Report - client-asistanceflive-3fijq.web.app/

Report Overview

Submitted URL
client-asistanceflive-3fijq.web.app/
IP
199.36.158.100
ASN
#54113 FASTLY
Submitted
2024-05-10 04:01:00
Access
public
Website Title
Meta For Business
Final URL
client-asistanceflive-3fijq.web.app/
Tags
meta facebook phishing social suspicious
urlquery detections
Phishing - Facebook
Suspicious - Suspicious Javascript code

Detections

urlquery
19
Network Intrusion Detection
0
Threat Detection Systems
90

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
client-asistanceflive-3fijq.web.app	unknown	2019-01-08	2023-11-05	2024-04-13	7.1 kB	684 kB	199.36.158.100
www.gstatic.com	unknown	2008-02-11	2016-07-26	2024-05-10	1.0 kB	2.1 MB	142.250.74.35
fonts.gstatic.com	unknown	2008-02-11	2014-09-09	2024-05-10	2.1 kB	195 kB	216.58.207.227

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

Scan Date	Severity	Indicator	Alert
2024-05-09	medium	client-asistanceflive-3fijq.web.app/	Facebook, Inc.
2024-05-09	medium	client-asistanceflive-3fijq.web.app/	Facebook, Inc.
2024-05-09	medium	client-asistanceflive-3fijq.web.app/	Facebook, Inc.
2024-05-09	medium	client-asistanceflive-3fijq.web.app/	Facebook, Inc.
2024-05-09	medium	client-asistanceflive-3fijq.web.app/	Facebook, Inc.
2024-05-09	medium	client-asistanceflive-3fijq.web.app/	Facebook, Inc.
2024-05-09	medium	client-asistanceflive-3fijq.web.app/	Facebook, Inc.
2024-05-09	medium	client-asistanceflive-3fijq.web.app/	Facebook, Inc.
2024-05-09	medium	client-asistanceflive-3fijq.web.app/	Facebook, Inc.
2024-05-09	medium	client-asistanceflive-3fijq.web.app/	Facebook, Inc.
2024-05-09	medium	client-asistanceflive-3fijq.web.app/	Facebook, Inc.
2024-05-09	medium	client-asistanceflive-3fijq.web.app/	Facebook, Inc.
2024-05-09	medium	client-asistanceflive-3fijq.web.app/	Facebook, Inc.
2024-05-09	medium	client-asistanceflive-3fijq.web.app/	Facebook, Inc.
2024-05-09	medium	client-asistanceflive-3fijq.web.app/	Facebook, Inc.

PhishTank

Scan Date	Severity	Indicator	Alert
2024-03-12	medium	client-asistanceflive-3fijq.web.app/	Other
2024-03-12	medium	client-asistanceflive-3fijq.web.app/flutter.js	Other
2024-03-12	medium	client-asistanceflive-3fijq.web.app/main.dart.js	Other
2024-03-12	medium	client-asistanceflive-3fijq.web.app/icons/Icon-192.png	Other
2024-03-12	medium	client-asistanceflive-3fijq.web.app/favicon.ico	Other
2024-03-12	medium	client-asistanceflive-3fijq.web.app/assets/FontManifest.json	Other
2024-03-12	medium	client-asistanceflive-3fijq.web.app/assets/fonts/MaterialIcons-Regular.otf	Other
2024-03-12	medium	client-asistanceflive-3fijq.web.app/assets/packages/cupertino_icons/assets/CupertinoIcons.ttf	Other
2024-03-12	medium	client-asistanceflive-3fijq.web.app/assets/packages/fluttertoast/assets/toastify.css	Other
2024-03-12	medium	client-asistanceflive-3fijq.web.app/assets/packages/fluttertoast/assets/toastify.js	Other
2024-03-12	medium	client-asistanceflive-3fijq.web.app/assets/AssetManifest.json	Other
2024-03-12	medium	client-asistanceflive-3fijq.web.app/assets/AssetManifest.bin	Other
2024-03-12	medium	client-asistanceflive-3fijq.web.app/assets/assets/captcha.png	Other
2024-03-12	medium	client-asistanceflive-3fijq.web.app/assets/assets/img.jpg	Other
2024-03-12	medium	client-asistanceflive-3fijq.web.app/assets/assets/meta.png	Other

mnemonic secure dns

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2024-05-10	medium	client-asistanceflive-3fijq.web.app	Sinkholed
2024-05-10	medium	client-asistanceflive-3fijq.web.app	Sinkholed
2024-05-10	medium	client-asistanceflive-3fijq.web.app	Sinkholed
2024-05-10	medium	client-asistanceflive-3fijq.web.app	Sinkholed
2024-05-10	medium	client-asistanceflive-3fijq.web.app	Sinkholed
2024-05-10	medium	client-asistanceflive-3fijq.web.app	Sinkholed
2024-05-10	medium	client-asistanceflive-3fijq.web.app	Sinkholed
2024-05-10	medium	client-asistanceflive-3fijq.web.app	Sinkholed
2024-05-10	medium	client-asistanceflive-3fijq.web.app	Sinkholed
2024-05-10	medium	client-asistanceflive-3fijq.web.app	Sinkholed
2024-05-10	medium	client-asistanceflive-3fijq.web.app	Sinkholed
2024-05-10	medium	client-asistanceflive-3fijq.web.app	Sinkholed
2024-05-10	medium	client-asistanceflive-3fijq.web.app	Sinkholed
2024-05-10	medium	client-asistanceflive-3fijq.web.app	Sinkholed
2024-05-10	medium	client-asistanceflive-3fijq.web.app	Sinkholed

ThreatFox

No alerts detected

JavaScript (6)

	URL	Size	First Seen	Last Seen
	www.gstatic.com/flutter-canvaskit/b20183e04096094bcc37d9cde2a4b96f5cc684cf/canvaskit.js	94 kB	2023-09-02	2024-05-10
Pretty URL www.gstatic.com/flutter-canvaskit/b20183e04096094bcc37d9cde2a4b96f5cc684cf/canvaskit.js IP 142.250.74.35 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML false Observations First Seen2023-09-02 15:20:37 Last Seen2024-05-10 06:01:02 Times Seen301 Hash 5caccb235fad20e9b72ea6da5a0094e6 36e804afdf692d6d55d53daf2dbfd59707958035 386995541bf296e34ffdf5b179b028102b0db51d31c015f2bd051fea24136723 Loading...

	client-asistanceflive-3fijq.web.app/assets/packages/fluttertoast/assets/toastify.js	5.3 kB	2023-10-14	2024-05-10
Pretty URL client-asistanceflive-3fijq.web.app/assets/packages/fluttertoast/assets/toastify.js IP 199.36.158.100 ASN #54113 FASTLY Introduced by scriptElement Embedded in HTML false Observations First Seen2023-10-14 04:07:10 Last Seen2024-05-10 06:01:02 Times Seen38 Hash 56e2c9cedd97f10e7e5f1cebd85d53e3 bf92cc7edd42fcfb3ffadc3a0fecdca37a7752b9 091c9a70994a2004ee02b04f111d40abe40c07b066856399f58c587042ec2990 Loading...

	client-asistanceflive-3fijq.web.app/	0 B	2023-03-07	2024-05-20
Pretty URL client-asistanceflive-3fijq.web.app/ IP 199.36.158.100 ASN #54113 FASTLY Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 01:01:59 Last Seen2024-05-20 16:55:33 Times Seen37882535 Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Loading...

	client-asistanceflive-3fijq.web.app/	0 B	2023-03-07	2024-05-20
Pretty URL client-asistanceflive-3fijq.web.app/ IP 199.36.158.100 ASN #54113 FASTLY Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 01:01:59 Last Seen2024-05-20 16:55:33 Times Seen37882535 Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Loading...

	client-asistanceflive-3fijq.web.app/flutter.js	15 kB	2023-05-16	2024-05-20
Pretty URL client-asistanceflive-3fijq.web.app/flutter.js IP 199.36.158.100 ASN #54113 FASTLY Introduced by scriptElement Embedded in HTML false Observations First Seen2023-05-16 05:41:40 Last Seen2024-05-20 08:58:30 Times Seen2416 Hash 6b515e434cea20006b3ef1726d2c8894 65e782370bc35a4f5e37922f12debfae61eff946 ebef4683c7634467e3e792e993cd8e28d44940d4299dd8f3f8ce8ea3c1f20b67 Loading...

	client-asistanceflive-3fijq.web.app/main.dart.js	2.1 MB	2024-04-13	2024-05-10
Pretty URL client-asistanceflive-3fijq.web.app/main.dart.js IP 199.36.158.100 ASN #54113 FASTLY Introduced by scriptElement Embedded in HTML false Observations First Seen2024-04-13 06:56:57 Last Seen2024-05-10 06:01:02 Times Seen4 Hash 7d92d2b9b9888c6142c165735baa304f 55648dc7e8a7e340608184440a00cc596a63cf6c bb3e02453bd55e27442cbd41f7f0630faf19981f3cc26edbfdf1ae8ae0b97c89 Loading...

HTTP Transactions (21)

URL IP Response Size

client-asistanceflive-3fijq.web.app/

199.36.158.100

200 OK

669 B

URL User Request GET HTTP/2
client-asistanceflive-3fijq.web.app/
IP
199.36.158.100:443
ASN
#54113 FASTLY

Certificate
IssuerGoogle Trust Services LLC
Subjectweb.app
Fingerprint6C:B8:FC:5E:5B:DF:AB:31:E6:02:C5:A6:D8:E2:D0:77:BB:5D:BC:7B
ValidityThu, 21 Mar 2024 15:14:42 GMT - Wed, 19 Jun 2024 15:14:41 GMT

File type
HTML document, ASCII text, with CRLF line terminators
Size
669 B (669 bytes)
Hash
62aeab565354249246b97bbd1b09f814
e8da6b24d2be00942efb4f193c4ca681810ec704
c8c5cd25d091bf4b7a29a4f6c85324034e8f9aef69c5fcc6d4419b0e67b34364

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Facebook
OpenPhish	phishing	Facebook, Inc.
PhishTank	phishing	Other
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET / HTTP/1.1
Host: client-asistanceflive-3fijq.web.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
cache-control: max-age=3600
content-encoding: br
content-type: text/html; charset=utf-8
etag: "d805864b10befd346842be3ab752be4ac47c77310abb8246c5d207046c99065e-br"
last-modified: Fri, 13 Oct 2023 23:47:51 GMT
strict-transport-security: max-age=31556926; includeSubDomains; preload
accept-ranges: bytes
date: Fri, 10 May 2024 04:00:32 GMT
x-served-by: cache-hel1410029-HEL
x-cache: HIT
x-cache-hits: 0
x-timer: S1715313632.395216,VS0,VE1
vary: x-fh-requested-host, accept-encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 669
X-Firefox-Spdy: h2

client-asistanceflive-3fijq.web.app/flutter.js

199.36.158.100

200 OK

3.5 kB

URL GET HTTP/3
client-asistanceflive-3fijq.web.app/flutter.js
IP
199.36.158.100:443
ASN
#54113 FASTLY

Requested by
https://client-asistanceflive-3fijq.web.app/
Certificate
IssuerGoogle Trust Services LLC
Subjectweb.app
Fingerprint6C:B8:FC:5E:5B:DF:AB:31:E6:02:C5:A6:D8:E2:D0:77:BB:5D:BC:7B
ValidityThu, 21 Mar 2024 15:14:42 GMT - Wed, 19 Jun 2024 15:14:41 GMT

File type
JavaScript source, ASCII text, with CRLF line terminators
Size
3.5 kB (3507 bytes)
Hash
6b515e434cea20006b3ef1726d2c8894
65e782370bc35a4f5e37922f12debfae61eff946
ebef4683c7634467e3e792e993cd8e28d44940d4299dd8f3f8ce8ea3c1f20b67

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Facebook
OpenPhish	phishing	Facebook, Inc.
PhishTank	phishing	Other
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /flutter.js HTTP/1.1
Host: client-asistanceflive-3fijq.web.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://client-asistanceflive-3fijq.web.app/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
content-length: 3507
cache-control: max-age=3600
content-encoding: br
content-type: text/javascript; charset=utf-8
etag: "4a09e876d1dfb542450566a1d74330325dce39ff9a803f15a226debdc5e1f333-br"
last-modified: Fri, 13 Oct 2023 23:47:51 GMT
strict-transport-security: max-age=31556926; includeSubDomains; preload
accept-ranges: bytes
date: Fri, 10 May 2024 04:00:32 GMT
x-served-by: cache-hel1410029-HEL
x-cache: HIT
x-cache-hits: 0
x-timer: S1715313633.629216,VS0,VE1
vary: x-fh-requested-host, accept-encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400

client-asistanceflive-3fijq.web.app/main.dart.js

199.36.158.100

200 OK

476 kB

URL GET HTTP/3
client-asistanceflive-3fijq.web.app/main.dart.js
IP
199.36.158.100:443
ASN
#54113 FASTLY

Requested by
https://client-asistanceflive-3fijq.web.app/
Certificate
IssuerGoogle Trust Services LLC
Subjectweb.app
Fingerprint6C:B8:FC:5E:5B:DF:AB:31:E6:02:C5:A6:D8:E2:D0:77:BB:5D:BC:7B
ValidityThu, 21 Mar 2024 15:14:42 GMT - Wed, 19 Jun 2024 15:14:41 GMT

File type
JavaScript source, ASCII text, with very long lines (727)
Size
476 kB (476537 bytes)
Hash
7d92d2b9b9888c6142c165735baa304f
55648dc7e8a7e340608184440a00cc596a63cf6c
bb3e02453bd55e27442cbd41f7f0630faf19981f3cc26edbfdf1ae8ae0b97c89

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Facebook
urlquery	suspicious	Suspicious - Suspicious Javascript code
OpenPhish	phishing	Facebook, Inc.
PhishTank	phishing	Other
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /main.dart.js HTTP/1.1
Host: client-asistanceflive-3fijq.web.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://client-asistanceflive-3fijq.web.app/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
content-length: 476537
cache-control: max-age=3600
content-encoding: br
content-type: text/javascript; charset=utf-8
etag: "52082172a39c17ecfd15fec0eb8cf61871d9d0547607f2e8f686554cc0b42f82-br"
last-modified: Fri, 13 Oct 2023 23:47:51 GMT
strict-transport-security: max-age=31556926; includeSubDomains; preload
accept-ranges: bytes
date: Fri, 10 May 2024 04:00:32 GMT
x-served-by: cache-hel1410029-HEL
x-cache: HIT
x-cache-hits: 0
x-timer: S1715313633.701198,VS0,VE1
vary: x-fh-requested-host, accept-encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400

client-asistanceflive-3fijq.web.app/icons/Icon-192.png

199.36.158.100

200 OK

5.2 kB

URL GET HTTP/3
client-asistanceflive-3fijq.web.app/icons/Icon-192.png
IP
199.36.158.100:443
ASN
#54113 FASTLY

Requested by
https://client-asistanceflive-3fijq.web.app/
Certificate
IssuerGoogle Trust Services LLC
Subjectweb.app
Fingerprint6C:B8:FC:5E:5B:DF:AB:31:E6:02:C5:A6:D8:E2:D0:77:BB:5D:BC:7B
ValidityThu, 21 Mar 2024 15:14:42 GMT - Wed, 19 Jun 2024 15:14:41 GMT

File type
PNG image data, 192 x 192, 8-bit/color RGB, non-interlaced
Size
5.2 kB (5172 bytes)
Hash
ac9a721a12bbc803b44f645561ecb1e1
293b2825c89d2abd4b17e2f5ac30c30f5ba3724f
3dce99077602f70421c1c6b2a240bc9b83d64d86681d45f2154143310c980be3

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Facebook
OpenPhish	phishing	Facebook, Inc.
PhishTank	phishing	Other
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /icons/Icon-192.png HTTP/1.1
Host: client-asistanceflive-3fijq.web.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://client-asistanceflive-3fijq.web.app/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
content-length: 5172
cache-control: max-age=3600
content-encoding: br
content-type: image/png
etag: "eaf2464bfb1d192fdd192a616f7b858dee456d573c6ec619648a1dcf2bdddfa6-br"
last-modified: Fri, 13 Oct 2023 23:47:51 GMT
strict-transport-security: max-age=31556926; includeSubDomains; preload
accept-ranges: bytes
date: Fri, 10 May 2024 04:00:32 GMT
x-served-by: cache-hel1410029-HEL
x-cache: MISS
x-cache-hits: 0
x-timer: S1715313633.677869,VS0,VE57
vary: x-fh-requested-host, accept-encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400

client-asistanceflive-3fijq.web.app/favicon.ico

199.36.158.100

200 OK

995 B

URL GET HTTP/3
client-asistanceflive-3fijq.web.app/favicon.ico
IP
199.36.158.100:443
ASN
#54113 FASTLY

Requested by
https://client-asistanceflive-3fijq.web.app/
Certificate
IssuerGoogle Trust Services LLC
Subjectweb.app
Fingerprint6C:B8:FC:5E:5B:DF:AB:31:E6:02:C5:A6:D8:E2:D0:77:BB:5D:BC:7B
ValidityThu, 21 Mar 2024 15:14:42 GMT - Wed, 19 Jun 2024 15:14:41 GMT

File type
MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel
Size
995 B (995 bytes)
Hash
8cddca427dae9b925e73432f8733e05a
1999a6f624a25cfd938eef6492d34fdc4f55dedc
89676a3fb8639d6531c525e5800ff4cc44d06d27ff5607922d27e390eb5b6e62

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Facebook
OpenPhish	phishing	Facebook, Inc.
PhishTank	phishing	Other
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: client-asistanceflive-3fijq.web.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://client-asistanceflive-3fijq.web.app/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
content-length: 995
cache-control: max-age=3600
content-encoding: br
content-type: image/x-icon
etag: "1cb82a83a45f6d386d73ccf1a6a8a8c8f4f32461eeea15b67a32162454f21e0e-br"
last-modified: Fri, 13 Oct 2023 23:47:51 GMT
strict-transport-security: max-age=31556926; includeSubDomains; preload
accept-ranges: bytes
date: Fri, 10 May 2024 04:00:32 GMT
x-served-by: cache-hel1410029-HEL
x-cache: MISS
x-cache-hits: 0
x-timer: S1715313633.679700,VS0,VE84
vary: x-fh-requested-host, accept-encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400

client-asistanceflive-3fijq.web.app/assets/FontManifest.json

199.36.158.100

200 OK

119 B

URL GET HTTP/3
client-asistanceflive-3fijq.web.app/assets/FontManifest.json
IP
199.36.158.100:443
ASN
#54113 FASTLY

Requested by
https://client-asistanceflive-3fijq.web.app/
Certificate
IssuerGoogle Trust Services LLC
Subjectweb.app
Fingerprint6C:B8:FC:5E:5B:DF:AB:31:E6:02:C5:A6:D8:E2:D0:77:BB:5D:BC:7B
ValidityThu, 21 Mar 2024 15:14:42 GMT - Wed, 19 Jun 2024 15:14:41 GMT

File type
JSON text data
Size
119 B (119 bytes)
Hash
dc3d03800ccca4601324923c0b1d6d57
bca264548730f8b1871672891b0ad0c02444bfaf
cd7e03645bc44b2dd47b7cb626f51c4ecbf55a197ab77241628b47ac165fbe21

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Facebook
OpenPhish	phishing	Facebook, Inc.
PhishTank	phishing	Other
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /assets/FontManifest.json HTTP/1.1
Host: client-asistanceflive-3fijq.web.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://client-asistanceflive-3fijq.web.app/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
content-length: 119
cache-control: max-age=3600
content-encoding: br
content-type: application/json
etag: "638dde6f87e8796f3054f78065f73846fc5e170e081d2501d08e3ceaa300edb5-br"
last-modified: Fri, 13 Oct 2023 23:47:51 GMT
strict-transport-security: max-age=31556926; includeSubDomains; preload
accept-ranges: bytes
date: Fri, 10 May 2024 04:00:33 GMT
x-served-by: cache-hel1410029-HEL
x-cache: HIT
x-cache-hits: 3
x-timer: S1715313634.523253,VS0,VE0
vary: x-fh-requested-host, accept-encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400

client-asistanceflive-3fijq.web.app/assets/fonts/MaterialIcons-Regular.otf

199.36.158.100

200 OK

4.1 kB

URL GET HTTP/3
client-asistanceflive-3fijq.web.app/assets/fonts/MaterialIcons-Regular.otf
IP
199.36.158.100:443
ASN
#54113 FASTLY

Requested by
https://client-asistanceflive-3fijq.web.app/
Certificate
IssuerGoogle Trust Services LLC
Subjectweb.app
Fingerprint6C:B8:FC:5E:5B:DF:AB:31:E6:02:C5:A6:D8:E2:D0:77:BB:5D:BC:7B
ValidityThu, 21 Mar 2024 15:14:42 GMT - Wed, 19 Jun 2024 15:14:41 GMT

File type
OpenType font data
Size
4.1 kB (4142 bytes)
Hash
71cefb1e9f3c6fb31fad02caade9d316
87ab71cd36c666c3273cd87b303d695b1abbe993
30b2d25fa5b79fbe1679f2cf489a6d0b53a8ff004966b06949060dd1761c1abf

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Facebook
OpenPhish	phishing	Facebook, Inc.
PhishTank	phishing	Other
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /assets/fonts/MaterialIcons-Regular.otf HTTP/1.1
Host: client-asistanceflive-3fijq.web.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://client-asistanceflive-3fijq.web.app/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
content-length: 4142
cache-control: max-age=3600
content-encoding: br
content-type: font/otf
etag: "f05f5855c0fc0cc58c1befb88324e3329bf0624dd8a6c4b0c7a489e2e12b7d97-br"
last-modified: Fri, 13 Oct 2023 23:47:51 GMT
strict-transport-security: max-age=31556926; includeSubDomains; preload
accept-ranges: bytes
date: Fri, 10 May 2024 04:00:33 GMT
x-served-by: cache-hel1410029-HEL
x-cache: HIT
x-cache-hits: 0
x-timer: S1715313634.564461,VS0,VE1
vary: x-fh-requested-host, accept-encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400

client-asistanceflive-3fijq.web.app/assets/packages/cupertino_icons/assets/CupertinoIcons.ttf

199.36.158.100

200 OK

849 B

URL GET HTTP/3
client-asistanceflive-3fijq.web.app/assets/packages/cupertino_icons/assets/CupertinoIcons.ttf
IP
199.36.158.100:443
ASN
#54113 FASTLY

Requested by
https://client-asistanceflive-3fijq.web.app/
Certificate
IssuerGoogle Trust Services LLC
Subjectweb.app
Fingerprint6C:B8:FC:5E:5B:DF:AB:31:E6:02:C5:A6:D8:E2:D0:77:BB:5D:BC:7B
ValidityThu, 21 Mar 2024 15:14:42 GMT - Wed, 19 Jun 2024 15:14:41 GMT

File type
TrueType Font data, 12 tables, 1st "OS/2", 7 names, Microsoft, language 0x409
Size
849 B (849 bytes)
Hash
89ed8f4e49bcdfc0b5bfc9b24591e347
58c5b1e8ce5ec0e2d8c7a8b4202f611573087769
bafe71aed5ee6a8a10e8cc5837885ad52282b579bfa6866ae752ecee11096531

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Facebook
OpenPhish	phishing	Facebook, Inc.
PhishTank	phishing	Other
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /assets/packages/cupertino_icons/assets/CupertinoIcons.ttf HTTP/1.1
Host: client-asistanceflive-3fijq.web.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://client-asistanceflive-3fijq.web.app/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
content-length: 849
cache-control: max-age=3600
content-encoding: br
content-type: font/ttf
etag: "b501b0d579cac021ad1b019709f08d80343ac2718c73d782f448c414a9b0aeca-br"
last-modified: Fri, 13 Oct 2023 23:47:51 GMT
strict-transport-security: max-age=31556926; includeSubDomains; preload
accept-ranges: bytes
date: Fri, 10 May 2024 04:00:33 GMT
x-served-by: cache-hel1410029-HEL
x-cache: HIT
x-cache-hits: 0
x-timer: S1715313634.568093,VS0,VE1
vary: x-fh-requested-host, accept-encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400

www.gstatic.com/flutter-canvaskit/b20183e04096094bcc37d9cde2a4b96f5cc684cf/canvaskit.js

142.250.74.35

200 OK

26 kB

URL GET HTTP/2
www.gstatic.com/flutter-canvaskit/b20183e04096094bcc37d9cde2a4b96f5cc684cf/canvaskit.js
IP
142.250.74.35:443
ASN
#15169 GOOGLE

Requested by
https://client-asistanceflive-3fijq.web.app/
Certificate
IssuerGoogle Trust Services LLC
Subject*.gstatic.com
Fingerprint15:DD:05:B3:2F:D8:E3:54:C9:B4:FA:E4:AC:01:ED:C8:E1:EA:A7:AD
ValidityTue, 16 Apr 2024 04:17:07 GMT - Tue, 09 Jul 2024 04:17:06 GMT

File type
JavaScript source, ASCII text, with very long lines (551)
Size
26 kB (25944 bytes)
Hash
5caccb235fad20e9b72ea6da5a0094e6
36e804afdf692d6d55d53daf2dbfd59707958035
386995541bf296e34ffdf5b179b028102b0db51d31c015f2bd051fea24136723

HTTP Headers

GET /flutter-canvaskit/b20183e04096094bcc37d9cde2a4b96f5cc684cf/canvaskit.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://client-asistanceflive-3fijq.web.app/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
content-encoding: br
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/flutter-team
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="flutter-team"
report-to: {"group":"flutter-team","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/flutter-team"}]}
content-length: 25944
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 09 May 2024 08:09:48 GMT
expires: Fri, 09 May 2025 08:09:48 GMT
cache-control: public, max-age=31536000
age: 71445
last-modified: Tue, 22 Aug 2023 21:42:42 GMT
content-type: text/javascript
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

fonts.gstatic.com/s/roboto/v20/KFOmCnqEu92Fr1Me5WZLCzYlKw.ttf

216.58.207.227

200 OK

91 kB

URL GET HTTP/2
fonts.gstatic.com/s/roboto/v20/KFOmCnqEu92Fr1Me5WZLCzYlKw.ttf
IP
216.58.207.227:443
ASN
#15169 GOOGLE

Requested by
https://client-asistanceflive-3fijq.web.app/
Certificate
IssuerGoogle Trust Services LLC
Subject*.gstatic.com
Fingerprint15:DD:05:B3:2F:D8:E3:54:C9:B4:FA:E4:AC:01:ED:C8:E1:EA:A7:AD
ValidityTue, 16 Apr 2024 04:17:07 GMT - Tue, 09 Jul 2024 04:17:06 GMT

File type
TrueType Font data, 18 tables, 1st "GDEF", 13 names, Microsoft, language 0x409, Copyright 2011 Google Inc. All Rights Reserved.RobotoRegularVersion 2.137; 2017Roboto-RegularRob
Size
91 kB (91230 bytes)
Hash
11eabca2251325cfc5589c9c6fb57b46
096c9245b6a192d1403a82848e104a65f578a8ec
017c0be9aaa6d0359737e1fa762ad304c0e0107927faff5a6c1f415c7f5244ed

HTTP Headers

GET /s/roboto/v20/KFOmCnqEu92Fr1Me5WZLCzYlKw.ttf HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://client-asistanceflive-3fijq.web.app/
Origin: https://client-asistanceflive-3fijq.web.app
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 91230
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 10 May 2024 03:28:39 GMT
expires: Sat, 10 May 2025 03:28:39 GMT
cache-control: public, max-age=31536000
age: 1914
last-modified: Wed, 24 Jul 2019 01:18:48 GMT
content-type: font/ttf
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

www.gstatic.com/flutter-canvaskit/b20183e04096094bcc37d9cde2a4b96f5cc684cf/canvaskit.wasm

142.250.74.35

200 OK

2.1 MB

URL GET HTTP/3
www.gstatic.com/flutter-canvaskit/b20183e04096094bcc37d9cde2a4b96f5cc684cf/canvaskit.wasm
IP
142.250.74.35:443
ASN
#15169 GOOGLE

Requested by
https://client-asistanceflive-3fijq.web.app/
Certificate
IssuerGoogle Trust Services LLC
Subject*.gstatic.com
Fingerprint15:DD:05:B3:2F:D8:E3:54:C9:B4:FA:E4:AC:01:ED:C8:E1:EA:A7:AD
ValidityTue, 16 Apr 2024 04:17:07 GMT - Tue, 09 Jul 2024 04:17:06 GMT

File type
WebAssembly (wasm) binary module version 0x1 (MVP)
Size
2.1 MB (2100192 bytes)
Hash
d9f69e0f428f695dc3d66b3a83a4aa8e
f874f267571031d848dd2111392c9491ff2d076e
fe220b11c91f0d88ee71326fc403fdd0a5bfcf55ae18edb711880e0e8cb57cff

HTTP Headers

GET /flutter-canvaskit/b20183e04096094bcc37d9cde2a4b96f5cc684cf/canvaskit.wasm HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://client-asistanceflive-3fijq.web.app/
Origin: https://client-asistanceflive-3fijq.web.app
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
content-encoding: br
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/flutter-team
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="flutter-team"
report-to: {"group":"flutter-team","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/flutter-team"}]}
content-length: 2100192
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 09 May 2024 08:18:53 GMT
expires: Fri, 09 May 2025 08:18:53 GMT
cache-control: public, max-age=31536000
age: 70900
last-modified: Tue, 22 Aug 2023 21:43:06 GMT
content-type: application/wasm
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

client-asistanceflive-3fijq.web.app/assets/packages/fluttertoast/assets/toastify.css

199.36.158.100

200 OK

570 B

URL GET HTTP/3
client-asistanceflive-3fijq.web.app/assets/packages/fluttertoast/assets/toastify.css
IP
199.36.158.100:443
ASN
#54113 FASTLY

Requested by
https://client-asistanceflive-3fijq.web.app/
Certificate
IssuerGoogle Trust Services LLC
Subjectweb.app
Fingerprint6C:B8:FC:5E:5B:DF:AB:31:E6:02:C5:A6:D8:E2:D0:77:BB:5D:BC:7B
ValidityThu, 21 Mar 2024 15:14:42 GMT - Wed, 19 Jun 2024 15:14:41 GMT

File type
ASCII text, with very long lines (965)
Size
570 B (570 bytes)
Hash
a85675050054f179444bc5ad70ffc635
1d590486889dfa7e9bc0e602c198380dd9860476
69baf44fea5b3efd3377babc154ef1b83bf8263b910202a8c7d6e745d751349f

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Facebook
OpenPhish	phishing	Facebook, Inc.
PhishTank	phishing	Other
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /assets/packages/fluttertoast/assets/toastify.css HTTP/1.1
Host: client-asistanceflive-3fijq.web.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://client-asistanceflive-3fijq.web.app/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
content-length: 570
cache-control: max-age=3600
content-encoding: br
content-type: text/css; charset=utf-8
etag: "6afc6f35b72ca06962c0b9197750a2af6334c905331f080d8047b437ffa170b1-br"
last-modified: Fri, 13 Oct 2023 23:47:51 GMT
strict-transport-security: max-age=31556926; includeSubDomains; preload
accept-ranges: bytes
date: Fri, 10 May 2024 04:00:34 GMT
x-served-by: cache-hel1410029-HEL
x-cache: HIT
x-cache-hits: 0
x-timer: S1715313634.114357,VS0,VE1
vary: x-fh-requested-host, accept-encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400

client-asistanceflive-3fijq.web.app/assets/packages/fluttertoast/assets/toastify.js

199.36.158.100

200 OK

1.5 kB

URL GET HTTP/3
client-asistanceflive-3fijq.web.app/assets/packages/fluttertoast/assets/toastify.js
IP
199.36.158.100:443
ASN
#54113 FASTLY

Requested by
https://client-asistanceflive-3fijq.web.app/
Certificate
IssuerGoogle Trust Services LLC
Subjectweb.app
Fingerprint6C:B8:FC:5E:5B:DF:AB:31:E6:02:C5:A6:D8:E2:D0:77:BB:5D:BC:7B
ValidityThu, 21 Mar 2024 15:14:42 GMT - Wed, 19 Jun 2024 15:14:41 GMT

File type
JavaScript source, ASCII text, with very long lines (4916)
Size
1.5 kB (1537 bytes)
Hash
56e2c9cedd97f10e7e5f1cebd85d53e3
bf92cc7edd42fcfb3ffadc3a0fecdca37a7752b9
091c9a70994a2004ee02b04f111d40abe40c07b066856399f58c587042ec2990

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Facebook
OpenPhish	phishing	Facebook, Inc.
PhishTank	phishing	Other
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /assets/packages/fluttertoast/assets/toastify.js HTTP/1.1
Host: client-asistanceflive-3fijq.web.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://client-asistanceflive-3fijq.web.app/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
content-length: 1537
cache-control: max-age=3600
content-encoding: br
content-type: text/javascript; charset=utf-8
etag: "9563980b893a33b606ff2c3507c822fdba870caf7bcbd5f149145ca92992f26e-br"
last-modified: Fri, 13 Oct 2023 23:47:51 GMT
strict-transport-security: max-age=31556926; includeSubDomains; preload
accept-ranges: bytes
date: Fri, 10 May 2024 04:00:34 GMT
x-served-by: cache-hel1410029-HEL
x-cache: HIT
x-cache-hits: 0
x-timer: S1715313634.116689,VS0,VE1
vary: x-fh-requested-host, accept-encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400

client-asistanceflive-3fijq.web.app/assets/AssetManifest.json

199.36.158.100

200 OK

171 B

URL GET HTTP/3
client-asistanceflive-3fijq.web.app/assets/AssetManifest.json
IP
199.36.158.100:443
ASN
#54113 FASTLY

Requested by
https://client-asistanceflive-3fijq.web.app/
Certificate
IssuerGoogle Trust Services LLC
Subjectweb.app
Fingerprint6C:B8:FC:5E:5B:DF:AB:31:E6:02:C5:A6:D8:E2:D0:77:BB:5D:BC:7B
ValidityThu, 21 Mar 2024 15:14:42 GMT - Wed, 19 Jun 2024 15:14:41 GMT

File type
JSON text data
Size
171 B (171 bytes)
Hash
8b1e9f6ce19c925f5b348f9c8b7b5aa6
7fbbf22809c0f92b82dea83473bc135fb612af95
8936e5e47c3abb92c5e362b29d7c2886b2cea87eeba9c3bf5f58003518ad4573

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Facebook
OpenPhish	phishing	Facebook, Inc.
PhishTank	phishing	Other
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /assets/AssetManifest.json HTTP/1.1
Host: client-asistanceflive-3fijq.web.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://client-asistanceflive-3fijq.web.app/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
content-length: 171
cache-control: max-age=3600
content-encoding: br
content-type: application/json
etag: "5563370b47491f591e97db2e98f70922940757fbe054ed57eaec3074f9c2dc36-br"
last-modified: Fri, 13 Oct 2023 23:47:51 GMT
strict-transport-security: max-age=31556926; includeSubDomains; preload
accept-ranges: bytes
date: Fri, 10 May 2024 04:00:34 GMT
x-served-by: cache-hel1410029-HEL
x-cache: HIT
x-cache-hits: 0
x-timer: S1715313634.157998,VS0,VE1
vary: x-fh-requested-host, accept-encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400

client-asistanceflive-3fijq.web.app/assets/AssetManifest.bin

199.36.158.100

200 OK

185 B

URL GET HTTP/3
client-asistanceflive-3fijq.web.app/assets/AssetManifest.bin
IP
199.36.158.100:443
ASN
#54113 FASTLY

Requested by
https://client-asistanceflive-3fijq.web.app/
Certificate
IssuerGoogle Trust Services LLC
Subjectweb.app
Fingerprint6C:B8:FC:5E:5B:DF:AB:31:E6:02:C5:A6:D8:E2:D0:77:BB:5D:BC:7B
ValidityThu, 21 Mar 2024 15:14:42 GMT - Wed, 19 Jun 2024 15:14:41 GMT

File type
Palm OS operating system patch data ""
Size
185 B (185 bytes)
Hash
8058c0c2b8059e64484d782be1853456
a3f67a09ec45ee794b899b3892358e4755df3c39
edccf79fc3831108798350c2ee86c5c0881dd022cca3ed7ec95ea6ebc5692709

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Facebook
OpenPhish	phishing	Facebook, Inc.
PhishTank	phishing	Other
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /assets/AssetManifest.bin HTTP/1.1
Host: client-asistanceflive-3fijq.web.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://client-asistanceflive-3fijq.web.app/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
content-length: 185
cache-control: max-age=3600
content-encoding: br
content-type: application/octet-stream
etag: "a0096b57eca83b1a937d383fc1df8dc9674b59dc6ad999020a079452d5954a90-br"
last-modified: Fri, 13 Oct 2023 23:47:51 GMT
strict-transport-security: max-age=31556926; includeSubDomains; preload
accept-ranges: bytes
date: Fri, 10 May 2024 04:00:34 GMT
x-served-by: cache-hel1410029-HEL
x-cache: HIT
x-cache-hits: 0
x-timer: S1715313634.234264,VS0,VE1
vary: x-fh-requested-host, accept-encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400

fonts.gstatic.com/s/a/bdeed3215d96c48ad8dd5237a1e60317ec6880c4fbec433cd7e0043804c932ef.ttf

216.58.207.227

200 OK

21 kB

URL GET HTTP/2
fonts.gstatic.com/s/a/bdeed3215d96c48ad8dd5237a1e60317ec6880c4fbec433cd7e0043804c932ef.ttf
IP
216.58.207.227:443
ASN
#15169 GOOGLE

Requested by
https://client-asistanceflive-3fijq.web.app/
Certificate
IssuerGoogle Trust Services LLC
Subject*.gstatic.com
Fingerprint15:DD:05:B3:2F:D8:E3:54:C9:B4:FA:E4:AC:01:ED:C8:E1:EA:A7:AD
ValidityTue, 16 Apr 2024 04:17:07 GMT - Tue, 09 Jul 2024 04:17:06 GMT

File type
TrueType Font data, 13 tables, 1st "GPOS", 8 names, Microsoft, language 0x409
Size
21 kB (20805 bytes)
Hash
d9864daa9e41ec4baa7891494cda96e8
43c83f6c3c0f48a8bcf297d86c5c543ffcc6e4d6
bdeed3215d96c48ad8dd5237a1e60317ec6880c4fbec433cd7e0043804c932ef

HTTP Headers

GET /s/a/bdeed3215d96c48ad8dd5237a1e60317ec6880c4fbec433cd7e0043804c932ef.ttf HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://client-asistanceflive-3fijq.web.app
DNT: 1
Connection: keep-alive
Referer: https://client-asistanceflive-3fijq.web.app/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 20805
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 09 May 2024 18:42:27 GMT
expires: Fri, 09 May 2025 18:42:27 GMT
cache-control: public, max-age=31536000
last-modified: Tue, 09 May 2023 18:36:37 GMT
content-type: font/ttf
vary: Accept-Encoding
age: 33488
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

client-asistanceflive-3fijq.web.app/assets/assets/captcha.png

199.36.158.100

200 OK

1.6 kB

URL GET HTTP/3
client-asistanceflive-3fijq.web.app/assets/assets/captcha.png
IP
199.36.158.100:443
ASN
#54113 FASTLY

Requested by
https://client-asistanceflive-3fijq.web.app/
Certificate
IssuerGoogle Trust Services LLC
Subjectweb.app
Fingerprint6C:B8:FC:5E:5B:DF:AB:31:E6:02:C5:A6:D8:E2:D0:77:BB:5D:BC:7B
ValidityThu, 21 Mar 2024 15:14:42 GMT - Wed, 19 Jun 2024 15:14:41 GMT

File type
PNG image data, 58 x 58, 8-bit/color RGBA, non-interlaced
Size
1.6 kB (1623 bytes)
Hash
8cf92fc4cdc328a8e3d5f34056cda775
b9a2c9c144fb6f0e016a5c52dd29aeac2500b5c7
348b5977322716d93c106aafdeedfed62b1cb5f3243b05bf31e5b739d1698fd3

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Facebook
OpenPhish	phishing	Facebook, Inc.
PhishTank	phishing	Other
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /assets/assets/captcha.png HTTP/1.1
Host: client-asistanceflive-3fijq.web.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://client-asistanceflive-3fijq.web.app/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
content-length: 1623
cache-control: max-age=3600
content-type: image/png
etag: "dbbf8328d2160cb1762aa06093646f88daceea3c854bab2d75113b3676d9c6cc"
last-modified: Fri, 13 Oct 2023 23:47:51 GMT
strict-transport-security: max-age=31556926; includeSubDomains; preload
accept-ranges: bytes
date: Fri, 10 May 2024 04:00:35 GMT
x-served-by: cache-hel1410029-HEL
x-cache: HIT
x-cache-hits: 0
x-timer: S1715313636.576507,VS0,VE1
vary: x-fh-requested-host, accept-encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400

client-asistanceflive-3fijq.web.app/assets/assets/img.jpg

199.36.158.100

200 OK

89 kB

URL GET HTTP/3
client-asistanceflive-3fijq.web.app/assets/assets/img.jpg
IP
199.36.158.100:443
ASN
#54113 FASTLY

Requested by
https://client-asistanceflive-3fijq.web.app/
Certificate
IssuerGoogle Trust Services LLC
Subjectweb.app
Fingerprint6C:B8:FC:5E:5B:DF:AB:31:E6:02:C5:A6:D8:E2:D0:77:BB:5D:BC:7B
ValidityThu, 21 Mar 2024 15:14:42 GMT - Wed, 19 Jun 2024 15:14:41 GMT

File type
JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 788x486, components 3
Size
89 kB (88721 bytes)
Hash
20d87318050341ff45f006497e422faf
3fea38cc840ac42bb050d07dbb713cc69736bf89
84ba5c39b38b4ee9e4612c9208165b2dc6babca41339ccfa3de9ca3db371206e

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Facebook
OpenPhish	phishing	Facebook, Inc.
PhishTank	phishing	Other
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /assets/assets/img.jpg HTTP/1.1
Host: client-asistanceflive-3fijq.web.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://client-asistanceflive-3fijq.web.app/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
content-length: 88721
cache-control: max-age=3600
content-encoding: br
content-type: image/jpeg
etag: "86eadc658c0851afcc6f564659ede47566e42876cea9055daa87562943ea7571-br"
last-modified: Fri, 13 Oct 2023 23:47:51 GMT
strict-transport-security: max-age=31556926; includeSubDomains; preload
accept-ranges: bytes
date: Fri, 10 May 2024 04:00:35 GMT
x-served-by: cache-hel1410029-HEL
x-cache: HIT
x-cache-hits: 0
x-timer: S1715313636.576529,VS0,VE1
vary: x-fh-requested-host, accept-encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400

client-asistanceflive-3fijq.web.app/assets/assets/meta.png

199.36.158.100

200 OK

90 kB

URL GET HTTP/3
client-asistanceflive-3fijq.web.app/assets/assets/meta.png
IP
199.36.158.100:443
ASN
#54113 FASTLY

Requested by
https://client-asistanceflive-3fijq.web.app/
Certificate
IssuerGoogle Trust Services LLC
Subjectweb.app
Fingerprint6C:B8:FC:5E:5B:DF:AB:31:E6:02:C5:A6:D8:E2:D0:77:BB:5D:BC:7B
ValidityThu, 21 Mar 2024 15:14:42 GMT - Wed, 19 Jun 2024 15:14:41 GMT

File type
PNG image data, 1280 x 720, 8-bit/color RGBA, non-interlaced
Size
90 kB (90526 bytes)
Hash
d940b86e362fba73940ead1271caf495
5e46232473ecb85070576f1407263c783552e025
90111feab3058221a651563e55ad51d5a3c12ffc903e5096ccd0321928974718

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Facebook
OpenPhish	phishing	Facebook, Inc.
PhishTank	phishing	Other
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /assets/assets/meta.png HTTP/1.1
Host: client-asistanceflive-3fijq.web.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://client-asistanceflive-3fijq.web.app/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
content-length: 90526
cache-control: max-age=3600
content-encoding: br
content-type: image/png
etag: "e73f745e7308ac7c606389299046b70a43867303902fb4ce8af8098cb9dcc053-br"
last-modified: Fri, 13 Oct 2023 23:47:51 GMT
strict-transport-security: max-age=31556926; includeSubDomains; preload
accept-ranges: bytes
date: Fri, 10 May 2024 04:00:35 GMT
x-served-by: cache-hel1410029-HEL
x-cache: HIT
x-cache-hits: 0
x-timer: S1715313636.576516,VS0,VE1
vary: x-fh-requested-host, accept-encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400

fonts.gstatic.com/s/a/5ced1045820caaac87af3f61ded09bacc90881f158d04c59dcce436fd02ad368.ttf

216.58.207.227

200 OK

22 kB

URL GET HTTP/2
fonts.gstatic.com/s/a/5ced1045820caaac87af3f61ded09bacc90881f158d04c59dcce436fd02ad368.ttf
IP
216.58.207.227:443
ASN
#15169 GOOGLE

Requested by
https://client-asistanceflive-3fijq.web.app/
Certificate
IssuerGoogle Trust Services LLC
Subject*.gstatic.com
Fingerprint15:DD:05:B3:2F:D8:E3:54:C9:B4:FA:E4:AC:01:ED:C8:E1:EA:A7:AD
ValidityTue, 16 Apr 2024 04:17:07 GMT - Tue, 09 Jul 2024 04:17:06 GMT

File type
TrueType Font data, 13 tables, 1st "GPOS", 8 names, Microsoft, language 0x409
Size
22 kB (21872 bytes)
Hash
053033d0cdc69c8b6e7b96fb74296793
59b1270408fb0172c6e7cba6ac2b3e1c60e5a68e
5ced1045820caaac87af3f61ded09bacc90881f158d04c59dcce436fd02ad368

HTTP Headers

GET /s/a/5ced1045820caaac87af3f61ded09bacc90881f158d04c59dcce436fd02ad368.ttf HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://client-asistanceflive-3fijq.web.app
DNT: 1
Connection: keep-alive
Referer: https://client-asistanceflive-3fijq.web.app/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 21872
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 09 May 2024 03:34:22 GMT
expires: Fri, 09 May 2025 03:34:22 GMT
cache-control: public, max-age=31536000
age: 87973
last-modified: Tue, 09 May 2023 18:46:22 GMT
content-type: font/ttf
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

fonts.gstatic.com/s/a/6461c35055a5c0f37ff2a046002ca747fc2120e9070ad00e352de94a94c642f5.ttf

216.58.207.227

200 OK

58 kB

URL GET HTTP/2
fonts.gstatic.com/s/a/6461c35055a5c0f37ff2a046002ca747fc2120e9070ad00e352de94a94c642f5.ttf
IP
216.58.207.227:443
ASN
#15169 GOOGLE

Requested by
https://client-asistanceflive-3fijq.web.app/
Certificate
IssuerGoogle Trust Services LLC
Subject*.gstatic.com
Fingerprint15:DD:05:B3:2F:D8:E3:54:C9:B4:FA:E4:AC:01:ED:C8:E1:EA:A7:AD
ValidityTue, 16 Apr 2024 04:17:07 GMT - Tue, 09 Jul 2024 04:17:06 GMT

File type
TrueType Font data, 15 tables, 1st "GDEF", 12 names, Microsoft, language 0x409, Copyright 2014 The Nunito Project Authors (https://github.com/googlefonts/nunito)NunitoRegular3.
Size
58 kB (57837 bytes)
Hash
5f06beca55155dc691467b7b7308d77c
7c4f0992e4aff25f0a01d60f4bd1b5b35757bd22
6461c35055a5c0f37ff2a046002ca747fc2120e9070ad00e352de94a94c642f5

HTTP Headers

GET /s/a/6461c35055a5c0f37ff2a046002ca747fc2120e9070ad00e352de94a94c642f5.ttf HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://client-asistanceflive-3fijq.web.app
DNT: 1
Connection: keep-alive
Referer: https://client-asistanceflive-3fijq.web.app/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 57837
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 09 May 2024 13:58:13 GMT
expires: Fri, 09 May 2025 13:58:13 GMT
cache-control: public, max-age=31536000
age: 50542
last-modified: Tue, 17 Jan 2023 20:28:18 GMT
content-type: font/ttf
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (6)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (21)

URL User Request GET HTTP/2

IP

ASN

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/3

IP