Report - skpa.pages.dev/

Report Overview

Submitted URL
skpa.pages.dev/
IP
188.114.97.1
ASN
#13335 CLOUDFLARENET
Submitted
2024-04-17 04:00:27
Access
public
Website Title
Masuk untuk melanjutkan
Final URL
skpa.pages.dev/
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
6

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
code.jquery.com	634	2005-12-10	2012-05-21	2024-04-16	408 B	31 kB	151.101.66.137
1.bp.blogspot.com	8403	2000-07-31	2012-05-21	2024-04-16	543 B	13 kB	142.250.74.161
drive.google.com	321	1997-09-15	2012-10-03	2024-04-16	422 B	682 B	142.250.74.142
ssl.gstatic.com	unknown	2008-02-11	2012-05-23	2024-04-16	458 B	1.5 kB	142.250.74.163
skpa.pages.dev	unknown	unknown	No data	No data	1.5 kB	63 kB	188.114.96.1
stackpath.bootstrapcdn.com	2467	2012-05-25	2018-06-15	2024-04-16	1.3 kB	295 kB	104.18.11.207

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

Scan Date	Severity	Indicator	Alert
2024-04-16	medium	skpa.pages.dev/	Facebook, Inc.
2024-04-16	medium	skpa.pages.dev/	Facebook, Inc.
2024-04-16	medium	skpa.pages.dev/	Facebook, Inc.

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (9)

	URL	Size	First Seen	Last Seen
	code.jquery.com/jquery-3.4.1.min.js	88 kB	2023-03-07	2024-04-30
Pretty URL code.jquery.com/jquery-3.4.1.min.js IP 151.101.66.137 ASN #54113 FASTLY Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:02:34 Last Seen2024-04-30 05:11:52 Times Seen96138 Hash 220afd743d9e9643852e31a135a9f3ae 88523924351bac0b5d560fe0c5781e2556e7693d 0925e8ad7bd971391a8b1e98be8e87a6971919eb5b60c196485941c3c1df089a Loading...

	stackpath.bootstrapcdn.com/bootstrap/4.3.1/js/bootstrap.min.js	58 kB	2023-03-07	2024-04-29
Pretty URL stackpath.bootstrapcdn.com/bootstrap/4.3.1/js/bootstrap.min.js IP 104.18.11.207 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:02:33 Last Seen2024-04-29 19:51:39 Times Seen20348 Hash e1d98d47689e00f8ecbc5d9f61bdb42e 6778fed3cf095a318141a31f455c8f4663885bde 0a34a87842c539c1f4feec56bba982fd596b73500046a6e6fe38a22260c6577b Loading...

	stackpath.bootstrapcdn.com/bootstrap/4.3.1/js/bootstrap.bundle.min.js	79 kB	2023-03-07	2024-04-29
Pretty URL stackpath.bootstrapcdn.com/bootstrap/4.3.1/js/bootstrap.bundle.min.js IP 104.18.11.207 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:02:59 Last Seen2024-04-29 18:10:44 Times Seen15697 Hash a454220fc07088bf1fdd19313b6bfd50 265a733cb7fbc481fd2510a659a85ad55c93c895 7f3145c87d3570154f633975e8a4f8d30aa38603edaba145501e9c90ddbe186c Loading...

	skpa.pages.dev/	248 B	2024-04-17	2024-04-17
Pretty URL skpa.pages.dev/ IP 188.114.96.1 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2024-04-17 06:00:33 Last Seen2024-04-17 06:00:33 Times Seen1 Hash 6d3d4787bff917470831b57870ed6cfb 9ba4333c8b5db72ac6eebf1c5027dc23ab28a2da d1982871284aa5c42cdd7c78113d827c0819c289ce9caba44e6833be254da49c Loading...

	skpa.pages.dev/	318 B	2024-04-17	2024-04-17
Pretty URL skpa.pages.dev/ IP 188.114.96.1 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2024-04-17 06:00:33 Last Seen2024-04-17 06:00:33 Times Seen1 Hash ff977e747d49cd160c2ad8bca8cb36f4 fdbf6128c9ce7831f299be3a53264dff0dee2402 747ea4806e51443be17b3c267660dc52d866c3d5d6eab7e381a7b84567520381 Loading...

	skpa.pages.dev/	239 B	2024-04-17	2024-04-17
Pretty URL skpa.pages.dev/ IP 188.114.96.1 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2024-04-17 06:00:34 Last Seen2024-04-17 06:00:34 Times Seen1 Hash 5e8cef697bf022849cdd312a6c350942 5896ba4f40a8c93020547c359d27bc7f77a57563 0bffbeee10034c0d66ed23fc281979f8fc2cd06309449cf3bd2a4a992d7d165e Loading...

	skpa.pages.dev/	353 B	2024-04-17	2024-04-17
Pretty URL skpa.pages.dev/ IP 188.114.96.1 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2024-04-17 06:00:34 Last Seen2024-04-17 06:00:34 Times Seen1 Hash 9df2da7805acf95a82709fd329b5c5d3 b61592735d0003c46bc52d0b9833ed22938060b7 854ccfecd1c95f6f5b29d1f99508641f62633606c7ab2a8efb291bb6d6c27413 Loading...

	skpa.pages.dev/	98 B	2024-04-17	2024-04-17
Pretty URL skpa.pages.dev/ IP 188.114.96.1 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2024-04-17 06:00:34 Last Seen2024-04-17 06:00:34 Times Seen1 Hash 8184451648e0168d9d6aea143ee9552c c63fbf7b0cebde53a89ad260a3e77db225eb94db 3773e2d79b51c98f9299510a305fa391f07e96eccb5542643d7826ce01201015 Loading...

		Size	First Seen	Last Seen
	#1 Write - 0587c69c24d90cba0d60d27568f70975	72 B	2024-04-17	2024-04-17
Pretty Observations First Seen2024-04-17 06:00:34 Last Seen2024-04-17 06:00:34 Times Seen1 Hash 0587c69c24d90cba0d60d27568f70975 09e8d76403f54cc06e8547f2ec320e3dd1cea5f3 4f560064fd9c69606f820977e30a78f04276e74a6036039df6784769318b167e Loading...

HTTP Transactions (10)

URL IP Response Size

code.jquery.com/jquery-3.4.1.min.js

151.101.66.137

200 OK

31 kB

URL GET HTTP/2
code.jquery.com/jquery-3.4.1.min.js
IP
151.101.66.137:443
ASN
#54113 FASTLY

Requested by
https://skpa.pages.dev/
Certificate
IssuerSectigo Limited
Subject*.jquery.com
FingerprintD2:19:0A:AD:CE:BB:9C:61:17:5D:29:4B:A2:54:E8:C6:91:B8:F9:8D
ValidityTue, 11 Jul 2023 00:00:00 GMT - Sun, 14 Jul 2024 23:59:59 GMT

File type
JavaScript source, ASCII text, with very long lines (65451)
Size
31 kB (30638 bytes)
Hash
220afd743d9e9643852e31a135a9f3ae
88523924351bac0b5d560fe0c5781e2556e7693d
0925e8ad7bd971391a8b1e98be8e87a6971919eb5b60c196485941c3c1df089a

HTTP Headers

GET /jquery-3.4.1.min.js HTTP/1.1
Host: code.jquery.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://skpa.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Fri, 18 Oct 1991 12:00:00 GMT
etag: W/"28feccc0-15851"
cache-control: public, max-age=31536000, stale-while-revalidate=604800
access-control-allow-origin: *
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Wed, 17 Apr 2024 04:00:02 GMT
age: 5244899
x-served-by: cache-lga21965-LGA, cache-hel1410032-HEL
x-cache: HIT, HIT
x-cache-hits: 23, 393012
x-timer: S1713326402.292316,VS0,VE0
vary: Accept-Encoding
content-length: 30638
X-Firefox-Spdy: h2

1.bp.blogspot.com/-Bf-ry892Jfw/Xz2Ey-p0N1I/AAAAAAAAADY/yIINe9AVjtEWQV0Kxd9gRmy18Lg6lG-UgCLcBGAsYHQ/s640/245y25476y42yh467y4w5y6ttty%2B%25281%2529.png

142.250.74.161

200 OK

13 kB

URL GET HTTP/2
1.bp.blogspot.com/-Bf-ry892Jfw/Xz2Ey-p0N1I/AAAAAAAAADY/yIINe9AVjtEWQV0Kxd9gRmy18Lg6lG-UgCLcBGAsYHQ/s640/245y25476y42yh467y4w5y6ttty%2B%25281%2529.png
IP
142.250.74.161:443
ASN
#15169 GOOGLE

Requested by
https://skpa.pages.dev/
Certificate
IssuerGoogle Trust Services LLC
Subjectmisc-sni.blogspot.com
FingerprintA4:03:49:6F:80:6E:27:69:C4:CF:7F:94:FC:BC:3C:1F:D5:28:AE:B5
ValidityMon, 04 Mar 2024 06:55:13 GMT - Mon, 27 May 2024 06:55:12 GMT

File type
PNG image data, 640 x 124, 8-bit/color RGBA, non-interlaced
Size
13 kB (12717 bytes)
Hash
9c199c67102eaff509383f60bd0b436b
16f1f4e223a56ffdbe4269853c03b190f983b54c
de8cbfa54757af582706bbd230755c3725c9bd7a39856723e6369eb2dfba9e2c

HTTP Headers

GET /-Bf-ry892Jfw/Xz2Ey-p0N1I/AAAAAAAAADY/yIINe9AVjtEWQV0Kxd9gRmy18Lg6lG-UgCLcBGAsYHQ/s640/245y25476y42yh467y4w5y6ttty%2B%25281%2529.png HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://skpa.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
access-control-allow-origin: *
timing-allow-origin: *
access-control-expose-headers: Content-Length
content-disposition: inline;filename="245y25476y42yh467y4w5y6ttty (1).png"
x-content-type-options: nosniff
server: fife
content-length: 12717
x-xss-protection: 0
date: Wed, 17 Apr 2024 00:13:33 GMT
expires: Thu, 18 Apr 2024 00:13:33 GMT
cache-control: public, max-age=86400, no-transform
etag: "v3a"
content-type: image/png
vary: Origin
age: 13589
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

drive.google.com/favicon.ico

142.250.74.142

302 Found

269 B

URL GET HTTP/2
drive.google.com/favicon.ico
IP
142.250.74.142:443
ASN
#15169 GOOGLE

Requested by
https://skpa.pages.dev/
Certificate
IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint02:6C:2F:38:A0:8A:95:AC:E8:2B:67:AA:69:A4:34:6E:15:99:F5:1D
ValidityMon, 04 Mar 2024 06:35:50 GMT - Mon, 27 May 2024 06:35:49 GMT

File type
HTML document, ASCII text, with CRLF, LF line terminators
Size
269 B (269 bytes)
Hash
1f2e520c63d531dc3b436073d53487f7
279c5a38c9a7c05b9a4e1f638aaa42ddb4ea3788
93e8696fd84db42910f91fbb642020fb422606d2689f48d27a50e654a57badfb

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: drive.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://skpa.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 302 Found
location: https://ssl.gstatic.com/images/branding/product/1x/drive_2020q4_32dp.png
cache-control: private
cross-origin-resource-policy: cross-origin
content-type: text/html; charset=UTF-8
x-content-type-options: nosniff
date: Wed, 17 Apr 2024 04:00:02 GMT
server: sffe
content-length: 269
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

ssl.gstatic.com/images/branding/product/1x/drive_2020q4_32dp.png

142.250.74.163

200 OK

831 B

URL GET HTTP/2
ssl.gstatic.com/images/branding/product/1x/drive_2020q4_32dp.png
IP
142.250.74.163:443
ASN
#15169 GOOGLE

Requested by
https://skpa.pages.dev/
Certificate
IssuerGoogle Trust Services LLC
Subject*.gstatic.com
Fingerprint8F:81:43:71:C4:F3:8C:FA:6D:EC:B4:5E:1F:58:71:AA:48:42:0E:E9
ValidityMon, 04 Mar 2024 07:16:39 GMT - Mon, 27 May 2024 07:16:38 GMT

File type
PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Size
831 B (831 bytes)
Hash
916c9bcccf19525ad9d3cd1514008746
9ccce6978d2417927b5150ffaac22f907ff27b6e
358e814139d3ed8469b36935a071be6696ccad7dd9bdbfdb80c052b068ae2a50

HTTP Headers

GET /images/branding/product/1x/drive_2020q4_32dp.png HTTP/1.1
Host: ssl.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://skpa.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="static-on-bigtable"
report-to: {"group":"static-on-bigtable","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/static-on-bigtable"}]}
content-length: 831
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 15 Apr 2024 19:57:01 GMT
expires: Tue, 15 Apr 2025 19:57:01 GMT
cache-control: public, max-age=31536000
age: 115381
last-modified: Fri, 21 Aug 2020 00:15:00 GMT
content-type: image/png
vary: Origin
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

skpa.pages.dev/kantamano.png?_nc_cat=104&ccb=2&_nc_sid=eaa83b&_nc_ohc=Ck0A2olqXkYAX_6YIBu&_nc_ad=z-m&_nc_cid=1225&_nc_eh=73450a7bb822a65874f4084b2a729c9f&_nc_ht=z-m-scontent.fsub3-2.fna&_nc_tp=30&oh=0cea13943ed41490dbf57bb96352996b&oe=6026D554

188.114.96.1

200 OK

14 kB

URL GET HTTP/3
skpa.pages.dev/kantamano.png?_nc_cat=104&ccb=2&_nc_sid=eaa83b&_nc_ohc=Ck0A2olqXkYAX_6YIBu&_nc_ad=z-m&_nc_cid=1225&_nc_eh=73450a7bb822a65874f4084b2a729c9f&_nc_ht=z-m-scontent.fsub3-2.fna&_nc_tp=30&oh=0cea13943ed41490dbf57bb96352996b&oe=6026D554
IP
188.114.96.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://skpa.pages.dev/
Certificate
IssuerGoogle Trust Services LLC
Subjectskpa.pages.dev
Fingerprint07:63:7D:21:78:71:0C:89:71:98:05:6B:42:55:2E:CF:AC:6B:A5:49
ValidityMon, 15 Apr 2024 12:13:22 GMT - Sun, 14 Jul 2024 12:13:21 GMT

File type
HTML document, Unicode text, UTF-8 text, with very long lines (2409), with CRLF line terminators
Size
14 kB (13901 bytes)
Hash
f2533522817ac1ab85cfee81e32f6d73
6aaf64ceb8e0d5fb4e2b9a0202d6f61f021d1f31
8e6f135a5e0a7a70f3afb5922b2efe31c816fbdeee0e19fcf3766064d0e2deaf

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Facebook, Inc.

HTTP Headers

GET /kantamano.png?_nc_cat=104&ccb=2&_nc_sid=eaa83b&_nc_ohc=Ck0A2olqXkYAX_6YIBu&_nc_ad=z-m&_nc_cid=1225&_nc_eh=73450a7bb822a65874f4084b2a729c9f&_nc_ht=z-m-scontent.fsub3-2.fna&_nc_tp=30&oh=0cea13943ed41490dbf57bb96352996b&oe=6026D554 HTTP/1.1
Host: skpa.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://skpa.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Wed, 17 Apr 2024 04:00:02 GMT
content-type: text/html; charset=utf-8
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: W/"70955c03381b230086ec831664b59607"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=tlC55bl%2F77Fg%2By6OLhsQSJ4uzkCmnY5fPkpXi8tKvU2ASyfgRXcPLOD9wH1UW20aVpF%2FaqGxyZiFS7AqrizYUaUsp5hCGlxJRosgyXiMwBwcfj%2BKPjWgtFfzjJL2dljRhQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8759817dcf2156a4-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

skpa.pages.dev/squery.js

188.114.96.1

200 OK

10 kB

URL GET HTTP/3
skpa.pages.dev/squery.js
IP
188.114.96.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://skpa.pages.dev/
Certificate
IssuerGoogle Trust Services LLC
Subjectskpa.pages.dev
Fingerprint07:63:7D:21:78:71:0C:89:71:98:05:6B:42:55:2E:CF:AC:6B:A5:49
ValidityMon, 15 Apr 2024 12:13:22 GMT - Sun, 14 Jul 2024 12:13:21 GMT

File type
HTML document, ASCII text, with CRLF line terminators
Size
10 kB (10511 bytes)
Hash
3f0284594a05393efe2f013b7df3640b
16cffbbeef2eda005ae96239d38b835e75c44788
db867b368948ab9646d60d2e515ef5e0be2ebd67dd4070eb4aca706625f6ba8c

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Facebook, Inc.

HTTP Headers

GET /squery.js HTTP/1.1
Host: skpa.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://skpa.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Wed, 17 Apr 2024 04:00:02 GMT
content-type: text/javascript; charset=utf-8
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: W/"77e5518ba646698fceb43f4997e8daee"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=gXRmwlp7S6HbWYa7YQCpSpej0LOH7RP66qO%2BIcxUA9o3ZwJBwTP%2Br8uZpuKuybUcCY5MYt6rQv%2BbhtkCaqdfxh1ainTvQKoD1Lpg6vgQv0mgk09w%2BP2HiBm15owGj1iZZQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8759817dcf2656a4-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

skpa.pages.dev/

188.114.96.1

200 OK

36 kB

URL User Request GET HTTP/2
skpa.pages.dev/
IP
188.114.96.1:443
ASN
#13335 CLOUDFLARENET

Certificate
IssuerGoogle Trust Services LLC
Subjectskpa.pages.dev
Fingerprint07:63:7D:21:78:71:0C:89:71:98:05:6B:42:55:2E:CF:AC:6B:A5:49
ValidityMon, 15 Apr 2024 12:13:22 GMT - Sun, 14 Jul 2024 12:13:21 GMT

File type
HTML document, Unicode text, UTF-8 text, with very long lines (2409), with CRLF line terminators
Size
36 kB (36273 bytes)
Hash
f2533522817ac1ab85cfee81e32f6d73
6aaf64ceb8e0d5fb4e2b9a0202d6f61f021d1f31
8e6f135a5e0a7a70f3afb5922b2efe31c816fbdeee0e19fcf3766064d0e2deaf

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Facebook, Inc.

HTTP Headers

GET / HTTP/1.1
Host: skpa.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Wed, 17 Apr 2024 04:00:02 GMT
content-type: text/html; charset=utf-8
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: W/"70955c03381b230086ec831664b59607"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=BHVWr90mfZvRja%2F73eRy9dDS1BmfICVlOdrR7uNabj9X75oXe2OSW8aLeMIC8gHAKg81q8wS4bG%2BfNZKu%2BbuBLTnNhXVvqbcJt3fGYH5P25DlAy%2B3n%2BGRC%2BVffrgdq5hdw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8759817c8e77569b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

stackpath.bootstrapcdn.com/bootstrap/4.3.1/js/bootstrap.bundle.min.js

104.18.11.207

200 OK

79 kB

URL GET HTTP/2
stackpath.bootstrapcdn.com/bootstrap/4.3.1/js/bootstrap.bundle.min.js
IP
104.18.11.207:443
ASN
#13335 CLOUDFLARENET

Requested by
https://skpa.pages.dev/
Certificate
IssuerGoogle Trust Services LLC
Subjectbootstrapcdn.com
Fingerprint57:B4:25:B9:9C:88:A1:A3:3D:F7:31:74:02:E4:D1:E0:0A:F5:11:63
ValidityWed, 27 Mar 2024 00:22:09 GMT - Tue, 25 Jun 2024 00:22:08 GMT

File type
JavaScript source, ASCII text, with very long lines (65297)
Size
79 kB (78635 bytes)
Hash
a454220fc07088bf1fdd19313b6bfd50
265a733cb7fbc481fd2510a659a85ad55c93c895
7f3145c87d3570154f633975e8a4f8d30aa38603edaba145501e9c90ddbe186c

HTTP Headers

GET /bootstrap/4.3.1/js/bootstrap.bundle.min.js HTTP/1.1
Host: stackpath.bootstrapcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://skpa.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Wed, 17 Apr 2024 04:00:02 GMT
content-type: application/javascript; charset=utf-8
vary: Accept-Encoding
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: DE
access-control-allow-origin: *
cache-control: public, max-age=31919000
etag: W/"a454220fc07088bf1fdd19313b6bfd50"
last-modified: Mon, 25 Jan 2021 22:04:08 GMT
cdn-cachedat: 10/03/2023 17:35:44
cdn-proxyver: 1.04
cdn-requestpullcode: 200
cdn-requestpullsuccess: True
cdn-edgestorageid: 755
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
cdn-status: 200
cdn-requestid: 982709866b51e7db17122f8d0508aa86
cdn-cache: HIT
cf-cache-status: HIT
age: 1235449
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 8759817e0e4eb4f4-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

stackpath.bootstrapcdn.com/bootstrap/4.3.1/js/bootstrap.min.js

104.18.11.207

200 OK

58 kB

URL GET HTTP/2
stackpath.bootstrapcdn.com/bootstrap/4.3.1/js/bootstrap.min.js
IP
104.18.11.207:443
ASN
#13335 CLOUDFLARENET

Requested by
https://skpa.pages.dev/
Certificate
IssuerGoogle Trust Services LLC
Subjectbootstrapcdn.com
Fingerprint57:B4:25:B9:9C:88:A1:A3:3D:F7:31:74:02:E4:D1:E0:0A:F5:11:63
ValidityWed, 27 Mar 2024 00:22:09 GMT - Tue, 25 Jun 2024 00:22:08 GMT

File type
JavaScript source, ASCII text, with very long lines (57791)
Size
58 kB (58072 bytes)
Hash
e1d98d47689e00f8ecbc5d9f61bdb42e
6778fed3cf095a318141a31f455c8f4663885bde
0a34a87842c539c1f4feec56bba982fd596b73500046a6e6fe38a22260c6577b

HTTP Headers

GET /bootstrap/4.3.1/js/bootstrap.min.js HTTP/1.1
Host: stackpath.bootstrapcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://skpa.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Wed, 17 Apr 2024 04:00:02 GMT
content-type: application/javascript; charset=utf-8
vary: Accept-Encoding
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: DE
access-control-allow-origin: *
cache-control: public, max-age=31919000
etag: W/"e1d98d47689e00f8ecbc5d9f61bdb42e"
last-modified: Mon, 25 Jan 2021 22:04:08 GMT
cdn-cachedat: 08/21/2023 18:50:34
cdn-proxyver: 1.04
cdn-requestpullcode: 200
cdn-requestpullsuccess: True
cdn-edgestorageid: 1079
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
cdn-status: 200
cdn-requestid: 7405f0000be4a68db13c4eaa1682a3e2
cdn-cache: HIT
cf-cache-status: HIT
age: 12440893
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 8759817e0e50b4f4-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

stackpath.bootstrapcdn.com/bootstrap/4.3.1/css/bootstrap.min.css

104.18.11.207

200 OK

156 kB

URL GET HTTP/2
stackpath.bootstrapcdn.com/bootstrap/4.3.1/css/bootstrap.min.css
IP
104.18.11.207:443
ASN
#13335 CLOUDFLARENET

Requested by
https://skpa.pages.dev/
Certificate
IssuerGoogle Trust Services LLC
Subjectbootstrapcdn.com
Fingerprint57:B4:25:B9:9C:88:A1:A3:3D:F7:31:74:02:E4:D1:E0:0A:F5:11:63
ValidityWed, 27 Mar 2024 00:22:09 GMT - Tue, 25 Jun 2024 00:22:08 GMT

File type
ASCII text, with very long lines (65324)
Size
156 kB (155758 bytes)
Hash
a15c2ac3234aa8f6064ef9c1f7383c37
6e10354828454898fda80f55f3decb347fd9ed21
60b19e5da6a9234ff9220668a5ec1125c157a268513256188ee80f2d2c8d8d36

HTTP Headers

GET /bootstrap/4.3.1/css/bootstrap.min.css HTTP/1.1
Host: stackpath.bootstrapcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://skpa.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Wed, 17 Apr 2024 04:00:02 GMT
content-type: text/css; charset=utf-8
vary: Accept-Encoding
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: DE
access-control-allow-origin: *
cache-control: public, max-age=31919000
etag: W/"a15c2ac3234aa8f6064ef9c1f7383c37"
last-modified: Mon, 25 Jan 2021 22:04:08 GMT
cdn-cachedat: 10/31/2023 18:59:49
cdn-proxyver: 1.04
cdn-requestpullcode: 200
cdn-requestpullsuccess: True
cdn-edgestorageid: 1078
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
cdn-status: 200
cdn-requestid: 781fdf1c6e823e65290dac5eeb884a47
cdn-cache: HIT
cf-cache-status: HIT
age: 12617183
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 8759817e0e4bb4f4-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (9)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML