Report - cdbt.short.gy/358798145386475218/

Report Overview

Visited public
2023-11-20 13:02:31
Tags
URL
cdbt.short.gy/358798145386475218/
Finishing URL
metaaccountqualitycaseform.com/1069929841826287
IP / ASN
18.194.86.172
#16509 AMAZON-02
Title
Copyright | Facebook Help Center

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
cdbt.short.gy	unknown	unknown	No data	No data	489 B	377 B	18.184.197.212
shortio-icons.s3.amazonaws.com	unknown	2005-08-18	2021-02-26 20:20:30	2023-11-16 18:40:08	479 B	5.8 kB	52.217.136.153
metaaccountqualitycaseform.com	unknown	2023-11-17	2023-11-17 14:42:18	2023-11-19 14:39:00	505 B	3.0 kB	172.67.154.184
zerossl.ocsp.sectigo.com	4049	2018-08-16	2020-05-09 21:05:29	2023-11-19 18:59:45	338 B	1.2 kB	104.18.38.233

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

Scan Date	Severity	Indicator	Alert
2023-11-20	medium	cdbt.short.gy/358798145386475218/	Facebook, Inc.
2023-11-17	medium	metaaccountqualitycaseform.com/1069929841826287	Facebook, Inc.

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (2)

	URL	From	Size	First Seen	Last Seen
	metaaccountqualitycaseform.com/1069929841826287	ScriptElement	0 B	0001-01-01	2025-04-26
Pretty URL metaaccountqualitycaseform.com/1069929841826287 IP 172.67.154.184 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen0001-01-01 00:00 Last Seen2025-04-26 02:36 Times Seen4535798 Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Loading...

	metaaccountqualitycaseform.com/1069929841826287	ScriptElement	0 B	0001-01-01	2025-04-26
Pretty URL metaaccountqualitycaseform.com/1069929841826287 IP 172.67.154.184 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen0001-01-01 00:00 Last Seen2025-04-26 02:36 Times Seen4535798 Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Loading...

HTTP Transactions (4)

URL IP Response Size

zerossl.ocsp.sectigo.com/

104.18.38.233

727 B

URL
zerossl.ocsp.sectigo.com/
IP
104.18.38.233:0
ASN
#13335 CLOUDFLARENET

File type
data
Size
727 B (727 bytes)
Hash
6d957fbd5b4098080e07a77972d20261
6e43debdfc63235d8a43a62ae9a7bee23ffabc22
5e7f25e10e348ab58b4bc7073a2fd8c2bb7013b39421f220fbbdc3aa92a35734

HTTP Headers

POST / HTTP/1.1
Host: zerossl.ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Mon, 20 Nov 2023 13:02:13 GMT
Content-Type: application/ocsp-response
Content-Length: 727
Connection: keep-alive
Last-Modified: Mon, 20 Nov 2023 01:26:59 GMT
Expires: Mon, 27 Nov 2023 01:26:58 GMT
Etag: "6e43debdfc63235d8a43a62ae9a7bee23ffabc22"
Cache-Control: max-age=562934,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb1
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 8290e2d66a180afa-OSL

cdbt.short.gy/358798145386475218/

18.184.197.212

302 Found

1 B

URL User Request GET HTTP/2
cdbt.short.gy/358798145386475218/
IP
18.184.197.212:443
ASN
#16509 AMAZON-02

Certificate
IssuerZeroSSL
Subject*.short.gy
Fingerprint17:BD:47:14:2D:58:2F:6A:85:52:28:77:5D:1F:B9:84:5A:14:19:51
ValidityTue, 07 Nov 2023 00:00:00 GMT - Mon, 05 Feb 2024 23:59:59 GMT

File type
very short file (no magic)
Size
1 B (1 bytes)
Hash
5058f1af8388633f609cadb75a75dc9d
3a52ce780950d4d969792a2559cd519d7ee8c727
cdb4ee2aea69cc6a83331bbe96dc2caa9a299d21329efb0336fc02a82e1839a8

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Facebook, Inc.

HTTP Headers

GET /358798145386475218/ HTTP/1.1
Host: cdbt.short.gy
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 302 Found
cache-control: no-cache, no-store, max-age=0, must-revalidate
content-type: text/html; charset=utf-8
location: https://metaaccountqualitycaseform.com/1069929841826287
x-powered-by: Short.io/Edge
x-ratelimit-limit: 100
x-ratelimit-remaining: 100
x-ratelimit-reset: 1700485380
content-length: 1
date: Mon, 20 Nov 2023 13:02:13 GMT
X-Firefox-Spdy: h2

shortio-icons.s3.amazonaws.com/18d12dbf-dd8a-4652-94aa-d39b7de2e176

52.217.136.153

200 OK

5.4 kB

URL GET HTTP/1.1
shortio-icons.s3.amazonaws.com/18d12dbf-dd8a-4652-94aa-d39b7de2e176
IP
52.217.136.153:443
ASN
#16509 AMAZON-02

Requested by
https://metaaccountqualitycaseform.com/1069929841826287
Certificate
IssuerAmazon
Subject*.s3.amazonaws.com
FingerprintDC:41:A6:3E:EE:32:6F:36:76:5A:EF:9D:17:AF:14:13:E3:05:C6:D1
ValidityTue, 10 Oct 2023 00:00:00 GMT - Wed, 03 Jul 2024 23:59:59 GMT

File type
MS Windows icon resource - 2 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel\012- data
Size
5.4 kB (5430 bytes)
Hash
3e764f0f737767b30a692fab1de3ce49
58fa0755a8ee455819769ee0e77c23829bf488dd
88ae5454a7c32c630703440849d35c58f570d8eecc23c071dbe68d63ce6a40d7

HTTP Headers

GET /18d12dbf-dd8a-4652-94aa-d39b7de2e176 HTTP/1.1
Host: shortio-icons.s3.amazonaws.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://metaaccountqualitycaseform.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
x-amz-id-2: yxbasKxS71f30coFwbdTMK0wwbic4N9kvjZFrJman2eKgfUfUxygDG70FDpndwBv+ImEvYp53x0=
x-amz-request-id: 66BHA2T7ZT7S8JHQ
Date: Mon, 20 Nov 2023 13:02:15 GMT
Last-Modified: Fri, 17 Nov 2023 13:52:13 GMT
ETag: "3e764f0f737767b30a692fab1de3ce49"
x-amz-server-side-encryption: AES256
Accept-Ranges: bytes
Content-Type: image/x-icon
Server: AmazonS3
Content-Length: 5430

metaaccountqualitycaseform.com/1069929841826287

172.67.154.184

200 OK

2.1 kB

URL User Request GET HTTP/2
metaaccountqualitycaseform.com/1069929841826287
IP
172.67.154.184:443
ASN
#13335 CLOUDFLARENET

Certificate
IssuerLet's Encrypt
Subjectmetaaccountqualitycaseform.com
Fingerprint2F:F2:B2:FD:78:6E:19:37:51:BF:E6:DF:8C:F6:9D:71:4A:44:E9:B9
ValidityFri, 17 Nov 2023 12:41:32 GMT - Thu, 15 Feb 2024 12:41:31 GMT

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (2225), with no line terminators
Size
2.1 kB (2148 bytes)
Hash
816ce618067d72d5c43712b06ec1eafa
0e4858cc6c5c67a678e76c40b853c088c90f4fca
59220b30146f76997cd74e5e7535bfe6d39c0459f962c75d52eaecc7c9a23298

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Facebook, Inc.

HTTP Headers

GET /1069929841826287 HTTP/1.1
Host: metaaccountqualitycaseform.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Mon, 20 Nov 2023 13:02:13 GMT
content-type: text/html; charset=utf-8
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
x-content-type-options: nosniff
x-powered-by: Short.io link shortener
x-ratelimit-limit: 100
x-ratelimit-remaining: 99
x-ratelimit-reset: 1700485380
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=aCnHYvgzJVYA0Nnlcd65A7th5Vt6DW2CBbN9vy6W4BnXyjD%2F2ygUNggem%2B4GtYPtQtRxnanjJGYUBCz45AZd%2F0SnT%2FjjlaD%2FZVeORZoYJAv0X%2B%2BvDPBWwgO8Wuk%2FCVL8IWVeVZGESJxmGQdQdx%2BTZxI%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8290e2d7effb56a2-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

Report Overview

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (2)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (4)

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL User Request GET HTTP/2

IP

ASN

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/1.1

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL User Request GET HTTP/2

IP

ASN

Certificate

File type

Size

Hash

Detections

HTTP Headers