Report - tuyendungdienvientiktoker.com/

Report Overview

Submitted URL
tuyendungdienvientiktoker.com/
IP
103.28.36.199
ASN
#131353 NhanHoa Software company
Submitted
2024-04-20 15:55:45
Access
public
Website Title
Tuyển nữ chính cho MV
Final URL
tuyendungdienvientiktoker.com/
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
4

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
tuyendungdienvientiktoker.com	unknown	2024-03-16	2024-03-20	2024-04-11	764 B	42 kB	103.28.36.199
static.xx.fbcdn.net	661	2007-05-03	2012-12-01	2024-04-19	5.7 kB	193 kB	31.13.72.12
ff.kis.v2.scr.kaspersky-labs.com	212226	1999-09-13	2017-01-30	2024-02-20	537 B	0 B	0.0.0.0

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

Scan Date	Severity	Indicator	Alert
2024-04-20	medium	tuyendungdienvientiktoker.com/	Facebook, Inc.
2024-04-20	medium	tuyendungdienvientiktoker.com/	Facebook, Inc.

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (0)

HTTP Transactions (14)

URL IP Response Size

tuyendungdienvientiktoker.com/

103.28.36.199

200 OK

21 kB

URL User Request GET HTTP/2
tuyendungdienvientiktoker.com/
IP
103.28.36.199:443
ASN
#131353 NhanHoa Software company

Certificate
IssuerLet's Encrypt
Subjectmail.tuyendungdienvientiktoker.com
Fingerprint88:99:FC:01:D7:87:64:75:1A:CC:C6:CB:B7:79:9A:06:41:5A:6C:99
ValidityWed, 20 Mar 2024 02:17:27 GMT - Tue, 18 Jun 2024 02:17:26 GMT

File type
HTML document, Unicode text, UTF-8 text, with very long lines (25548)
Size
21 kB (21288 bytes)
Hash
76ecd73fefcb967dcc9ec9a967bc2066
4eec356e01b2e39e738866b9234cd299eb48ea27
e6f1dc6e8768048831471895d5b612540649abafc2cfe7300a117bcda38fe958

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Facebook, Inc.

HTTP Headers

GET / HTTP/1.1
Host: tuyendungdienvientiktoker.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: text/html; charset=UTF-8
content-encoding: br
vary: Accept-Encoding
date: Sat, 20 Apr 2024 15:55:21 GMT
server: LiteSpeed
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2

static.xx.fbcdn.net/rsrc.php/v3/yY/r/pXKXHFmTacV.js?_nc_x=Ij3Wp8lg5Kz

31.13.72.12

200 OK

4.0 kB

URL GET HTTP/2
static.xx.fbcdn.net/rsrc.php/v3/yY/r/pXKXHFmTacV.js?_nc_x=Ij3Wp8lg5Kz
IP
31.13.72.12:443
ASN
#32934 FACEBOOK

Requested by
https://tuyendungdienvientiktoker.com/
Certificate
IssuerDigiCert Inc
Subject*.facebook.com
FingerprintB4:96:54:F1:A8:DF:03:98:82:DD:22:B7:7B:B9:50:DD:02:8A:A4:C1
ValiditySun, 28 Jan 2024 00:00:00 GMT - Sat, 27 Apr 2024 23:59:59 GMT

File type
JavaScript source, ASCII text, with very long lines (8652)
Size
4.0 kB (4012 bytes)
Hash
2e8a5ad3cd7131316d9d9b54e96d44ab
a122f29a6145c7e8ac8cbab3832845fa569a8cdf
7fe3958033c668a8de1fe81c640b212fd32a2bd5fbb4dfd2c240dd82ddcbb3a0

HTTP Headers

GET /rsrc.php/v3/yY/r/pXKXHFmTacV.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://tuyendungdienvientiktoker.com
DNT: 1
Connection: keep-alive
Referer: https://tuyendungdienvientiktoker.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: br
content-type: application/x-javascript; charset=utf-8
access-control-allow-origin: *
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
expires: Fri, 18 Apr 2025 22:36:10 GMT
cache-control: public,max-age=31536000,immutable
reporting-endpoints: permissions_policy="https://www.xx.facebook.com/ajax/browser_error_reports/"
timing-allow-origin: *
document-policy: force-load-at-top
permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewport-width=(), ch-width=(), clipboard-read=(), clipboard-write=(), display-capture=(), encrypted-media=(), fullscreen=(self), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), otp-credentials=(), payment=(), picture-in-picture=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), usb=(), window-management=(), xr-spatial-tracking=();report-to="permissions_policy"
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
report-to: {"max_age":21600,"endpoints":[{"url":"https:\/\/www.xx.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
origin-agent-cluster: ?0
content-md5: MSSx+pmi8YNQnLSu2RThoQ==
x-fb-debug: 8MX5BYiJ7i7tWAexnha9GZegyf+QQ460SZl/UndHnhckcpYuACzyAGhGeDmYEKNux9K7LhGFRzU6kUu+VhjDyw==
content-length: 4012
date: Sat, 20 Apr 2024 15:55:24 GMT
x-fb-connection-quality: EXCELLENT; q=0.9, rtt=7, rtx=0, c=13, mss=1380, tbw=8579, tp=-1, tpl=-1, uplat=2, ullat=-1
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

static.xx.fbcdn.net/rsrc.php/v3/yb/l/0,cross/lOiQCivtItQ.css?_nc_x=Ij3Wp8lg5Kz

31.13.72.12

200 OK

2.7 kB

URL GET HTTP/2
static.xx.fbcdn.net/rsrc.php/v3/yb/l/0,cross/lOiQCivtItQ.css?_nc_x=Ij3Wp8lg5Kz
IP
31.13.72.12:443
ASN
#32934 FACEBOOK

Requested by
https://tuyendungdienvientiktoker.com/
Certificate
IssuerDigiCert Inc
Subject*.facebook.com
FingerprintB4:96:54:F1:A8:DF:03:98:82:DD:22:B7:7B:B9:50:DD:02:8A:A4:C1
ValiditySun, 28 Jan 2024 00:00:00 GMT - Sat, 27 Apr 2024 23:59:59 GMT

File type
ASCII text, with very long lines (3129)
Size
2.7 kB (2728 bytes)
Hash
27323543813e6b27b1ee61e528399e1c
8a8ffb3881ad600d638cf1ce6798f517c9c3c314
15186fba4e7b1e62c3d14f5a193130646d86094b47b629b32a36b40ba0f1b541

HTTP Headers

GET /rsrc.php/v3/yb/l/0,cross/lOiQCivtItQ.css?_nc_x=Ij3Wp8lg5Kz HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://tuyendungdienvientiktoker.com
DNT: 1
Connection: keep-alive
Referer: https://tuyendungdienvientiktoker.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: br
content-type: text/css; charset=utf-8
access-control-allow-origin: *
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
expires: Fri, 18 Apr 2025 22:36:10 GMT
cache-control: public,max-age=31536000,immutable
reporting-endpoints: permissions_policy="https://www.xx.facebook.com/ajax/browser_error_reports/"
timing-allow-origin: *
document-policy: force-load-at-top
permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewport-width=(), ch-width=(), clipboard-read=(), clipboard-write=(), display-capture=(), encrypted-media=(), fullscreen=(self), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), otp-credentials=(), payment=(), picture-in-picture=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), usb=(), window-management=(), xr-spatial-tracking=();report-to="permissions_policy"
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
report-to: {"max_age":21600,"endpoints":[{"url":"https:\/\/www.xx.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
origin-agent-cluster: ?0
content-md5: 38g+nxkzi+zT2XE38r/rmQ==
x-fb-debug: bKxA4mCJHI36Lb4DLTVrIcoQAuaTQETZbnOz6w8REKPh1oYp/eeWJpk8GF5/qKlVi6bohvnN6qHenWEHAqesTw==
content-length: 2728
date: Sat, 20 Apr 2024 15:55:24 GMT
x-fb-connection-quality: EXCELLENT; q=0.9, rtt=7, rtx=0, c=13, mss=1380, tbw=12970, tp=-1, tpl=-1, uplat=3, ullat=-1
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

static.xx.fbcdn.net/rsrc.php/v3ij9m4/yY/l/en_GB/jy8lRFqbhVT.js?_nc_x=Ij3Wp8lg5Kz

31.13.72.12

200 OK

14 kB

URL GET HTTP/2
static.xx.fbcdn.net/rsrc.php/v3ij9m4/yY/l/en_GB/jy8lRFqbhVT.js?_nc_x=Ij3Wp8lg5Kz
IP
31.13.72.12:443
ASN
#32934 FACEBOOK

Requested by
https://tuyendungdienvientiktoker.com/
Certificate
IssuerDigiCert Inc
Subject*.facebook.com
FingerprintB4:96:54:F1:A8:DF:03:98:82:DD:22:B7:7B:B9:50:DD:02:8A:A4:C1
ValiditySun, 28 Jan 2024 00:00:00 GMT - Sat, 27 Apr 2024 23:59:59 GMT

File type
JavaScript source, ASCII text, with very long lines (29846)
Size
14 kB (13738 bytes)
Hash
459307c96b9406f03c0645bd2c310595
bf641da74b0a9cc19064cc38158c8eb9384c4054
0802246302d9e2175643bcbce50d0e615abd4c54fea2fcbbf7417b64365f2446

HTTP Headers

GET /rsrc.php/v3ij9m4/yY/l/en_GB/jy8lRFqbhVT.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://tuyendungdienvientiktoker.com
DNT: 1
Connection: keep-alive
Referer: https://tuyendungdienvientiktoker.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: br
content-type: application/x-javascript; charset=utf-8
access-control-allow-origin: *
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
expires: Fri, 18 Apr 2025 22:36:10 GMT
cache-control: public,max-age=31536000,immutable
reporting-endpoints: permissions_policy="https://www.xx.facebook.com/ajax/browser_error_reports/"
timing-allow-origin: *
document-policy: force-load-at-top
permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewport-width=(), ch-width=(), clipboard-read=(), clipboard-write=(), display-capture=(), encrypted-media=(), fullscreen=(self), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), otp-credentials=(), payment=(), picture-in-picture=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), usb=(), window-management=(), xr-spatial-tracking=();report-to="permissions_policy"
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
report-to: {"max_age":21600,"endpoints":[{"url":"https:\/\/www.xx.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
origin-agent-cluster: ?0
content-md5: UuIVP6L2oZSrDx/JTWJW9g==
x-fb-debug: 6g4/MVdP4IXsI8GzDBw3CQrDpN4AjL6KgzdY/sB/XkTqUX5iGYUQZJStNH8FQQp42jIJt9ZxQJQNSwIP9a5q0A==
content-length: 13738
date: Sat, 20 Apr 2024 15:55:24 GMT
x-fb-connection-quality: EXCELLENT; q=0.9, rtt=7, rtx=0, c=14, mss=1380, tbw=16044, tp=-1, tpl=-1, uplat=4, ullat=-1
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

static.xx.fbcdn.net/rsrc.php/v3/yo/l/0,cross/SfjOCfkfyN1.css?_nc_x=Ij3Wp8lg5Kz

31.13.72.12

200 OK

4.4 kB

URL GET HTTP/2
static.xx.fbcdn.net/rsrc.php/v3/yo/l/0,cross/SfjOCfkfyN1.css?_nc_x=Ij3Wp8lg5Kz
IP
31.13.72.12:443
ASN
#32934 FACEBOOK

Requested by
https://tuyendungdienvientiktoker.com/
Certificate
IssuerDigiCert Inc
Subject*.facebook.com
FingerprintB4:96:54:F1:A8:DF:03:98:82:DD:22:B7:7B:B9:50:DD:02:8A:A4:C1
ValiditySun, 28 Jan 2024 00:00:00 GMT - Sat, 27 Apr 2024 23:59:59 GMT

File type
ASCII text, with very long lines (4583)
Size
4.4 kB (4419 bytes)
Hash
6ef880d5d773a69e0cf799918b53e45b
fb3f9dc2baaaa6f394a9d8c5ffee4cfc7c74c3ee
cc5b4be7c72788500acff4b93376ecb0d50377f9e0f8b18cdc7a8680389f79ff

HTTP Headers

GET /rsrc.php/v3/yo/l/0,cross/SfjOCfkfyN1.css?_nc_x=Ij3Wp8lg5Kz HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://tuyendungdienvientiktoker.com
DNT: 1
Connection: keep-alive
Referer: https://tuyendungdienvientiktoker.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: br
content-type: text/css; charset=utf-8
access-control-allow-origin: *
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
expires: Fri, 18 Apr 2025 22:36:10 GMT
cache-control: public,max-age=31536000,immutable
reporting-endpoints: permissions_policy="https://www.xx.facebook.com/ajax/browser_error_reports/"
timing-allow-origin: *
document-policy: force-load-at-top
permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewport-width=(), ch-width=(), clipboard-read=(), clipboard-write=(), display-capture=(), encrypted-media=(), fullscreen=(self), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), otp-credentials=(), payment=(), picture-in-picture=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), usb=(), window-management=(), xr-spatial-tracking=();report-to="permissions_policy"
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
report-to: {"max_age":21600,"endpoints":[{"url":"https:\/\/www.xx.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
origin-agent-cluster: ?0
content-md5: 5DuLJdtDCD8qlMLerN1tig==
x-fb-debug: /uBEeyh8dm+JNlMfwtC3Ba+PfgQfLApn0eVMNsaXU2VchOOs15pe6Ofp5awyKLPIxVuPUUESsxwQsWvADnrAkg==
content-length: 4419
date: Sat, 20 Apr 2024 15:55:24 GMT
x-fb-connection-quality: EXCELLENT; q=0.9, rtt=7, rtx=0, c=14, mss=1380, tbw=30095, tp=-1, tpl=-1, uplat=3, ullat=-1
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

static.xx.fbcdn.net/rsrc.php/v3/yh/r/6KsQOOvc921.js?_nc_x=Ij3Wp8lg5Kz

31.13.72.12

200 OK

5.5 kB

URL GET HTTP/2
static.xx.fbcdn.net/rsrc.php/v3/yh/r/6KsQOOvc921.js?_nc_x=Ij3Wp8lg5Kz
IP
31.13.72.12:443
ASN
#32934 FACEBOOK

Requested by
https://tuyendungdienvientiktoker.com/
Certificate
IssuerDigiCert Inc
Subject*.facebook.com
FingerprintB4:96:54:F1:A8:DF:03:98:82:DD:22:B7:7B:B9:50:DD:02:8A:A4:C1
ValiditySun, 28 Jan 2024 00:00:00 GMT - Sat, 27 Apr 2024 23:59:59 GMT

File type
JavaScript source, ASCII text, with very long lines (3768)
Size
5.5 kB (5489 bytes)
Hash
219f46bc25141f8415206b6293065a49
4b9a8133c7d5503efb843330d3f858fc58177bd3
4daa2cf9333c31d7d7c9be66522f119c5f88f712fbb76fbe9dd227f353e4e783

HTTP Headers

GET /rsrc.php/v3/yh/r/6KsQOOvc921.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://tuyendungdienvientiktoker.com
DNT: 1
Connection: keep-alive
Referer: https://tuyendungdienvientiktoker.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: br
content-type: application/x-javascript; charset=utf-8
access-control-allow-origin: *
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
expires: Fri, 18 Apr 2025 22:36:10 GMT
cache-control: public,max-age=31536000,immutable
reporting-endpoints: permissions_policy="https://www.xx.facebook.com/ajax/browser_error_reports/"
timing-allow-origin: *
document-policy: force-load-at-top
permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewport-width=(), ch-width=(), clipboard-read=(), clipboard-write=(), display-capture=(), encrypted-media=(), fullscreen=(self), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), otp-credentials=(), payment=(), picture-in-picture=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), usb=(), window-management=(), xr-spatial-tracking=();report-to="permissions_policy"
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
report-to: {"max_age":21600,"endpoints":[{"url":"https:\/\/www.xx.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
origin-agent-cluster: ?0
content-md5: DHQ6sgjLLgqta1/W0xOC5w==
x-fb-debug: Kb4qPQ9iADsf3+glPv+gI2mYmwHcPmQLf8kuqCnGK1wL7nYiFia5apxZi0Cx/Lpb5KG83+Pf/OoyJobvtLw4Zw==
content-length: 5489
date: Sat, 20 Apr 2024 15:55:24 GMT
x-fb-connection-quality: EXCELLENT; q=0.9, rtt=7, rtx=0, c=14, mss=1380, tbw=34823, tp=-1, tpl=-1, uplat=2, ullat=-1
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

static.xx.fbcdn.net/rsrc.php/v3/yA/r/4LgLOt5R1H8.js?_nc_x=Ij3Wp8lg5Kz

31.13.72.12

200 OK

17 kB

URL GET HTTP/2
static.xx.fbcdn.net/rsrc.php/v3/yA/r/4LgLOt5R1H8.js?_nc_x=Ij3Wp8lg5Kz
IP
31.13.72.12:443
ASN
#32934 FACEBOOK

Requested by
https://tuyendungdienvientiktoker.com/
Certificate
IssuerDigiCert Inc
Subject*.facebook.com
FingerprintB4:96:54:F1:A8:DF:03:98:82:DD:22:B7:7B:B9:50:DD:02:8A:A4:C1
ValiditySun, 28 Jan 2024 00:00:00 GMT - Sat, 27 Apr 2024 23:59:59 GMT

File type
JavaScript source, ASCII text, with very long lines (11302)
Size
17 kB (17343 bytes)
Hash
df583391f896844150f229478335c018
b1da190a1f1804b6e50bcff73e94053abd223e0c
564db508c3a2fedb122fa5c5403b44bed0228e46b6d897078af5fe361dc336aa

HTTP Headers

GET /rsrc.php/v3/yA/r/4LgLOt5R1H8.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://tuyendungdienvientiktoker.com
DNT: 1
Connection: keep-alive
Referer: https://tuyendungdienvientiktoker.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: br
content-type: application/x-javascript; charset=utf-8
access-control-allow-origin: *
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
expires: Sun, 13 Apr 2025 10:47:01 GMT
cache-control: public,max-age=31536000,immutable
reporting-endpoints: permissions_policy="https://www.xx.facebook.com/ajax/browser_error_reports/"
timing-allow-origin: *
document-policy: force-load-at-top
permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), clipboard-read=(), clipboard-write=(), display-capture=(), encrypted-media=(), fullscreen=(self), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), otp-credentials=(), payment=(), picture-in-picture=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), usb=(), window-management=(), xr-spatial-tracking=();report-to="permissions_policy"
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
report-to: {"max_age":21600,"endpoints":[{"url":"https:\/\/www.xx.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
content-md5: 5yhKmOacOCq8tPHzNG5+xA==
x-fb-debug: r4uRbaALtTv8M1tBVOM+qOesXdw9GO1MvEgba9GQPrGx+Al2/xzJ9zT01LORfYdTmU0qEO0MoZpL98Z9ZnZ2oA==
content-length: 17343
date: Sat, 20 Apr 2024 15:55:24 GMT
x-fb-connection-quality: EXCELLENT; q=0.9, rtt=7, rtx=0, c=14, mss=1380, tbw=40622, tp=-1, tpl=-1, uplat=1, ullat=-1
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

static.xx.fbcdn.net/rsrc.php/v3/yM/l/0,cross/wZwomVb36YW.css?_nc_x=Ij3Wp8lg5Kz

31.13.72.12

200 OK

3.0 kB

URL GET HTTP/2
static.xx.fbcdn.net/rsrc.php/v3/yM/l/0,cross/wZwomVb36YW.css?_nc_x=Ij3Wp8lg5Kz
IP
31.13.72.12:443
ASN
#32934 FACEBOOK

Requested by
https://tuyendungdienvientiktoker.com/
Certificate
IssuerDigiCert Inc
Subject*.facebook.com
FingerprintB4:96:54:F1:A8:DF:03:98:82:DD:22:B7:7B:B9:50:DD:02:8A:A4:C1
ValiditySun, 28 Jan 2024 00:00:00 GMT - Sat, 27 Apr 2024 23:59:59 GMT

File type
ASCII text, with very long lines (1400)
Size
3.0 kB (2960 bytes)
Hash
fd7be8a039f62ed00d7de8f8f2b87d7a
8c06e991ed2232e01b9448a50a50867fb0949667
be88b51bc8ff8d0d1412d6dd9a38426c875aa8bcd447b866d6b8ee60cb3cf364

HTTP Headers

GET /rsrc.php/v3/yM/l/0,cross/wZwomVb36YW.css?_nc_x=Ij3Wp8lg5Kz HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://tuyendungdienvientiktoker.com
DNT: 1
Connection: keep-alive
Referer: https://tuyendungdienvientiktoker.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: br
content-type: text/css; charset=utf-8
access-control-allow-origin: *
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
expires: Fri, 18 Apr 2025 22:36:10 GMT
cache-control: public,max-age=31536000,immutable
reporting-endpoints: permissions_policy="https://www.xx.facebook.com/ajax/browser_error_reports/"
timing-allow-origin: *
document-policy: force-load-at-top
permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewport-width=(), ch-width=(), clipboard-read=(), clipboard-write=(), display-capture=(), encrypted-media=(), fullscreen=(self), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), otp-credentials=(), payment=(), picture-in-picture=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), usb=(), window-management=(), xr-spatial-tracking=();report-to="permissions_policy"
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
report-to: {"max_age":21600,"endpoints":[{"url":"https:\/\/www.xx.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
origin-agent-cluster: ?0
content-md5: nyJZA/EYKpIUiw4D5ubDsQ==
x-fb-debug: JWk7VEtEeJqf7nfy9kNU54Dgcpns+UiDmW0BCXQ6BtdXN0FWLbdvApNr21250Fnm4L02HfNw9W6CuP2TRn5Reg==
content-length: 2960
date: Sat, 20 Apr 2024 15:55:24 GMT
x-fb-connection-quality: EXCELLENT; q=0.9, rtt=7, rtx=0, c=14, mss=1380, tbw=41403, tp=-1, tpl=-1, uplat=2, ullat=-1
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

static.xx.fbcdn.net/rsrc.php/v3/yW/l/0,cross/ABnGPrAzwmb.css?_nc_x=Ij3Wp8lg5Kz

31.13.72.12

200 OK

6.4 kB

URL GET HTTP/2
static.xx.fbcdn.net/rsrc.php/v3/yW/l/0,cross/ABnGPrAzwmb.css?_nc_x=Ij3Wp8lg5Kz
IP
31.13.72.12:443
ASN
#32934 FACEBOOK

Requested by
https://tuyendungdienvientiktoker.com/
Certificate
IssuerDigiCert Inc
Subject*.facebook.com
FingerprintB4:96:54:F1:A8:DF:03:98:82:DD:22:B7:7B:B9:50:DD:02:8A:A4:C1
ValiditySun, 28 Jan 2024 00:00:00 GMT - Sat, 27 Apr 2024 23:59:59 GMT

File type
ASCII text, with very long lines (3845)
Size
6.4 kB (6444 bytes)
Hash
488d6cc520a68a38390a2cd27c5afb54
ef3dcc09408b76c1108deafb6eeb7d4d23e9587c
45bf8404418098a1ce7ca0ec02e14870649f150218c38f40ed99ee187afc700b

HTTP Headers

GET /rsrc.php/v3/yW/l/0,cross/ABnGPrAzwmb.css?_nc_x=Ij3Wp8lg5Kz HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://tuyendungdienvientiktoker.com
DNT: 1
Connection: keep-alive
Referer: https://tuyendungdienvientiktoker.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: br
content-type: text/css; charset=utf-8
access-control-allow-origin: *
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
expires: Fri, 18 Apr 2025 22:36:10 GMT
cache-control: public,max-age=31536000,immutable
reporting-endpoints: permissions_policy="https://www.xx.facebook.com/ajax/browser_error_reports/"
timing-allow-origin: *
document-policy: force-load-at-top
permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewport-width=(), ch-width=(), clipboard-read=(), clipboard-write=(), display-capture=(), encrypted-media=(), fullscreen=(self), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), otp-credentials=(), payment=(), picture-in-picture=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), usb=(), window-management=(), xr-spatial-tracking=();report-to="permissions_policy"
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
report-to: {"max_age":21600,"endpoints":[{"url":"https:\/\/www.xx.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
origin-agent-cluster: ?0
content-md5: 6wW0PXUV3CyApRKqolHrvA==
x-fb-debug: Mlahwh7GONorGk1lDbgCDCTwQrhts8mcLHLm4NVrpvScH/8tOOqCuQ6IBHTbITCVRKKlfD225NHummZGT6v78Q==
content-length: 6444
date: Sat, 20 Apr 2024 15:55:24 GMT
x-fb-connection-quality: EXCELLENT; q=0.9, rtt=7, rtx=0, c=14, mss=1380, tbw=62099, tp=-1, tpl=-1, uplat=1, ullat=-1
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

static.xx.fbcdn.net/rsrc.php/v3/yM/r/BV_OBclalLZ.js?_nc_x=Ij3Wp8lg5Kz

31.13.72.12

200 OK

100 kB

URL GET HTTP/2
static.xx.fbcdn.net/rsrc.php/v3/yM/r/BV_OBclalLZ.js?_nc_x=Ij3Wp8lg5Kz
IP
31.13.72.12:443
ASN
#32934 FACEBOOK

Requested by
https://tuyendungdienvientiktoker.com/
Certificate
IssuerDigiCert Inc
Subject*.facebook.com
FingerprintB4:96:54:F1:A8:DF:03:98:82:DD:22:B7:7B:B9:50:DD:02:8A:A4:C1
ValiditySun, 28 Jan 2024 00:00:00 GMT - Sat, 27 Apr 2024 23:59:59 GMT

File type
JavaScript source, ASCII text, with very long lines (11594)
Size
100 kB (99569 bytes)
Hash
c9fd7e846f94f84178fdb81761c26768
ee34ccf9dc33f82f760d547c3884b0dea2424af0
f7dbc71c914b760027d24ac15d5ad409845b78ab5eb2f549ad96bfafee7e2bb2

HTTP Headers

GET /rsrc.php/v3/yM/r/BV_OBclalLZ.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://tuyendungdienvientiktoker.com
DNT: 1
Connection: keep-alive
Referer: https://tuyendungdienvientiktoker.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: br
content-type: application/x-javascript; charset=utf-8
access-control-allow-origin: *
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
expires: Fri, 18 Apr 2025 22:36:10 GMT
cache-control: public,max-age=31536000,immutable
reporting-endpoints: permissions_policy="https://www.xx.facebook.com/ajax/browser_error_reports/"
timing-allow-origin: *
document-policy: force-load-at-top
permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewport-width=(), ch-width=(), clipboard-read=(), clipboard-write=(), display-capture=(), encrypted-media=(), fullscreen=(self), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), otp-credentials=(), payment=(), picture-in-picture=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), usb=(), window-management=(), xr-spatial-tracking=();report-to="permissions_policy"
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
report-to: {"max_age":21600,"endpoints":[{"url":"https:\/\/www.xx.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
origin-agent-cluster: ?0
content-md5: mwSvQyZ8TGUj8+ul7SW46w==
x-fb-debug: YV2I9nd9+rMcJdJ+vUwUc6Uw1i9I3qhrnLWcsJRaTFTuYSdYMu7wcFoPVlYcK1EKRL67T/MSg9KBIxxY5lNegw==
content-length: 99569
date: Sat, 20 Apr 2024 15:55:24 GMT
x-fb-connection-quality: EXCELLENT; q=0.9, rtt=7, rtx=0, c=18, mss=1380, tbw=68888, tp=-1, tpl=-1, uplat=1, ullat=-1
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

tuyendungdienvientiktoker.com/

103.28.36.199

200 OK

20 kB

URL User Request GET HTTP/2
tuyendungdienvientiktoker.com/
IP
103.28.36.199:443
ASN
#131353 NhanHoa Software company

Certificate
IssuerLet's Encrypt
Subjectmail.tuyendungdienvientiktoker.com
Fingerprint88:99:FC:01:D7:87:64:75:1A:CC:C6:CB:B7:79:9A:06:41:5A:6C:99
ValidityWed, 20 Mar 2024 02:17:27 GMT - Tue, 18 Jun 2024 02:17:26 GMT

File type
HTML document, Unicode text, UTF-8 text, with very long lines (25548)
Size
20 kB (19789 bytes)
Hash
76ecd73fefcb967dcc9ec9a967bc2066
4eec356e01b2e39e738866b9234cd299eb48ea27
e6f1dc6e8768048831471895d5b612540649abafc2cfe7300a117bcda38fe958

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Facebook, Inc.

HTTP Headers

GET / HTTP/1.1
Host: tuyendungdienvientiktoker.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
content-type: text/html; charset=UTF-8
content-length: 19789
content-encoding: gzip
vary: Accept-Encoding
date: Sat, 20 Apr 2024 15:55:24 GMT
server: LiteSpeed

static.xx.fbcdn.net/rsrc.php/y1/r/4lCu2zih0ca.svg

31.13.72.12

200 OK

956 B

URL GET HTTP/2
static.xx.fbcdn.net/rsrc.php/y1/r/4lCu2zih0ca.svg
IP
31.13.72.12:443
ASN
#32934 FACEBOOK

Requested by
https://tuyendungdienvientiktoker.com/
Certificate
IssuerDigiCert Inc
Subject*.facebook.com
FingerprintB4:96:54:F1:A8:DF:03:98:82:DD:22:B7:7B:B9:50:DD:02:8A:A4:C1
ValiditySun, 28 Jan 2024 00:00:00 GMT - Sat, 27 Apr 2024 23:59:59 GMT

File type
SVG Scalable Vector Graphics image
Size
956 B (956 bytes)
Hash
ecd94021d2c853c3b8deb8203ba17300
6f0e24baf66ae386041e8faf42363418a4c96144
0d6f8d206a6bd8b60a2048a3df206ac956a2f633786e4af1c02057f81758ad7a

HTTP Headers

GET /rsrc.php/y1/r/4lCu2zih0ca.svg HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://tuyendungdienvientiktoker.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: br
content-type: image/svg+xml
access-control-allow-origin: *
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
expires: Sun, 20 Apr 2025 02:32:58 GMT
cache-control: public,max-age=31536000,immutable
reporting-endpoints: permissions_policy="https://www.xx.facebook.com/ajax/browser_error_reports/"
timing-allow-origin: *
document-policy: force-load-at-top
permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewport-width=(), ch-width=(), clipboard-read=(), clipboard-write=(), display-capture=(), encrypted-media=(), fullscreen=(self), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), otp-credentials=(), payment=(), picture-in-picture=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), usb=(), window-management=(), xr-spatial-tracking=();report-to="permissions_policy"
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
report-to: {"max_age":21600,"endpoints":[{"url":"https:\/\/www.xx.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
content-md5: mOuWB7wXlE6XUTOVRHYuCQ==
x-fb-debug: usuHId4nj4kFfBPzDECjK6cpbSm9p8/Y+5OV77oBOwEfVf6JBWYuzE5gR2Xr5YVShawa3fxcI88mW1N8v04RxA==
content-length: 956
date: Sat, 20 Apr 2024 15:55:26 GMT
x-fb-connection-quality: EXCELLENT; q=0.9, rtt=13, rtx=0, c=150, mss=1380, tbw=169145, tp=-1, tpl=-1, uplat=1, ullat=-1
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

ff.kis.v2.scr.kaspersky-labs.com/FD126C42-EBFA-4E12-B309-BB3FDD723AC1/main.js?attr=Udq0z2Iabs2X3hGBCWadU3GfrSGfMY3mII3AQoPlizQdPEHHgj5raRaP_kQuUdlf

0.0.0.0

0 B

URL GET
ff.kis.v2.scr.kaspersky-labs.com/FD126C42-EBFA-4E12-B309-BB3FDD723AC1/main.js?attr=Udq0z2Iabs2X3hGBCWadU3GfrSGfMY3mII3AQoPlizQdPEHHgj5raRaP_kQuUdlf
IP
0.0.0.0:0
ASN
#0

Requested by
https://tuyendungdienvientiktoker.com/

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /FD126C42-EBFA-4E12-B309-BB3FDD723AC1/main.js?attr=Udq0z2Iabs2X3hGBCWadU3GfrSGfMY3mII3AQoPlizQdPEHHgj5raRaP_kQuUdlf HTTP/1.1
Host: ff.kis.v2.scr.kaspersky-labs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://tuyendungdienvientiktoker.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

static.xx.fbcdn.net/rsrc.php/v3/y1/l/0,cross/d4WdtO_N04g.css?_nc_x=Ij3Wp8lg5Kz

31.13.72.12

200 OK

16 kB

URL GET HTTP/2
static.xx.fbcdn.net/rsrc.php/v3/y1/l/0,cross/d4WdtO_N04g.css?_nc_x=Ij3Wp8lg5Kz
IP
31.13.72.12:443
ASN
#32934 FACEBOOK

Requested by
https://tuyendungdienvientiktoker.com/
Certificate
IssuerDigiCert Inc
Subject*.facebook.com
FingerprintB4:96:54:F1:A8:DF:03:98:82:DD:22:B7:7B:B9:50:DD:02:8A:A4:C1
ValiditySun, 28 Jan 2024 00:00:00 GMT - Sat, 27 Apr 2024 23:59:59 GMT

File type
ASCII text, with very long lines (3687)
Size
16 kB (15729 bytes)
Hash
22cfb20bdc590103980ad173411a8e5c
f070366539e186d74df6ba4eb777536f9b754b5d
f7f2d34358ed3da73241ffab2abbb743eb3258707f7c84429341f5be6febc833

HTTP Headers

GET /rsrc.php/v3/y1/l/0,cross/d4WdtO_N04g.css?_nc_x=Ij3Wp8lg5Kz HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://tuyendungdienvientiktoker.com
DNT: 1
Connection: keep-alive
Referer: https://tuyendungdienvientiktoker.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: br
content-type: text/css; charset=utf-8
access-control-allow-origin: *
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
expires: Fri, 18 Apr 2025 22:36:10 GMT
cache-control: public,max-age=31536000,immutable
reporting-endpoints: permissions_policy="https://www.xx.facebook.com/ajax/browser_error_reports/"
timing-allow-origin: *
document-policy: force-load-at-top
permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewport-width=(), ch-width=(), clipboard-read=(), clipboard-write=(), display-capture=(), encrypted-media=(), fullscreen=(self), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), otp-credentials=(), payment=(), picture-in-picture=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), usb=(), window-management=(), xr-spatial-tracking=();report-to="permissions_policy"
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
report-to: {"max_age":21600,"endpoints":[{"url":"https:\/\/www.xx.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
origin-agent-cluster: ?0
content-md5: JAVcG1zPS2s2RevXwqO17Q==
x-fb-debug: gcOTo5rFy68+1RMjIPhrm+gxDcUHHs9XCaF91UXKi5YJBdNGAEVe6qxEHVo3WMK/D7oaSDXajvwmr/DHP7TxJQ==
content-length: 3684
date: Sat, 20 Apr 2024 15:55:24 GMT
x-fb-connection-quality: EXCELLENT; q=0.9, rtt=7, rtx=0, c=13, mss=1380, tbw=3545, tp=-1, tpl=-1, uplat=1, ullat=-1
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (0)

HTTP Transactions (14)

URL User Request GET HTTP/2

IP

ASN

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash