Report - flikois.com/index/index/index/login/index.html/index/login/index/login/index.html/index/login/index.html/index/login/index.html/index/login/index.html/index/login/index.html/index/login/index.html/index/login/index.html/index/login/index.html/index/login/index.html/index/login/index.html/index/login/index.html/index/login/index.html/index/login/index.html/index/login/index.html/index/login/index.html/index/login/index.html/index/login/index.html/index/login/index.html

Report Overview

Submitted URL
flikois.com/index/index/index/login/index.html/index/login/index/login/index.html/index/login/index.html/index/login/index.html/index/login/index.html/index/login/index.html/index/login/index.html/index/login/index.html/index/login/index.html/index/login/index.html/index/login/index.html/index/login/index.html/index/login/index.html/index/login/index.html/index/login/index.html/index/login/index.html/index/login/index.html/index/login/index.html/index/login/index.html
IP
216.83.41.87
ASN
#64050 BGPNET Global ASN
Submitted
2024-04-23 18:07:37
Access
public
Website Title
Amazon
Final URL
flikois.com/index/login/index.html
Tags
amazon phishing
urlquery detections
Phishing - Amazon

Detections

urlquery
12
Network Intrusion Detection
0
Threat Detection Systems
0

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
flikois.com	unknown	2024-03-03	2024-03-04	2024-03-26	6.2 kB	1.2 MB	216.83.41.87
cdn.dcloud.net.cn	116868	2013-07-17	2018-09-15	2024-04-20	428 B	577 B	124.221.241.116

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

JavaScript (4)

	URL	Size	First Seen	Last Seen
	flikois.com/static/jquery-3.5.0.min.js	90 kB	2023-03-07	2024-05-03
Pretty URL flikois.com/static/jquery-3.5.0.min.js IP 216.83.41.87 ASN #64050 BGPNET Global ASN Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:03:07 Last Seen2024-05-03 22:21:39 Times Seen56530 Hash 12108007906290015100837a6a61e9f4 1d6ae46f2ffa213dede37a521b011ec1cd8d1ad3 c4dccdd9ae25b64078e0c73f273de94f8894d5c99e4741645ece29aeefc9c5a4 Loading...

	flikois.com/static/layer/layer.js	22 kB	2023-04-05	2024-05-01
Pretty URL flikois.com/static/layer/layer.js IP 216.83.41.87 ASN #64050 BGPNET Global ASN Introduced by scriptElement Embedded in HTML false Observations First Seen2023-04-05 06:05:22 Last Seen2024-05-01 16:53:09 Times Seen1006 Hash d0c975e34297f3e44e99c9d83555ffc1 7e465bd79e65428cf07e5991196cff512ce44a4b 691aad750624d84b17f2fbb73a4982860edd18837f3000c5b660ac82bf408e82 Loading...

	flikois.com/index/login/index.html	0 B	2023-03-07	2024-05-03
Pretty URL flikois.com/index/login/index.html IP 216.83.41.87 ASN #64050 BGPNET Global ASN Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 01:01:59 Last Seen2024-05-03 23:42:05 Times Seen37318872 Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Loading...

	flikois.com/index/login/index.html	0 B	2023-03-07	2024-05-03
Pretty URL flikois.com/index/login/index.html IP 216.83.41.87 ASN #64050 BGPNET Global ASN Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 01:01:59 Last Seen2024-05-03 23:42:05 Times Seen37318872 Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Loading...

HTTP Transactions (12)

URL IP Response Size

flikois.com/static/layer/layer.js

216.83.41.87

200 OK

200 kB

URL GET HTTP/2
flikois.com/static/layer/layer.js
IP
216.83.41.87:443
ASN
#64050 BGPNET Global ASN

Requested by
https://flikois.com/index/login/index.html
Certificate
IssuerLet's Encrypt
Subjectflikmas.com
FingerprintEC:FE:F6:08:E8:D2:14:75:AC:B8:77:4C:06:60:DC:0C:0F:7A:DD:12
ValidityTue, 26 Mar 2024 06:18:32 GMT - Mon, 24 Jun 2024 06:18:31 GMT

File type
gzip compressed data, from Unix
Size
200 kB (200418 bytes)
Hash
c1ca9144484862e23d58f33a3559463f
9aed69e09e1c00b3ff8f09770a3149bb1932c41c
c0c82c14ba135a623bafdd008c30774f9f423759aacd980e2b28386ac461d58b

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Amazon

HTTP Headers

GET /static/layer/layer.js HTTP/1.1
Host: flikois.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://flikois.com/index/login/index.html
Cookie: sa0c19f20=062vuqm87bsha8v5fo26369g61
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx
date: Tue, 23 Apr 2024 18:07:14 GMT
content-type: application/javascript
last-modified: Tue, 05 Dec 2017 03:57:26 GMT
vary: Accept-Encoding
etag: W/"5a261926-5664"
expires: Wed, 24 Apr 2024 06:07:14 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2

flikois.com/static/jquery-3.5.0.min.js

216.83.41.87

200 OK

255 kB

URL GET HTTP/2
flikois.com/static/jquery-3.5.0.min.js
IP
216.83.41.87:443
ASN
#64050 BGPNET Global ASN

Requested by
https://flikois.com/index/login/index.html
Certificate
IssuerLet's Encrypt
Subjectflikmas.com
FingerprintEC:FE:F6:08:E8:D2:14:75:AC:B8:77:4C:06:60:DC:0C:0F:7A:DD:12
ValidityTue, 26 Mar 2024 06:18:32 GMT - Mon, 24 Jun 2024 06:18:31 GMT

File type
gzip compressed data, from Unix
Size
255 kB (255402 bytes)
Hash
b2b1e82570e7c7558c289083718976eb
b9fec72b7f38f6abcb75575925410e183d149cb3
1eab87ccff5a4e56ba423e252f4a6620dae1bc9254c2528a178be8936d11f014

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Amazon

HTTP Headers

GET /static/jquery-3.5.0.min.js HTTP/1.1
Host: flikois.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://flikois.com/index/login/index.html
Cookie: sa0c19f20=062vuqm87bsha8v5fo26369g61
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx
date: Tue, 23 Apr 2024 18:07:14 GMT
content-type: application/javascript
last-modified: Mon, 27 Apr 2020 14:07:18 GMT
vary: Accept-Encoding
etag: W/"5ea6e716-15d95"
expires: Wed, 24 Apr 2024 06:07:14 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2

flikois.com/static/index/fonts/Rubik-Medium.4dff84c2.ttf

216.83.41.87

200 OK

216 kB

URL GET HTTP/2
flikois.com/static/index/fonts/Rubik-Medium.4dff84c2.ttf
IP
216.83.41.87:443
ASN
#64050 BGPNET Global ASN

Requested by
https://flikois.com/index/login/index.html
Certificate
IssuerLet's Encrypt
Subjectflikmas.com
FingerprintEC:FE:F6:08:E8:D2:14:75:AC:B8:77:4C:06:60:DC:0C:0F:7A:DD:12
ValidityTue, 26 Mar 2024 06:18:32 GMT - Mon, 24 Jun 2024 06:18:31 GMT

File type
TrueType Font data, 20 tables, 1st "GPOS", 15 names, Microsoft, language 0x409, Copyright (c) 2015 by Hubert & Fischer. All rights reserved.Rubik MediumRegularHubert&Fischer: R
Size
216 kB (216244 bytes)
Hash
4dff84c26bc906823e344e1eb76fe7a7
5da5f96c57060e54a922ea0df12b4c29797593b9
82a8c818aab7ca3157c49795b2fc47a08a1fa490dd5aa7acb7a079615c3dda51

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Amazon

HTTP Headers

GET /static/index/fonts/Rubik-Medium.4dff84c2.ttf HTTP/1.1
Host: flikois.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://flikois.com/static/index/css/common.css
Cookie: sa0c19f20=062vuqm87bsha8v5fo26369g61
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx
date: Tue, 23 Apr 2024 18:07:15 GMT
content-type: application/octet-stream
content-length: 216244
last-modified: Tue, 17 Aug 2021 08:24:08 GMT
etag: "611b7228-34cb4"
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2

flikois.com/static/index/css/common.css

216.83.41.87

200 OK

14 kB

URL GET HTTP/2
flikois.com/static/index/css/common.css
IP
216.83.41.87:443
ASN
#64050 BGPNET Global ASN

Requested by
https://flikois.com/index/login/index.html
Certificate
IssuerLet's Encrypt
Subjectflikmas.com
FingerprintEC:FE:F6:08:E8:D2:14:75:AC:B8:77:4C:06:60:DC:0C:0F:7A:DD:12
ValidityTue, 26 Mar 2024 06:18:32 GMT - Mon, 24 Jun 2024 06:18:31 GMT

File type
gzip compressed data, from Unix
Size
14 kB (14447 bytes)
Hash
440c92af8f05d7dccfc0a3e34d21d164
3b42bfcee99a2b41930e870e5069a52182acd5ea
065bc4d0f75eb24331c29b91896651c831aa6a8fe246b1981ea3b07e91d79c07

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Amazon

HTTP Headers

GET /static/index/css/common.css HTTP/1.1
Host: flikois.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://flikois.com/index/login/index.html
Cookie: sa0c19f20=062vuqm87bsha8v5fo26369g61
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx
date: Tue, 23 Apr 2024 18:07:14 GMT
content-type: text/css
last-modified: Thu, 19 Aug 2021 14:00:20 GMT
vary: Accept-Encoding
etag: W/"611e63f4-4a04"
expires: Wed, 24 Apr 2024 06:07:14 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2

cdn.dcloud.net.cn/img/shadow-grey.png

124.221.241.116

200 OK

136 B

URL GET HTTP/1.1
cdn.dcloud.net.cn/img/shadow-grey.png
IP
124.221.241.116:443
ASN
#45090 Shenzhen Tencent Computer Systems Company Limited

Requested by
https://flikois.com/index/login/index.html
Certificate
IssuerUnizeto Technologies S.A.
Subject*.dcloud.net.cn
FingerprintAE:46:5C:A4:9B:D3:F7:AC:7D:5E:C7:27:E1:5F:C3:7C:DA:CE:F2:AC
ValiditySat, 05 Aug 2023 03:00:05 GMT - Tue, 03 Sep 2024 03:00:04 GMT

File type
PNG image data, 1 x 6, 4-bit colormap, non-interlaced
Size
136 B (136 bytes)
Hash
5a962adf74d92ae702467b3f47976547
36f74049375584e3fa69b5ef87e9572336ff9e7a
ad4ebea1c3496dd2924789ee009174a2c6289d1200e9811f458fd46f172d1d6f

HTTP Headers

GET /img/shadow-grey.png HTTP/1.1
Host: cdn.dcloud.net.cn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://flikois.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Tue, 23 Apr 2024 18:07:19 GMT
Content-Type: image/png
Content-Length: 136
Last-Modified: Thu, 06 Jun 2019 06:42:07 GMT
Connection: close
ETag: "5cf8b5bf-88"
Expires: Tue, 23 Apr 2024 20:07:19 GMT
Cache-Control: max-age=7200
Set-Cookie: __uni__uid=rBEQkWYn+NddiQxnR43yAg==; expires=Thu, 31-Dec-37 23:55:55 GMT; domain=dcloud.net.cn; path=/; secure; httponly; samesite=none
Accept-Ranges: bytes

flikois.com/static/layer/theme/default/layer.css?v=3.1.1

216.83.41.87

200 OK

15 kB

URL GET HTTP/2
flikois.com/static/layer/theme/default/layer.css?v=3.1.1
IP
216.83.41.87:443
ASN
#64050 BGPNET Global ASN

Requested by
https://flikois.com/index/login/index.html
Certificate
IssuerLet's Encrypt
Subjectflikmas.com
FingerprintEC:FE:F6:08:E8:D2:14:75:AC:B8:77:4C:06:60:DC:0C:0F:7A:DD:12
ValidityTue, 26 Mar 2024 06:18:32 GMT - Mon, 24 Jun 2024 06:18:31 GMT

File type
gzip compressed data, from Unix
Size
15 kB (14924 bytes)
Hash
4a37d4c7fabfd691abd23645bf5dca79
91f0bca84f29d63cf1cc842a2bfba28b20fcbebc
13cdfa1a3be2fd2b0b9d9781a2830e4652e813bf2d3912a7d731c9c31cb73932

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Amazon

HTTP Headers

GET /static/layer/theme/default/layer.css?v=3.1.1 HTTP/1.1
Host: flikois.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://flikois.com/index/login/index.html
Cookie: sa0c19f20=062vuqm87bsha8v5fo26369g61
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx
date: Tue, 23 Apr 2024 18:07:15 GMT
content-type: text/css
last-modified: Tue, 05 Dec 2017 03:57:26 GMT
vary: Accept-Encoding
etag: W/"5a261926-381f"
expires: Wed, 24 Apr 2024 06:07:15 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2

flikois.com/static/index/css/main.css

216.83.41.87

200 OK

38 kB

URL GET HTTP/2
flikois.com/static/index/css/main.css
IP
216.83.41.87:443
ASN
#64050 BGPNET Global ASN

Requested by
https://flikois.com/index/login/index.html
Certificate
IssuerLet's Encrypt
Subjectflikmas.com
FingerprintEC:FE:F6:08:E8:D2:14:75:AC:B8:77:4C:06:60:DC:0C:0F:7A:DD:12
ValidityTue, 26 Mar 2024 06:18:32 GMT - Mon, 24 Jun 2024 06:18:31 GMT

File type
gzip compressed data, from Unix
Size
38 kB (38054 bytes)
Hash
11ad0ec80e9aad837ee0e379d2e3361e
780d82069af2de54ec9446dcdfa1498f38d8a6c5
02eeabd8a2b1d2e6edec5ccf4ab975303ee48cd77f875432574afe26b19fc0ff

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Amazon

HTTP Headers

GET /static/index/css/main.css HTTP/1.1
Host: flikois.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://flikois.com/index/login/index.html
Cookie: sa0c19f20=062vuqm87bsha8v5fo26369g61
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx
date: Tue, 23 Apr 2024 18:07:14 GMT
content-type: text/css
last-modified: Thu, 19 Aug 2021 13:40:00 GMT
vary: Accept-Encoding
etag: W/"611e5f30-172b0"
expires: Wed, 24 Apr 2024 06:07:14 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2

flikois.com/index/index/index/login/index.html/index/login/index/login/index.html/index/login/index.html/index/login/index.html/index/login/index.html/index/login/index.html/index/login/index.html/index/login/index.html/index/login/index.html/index/login/index.html/index/login/index.html/index/login/index.html/index/login/index.html/index/login/index.html/index/login/index.html/index/login/index.html/index/login/index.html/index/login/index.html/index/login/index.html

216.83.41.87

302 Found

5.7 kB

URL User Request GET HTTP/2
flikois.com/index/index/index/login/index.html/index/login/index/login/index.html/index/login/index.html/index/login/index.html/index/login/index.html/index/login/index.html/index/login/index.html/index/login/index.html/index/login/index.html/index/login/index.html/index/login/index.html/index/login/index.html/index/login/index.html/index/login/index.html/index/login/index.html/index/login/index.html/index/login/index.html/index/login/index.html/index/login/index.html
IP
216.83.41.87:443
ASN
#64050 BGPNET Global ASN

Certificate
IssuerLet's Encrypt
Subjectflikmas.com
FingerprintEC:FE:F6:08:E8:D2:14:75:AC:B8:77:4C:06:60:DC:0C:0F:7A:DD:12
ValidityTue, 26 Mar 2024 06:18:32 GMT - Mon, 24 Jun 2024 06:18:31 GMT

File type

Size
5.7 kB (5690 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Amazon

HTTP Headers

GET /index/index/index/login/index.html/index/login/index/login/index.html/index/login/index.html/index/login/index.html/index/login/index.html/index/login/index.html/index/login/index.html/index/login/index.html/index/login/index.html/index/login/index.html/index/login/index.html/index/login/index.html/index/login/index.html/index/login/index.html/index/login/index.html/index/login/index.html/index/login/index.html/index/login/index.html/index/login/index.html HTTP/1.1
Host: flikois.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 302 Found
server: nginx
date: Tue, 23 Apr 2024 18:07:13 GMT
content-type: text/html; charset=utf-8
set-cookie: sa0c19f20=062vuqm87bsha8v5fo26369g61; path=/; HttpOnly
expires: Thu, 19 Nov 1981 08:52:00 GMT
pragma: no-cache
cache-control: no-cache,must-revalidate
location: /index/login/index.html
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2

flikois.com/static/index/fonts/Rubik-Regular.35af6dbe.ttf

216.83.41.87

200 OK

221 kB

URL GET HTTP/2
flikois.com/static/index/fonts/Rubik-Regular.35af6dbe.ttf
IP
216.83.41.87:443
ASN
#64050 BGPNET Global ASN

Requested by
https://flikois.com/index/login/index.html
Certificate
IssuerLet's Encrypt
Subjectflikmas.com
FingerprintEC:FE:F6:08:E8:D2:14:75:AC:B8:77:4C:06:60:DC:0C:0F:7A:DD:12
ValidityTue, 26 Mar 2024 06:18:32 GMT - Mon, 24 Jun 2024 06:18:31 GMT

File type
TrueType Font data, 20 tables, 1st "GPOS", 13 names, Microsoft, language 0x409, Copyright (c) 2015 by Hubert & Fischer. All rights reserved.RubikRegularHubert&Fischer: Rubik Re
Size
221 kB (220600 bytes)
Hash
35af6dbe749b9704f03282e5a5949253
f0711cdc35046a54d1b887fafbd12de0a5b82549
c17737eba7fa3f4854f4cd50226e75a9e954b4fc460d805b22e5c31a04b0261d

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Amazon

HTTP Headers

GET /static/index/fonts/Rubik-Regular.35af6dbe.ttf HTTP/1.1
Host: flikois.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://flikois.com/static/index/css/common.css
Cookie: sa0c19f20=062vuqm87bsha8v5fo26369g61
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Tue, 23 Apr 2024 18:07:15 GMT
content-type: application/octet-stream
content-length: 220600
last-modified: Tue, 17 Aug 2021 08:24:34 GMT
etag: "611b7242-35db8"
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2

flikois.com/index/login/index.html

216.83.41.87

200 OK

5.7 kB

URL User Request GET HTTP/2
flikois.com/index/login/index.html
IP
216.83.41.87:443
ASN
#64050 BGPNET Global ASN

Certificate
IssuerLet's Encrypt
Subjectflikmas.com
FingerprintEC:FE:F6:08:E8:D2:14:75:AC:B8:77:4C:06:60:DC:0C:0F:7A:DD:12
ValidityTue, 26 Mar 2024 06:18:32 GMT - Mon, 24 Jun 2024 06:18:31 GMT

File type
JavaScript source, Unicode text, UTF-8 text, with very long lines (5827), with no line terminators
Size
5.7 kB (5690 bytes)
Hash
3553de0e77749cb0f05f44fcd9733622
7cef9bf8ec773ae60384362361e12563bb9d6f62
caccc3e3d6580aada7a55d498c852cd446afeeb7fc566ddad19d4f7da7bfbb1c

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Amazon

HTTP Headers

GET /index/login/index.html HTTP/1.1
Host: flikois.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: sa0c19f20=062vuqm87bsha8v5fo26369g61
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Tue, 23 Apr 2024 18:07:14 GMT
content-type: text/html; charset=utf-8
vary: Accept-Encoding
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2

flikois.com/static/index/fonts/Rubik-BlackItalic.77c7f123.ttf

216.83.41.87

200 OK

192 kB

URL GET HTTP/2
flikois.com/static/index/fonts/Rubik-BlackItalic.77c7f123.ttf
IP
216.83.41.87:443
ASN
#64050 BGPNET Global ASN

Requested by
https://flikois.com/index/login/index.html
Certificate
IssuerLet's Encrypt
Subjectflikmas.com
FingerprintEC:FE:F6:08:E8:D2:14:75:AC:B8:77:4C:06:60:DC:0C:0F:7A:DD:12
ValidityTue, 26 Mar 2024 06:18:32 GMT - Mon, 24 Jun 2024 06:18:31 GMT

File type
TrueType Font data, 18 tables, 1st "GPOS", 15 names, Microsoft, language 0x409, Copyright (c) 2015 by Hubert & Fischer. All rights reserved.Rubik BlackItalicHubert&Fischer: Rub
Size
192 kB (192004 bytes)
Hash
77c7f123391595707a1d0690dddaa11e
3f77b9d3d8155511d94d72a410c80b3d18001cde
ce0e6de088497437824e571c7a0c38974f205a0bbb8b20ae5b309e419662f063

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Amazon

HTTP Headers

GET /static/index/fonts/Rubik-BlackItalic.77c7f123.ttf HTTP/1.1
Host: flikois.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://flikois.com/static/index/css/common.css
Cookie: sa0c19f20=062vuqm87bsha8v5fo26369g61
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Tue, 23 Apr 2024 18:07:15 GMT
content-type: application/octet-stream
content-length: 192004
last-modified: Thu, 19 Aug 2021 13:45:30 GMT
etag: "611e607a-2ee04"
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2

flikois.com/favicon.ico

216.83.41.87

200 OK

4.3 kB

URL GET HTTP/2
flikois.com/favicon.ico
IP
216.83.41.87:443
ASN
#64050 BGPNET Global ASN

Requested by
https://flikois.com/index/login/index.html
Certificate
IssuerLet's Encrypt
Subjectflikmas.com
FingerprintEC:FE:F6:08:E8:D2:14:75:AC:B8:77:4C:06:60:DC:0C:0F:7A:DD:12
ValidityTue, 26 Mar 2024 06:18:32 GMT - Mon, 24 Jun 2024 06:18:31 GMT

File type
MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel
Size
4.3 kB (4286 bytes)
Hash
ea344923d7e68380c811191e36e04020
f23f0ec8c29df2a1b31b0e0cb46e54e22420bca1
97a8aa4a501654a28f1fe60e1fce3f9070c80d698790beb60b2d714f78bd786f

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Amazon

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: flikois.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://flikois.com/index/login/index.html
Cookie: sa0c19f20=062vuqm87bsha8v5fo26369g61
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Tue, 23 Apr 2024 18:07:16 GMT
content-type: image/x-icon
content-length: 4286
last-modified: Fri, 13 Nov 2020 15:05:22 GMT
etag: "5faea0b2-10be"
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

JavaScript (4)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (12)

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

Detections

HTTP Headers