Report - fnxx.info/afc0060a0l5ed447915855573517a5b5e3d1.html

Report Overview

Visited public
2025-07-08 12:39:08
Tags
microsoft phishing
Submit Tags
URL
fnxx.info/afc0060a0l5ed447915855573517a5b5e3d1.html
Finishing URL
fnxx.info/afc0060a0l5ed447915855573517a5b5e3d1.html
IP / ASN
104.26.13.57
#13335 CLOUDFLARENET
Title
Sign in to your account
Phishing - Microsoft

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
fnxx.info	unknown	2015-08-19	2015-10-17	2025-07-01	2.1 kB	55 kB	104.26.12.57
lp.cybeready.net	unknown	2014-01-26	2015-12-30	2025-07-02	1.9 kB	12 kB	172.67.74.139

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (5)

	URL	From	Size	First Seen	Last Seen
	fnxx.info/afc0060a0l5ed447915855573517a5b5e3d1.html	ScriptElement	63 B	2025-07-08	2025-07-08
Pretty URL fnxx.info/afc0060a0l5ed447915855573517a5b5e3d1.html IP 104.26.12.57 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2025-07-08 12:39 Last Seen2025-07-08 12:39 Times Seen1 Hash d46598e219b6b86d86c616e0f749a768 1a41464bf4d6775a3c60f37c555be75e7d8f4e45 12e0ecb031a4b8217301d0f67d8ea577f161ff860bfcf18ecc23058fdd63c212 Loading...

	fnxx.info/afc0060a0l5ed447915855573517a5b5e3d1.html	ScriptElement	1.1 kB	2025-06-18	2025-07-15
Pretty URL fnxx.info/afc0060a0l5ed447915855573517a5b5e3d1.html IP 104.26.12.57 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2025-06-18 12:47 Last Seen2025-07-15 17:46 Times Seen48 Hash 4ccd7f81c0699ce2abdff139e23862c3 7f8331209d8d0dbb61126c7824f68b99f313cc74 af8fb4406418472ff72b946aba8d2e6675083d90b28c875158a778ba25de83b8 Loading...

	fnxx.info/afc0060a0l5ed447915855573517a5b5e3d1.html	ScriptElement	921 B	2025-07-08	2025-07-08
Pretty URL fnxx.info/afc0060a0l5ed447915855573517a5b5e3d1.html IP 104.26.12.57 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2025-07-08 12:39 Last Seen2025-07-08 12:39 Times Seen1 Hash 6596b7a671e6bc72b62fa3270a786035 a9c62a5c00b2bc334d2ea69e90011e1c0fb7e743 1103dccc247182c9017025002d0c44cd3f6b013ba8ed15006a1c52379a1546e8 Loading...

	fnxx.info/cdn-cgi/challenge-platform/scripts/jsd/main.js	ScriptElement	10 kB	2025-07-08	2025-07-08
Pretty URL fnxx.info/cdn-cgi/challenge-platform/scripts/jsd/main.js IP 104.26.12.57 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2025-07-08 12:39 Last Seen2025-07-08 13:28 Times Seen4 Hash b4ebebfd5590a2e00e404a10d7ec339e dc150e19a3a7815934bfd2f644bb69cd08d7bccd 2244f75cab6f51c9320891d10e6509e8973361646097235307b1cae978298650 Loading...

	about:blank	ScriptElement	236 B	2025-07-08	2025-07-08
Pretty URL about:blank IP 0.0.0.0 ASN #0 Introduced by scriptElement Embedded in HTML false Observations First Seen2025-07-08 12:39 Last Seen2025-07-08 12:39 Times Seen1 Hash 59e28798aa6436e10db0348073fef1ee 37b4ad55bca732f2c94baefc48ae8b2b1cacc8e5 5e1448b5d2d50727e53252e29076b8b99fe30add7f14b23c576312517db98c2f Loading...

HTTP Transactions (8)

URL IP Response Size

GET fnxx.info/cdn-cgi/challenge-platform/scripts/jsd/main.js

104.26.12.57

302 Found

10 kB

URL GET
fnxx.info/cdn-cgi/challenge-platform/scripts/jsd/main.js
IP
104.26.12.57:443
ASN
#13335 CLOUDFLARENET

Requested by
https://fnxx.info/afc0060a0l5ed447915855573517a5b5e3d1.html
Certificate
IssuerGoogle Trust Services
Subjectfnxx.info
FingerprintB9:3E:9F:B2:7E:66:2D:B5:96:3D:9A:DA:43:62:B9:46:AD:00:E5:43
ValidityWed, 02 Jul 2025 08:16:23 GMT - Tue, 30 Sep 2025 09:16:06 GMT

File type

Size
10 kB (9994 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Microsoft

HTTP Headers

GET /cdn-cgi/challenge-platform/scripts/jsd/main.js HTTP/1.1
Host: fnxx.info
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: requestid=79306dcd129dabb2efc1949c6766765e
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 302 Found
date: Tue, 08 Jul 2025 12:38:47 GMT
content-length: 0
cf-ray: 95bfa4022850b4ee-OSL
location: /cdn-cgi/challenge-platform/h/b/scripts/jsd/e7e9d014f96e/main.js?
cache-control: max-age=300, stale-if-error=10800, stale-while-revalidate=10800, public
access-control-allow-origin: *
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=kP%2FhxWFjIl0oMuHhTgfLVxppcu1qGx1tR1S712YpFIHjjf6o9BnIvxlGnthrUTB62UIl15qfAvzkvZ9lcHOJUMJx%2FEjzIAFpA08DAa9pZBMdtJ%2BhlySoXOIt8A%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
server-timing: cfL4;desc="?proto=TCP&rtt=2797&min_rtt=561&rtt_var=4324&sent=14&recv=19&lost=0&retrans=0&sent_bytes=10583&recv_bytes=1301&delivery_rate=11934065&cwnd=257&unsent_bytes=0&cid=6f181b01954d2ac1&ts=1368&x=0"
X-Firefox-Spdy: h2

GET lp.cybeready.net/beefree_images/cybeready_images/microsoft_signinoptions.svg

172.67.74.139

200 OK

1.6 kB

URL GET
lp.cybeready.net/beefree_images/cybeready_images/microsoft_signinoptions.svg
IP
172.67.74.139:443
ASN
#13335 CLOUDFLARENET

Requested by
https://fnxx.info/afc0060a0l5ed447915855573517a5b5e3d1.html
Certificate
IssuerLet's Encrypt
Subjectcybeready.net
FingerprintC9:67:4B:0B:AC:8A:B1:68:28:33:6D:A6:B0:F1:DD:02:81:5E:BD:C8
ValidityTue, 03 Jun 2025 18:45:18 GMT - Mon, 01 Sep 2025 18:45:17 GMT

File type
SVG Scalable Vector Graphics image
Size
1.6 kB (1592 bytes)
Hash
4e48046ce74f4b89d45037c90576bfac
4a41b3b51ed787f7b33294202da72220c7cd2c32
8e6db1634f1812d42516778fc890010aa57f3e39914fb4803df2c38abbf56d93

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Microsoft

HTTP Headers

GET /beefree_images/cybeready_images/microsoft_signinoptions.svg HTTP/1.1
Host: lp.cybeready.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fnxx.info/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Tue, 08 Jul 2025 12:38:47 GMT
content-type: image/svg+xml
content-encoding: br
x-amz-id-2: Tn79ZkxTFZbl/b22dS4VNo5a7HHaIX1UIQQ1oV2vp814EPpesT3aq7+0ENnv/myyhA24saJyhpY=
x-amz-request-id: Y7D24F7F2S9EEYTF
last-modified: Tue, 10 Jun 2025 15:13:54 GMT
etag: W/"4e48046ce74f4b89d45037c90576bfac"
x-amz-server-side-encryption: AES256
x-amz-version-id: wU8cUxM.CPzJAeWx5ZZ85SiUX5Ik75p7
cache-control: max-age=14400
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=dpXQbKzE0ms4MKm88XpxOHgqMTtQi3HXOk62TYz4sJ3wG73yClWmFOgptK5W%2FrjOSfbIsFhNepn9206eFYIvQr0C2MWkFn64YKD0nZyr9xXjg6aLPw0VeD5VQ77D9XmWB6M%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 95bfa3ff9c400b4d-OSL
server-timing: cfL4;desc="?proto=TCP&rtt=776&min_rtt=531&rtt_var=520&sent=7&recv=12&lost=0&retrans=0&sent_bytes=2438&recv_bytes=1313&delivery_rate=4414634&cwnd=254&unsent_bytes=0&cid=52fb60ea9e438350&ts=235&x=0"
X-Firefox-Spdy: h2

GET lp.cybeready.net/beefree_images/cybeready_images/microsoft_background.svg

172.67.74.139

200 OK

1.9 kB

URL GET
lp.cybeready.net/beefree_images/cybeready_images/microsoft_background.svg
IP
172.67.74.139:443
ASN
#13335 CLOUDFLARENET

Requested by
https://fnxx.info/afc0060a0l5ed447915855573517a5b5e3d1.html
Certificate
IssuerLet's Encrypt
Subjectcybeready.net
FingerprintC9:67:4B:0B:AC:8A:B1:68:28:33:6D:A6:B0:F1:DD:02:81:5E:BD:C8
ValidityTue, 03 Jun 2025 18:45:18 GMT - Mon, 01 Sep 2025 18:45:17 GMT

File type
SVG Scalable Vector Graphics image
Size
1.9 kB (1864 bytes)
Hash
bc3d32a696895f78c19df6c717586a5d
9191cb156a30a3ed79c44c0a16c95159e8ff689d
0e88b6fcbb8591edfd28184fa70a04b6dd3af8a14367c628edd7caba32e58c68

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Microsoft

HTTP Headers

GET /beefree_images/cybeready_images/microsoft_background.svg HTTP/1.1
Host: lp.cybeready.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fnxx.info/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Tue, 08 Jul 2025 12:38:47 GMT
content-type: image/svg+xml
content-encoding: br
x-amz-id-2: EM3wKahLkqNIl7SqxibvbG2L47bmqG5kNalQ2WbfUnl309XvxX1jepH7Far7U98ka71Vdj7SsZg=
x-amz-request-id: Y7D66SYD86T9AAZY
last-modified: Tue, 10 Jun 2025 15:13:53 GMT
etag: W/"bc3d32a696895f78c19df6c717586a5d"
x-amz-server-side-encryption: AES256
x-amz-version-id: HE2BsMHDGkQP7rguCXj9ECUOB52D_6DE
cache-control: max-age=14400
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=d7kYaTVX0a6snBGq0HwdpMYoQc%2Boyrwc6rLW8N6yzRpWmGMCqCxeQ%2FByfyEF5GryNO7Hr6kskYhSpy1KNexPLti2b4rOSXBUZDNSJk%2BTWiDEeAUZ%2Bd1I%2F5TqYDVyDskGfxM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 95bfa4017f240b4d-OSL
server-timing: cfL4;desc="?proto=TCP&rtt=785&min_rtt=388&rtt_var=403&sent=18&recv=16&lost=0&retrans=0&sent_bytes=6870&recv_bytes=1419&delivery_rate=9495081&cwnd=257&unsent_bytes=0&cid=52fb60ea9e438350&ts=523&x=0"
X-Firefox-Spdy: h2

GET fnxx.info/cdn-cgi/challenge-platform/h/b/scripts/jsd/e7e9d014f96e/main.js?

104.26.12.57

200 OK

10 kB

URL GET
fnxx.info/cdn-cgi/challenge-platform/h/b/scripts/jsd/e7e9d014f96e/main.js?
IP
104.26.12.57:443
ASN
#13335 CLOUDFLARENET

Requested by
https://fnxx.info/afc0060a0l5ed447915855573517a5b5e3d1.html
Certificate
IssuerGoogle Trust Services
Subjectfnxx.info
FingerprintB9:3E:9F:B2:7E:66:2D:B5:96:3D:9A:DA:43:62:B9:46:AD:00:E5:43
ValidityWed, 02 Jul 2025 08:16:23 GMT - Tue, 30 Sep 2025 09:16:06 GMT

File type
JavaScript source, ASCII text, with very long lines (9994), with no line terminators
Size
10 kB (9994 bytes)
Hash
b4ebebfd5590a2e00e404a10d7ec339e
dc150e19a3a7815934bfd2f644bb69cd08d7bccd
2244f75cab6f51c9320891d10e6509e8973361646097235307b1cae978298650

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Microsoft

HTTP Headers

GET /cdn-cgi/challenge-platform/h/b/scripts/jsd/e7e9d014f96e/main.js? HTTP/1.1
Host: fnxx.info
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: requestid=79306dcd129dabb2efc1949c6766765e
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Tue, 08 Jul 2025 12:38:47 GMT
content-type: application/javascript; charset=UTF-8
content-encoding: br
cache-control: max-age=14400, stale-if-error=10800, stale-while-revalidate=10800, public
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=EPXjWhbg4KSMJuTVTsCoGcNWRnwLY7qpUiJt2dOWUuxSS9h9NuYKO5LoAadIMW2jbMewS8G02RH7cGZqB9mkgg%2FeZwEs4zeoGAxllutFOMfUDgpF7q%2FXaaHzCA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 95bfa4037af0b4ee-OSL
server-timing: cfL4;desc="?proto=TCP&rtt=2590&min_rtt=561&rtt_var=3656&sent=15&recv=21&lost=0&retrans=0&sent_bytes=11142&recv_bytes=1414&delivery_rate=11934065&cwnd=257&unsent_bytes=0&cid=6f181b01954d2ac1&ts=1605&x=0"
X-Firefox-Spdy: h2

POST fnxx.info/cdn-cgi/challenge-platform/h/b/jsd/r/0.289451473035276:1751976692:Lzo38y3nYP-ONMA9E4rOZYQNIx03uUZS7zsg4dFyTAE/95bfa3f9ebcab4ee

104.26.12.57

200 OK

0 B

URL POST
fnxx.info/cdn-cgi/challenge-platform/h/b/jsd/r/0.289451473035276:1751976692:Lzo38y3nYP-ONMA9E4rOZYQNIx03uUZS7zsg4dFyTAE/95bfa3f9ebcab4ee
IP
104.26.12.57:443
ASN
#13335 CLOUDFLARENET

Requested by
https://fnxx.info/afc0060a0l5ed447915855573517a5b5e3d1.html
Certificate
IssuerGoogle Trust Services
Subjectfnxx.info
FingerprintB9:3E:9F:B2:7E:66:2D:B5:96:3D:9A:DA:43:62:B9:46:AD:00:E5:43
ValidityWed, 02 Jul 2025 08:16:23 GMT - Tue, 30 Sep 2025 09:16:06 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Microsoft

HTTP Headers

POST /cdn-cgi/challenge-platform/h/b/jsd/r/0.289451473035276:1751976692:Lzo38y3nYP-ONMA9E4rOZYQNIx03uUZS7zsg4dFyTAE/95bfa3f9ebcab4ee HTTP/1.1
Host: fnxx.info
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 12118
Origin: https://fnxx.info
DNT: 1
Connection: keep-alive
Referer: https://fnxx.info/afc0060a0l5ed447915855573517a5b5e3d1.html
Cookie: requestid=79306dcd129dabb2efc1949c6766765e
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Tue, 08 Jul 2025 12:38:48 GMT
content-type: text/plain; charset=UTF-8
content-length: 0
cf-ray: 95bfa4069818b4ee-OSL
set-cookie: cf_clearance=vOXXFOma8qCLjyCF4jOVdo3Yt.I3OpHGx0DOj0AyVcg-1751978328-1.2.1.1-gTrXDFAEogEcYZHEIrEQy97EqRl3aITYIZ8nGJWunTKEm__Na3YycMzH.2SZRHhWeNGz5pCSgSS.pIUnUh9ms.2wasfn0OaZDfUKQhUE.v6dD0nf0U91Qrm.LP1uThy8N1W5a4rCI0JHDO.UpMhuSu.bEyOpE43n1.zfSjNiSj7lFzOaShZngLTn4W.l7rqwA4m2bqz3NnKfys4ePiH.b55VitVnikgyL4DW3r81OXQ; HttpOnly; SameSite=None; Partitioned; Secure; Path=/; Domain=fnxx.info; Expires=Wed, 08 Jul 2026 12:38:48 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=7Ox5asV%2BlACQJtoSNGWeSDCA6yBU3JXYAhFNTEggi%2FX7NOt0xMrIlGhvP%2FtwgIPAH0Yk4Tn9P%2BmAIa7a1OUoePGqXVohxUbaGLdutjjVEUmwP8TSHBY354IMVg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
server-timing: cfL4;desc="?proto=TCP&rtt=1242&min_rtt=416&rtt_var=1381&sent=24&recv=40&lost=0&retrans=0&sent_bytes=16514&recv_bytes=13859&delivery_rate=11934065&cwnd=257&unsent_bytes=0&cid=6f181b01954d2ac1&ts=2082&x=0"
X-Firefox-Spdy: h2

GET fnxx.info/afc0060a0l5ed447915855573517a5b5e3d1.html

104.26.12.57

200 OK

31 kB

URL User Request GET
fnxx.info/afc0060a0l5ed447915855573517a5b5e3d1.html
IP
104.26.12.57:443
ASN
#13335 CLOUDFLARENET

Certificate
IssuerGoogle Trust Services
Subjectfnxx.info
FingerprintB9:3E:9F:B2:7E:66:2D:B5:96:3D:9A:DA:43:62:B9:46:AD:00:E5:43
ValidityWed, 02 Jul 2025 08:16:23 GMT - Tue, 30 Sep 2025 09:16:06 GMT

File type
HTML document, Unicode text, UTF-8 text, with very long lines (945), with CRLF, LF line terminators
Size
31 kB (30660 bytes)
Hash
530efbbce24219ee73699ef4b571cb54
3478e7ddb08ddc656203b807286039008e668cbd
1c4e34c9b17e7fd81f96c3ab2f87131efcfa5d10dbc6882ab05c0ce09ef9817d

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Microsoft

HTTP Headers

GET /afc0060a0l5ed447915855573517a5b5e3d1.html HTTP/1.1
Host: fnxx.info
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Tue, 08 Jul 2025 12:38:46 GMT
content-type: text/html
content-encoding: br
x-amz-expiration: expiry-date="Sun, 27 Jul 2025 00:00:00 GMT", rule-id="DeleteAfter30Days"
x-amz-server-side-encryption: AES256
x-amz-version-id: hxsyKxo725QbQq_n33WitCvqHIfQH7Ao
set-cookie: requestid=79306dcd129dabb2efc1949c6766765e
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=vMmMcP5%2FRZ0ASrPXxaClywzO56DhQcCBv4XyvP9UxCJQIn0vgKOlyJVuh2hoZQgXf91H5l9eGWxPgNlL60UOI2K8VNnWWyFjUbdHl3akDqqXXPOcTDGx8tNlvw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 95bfa3f9ebcab4ee-OSL
server-timing: cfL4;desc="?proto=TCP&rtt=6166&min_rtt=561&rtt_var=10856&sent=7&recv=11&lost=0&retrans=0&sent_bytes=3190&recv_bytes=1142&delivery_rate=2496551&cwnd=254&unsent_bytes=0&cid=6f181b01954d2ac1&ts=463&x=0"
X-Firefox-Spdy: h2

GET lp.cybeready.net/beefree_images/cybeready_images/microsoft_logo.svg

172.67.74.139

200 OK

3.7 kB

URL GET
lp.cybeready.net/beefree_images/cybeready_images/microsoft_logo.svg
IP
172.67.74.139:443
ASN
#13335 CLOUDFLARENET

Requested by
https://fnxx.info/afc0060a0l5ed447915855573517a5b5e3d1.html
Certificate
IssuerLet's Encrypt
Subjectcybeready.net
FingerprintC9:67:4B:0B:AC:8A:B1:68:28:33:6D:A6:B0:F1:DD:02:81:5E:BD:C8
ValidityTue, 03 Jun 2025 18:45:18 GMT - Mon, 01 Sep 2025 18:45:17 GMT

File type
SVG Scalable Vector Graphics image
Size
3.7 kB (3651 bytes)
Hash
ee5c8d9fb6248c938fd0dc19370e90bd
d01a22720918b781338b5bbf9202b241a5f99ee4
04d29248ee3a13a074518c93a18d6efc491bf1f298f9b87fc989a6ae4b9fad7a

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Microsoft

HTTP Headers

GET /beefree_images/cybeready_images/microsoft_logo.svg HTTP/1.1
Host: lp.cybeready.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fnxx.info/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Tue, 08 Jul 2025 12:38:47 GMT
content-type: image/svg+xml
content-encoding: br
x-amz-id-2: 3h79SW1lFWejFV/77UYiSrHUD0Gp097nXNsz4EriE+OmBYlCEilZ/l0Gt3xEVQ8L0zaJn5d1y1s=
x-amz-request-id: A8CCN831RZV3DS50
last-modified: Tue, 10 Jun 2025 15:13:54 GMT
etag: W/"ee5c8d9fb6248c938fd0dc19370e90bd"
x-amz-server-side-encryption: AES256
x-amz-version-id: 1dePIZSyGBclK0kMZn.Nqv9_fbjCvZLm
cache-control: max-age=14400
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=C2pWC0VVXYHuXcvaTH0S7pMWQYJAG52BybAcZH6Uyxe2hYzEqISPj3YxfqvJyalQ1WDZ1pHX83fPUJRzJOFlBsmooH6fbgv7SsuG67q4mXSo9qxE1Go2n76rkII8viUr%2BFE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 95bfa3ff9c3b0b4d-OSL
server-timing: cfL4;desc="?proto=TCP&rtt=742&min_rtt=388&rtt_var=458&sent=10&recv=13&lost=0&retrans=0&sent_bytes=3896&recv_bytes=1313&delivery_rate=8653386&cwnd=257&unsent_bytes=0&cid=52fb60ea9e438350&ts=296&x=0"
X-Firefox-Spdy: h2

GET lp.cybeready.net/beefree_images/cybeready_images/microsoft_arrow_left.svg

172.67.74.139

200 OK

513 B

URL GET
lp.cybeready.net/beefree_images/cybeready_images/microsoft_arrow_left.svg
IP
172.67.74.139:443
ASN
#13335 CLOUDFLARENET

Requested by
https://fnxx.info/afc0060a0l5ed447915855573517a5b5e3d1.html
Certificate
IssuerLet's Encrypt
Subjectcybeready.net
FingerprintC9:67:4B:0B:AC:8A:B1:68:28:33:6D:A6:B0:F1:DD:02:81:5E:BD:C8
ValidityTue, 03 Jun 2025 18:45:18 GMT - Mon, 01 Sep 2025 18:45:17 GMT

File type
SVG Scalable Vector Graphics image
Size
513 B (513 bytes)
Hash
a9cc2824ef3517b6c4160dcf8ff7d410
8db9aebad84ca6e4225bfdd2458ff3821cc4f064
34f9db946e89f031a80dfca7b16b2b686469c9886441261ae70a44da1dfa2d58

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Microsoft

HTTP Headers

GET /beefree_images/cybeready_images/microsoft_arrow_left.svg HTTP/1.1
Host: lp.cybeready.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fnxx.info/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Tue, 08 Jul 2025 12:38:47 GMT
content-type: image/svg+xml
content-encoding: br
x-amz-id-2: eL0psoxKkdWK2IG9WNPp7yNM7M54GxUAu29ZiKyg6Wech0NCieOAHbE3IIlw8Y+YNrLpv39sh+0=
x-amz-request-id: Y7DEN8723B8G4YEC
last-modified: Tue, 10 Jun 2025 15:13:53 GMT
etag: W/"a9cc2824ef3517b6c4160dcf8ff7d410"
x-amz-server-side-encryption: AES256
x-amz-version-id: KtZkBd1OFuJVqyYn1zxG0g5YcUgKC04K
cache-control: max-age=14400
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ZK298BDSXbs%2Fni8nUeWbBlcYAo8fMwc9Ol3RIHvc09RvBcIqG8gvtHeq1CVKAiqwLMRHJO2aWgD0NN7P%2FQEQQ6CMZP%2FtQQWb%2BL1e%2FMW8ugk4cYS%2F5%2B8w19M8g8f4dhxzguI%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 95bfa3ffac660b4d-OSL
server-timing: cfL4;desc="?proto=TCP&rtt=725&min_rtt=388&rtt_var=377&sent=14&recv=14&lost=0&retrans=0&sent_bytes=5950&recv_bytes=1313&delivery_rate=9495081&cwnd=257&unsent_bytes=0&cid=52fb60ea9e438350&ts=312&x=0"
X-Firefox-Spdy: h2

Report Overview

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

Quad9 DNS

ThreatFox

JavaScript (5)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (8)

URL GET

IP

ASN

Requested by

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL GET

IP

ASN

Requested by

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL GET

IP

ASN

Requested by

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL GET

IP