Report - fb-violation.github.io/req

Report Overview

Submitted URL
fb-violation.github.io/req
IP
185.199.108.153
ASN
#54113 FASTLY
Submitted
2024-04-20 04:48:10
Access
public
Website Title
Meta business center
Final URL
fb-violation.github.io/req/
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
2

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
fb-violation.github.io	unknown	2013-03-08	2024-02-01	2024-02-01	975 B	20 kB	185.199.111.153
s3.tracemyip.org	910965	2007-12-06	2015-07-20	2024-02-22	455 B	2.1 kB	138.128.163.108

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

Scan Date	Severity	Indicator	Alert
2024-04-19	medium	fb-violation.github.io/req	Facebook, Inc.

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (1)

	URL	Size	First Seen	Last Seen
	fb-violation.github.io/req/	847 B	2023-03-07	2024-05-03
Pretty URL fb-violation.github.io/req/ IP 185.199.111.153 ASN #54113 FASTLY Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 01:03:07 Last Seen2024-05-03 05:46:59 Times Seen1500 Hash 261fa5f948bd99fdf005f80595805744 51d57156b1974322b3ba8542f48893082199d5e1 1dcf3b0e1f92d593867169c5ee26771d2f3b77f552eee6c73beba961b91d61b7 Loading...

HTTP Transactions (3)

URL IP Response Size

fb-violation.github.io/req

185.199.111.153

301 Moved Permanently

162 B

URL User Request GET HTTP/2
fb-violation.github.io/req
IP
185.199.111.153:443
ASN
#54113 FASTLY

Certificate
IssuerDigiCert Inc
Subject*.github.io
Fingerprint97:D8:C5:70:0F:12:24:6C:88:BC:FA:06:7E:8C:A7:4D:A8:62:67:28
ValidityFri, 15 Mar 2024 00:00:00 GMT - Fri, 14 Mar 2025 23:59:59 GMT

File type
HTML document, ASCII text, with CRLF line terminators
Size
162 B (162 bytes)
Hash
4f8e702cc244ec5d4de32740c0ecbd97
3adb1f02d5b6054de0046e367c1d687b6cdf7aff
9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Facebook, Inc.

HTTP Headers

GET /req HTTP/1.1
Host: fb-violation.github.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 301 Moved Permanently
server: GitHub.com
content-type: text/html
permissions-policy: interest-cohort=()
location: https://fb-violation.github.io/req/
x-github-request-id: C586:2AF6FA:5AD472A:5CCB559:662342D4
accept-ranges: bytes
age: 1565
date: Sat, 20 Apr 2024 04:47:45 GMT
via: 1.1 varnish
x-served-by: cache-hel1410029-HEL
x-cache: HIT
x-cache-hits: 0
x-timer: S1713588466.685439,VS0,VE1
vary: Accept-Encoding
x-fastly-request-id: 5680028755dac3448302613f55e67455bd8c812d
content-length: 162
X-Firefox-Spdy: h2

fb-violation.github.io/req/

185.199.111.153

200 OK

19 kB

URL User Request GET HTTP/2
fb-violation.github.io/req/
IP
185.199.111.153:443
ASN
#54113 FASTLY

Certificate
IssuerDigiCert Inc
Subject*.github.io
Fingerprint97:D8:C5:70:0F:12:24:6C:88:BC:FA:06:7E:8C:A7:4D:A8:62:67:28
ValidityFri, 15 Mar 2024 00:00:00 GMT - Fri, 14 Mar 2025 23:59:59 GMT

File type
HTML document, ASCII text, with very long lines (9177)
Size
19 kB (18954 bytes)
Hash
6334b1ca0c944594f4567af50e17d6a7
66eebcc50990e3e0af52c245473dfd8a6dbdcb87
b0b50b60b658e9310d0e66367960800906d56970dba38c8ed409c1249d25d66c

HTTP Headers

GET /req/ HTTP/1.1
Host: fb-violation.github.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: GitHub.com
content-type: text/html; charset=utf-8
permissions-policy: interest-cohort=()
last-modified: Fri, 02 Feb 2024 22:50:34 GMT
access-control-allow-origin: *
strict-transport-security: max-age=31556952
etag: W/"65bd71ba-e952"
expires: Sat, 20 Apr 2024 00:10:38 GMT
cache-control: max-age=600
content-encoding: gzip
x-proxy-cache: MISS
x-github-request-id: EADC:1D4C19:109B8D:10FCA9:662305A6
accept-ranges: bytes
age: 0
date: Sat, 20 Apr 2024 04:47:45 GMT
via: 1.1 varnish
x-served-by: cache-hel1410029-HEL
x-cache: HIT
x-cache-hits: 0
x-timer: S1713588466.703794,VS0,VE120
vary: Accept-Encoding
x-fastly-request-id: c1f4bab3dd01343a99c67e5a7f4e77e8d0552999
content-length: 18954
X-Firefox-Spdy: h2

s3.tracemyip.org/vLg/1213/4684NR-IPIB/69800/2/njsUrl/

138.128.163.108

1.2 kB

URL GET
s3.tracemyip.org/vLg/1213/4684NR-IPIB/69800/2/njsUrl/
IP
138.128.163.108:0
ASN
#33182 DIMENOC

Requested by
https://fb-violation.github.io/req/
Certificate
IssuercPanel, Inc.
Subjects3.tracemyip.org
FingerprintB5:44:B6:6F:52:4C:A3:DF:52:83:E5:FD:45:E9:01:0E:43:82:17:9F
ValidityTue, 05 Mar 2024 00:00:00 GMT - Mon, 03 Jun 2024 23:59:59 GMT

File type
GIF image data, version 89a, 51 x 29
Size
1.2 kB (1160 bytes)
Hash
55192faba31ba39835db563bf82d352d
bff28c59555f2fe21265f16dbb68a9974dd56159
2bbe01785d1b818be7da76b9e03c100e9b166cd7fa0830c88c5110d53a2b9c22

HTTP Headers

GET /vLg/1213/4684NR-IPIB/69800/2/njsUrl/ HTTP/1.1
Host: s3.tracemyip.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fb-violation.github.io/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
access-control-allow-origin: *
set-cookie: TIPja_3_69800=1713588467xx1713588466xx1713588467xx1xx1xx1xxhttps%3A%2F%2Ffb-violation.github.ioxx1xx0xx1532635802xx0xx0xx0xx0xx0xxbf69ce19d7a33be9cb7d44714b76f0f8xx0; expires=Thu, 19-Apr-2029 04:47:46 GMT; Max-Age=157679999; path=/; domain=.tracemyip.org; secure; HttpOnly; SameSite=none
TIPja_3_69800=1713588467xx1713588466xx1713588467xx1xx1xx1xxhttps%3A%2F%2Ffb-violation.github.ioxx1xx0xx1532635802xx0xx0xx0xx0xx0xxbf69ce19d7a33be9cb7d44714b76f0f8xx0; expires=Thu, 19-Apr-2029 04:47:46 GMT; Max-Age=157679999; path=/; domain=.tracemyip.org; HttpOnly
vary: Accept-Encoding,User-Agent
content-encoding: gzip
p3p: CP="IDC DSP COR CURa ADMa OUR IND PHY ONL COM STA", cp=ALL DSP COR CURa ADMa DEVa CONa SAMa BUS", policyref="/w3c/p3p.xml"
content-length: 1160
content-type: image/gif
date: Sat, 20 Apr 2024 04:47:46 GMT
server: Apache
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (1)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (3)

URL User Request GET HTTP/2

IP

ASN

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL User Request GET HTTP/2

IP

ASN

Certificate

File type

Size

Hash

HTTP Headers

URL GET

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers