Suspected phishing site | Cloudflare

phishing scam

technology software

English

The domain name 'gfrg.zafmvuvfjhyu.sa.com' uses the commercial generic top-level domain (.com) and includes subdomain 'gfrg.zafmvuvfjhyu'. The second-level label 'sa' is 2 characters long with one vowel and 1 consonant. Breaking it apart gives 2 words: s, a. Median word length is one character. No strong language cues emerged from the frequency lists.

atok

original_path

cf-turnstile-response

html/95/c8/95c87884-6810-4e7e-9bff-e33170997587.html.gz

default-src 'none'; script-src 'nonce-GDx7ovScMNvKazkX' 'unsafe-eval'; script-src-attr 'none'; worker-src blob:; style-src 'unsafe-inline'; img-src 'self'; connect-src 'self'; frame-src 'self' blob:; child-src 'self' blob:; form-action 'none'; base-uri 'self'; sandbox allow-same-origin allow-scripts allow-popups allow-forms

robots

viewport

HSTS header missing - vulnerable to protocol downgrade attacks

CSP header missing - vulnerable to XSS attacks

child-src 'none';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources 'self';trusted-types;worker-src blob: 'self';frame-ancestors 'none';

child-src https:  chrome-untrusted://new-tab-page/ chrome-untrusted://ntp-microsoft-auth/;connect-src chrome://resources chrome://theme 'self';default-src 'self';font-src chrome://resources 'self';img-src chrome://resources chrome://theme chrome://image chrome://favicon2 chrome://app-icon chrome://extension-icon chrome://fileicon blob: data: 'self';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources chrome://webui-test 'self';style-src chrome://resources chrome://theme 'self' 'unsafe-inline';trusted-types parse-html-subset sanitize-inner-html static-types webui-test-script webui-test-html polymer-html-literal polymer-template-event-attribute-policy lit-html-desktop;frame-ancestors 'none';

child-src 'none';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources 'self';trusted-types;frame-ancestors 'none';

base-uri 'none';child-src https:;form-action https://ogs.google.com https://*.corp.google.com;object-src 'none';script-src 'self' 'unsafe-inline' https:;frame-ancestors chrome://new-tab-page/

☠️ Malicious - https://gfrg.zafmvuvfjhyu.sa.com/cllascio.php?342D363837343734373037333341324632463646373737373731363437393734363337393636363637383739363737313641373437343634364332453733373537303631363236313733363532453633364632463636373536453633373436393646364537333246373633313246363336433646363136423244373236353634363937323635363337343346363333443334333936333334333333353633333232443631333633333339324433343331333033333244333836333337333332443336333033323632333333363332363633323333333833302D242323656D61696C2323

Requests	IP Address	Location	AS Autonomous System
3	104.21.53.192	United States	AS13335CLOUDFLARENET
3	172.67.217.242	United States	AS13335CLOUDFLARENET
3	104.18.95.41	United States	AS13335CLOUDFLARENET
3	104.18.94.41	United States	AS13335CLOUDFLARENET
12	4	-	-

Security Scan Report: gfrg.zafmvuvfjhyu.sa.com

Summary

AI Security Verdict

Details

Bot Protection Detected

Screenshot

Page Load Overview

Language Analysis

Primary Language

Detection Details

Website Classification

Primary Category

All Detected Categories

Detected Features

Domain & IP Information

Scan History