| myfileupdatenow12.s3.us-west-002.backblazeb2.com/yahoomailupdated%20(1)(1).html | 149.137.142.254 | 200 | 31 kB |
URL User Request GET HTTP/1.1myfileupdatenow12.s3.us-west-002.backblazeb2.com/yahoomailupdated%20(1)(1).html IP149.137.142.254:443
CertificateIssuerLet's Encrypt Subjectbackblazeb2.com FingerprintC3:1E:E9:5B:82:2B:2D:13:7D:ED:23:05:C4:07:9A:19:B1:71:BD:D1 ValidityTue, 09 Apr 2024 14:58:28 GMT - Mon, 08 Jul 2024 14:58:27 GMT
File typeHTML document, ASCII text, with very long lines (30686) Hash628c45dacddfc857b9972a75bc377e95 22756804329414c103e26b7b4c0a0aaf82eb20b6 920dfd3ff17147b1cf6ed6d1ad8ee89e64b68f6b75d3ee89263ba5178148f701
Analyzer | Verdict | Alert | urlquery | phishing | Phishing - Yahoo |
GET /yahoomailupdated%20(1)(1).html HTTP/1.1
Host: myfileupdatenow12.s3.us-west-002.backblazeb2.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200
Server: nginx
Date: Sat, 04 May 2024 19:48:49 GMT
Content-Type: text/html
Content-Length: 30687
Connection: keep-alive
Accept-Ranges: bytes
Last-Modified: Sat, 04 May 2024 10:58:04 GMT
ETag: "628c45dacddfc857b9972a75bc377e95"
x-amz-meta-src_last_modified_millis: 1714820234786
x-amz-request-id: 88159925674c0e63
x-amz-id-2: aNPYxuWTrZls1qTBOYg42/mNrY2cziDe2
x-amz-version-id: 4_z34216d2f35c04b368cfc0317_f11676e17fc336d84_d20240504_m105804_c002_v0001141_t0041_u01714820284383
Strict-Transport-Security: max-age=63072000
|
|
| img.icons8.com/color/50/000000/google-logo.png | 185.76.9.23 | 200 OK | 1.3 kB |
URL GET HTTP/2img.icons8.com/color/50/000000/google-logo.png IP185.76.9.23:443 ASN#60068 Datacamp Limited
Requested byhttps://myfileupdatenow12.s3.us-west-002.backblazeb2.com/yahoomailupdated%20(1)(1).html CertificateIssuerLet's Encrypt Subject1004834818.rsc.cdn77.org FingerprintFD:9B:CD:AE:45:20:20:EA:0C:27:58:F8:5D:B3:8E:9F:51:11:5D:F6 ValiditySun, 14 Apr 2024 18:33:15 GMT - Sat, 13 Jul 2024 18:33:14 GMT
File typePNG image data, 50 x 50, 8-bit/color RGBA, non-interlaced Hash45717104c188f613553aa17f989bd3ec 9160dfe7f936a53a76f1a5135212d7d6f07993ba 1a120e58f75551ccd9d96cdb3c285008a750de5c4eb18b66f2b036a588031955
GET /color/50/000000/google-logo.png HTTP/1.1
Host: img.icons8.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://myfileupdatenow12.s3.us-west-002.backblazeb2.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sat, 04 May 2024 19:48:50 GMT
content-type: image/png
content-length: 1335
access-control-allow-origin: *
icon-id: 17949
icon-size: 50
icon-format: png
last-modified: Mon, 29 Apr 2024 22:50:54
version: 0.0.29
from-mongo-cache: true
from-redis-cache: false
not-found-platform: false
cache-control: public, max-age=302400
strict-transport-security: max-age=15724800; includeSubDomains
x-77-nzt: EwwBuUwJFAH3uNwAAAwBuUwKAQH3IAEAAAwB1GY4EQHXcAAAAA
x-77-nzt-ray: af5856300347693d229136661fcb1c1d
x-accel-expires: @1715094214
x-accel-date: 1714795626
x-77-cache: HIT
x-77-age: 56504
server: CDN77-Turbo
x-cache: HIT
x-age: 56504
x-77-pop: stockholmSE
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| myfileupdatenow12.s3.us-west-002.backblazeb2.com/style.css | 149.137.142.254 | 404 | 137 B |
URL GET HTTP/1.1myfileupdatenow12.s3.us-west-002.backblazeb2.com/style.css IP149.137.142.254:443
Requested byhttps://myfileupdatenow12.s3.us-west-002.backblazeb2.com/yahoomailupdated%20(1)(1).html CertificateIssuerLet's Encrypt Subjectbackblazeb2.com FingerprintC3:1E:E9:5B:82:2B:2D:13:7D:ED:23:05:C4:07:9A:19:B1:71:BD:D1 ValidityTue, 09 Apr 2024 14:58:28 GMT - Mon, 08 Jul 2024 14:58:27 GMT
File typeXML 1.0 document, ASCII text Hash6d33936199285d83ba585e6971af4c4c 5c01f6bf2d9e155daa6ca22931432592ab87b88b ea2c3fae4cff55a6bf253d466b93e75b1208eb023c39eef8f79f8e3b7e66e2e8
Analyzer | Verdict | Alert | urlquery | phishing | Phishing - Yahoo |
GET /style.css HTTP/1.1
Host: myfileupdatenow12.s3.us-west-002.backblazeb2.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://myfileupdatenow12.s3.us-west-002.backblazeb2.com/yahoomailupdated%20(1)(1).html
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404
Server: nginx
Date: Sat, 04 May 2024 19:48:50 GMT
Content-Type: application/xml
Content-Length: 137
Connection: keep-alive
x-amz-request-id: 2bab54f84c009e79
x-amz-id-2: aNAcx7WQQZsc1VDDrYm42QGNdY+MzhjeB
Cache-Control: max-age=0, no-cache, no-store
Strict-Transport-Security: max-age=63072000
|
|
| api.ipify.org/?format=jsonp&callback=getIP | 104.26.13.205 | 200 OK | 29 B |
URL GET HTTP/2api.ipify.org/?format=jsonp&callback=getIP IP104.26.13.205:443
Requested byhttps://myfileupdatenow12.s3.us-west-002.backblazeb2.com/yahoomailupdated%20(1)(1).html CertificateIssuerGoogle Trust Services LLC Subjectipify.org FingerprintC8:1A:05:47:C5:73:C6:CE:DF:1D:A6:DE:00:11:A9:9A:8C:DB:EF:A7 ValidityThu, 21 Mar 2024 19:56:02 GMT - Wed, 19 Jun 2024 19:56:01 GMT
File typeASCII text, with no line terminators Hash90a39389063c7c5716745c3b3bb4fba1 a0903c9a7e90fa3c6ddb04d0ce36abbd4c7a004f eaa6745d9d0a7698235cd6af53aad1551d975506c8405d8303282fb6d2f7ab69
GET /?format=jsonp&callback=getIP HTTP/1.1
Host: api.ipify.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://myfileupdatenow12.s3.us-west-002.backblazeb2.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 04 May 2024 19:48:50 GMT
content-type: application/javascript
content-length: 29
vary: Origin
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 87eb02b72ae2568d-OSL
X-Firefox-Spdy: h2
|
|
| myfileupdatenow12.s3.us-west-002.backblazeb2.com/favicon.ico | 149.137.142.254 | 404 | 137 B |
URL GET HTTP/1.1myfileupdatenow12.s3.us-west-002.backblazeb2.com/favicon.ico IP149.137.142.254:443
Requested byhttps://myfileupdatenow12.s3.us-west-002.backblazeb2.com/yahoomailupdated%20(1)(1).html CertificateIssuerLet's Encrypt Subjectbackblazeb2.com FingerprintC3:1E:E9:5B:82:2B:2D:13:7D:ED:23:05:C4:07:9A:19:B1:71:BD:D1 ValidityTue, 09 Apr 2024 14:58:28 GMT - Mon, 08 Jul 2024 14:58:27 GMT
File typeXML 1.0 document, ASCII text Hash6d33936199285d83ba585e6971af4c4c 5c01f6bf2d9e155daa6ca22931432592ab87b88b ea2c3fae4cff55a6bf253d466b93e75b1208eb023c39eef8f79f8e3b7e66e2e8
Analyzer | Verdict | Alert | urlquery | phishing | Phishing - Yahoo |
GET /favicon.ico HTTP/1.1
Host: myfileupdatenow12.s3.us-west-002.backblazeb2.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://myfileupdatenow12.s3.us-west-002.backblazeb2.com/yahoomailupdated%20(1)(1).html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404
Server: nginx
Date: Sat, 04 May 2024 19:48:50 GMT
Content-Type: application/xml
Content-Length: 137
Connection: keep-alive
x-amz-request-id: 14afdb779ade0630
x-amz-id-2: aNG0xkWTQZjE1LzAPYsY2BWNzY7wzxDfF
Cache-Control: max-age=0, no-cache, no-store
Strict-Transport-Security: max-age=63072000
|
|
| aus5.mozilla.org/update/3/GMP/111.0a1/20240129201730/Linux_x86_64-gcc3/null/default/Linux%205.15.0-102-generic%20(GTK%203.24.37%2Clibpulse%20not-available)/default/default/update.xml | 35.244.181.201 | | 444 B |
URL aus5.mozilla.org/update/3/GMP/111.0a1/20240129201730/Linux_x86_64-gcc3/null/default/Linux%205.15.0-102-generic%20(GTK%203.24.37%2Clibpulse%20not-available)/default/default/update.xml IP35.244.181.201:0 ASN#396982 GOOGLE-CLOUD-PLATFORM
File typeXML 1.0 document, ASCII text, with very long lines (332) Hash3b324dec137a87ef7e24a30a65b13dd0 c0faa95b2f1018e264b3a14aaf50d1003e6c27b3 6cd0b591d9239fc8564627e92a804fc261951b1cbaf5fa58a8ada3cc13f51463
GET /update/3/GMP/111.0a1/20240129201730/Linux_x86_64-gcc3/null/default/Linux%205.15.0-102-generic%20(GTK%203.24.37%2Clibpulse%20not-available)/default/default/update.xml HTTP/1.1
Host: aus5.mozilla.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Cache-Control: no-cache
Pragma: no-cache
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
rule-id: unknown
rule-data-version: unknown
content-signature: x5u=https://content-signature-2.cdn.mozilla.net/chains/aus.content-signature.mozilla.org-2024-06-09-11-51-10.chain; p384ecdsa=ePz1ph6GeM1Lg-nyEk4iCdhoc9pn_WGafhy5hGOE762lao1YsNRiHU3xqOq2nTKIZglNI_e78pG2uwH2FI8o5WNQ6c6QbVKChXSihpmxh6MTUTgn7E1NrNbU7rI2Je9L
strict-transport-security: max-age=31536000;
x-content-type-options: nosniff
content-security-policy: default-src 'none'; frame-ancestors 'none'
x-proxy-cache-status: EXPIRED
content-encoding: gzip
via: 1.1 google
date: Sat, 04 May 2024 19:48:32 GMT
content-type: text/xml; charset=utf-8
vary: Accept-Encoding
content-length: 444
age: 36
cache-control: public,max-age=90
alt-svc: clear
X-Firefox-Spdy: h2
|
|