Report - wt.maticufasi.click/ai-meta-support

Report Overview

Submitted URL
wt.maticufasi.click/ai-meta-support
IP
203.205.10.134
ASN
#45903 CMC Telecom Infrastructure Company
Submitted
2024-04-24 15:46:46
Access
public
Website Title
Facebook
Final URL
wt.maticufasi.click/ai-meta-support
Tags
meta facebook phishing social
urlquery detections
Phishing - Facebook

Detections

urlquery
6
Network Intrusion Detection
0
Threat Detection Systems
2

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
content.pancake.vn	unknown	unknown	2023-06-23	2024-04-15	2.1 kB	51 kB	203.171.27.184
a.pancake.vn	806491	unknown	2021-03-22	2024-03-27	1.3 kB	5.6 kB	113.20.119.13
aus5.mozilla.org	2548	1998-01-24	2015-10-27	2024-04-23	512 B	6.5 kB	35.244.181.201
fonts.googleapis.com	8877	2005-01-25	2013-06-10	2024-04-24	465 B	12 kB	142.250.74.106
zerossl.ocsp.sectigo.com	4049	2018-08-16	2020-05-09	2024-04-23	336 B	808 B	104.18.38.233
wt.maticufasi.click	unknown	unknown	No data	No data	2.4 kB	213 kB	203.205.10.134
fonts.gstatic.com	unknown	2008-02-11	2014-09-09	2024-04-23	1.1 kB	33 kB	216.58.207.227
api.webcake.io	unknown	2019-11-06	2020-05-25	2024-03-27	871 B	7.6 kB	113.20.119.13

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

Scan Date	Severity	Indicator	Alert
2024-04-24	medium	wt.maticufasi.click/ai-meta-support	Facebook, Inc.

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (11)

	URL	Size	First Seen	Last Seen
	unknown	39 B	2023-04-11	2024-05-05
Pretty Introduced by eventHandler Embedded in HTML false Observations First Seen2023-04-11 03:58:47 Last Seen2024-05-05 23:23:13 Times Seen2817 Hash 87b659c90b81604997dd06a67e8b773e bc13329ca575a3e32c93e0e1cf791f47f91b0c2f 1ac445488ebead2ed0b74a9c86ad76fa1a81f363806218afb2ae4aae5f127448 Loading...

	wt.maticufasi.click/address_wc/address.84.min.js?v=1	448 kB	2023-08-08	2024-04-24
Pretty URL wt.maticufasi.click/address_wc/address.84.min.js?v=1 IP 203.205.10.134 ASN #45903 CMC Telecom Infrastructure Company Introduced by scriptElement Embedded in HTML false Observations First Seen2023-08-08 23:30:42 Last Seen2024-04-24 17:46:53 Times Seen99 Hash a759939f9c8ba558c3d3274a1ec63b3a 3e2d93da25c03fe06a43ccecb9e46cfde4b2d959 1549821457bafd3155f570ab2892a8b218ec8e0be049c46e15d0b296be9e8fd6 Loading...

	wt.maticufasi.click/webcake/v4/fff57a8c-ca66-4e3b-96df-5a0e55363edb	392 kB	2024-04-15	2024-04-24
Pretty URL wt.maticufasi.click/webcake/v4/fff57a8c-ca66-4e3b-96df-5a0e55363edb IP 203.205.10.134 ASN #45903 CMC Telecom Infrastructure Company Introduced by scriptElement Embedded in HTML false Observations First Seen2024-04-15 17:50:57 Last Seen2024-04-24 17:46:54 Times Seen6 Hash 9c167466da191511970c71204bd80ed3 9d9ce183a58d5417da95324d798a856015fa9874 8449b66969fc2bc8d3ca8b90c0a368cc28f25862bdb2f5bee70818f1ad72eb95 Loading...

	unknown	318 B	2024-04-24	2024-04-24
Pretty Introduced by scriptElement Embedded in HTML false Observations First Seen2024-04-24 17:46:53 Last Seen2024-04-24 17:46:53 Times Seen1 Hash 1a123dc40c599cda828c12bb16185f10 984d66ef1404e7e15befc5f67251bf8743c122d6 c369688855d8e3918a2e8032a0b3a3e5a6b095d4afe4ea74cf8acad4dc1b8b87 Loading...

	a.pancake.vn/js/app.js?vsn=d	4.9 kB	2023-03-08	2024-04-24
Pretty URL a.pancake.vn/js/app.js?vsn=d IP 113.20.119.13 ASN #45903 CMC Telecom Infrastructure Company Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-08 02:47:38 Last Seen2024-04-24 17:46:54 Times Seen522 Hash 2256f1b3f8d83aae868f3e546a7fa5ec c59eb80f98846f38f28cfa496c824829ed39c789 74b62bbff4866e7a99770a845517c37ae2f1315f850b48028c1697038cb58c7f Loading...

	wt.maticufasi.click/ai-meta-support	434 B	2023-03-13	2024-04-24
Pretty URL wt.maticufasi.click/ai-meta-support IP 203.205.10.134 ASN #45903 CMC Telecom Infrastructure Company Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-13 11:17:26 Last Seen2024-04-24 17:46:53 Times Seen271 Hash 87efdf509e021238ca4c7ed7e965d4d5 f0aa08b322ead0a2c6c858a4c4c7ab6e211ad48e 76db81e0e8bd1039ec8eeb6da0b653e1a16edc20968702213bb175c48231894c Loading...

	wt.maticufasi.click/ai-meta-support	1.3 kB	2023-03-08	2024-04-24
Pretty URL wt.maticufasi.click/ai-meta-support IP 203.205.10.134 ASN #45903 CMC Telecom Infrastructure Company Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-08 02:47:38 Last Seen2024-04-24 17:46:53 Times Seen280 Hash bb49d815c92d05b0742391976939158f 5024436428f749c94689e8710802015338e15a0e c93ecb394fd1ec9a36a8aaaf4b93a3d5974866c4f4aa75347e309ec6cf6ebdb7 Loading...

	wt.maticufasi.click/ai-meta-support	8.9 kB	2024-04-24	2024-04-24
Pretty URL wt.maticufasi.click/ai-meta-support IP 203.205.10.134 ASN #45903 CMC Telecom Infrastructure Company Introduced by scriptElement Embedded in HTML true Observations First Seen2024-04-24 17:46:53 Last Seen2024-04-24 17:46:53 Times Seen1 Hash 4a35a4215d7afac0b8f962c6c3166037 7dd6b8239b1353af748538150d4d31687f0a0f09 ddcce16dd565189ac2e51fe4312918225d3d8c32419fb2d0fafb553163f033e0 Loading...

	wt.maticufasi.click/ai-meta-support	63 B	2023-03-08	2024-04-24
Pretty URL wt.maticufasi.click/ai-meta-support IP 203.205.10.134 ASN #45903 CMC Telecom Infrastructure Company Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-08 02:47:38 Last Seen2024-04-24 17:46:53 Times Seen278 Hash 1b50ec67c297254fcd8fb8be840cba8b 9b52fe0105007c31e38d325872c2154efdc3d21f 9c3ccb2cd662b9c7770c0f527900f6425087e367020011ea2566ff91a671cfbc Loading...

	wt.maticufasi.click/ai-meta-support	96 B	2024-04-24	2024-04-24
Pretty URL wt.maticufasi.click/ai-meta-support IP 203.205.10.134 ASN #45903 CMC Telecom Infrastructure Company Introduced by scriptElement Embedded in HTML true Observations First Seen2024-04-24 17:46:53 Last Seen2024-04-24 17:46:53 Times Seen1 Hash 78d00399940223ebc873d2c413bbc268 4af945b687263628b408451f876995996dc12420 1947dd75f7efc7621d6c514f7f93b0c6f59f2fde827b3176b9c1e982dbfd5ca4 Loading...

	wt.maticufasi.click/ai-meta-support	275 B	2024-01-19	2024-04-24
Pretty URL wt.maticufasi.click/ai-meta-support IP 203.205.10.134 ASN #45903 CMC Telecom Infrastructure Company Introduced by scriptElement Embedded in HTML true Observations First Seen2024-01-19 16:05:45 Last Seen2024-04-24 17:46:53 Times Seen17 Hash 03ef68d1c2147fb091f961da3354a693 57619910bde556bac0569cff6fd4351450f290a1 2032d6ebb2560240f7ce0ad76515fa47409c2b6d545fffe94cfc800a3516c58d Loading...

HTTP Transactions (18)

URL IP Response Size

zerossl.ocsp.sectigo.com/

104.18.38.233

316 B

URL
zerossl.ocsp.sectigo.com/
IP
104.18.38.233:0
ASN
#13335 CLOUDFLARENET

File type
data
Size
316 B (316 bytes)
Hash
269c471ce7a1e2ea83e6c2d8c343991c
8d66b5c4dfd27eab5ae738260f40f8c636886a21
024d4af6384c0bd8c405e091d1897b7fc72a195e6791337f9bde0dc0bdc1574d

HTTP Headers

POST / HTTP/1.1
Host: zerossl.ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Wed, 24 Apr 2024 15:46:20 GMT
Content-Type: application/ocsp-response
Content-Length: 316
Connection: keep-alive
Last-Modified: Mon, 22 Apr 2024 16:03:38 GMT
Expires: Mon, 29 Apr 2024 16:03:37 GMT
Etag: "8d66b5c4dfd27eab5ae738260f40f8c636886a21"
Cache-Control: max-age=432436,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb2
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 879739bfaa9656a2-OSL

wt.maticufasi.click/ai-meta-support

203.205.10.134

200 OK

12 kB

URL User Request GET HTTP/2
wt.maticufasi.click/ai-meta-support
IP
203.205.10.134:443
ASN
#45903 CMC Telecom Infrastructure Company

Certificate
IssuerZeroSSL
Subjectwt.maticufasi.click
FingerprintA6:86:FA:2A:5B:75:81:F7:3A:BD:51:CB:58:27:09:64:83:3C:92:5D
ValidityMon, 22 Apr 2024 00:00:00 GMT - Sun, 21 Jul 2024 23:59:59 GMT

File type
HTML document, Unicode text, UTF-8 text, with very long lines (22757)
Size
12 kB (12423 bytes)
Hash
4a40b4f162055cc386596c30cdbcd501
8ee3493775a331948125d6eb614169bf7af1d4c3
fd860cd93d4f7297f85a59f25ee9dcb00032eb6b554939cb34eb6afe22eb34d0

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Facebook
OpenPhish	phishing	Facebook, Inc.

HTTP Headers

GET /ai-meta-support HTTP/1.1
Host: wt.maticufasi.click
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: openresty/1.19.3.2
date: Wed, 24 Apr 2024 15:46:21 GMT
content-type: text/html; charset=utf-8
content-length: 12423
cache-control: max-age=0, private, must-revalidate
content-encoding: gzip
vary: accept-encoding
x-request-id: F8lB5B4_ONZhyMEB9w4j
access-control-allow-origin: *
X-Firefox-Spdy: h2

fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2

216.58.207.227

200 OK

16 kB

URL GET HTTP/2
fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2
IP
216.58.207.227:443
ASN
#15169 GOOGLE

Requested by
https://wt.maticufasi.click/ai-meta-support
Certificate
IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintF5:5C:D9:68:C6:5F:A3:33:5A:73:C3:79:B6:83:FE:44:2E:A4:83:74
ValidityMon, 18 Mar 2024 20:34:25 GMT - Mon, 10 Jun 2024 20:34:24 GMT

File type
Web Open Font Format (Version 2), TrueType, length 15860, version 1.0
Size
16 kB (15860 bytes)
Hash
e9f5aaf547f165386cd313b995dddd8e
acdef5603c2387b0e5bffd744b679a24a8bc1968
f5aebdfea35d1e7656ef4acc5db1f243209755ae3300943ef8fc6280f363c860

HTTP Headers

GET /s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://wt.maticufasi.click
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15860
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 23 Apr 2024 01:54:31 GMT
expires: Wed, 23 Apr 2025 01:54:31 GMT
cache-control: public, max-age=31536000
age: 136310
last-modified: Wed, 11 May 2022 19:24:42 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2

216.58.207.227

200 OK

16 kB

URL GET HTTP/2
fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
IP
216.58.207.227:443
ASN
#15169 GOOGLE

Requested by
https://wt.maticufasi.click/ai-meta-support
Certificate
IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintF5:5C:D9:68:C6:5F:A3:33:5A:73:C3:79:B6:83:FE:44:2E:A4:83:74
ValidityMon, 18 Mar 2024 20:34:25 GMT - Mon, 10 Jun 2024 20:34:24 GMT

File type
Web Open Font Format (Version 2), TrueType, length 15744, version 1.0
Size
16 kB (15744 bytes)
Hash
15d9f621c3bd1599f0169dcf0bd5e63e
7ca9c5967f3bb8bffeab24b639b49c1e7d03fa52
f6734f8177112c0839b961f96d813fcb189d81b60e96c33278c1983b6f419615

HTTP Headers

GET /s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://wt.maticufasi.click
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15744
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 23 Apr 2024 16:27:38 GMT
expires: Wed, 23 Apr 2025 16:27:38 GMT
cache-control: public, max-age=31536000
age: 83923
last-modified: Wed, 11 May 2022 19:24:48 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

wt.maticufasi.click/address_wc/address.84.min.js?v=1

203.205.10.134

200 OK

89 kB

URL GET HTTP/2
wt.maticufasi.click/address_wc/address.84.min.js?v=1
IP
203.205.10.134:443
ASN
#45903 CMC Telecom Infrastructure Company

Requested by
https://wt.maticufasi.click/ai-meta-support
Certificate
IssuerZeroSSL
Subjectwt.maticufasi.click
FingerprintA6:86:FA:2A:5B:75:81:F7:3A:BD:51:CB:58:27:09:64:83:3C:92:5D
ValidityMon, 22 Apr 2024 00:00:00 GMT - Sun, 21 Jul 2024 23:59:59 GMT

File type
Unicode text, UTF-8 text, with very long lines (58425)
Size
89 kB (89268 bytes)
Hash
bcce9fe11b6a03f20fe1e6e8b55b1aee
67f9bab35bc2d85020b96e0c46e4178b9d7a8bc9
eb391c914c6c4ee5aa01ae03eaddf7d09acad25535a9f2cb31da425f347fd065

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Facebook

HTTP Headers

GET /address_wc/address.84.min.js?v=1 HTTP/1.1
Host: wt.maticufasi.click
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://wt.maticufasi.click/ai-meta-support
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: openresty/1.19.3.2
date: Wed, 24 Apr 2024 15:46:21 GMT
content-type: application/javascript
content-length: 89268
service-worker-allowed: /
accept-ranges: bytes
cache-control: public, max-age=31536000
content-encoding: gzip
etag: "6A335E5"
vary: Accept-Encoding
access-control-allow-origin: *
X-Firefox-Spdy: h2

wt.maticufasi.click/page_view.gif?pid=ee85d9ab-c491-4253-85e7-8b5c6547d58e

203.205.10.134

200 OK

35 B

URL GET HTTP/2
wt.maticufasi.click/page_view.gif?pid=ee85d9ab-c491-4253-85e7-8b5c6547d58e
IP
203.205.10.134:443
ASN
#45903 CMC Telecom Infrastructure Company

Requested by
https://wt.maticufasi.click/ai-meta-support
Certificate
IssuerZeroSSL
Subjectwt.maticufasi.click
FingerprintA6:86:FA:2A:5B:75:81:F7:3A:BD:51:CB:58:27:09:64:83:3C:92:5D
ValidityMon, 22 Apr 2024 00:00:00 GMT - Sun, 21 Jul 2024 23:59:59 GMT

File type
GIF image data, version 89a, 1 x 1
Size
35 B (35 bytes)
Hash
c2196de8ba412c60c22ab491af7b1409
5fbd472222feb8a22cf5b8aa5dc5b8e13af88e2b
6adc3d4c1056996e4e8b765a62604c78b1f867cceb3b15d0b9bedb7c4857f992

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Facebook

HTTP Headers

GET /page_view.gif?pid=ee85d9ab-c491-4253-85e7-8b5c6547d58e HTTP/1.1
Host: wt.maticufasi.click
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://wt.maticufasi.click/ai-meta-support
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: openresty/1.19.3.2
date: Wed, 24 Apr 2024 15:46:21 GMT
content-type: image/gif
content-length: 35
cache-control: max-age=0, private, must-revalidate
x-request-id: F8lB5EF8sYoGJC4Bj8ii
access-control-allow-origin: *
X-Firefox-Spdy: h2

wt.maticufasi.click/webcake/v4/fff57a8c-ca66-4e3b-96df-5a0e55363edb

203.205.10.134

200 OK

110 kB

URL GET HTTP/2
wt.maticufasi.click/webcake/v4/fff57a8c-ca66-4e3b-96df-5a0e55363edb
IP
203.205.10.134:443
ASN
#45903 CMC Telecom Infrastructure Company

Requested by
https://wt.maticufasi.click/ai-meta-support
Certificate
IssuerZeroSSL
Subjectwt.maticufasi.click
FingerprintA6:86:FA:2A:5B:75:81:F7:3A:BD:51:CB:58:27:09:64:83:3C:92:5D
ValidityMon, 22 Apr 2024 00:00:00 GMT - Sun, 21 Jul 2024 23:59:59 GMT

File type
JavaScript source, Unicode text, UTF-8 text, with very long lines (65470)
Size
110 kB (110073 bytes)
Hash
9c167466da191511970c71204bd80ed3
9d9ce183a58d5417da95324d798a856015fa9874
8449b66969fc2bc8d3ca8b90c0a368cc28f25862bdb2f5bee70818f1ad72eb95

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Facebook

HTTP Headers

GET /webcake/v4/fff57a8c-ca66-4e3b-96df-5a0e55363edb HTTP/1.1
Host: wt.maticufasi.click
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://wt.maticufasi.click/ai-meta-support
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: openresty/1.19.3.2
date: Wed, 24 Apr 2024 15:46:21 GMT
content-length: 110073
cache-control: max-age=0, private, must-revalidate
content-encoding: gzip
vary: accept-encoding
x-request-id: F8lB5EG5jy0h8OIBkSMj
access-control-allow-origin: *
X-Firefox-Spdy: h2

api.webcake.io/render_iconfont/iconfont.css?v=1

113.20.119.13

200 OK

302 B

URL GET HTTP/2
api.webcake.io/render_iconfont/iconfont.css?v=1
IP
113.20.119.13:443
ASN
#45903 CMC Telecom Infrastructure Company

Requested by
https://wt.maticufasi.click/ai-meta-support
Certificate
IssuerSectigo Limited
Subject*.webcake.io
Fingerprint8D:AC:11:28:4F:78:54:5F:A1:F8:4E:EF:09:BB:29:11:40:A4:D2:30
ValidityFri, 29 Sep 2023 00:00:00 GMT - Tue, 01 Oct 2024 23:59:59 GMT

File type
ASCII text
Size
302 B (302 bytes)
Hash
e35bda369458e13a9de042dabef63b49
d37d221d9eee4bbaf39c66ef1c9907996a101c09
a7f565be47dcd36f197bdb273b3cdd06ac2ac12e7b7d44ac089f6461f9fe2394

HTTP Headers

GET /render_iconfont/iconfont.css?v=1 HTTP/1.1
Host: api.webcake.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://wt.maticufasi.click/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: openresty/1.15.8.2
date: Wed, 24 Apr 2024 15:46:22 GMT
content-type: text/css
content-length: 302
service-worker-allowed: /
accept-ranges: bytes
cache-control: public, max-age=31536000
content-encoding: gzip
etag: "1A835C2"
vary: Accept-Encoding
X-Firefox-Spdy: h2

api.webcake.io/animate/animatev4.css?v=1

113.20.119.13

200 OK

6.7 kB

URL GET HTTP/2
api.webcake.io/animate/animatev4.css?v=1
IP
113.20.119.13:443
ASN
#45903 CMC Telecom Infrastructure Company

Requested by
https://wt.maticufasi.click/ai-meta-support
Certificate
IssuerSectigo Limited
Subject*.webcake.io
Fingerprint8D:AC:11:28:4F:78:54:5F:A1:F8:4E:EF:09:BB:29:11:40:A4:D2:30
ValidityFri, 29 Sep 2023 00:00:00 GMT - Tue, 01 Oct 2024 23:59:59 GMT

File type
ASCII text
Size
6.7 kB (6707 bytes)
Hash
9696d7f622ae25a26f8ea7d8ccf48b8b
10bf8ac510b34778c24c46208a98696a15758a64
5a0a021a59ca4c7381a7fc358ba5572400b1a9f47aee1bcb2d520f218991f447

HTTP Headers

GET /animate/animatev4.css?v=1 HTTP/1.1
Host: api.webcake.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://wt.maticufasi.click/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: openresty/1.15.8.2
date: Wed, 24 Apr 2024 15:46:22 GMT
content-type: text/css
content-length: 6707
service-worker-allowed: /
accept-ranges: bytes
cache-control: public, max-age=31536000
content-encoding: gzip
etag: "4415E26"
vary: Accept-Encoding
X-Firefox-Spdy: h2

content.pancake.vn/1/s700x450/fwebp/f1/ff/ce/96/1210de544e4f7f97620e3d5a68d815703b533236a48258cbde31496e.jpg

203.171.27.184

200 OK

5.9 kB

URL GET HTTP/2
content.pancake.vn/1/s700x450/fwebp/f1/ff/ce/96/1210de544e4f7f97620e3d5a68d815703b533236a48258cbde31496e.jpg
IP
203.171.27.184:443
ASN
#45903 CMC Telecom Infrastructure Company

Requested by
https://wt.maticufasi.click/ai-meta-support
Certificate
IssuerSectigo Limited
Subject*.pancake.vn
Fingerprint4C:04:4A:05:69:92:1D:2B:AD:84:10:DC:24:50:2B:66:E9:C9:AB:1B
ValidityMon, 10 Jul 2023 00:00:00 GMT - Fri, 12 Jul 2024 23:59:59 GMT

File type
RIFF (little-endian) data, Web/P image
Size
5.9 kB (5878 bytes)
Hash
b78f959641350a7e70c57ef9f76c3b50
d3c64c5f9c7353ec2c5b81d6f0e5d03c865a0291
1e35455060240af8060c6865e7364c87b058b67a0a500f829df2429614f703a3

HTTP Headers

GET /1/s700x450/fwebp/f1/ff/ce/96/1210de544e4f7f97620e3d5a68d815703b533236a48258cbde31496e.jpg HTTP/1.1
Host: content.pancake.vn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://wt.maticufasi.click/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx/1.10.3
date: Wed, 24 Apr 2024 15:46:23 GMT
content-type: image/webp
content-length: 5878
access-control-allow-credentials: true
access-control-allow-origin: *
access-control-expose-headers: 
cache-control: public, max-age=2505600
etag: 1210de544e4f7f97620e3d5a68d815703b533236a48258cbde31496e.jpg
accept-ranges: bytes
X-Firefox-Spdy: h2

wt.maticufasi.click/sync/ee85d9ab-c491-4253-85e7-8b5c6547d58e

203.205.10.134

200 OK

65 B

URL GET HTTP/2
wt.maticufasi.click/sync/ee85d9ab-c491-4253-85e7-8b5c6547d58e
IP
203.205.10.134:443
ASN
#45903 CMC Telecom Infrastructure Company

Requested by
https://wt.maticufasi.click/ai-meta-support
Certificate
IssuerZeroSSL
Subjectwt.maticufasi.click
FingerprintA6:86:FA:2A:5B:75:81:F7:3A:BD:51:CB:58:27:09:64:83:3C:92:5D
ValidityMon, 22 Apr 2024 00:00:00 GMT - Sun, 21 Jul 2024 23:59:59 GMT

File type
JSON text data
Size
65 B (65 bytes)
Hash
59413744ae5c322acb759e834d27bcef
213d148985d39261e3c33fadb7f232bdc8527e5e
3f2075ae1e3ca7261c17558ee154020f661b4a3aa4422a2ced569d52df3cd141

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Facebook

HTTP Headers

GET /sync/ee85d9ab-c491-4253-85e7-8b5c6547d58e HTTP/1.1
Host: wt.maticufasi.click
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://wt.maticufasi.click/ai-meta-support
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: openresty/1.19.3.2
date: Wed, 24 Apr 2024 15:46:23 GMT
content-type: application/json; charset=utf-8
content-length: 65
cache-control: max-age=0, private, must-revalidate
x-request-id: F8lB5J1ibyQQZG0B_KVh
access-control-allow-origin: *
X-Firefox-Spdy: h2

content.pancake.vn/1/s600x450/fwebp/e6/9f/8d/0e/838453201b6e459e07bfb1cca5f976083f0d46836fb6f43696787518.png

203.171.27.184

200 OK

27 kB

URL GET HTTP/2
content.pancake.vn/1/s600x450/fwebp/e6/9f/8d/0e/838453201b6e459e07bfb1cca5f976083f0d46836fb6f43696787518.png
IP
203.171.27.184:443
ASN
#45903 CMC Telecom Infrastructure Company

Requested by
https://wt.maticufasi.click/ai-meta-support
Certificate
IssuerSectigo Limited
Subject*.pancake.vn
Fingerprint4C:04:4A:05:69:92:1D:2B:AD:84:10:DC:24:50:2B:66:E9:C9:AB:1B
ValidityMon, 10 Jul 2023 00:00:00 GMT - Fri, 12 Jul 2024 23:59:59 GMT

File type
RIFF (little-endian) data, Web/P image
Size
27 kB (26826 bytes)
Hash
8a2e375898e417d5eae6ac759784594b
7edd048b065c3c25a8a3c65bc14bff834bc4fe2c
92fcdd7ccbf27b47513cb23b13cd7988d2ffd4c0816056bafeca1fc9b346c91c

HTTP Headers

GET /1/s600x450/fwebp/e6/9f/8d/0e/838453201b6e459e07bfb1cca5f976083f0d46836fb6f43696787518.png HTTP/1.1
Host: content.pancake.vn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://wt.maticufasi.click/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx/1.10.3
date: Wed, 24 Apr 2024 15:46:23 GMT
content-type: image/webp
content-length: 26826
access-control-allow-credentials: true
access-control-allow-origin: *
access-control-expose-headers: 
cache-control: public, max-age=2505600
etag: 838453201b6e459e07bfb1cca5f976083f0d46836fb6f43696787518.png
accept-ranges: bytes
X-Firefox-Spdy: h2

content.pancake.vn/1/s2900x1100/fwebp/d6/1e/d0/a9/b843d90b72e8aafe21b0a936065df680dedc189a9de32262ef4ae621.jpg

203.171.27.184

200 OK

2.5 kB

URL GET HTTP/2
content.pancake.vn/1/s2900x1100/fwebp/d6/1e/d0/a9/b843d90b72e8aafe21b0a936065df680dedc189a9de32262ef4ae621.jpg
IP
203.171.27.184:443
ASN
#45903 CMC Telecom Infrastructure Company

Requested by
https://wt.maticufasi.click/ai-meta-support
Certificate
IssuerSectigo Limited
Subject*.pancake.vn
Fingerprint4C:04:4A:05:69:92:1D:2B:AD:84:10:DC:24:50:2B:66:E9:C9:AB:1B
ValidityMon, 10 Jul 2023 00:00:00 GMT - Fri, 12 Jul 2024 23:59:59 GMT

File type
RIFF (little-endian) data, Web/P image, VP8 encoding, 720x1280, Scaling: [none]x[none], YUV color, decoders should clamp
Size
2.5 kB (2532 bytes)
Hash
df23a24fe9dd62a8ee1b2bfebdfaad33
103e8a85221e61022eb511c8ff6e3994e43ac191
82dbbd79d3b661ec4b1546fc71ec0f1f3262c75cc95f924d05671051301e5e2b

HTTP Headers

GET /1/s2900x1100/fwebp/d6/1e/d0/a9/b843d90b72e8aafe21b0a936065df680dedc189a9de32262ef4ae621.jpg HTTP/1.1
Host: content.pancake.vn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://wt.maticufasi.click/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx/1.10.3
date: Wed, 24 Apr 2024 15:46:23 GMT
content-type: image/webp
content-length: 2532
access-control-allow-credentials: true
access-control-allow-origin: *
access-control-expose-headers: 
cache-control: public, max-age=2505600
etag: b843d90b72e8aafe21b0a936065df680dedc189a9de32262ef4ae621.jpg
accept-ranges: bytes
X-Firefox-Spdy: h2

content.pancake.vn/1/s600x600/fwebp/49/8a/4a/b8/f3cc0cbc4cc23c304abdacdac4483b2636aecc0e33bc715d5a5966e7.png

203.171.27.184

200 OK

14 kB

URL GET HTTP/2
content.pancake.vn/1/s600x600/fwebp/49/8a/4a/b8/f3cc0cbc4cc23c304abdacdac4483b2636aecc0e33bc715d5a5966e7.png
IP
203.171.27.184:443
ASN
#45903 CMC Telecom Infrastructure Company

Requested by
https://wt.maticufasi.click/ai-meta-support
Certificate
IssuerSectigo Limited
Subject*.pancake.vn
Fingerprint4C:04:4A:05:69:92:1D:2B:AD:84:10:DC:24:50:2B:66:E9:C9:AB:1B
ValidityMon, 10 Jul 2023 00:00:00 GMT - Fri, 12 Jul 2024 23:59:59 GMT

File type
RIFF (little-endian) data, Web/P image
Size
14 kB (14346 bytes)
Hash
4c4d16ece23112e1e39fe472bfa40fb4
5cdf94c8ffb463aaf1be76f70a5498617e1d0e9d
2649a3640d1a6f6d5ed4f3dd9719432fd4d4e6273fcb047954df8b61327ef74b

HTTP Headers

GET /1/s600x600/fwebp/49/8a/4a/b8/f3cc0cbc4cc23c304abdacdac4483b2636aecc0e33bc715d5a5966e7.png HTTP/1.1
Host: content.pancake.vn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://wt.maticufasi.click/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx/1.10.3
date: Wed, 24 Apr 2024 15:46:23 GMT
content-type: image/webp
content-length: 14346
access-control-allow-credentials: true
access-control-allow-origin: *
access-control-expose-headers: 
cache-control: public, max-age=2505600
etag: f3cc0cbc4cc23c304abdacdac4483b2636aecc0e33bc715d5a5966e7.png
accept-ranges: bytes
X-Firefox-Spdy: h2

a.pancake.vn/js/app.js?vsn=d

113.20.119.13

200 OK

4.9 kB

URL GET HTTP/2
a.pancake.vn/js/app.js?vsn=d
IP
113.20.119.13:443
ASN
#45903 CMC Telecom Infrastructure Company

Requested by
https://wt.maticufasi.click/ai-meta-support
Certificate
IssuerSectigo Limited
Subject*.pancake.vn
Fingerprint4C:04:4A:05:69:92:1D:2B:AD:84:10:DC:24:50:2B:66:E9:C9:AB:1B
ValidityMon, 10 Jul 2023 00:00:00 GMT - Fri, 12 Jul 2024 23:59:59 GMT

File type
JavaScript source, ASCII text, with very long lines (4869), with no line terminators
Size
4.9 kB (4869 bytes)
Hash
2256f1b3f8d83aae868f3e546a7fa5ec
c59eb80f98846f38f28cfa496c824829ed39c789
74b62bbff4866e7a99770a845517c37ae2f1315f850b48028c1697038cb58c7f

HTTP Headers

GET /js/app.js?vsn=d HTTP/1.1
Host: a.pancake.vn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://wt.maticufasi.click/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: openresty/1.15.8.2
date: Wed, 24 Apr 2024 15:46:24 GMT
content-type: text/javascript
content-length: 4869
accept-ranges: bytes
cache-control: public, max-age=31536000
X-Firefox-Spdy: h2

a.pancake.vn/collect?dl=https%3A%2F%2Fwt.maticufasi.click%2Fai-meta-support&hn=wt.maticufasi.click&sc=https%3A&sr=1280x1024&vp=1280x800&dt=Facebook&tid=ab-lp-ee85d9ab-c491-4253-85e7-8b5c6547d58e&ts=1713973584633&_v=2.0&fr=&_aba=CPA2.1713973584631.3.cbffb707-4404-46ae-9a57-ebe40b781538&_abd=CPD2.1713973584632.3.b4126b6a-ad93-49bf-a6e7-72af791bf4e6&_abt=CPT2.1713973584632.3.4cc15bea-c838-47c1-9e22-7635509079bc&campaign_id=null&campaign_variant_id=null

113.20.119.13

200 OK

35 B

URL GET HTTP/2
a.pancake.vn/collect?dl=https%3A%2F%2Fwt.maticufasi.click%2Fai-meta-support&hn=wt.maticufasi.click&sc=https%3A&sr=1280x1024&vp=1280x800&dt=Facebook&tid=ab-lp-ee85d9ab-c491-4253-85e7-8b5c6547d58e&ts=1713973584633&_v=2.0&fr=&_aba=CPA2.1713973584631.3.cbffb707-4404-46ae-9a57-ebe40b781538&_abd=CPD2.1713973584632.3.b4126b6a-ad93-49bf-a6e7-72af791bf4e6&_abt=CPT2.1713973584632.3.4cc15bea-c838-47c1-9e22-7635509079bc&campaign_id=null&campaign_variant_id=null
IP
113.20.119.13:443
ASN
#45903 CMC Telecom Infrastructure Company

Requested by
https://wt.maticufasi.click/ai-meta-support
Certificate
IssuerSectigo Limited
Subject*.pancake.vn
Fingerprint4C:04:4A:05:69:92:1D:2B:AD:84:10:DC:24:50:2B:66:E9:C9:AB:1B
ValidityMon, 10 Jul 2023 00:00:00 GMT - Fri, 12 Jul 2024 23:59:59 GMT

File type
GIF image data, version 89a, 1 x 1
Size
35 B (35 bytes)
Hash
c2196de8ba412c60c22ab491af7b1409
5fbd472222feb8a22cf5b8aa5dc5b8e13af88e2b
6adc3d4c1056996e4e8b765a62604c78b1f867cceb3b15d0b9bedb7c4857f992

HTTP Headers

GET /collect?dl=https%3A%2F%2Fwt.maticufasi.click%2Fai-meta-support&hn=wt.maticufasi.click&sc=https%3A&sr=1280x1024&vp=1280x800&dt=Facebook&tid=ab-lp-ee85d9ab-c491-4253-85e7-8b5c6547d58e&ts=1713973584633&_v=2.0&fr=&_aba=CPA2.1713973584631.3.cbffb707-4404-46ae-9a57-ebe40b781538&_abd=CPD2.1713973584632.3.b4126b6a-ad93-49bf-a6e7-72af791bf4e6&_abt=CPT2.1713973584632.3.4cc15bea-c838-47c1-9e22-7635509079bc&campaign_id=null&campaign_variant_id=null HTTP/1.1
Host: a.pancake.vn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://wt.maticufasi.click/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: openresty/1.15.8.2
date: Wed, 24 Apr 2024 15:46:24 GMT
content-type: image/gif
content-length: 35
cache-control: max-age=0, private, must-revalidate
cross-origin-window-policy: deny
x-content-type-options: nosniff
x-download-options: noopen
x-frame-options: SAMEORIGIN
x-permitted-cross-domain-policies: none
x-request-id: F8lB5PU1e7JDYmkQRsdD
x-xss-protection: 1; mode=block
X-Firefox-Spdy: h2

aus5.mozilla.org/update/3/GMP/111.0a1/20240129201730/Linux_x86_64-gcc3/null/default/Linux%205.15.0-102-generic%20(GTK%203.24.37%2Clibpulse%20not-available)/default/default/update.xml

35.244.181.201

5.8 kB

URL
aus5.mozilla.org/update/3/GMP/111.0a1/20240129201730/Linux_x86_64-gcc3/null/default/Linux%205.15.0-102-generic%20(GTK%203.24.37%2Clibpulse%20not-available)/default/default/update.xml
IP
35.244.181.201:0
ASN
#396982 GOOGLE-CLOUD-PLATFORM

File type
gzip compressed data, max speed, from Unix
Size
5.8 kB (5759 bytes)
Hash
aa33725c2d0a3d1c2f9c878d64914807
6e83d13ec860384a977738b04ff0891a01ab519a
fe412eadb3dc9820ec6cab7cb62349be057c509e34f7e2de6d23b28eacc98bfd

HTTP Headers

GET /update/3/GMP/111.0a1/20240129201730/Linux_x86_64-gcc3/null/default/Linux%205.15.0-102-generic%20(GTK%203.24.37%2Clibpulse%20not-available)/default/default/update.xml HTTP/1.1
Host: aus5.mozilla.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Cache-Control: no-cache
Pragma: no-cache
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
date: Wed, 24 Apr 2024 15:46:39 GMT
content-type: text/xml; charset=utf-8
vary: Accept-Encoding
rule-id: unknown
rule-data-version: unknown
content-signature: x5u=https://content-signature-2.cdn.mozilla.net/chains/aus.content-signature.mozilla.org-2024-06-09-11-51-10.chain; p384ecdsa=FR605Xh5YhmlWE3oXJQEBg26eKRWQvsbAFJHRxClurjMHuatVH2t930fL6v8iU8KfJhihV1YJwgwcBzsQdImR3B-UnXmHyC-oYByo4WMx9VpFG2cVQt0OWh2u_cejWR0
strict-transport-security: max-age=31536000;
x-content-type-options: nosniff
content-security-policy: default-src 'none'; frame-ancestors 'none'
x-proxy-cache-status: MISS
content-encoding: gzip
via: 1.1 google
cache-control: public,max-age=90
alt-svc: clear
X-Firefox-Spdy: h2

fonts.googleapis.com/css?family=Roboto:100,300,400,700,900&display=swap

142.250.74.106

200 OK

12 kB

URL GET HTTP/2
fonts.googleapis.com/css?family=Roboto:100,300,400,700,900&display=swap
IP
142.250.74.106:443
ASN
#15169 GOOGLE

Requested by
https://wt.maticufasi.click/ai-meta-support
Certificate
IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
Fingerprint15:CB:F7:AC:18:3F:DC:1E:F9:4E:94:D1:98:40:40:61:53:17:28:F2
ValidityMon, 18 Mar 2024 20:35:28 GMT - Mon, 10 Jun 2024 20:35:27 GMT

File type
ASCII text
Size
12 kB (11685 bytes)
Hash
1eb0fc73df28026d228d100265553551
d8f0b28bc98e7a57a7f886994c7ceefd111f0a69
ca70f34d4f6f51f432835b3f8671fe4b4d2f43b048570e37474bbcec992ce4da

HTTP Headers

GET /css?family=Roboto:100,300,400,700,900&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://wt.maticufasi.click/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Wed, 24 Apr 2024 15:46:21 GMT
date: Wed, 24 Apr 2024 15:46:21 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (11)

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by