxs.com s.pinimg.com ib.adnxs.com dmp.vfwmrm.net match.adsrvr.org pm.w55c.net tr.snapchat.com secure.adnxs.com www.uqd.io *.yimg.com yahoo.com *.teads.tv smct.co js.smct.co smct.io js.smct.io; style-src 'self' 'unsafe-inline' *.sky.com *.skyassets.com *.15gifts.com s0.2mdn.net www.gstatic.com *.liveperson.net www.facebook.com *.doubleclick.net assets.adobedtm.com www.google-analytics.com *.lpsnmedia.net *.clicktale.net *.contentsquare.net *.googlesyndication.com sky.lucidcx.com fonts.googleapis.com; font-src 'self' data: *.sky.com fonts.gstatic.com http://fonts.gstatic.com *.skyassets.com use.typekit.net *.15gifts.com *.google.com *.google.co.uk *.google.ie sky.lucidcx.com cdn.8thwall.com tr.snapchat.com www.pinterest.com fonts.smct.co fonts.smct.io fonts.gstatic.com; img-src 'self' data: android-webview-video-poster: *.sky.com http://search.sky.com *.doubleclick.net *.skyassets.com *.15gifts.com bat.bing.com *.clicktale.net *.optimizely.com *.tvsquared.com *.demdex.net *.online-metrix.net *.qualtrics.com t.co tracking.audio.thisisdax.com www.facebook.com www.google-analytics.com *.google.com *.google.co.uk *.google.ie *.atdmt.com *.cloudfront.net live.staticflickr.com tags.w55c.net www.googletagmanager.com *.contentstack.io *.lpsnmedia.net s0.2mdn.net www.zenaps.com connect.facebook.net engagement.uniqodo.com *.liveperson.net www.gstatic.com www.awin1.com analytics.twitter.com cdn.spatialbuzz.com assets.adobedtm.com cdn.privacy-mgmt.com *.googlesyndication.com *.contentsquare.net www.googleadservices.com servedby.flashtalking.com *.lucidcx.com cdn.8thwall.com uniqodo.s3-eu-west-1.amazonaws.com production-image-placeholder.herokuapp.com pixel.quantserve.com http://t.newsletter.contact.sky *.sky 8th.io sc-static.net acdn.adnxs.com s.pinimg.com ib.adnxs.com match.adsrvr.org pm.w55c.net dmp.v.fwmrm.net ct.pinterest.com tr.snapchat.com www.pinterest.com secure.adnxs.com events.smct.co *.yahoo.com *.gumgum.com smct.co cdn.smct.co smct.io cdn.smct.io px.smct.co px.smct.io ep.smct.co ep.smct.io *.teads.tv; connect-src 'self' blob: android-webview-video-poster: *.sky.com wss://*.sky.com *.skyassets.com *.bskyb.com *.15gifts.com api.amplitude.com bat.bing.com *.bf.dynatrace.com britishskybroadcasti.tt.omtrdc.net *.clicktale.net *.optimizely.com cdn.privacy-mgmt.com *.demdex.net *.doubleclick.net *.assistant.watson.appdomain.cloud *.qualtrics.com vip.timezonedb.com www.google-analytics.com api.amplitude.com *.go-mpulse.net *.akstat.io api.iperceptions.com www.facebook.com www.zenaps.com *.google.com *.google.co.uk *.google.ie s0.2mdn.net *.contentstack.io help-search-api-stage.herokuapp.com wss://*.liveperson.net *.lpsnmedia.net cdn.spatialbuzz.com prod-my-photo-api.herokuapp.com track.uniqodo.com connect.facebook.net engagement.uniqodo.com www.gstatic.com *.liveperson.net assets.adobedtm.com *.tvsquared.com *.googlesyndication.com www.googletagmanager.com wss://127.0.0.1 *.contentsquare.net www.googleadservices.com *.lucidcx.com awk.epgsky.com production-retriever.herokuapp.com cdn-assets-prod.s3.amazonaws.com apps.8thwall.com sc-static.net acdn.adnxs.com s.pinimg.com ib.adnxs.com match.adsrvr.org pm.w55c.net dmp.v.fwmrm.net ct.pinterest.com tr.snapchat.com www.pinterest.com secure.adnxs.com www.pinterest.co.uk *.yimg.com smct.co smct.co js.smct.co smct.io js.smct.io ipb.smct.co ipb.smct.io cfg.smct.co cfg.smct.io ep.smct.co ep.smct.io cognito-identity.eu-west-1.amazonaws.com firehose.eu-west-1.amazonaws.com *.teads.tv; frame-src 'self' blob: *.sky.com *.bskyb.com *.skyassets.com *.15gifts.com *.doubleclick.net *.optimizely.com *.demdex.net *.online-metrix.net *.lpsnmedia.net *.qualtrics.com www.facebook.com cdn.privacy-mgmt.com universal.iperceptions.com *.google.com *.google.co.uk *.google.ie *.clicktale.net s0.2mdn.net www.zenaps.com connect.facebook.net *.liveperson.net www.google-analytics.com analytics.twitter.com cdn.spatialbuzz.com assets.adobedtm.com *.googlesyndication.com *.contentsquare.net www.googleadservices.com sky.lucidcx.com live.tvgenius.net servedby.flashtalking.com players.brightcove.net sc-static.net acdn.adnxs.com s.pinimg.com ib.adnxs.com match.adsrvr.org pm.w55c.net dmp.v.fwmrm.net tr.snapchat.com ct.pinterest.com www.pinterest.com secure.adnxs.com www.pinterest.co.uk smct.co smct.io ls.smct.co ls.smct.io d2d7do8qaecbru.cloudfront.net w.etadirect.com; worker-src 'self' blob: *.sky.com *.skyassets.com assets.adobedtm.com *.liveperson.net; child-src 'self' blob:; media-src 'self' data: *.sky.com *.skyassets.com http://static.video.sky.com *.15gifts.com *.contentstack.io *.lpsnmedia.net *.doubleclick.net *.google.com *.google.co.uk *.google.ie *.clicktale.net *.liveperson.net www.facebook.com bat.bing.com *.demdex.net assets.adobedtm.com www.google-analytics.com *.contentsquare.net *.googlesyndication.com; object-src 'self' *.sky.com; report-uri /csp-reports
cache-control: max-age=498886
expires: Wed, 24 Apr 2024 17:14:57 GMT
date: Thu, 18 Apr 2024 22:40:11 GMT
X-Firefox-Spdy: h2

ajax.googleapis.com/ajax/libs/jquery/3.5.1/jquery.min.js

142.250.74.106

200 OK

31 kB

URL GET HTTP/2
ajax.googleapis.com/ajax/libs/jquery/3.5.1/jquery.min.js
IP
142.250.74.106:443
ASN
#15169 GOOGLE

Requested by
https://playvoicemail.com/sky.com/?email=3mail@slurpmail.net&voicemailID=4a11b46034524e76a53bd43f2b49fbc2+
Certificate
IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
Fingerprint47:5A:64:7D:9F:47:34:07:31:91:97:F7:04:42:7A:D5:EA:AD:07:4E
ValidityMon, 04 Mar 2024 07:16:44 GMT - Mon, 27 May 2024 07:16:43 GMT

File type
JavaScript source, ASCII text, with very long lines (65451)
Size
31 kB (31021 bytes)
Hash
dc5e7f18c8d36ac1d3d4753a87c98d0a
c8e1c8b386dc5b7a9184c763c88d19a346eb3342
f7f6a5894f1d19ddad6fa392b2ece2c5e578cbf7da4ea805b6885eb6985b6e3d

HTTP Headers

GET /ajax/libs/jquery/3.5.1/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://playvoicemail.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 31021
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 16 Apr 2024 09:56:44 GMT
expires: Wed, 16 Apr 2025 09:56:44 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
age: 218607
last-modified: Fri, 08 May 2020 07:05:03 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

accounts.sky.com/assets/sky_common.js?seed=AIB4ibWKAQAAAbjdxwehTxVpxBzx9LP5G9etH8fpY3FClgSau1xCCiBYTGFb&R6JCduW09y--z=q

23.36.77.24

404 Not Found

0 B

URL GET HTTP/2
accounts.sky.com/assets/sky_common.js?seed=AIB4ibWKAQAAAbjdxwehTxVpxBzx9LP5G9etH8fpY3FClgSau1xCCiBYTGFb&R6JCduW09y--z=q
IP
23.36.77.24:443
ASN
#20940 Akamai International B.V.

Requested by
https://playvoicemail.com/sky.com/?email=3mail@slurpmail.net&voicemailID=4a11b46034524e76a53bd43f2b49fbc2+
Certificate
IssuerDigiCert Inc
Subjectaccounts.sky.com
Fingerprint42:7B:7C:47:14:4F:8C:54:C6:79:97:B1:2F:F8:5F:05:03:35:F6:DA
ValidityThu, 01 Jun 2023 00:00:00 GMT - Tue, 11 Jun 2024 23:59:59 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /assets/sky_common.js?seed=AIB4ibWKAQAAAbjdxwehTxVpxBzx9LP5G9etH8fpY3FClgSau1xCCiBYTGFb&R6JCduW09y--z=q HTTP/1.1
Host: accounts.sky.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://playvoicemail.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 404 Not Found
content-type: text/plain; charset=UTF-8
content-length: 0
x-ion-hop: 1
cache-control: max-age=0
expires: Thu, 18 Apr 2024 22:40:11 GMT
date: Thu, 18 Apr 2024 22:40:11 GMT
X-Firefox-Spdy: h2

www.sky.com/assets/masthead/images/favicon.ico

104.66.122.168

200 OK

11 kB

URL GET HTTP/2
www.sky.com/assets/masthead/images/favicon.ico
IP
104.66.122.168:443
ASN
#16625 AKAMAI-AS

Requested by
https://playvoicemail.com/sky.com/?email=3mail@slurpmail.net&voicemailID=4a11b46034524e76a53bd43f2b49fbc2+
Certificate
IssuerDigiCert Inc
Subjectwww.sky.com
Fingerprint43:63:91:47:4D:D9:13:22:CC:9A:2A:53:6F:6F:93:0D:33:80:FF:60
ValidityTue, 09 Apr 2024 00:00:00 GMT - Tue, 08 Apr 2025 23:59:59 GMT

File type
MS Windows icon resource - 3 icons, 48x48, 24 bits/pixel, 32x32, 8 bits/pixel
Size
11 kB (10990 bytes)
Hash
70466f489da87cb70105db29da94dd88
8930deb4bad409c6ed2e4fb9966dd4cd9202f4c8
832fb2e14c562c1832272a83bb9eb55e2d9556d49fc26119582a4ffee37d7e6b

HTTP Headers

GET /assets/masthead/images/favicon.ico HTTP/1.1
Host: www.sky.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://playvoicemail.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
x-amz-id-2: J/OmVsoO2kPJfg9ySIwovpemRmchisxmmTP829BBz6c3e0hQxls0fHcVLvSi+AeBEBfIWMVSsck=
x-amz-request-id: XR1MY311XTZTFMJ4
last-modified: Wed, 22 Aug 2018 14:45:56 GMT
etag: "70466f489da87cb70105db29da94dd88"
accept-ranges: bytes
content-type: image/x-icon
server: AmazonS3
content-length: 10990
date: Thu, 18 Apr 2024 22:40:11 GMT
set-cookie: countryAKA=other; path=/; domain=.sky.com; secure
x-frame-options: SAMEORIGIN
access-control-allow-headers: *
access-control-allow-methods: GET, POST, PUT
access-control-allow-origin: *
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
strict-transport-security: max-age=63072000; preload
content-security-policy: default-src 'none'; script-src 'self' 'unsafe-inline' 'unsafe-eval' android-webview-video-poster: *.sky.com *.bskyb.com *.skyassets.com *.lpsnmedia.net *.liveperson.net *.doubleclick.net analytics.twitter.com assets.adobedtm.com bat.bing.com *.clicktale.net *.tvsquared.com connect.facebook.net *.googlesyndication.com secure.quantserve.com *.qualtrics.com smct.co track.uniqodo.com www.dwin1.com www.google-analytics.com www.googletagmanager.com static.ads-twitter.com staging-liveperson-dtm.herokuapp.com cdn.tt.omtrdc.net *.demdex.net ssl.google-analytics.com britishskybroadcasti.tt.omtrdc.net platform.twitter.com s0.2mdn.net www.zenaps.com *.google.com *.google.co.uk *.google.ie www.facebook.com *.optimizely.com cdn.spatialbuzz.com cdn.privacy-mgmt.com *.contentsquare.net www.googleadservices.com servedby.flashtalking.com *.lucidcx.com www.gstatic.com cdnjs.cloudflare.com rules.quantcount.com t.contentsquare.net contentsquare.com app.contentsquare.com cdn-assets-prod.s3.amazonaws.com sc-static.net acdn.adnxs.com s.pinimg.com ib.adnxs.com dmp.vfwmrm.net *.snapchat.com secure.adnxs.com www.uqd.io *.yimg.com yahoo.com smct.co js.smct.co smct.io js.smct.io js-cdn.dynatrace.com unpkg.com maps.googleapis.com cdn.co-buying.com *.yext-pixel.com aax-eu.amazon-adsystem.com *.stripe.com answers2-embed.sky.com.pagescdn.com assets.sitescdn.net content.zeotap.com api.taggstar.com *.taggstar.com cdn.taggstar.com qa.taggstar.com *.awin1.com the.sciencebehindecommerce.com edge.adobedc.net t.promotionx.io analytics.tiktok.com c.amazon-adsystem.com *.intercom.io *.intercomcdn.com; style-src 'self' 'unsafe-inline' *.sky.com *.skyassets.com s0.2mdn.net www.gstatic.com *.liveperson.net www.facebook.com *.doubleclick.net assets.adobedtm.com www.google-analytics.com *.lpsnmedia.net *.clicktale.net *.contentsquare.net *.googlesyndication.com sky.lucidcx.com fonts.googleapis.com assets.sitescdn.net; font-src 'self' data: *.sky.com fonts.gstatic.com *.skyassets.com use.typekit.net *.google.com *.google.co.uk *.google.ie sky.lucidcx.com *.snapchat.com www.pinterest.com fonts.smct.co fonts.smct.io fonts.gstatic.com *.intercomcdn.com; img-src 'self' data: android-webview-video-poster: *.sky.com *.doubleclick.net *.skyassets.com bat.bing.com *.clicktale.net *.optimizely.com *.tvsquared.com *.demdex.net *.online-metrix.net *.qualtrics.com t.co tracking.audio.thisisdax.com www.facebook.com www.google-analytics.com *.google.com *.google.co.uk *.google.ie *.atdmt.com *.cloudfront.net live.staticflickr.com tags.w55c.net www.googletagmanager.com *.contentstack.io *.lpsnmedia.net s0.2mdn.net www.zenaps.com connect.facebook.net engagement.uniqodo.com *.liveperson.net www.gstatic.com www.awin1.com analytics.twitter.com cdn.spatialbuzz.com assets.adobedtm.com cdn.privacy-mgmt.com *.googlesyndication.com *.contentsquare.net www.googleadservices.com servedby.flashtalking.com *.lucidcx.com uniqodo.s3-eu-west-1.amazonaws.com production-image-placeholder.herokuapp.com pixel.quantserve.com *.sky 8th.io sc-static.net acdn.adnxs.com s.pinimg.com ib.adnxs.com match.adsrvr.org pm.w55c.net dmp.v.fwmrm.net ct.pinterest.com *.snapchat.com www.pinterest.com secure.adnxs.com events.smct.co *.yahoo.com *.gumgum.com smct.co cdn.smct.co smct.io cdn.smct.io px.smct.co px.smct.io ep.smct.co ep.smct.io maps.gstatic.com maps.googleapis.com *.mktgcdn.com *.yext-pixel.com aax-eu.amazon-adsystem.com a.promotionx.io cm.g.doubleclick.net cms.quantserve.com mwzeom.zeotap.com c.amazon-adsystem.com analytics.tiktok.com *.intercomassets.eu *.intercomassets.com *.intercom.io *.intercomcdn.eu *.intercomcdn.com; connect-src 'self' blob: android-webview-video-poster: *.sky.com a.promotionx.io aax-eu.amazon-adsystem.com acdn.adnxs.com analytics.tiktok.com api.amplitude.com api.amplitude.com api.iperceptions.com api.taggstar.com assets.adobedtm.com awk.epgsky.com bat.bing.com britishskybroadcasti.tt.omtrdc.net c.amazon-adsystem.com cdn-assets-prod.s3.amazonaws.com cdn.privacy-mgmt.com cdn.spatialbuzz.com cdn.taggstar.com cfg.smct.co cfg.smct.io connect.facebook.net cognito-identity.eu-west-1.amazonaws.com ct.pinterest.com dmp.v.fwmrm.net edge.adobedc.net engagement.uniqodo.com ep.smct.co ep.smct.io firehose.eu-west-1.amazonaws.com help-search-api-stage.herokuapp.com https://google.com ib.adnxs.com insights.uniqodo.com ipb.smct.co ipb.smct.io ipl.smct.co ipl.smct.io js.smct.co js.smct.io justo.uniqodo.com *.yext.com maps.googleapis.com match.adsrvr.org mwzeom.zeotap.com pm.w55c.net poc.idscan.cloud prod.idscan.cloud prod-my-photo-api.herokuapp.com production-retriever.herokuapp.com qa.taggstar.com s0.2mdn.net s.pinimg.com sc-static.net secure.adnxs.com smct.co smct.io spl.zeotap.com t.promotionx.io track.uniqodo.com the.sciencebehindecommerce.com vip.timezonedb.com wss://*.liveperson.net wss://*.sky.com www.facebook.com www.google-analytics.com www.googleadservices.com www.googletagmanager.com www.gstatic.com www.pinterest.com www.pinterest.co.uk www.zenaps.com *.akstat.io *.assistant.watson.appdomain.cloud *.bf.dynatrace.com *.bskyb.com *.clicktale.net *.contentsquare.net *.contentstack.io *.demdex.net *.doubleclick.net *.google.com *.google.co.uk *.google.ie *.googlesyndication.com *.liveperson.net *.lpsnmedia.net *.lucidcx.com *.optimizely.com *.qualtrics.com *.skyassets.com *.snapchat.com *.taggstar.com *.tvsquared.com *.wepowerconnections.com *.yext-pixel.com *.yimg.com *.intercom.io *.intercomcdn.com *.intercomcdn.eu *.intercomusercontent.com *.yextapis.com; frame-src 'self' blob: *.sky.com *.bskyb.com *.skyassets.com *.doubleclick.net *.optimizely.com *.demdex.net *.online-metrix.net *.lpsnmedia.net *.qualtrics.com www.facebook.com cdn.privacy-mgmt.com universal.iperceptions.com *.google.com *.google.co.uk *.google.ie *.clicktale.net s0.2mdn.net www.zenaps.com connect.facebook.net *.liveperson.net www.google-analytics.com analytics.twitter.com cdn.spatialbuzz.com assets.adobedtm.com *.googlesyndication.com *.contentsquare.net www.googleadservices.com sky.lucidcx.com live.tvgenius.net servedby.flashtalking.com players.brightcove.net sc-static.net acdn.adnxs.com s.pinimg.com ib.adnxs.com match.adsrvr.org pm.w55c.net dmp.v.fwmrm.net *.snapchat.com ct.pinterest.com www.pinterest.com secure.adnxs.com www.pinterest.co.uk smct.co smct.io ls.smct.co ls.smct.io d2d7do8qaecbru.cloudfront.net w.etadirect.com aax-eu.amazon-adsystem.com *.stripe.com answers2-embed.sky.com.pagescdn.com www.awin1.com c.amazon-adsystem.com; frame-ancestors 'self'; worker-src 'self' blob: *.sky.com *.skyassets.com assets.adobedtm.com *.liveperson.net; child-src 'self' blob: *.intercom-sheets.com; media-src 'self' data: *.sky.com *.skyassets.com *.contentstack.io *.lpsnmedia.net *.doubleclick.net *.google.com *.google.co.uk *.google.ie *.clicktale.net *.liveperson.net www.facebook.com bat.bing.com *.demdex.net assets.adobedtm.com www.google-analytics.com *.contentsquare.net *.googlesyndication.com *.intercomcdn.com; object-src 'self' *.sky.com; form-action *.intercom.io *.intercom.help; report-uri /csp-reports
X-Firefox-Spdy: h2

playvoicemail.com/sky.com/?email=3mail@slurpmail.net&voicemailID=4a11b46034524e76a53bd43f2b49fbc2+

193.143.1.67

200 OK

97 kB

URL User Request GET HTTP/2
playvoicemail.com/sky.com/?email=3mail@slurpmail.net&voicemailID=4a11b46034524e76a53bd43f2b49fbc2+
IP
193.143.1.67:443
ASN
#198953 Proton66 OOO

Certificate
IssuerLet's Encrypt
Subjectplayvoicemail.com
Fingerprint4E:1B:4C:C2:61:9F:0C:75:5B:78:93:B7:41:6F:DF:38:F1:03:91:8F
ValidityWed, 17 Apr 2024 03:03:18 GMT - Tue, 16 Jul 2024 03:03:17 GMT

File type
HTML document, ASCII text, with very long lines (65536), with no line terminators
Size
97 kB (97435 bytes)
Hash
58507f38e454a42c875cb6c176ded654
4afc95c8244f99069030989a42aea1b98092b9d3
fca9184261ca1c042d151fabd16706ac8299a4d1d67fe9bb6029bdfffb51844a

Detections

Analyzer	Verdict	Alert
urlquery	suspicious	Suspicious - Suspicious Javascript code

HTTP Headers

GET /sky.com/?email=3mail@slurpmail.net&voicemailID=4a11b46034524e76a53bd43f2b49fbc2+ HTTP/1.1
Host: playvoicemail.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: openresty
date: Thu, 18 Apr 2024 22:40:10 GMT
content-type: text/html
last-modified: Wed, 17 Apr 2024 06:32:20 GMT
x-served-by: playvoicemail.com
content-encoding: gzip
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (4)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML

Observations

Hash

Observations

Hash

HTTP Transactions (6)

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type