Report - www.lcloud.comfx-1.ws/aU3V38/code.php

Report Overview

Visited public
2025-04-07 10:58:09
Tags
URL
www.lcloud.comfx-1.ws/aU3V38/code.php
Finishing URL
www.lcloud.comfx-1.ws/aU3V38/code.php
IP / ASN
162.240.147.202
#46606 UNIFIEDLAYER-AS-1
Title
iCloud

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
www.icloud.com	420	1999-01-15	2012-07-01	2025-04-02	1.4 kB	2.6 kB	2.20.166.31
www.lcloud.comfx-1.ws	unknown	2025-02-26	2025-04-07	2025-04-07	2.6 kB	810 kB	162.240.147.202
www.apple.com	182	1987-02-19	2012-05-21	2025-04-05	3.7 kB	7.9 kB	96.6.16.249

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

Scan Date	Severity	Indicator	Alert
2025-04-06	medium	www.lcloud.comfx-1.ws/aU3V38/code.php	Apple Inc.

PhishTank

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (8)

	URL	From	Size	First Seen	Last Seen
	www.lcloud.comfx-1.ws/aU3V38/code.php	ScriptElement	730 B	2023-03-07	2025-06-19
Pretty URL www.lcloud.comfx-1.ws/aU3V38/code.php IP 162.240.147.202 ASN #46606 UNIFIEDLAYER-AS-1 Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 12:03 Last Seen2025-06-19 21:34 Times Seen739 Hash 1bc5ab42dd2056198e78b92a94e259b6 6be5b1376c97120b0e22199fcce685eea708588d 24526fc6a32beddd1ce64be4869c85c2f3471e1c1f888170d146859d3a7ebbd3 Loading...

	www.lcloud.comfx-1.ws/aU3V38/code.php	ScriptElement	154 B	2023-03-14	2025-04-09
Pretty URL www.lcloud.comfx-1.ws/aU3V38/code.php IP 162.240.147.202 ASN #46606 UNIFIEDLAYER-AS-1 Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-14 04:54 Last Seen2025-04-09 11:31 Times Seen108 Hash 9d55c9cf50d7a0150bd8651dbe3a4349 ae4d677529f1ff7338502ae994b93422f28264b7 d681671b375c07766c61534903cb27aefcd5bb1ec952be99042451f1874e7a6a Loading...

	www.lcloud.comfx-1.ws/aU3V38/code.php	ScriptElement	2.5 kB	2023-03-07	2025-04-16
Pretty URL www.lcloud.comfx-1.ws/aU3V38/code.php IP 162.240.147.202 ASN #46606 UNIFIEDLAYER-AS-1 Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 12:03 Last Seen2025-04-16 13:47 Times Seen148 Hash ebce59a89277d6a00261337febf0c2eb e3b8abc501a00ae0971af4b94223c334789d3e1e be26346e3c844941b911066ba66f291efef5aec99af441ae346a5c42be5dc541 Loading...

	www.lcloud.comfx-1.ws/aU3V38/code.php	ScriptElement	2.7 kB	2023-03-07	2025-06-19
Pretty URL www.lcloud.comfx-1.ws/aU3V38/code.php IP 162.240.147.202 ASN #46606 UNIFIEDLAYER-AS-1 Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 12:03 Last Seen2025-06-19 21:34 Times Seen738 Hash ef55650c337049d80c535c487eb022dd f5d5f39e3bdaefc0a1dcb62e163617d141a6e09f b2f74e4334a0f53d3987a437982ffc14253ed9b1b7bd64c1c1d3daf9cceaf986 Loading...

	www.lcloud.comfx-1.ws/aU3V38/code.php	ScriptElement	876 B	2023-03-07	2025-06-19
Pretty URL www.lcloud.comfx-1.ws/aU3V38/code.php IP 162.240.147.202 ASN #46606 UNIFIEDLAYER-AS-1 Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 12:03 Last Seen2025-06-19 21:34 Times Seen737 Hash da72d06917fb51165642b297749ca179 efd3528ed3494ddf2c03d04c488fb3848805752d 1de9ef95656b0084aec1f4730aeb34c6809efa6e3f8d5eaf5d58b2e05a1d642f Loading...

	www.lcloud.comfx-1.ws/aU3V38/code.php	ScriptElement	1.7 kB	2023-03-08	2025-04-09
Pretty URL www.lcloud.comfx-1.ws/aU3V38/code.php IP 162.240.147.202 ASN #46606 UNIFIEDLAYER-AS-1 Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-08 14:59 Last Seen2025-04-09 11:31 Times Seen168 Hash f665710cbd128796829b161b5cf2467b 1b7354753d829afe2ca5061e29eb6c50a14460cf 8fe30fc914735e7fac5de3573cc82920a2ce2c08afc584260ff301c5c541a619 Loading...

	www.lcloud.comfx-1.ws/aU3V38/passcode_files/authService.latest.min.js	ScriptElement	46 kB	2023-03-07	2025-05-06
Pretty URL www.lcloud.comfx-1.ws/aU3V38/passcode_files/authService.latest.min.js IP 162.240.147.202 ASN #46606 UNIFIEDLAYER-AS-1 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 12:03 Last Seen2025-05-06 12:03 Times Seen1163 Hash b97c71c6a3f8544a118f4aae2d2898f3 bf3278aee5205712b9b825855da26a6a795de35c 637887c20d64107d15a953804d693d5587262aa3a3148bcd2e65eb870b6ec329 Loading...

	www.lcloud.comfx-1.ws/aU3V38/code.php	ScriptElement	6.8 kB	2023-03-08	2025-04-09
Pretty URL www.lcloud.comfx-1.ws/aU3V38/code.php IP 162.240.147.202 ASN #46606 UNIFIEDLAYER-AS-1 Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-08 14:59 Last Seen2025-04-09 11:31 Times Seen109 Hash 9eba9932cdf7dbe110b4ae6172ddaf5d 9fa44249dcef7d0bd3955cb5290bd3fb0281739e 3be53e47b51be68f9516acd7ff24d2b778ea2f09fbc4db60530cf6cceb9b202a Loading...

HTTP Transactions (15)

URL IP Response Size

GET www.lcloud.comfx-1.ws/aU3V38/passcode_files/localiz.png

162.240.147.202

200 OK

4.0 kB

URL GET
www.lcloud.comfx-1.ws/aU3V38/passcode_files/localiz.png
IP
162.240.147.202:443
ASN
#46606 UNIFIEDLAYER-AS-1

Requested by
https://www.lcloud.comfx-1.ws/aU3V38/code.php
Certificate
IssuerLet's Encrypt
Subjectwww.lcloud.comfx-1.ws
FingerprintEB:15:38:A4:8F:9F:02:94:69:DC:B9:10:46:AB:62:96:4B:25:89:83
ValidityWed, 26 Feb 2025 15:08:33 GMT - Tue, 27 May 2025 15:08:32 GMT

File type
PNG image data, 66 x 64, 8-bit/color RGBA, interlaced
Size
4.0 kB (4025 bytes)
Hash
12d02c325d2b1d92622319461508dab5
a557707fce1849d6444a8cc6939f033ff5f22a96
c38e4dc9b16b04d3203a48645d701001c854d51e8ae3914506bd12d147b20256

HTTP Headers

GET /aU3V38/passcode_files/localiz.png HTTP/1.1
Host: www.lcloud.comfx-1.ws
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.lcloud.comfx-1.ws/aU3V38/code.php
Cookie: PHPSESSID=f504bff58b42c03c291e4f3a57c516f8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Mon, 07 Apr 2025 10:57:45 GMT
Server: Apache
Last-Modified: Sat, 09 Mar 2024 22:58:06 GMT
Accept-Ranges: bytes
Content-Length: 4025
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive
Content-Type: image/png

GET www.apple.com/wss/fonts/?families=SF+Pro,v3

96.6.16.249

404 Not Found

0 B

URL GET
www.apple.com/wss/fonts/?families=SF+Pro,v3
IP
96.6.16.249:443
ASN
#16625 AKAMAI-AS

Requested by
https://www.lcloud.comfx-1.ws/aU3V38/code.php
Certificate
IssuerApple Inc.
Subjectwww.apple.com
Fingerprint1E:38:91:11:C5:B1:E2:2E:B9:70:D5:66:F5:C3:A8:04:96:4E:3A:7A
ValidityTue, 04 Mar 2025 21:24:01 GMT - Thu, 16 Oct 2025 17:15:35 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /wss/fonts/?families=SF+Pro,v3 HTTP/1.1
Host: www.apple.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.lcloud.comfx-1.ws/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 404 Not Found
server: Apple
content-type: text/html; charset=UTF-8
content-length: 0
strict-transport-security: max-age=31536000; includeSubdomains; preload
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
referrer-policy: no-referrer-when-downgrade
content-security-policy: default-src 'self' blob: data: *.akamaized.net *.apple.com *.apple-mapkit.com *.cdn-apple.com *.organicfruitapps.com; child-src blob: mailto: embed.music.apple.com embed.podcasts.apple.com https://recyclingprogram.apple.com https://smb.apple.com https://nova.apple.com swdlp.apple.com www.apple.com www.instagram.com platform.twitter.com www.youtube-nocookie.com; img-src 'unsafe-inline' blob: data: *.apple.com *.apple-mapkit.com *.cdn-apple.com *.mzstatic.com; script-src 'unsafe-inline' 'unsafe-eval' blob: *.apple.com *.apple-mapkit.com www.instagram.com platform.twitter.com; style-src 'unsafe-inline' *.apple.com
cache-control: max-age=3564
expires: Mon, 07 Apr 2025 11:57:08 GMT
date: Mon, 07 Apr 2025 10:57:44 GMT
set-cookie: geo=NO; path=/; domain=.apple.com
X-Firefox-Spdy: h2

GET www.lcloud.comfx-1.ws/aU3V38/code.php

162.240.147.202

200 OK

33 kB

URL User Request GET
www.lcloud.comfx-1.ws/aU3V38/code.php
IP
162.240.147.202:443
ASN
#46606 UNIFIEDLAYER-AS-1

Certificate
IssuerLet's Encrypt
Subjectwww.lcloud.comfx-1.ws
FingerprintEB:15:38:A4:8F:9F:02:94:69:DC:B9:10:46:AB:62:96:4B:25:89:83
ValidityWed, 26 Feb 2025 15:08:33 GMT - Tue, 27 May 2025 15:08:32 GMT

File type
HTML document, Unicode text, UTF-8 text, with very long lines (10241)
Size
33 kB (33138 bytes)
Hash
1461fcf874a4214e94d7b756422d0e7d
9073d5f190d6940fbd0d4cc90f7ae2e2edcc155a
b67636df2e38ab594d43aaa775a3e634f32b183810ddaa74c0ebaf2760743651

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Apple Inc.

HTTP Headers

GET /aU3V38/code.php HTTP/1.1
Host: www.lcloud.comfx-1.ws
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Mon, 07 Apr 2025 10:57:43 GMT
Server: Apache
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Set-Cookie: PHPSESSID=f504bff58b42c03c291e4f3a57c516f8; path=/
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

GET www.icloud.com/system/icloud.com/current/static/wallpaper.webp

2.20.166.31

404 Not Found

0 B

URL GET
www.icloud.com/system/icloud.com/current/static/wallpaper.webp
IP
2.20.166.31:443
ASN
#16625 AKAMAI-AS

Requested by
https://www.lcloud.comfx-1.ws/aU3V38/code.php
Certificate
IssuerApple Inc.
Subjectwww.icloud.com
FingerprintF6:CA:6F:7B:8C:15:2B:AF:2B:38:B2:4B:E7:B1:28:C3:27:80:E9:DA
ValidityTue, 18 Mar 2025 17:33:39 GMT - Thu, 30 Oct 2025 19:03:53 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /system/icloud.com/current/static/wallpaper.webp HTTP/1.1
Host: www.icloud.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.lcloud.comfx-1.ws/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 404 Not Found
server: AppleHttpServer/68565d4f92ea
content-type: text/html
content-length: 1203
etag: "195b85011904b3"
content-language: en-us
content-encoding: br
content-location: /not_found/index.html.en-us.br
vary: accept-encoding
content-version: V1
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
expect-ct: max-age=30, report-uri="https://feedbackws.icloud.com/reportRaw"
x-robots-tag: none, noarchive
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-security-policy: base-uri 'none'; default-src 'none'; form-action 'none'; frame-ancestors 'none'
x-apple-request-uuid: b5fd93be-310f-4183-9237-083b5ee042a8
access-control-expose-headers: X-Apple-Request-UUID,Via
date: Mon, 07 Apr 2025 10:57:44 GMT
X-Firefox-Spdy: h2

GET www.lcloud.comfx-1.ws/aU3V38/passcode_files/authService.latest.min.js

162.240.147.202

200 OK

46 kB

URL GET
www.lcloud.comfx-1.ws/aU3V38/passcode_files/authService.latest.min.js
IP
162.240.147.202:443
ASN
#46606 UNIFIEDLAYER-AS-1

Requested by
https://www.lcloud.comfx-1.ws/aU3V38/code.php
Certificate
IssuerLet's Encrypt
Subjectwww.lcloud.comfx-1.ws
FingerprintEB:15:38:A4:8F:9F:02:94:69:DC:B9:10:46:AB:62:96:4B:25:89:83
ValidityWed, 26 Feb 2025 15:08:33 GMT - Tue, 27 May 2025 15:08:32 GMT

File type
JavaScript source, ASCII text, with very long lines (45452)
Size
46 kB (45564 bytes)
Hash
b97c71c6a3f8544a118f4aae2d2898f3
bf3278aee5205712b9b825855da26a6a795de35c
637887c20d64107d15a953804d693d5587262aa3a3148bcd2e65eb870b6ec329

HTTP Headers

GET /aU3V38/passcode_files/authService.latest.min.js HTTP/1.1
Host: www.lcloud.comfx-1.ws
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.lcloud.comfx-1.ws/aU3V38/code.php
Cookie: PHPSESSID=f504bff58b42c03c291e4f3a57c516f8
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Mon, 07 Apr 2025 10:57:44 GMT
Server: Apache
Last-Modified: Sat, 09 Mar 2024 22:58:06 GMT
Accept-Ranges: bytes
Content-Length: 45564
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: text/javascript

GET www.lcloud.comfx-1.ws/aU3V38/passcode_files/main.css

162.240.147.202

200 OK

718 kB

URL GET
www.lcloud.comfx-1.ws/aU3V38/passcode_files/main.css
IP
162.240.147.202:443
ASN
#46606 UNIFIEDLAYER-AS-1

Requested by
https://www.lcloud.comfx-1.ws/aU3V38/code.php
Certificate
IssuerLet's Encrypt
Subjectwww.lcloud.comfx-1.ws
FingerprintEB:15:38:A4:8F:9F:02:94:69:DC:B9:10:46:AB:62:96:4B:25:89:83
ValidityWed, 26 Feb 2025 15:08:33 GMT - Tue, 27 May 2025 15:08:32 GMT

File type
ASCII text, with very long lines (65536), with no line terminators
Size
718 kB (717690 bytes)
Hash
8ab9c27ec235974043231dbb809f7b11
33059499e6d73e51747dd74f96a206d7b85fe72d
dc5a05c65c3442feacf4ee09a5a8f2fae09f3f66f8a97406a69413b1263e96a1

HTTP Headers

GET /aU3V38/passcode_files/main.css HTTP/1.1
Host: www.lcloud.comfx-1.ws
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.lcloud.comfx-1.ws/aU3V38/code.php
Cookie: PHPSESSID=f504bff58b42c03c291e4f3a57c516f8
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Mon, 07 Apr 2025 10:57:44 GMT
Server: Apache
Last-Modified: Sat, 09 Mar 2024 22:58:06 GMT
Accept-Ranges: bytes
Content-Length: 717690
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: text/css

GET www.lcloud.comfx-1.ws/aU3V38/passcode_files/4f72d89d71e9abcc4e37c71fb77fe65b.svg

162.240.147.202

200 OK

8.3 kB

URL GET
www.lcloud.comfx-1.ws/aU3V38/passcode_files/4f72d89d71e9abcc4e37c71fb77fe65b.svg
IP
162.240.147.202:443
ASN
#46606 UNIFIEDLAYER-AS-1

Requested by
https://www.lcloud.comfx-1.ws/aU3V38/code.php
Certificate
IssuerLet's Encrypt
Subjectwww.lcloud.comfx-1.ws
FingerprintEB:15:38:A4:8F:9F:02:94:69:DC:B9:10:46:AB:62:96:4B:25:89:83
ValidityWed, 26 Feb 2025 15:08:33 GMT - Tue, 27 May 2025 15:08:32 GMT

File type
SVG Scalable Vector Graphics image
Size
8.3 kB (8337 bytes)
Hash
7ac8e3fc72c41af2f48eb38ed55fd7ba
ac861f8ccbd42196a955abef3252c31456bee811
276618038f0474681826eed2cd12fae281387deaba057cee6dea869ecb8d292f

HTTP Headers

GET /aU3V38/passcode_files/4f72d89d71e9abcc4e37c71fb77fe65b.svg HTTP/1.1
Host: www.lcloud.comfx-1.ws
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.lcloud.comfx-1.ws/aU3V38/code.php
Cookie: PHPSESSID=f504bff58b42c03c291e4f3a57c516f8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Mon, 07 Apr 2025 10:57:45 GMT
Server: Apache
Last-Modified: Sat, 09 Mar 2024 22:58:06 GMT
Accept-Ranges: bytes
Content-Length: 8337
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: image/svg+xml

GET www.apple.com/wss/fonts/SF-Pro-Text/v3/sf-pro-text_semibold.woff2

96.6.16.249

404 Not Found

0 B

URL GET
www.apple.com/wss/fonts/SF-Pro-Text/v3/sf-pro-text_semibold.woff2
IP
96.6.16.249:443
ASN
#16625 AKAMAI-AS

Requested by
https://www.lcloud.comfx-1.ws/aU3V38/code.php
Certificate
IssuerApple Inc.
Subjectwww.apple.com
Fingerprint1E:38:91:11:C5:B1:E2:2E:B9:70:D5:66:F5:C3:A8:04:96:4E:3A:7A
ValidityTue, 04 Mar 2025 21:24:01 GMT - Thu, 16 Oct 2025 17:15:35 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /wss/fonts/SF-Pro-Text/v3/sf-pro-text_semibold.woff2 HTTP/1.1
Host: www.apple.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.lcloud.comfx-1.ws/
Origin: https://www.lcloud.comfx-1.ws
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 404 Not Found
server: Apple
content-type: text/html; charset=UTF-8
content-length: 0
strict-transport-security: max-age=31536000; includeSubdomains; preload
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
referrer-policy: no-referrer-when-downgrade
content-security-policy: default-src 'self' blob: data: *.akamaized.net *.apple.com *.apple-mapkit.com *.cdn-apple.com *.organicfruitapps.com; child-src blob: mailto: embed.music.apple.com embed.podcasts.apple.com https://recyclingprogram.apple.com https://smb.apple.com https://nova.apple.com swdlp.apple.com www.apple.com www.instagram.com platform.twitter.com www.youtube-nocookie.com; img-src 'unsafe-inline' blob: data: *.apple.com *.apple-mapkit.com *.cdn-apple.com *.mzstatic.com; script-src 'unsafe-inline' 'unsafe-eval' blob: *.apple.com *.apple-mapkit.com www.instagram.com platform.twitter.com; style-src 'unsafe-inline' *.apple.com
cache-control: max-age=3579
expires: Mon, 07 Apr 2025 11:57:23 GMT
date: Mon, 07 Apr 2025 10:57:44 GMT
set-cookie: geo=NO; path=/; domain=.apple.com
X-Firefox-Spdy: h2

GET www.icloud.com/system/icloud.com/current/static/apple-touch-icon.png

2.20.166.31

404 Not Found

0 B

URL GET
www.icloud.com/system/icloud.com/current/static/apple-touch-icon.png
IP
2.20.166.31:443
ASN
#16625 AKAMAI-AS

Requested by
https://www.lcloud.comfx-1.ws/aU3V38/code.php
Certificate
IssuerApple Inc.
Subjectwww.icloud.com
FingerprintF6:CA:6F:7B:8C:15:2B:AF:2B:38:B2:4B:E7:B1:28:C3:27:80:E9:DA
ValidityTue, 18 Mar 2025 17:33:39 GMT - Thu, 30 Oct 2025 19:03:53 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /system/icloud.com/current/static/apple-touch-icon.png HTTP/1.1
Host: www.icloud.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.lcloud.comfx-1.ws/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 404 Not Found
server: AppleHttpServer/68565d4f92ea
content-type: text/html
content-length: 1203
etag: "195b85011904b3"
content-language: en-us
content-encoding: br
content-location: /not_found/index.html.en-us.br
vary: accept-encoding
content-version: V1
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
expect-ct: max-age=30, report-uri="https://feedbackws.icloud.com/reportRaw"
x-robots-tag: none, noarchive
strict-transport-security: max-age=31536000; includeSubDomains; preload
access-control-allow-origin: *
content-security-policy: base-uri 'none'; default-src 'none'; form-action 'none'; frame-ancestors 'none'
x-apple-request-uuid: b7ddeab4-59dc-41ac-a4e4-2e7b16536abe
access-control-expose-headers: X-Apple-Request-UUID,Via
date: Mon, 07 Apr 2025 10:57:46 GMT
X-Firefox-Spdy: h2

GET www.icloud.com/system/icloud.com/current/static/favicon-16x16.png

2.20.166.31

404 Not Found

0 B

URL GET
www.icloud.com/system/icloud.com/current/static/favicon-16x16.png
IP
2.20.166.31:443
ASN
#16625 AKAMAI-AS

Requested by
https://www.lcloud.comfx-1.ws/aU3V38/code.php
Certificate
IssuerApple Inc.
Subjectwww.icloud.com
FingerprintF6:CA:6F:7B:8C:15:2B:AF:2B:38:B2:4B:E7:B1:28:C3:27:80:E9:DA
ValidityTue, 18 Mar 2025 17:33:39 GMT - Thu, 30 Oct 2025 19:03:53 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /system/icloud.com/current/static/favicon-16x16.png HTTP/1.1
Host: www.icloud.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.lcloud.comfx-1.ws/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 404 Not Found
server: AppleHttpServer/68565d4f92ea
content-type: text/html
content-length: 1203
etag: "195b85011904b3"
content-language: en-us
content-encoding: br
content-location: /not_found/index.html.en-us.br
vary: accept-encoding
content-version: V1
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
expect-ct: max-age=30, report-uri="https://feedbackws.icloud.com/reportRaw"
x-robots-tag: none, noarchive
strict-transport-security: max-age=31536000; includeSubDomains; preload
access-control-allow-origin: *
content-security-policy: base-uri 'none'; default-src 'none'; form-action 'none'; frame-ancestors 'none'
x-apple-request-uuid: 4fbd76d5-4b8d-4500-bf8f-694c5bff784a
access-control-expose-headers: X-Apple-Request-UUID,Via
date: Mon, 07 Apr 2025 10:57:46 GMT
X-Firefox-Spdy: h2

GET www.apple.com/wss/fonts/SF-Pro-Display/v3/sf-pro-display_semibold.woff2

96.6.16.249

404 Not Found

0 B

URL GET
www.apple.com/wss/fonts/SF-Pro-Display/v3/sf-pro-display_semibold.woff2
IP
96.6.16.249:443
ASN
#16625 AKAMAI-AS

Requested by
https://www.lcloud.comfx-1.ws/aU3V38/code.php
Certificate
IssuerApple Inc.
Subjectwww.apple.com
Fingerprint1E:38:91:11:C5:B1:E2:2E:B9:70:D5:66:F5:C3:A8:04:96:4E:3A:7A
ValidityTue, 04 Mar 2025 21:24:01 GMT - Thu, 16 Oct 2025 17:15:35 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /wss/fonts/SF-Pro-Display/v3/sf-pro-display_semibold.woff2 HTTP/1.1
Host: www.apple.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.lcloud.comfx-1.ws/
Origin: https://www.lcloud.comfx-1.ws
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 404 Not Found
server: Apple
content-type: text/html; charset=UTF-8
content-length: 0
strict-transport-security: max-age=31536000; includeSubdomains; preload
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
referrer-policy: no-referrer-when-downgrade
content-security-policy: default-src 'self' blob: data: *.akamaized.net *.apple.com *.apple-mapkit.com *.cdn-apple.com *.organicfruitapps.com; child-src blob: mailto: embed.music.apple.com embed.podcasts.apple.com https://recyclingprogram.apple.com https://smb.apple.com https://nova.apple.com swdlp.apple.com www.apple.com www.instagram.com platform.twitter.com www.youtube-nocookie.com; img-src 'unsafe-inline' blob: data: *.apple.com *.apple-mapkit.com *.cdn-apple.com *.mzstatic.com; script-src 'unsafe-inline' 'unsafe-eval' blob: *.apple.com *.apple-mapkit.com www.instagram.com platform.twitter.com; style-src 'unsafe-inline' *.apple.com
cache-control: max-age=3192
expires: Mon, 07 Apr 2025 11:50:56 GMT
date: Mon, 07 Apr 2025 10:57:44 GMT
set-cookie: geo=NO; path=/; domain=.apple.com
X-Firefox-Spdy: h2

GET www.apple.com/wss/fonts/SF-Pro-Text/v3/sf-pro-text_light.woff2

96.6.16.249

404 Not Found

0 B

URL GET
www.apple.com/wss/fonts/SF-Pro-Text/v3/sf-pro-text_light.woff2
IP
96.6.16.249:443
ASN
#16625 AKAMAI-AS

Requested by
https://www.lcloud.comfx-1.ws/aU3V38/code.php
Certificate
IssuerApple Inc.
Subjectwww.apple.com
Fingerprint1E:38:91:11:C5:B1:E2:2E:B9:70:D5:66:F5:C3:A8:04:96:4E:3A:7A
ValidityTue, 04 Mar 2025 21:24:01 GMT - Thu, 16 Oct 2025 17:15:35 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /wss/fonts/SF-Pro-Text/v3/sf-pro-text_light.woff2 HTTP/1.1
Host: www.apple.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.lcloud.comfx-1.ws/
Origin: https://www.lcloud.comfx-1.ws
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 404 Not Found
server: Apple
content-type: text/html; charset=UTF-8
content-length: 0
strict-transport-security: max-age=31536000; includeSubdomains; preload
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
referrer-policy: no-referrer-when-downgrade
content-security-policy: default-src 'self' blob: data: *.akamaized.net *.apple.com *.apple-mapkit.com *.cdn-apple.com *.organicfruitapps.com; child-src blob: mailto: embed.music.apple.com embed.podcasts.apple.com https://recyclingprogram.apple.com https://smb.apple.com https://nova.apple.com swdlp.apple.com www.apple.com www.instagram.com platform.twitter.com www.youtube-nocookie.com; img-src 'unsafe-inline' blob: data: *.apple.com *.apple-mapkit.com *.cdn-apple.com *.mzstatic.com; script-src 'unsafe-inline' 'unsafe-eval' blob: *.apple.com *.apple-mapkit.com www.instagram.com platform.twitter.com; style-src 'unsafe-inline' *.apple.com
cache-control: max-age=3542
expires: Mon, 07 Apr 2025 11:56:46 GMT
date: Mon, 07 Apr 2025 10:57:44 GMT
set-cookie: geo=NO; path=/; domain=.apple.com
X-Firefox-Spdy: h2

GET www.apple.com/wss/fonts/SF-Pro-Text/v3/sf-pro-text_bold.woff2

96.6.16.249

404 Not Found

0 B

URL GET
www.apple.com/wss/fonts/SF-Pro-Text/v3/sf-pro-text_bold.woff2
IP
96.6.16.249:443
ASN
#16625 AKAMAI-AS

Requested by
https://www.lcloud.comfx-1.ws/aU3V38/code.php
Certificate
IssuerApple Inc.
Subjectwww.apple.com
Fingerprint1E:38:91:11:C5:B1:E2:2E:B9:70:D5:66:F5:C3:A8:04:96:4E:3A:7A
ValidityTue, 04 Mar 2025 21:24:01 GMT - Thu, 16 Oct 2025 17:15:35 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /wss/fonts/SF-Pro-Text/v3/sf-pro-text_bold.woff2 HTTP/1.1
Host: www.apple.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.lcloud.comfx-1.ws/
Origin: https://www.lcloud.comfx-1.ws
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 404 Not Found
server: Apple
content-type: text/html; charset=UTF-8
content-length: 0
strict-transport-security: max-age=31536000; includeSubdomains; preload
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
referrer-policy: no-referrer-when-downgrade
content-security-policy: default-src 'self' blob: data: *.akamaized.net *.apple.com *.apple-mapkit.com *.cdn-apple.com *.organicfruitapps.com; child-src blob: mailto: embed.music.apple.com embed.podcasts.apple.com https://recyclingprogram.apple.com https://smb.apple.com https://nova.apple.com swdlp.apple.com www.apple.com www.instagram.com platform.twitter.com www.youtube-nocookie.com; img-src 'unsafe-inline' blob: data: *.apple.com *.apple-mapkit.com *.cdn-apple.com *.mzstatic.com; script-src 'unsafe-inline' 'unsafe-eval' blob: *.apple.com *.apple-mapkit.com www.instagram.com platform.twitter.com; style-src 'unsafe-inline' *.apple.com
cache-control: max-age=3600
expires: Mon, 07 Apr 2025 11:57:44 GMT
date: Mon, 07 Apr 2025 10:57:44 GMT
set-cookie: geo=NO; path=/; domain=.apple.com
X-Firefox-Spdy: h2

GET www.apple.com/wss/fonts/SF-Pro-Display/v3/sf-pro-display_regular.woff2

96.6.16.249

404 Not Found

0 B

URL GET
www.apple.com/wss/fonts/SF-Pro-Display/v3/sf-pro-display_regular.woff2
IP
96.6.16.249:443
ASN
#16625 AKAMAI-AS

Requested by
https://www.lcloud.comfx-1.ws/aU3V38/code.php
Certificate
IssuerApple Inc.
Subjectwww.apple.com
Fingerprint1E:38:91:11:C5:B1:E2:2E:B9:70:D5:66:F5:C3:A8:04:96:4E:3A:7A
ValidityTue, 04 Mar 2025 21:24:01 GMT - Thu, 16 Oct 2025 17:15:35 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /wss/fonts/SF-Pro-Display/v3/sf-pro-display_regular.woff2 HTTP/1.1
Host: www.apple.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.lcloud.comfx-1.ws/
Origin: https://www.lcloud.comfx-1.ws
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 404 Not Found
server: Apple
content-type: text/html; charset=UTF-8
content-length: 0
strict-transport-security: max-age=31536000; includeSubdomains; preload
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
referrer-policy: no-referrer-when-downgrade
content-security-policy: default-src 'self' blob: data: *.akamaized.net *.apple.com *.apple-mapkit.com *.cdn-apple.com *.organicfruitapps.com; child-src blob: mailto: embed.music.apple.com embed.podcasts.apple.com https://recyclingprogram.apple.com https://smb.apple.com https://nova.apple.com swdlp.apple.com www.apple.com www.instagram.com platform.twitter.com www.youtube-nocookie.com; img-src 'unsafe-inline' blob: data: *.apple.com *.apple-mapkit.com *.cdn-apple.com *.mzstatic.com; script-src 'unsafe-inline' 'unsafe-eval' blob: *.apple.com *.apple-mapkit.com www.instagram.com platform.twitter.com; style-src 'unsafe-inline' *.apple.com
cache-control: max-age=3484
expires: Mon, 07 Apr 2025 11:55:48 GMT
date: Mon, 07 Apr 2025 10:57:44 GMT
set-cookie: geo=NO; path=/; domain=.apple.com
X-Firefox-Spdy: h2

GET www.apple.com/wss/fonts/SF-Pro-Text/v3/sf-pro-text_regular.woff2

96.6.16.249

404 Not Found

0 B

URL GET
www.apple.com/wss/fonts/SF-Pro-Text/v3/sf-pro-text_regular.woff2
IP
96.6.16.249:443
ASN
#16625 AKAMAI-AS

Requested by
https://www.lcloud.comfx-1.ws/aU3V38/code.php
Certificate
IssuerApple Inc.
Subjectwww.apple.com
Fingerprint1E:38:91:11:C5:B1:E2:2E:B9:70:D5:66:F5:C3:A8:04:96:4E:3A:7A
ValidityTue, 04 Mar 2025 21:24:01 GMT - Thu, 16 Oct 2025 17:15:35 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /wss/fonts/SF-Pro-Text/v3/sf-pro-text_regular.woff2 HTTP/1.1
Host: www.apple.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.lcloud.comfx-1.ws/
Origin: https://www.lcloud.comfx-1.ws
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 404 Not Found
server: Apple
content-type: text/html; charset=UTF-8
content-length: 0
strict-transport-security: max-age=31536000; includeSubdomains; preload
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
referrer-policy: no-referrer-when-downgrade
content-security-policy: default-src 'self' blob: data: *.akamaized.net *.apple.com *.apple-mapkit.com *.cdn-apple.com *.organicfruitapps.com; child-src blob: mailto: embed.music.apple.com embed.podcasts.apple.com https://recyclingprogram.apple.com https://smb.apple.com https://nova.apple.com swdlp.apple.com www.apple.com www.instagram.com platform.twitter.com www.youtube-nocookie.com; img-src 'unsafe-inline' blob: data: *.apple.com *.apple-mapkit.com *.cdn-apple.com *.mzstatic.com; script-src 'unsafe-inline' 'unsafe-eval' blob: *.apple.com *.apple-mapkit.com www.instagram.com platform.twitter.com; style-src 'unsafe-inline' *.apple.com
cache-control: max-age=3458
expires: Mon, 07 Apr 2025 11:55:22 GMT
date: Mon, 07 Apr 2025 10:57:44 GMT
set-cookie: geo=NO; path=/; domain=.apple.com
X-Firefox-Spdy: h2

Report Overview

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

Quad9 DNS

ThreatFox

JavaScript (8)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (15)

URL GET

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET

IP