| r3-pages-views.greatpages.com.br/?g=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 | 104.17.208.68 | 200 OK | 31 B |
URL GET HTTP/2r3-pages-views.greatpages.com.br/?g=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 IP 104.17.208.68:443
Requested byhttps://facebook-security.pages.net.br/taiwan CertificateIssuerLet's Encrypt Subjectgreatpages.com.br Fingerprint5E:BF:CF:85:ED:B2:22:B5:D9:29:14:F9:66:0C:25:EE:49:2C:E9:63 ValidityMon, 16 Oct 2023 03:37:40 GMT - Sun, 14 Jan 2024 03:37:39 GMT
File typeJSON data\012- , ASCII text, with no line terminators Hashb1a8ecd5c3f464c5ae872401ae1929c1 ec82b7e06d38b93eba0dd68108140711cfa86eb5 49d1cf6777396141389bf9230460e84cc9bf6260594eb25095297d5ab3098b90
GET /?g=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 HTTP/1.1
Host: r3-pages-views.greatpages.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://facebook-security.pages.net.br/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 05 Dec 2023 15:18:06 GMT
content-type: application/json
content-length: 31
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 830d427f6fdcb50b-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| cdn.greatpages.com.br/facebook-security.pages.net.br-taiwan/1701700255/css.css | 104.17.208.68 | 200 OK | 5.5 kB |
URL GET HTTP/1.1cdn.greatpages.com.br/facebook-security.pages.net.br-taiwan/1701700255/css.css IP 104.17.208.68:443
Requested byhttps://facebook-security.pages.net.br/taiwan CertificateIssuerCloudflare, Inc. Subjectcdn.greatpages.com.br Fingerprint9B:D2:8E:A4:5F:CB:B0:36:7A:59:81:61:C2:F1:2D:E7:A1:5F:DB:B6 ValidityTue, 19 Sep 2023 00:00:00 GMT - Wed, 18 Sep 2024 23:59:59 GMT
File typeASCII text, with very long lines (23775), with no line terminators Hash06f9449818c01039f25e5cd4686d9c8a a2fd5ef535a23063f5c3c25f98d6787e61da5221 72c418a30aff20bae37c91da77adf77d1c0381d97577f7f4b1a81b99bb19c71d
GET /facebook-security.pages.net.br-taiwan/1701700255/css.css HTTP/1.1
Host: cdn.greatpages.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://facebook-security.pages.net.br/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 05 Dec 2023 15:18:06 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
ETag: W/"06f9449818c01039f25e5cd4686d9c8a"
Last-Modified: Mon, 04 Dec 2023 14:30:57 GMT
Vary: Accept-Encoding
CF-Cache-Status: MISS
Expires: Wed, 04 Dec 2024 15:18:06 GMT
Cache-Control: public, max-age=31536000
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
Server: cloudflare
CF-RAY: 830d427f5f38712b-OSL
Content-Encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| cdn.greatpages.com.br/facebook-security.pages.net.br-taiwan/1701700255/js.js | 104.17.208.68 | 200 OK | 26 kB |
URL GET HTTP/1.1cdn.greatpages.com.br/facebook-security.pages.net.br-taiwan/1701700255/js.js IP 104.17.208.68:443
Requested byhttps://facebook-security.pages.net.br/taiwan CertificateIssuerCloudflare, Inc. Subjectcdn.greatpages.com.br Fingerprint9B:D2:8E:A4:5F:CB:B0:36:7A:59:81:61:C2:F1:2D:E7:A1:5F:DB:B6 ValidityTue, 19 Sep 2023 00:00:00 GMT - Wed, 18 Sep 2024 23:59:59 GMT
File typeUnicode text, UTF-8 text, with very long lines (15962), with CRLF line terminators Hashd3b1db761ca7173c4d1398b06a397583 27c77c89df635d99e7cd128843a4d3c32b6633c6 b98b755d0168f960bc2f5ac2f591ecc8946a666b419089b1807660098c8ac306
GET /facebook-security.pages.net.br-taiwan/1701700255/js.js HTTP/1.1
Host: cdn.greatpages.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://facebook-security.pages.net.br/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 05 Dec 2023 15:18:06 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
ETag: W/"d3b1db761ca7173c4d1398b06a397583"
Last-Modified: Mon, 04 Dec 2023 14:30:59 GMT
Vary: Accept-Encoding
CF-Cache-Status: MISS
Expires: Wed, 04 Dec 2024 15:18:06 GMT
Cache-Control: public, max-age=31536000
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
Server: cloudflare
CF-RAY: 830d427f58a056c1-OSL
Content-Encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| facebook-security.pages.net.br/cdn-cgi/rum? | 104.18.43.16 | 204 No Content | 0 B |
URL POST HTTP/3facebook-security.pages.net.br/cdn-cgi/rum? IP 104.18.43.16:443
Requested byhttps://facebook-security.pages.net.br/taiwan CertificateIssuerLet's Encrypt Subjectpages.net.br Fingerprint2A:B8:BD:0E:47:67:1C:F8:0C:AF:EC:13:67:64:73:7E:1D:6D:A3:07 ValiditySat, 14 Oct 2023 21:43:21 GMT - Fri, 12 Jan 2024 21:43:20 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer | Verdict | Alert | urlquery | phishing | Phishing - Facebook | Quad9 DNS | malicious | Sinkholed |
POST /cdn-cgi/rum? HTTP/1.1
Host: facebook-security.pages.net.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
content-type: application/json
Content-Length: 3579
Origin: https://facebook-security.pages.net.br
DNT: 1
Connection: keep-alive
Referer: https://facebook-security.pages.net.br/taiwan
Cookie: __cf_bm=RZOZ7eeFWmrdgtVDHAggUiuXlvOhsznFwb_I2qcBsWc-1701789485-0-AXLSyVOvpgrcLEVYKB+nxBgAYU/b5gfTFtp4gPmc6HsCuIDR+RcAQbEqxvbo8Oh38Fc4+WPUIGR8UqIhja4BSPI=
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 204 No Content
date: Tue, 05 Dec 2023 15:18:06 GMT
access-control-allow-origin: https://facebook-security.pages.net.br
access-control-allow-methods: POST,OPTIONS
access-control-max-age: 86400
vary: Origin
access-control-allow-credentials: true
server: cloudflare
cf-ray: 830d4281fe6356c7-OSL
x-frame-options: DENY
x-content-type-options: nosniff
|
|
| static.cloudflareinsights.com/beacon.min.js/v84a3a4012de94ce1a686ba8c167c359c1696973893317 | 104.16.56.101 | 200 OK | 10 kB |
URL GET HTTP/2static.cloudflareinsights.com/beacon.min.js/v84a3a4012de94ce1a686ba8c167c359c1696973893317 IP 104.16.56.101:443
Requested byhttps://facebook-security.pages.net.br/taiwan CertificateIssuerCloudflare, Inc. Subjectsni.cloudflaressl.com Fingerprint89:79:35:ED:04:A2:CA:50:F7:9A:B8:FE:DF:A5:0C:B1:F2:E6:DD:E8 ValidityMon, 10 Apr 2023 00:00:00 GMT - Tue, 09 Apr 2024 23:59:59 GMT
File typegzip compressed data, from Unix\012- data Hash95c4fe8fd40a1dda322286c7d7d0e79b ec28afc97c66e2e35375020b19e85ce4be1f2bea 97e8468ae406a15c370bd622ebc9fd9ebe8e7d64cf7da66b9751e6a09a8657ca
GET /beacon.min.js/v84a3a4012de94ce1a686ba8c167c359c1696973893317 HTTP/1.1
Host: static.cloudflareinsights.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://facebook-security.pages.net.br
DNT: 1
Connection: keep-alive
Referer: https://facebook-security.pages.net.br/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 05 Dec 2023 15:18:05 GMT
content-type: text/javascript;charset=UTF-8
access-control-allow-origin: *
cache-control: public, max-age=86400
etag: W/"2023.10.0"
last-modified: Tue, 10 Oct 2023 21:38:13 GMT
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding
server: cloudflare
cf-ray: 830d427f1df456a8-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/opensans/v36/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 | 216.58.207.227 | 200 OK | 48 kB |
URL GET HTTP/2fonts.gstatic.com/s/opensans/v36/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 IP 216.58.207.227:443
Requested byhttps://facebook-security.pages.net.br/taiwan CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com FingerprintE5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 48432, version 1.0\012- data Hashe2d74c5e631bc53a7240bbfe4be99c8f eb513857bb01cc4f7249067fc7e969bef415fc90 9b1b9d7cb74a9923d83f36f0026f421940b861fd6e1a51b8f79af45492ed4ed5
GET /s/opensans/v36/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://facebook-security.pages.net.br
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 48432
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 30 Nov 2023 05:00:58 GMT
expires: Fri, 29 Nov 2024 05:00:58 GMT
cache-control: public, max-age=31536000
age: 469028
last-modified: Thu, 14 Sep 2023 00:40:31 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/opensans/v36/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSGmu1aB.woff2 | 216.58.207.227 | 200 OK | 35 kB |
URL GET HTTP/2fonts.gstatic.com/s/opensans/v36/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSGmu1aB.woff2 IP 216.58.207.227:443
Requested byhttps://facebook-security.pages.net.br/taiwan CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com FingerprintE5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 35120, version 1.0\012- data Hashdd986ff1050050613be051863773d677 51a12487fd51cc02ca54a984f82d63318807ca2e d9784dbf11886ea032ffbd00f499d333519babe001eacc19df7ab89de17bec47
GET /s/opensans/v36/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSGmu1aB.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://facebook-security.pages.net.br
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 35120
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 29 Nov 2023 21:36:49 GMT
expires: Thu, 28 Nov 2024 21:36:49 GMT
cache-control: public, max-age=31536000
age: 495677
last-modified: Thu, 14 Sep 2023 01:03:47 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| cdn.greatpages.com.br/facebook-security.pages.net.br-taiwan/1701700255/imagens/desktop/387994_1_1701658630656d40068637e801794216.svg | 104.17.208.68 | 200 OK | 973 B |
URL GET HTTP/1.1cdn.greatpages.com.br/facebook-security.pages.net.br-taiwan/1701700255/imagens/desktop/387994_1_1701658630656d40068637e801794216.svg IP 104.17.208.68:443
Requested byhttps://facebook-security.pages.net.br/taiwan CertificateIssuerCloudflare, Inc. Subjectcdn.greatpages.com.br Fingerprint9B:D2:8E:A4:5F:CB:B0:36:7A:59:81:61:C2:F1:2D:E7:A1:5F:DB:B6 ValidityTue, 19 Sep 2023 00:00:00 GMT - Wed, 18 Sep 2024 23:59:59 GMT
File typeSVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (2439) Hashecd94021d2c853c3b8deb8203ba17300 6f0e24baf66ae386041e8faf42363418a4c96144 0d6f8d206a6bd8b60a2048a3df206ac956a2f633786e4af1c02057f81758ad7a
GET /facebook-security.pages.net.br-taiwan/1701700255/imagens/desktop/387994_1_1701658630656d40068637e801794216.svg HTTP/1.1
Host: cdn.greatpages.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://facebook-security.pages.net.br/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 05 Dec 2023 15:18:06 GMT
Content-Type: image/svg+xml
Transfer-Encoding: chunked
Connection: keep-alive
ETag: W/"ecd94021d2c853c3b8deb8203ba17300"
Last-Modified: Mon, 04 Dec 2023 14:30:56 GMT
Vary: Accept-Encoding
CF-Cache-Status: MISS
Expires: Wed, 04 Dec 2024 15:18:06 GMT
Cache-Control: public, max-age=31536000
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
Server: cloudflare
CF-RAY: 830d42826c5156c1-OSL
Content-Encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| facebook-security.pages.net.br/cdn-cgi/rum? | 104.18.43.16 | 204 No Content | 0 B |
URL POST HTTP/3facebook-security.pages.net.br/cdn-cgi/rum? IP 104.18.43.16:443
Requested byhttps://facebook-security.pages.net.br/taiwan CertificateIssuerLet's Encrypt Subjectpages.net.br Fingerprint2A:B8:BD:0E:47:67:1C:F8:0C:AF:EC:13:67:64:73:7E:1D:6D:A3:07 ValiditySat, 14 Oct 2023 21:43:21 GMT - Fri, 12 Jan 2024 21:43:20 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer | Verdict | Alert | urlquery | phishing | Phishing - Facebook | Quad9 DNS | malicious | Sinkholed |
POST /cdn-cgi/rum? HTTP/1.1
Host: facebook-security.pages.net.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 479
Origin: https://facebook-security.pages.net.br
DNT: 1
Connection: keep-alive
Referer: https://facebook-security.pages.net.br/taiwan
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/3 204 No Content
date: Tue, 05 Dec 2023 15:18:20 GMT
access-control-allow-origin: https://facebook-security.pages.net.br
access-control-allow-methods: POST,OPTIONS
access-control-max-age: 86400
vary: Origin
access-control-allow-credentials: true
server: cloudflare
cf-ray: 830d42daefc956c7-OSL
x-frame-options: DENY
x-content-type-options: nosniff
|
|
| fonts.googleapis.com/css2?family=Roboto:ital,wght@0,400;0,700;1,400;1,700&family=Open+Sans:ital,wght@0,400;0,700;1,400;1,700&display=swap | 142.250.74.106 | 200 OK | 21 kB |
URL GET HTTP/2fonts.googleapis.com/css2?family=Roboto:ital,wght@0,400;0,700;1,400;1,700&family=Open+Sans:ital,wght@0,400;0,700;1,400;1,700&display=swap IP 142.250.74.106:443
Requested byhttps://facebook-security.pages.net.br/taiwan CertificateIssuerGoogle Trust Services LLC Subjectupload.video.google.com FingerprintCC:96:E0:52:E0:9B:EA:A9:A0:F8:88:9A:90:20:11:47:61:00:3C:42 ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
Hashcfd2bfa9a48d5801a392162c7f5f6974 3605f19972d3d38d04e065e94e4cce99518dfa25 6f87cc6bf2ce4e626bb979716def2d03c0b868f416400c94c9a3a2cb158f708e
GET /css2?family=Roboto:ital,wght@0,400;0,700;1,400;1,700&family=Open+Sans:ital,wght@0,400;0,700;1,400;1,700&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://facebook-security.pages.net.br/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Tue, 05 Dec 2023 15:18:06 GMT
date: Tue, 05 Dec 2023 15:18:06 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| facebook-security.pages.net.br/taiwan | 104.18.43.16 | 200 OK | 39 kB |
URL User Request GET HTTP/2facebook-security.pages.net.br/taiwan IP 104.18.43.16:443
CertificateIssuerLet's Encrypt Subjectpages.net.br Fingerprint2A:B8:BD:0E:47:67:1C:F8:0C:AF:EC:13:67:64:73:7E:1D:6D:A3:07 ValiditySat, 14 Oct 2023 21:43:21 GMT - Fri, 12 Jan 2024 21:43:20 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer | Verdict | Alert | urlquery | phishing | Phishing - Facebook | Quad9 DNS | malicious | Sinkholed |
GET /taiwan HTTP/1.1
Host: facebook-security.pages.net.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 05 Dec 2023 15:18:05 GMT
content-type: text/html
cache-control: max-age=0
great-server: GreatApps
great-service: gpages-r3-pages
set-cookie: __cf_bm=RZOZ7eeFWmrdgtVDHAggUiuXlvOhsznFwb_I2qcBsWc-1701789485-0-AXLSyVOvpgrcLEVYKB+nxBgAYU/b5gfTFtp4gPmc6HsCuIDR+RcAQbEqxvbo8Oh38Fc4+WPUIGR8UqIhja4BSPI=; path=/; expires=Tue, 05-Dec-23 15:48:05 GMT; domain=.facebook-security.pages.net.br; HttpOnly; Secure; SameSite=None
vary: Accept-Encoding
server: cloudflare
cf-ray: 830d4279b8f5568b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| cdn.greatsoftwares.com.br/arquivos/paginas/83047-996bae3082e793956dcd1be88418e4d7.jpg | 104.18.38.139 | 200 OK | 3.2 kB |
URL GET HTTP/2cdn.greatsoftwares.com.br/arquivos/paginas/83047-996bae3082e793956dcd1be88418e4d7.jpg IP 104.18.38.139:443
Requested byhttps://facebook-security.pages.net.br/taiwan CertificateIssuerGoogle Trust Services LLC Subjectgreatsoftwares.com.br Fingerprint67:7E:DB:D2:DC:14:C7:7B:17:48:17:20:56:DB:AB:72:C3:C7:85:09 ValidityFri, 13 Oct 2023 04:27:26 GMT - Thu, 11 Jan 2024 04:27:25 GMT
File typeRIFF (little-endian) data, Web/P image, VP8 encoding, 200x200, Scaling: [none]x[none], YUV color, decoders should clamp\012- data Hash7b5c1e055d4a67bd493ef119e492ff17 2692b76d3e29ce2698b5dcc8424e7fb32d7f96b9 fae4fb0cf839401abe1c7059f80a6bf519176664108d5f1c34bbc52abf8f4772
GET /arquivos/paginas/83047-996bae3082e793956dcd1be88418e4d7.jpg HTTP/1.1
Host: cdn.greatsoftwares.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://facebook-security.pages.net.br/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 05 Dec 2023 15:18:06 GMT
content-type: image/webp
content-length: 3184
access-control-allow-origin: *
access-control-expose-headers: Content-Type
alt-svc: h3=":443"; ma=86400
cache-control: public, max-age=31536000
cf-bgj: imgq:85,h2pri
cf-polished: qual=85, origFmt=jpeg, origSize=10501
content-disposition: inline; filename="83047-996bae3082e793956dcd1be88418e4d7.webp"
etag: "12c598889a19769166f4eb91dfefab2c"
expires: Wed, 04 Dec 2024 15:18:06 GMT
last-modified: Sat, 02 Dec 2023 13:50:09 GMT
vary: Accept
x-guploader-uploadid: ABPtcPp4BtkrIUrRrggW9gmDliH36Y6JZ4YW5nfDpxXFvQrS3oPmmP2Yltza1PxW5ythYf-cOYnPg_QkRg
x-goog-generation: 1701525009724825
x-goog-hash: crc32c=8z5ckw==, md5=EsWYiJoZdpFm9OuR3++rLA==
x-goog-metageneration: 1
x-goog-storage-class: STANDARD
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 10501
cf-cache-status: HIT
accept-ranges: bytes
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 830d42820ccc56a4-OSL
X-Firefox-Spdy: h2
|
|