English

_ga_4Y8DBCM1YW

crisp-client%2Fsession%2F352f6e05-af84-45d6-a5e9-474e7e0bb156

_gcl_au

_ga_P4H32H5J

Within the network infrastructure generic top-level domain (.net), 'dnimytjwfoka9.cloudfront.net' is registered, featuring subdomain 'dnimytjwfoka9'. Count 10 characters in 'cloudfront' holding 3 vowels versus seven consonants. Segmentation suggests 2 words: cloud, front. Expect five characters per word on average. No strong language cues emerged from the frequency lists.

html/a4/2b/a42b95f1-08cc-456e-a837-766c83d38a57_fallback.html.gz

ScrapingBee

csrf_token

email

password

g-recaptcha-response

require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs

script-src 'report-sample' 'nonce-nn7REQeCgYv-q0WZUWS1Cg' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1

script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascnsrsggc:112:0

default-src 'self'; style-src 'self' 'unsafe-inline' https://*.posthog.com https://fonts.googleapis.com; script-src 'self' 'nonce-7It1HZzMLF2FsVk4rvZvgH' https://*.posthog.com https://*.i.posthog.com; font-src 'self' https://*.posthog.com https://app-static.eu.posthog.com https://app-static-prod.posthog.com https://d1sdjtjk6xzm7.cloudfront.net https://fonts.gstatic.com https://cdn.jsdelivr.net https://assets.faircado.com https://use.typekit.net; worker-src 'self'; child-src 'none'; object-src 'none'; media-src https://res.cloudinary.com; img-src 'self' data: https://*.posthog.com https://posthog.com https://www.gravatar.com https://res.cloudinary.com https://platform.slack-edge.com https://raw.githubusercontent.com; frame-ancestors https://posthog.com https://preview.posthog.com; connect-src 'self' https://status.posthog.com https://*.posthog.com  https://raw.githubusercontent.com https://api.github.com; frame-src https:; manifest-src 'self'; base-uri 'self'; report-uri https://us.i.posthog.com/report/?token=sTMFPsFhdP1Ssg&sample_rate=0.1&v=2; report-to posthog

require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes

script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascnsrsggc:169:0

script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascnsrsggc:138:0

appId=cid-v1:24dd0b7c-7995-45d6-b3b6-925639dc2d30

appId=cid-v1:7d42d046-dcef-4ece-9958-25d0ee39f9a0

a-mkg5uddq1yzt

reCAPTCHA

db22d886ad45f080f50718386df042c442fccfe4b903e3ce3991d9358c3a6083

0214c2153bf5416172db410ef5aca88104454fcb77e06345c44e132b161118f3

e51e0f931c99097041d636508173fc4714e4340d452ca34fc1c77d20f3d100a7

f9b44daabebc59ee6791d8ad22b0d82d4569ab75a8d3037e5af02d5c051c97a6

ccdd2d231d4fc51186c484d940d8d7eff0e0ab787067fc8aa6a10f014deffa7e

439cf1326a197d9d35dc8af270c662ed3ec64496fdc41c909eebd94513e8c9df

1c9c5272136c7ebb6df65a9f5f7e30afe147971ec8d417412e7e5cbc3c51b77c

d4de6ec5557d941f6e0e1224d0bea039e1f87ba1b39edf4c6b129da6839ea8cf

cec72174cceb8d24af1a378c6b9ab1fa9326c116d543cc32c277b716bf98163e

7dd277dca7e89334821e151095ff0d8134c34314bcc26597910b03f3cd3ddfbe

ad042d9de0fd6138a0d1a59fae548ef1f58669d1c2c42c7671d598f682e3ebe2

b015ac80f585e00841230d2dfe859d8161a1b06d5ec6d2877bf9cde1838d46f5

3c39797ae40a922f4010479d5f21165afd0c2cafe14fda51c9bd056eb16f3b4e

fc16f31f01d8f47e0df493e47ff4904e9b3f1651a4c6571601ae113ead74a34a

c0f31172aa9461100aae851906c8c3ea217aa73569b09ad849d9879f70b3c579

129ded0e63181d7bdeeade607a2ad8726ece16f76c870c14ef0a4e12b86950c9

27107e7bfe363acca6d5850d081bfe310668fc3e0541df9a0ffc6e3296b96cbb

d745ddde94af823f4020b9c31de67f5afc64bbf230797050f6e57d3586796a10

561e81899be32366c4eb743e94049d12b81923433cadf35e9accc0bf02d213b2

4c66a3c3f7f856784d174f3fbc40c7343b808cc9ce2d020461d6245ee62eb047

7d05bc7270e66b084a35e5c9637164a28b848f745b1449f8df49a1f33ee3065a

25803d8eb50963baf536c51868b67ffadfc65c220988e9a1e4d33469dcc8a8ac

d224e4ba28e9568e224224460fcc0faddaf7626d6a27407bbba0ec809c4731f3

d01bcdd20e433a1e540c1ae8808661fb3b7f309c6b210f7a4bc3609318773246

fbb21ec796b73d8fc1fdf7ce4ec0cd894586de515f224493a33730cc1249c270

2705d34ce01b971477642471d789cfe540661e2577a94a5258f3a435afec1f21

A7vZI3v+Gz7JfuRolKNM4Aff6zaGuT7X0mf3wtoZTnKv6497cVMnhy03KDqX7kBz/q/iidW7srW31oQbBt4VhgoAAACUeyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJEaXNhYmxlVGhpcmRQYXJ0eVN0b3JhZ2VQYXJ0aXRpb25pbmczIiwiZXhwaXJ5IjoxNzU3OTgwODAwLCJpc1N1YmRvbWFpbiI6dHJ1ZSwiaXNUaGlyZFBhcnR5Ijp0cnVlfQ==

width=device-width, initial-scale=1.0, maximum-scale=1.0, user-scalable=0

viewport

 ScrapingBee is a Web Scraping API that handles proxies and Headless browser for you, so you can focus on extracting the data you want, and nothing else. 

description

HSTS header missing - vulnerable to protocol downgrade attacks

CSP header missing - vulnerable to XSS attacks

child-src 'none';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources 'self';trusted-types;worker-src blob: 'self';frame-ancestors 'none';

child-src https:  chrome-untrusted://new-tab-page/ chrome-untrusted://ntp-microsoft-auth/;connect-src chrome://resources chrome://theme 'self';default-src 'self';font-src chrome://resources 'self';img-src chrome://resources chrome://theme chrome://image chrome://favicon2 chrome://app-icon chrome://extension-icon chrome://fileicon blob: data: 'self';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources chrome://webui-test 'self';style-src chrome://resources chrome://theme 'self' 'unsafe-inline';trusted-types parse-html-subset sanitize-inner-html static-types webui-test-script webui-test-html polymer-html-literal polymer-template-event-attribute-policy lit-html-desktop;frame-ancestors 'none';

child-src 'none';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources 'self';trusted-types;frame-ancestors 'none';

base-uri 'none';child-src https:;form-action https://ogs.google.com https://*.corp.google.com;object-src 'none';script-src 'self' 'unsafe-inline' https:;frame-ancestors chrome://new-tab-page/

Amazon EC2 Abuse

IP Management

Amazon AWS Network Operations

Amazon.com, Inc.

AWS RPKI Management POC

IP Routing

Amazon EC2 Network Operations

AMAZON-CF


  window.dataLayer = window.dataLayer || [];
  function gtag(){dataLayer.push(arguments);}
  gtag('js', new Date());
  gtag('config', 'G-P4H32H5J');


(function(w,d,s,l,i){w[l]=w[l]||[];w[l].push({'gtm.start':
new Date().getTime(),event:'gtm.js'});var f=d.getElementsByTagName(s)[0],
j=d.createElement(s),dl=l!='dataLayer'?'&l='+l:'';j.async=true;j.src=
'https://www.googletagmanager.com/gtm.js?id='+i+dl;f.parentNode.insertBefore(j,f);
})(window,document,'script','dataLayer','GTM-P4H32H5J');


  window.$crisp=[];window.CRISP_WEBSITE_ID="352f6e05-af84-45d6-a5e9-474e7e0bb156";(function(){d=document;s=d.createElement("script");s.src="https://client.crisp.chat/l.js";s.async=1;d.getElementsByTagName("head")[0].appendChild(s);})();
  



    $( document ).ready(function() {
        $("#show-portal").on('click', function(){

        })
    });



      // Cookie helper functions
      function getCookie(name) {
        const value = `; ${document.cookie}`;
        const parts = value.split(`; ${name}=`);
        if (parts.length === 2) return parts.pop().split(';').shift();
        return null;
      }

      // Get values from cookies or hash parameters
      let distinct_id = getCookie('posthog_distinct_id');

      !function(t,e){var o,n,p,r;e.__SV||(window.posthog=e,e._i=[],e.init=function(i,s,a){function g(t,e){var o=e.split(".");2==o.length&&(t=t[o[0]],e=o[1]),t[e]=function(){t.push([e].concat(Array.prototype.slice.call(arguments,0)))}}(p=t.createElement("script")).type="text/javascript",p.crossOrigin="anonymous",p.async=!0,p.src=s.api_host.replace(".i.posthog.com","-assets.i.posthog.com")+"/static/array.js",(r=t.getElementsByTagName("script")[0]).parentNode.insertBefore(p,r);var u=e;for(void 0!==a?u=e[a]=[]:a="posthog",u.people=u.people||[],u.toString=function(t){var e="posthog";return"posthog"!==a&&(e+="."+a),t||(e+=" (stub)"),e},u.people.toString=function(){return u.toString(1)+".people (stub)"},o="init capture register register_once register_for_session unregister unregister_for_session getFeatureFlag getFeatureFlagPayload isFeatureEnabled reloadFeatureFlags updateEarlyAccessFeatureEnrollment getEarlyAccessFeatures on onFeatureFlags onSessionId getSurveys getActiveMatchingSurveys renderSurvey canRenderSurvey getNextSurveyStep identify setPersonProperties group resetGroups setPersonPropertiesForFlags resetPersonPropertiesForFlags setGroupPropertiesForFlags resetGroupPropertiesForFlags reset get_distinct_id getGroups get_session_id get_session_replay_url alias set_config startSessionRecording stopSessionRecording sessionRecordingStarted captureException loadToolbar get_property getSessionProperty createPersonProfile opt_in_capturing opt_out_capturing has_opted_in_capturing has_opted_out_capturing clear_opt_in_out_capturing debug".split(" "),n=0;n<o.length;n++)g(u,o[n]);e._i.push([i,s,a])},e.__SV=1)}(document,window.posthog||[]);
      posthog.init("phc_JpBXqGLwRzNIxJryQK3hWJGOyJwTIxQuZU4SXMNEKzT", {
            api_host: 'https://doew6cwnh4rb0.cloudfront.net',
            person_profiles: 'identified_only',
            autocapture: true,
            rageclick: true,
            save_referrer: true,
            enable_heatmaps: true,
            persistence: 'localStorage',
            session_idle_timeout_seconds: 1800, // 30 minutes
            session_recording: {
            maskAllInputs: true,
              maskInputFn: (text, element) => {
                if (element?.dataset.record === 'true') {
                  return text;
                }
                return '*'.repeat(text.trim().length);
              }
            },
            loaded: ()=> {
            
            }
      });
  

document.addEventListener("click",function(a){if(a=a.target.closest("button.h-24.text-black-100.opacity-50"))window.dataLayer=window.dataLayer||[],window.dataLayer.push({event:"api_key_copied"})});

Requests	IP Address	Location	AS Autonomous System
57	18.244.20.65	United States	AS16509AMAZON-02
13	18.244.20.56	United States	AS16509AMAZON-02
11	54.192.87.215	United States	AS16509AMAZON-02
6	104.18.28.104	United States	AS13335CLOUDFLARENET
5	142.250.185.104	United States	AS15169GOOGLE
4	216.58.206.67	United States	AS15169GOOGLE
4	150.171.28.10	United States	AS8075MICROSOFT-CORP-MSN-AS-BLOCK
3	142.250.184.228	United States	AS15169GOOGLE
3	52.242.103.142	Boydton, Virginia, United States	AS8075MICROSOFT-CORP-MSN-AS-BLOCK
2	216.239.32.36	United States	AS15169GOOGLE
57	72	-	-

Security Scan Report: dnimytjwfoka9.cloudfront.net

Summary

AI Security Verdict

Confirmed Scam

Risk Factors

Details

Screenshot

Page Load Overview

Language Analysis

Primary Language

Detection Details

Website Classification

Primary Category

All Detected Categories

Detected Features

Domain & IP Information

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

ssdeep (Context Triggered Piecewise Hashing)

sdhash (Similarity Digest Hashing)

Image Hashes

Perceptual Hashes

Other Hashes

Scan History