education

corporate

phishing/scam

English

TSaf24b364027

TSPD_101_DID

_ga_FY6FEMEJEW

WT_FPC

TS00000000076

TS01c2db25

The domain 'volcano.si.edu' uses the sponsored educational top-level domain (.edu); it also runs on subdomain 'volcano'. Its registrable label 'si' stretches across 2 characters holding one vowel versus one consonant. Tokenizing the label suggests one word: si. Median word length comes out to 2 characters. No strong language cues emerged from the frequency lists.

html/1f/2d/1f2d8490-65d0-4ada-aeab-f5f7d4180d8d.html.gz

script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascnsrsggc:169:0

script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascnsrsggc:138:0

1378f0319bca5e0b2360a21db0816e498a0a264edef020f7cdf7ea4274601805

e1b65e2a5dfcc149c36e5689808f112c918ce5327bf8976d31c3f9b6a92e14a8

78a85aca2f0b110c29e0d2b137e09f0a1fb7a8e554b499f740d6744dc8962cfe

f739630caa44fe643199a47857670655a43b6ab17709c5f16abbe0afb4a3f147

6e6cbcb0f5d853713523c45ed9a570ff8116beaa778b2e4f7a1663f3b5d691c6

49782e420e018a0b04ce26b6e1f0491d761a157cc87d546584c7208a6458a19b

afdf23b2b5a105e98d1197207655f65fa7711a42b0fdfce7e005df6a2e332461

3f8e2db4984c4a0a15fbd8a60620e258d95b503fdc4f69d9c4668af210762a55

5c78d24c1bac72dd3cc5c00099213d9164eef695b959c55ea826b40449712e8b

f3d6023d6c514d258f149fe57199e1fbf4e6df0d45521471a8993aff3cee174c

0fe202233abaeba6655fb7ab8c1f35768e23a55124947bc207035214dd6c991e

8d375d2769135ecb9fb325931131da27b837c034f75452fb76d2cc1dc79974a9

Volcano Global Risk Identification and Analysis Project (VOGRIPA)

Smithsonian Institution | Global Volcanism Program

https://volcano.si.edu/gallery/photos/GVP-09901.jpg

https://volcano.si.edu/volcano.cfm?vn=221091

Hayli Gubbi is the southernmost volcano of the Erta Ale Range. Recent tectonism has created a graben at the summit. A symmetrical scoria cone with a 200-m-wide crater displaying fumarolic activity occupies the center of the graben. An older shield volcano is covered on the north by recent fissure-fed lava flows. Lava flows from the axial portion of a fissure system extending to the south have reached the floor of the Giulietti Plain, covering 8,200-year-old sedimentary deposits. The open fissures extend for more than 10 km and are lined with dozens of small spatter cones and pit craters.

Keywords

HSTS header missing - vulnerable to protocol downgrade attacks

CSP header missing - vulnerable to XSS attacks

child-src 'none';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources 'self';trusted-types;worker-src blob: 'self';frame-ancestors 'none';

child-src https:  chrome-untrusted://new-tab-page/ chrome-untrusted://ntp-microsoft-auth/;connect-src chrome://resources chrome://theme 'self';default-src 'self';font-src chrome://resources 'self';img-src chrome://resources chrome://theme chrome://image chrome://favicon2 chrome://app-icon chrome://extension-icon chrome://fileicon blob: data: 'self';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources chrome://webui-test 'self';style-src chrome://resources chrome://theme 'self' 'unsafe-inline';trusted-types parse-html-subset sanitize-inner-html static-types webui-test-script webui-test-html polymer-html-literal polymer-template-event-attribute-policy lit-html-desktop;frame-ancestors 'none';

child-src 'none';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources 'self';trusted-types;frame-ancestors 'none';

base-uri 'none';child-src https:;form-action https://ogs.google.com https://*.corp.google.com;object-src 'none';script-src 'self' 'unsafe-inline' https:;frame-ancestors chrome://new-tab-page/

Abuse-POC

ARIN-Abuse

Tran Ngoc Nguyen

ARIN-NOC

Technical POC

Smithsonian Institution


(function(){
window["loaderConfig"] = "/TSPD/?type=21";
})();




//<![CDATA[
var _tag=new WebTrends();
_tag.dcsGetId();
//]]>



//<![CDATA[
_tag.dcsCustom=function(){
// Add custom parameters here.
//_tag.DCSext.param_name=param_value;
}
_tag.dcsCollect();
//]]>



  window.dataLayer = window.dataLayer || [];
  function gtag(){dataLayer.push(arguments);}
  gtag('js', new Date());
  gtag('config', 'G-FY6FEMEJEW');


Requests	IP Address	Location	AS Autonomous System
23	160.111.244.23	Washington, District of Columbia, United States	AS25829SMITHSONIAN
3	160.111.252.9	Washington, District of Columbia, United States	AS25829SMITHSONIAN
2	216.239.32.36	United States	AS15169GOOGLE
1	66.102.1.156	United States	AS15169GOOGLE
1	142.250.186.163	United States	AS15169GOOGLE
1	216.58.206.72	United States	AS15169GOOGLE
1	216.239.34.36	United States	AS15169GOOGLE
1	66.102.1.157	United States	AS15169GOOGLE
1	2620:0:b0:2100::9	United States	Unknown
1	2a00:1450:400c:c07::9c	Belgium	AS15169GOOGLE
32	19	-	-

Security Scan Report: volcano.si.edu

Summary

AI Security Verdict

Safe Website

Safety Factors

Details

Screenshot

Page Load Overview

Language Analysis

Primary Language

Detection Details

Website Classification

Primary Category

All Detected Categories

Detected Features

Domain & IP Information

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

ssdeep (Context Triggered Piecewise Hashing)

sdhash (Similarity Digest Hashing)

Image Hashes

Perceptual Hashes

Other Hashes

Scan History