Report - datahub.center/g1ef4f7d19b8374a3248ced333debfefa2b1.html

Report Overview

Submitted URL
datahub.center/g1ef4f7d19b8374a3248ced333debfefa2b1.html
IP
104.26.1.156
ASN
#13335 CLOUDFLARENET
Submitted
2024-05-02 16:29:00
Access
public
Website Title
Sign in - Google Accounts
Final URL
datahub.center/g1ef4f7d19b8374a3248ced333debfefa2b1.html
Tags
google
urlquery detections
Phishing - Google

Detections

urlquery
6
Network Intrusion Detection
0
Threat Detection Systems
4

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
cdnjs.cloudflare.com	235	2009-02-17	2015-04-17	2024-05-01	891 B	33 kB	104.17.25.14
lp.cybeready.net	unknown	2014-01-26	2015-12-30	2024-04-17	3.9 kB	117 kB	172.67.74.139
datahub.center	unknown	unknown	No data	No data	3.2 kB	11 kB	172.67.71.111
fonts.gstatic.com	unknown	2008-02-11	2014-09-09	2024-05-02	1.1 kB	98 kB	216.58.207.227
fonts.googleapis.com	8877	2005-01-25	2013-06-10	2024-05-02	574 B	57 kB	142.250.74.106

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

Scan Date	Severity	Indicator	Alert
2024-05-02	medium	datahub.center/g1ef4f7d19b8374a3248ced333debfefa2b1.html	Google Inc.
2024-05-02	medium	datahub.center/g1ef4f7d19b8374a3248ced333debfefa2b1.html	Google Inc.

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (7)

	URL	Size	First Seen	Last Seen
	datahub.center/g1ef4f7d19b8374a3248ced333debfefa2b1.html	63 B	2024-05-02	2024-05-02
Pretty URL datahub.center/g1ef4f7d19b8374a3248ced333debfefa2b1.html IP 172.67.71.111 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2024-05-02 18:29:07 Last Seen2024-05-02 18:29:07 Times Seen1 Hash c937dca21403a55b1f1ed4dc74e46882 93b10a43ee8ef8095602c42c4ca040989f7f9e8e b0fbc749d60a3ab1ca9d0052692d1e2145260f27af7e498e2ab22ed9454a26ba Loading...

	cdnjs.cloudflare.com/ajax/libs/jquery/2.1.3/jquery.min.js	84 kB	2023-03-07	2024-05-16
Pretty URL cdnjs.cloudflare.com/ajax/libs/jquery/2.1.3/jquery.min.js IP 104.17.25.14 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:14:40 Last Seen2024-05-16 18:46:52 Times Seen11152 Hash 7f9fb969ce353c5d77707836391eb28d 62c4042e9ebc691a5372d653b424512a561d1670 2051d61446d4dbffb03727031022a08c84528ab44d203a7669c101e5fbdd5515 Loading...

	lp.cybeready.net/Forms/Google/validator.js	1.1 kB	2023-03-09	2024-05-15
Pretty URL lp.cybeready.net/Forms/Google/validator.js IP 172.67.74.139 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-09 21:03:15 Last Seen2024-05-15 19:23:13 Times Seen26 Hash c581e863b50b5bd4029985fe89e8cc1b 8ff0397a96097dfd3359a4f1d2462b80d9f700a1 aeb7cb711f8559684e29273a8cb879df8b150fd7569b75daca0222889bf6dd5f Loading...

	lp.cybeready.net/common/landing-page.js	4.0 kB	2023-03-07	2024-05-16
Pretty URL lp.cybeready.net/common/landing-page.js IP 172.67.74.139 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 12:02:35 Last Seen2024-05-16 18:46:52 Times Seen381 Hash ac5716b9ccc0d5eb31e94d8c873227d4 39ed1b79df1f4a7eedc7f245f0cabb0618246951 633d39e293d4a1e9f9c461323d6d3913f3ee51ab8cc901e4c45356cf022634ca Loading...

	datahub.center/g1ef4f7d19b8374a3248ced333debfefa2b1.html	1.1 kB	2024-05-02	2024-05-02
Pretty URL datahub.center/g1ef4f7d19b8374a3248ced333debfefa2b1.html IP 172.67.71.111 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2024-05-02 18:29:07 Last Seen2024-05-02 18:29:07 Times Seen1 Hash 940dac89b4d44243fe4261a3683be755 72d083f318e4b892c04733091a7fdfa5220d1d09 f411a5377c1a81812eae635753c3bd5e5a7adcb14b0183e421bc98993ec32826 Loading...

	unknown	247 B	2024-05-02	2024-05-02
Pretty Introduced by scriptElement Embedded in HTML false Observations First Seen2024-05-02 18:29:07 Last Seen2024-05-02 18:29:07 Times Seen1 Hash 298a32237b22c2c89e02047877f7f29d 09cc50919d71be91b0cac905f6d93c38638c0b71 e13b3b71d68015c2c8534a02b2f759f6ceed6bea32f1ace67b9be6f46abd63fe Loading...

	datahub.center/cdn-cgi/challenge-platform/scripts/jsd/main.js	7.8 kB	2024-05-02	2024-05-02
Pretty URL datahub.center/cdn-cgi/challenge-platform/scripts/jsd/main.js IP 172.67.71.111 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2024-05-02 18:29:07 Last Seen2024-05-02 18:29:07 Times Seen2 Hash 1525ab627b4ae342ea70ef49d1e20e94 1eefb87597114a29cd4e854d292b018a0852abda fd43ddcf65fed8deb0a4d05d2341896826d4b5b34a218c6815bc7cf927896b1a Loading...

HTTP Transactions (19)

URL IP Response Size

cdnjs.cloudflare.com/ajax/libs/font-awesome/4.3.0/css/font-awesome.min.css

104.17.25.14

200 OK

4.4 kB

URL GET HTTP/2
cdnjs.cloudflare.com/ajax/libs/font-awesome/4.3.0/css/font-awesome.min.css
IP
104.17.25.14:443
ASN
#13335 CLOUDFLARENET

Requested by
https://datahub.center/g1ef4f7d19b8374a3248ced333debfefa2b1.html
Certificate
IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint7A:EA:B9:09:71:70:6C:87:C9:D3:82:74:8A:7B:B4:60:E5:40:2D:8D
ValidityMon, 03 Jul 2023 00:00:00 GMT - Tue, 02 Jul 2024 23:59:59 GMT

File type
ASCII text, with very long lines (23577)
Size
4.4 kB (4364 bytes)
Hash
04425bbdc6243fc6e54bf8984fe50330
8c15c6bd82c71e9ef1bb11cf24e502fe07518ac5
541ac58217a8ade1a5e292a65a0661dc9db7a49ae13654943817a4fbc6761afd

HTTP Headers

GET /ajax/libs/font-awesome/4.3.0/css/font-awesome.min.css HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://datahub.center/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Thu, 02 May 2024 16:28:34 GMT
content-type: text/css; charset=utf-8
content-length: 4364
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "65993750-110c"
last-modified: Sat, 06 Jan 2024 12:19:44 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 71218
expires: Tue, 22 Apr 2025 16:28:34 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=g3L4u6YkNzb6F3E8SA0ig5LiGeVbeR%2FgTZLI7R5y6m9lwO6Nc%2FOutiFAJsRtEPynrVnjE9yKQemm%2BKKqEPlRXsutbwdHStbgotEP6OADf5agec%2B%2BS1yJMCz3KfO0zsShrCUz32tc"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 87d9629e8b795690-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

cdnjs.cloudflare.com/ajax/libs/jquery/2.1.3/jquery.min.js

104.17.25.14

200 OK

27 kB

URL GET HTTP/2
cdnjs.cloudflare.com/ajax/libs/jquery/2.1.3/jquery.min.js
IP
104.17.25.14:443
ASN
#13335 CLOUDFLARENET

Requested by
https://datahub.center/g1ef4f7d19b8374a3248ced333debfefa2b1.html
Certificate
IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint7A:EA:B9:09:71:70:6C:87:C9:D3:82:74:8A:7B:B4:60:E5:40:2D:8D
ValidityMon, 03 Jul 2023 00:00:00 GMT - Tue, 02 Jul 2024 23:59:59 GMT

File type
JavaScript source, ASCII text, with very long lines (32180)
Size
27 kB (26660 bytes)
Hash
7f9fb969ce353c5d77707836391eb28d
62c4042e9ebc691a5372d653b424512a561d1670
2051d61446d4dbffb03727031022a08c84528ab44d203a7669c101e5fbdd5515

HTTP Headers

GET /ajax/libs/jquery/2.1.3/jquery.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://datahub.center/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Thu, 02 May 2024 16:28:34 GMT
content-type: application/javascript; charset=utf-8
content-length: 26660
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03ec4-14983"
last-modified: Mon, 04 May 2020 16:11:48 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 169313
expires: Tue, 22 Apr 2025 16:28:34 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=0q%2FLXr8MhGNgYYUhuAt7TG6WElAckfu59UkkpC4f5XnHTBvNDQ29L%2B6rSI62YJDJ3smurpLVOZ8H9uCfGVExRo%2Ft6ms2DSrUeoPczwj7E5YvHEh1lNPRgDqEIMJVtjS0I3E%2Bf%2BeN"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 87d9629e9b885690-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

lp.cybeready.net/Forms/Google/universal-language.png

172.67.74.139

200 OK

160 B

URL GET HTTP/2
lp.cybeready.net/Forms/Google/universal-language.png
IP
172.67.74.139:443
ASN
#13335 CLOUDFLARENET

Requested by
https://datahub.center/g1ef4f7d19b8374a3248ced333debfefa2b1.html
Certificate
IssuerLet's Encrypt
Subjectcybeready.net
FingerprintBB:28:14:F8:09:02:DF:1E:F0:B6:74:8B:09:67:6A:55:A6:0D:A0:38
ValidityTue, 16 Apr 2024 23:13:46 GMT - Mon, 15 Jul 2024 23:13:45 GMT

File type
PNG image data, 21 x 21, 8-bit gray+alpha, non-interlaced
Size
160 B (160 bytes)
Hash
6d052a977f30c2e73b7b968c91b39ccf
581580801cba4a45e60605591c7a13543be2722e
12481dc4ca9cbeec872bf3c82d33640c8caac92d4ce9f394907287cdcfb316a3

HTTP Headers

GET /Forms/Google/universal-language.png HTTP/1.1
Host: lp.cybeready.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://datahub.center/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Thu, 02 May 2024 16:28:35 GMT
content-type: image/png
content-length: 160
cf-bgj: imgq:100,h2pri
cf-polished: origSize=199
etag: "4a2d1168a691747daf4d22e0dc483958"
last-modified: Sun, 07 Feb 2016 16:12:29 GMT
x-amz-id-2: htxoDleNfezgUk0aBKv156021sS92T9OgFDMkRoCGDi0IUaIzuQeZOabm9bZotY4QXiESoC7QNE=
x-amz-request-id: WH8C5K24G8NX980A
cache-control: max-age=14400
cf-cache-status: HIT
age: 3837
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=vJwW%2BXu3M5ZRYXcDOKoGUv2hkIbrhlvzOfzVHUohapChBE%2FkkKpx6bOQA7iMXCETq50%2BqmaRlYvlDxJ4YPgMvmql5Wo2z%2FHIGocX%2B8EpP%2BTR3djXpxfXvbf5H4cUlxRvdq8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87d9629f1bc056ca-OSL
X-Firefox-Spdy: h2

lp.cybeready.net/Forms/Google/avatar.png

172.67.74.139

200 OK

1.3 kB

URL GET HTTP/2
lp.cybeready.net/Forms/Google/avatar.png
IP
172.67.74.139:443
ASN
#13335 CLOUDFLARENET

Requested by
https://datahub.center/g1ef4f7d19b8374a3248ced333debfefa2b1.html
Certificate
IssuerLet's Encrypt
Subjectcybeready.net
FingerprintBB:28:14:F8:09:02:DF:1E:F0:B6:74:8B:09:67:6A:55:A6:0D:A0:38
ValidityTue, 16 Apr 2024 23:13:46 GMT - Mon, 15 Jul 2024 23:13:45 GMT

File type
PNG image data, 96 x 96, 8-bit colormap, non-interlaced
Size
1.3 kB (1264 bytes)
Hash
0b83194f9963368deba456895be8ac04
89d4d2ae09f2b65e2f4200bcc7f52eca498de843
b6aa7fe0584c975a9d8140a65fc55363d1b68f9230f61f95c616456b1c4c2d66

HTTP Headers

GET /Forms/Google/avatar.png HTTP/1.1
Host: lp.cybeready.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://datahub.center/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Thu, 02 May 2024 16:28:35 GMT
content-type: image/png
content-length: 1264
cf-bgj: imgq:100,h2pri
cf-polished: origSize=2016
etag: "2787a6ef71bfd34b5bb1f37644ef91a6"
last-modified: Sun, 07 Feb 2016 16:12:29 GMT
x-amz-id-2: l4eanvAmrjmx1Smoi+ijeQUNbQMWpU5h1o2FoHguxF1+bzd+PsSFhmHin7BcpryXE9vv6ZZc/oo=
x-amz-request-id: WH85X93TA4R9V11T
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=KZPORwr6A8xS0o0AqqUZH%2Fb9KyL%2FsopFR2xaQVWqSjC2a%2Bf%2Bq%2BJar8SPLdbJkjQHqxUci81%2BdcAGJmy1ajBjongDVAhUpTsvhu%2BrJycn597IrzP16H7vMHDzdpNQyJoc9bw%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87d9629f1bc356ca-OSL
X-Firefox-Spdy: h2

lp.cybeready.net/Forms/Google/logo.png

172.67.74.139

200 OK

14 kB

URL GET HTTP/2
lp.cybeready.net/Forms/Google/logo.png
IP
172.67.74.139:443
ASN
#13335 CLOUDFLARENET

Requested by
https://datahub.center/g1ef4f7d19b8374a3248ced333debfefa2b1.html
Certificate
IssuerLet's Encrypt
Subjectcybeready.net
FingerprintBB:28:14:F8:09:02:DF:1E:F0:B6:74:8B:09:67:6A:55:A6:0D:A0:38
ValidityTue, 16 Apr 2024 23:13:46 GMT - Mon, 15 Jul 2024 23:13:45 GMT

File type
PNG image data, 568 x 192, 8-bit/color RGBA, non-interlaced
Size
14 kB (13804 bytes)
Hash
9a344d6cdd66f3fa4c3edfcb3b6faf1e
e4d2a6ca73b2938d3e7ca8ce18218ea4fe36b79d
2f75b559a72868bf11e4bb75ea6834d7f158eca12bac649fd43474b97ad9908b

HTTP Headers

GET /Forms/Google/logo.png HTTP/1.1
Host: lp.cybeready.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://datahub.center/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Thu, 02 May 2024 16:28:35 GMT
content-type: image/png
content-length: 13804
cf-bgj: imgq:100,h2pri
cf-polished: status=not_needed
etag: "9a344d6cdd66f3fa4c3edfcb3b6faf1e"
last-modified: Sun, 07 Feb 2016 16:12:28 GMT
x-amz-id-2: QsXjA4YsFKWjzYxh3pTTEbYK4KBxyFOUnXsC0WGQFj+zyvx8YcF51QRTWW/oPGGenUiyawDBQzk=
x-amz-request-id: 3KAA4VPFTK1K9N4Y
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=pv7ojEqnUgg1zoneaNzli3cWOCz0pDwR2ggQ5OVaT5jGfVsIpQDvVWDHKzy1LagLLA3eJer3SOLb2Cl5qmin5bDWpv%2BYfC%2BLbXfpVwd8fBZppDawD9IJSj5uvnh0xhJUfug%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87d9629f1bc256ca-OSL
X-Firefox-Spdy: h2

lp.cybeready.net/Forms/Google/bottom-strip.png

172.67.74.139

200 OK

4.2 kB

URL GET HTTP/2
lp.cybeready.net/Forms/Google/bottom-strip.png
IP
172.67.74.139:443
ASN
#13335 CLOUDFLARENET

Requested by
https://datahub.center/g1ef4f7d19b8374a3248ced333debfefa2b1.html
Certificate
IssuerLet's Encrypt
Subjectcybeready.net
FingerprintBB:28:14:F8:09:02:DF:1E:F0:B6:74:8B:09:67:6A:55:A6:0D:A0:38
ValidityTue, 16 Apr 2024 23:13:46 GMT - Mon, 15 Jul 2024 23:13:45 GMT

File type
PNG image data, 230 x 17, 8-bit/color RGBA, non-interlaced
Size
4.2 kB (4230 bytes)
Hash
e9df7323e34b51c6fd5b9e922095c538
1706f2fc27c697dfb8fa7be76dbbd3e6834c70c9
208fb771d3dafbd219456ad23ef9a81b7c0b2c66d415558eaad37aa8e73051e8

HTTP Headers

GET /Forms/Google/bottom-strip.png HTTP/1.1
Host: lp.cybeready.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://datahub.center/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Thu, 02 May 2024 16:28:35 GMT
content-type: image/png
content-length: 4230
cf-bgj: imgq:100,h2pri
cf-polished: origSize=4285
etag: "c8e020fb658fa746845c385029c552f6"
last-modified: Sun, 07 Feb 2016 16:12:30 GMT
x-amz-id-2: BrbpKOhHgqchh/Q9vjKa+BlEcNQWbqeZW1CscNy/+x/0/26SwCK+/fFYLqjfAyFkzHChyh2VFcI=
x-amz-request-id: WH869YE0YDCWYHX8
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=JndHklNUfW8eQWDb2dGqZIC29nRUiseJTKlxfBW96pI5%2B2Tgz6MzpOGghOPf3ZtqL7JtcZdCqcUbaC4OIHcbuy7U6SrBHBcDqvR3%2FZ4m%2FaLvxAGJW0wVCUnMdV6JxYYOD%2Bg%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87d9629f1bc456ca-OSL
X-Firefox-Spdy: h2

datahub.center/cdn-cgi/challenge-platform/scripts/jsd/main.js

172.67.71.111

302 Found

0 B

URL GET HTTP/2
datahub.center/cdn-cgi/challenge-platform/scripts/jsd/main.js
IP
172.67.71.111:443
ASN
#13335 CLOUDFLARENET

Requested by
https://datahub.center/g1ef4f7d19b8374a3248ced333debfefa2b1.html
Certificate
IssuerGoogle Trust Services LLC
Subjectdatahub.center
FingerprintC1:A2:93:28:87:3E:B4:85:10:A0:5E:11:62:68:62:71:8D:55:7B:A3
ValiditySun, 17 Mar 2024 03:37:14 GMT - Sat, 15 Jun 2024 03:37:13 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Google

HTTP Headers

GET /cdn-cgi/challenge-platform/scripts/jsd/main.js HTTP/1.1
Host: datahub.center
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: requestid=14180ab515cb335cd9ff165598381f18
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 302 Found
date: Thu, 02 May 2024 16:28:35 GMT
content-length: 0
location: /cdn-cgi/challenge-platform/h/g/scripts/jsd/d0ff3ebede6b/main.js
cache-control: max-age=300, public
access-control-allow-origin: *
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=FHOg1ZGRBXes2DOaxSqzXbr1I6Kw6IpyqIa63Q%2F25eQFyzv3%2F9T3MkvxZGh%2Fl%2Fm9ulA5E%2FQGMl721JB%2BuOcyKVQyM5D6CMxz9tHqEtzlJSl5PleC4%2B8CQOEYsD%2BNWTa7"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87d962a1faeb56be-OSL
X-Firefox-Spdy: h2

lp.cybeready.net/common/landing-page.js

172.67.74.139

200 OK

2.0 kB

URL GET HTTP/2
lp.cybeready.net/common/landing-page.js
IP
172.67.74.139:443
ASN
#13335 CLOUDFLARENET

Requested by
https://datahub.center/g1ef4f7d19b8374a3248ced333debfefa2b1.html
Certificate
IssuerLet's Encrypt
Subjectcybeready.net
FingerprintBB:28:14:F8:09:02:DF:1E:F0:B6:74:8B:09:67:6A:55:A6:0D:A0:38
ValidityTue, 16 Apr 2024 23:13:46 GMT - Mon, 15 Jul 2024 23:13:45 GMT

File type
JavaScript source, ASCII text, with very long lines (590)
Size
2.0 kB (1970 bytes)
Hash
ac5716b9ccc0d5eb31e94d8c873227d4
39ed1b79df1f4a7eedc7f245f0cabb0618246951
633d39e293d4a1e9f9c461323d6d3913f3ee51ab8cc901e4c45356cf022634ca

HTTP Headers

GET /common/landing-page.js HTTP/1.1
Host: lp.cybeready.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://datahub.center/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Thu, 02 May 2024 16:28:35 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=7666
etag: W/"dc85792ec27e1c3bf02af986d07c81eb"
last-modified: Thu, 19 Nov 2015 18:47:02 GMT
x-amz-id-2: 73CUDecqmGTce5WvP+Giz7PqDsR7LOYJLB503cLZfcOgSCoOdeVmsugtWKzGIKLDIsb1dWCeW8o=
x-amz-request-id: 2KZMCVRCH37QWTP7
cache-control: max-age=14400
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=nsPd4V6bUTdcljLiO1L%2BDjOSeJ%2FKpSrkA%2BkE5pKIJVdOYi6PV0mYSaxF%2FUVbUBVGov4GFt84EOZDAZMtazyUGVlfpuNpP6kkLJGQD59nrguc%2BjxKMwtgLkAQo3aSy3k2CwQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87d9629f1bbe56ca-OSL
content-encoding: br
X-Firefox-Spdy: h2

fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2

216.58.207.227

200 OK

48 kB

URL GET HTTP/2
fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
IP
216.58.207.227:443
ASN
#15169 GOOGLE

Requested by
https://datahub.center/g1ef4f7d19b8374a3248ced333debfefa2b1.html
Certificate
IssuerGoogle Trust Services LLC
Subject*.gstatic.com
Fingerprint93:EC:35:60:8A:5B:23:EA:C0:36:D7:AE:03:0C:C3:77:17:5A:20:33
ValidityMon, 08 Apr 2024 07:31:57 GMT - Mon, 01 Jul 2024 07:31:56 GMT

File type
Web Open Font Format (Version 2), TrueType, length 48236, version 1.0
Size
48 kB (48236 bytes)
Hash
015c126a3520c9a8f6a27979d0266e96
2acf956561d44434a6d84204670cf849d3215d5f
3c4d6a1421c7ddb7e404521fe8c4cd5be5af446d7689cd880be26612eaad3cfa

HTTP Headers

GET /s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://datahub.center
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 48236
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 02 May 2024 02:35:00 GMT
expires: Fri, 02 May 2025 02:35:00 GMT
cache-control: public, max-age=31536000
age: 50015
last-modified: Thu, 14 Dec 2023 02:08:40 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2

216.58.207.227

200 OK

48 kB

URL GET HTTP/2
fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
IP
216.58.207.227:443
ASN
#15169 GOOGLE

Requested by
https://datahub.center/g1ef4f7d19b8374a3248ced333debfefa2b1.html
Certificate
IssuerGoogle Trust Services LLC
Subject*.gstatic.com
Fingerprint93:EC:35:60:8A:5B:23:EA:C0:36:D7:AE:03:0C:C3:77:17:5A:20:33
ValidityMon, 08 Apr 2024 07:31:57 GMT - Mon, 01 Jul 2024 07:31:56 GMT

File type
Web Open Font Format (Version 2), TrueType, length 48236, version 1.0
Size
48 kB (48236 bytes)
Hash
015c126a3520c9a8f6a27979d0266e96
2acf956561d44434a6d84204670cf849d3215d5f
3c4d6a1421c7ddb7e404521fe8c4cd5be5af446d7689cd880be26612eaad3cfa

HTTP Headers

GET /s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://datahub.center
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 48236
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 02 May 2024 02:35:00 GMT
expires: Fri, 02 May 2025 02:35:00 GMT
cache-control: public, max-age=31536000
age: 50015
last-modified: Thu, 14 Dec 2023 02:08:40 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

datahub.center/cdn-cgi/challenge-platform/h/g/jsd/r/87d9629b592056be

172.67.71.111

200 OK

0 B

URL POST HTTP/2
datahub.center/cdn-cgi/challenge-platform/h/g/jsd/r/87d9629b592056be
IP
172.67.71.111:443
ASN
#13335 CLOUDFLARENET

Requested by
https://datahub.center/g1ef4f7d19b8374a3248ced333debfefa2b1.html
Certificate
IssuerGoogle Trust Services LLC
Subjectdatahub.center
FingerprintC1:A2:93:28:87:3E:B4:85:10:A0:5E:11:62:68:62:71:8D:55:7B:A3
ValiditySun, 17 Mar 2024 03:37:14 GMT - Sat, 15 Jun 2024 03:37:13 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Google

HTTP Headers

POST /cdn-cgi/challenge-platform/h/g/jsd/r/87d9629b592056be HTTP/1.1
Host: datahub.center
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 12197
Origin: https://datahub.center
DNT: 1
Connection: keep-alive
Referer: https://datahub.center/g1ef4f7d19b8374a3248ced333debfefa2b1.html
Cookie: requestid=14180ab515cb335cd9ff165598381f18
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Thu, 02 May 2024 16:28:35 GMT
content-type: text/plain; charset=UTF-8
content-length: 0
set-cookie: cf_clearance=GI6Uvad7FI374EmnuNbDNhwXIBCH5rTAjtC3tjnFX14-1714667315-1.0.1.1-W4j70rYHzXJrPc5KXv89yt28RjfoKzibp10WeVZO6xLOGRgNf79I1k6kyP603Y_QMk0A4ikJ2SGv28zpUEVDNQ; path=/; expires=Fri, 02-May-25 16:28:35 GMT; domain=.datahub.center; HttpOnly; Secure; SameSite=None
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ORgg23mvMfnmWGkfQGwvHONrXV7UmbVVwWNJ8hke64rSvjaIP%2BeEpQwmLezch5ugi3tYO1XXRa%2BfQgfN1XevasbTzQkef%2BvZRF%2BK%2FJu5x1qYYP5m0c%2BGNTfo2u3%2FKZrK"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87d962a35c7f56be-OSL
X-Firefox-Spdy: h2

datahub.center/g1ef4f7d19b8374a3248ced333debfefa2b1.html

172.67.71.111

200 OK

0 B

URL User Request GET HTTP/2
datahub.center/g1ef4f7d19b8374a3248ced333debfefa2b1.html
IP
172.67.71.111:443
ASN
#13335 CLOUDFLARENET

Certificate
IssuerGoogle Trust Services LLC
Subjectdatahub.center
FingerprintC1:A2:93:28:87:3E:B4:85:10:A0:5E:11:62:68:62:71:8D:55:7B:A3
ValiditySun, 17 Mar 2024 03:37:14 GMT - Sat, 15 Jun 2024 03:37:13 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Google
OpenPhish	phishing	Google Inc.

HTTP Headers

POST /g1ef4f7d19b8374a3248ced333debfefa2b1.html HTTP/1.1
Host: datahub.center
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: json
X-Requested-With: XMLHttpRequest
Content-Length: 65
Origin: https://datahub.center
DNT: 1
Connection: keep-alive
Referer: https://datahub.center/g1ef4f7d19b8374a3248ced333debfefa2b1.html
Cookie: requestid=14180ab515cb335cd9ff165598381f18; cf_clearance=GI6Uvad7FI374EmnuNbDNhwXIBCH5rTAjtC3tjnFX14-1714667315-1.0.1.1-W4j70rYHzXJrPc5KXv89yt28RjfoKzibp10WeVZO6xLOGRgNf79I1k6kyP603Y_QMk0A4ikJ2SGv28zpUEVDNQ
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Thu, 02 May 2024 16:28:35 GMT
content-type: application/octet-stream
content-length: 0
set-cookie: requestid=59f7191deaade9c10ebfd203f8ce36bf
requestid=00af6a634e436cc2248193c181b989f7
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ZCs%2BdX1RpIJBHS7fBZ5DERfFyyKoPm19yk0eEsg7yPGB2DpflWXpBOhI7n3cwSEFY5O0TQBBQX0nxlUJPYwtTAtGOwV41AATnmorAVsFmRPEEEc9Kb6Qn4izgJB13ldp"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87d962a37ca456be-OSL
X-Firefox-Spdy: h2

lp.cybeready.net/Forms/Google/favicon.ico

172.67.74.139

74 kB

URL GET
lp.cybeready.net/Forms/Google/favicon.ico
IP
172.67.74.139:0
ASN
#13335 CLOUDFLARENET

Requested by
https://datahub.center/g1ef4f7d19b8374a3248ced333debfefa2b1.html
Certificate
IssuerLet's Encrypt
Subjectcybeready.net
FingerprintBB:28:14:F8:09:02:DF:1E:F0:B6:74:8B:09:67:6A:55:A6:0D:A0:38
ValidityTue, 16 Apr 2024 23:13:46 GMT - Mon, 15 Jul 2024 23:13:45 GMT

File type
MS Windows icon resource - 6 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel
Size
74 kB (74011 bytes)
Hash
f697de3c84903b1a6605d5372d6db308
6c323857e8685ee6c236c98ec6d645378def5460
5c548bf6a753980c9c37fc84319afec33c3178830a61bffb7daf58ba065c5043

HTTP Headers

GET /Forms/Google/favicon.ico HTTP/1.1
Host: lp.cybeready.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://datahub.center/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Thu, 02 May 2024 16:28:35 GMT
content-type: image/x-icon
x-amz-id-2: ROWDjZhYB3tSWUnN1+uoIMiu+I5nNyO4SY52tOLf8xvP2K6p85A1Q7RXXwpcTWKA3j0yYlFsYDk=
x-amz-request-id: XXS88593976V7W1Y
last-modified: Sun, 07 Feb 2016 16:12:35 GMT
etag: W/"f697de3c84903b1a6605d5372d6db308"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=h%2BYXUxlLRaUcoWmHRH0TF6o8VkZaav3uGkTwV4FVbEIwZoebS%2FeyzSVDlyhnKo%2BLkPk3iGSvUpVaLYi%2B90DQEcAsJc1AFfz2HLHzFOOh0fi1eqCi8fF2e2H6EeR1T9eNlpM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87d962a2d9e156ca-OSL
content-encoding: br
X-Firefox-Spdy: h2

lp.cybeready.net/Forms/Google/sanitize.css

172.67.74.139

200 OK

9.5 kB

URL GET HTTP/2
lp.cybeready.net/Forms/Google/sanitize.css
IP
172.67.74.139:443
ASN
#13335 CLOUDFLARENET

Requested by
https://datahub.center/g1ef4f7d19b8374a3248ced333debfefa2b1.html
Certificate
IssuerLet's Encrypt
Subjectcybeready.net
FingerprintBB:28:14:F8:09:02:DF:1E:F0:B6:74:8B:09:67:6A:55:A6:0D:A0:38
ValidityTue, 16 Apr 2024 23:13:46 GMT - Mon, 15 Jul 2024 23:13:45 GMT

File type
ASCII text, with very long lines (475), with no line terminators
Size
9.5 kB (9509 bytes)
Hash
03217d7d8bc5ea9c4929c7785ba01cf1
0a7fa57ad7546a4d07dfc0b44398a4eed5fa1bba
6a449b4722f14af5cb2a4bcc627a7c324c804147feab1e56230a9712131ce116

HTTP Headers

GET /Forms/Google/sanitize.css HTTP/1.1
Host: lp.cybeready.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://datahub.center/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Thu, 02 May 2024 16:28:35 GMT
content-type: text/css
cf-bgj: minify
cf-polished: origSize=1022
etag: W/"4023fc4c0be2a30c1eafd0903d5f471b"
last-modified: Sun, 07 Feb 2016 16:12:29 GMT
x-amz-id-2: NiHOUdJOv9j1vBJlDfQ8ax3K7nsd/97qGm9NKpgrnigwyWwJY+OLNAVKCB8BGzhTACSlxR5oVCI=
x-amz-request-id: WH883P90FHCHRWXZ
cache-control: max-age=14400
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=PWJLjJQvNgPTO9A1%2Ff5XRvM4Z6WB1GdyUGvyOPLfuegOYMlDW3l5XH0haKt4pjruHzu0T8jeckJNffwLGkyFj6MqsOuyRJ84Jr4ArnCIQh9Ji%2BdYSafdbY5SR6qGbJOv29I%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87d9629f1bc956ca-OSL
content-encoding: br
X-Firefox-Spdy: h2

datahub.center/g1ef4f7d19b8374a3248ced333debfefa2b1.html

172.67.71.111

200 OK

0 B

URL User Request GET HTTP/2
datahub.center/g1ef4f7d19b8374a3248ced333debfefa2b1.html
IP
172.67.71.111:443
ASN
#13335 CLOUDFLARENET

Certificate
IssuerGoogle Trust Services LLC
Subjectdatahub.center
FingerprintC1:A2:93:28:87:3E:B4:85:10:A0:5E:11:62:68:62:71:8D:55:7B:A3
ValiditySun, 17 Mar 2024 03:37:14 GMT - Sat, 15 Jun 2024 03:37:13 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Google
OpenPhish	phishing	Google Inc.

HTTP Headers

POST /g1ef4f7d19b8374a3248ced333debfefa2b1.html HTTP/1.1
Host: datahub.center
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: json
X-Requested-With: XMLHttpRequest
Content-Length: 109
Origin: https://datahub.center
DNT: 1
Connection: keep-alive
Referer: https://datahub.center/g1ef4f7d19b8374a3248ced333debfefa2b1.html
Cookie: requestid=00af6a634e436cc2248193c181b989f7; cf_clearance=GI6Uvad7FI374EmnuNbDNhwXIBCH5rTAjtC3tjnFX14-1714667315-1.0.1.1-W4j70rYHzXJrPc5KXv89yt28RjfoKzibp10WeVZO6xLOGRgNf79I1k6kyP603Y_QMk0A4ikJ2SGv28zpUEVDNQ
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Thu, 02 May 2024 16:28:57 GMT
content-type: application/octet-stream
content-length: 0
set-cookie: requestid=a88e919c1d554bb5c6dfe136f5744407
requestid=c7d8e3273fd164d4f2986a9808f47e13
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=xdW9k3aptRh6IDkdbJEqOsdDVgdjKc%2FOxgqfR9vru1EtM57m8G9trvcN9ifysLt2LNJME8r8GJR1IOOlt%2F29fn3AMYe43ZyDXsePiAs%2FtYYq1Bz27FdsE0v2y0Fu4zQ1"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87d9632cdc6956be-OSL
X-Firefox-Spdy: h2

lp.cybeready.net/Forms/Google/validator.js

172.67.74.139

200 OK

1.1 kB

URL GET HTTP/2
lp.cybeready.net/Forms/Google/validator.js
IP
172.67.74.139:443
ASN
#13335 CLOUDFLARENET

Requested by
https://datahub.center/g1ef4f7d19b8374a3248ced333debfefa2b1.html
Certificate
IssuerLet's Encrypt
Subjectcybeready.net
FingerprintBB:28:14:F8:09:02:DF:1E:F0:B6:74:8B:09:67:6A:55:A6:0D:A0:38
ValidityTue, 16 Apr 2024 23:13:46 GMT - Mon, 15 Jul 2024 23:13:45 GMT

File type
ASCII text, with very long lines (1108), with no line terminators
Size
1.1 kB (1091 bytes)
Hash
3a4a43e05bbe58926ab3a9708b533376
a69fad3a71da6eefa0edd63ca7077ac4a0405926
f919a959fb58eac3ef7e79db2a6b29f9dc630c186f2da647eb57eb27eb400051

HTTP Headers

GET /Forms/Google/validator.js HTTP/1.1
Host: lp.cybeready.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://datahub.center/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Thu, 02 May 2024 16:28:35 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=1515
etag: W/"7152564fdc6195c26cbe4e2a7430631c"
last-modified: Sun, 07 Feb 2016 16:40:15 GMT
x-amz-id-2: 4de9887Z3L0K4q5M3eX8YaIGCFYKlS8+SbMzOWFxf6vpGpJbrMqp6BSU3Ru7LdgDfwmTh1uR1gQ=
x-amz-request-id: WH8EJE2XV76WXDW4
cache-control: max-age=14400
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=U1iLI9dR3k223pnVudjkuiRqJ7mlrtae9eE1P4Q6sWtHJgWvZSJgHegSrjA%2BK2uvRq8bmqlXUlFSZI5trHQNAsRI0RdyfcX%2FXvgSO2TTQo1lqVjzAlUEEjoeWP9DXJiwLxg%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87d9629f2bd256ca-OSL
content-encoding: br
X-Firefox-Spdy: h2

datahub.center/cdn-cgi/challenge-platform/h/g/scripts/jsd/d0ff3ebede6b/main.js

172.67.71.111

200 OK

7.8 kB

URL GET HTTP/2
datahub.center/cdn-cgi/challenge-platform/h/g/scripts/jsd/d0ff3ebede6b/main.js
IP
172.67.71.111:443
ASN
#13335 CLOUDFLARENET

Requested by
https://datahub.center/g1ef4f7d19b8374a3248ced333debfefa2b1.html
Certificate
IssuerGoogle Trust Services LLC
Subjectdatahub.center
FingerprintC1:A2:93:28:87:3E:B4:85:10:A0:5E:11:62:68:62:71:8D:55:7B:A3
ValiditySun, 17 Mar 2024 03:37:14 GMT - Sat, 15 Jun 2024 03:37:13 GMT

File type
JavaScript source, ASCII text, with very long lines (7812), with no line terminators
Size
7.8 kB (7812 bytes)
Hash
1525ab627b4ae342ea70ef49d1e20e94
1eefb87597114a29cd4e854d292b018a0852abda
fd43ddcf65fed8deb0a4d05d2341896826d4b5b34a218c6815bc7cf927896b1a

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Google

HTTP Headers

GET /cdn-cgi/challenge-platform/h/g/scripts/jsd/d0ff3ebede6b/main.js HTTP/1.1
Host: datahub.center
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: requestid=14180ab515cb335cd9ff165598381f18
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Thu, 02 May 2024 16:28:35 GMT
content-type: application/javascript; charset=UTF-8
content-encoding: br
vary: accept-encoding
cache-control: max-age=14400, public
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=KmXpeKes5Qomti%2FkMaqe9x4vfPPlSd%2BlOcIsEqFuIbl9gp7IF%2BavlpKXvXmGXnLE%2FUFODASfcaklE5KYKdR87kNXmwr9sqHvc%2F23cNYzjmUKVDvTEwc1iXNWR4%2FWU5wM"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87d962a21b1456be-OSL
X-Firefox-Spdy: h2

lp.cybeready.net/Forms/Google/index.css

172.67.74.139

200 OK

3.2 kB

URL GET HTTP/2
lp.cybeready.net/Forms/Google/index.css
IP
172.67.74.139:443
ASN
#13335 CLOUDFLARENET

Requested by
https://datahub.center/g1ef4f7d19b8374a3248ced333debfefa2b1.html
Certificate
IssuerLet's Encrypt
Subjectcybeready.net
FingerprintBB:28:14:F8:09:02:DF:1E:F0:B6:74:8B:09:67:6A:55:A6:0D:A0:38
ValidityTue, 16 Apr 2024 23:13:46 GMT - Mon, 15 Jul 2024 23:13:45 GMT

File type
ASCII text, with very long lines (3152), with no line terminators
Size
3.2 kB (3150 bytes)
Hash
62760ad3d3183fd10ebf95dc361f08ea
fd83aaedcffd47870f1aed1103d94cf888b9476d
0e69fc06c078bb858a107a3ec7b5365c9368cffef40ad3ec0d2aa87551d8e153

HTTP Headers

GET /Forms/Google/index.css HTTP/1.1
Host: lp.cybeready.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://datahub.center/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Thu, 02 May 2024 16:28:35 GMT
content-type: text/css
cf-bgj: minify
cf-polished: origSize=3883
etag: W/"57e393e42d12341ec78e469610dcf93e"
last-modified: Sun, 07 Feb 2016 16:12:28 GMT
x-amz-id-2: kZf1Acu7agk9o/pWShhNpaMqwmEtc3ERmKn9DWWYfi9nTXIBrwdOh58HFOuXMsWdEeW9ch3vAkI=
x-amz-request-id: WH8F67M6F76X95DE
cache-control: max-age=14400
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=qhoATEGYVpdCRTLOKAp6w7%2Fd2CcTkmevEE1Za4H3O5WMcXb17QYe9ZrQk8qK8aDCw%2Bf6TkjD2Ivdp6iGFyDbdaOSe295zJuQKf3ZKDQOJxFMiosDHaPDlewXciY041%2Fx4m4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87d9629f2bcd56ca-OSL
content-encoding: br
X-Firefox-Spdy: h2

fonts.googleapis.com/css?family=Open+Sans:400,300,300italic,400italic,600,600italic,700,700italic,800,800italic&subset=latin,greek,latin-ext,cyrillic,greek-ext,vietnamese,cyrillic-ext

142.250.74.106

200 OK

56 kB

URL GET HTTP/2
fonts.googleapis.com/css?family=Open+Sans:400,300,300italic,400italic,600,600italic,700,700italic,800,800italic&subset=latin,greek,latin-ext,cyrillic,greek-ext,vietnamese,cyrillic-ext
IP
142.250.74.106:443
ASN
#15169 GOOGLE

Requested by
https://datahub.center/g1ef4f7d19b8374a3248ced333debfefa2b1.html
Certificate
IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
Fingerprint5F:6D:48:87:16:89:1E:A5:57:29:92:8B:34:BD:F2:92:0C:7F:F2:50
ValidityMon, 08 Apr 2024 07:32:03 GMT - Mon, 01 Jul 2024 07:32:02 GMT

File type
ASCII text, with very long lines (1572)
Size
56 kB (56115 bytes)
Hash
3c89b4e5563f4ba0410a1d7d4f3ad23e
6455000459bf2ad68625b8b554a652cc84145261
b17609553b24140fc01409b78fa834fe878de6410fe9e8996b0a5f6a984ddd6d

HTTP Headers

GET /css?family=Open+Sans:400,300,300italic,400italic,600,600italic,700,700italic,800,800italic&subset=latin,greek,latin-ext,cyrillic,greek-ext,vietnamese,cyrillic-ext HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lp.cybeready.net/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Thu, 02 May 2024 16:28:35 GMT
date: Thu, 02 May 2024 16:28:35 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (7)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (19)

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size