Report - index-cb6.pages.dev/

Report Overview

Submitted URL
index-cb6.pages.dev/
IP
172.66.44.129
ASN
#13335 CLOUDFLARENET
Submitted
2024-04-17 23:57:18
Access
public
Website Title
Yahoo - Login
Final URL
index-cb6.pages.dev/#client_id=4345a7b9-9a63-4910-a426-35363201d503&response_mode=form_post&response_type=code+id_token&scope=openid+profile&state=OpenIdConnect.AuthenticationProperties%3dctF0jk0w2UtS0FF3oS4G9QM_05ExoZ-6c9rdc6cylWGLdsztC6SkQkXZb7mwjA7QOG8KZidR0h2ZYRFXCtcc5POb_I7bBanvW9lBbKKjeEXtOezrvXMFWb7p4oOfODQw&nonce=637021592852309357.YWUzYzY1ZmYtM2ZjYy00NTAwLTllOWUtZTI5N2JhOTA0MDYxOGI0ZjE0MjYtYzYzMy00ZDQ1LWJjZjgtYTc0MDQwODAyMjQy&redirect_uri=https%3a%2f%2fwww.office.com%2f&ui_locales=en-US&mkt=en-US
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
4

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
codesandbox.io	95492	2016-11-23	2017-04-04	2024-04-12	468 B	6.0 kB	172.64.154.107
ajax.googleapis.com	12905	2005-01-25	2013-08-16	2024-04-17	434 B	31 kB	142.250.74.106
s.yimg.com	375	1997-05-14	2012-05-21	2024-04-17	490 B	215 kB	87.248.119.252
index-cb6.pages.dev	unknown	2020-09-02	2022-04-05	2024-03-16	476 B	39 kB	172.66.44.129

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

Scan Date	Severity	Indicator	Alert
2024-04-17	medium	index-cb6.pages.dev/	Yahoo! Inc

PhishTank

Scan Date	Severity	Indicator	Alert
2023-11-06	medium	index-cb6.pages.dev/	Other

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (6)

	URL	Size	First Seen	Last Seen
	index-cb6.pages.dev/	127 B	2023-03-07	2024-04-18
Pretty URL index-cb6.pages.dev/ IP 172.66.44.129 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 01:02:55 Last Seen2024-04-18 01:57:19 Times Seen132 Hash b1dd02cb5a4791f729d449589a8738f2 3e9bd816f66c8ae99d4e9b24b589ede6b82fc856 8ddd81f0db61ec641b38969c118879d6dc141f2587d44645078c8ac3abb7e98c Loading...

	ajax.googleapis.com/ajax/libs/jquery/2.2.4/jquery.min.js	86 kB	2023-03-07	2024-04-30
Pretty URL ajax.googleapis.com/ajax/libs/jquery/2.2.4/jquery.min.js IP 142.250.74.106 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:02:00 Last Seen2024-04-30 22:59:26 Times Seen386801 Hash 2f6b11a7e914718e0290410e85366fe9 69bb69e25ca7d5ef0935317584e6153f3fd9a88c 05b85d96f41fff14d8f608dad03ab71e2c1017c2da0914d7c59291bad7a54f8e Loading...

	index-cb6.pages.dev/	6.5 kB	2023-12-10	2024-04-18
Pretty URL index-cb6.pages.dev/ IP 172.66.44.129 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2023-12-10 02:55:27 Last Seen2024-04-18 01:57:19 Times Seen30 Hash 4c6d1de37dad9a2a02eff0f1de6a20bc 9dced351bdba6ecf10f81ebcd67aa1c0c1ded6ac db0e8a27adc3938994b3af042267582370bd267583c34567c19875c8653591ec Loading...

	index-cb6.pages.dev/	401 B	2023-03-07	2024-04-18
Pretty URL index-cb6.pages.dev/ IP 172.66.44.129 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 14:06:17 Last Seen2024-04-18 01:57:19 Times Seen32 Hash 71a0ae0d8b6e1e86d41f2d5327d1511b 780d0a286856415bbc2179bfae95da538a557a54 3fd4c97b795ebf366f646e1f1c9f589e6565083859488c32ee6dba3f67259836 Loading...

	unknown	12 B	2023-04-10	2024-04-30
Pretty Introduced by eventHandler Embedded in HTML false Observations First Seen2023-04-10 20:08:46 Last Seen2024-04-30 05:14:36 Times Seen832 Hash 5713faf8ca10dbb49add5667ae392427 de45519f1f3e83dd24b1072fe2c4155bc9d54f43 5f1da0bbcefa3e3559cc8224917e07dc5c2d808d6c2b4b56d16d0edbcd9e49b1 Loading...

	index-cb6.pages.dev/	1.1 kB	2023-03-07	2024-04-18
Pretty URL index-cb6.pages.dev/ IP 172.66.44.129 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 14:06:17 Last Seen2024-04-18 01:57:19 Times Seen45 Hash dbb9c50aeedd836e8d591e9765fb8ab7 cfc3cd6f1928cdca1c78113402cc0a0c44476d18 0bca75b07c054243a9a6efe6eb2e6aa9b7cdaec1450366096fab15dfa77532f4 Loading...

HTTP Transactions (4)

URL IP Response Size

ajax.googleapis.com/ajax/libs/jquery/2.2.4/jquery.min.js

142.250.74.106

200 OK

30 kB

URL GET HTTP/2
ajax.googleapis.com/ajax/libs/jquery/2.2.4/jquery.min.js
IP
142.250.74.106:443
ASN
#15169 GOOGLE

Requested by
https://index-cb6.pages.dev/
Certificate
IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
Fingerprint47:5A:64:7D:9F:47:34:07:31:91:97:F7:04:42:7A:D5:EA:AD:07:4E
ValidityMon, 04 Mar 2024 07:16:44 GMT - Mon, 27 May 2024 07:16:43 GMT

File type
JavaScript source, ASCII text, with very long lines (32065)
Size
30 kB (30028 bytes)
Hash
2f6b11a7e914718e0290410e85366fe9
69bb69e25ca7d5ef0935317584e6153f3fd9a88c
05b85d96f41fff14d8f608dad03ab71e2c1017c2da0914d7c59291bad7a54f8e

HTTP Headers

GET /ajax/libs/jquery/2.2.4/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://index-cb6.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 30028
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 11 Apr 2024 17:38:23 GMT
expires: Fri, 11 Apr 2025 17:38:23 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
age: 541110
last-modified: Tue, 03 Mar 2020 19:15:00 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

s.yimg.com/cv/apiv2/default/20190301/UK_DAU_Growth_1119_Finance_1440x1024_MailLogIn__1_.jpg

87.248.119.252

200 OK

214 kB

URL GET HTTP/2
s.yimg.com/cv/apiv2/default/20190301/UK_DAU_Growth_1119_Finance_1440x1024_MailLogIn__1_.jpg
IP
87.248.119.252:443
ASN
#203220 Yahoo-UK Limited

Requested by
https://index-cb6.pages.dev/
Certificate
IssuerDigiCert Inc
Subject*.fantasysports.yahoo.com
FingerprintF9:49:E1:CC:DE:98:74:FF:9B:DF:28:DC:D8:43:B9:82:99:B1:60:DB
ValidityTue, 02 Apr 2024 00:00:00 GMT - Wed, 22 May 2024 23:59:59 GMT

File type
JPEG image data, baseline, precision 8, 1440x1024, components 3
Size
214 kB (213860 bytes)
Hash
7171fe240564b0bce4d7f65872e48405
8e7876fb580b861ece7c7b916fe1fa440dbb3073
427d7ed626298ce9dd24e7c074e49c8acb5047595c0464cf0cc8337fe497461e

HTTP Headers

GET /cv/apiv2/default/20190301/UK_DAU_Growth_1119_Finance_1440x1024_MailLogIn__1_.jpg HTTP/1.1
Host: s.yimg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://index-cb6.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
x-amz-id-2: 6WNNwhFMbIGDPQ35g7zQjKPs6qmOAdnBK9xVsj6I4gKyKOvUXl32ULCzAWILvlWSDzYN5Lk57Pc=
x-amz-request-id: VMDK981EWCWENBF5
date: Tue, 12 Mar 2024 19:17:57 GMT
last-modified: Wed, 04 Dec 2019 16:12:42 GMT
etag: "7171fe240564b0bce4d7f65872e48405"
x-amz-server-side-encryption: AES256
cache-control: max-age=31536000
accept-ranges: bytes
content-type: image/jpeg
server: ATS
content-length: 213860
referrer-policy: no-referrer-when-downgrade
age: 3127137
access-control-allow-origin: *
strict-transport-security: max-age=31536000
expect-ct: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
vary: Origin
ats-carp-promotion: 1, 1
X-Firefox-Spdy: h2

index-cb6.pages.dev/

172.66.44.129

200 OK

38 kB

URL User Request GET HTTP/2
index-cb6.pages.dev/
IP
172.66.44.129:443
ASN
#13335 CLOUDFLARENET

Certificate
IssuerCloudflare, Inc.
Subjectindex-cb6.pages.dev
Fingerprint48:1B:69:EB:41:8E:6E:3F:2F:DD:D7:22:63:D5:B6:97:78:A0:86:D8
ValidityTue, 26 Dec 2023 00:00:00 GMT - Wed, 25 Dec 2024 23:59:59 GMT

File type
HTML document, ASCII text, with very long lines (18070), with CRLF line terminators
Size
38 kB (38538 bytes)
Hash
bb0685b6ab852617e01f5ee0ebb2c7f9
fc4cf7fced5a062a947f7a05eb004e9af7f4e51e
1fe3d81d7cf313d0c0c032b480448bb7756c177d675e9aa7e56853491802f329

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Yahoo! Inc
PhishTank	phishing	Other

HTTP Headers

GET / HTTP/1.1
Host: index-cb6.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Wed, 17 Apr 2024 23:56:52 GMT
content-type: text/html; charset=utf-8
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: W/"4cfc147567f253c8134489dc25eec3c7"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=nzfYchY94xTGzk1Tu39Gn4VBxE6z%2FZhhqO6SVhb6rcxHSI7Ko9Ne%2FPU08FXgg0rIO%2Bu%2B79U2V4cVlU2JDhaiZcEUW2X5zCyAAK%2FYimH8pKckG1vDxXZfPqB34OoeQ5kW7R87F89O"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87605aad99a056aa-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

codesandbox.io/static/js/watermark-button.ccc763f75.js

172.64.154.107

200 OK

5.4 kB

URL GET HTTP/2
codesandbox.io/static/js/watermark-button.ccc763f75.js
IP
172.64.154.107:443
ASN
#13335 CLOUDFLARENET

Requested by
https://index-cb6.pages.dev/
Certificate
IssuerLet's Encrypt
Subjectcodesandbox.io
Fingerprint07:3E:75:0B:F2:71:AF:23:54:EF:53:35:B2:91:F5:98:97:FB:88:A3
ValidityMon, 25 Mar 2024 01:49:20 GMT - Sun, 23 Jun 2024 01:49:19 GMT

File type
HTML document, ASCII text, with very long lines (5628), with no line terminators
Size
5.4 kB (5373 bytes)
Hash
13b9daed7ee7edf9f77d54127f8ae33e
fbe51adc98e31959cf6f16e71890379baf3741b5
372e8cdab70ca187d87d0f2721691c552cc6dc45c60e03c17caf2bd7869d54c7

HTTP Headers

GET /static/js/watermark-button.ccc763f75.js HTTP/1.1
Host: codesandbox.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://index-cb6.pages.dev/
Origin: https://index-cb6.pages.dev
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Wed, 17 Apr 2024 23:56:53 GMT
content-type: text/html
last-modified: Tue, 16 Apr 2024 16:03:19 GMT
vary: Accept-Encoding
expires: Thu, 01 Jan 1970 00:00:01 GMT
cache-control: no-cache
access-control-allow-origin: *
access-control-allow-methods: GET
via: 1.1 google
alt-svc: h3=":443"; ma=86400
cf-cache-status: MISS
set-cookie: _cfuvid=ChkeSLVhBF2xBWp9ju4QmMlNgj1YjDDrwYUDYgJ4ykI-1713398213392-0.0.1.1-604800000; path=/; domain=.codesandbox.io; HttpOnly; Secure; SameSite=None
server: cloudflare
cf-ray: 87605ab05a3b0b65-OSL
content-encoding: br
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (6)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (4)

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate