Report - fb-g18t-245.getfile.cfd/login.php/

Report Overview

Submitted URL
fb-g18t-245.getfile.cfd/login.php/
IP
104.21.13.67
ASN
#13335 CLOUDFLARENET
Submitted
2023-06-04 01:27:23
Access
public
Website Title
Final URL
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
2

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
cdn.jsdelivr.net	439	2012-05-16	2012-09-30	2023-06-03	989 B	51 kB	151.101.1.229
ocsp.globalsign.com	2075	1999-04-19	2012-07-20	2023-06-03	358 B	1.9 kB	104.18.21.226
fb-g18t-245.getfile.cfd	unknown	2023-05-18	2023-05-31	2023-06-02	1.9 kB	29 kB	104.21.13.67
ka-f.fontawesome.com	3598	2012-10-18	2019-12-17	2023-06-03	2.0 kB	137 kB	172.64.203.28
kit.fontawesome.com	1868	2012-10-18	2019-12-16	2023-06-03	457 B	12 kB	104.18.23.52

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

OpenPhish

Scan Date	Severity	Indicator	Alert
2023-06-03	medium	fb-g18t-245.getfile.cfd/login.php/

PhishTank

No alerts detected

Fortinet's Web Filter

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (2)

	URL	Size	First Seen	Last Seen
	kit.fontawesome.com/08380760ee.js	12 kB	2023-06-04	2023-07-29
Pretty URL kit.fontawesome.com/08380760ee.js IP 104.18.23.52 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-06-04 03:27:24 Last Seen2023-07-29 22:27:56 Times Seen64 Hash 566c6cb3c1e9e7fa6d5edc95f5ccfac8 c03a1a39e2fb157c2b90645f04980ded7a912e0c 9de1adcdc2d92f3ae6967d244c1996039a661f58857a965be25ca7c88ed9815b Loading...

	cdn.jsdelivr.net/npm/bootstrap@5.0.2/dist/js/bootstrap.bundle.min.js	79 kB	2023-03-07	2024-04-19
Pretty URL cdn.jsdelivr.net/npm/bootstrap@5.0.2/dist/js/bootstrap.bundle.min.js IP 151.101.1.229 ASN #54113 FASTLY Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:03:37 Last Seen2024-04-19 19:21:06 Times Seen26351 Hash 0aa8d64e726c4a57adb5c88f9115996b 901169527507ff9e662cf64d8e361f359308970d 7e1f1503df765cca5e099891b94e318a2ef95081ba2af1eb6d417cc884bfdbfe Loading...

HTTP Transactions (12)

URL IP Response Size

cdn.jsdelivr.net/npm/bootstrap@5.0.2/dist/css/bootstrap.min.css

151.101.1.229

200 OK

25 kB

URL GET HTTP/2
cdn.jsdelivr.net/npm/bootstrap@5.0.2/dist/css/bootstrap.min.css
IP
151.101.1.229:443
ASN
#54113 FASTLY

Requested by
https://fb-g18t-245.getfile.cfd/login.php/
Certificate
IssuerGlobalSign nv-sa
Subjectjsdelivr.net
Fingerprint88:D1:D3:FA:BE:69:45:71:5A:74:78:14:1A:E8:F3:5A:88:69:9C:7F
ValidityFri, 23 Dec 2022 10:55:14 GMT - Wed, 24 Jan 2024 10:55:13 GMT

File type
Unicode text, UTF-8 text, with very long lines (65306)
Size
25 kB (25360 bytes)
Hash
abe91756d18b7cd60871a2f47c1e8192
7c1c9e0573e5cea8bad3733be2fc63aa8c68ea8d
7633b7c0c97d19e682feee8afa2738523fcb2a14544a550572caeecd2eefe66b

HTTP Headers

GET /npm/bootstrap@5.0.2/dist/css/bootstrap.min.css HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://fb-g18t-245.getfile.cfd
DNT: 1
Connection: keep-alive
Referer: https://fb-g18t-245.getfile.cfd/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=31536000, s-maxage=31536000, immutable
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: text/css; charset=utf-8
x-jsd-version: 5.0.2
x-jsd-version-type: version
etag: W/"260c5-fByeBXPlzqi603M74vxjqoxo6o0"
content-encoding: br
accept-ranges: bytes
date: Sun, 04 Jun 2023 01:27:06 GMT
age: 6956843
x-served-by: cache-fra-eddf8230097-FRA, cache-bma1680-BMA
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 25360
X-Firefox-Spdy: h2

cdn.jsdelivr.net/npm/bootstrap@5.0.2/dist/js/bootstrap.bundle.min.js

151.101.1.229

200 OK

24 kB

URL GET HTTP/2
cdn.jsdelivr.net/npm/bootstrap@5.0.2/dist/js/bootstrap.bundle.min.js
IP
151.101.1.229:443
ASN
#54113 FASTLY

Requested by
https://fb-g18t-245.getfile.cfd/login.php/
Certificate
IssuerGlobalSign nv-sa
Subjectjsdelivr.net
Fingerprint88:D1:D3:FA:BE:69:45:71:5A:74:78:14:1A:E8:F3:5A:88:69:9C:7F
ValidityFri, 23 Dec 2022 10:55:14 GMT - Wed, 24 Jan 2024 10:55:13 GMT

File type
ASCII text, with very long lines (65299)
Size
24 kB (23943 bytes)
Hash
0aa8d64e726c4a57adb5c88f9115996b
901169527507ff9e662cf64d8e361f359308970d
7e1f1503df765cca5e099891b94e318a2ef95081ba2af1eb6d417cc884bfdbfe

HTTP Headers

GET /npm/bootstrap@5.0.2/dist/js/bootstrap.bundle.min.js HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://fb-g18t-245.getfile.cfd
DNT: 1
Connection: keep-alive
Referer: https://fb-g18t-245.getfile.cfd/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=31536000, s-maxage=31536000, immutable
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: application/javascript; charset=utf-8
x-jsd-version: 5.0.2
x-jsd-version-type: version
etag: W/"13397-kBFpUnUH/55mLPZNjjYfNZMIlw0"
content-encoding: br
accept-ranges: bytes
date: Sun, 04 Jun 2023 01:27:06 GMT
age: 991221
x-served-by: cache-fra-eddf8230080-FRA, cache-bma1680-BMA
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 23943
X-Firefox-Spdy: h2

ocsp.globalsign.com/ca/gsatlasr3dvtlsca2022q4

104.18.21.226

1.5 kB

URL
ocsp.globalsign.com/ca/gsatlasr3dvtlsca2022q4
IP
104.18.21.226:0
ASN
#13335 CLOUDFLARENET

File type
data
Size
1.5 kB (1462 bytes)
Hash
4a0b260a83a3b8f501712ce93fc10703
5bdc5c7d38bd384543bcbce57c1563046e183844
a1d22b1991a310375fc6b5d2e06ae332712e75d3c5bd57080965bc79269e1fbb

HTTP Headers

POST /ca/gsatlasr3dvtlsca2022q4 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Sun, 04 Jun 2023 01:27:06 GMT
Content-Type: application/ocsp-response
Transfer-Encoding: chunked
Connection: keep-alive
Etag: "431437EC2C0DA68EA1F46B684AA3B6EF0C5F8EB5"
Expires: Sun, 04 Jun 2023 12:00:00 GMT
Last-Modified: Sun, 04 Jun 2023 00:00:00 UTC
Cache-Control: s-maxage=3600, public, no-transform, must-revalidate
CF-Cache-Status: HIT
Age: 947
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7d1c643b3c6fb50b-OSL

fb-g18t-245.getfile.cfd/login.php/assets/fathz.css

104.21.13.67

200 OK

6.5 kB

URL GET HTTP/3
fb-g18t-245.getfile.cfd/login.php/assets/fathz.css
IP
104.21.13.67:443
ASN
#13335 CLOUDFLARENET

Requested by
https://fb-g18t-245.getfile.cfd/login.php/
Certificate
IssuerGoogle Trust Services LLC
Subjectgetfile.cfd
Fingerprint12:3A:EB:DC:73:05:55:87:B2:98:2E:FE:16:24:DB:4F:C5:B3:19:8A
ValidityThu, 18 May 2023 02:33:37 GMT - Wed, 16 Aug 2023 02:33:36 GMT

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (6900), with no line terminators
Size
6.5 kB (6469 bytes)
Hash
d6facd7db122adb6153fa5d4d5f75ac8
6e791636267a50974c667025c24c2052fa10c5d1
ae24bd6560c86b8ce661824e5cab0cbe362b981280c3c68bdb7d9d12d4652307

HTTP Headers

GET /login.php/assets/fathz.css HTTP/1.1
Host: fb-g18t-245.getfile.cfd
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fb-g18t-245.getfile.cfd/login.php/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Sun, 04 Jun 2023 01:27:07 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
x-turbo-charged-by: LiteSpeed
cache-control: max-age=14400
cf-cache-status: EXPIRED
last-modified: Fri, 02 Jun 2023 23:56:52 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=xvzLm0RBfDRE1T9OBmmGUi7VMaUuTn3zJnqKftMt9f%2B0VpXZ4RCtDTvf2OaYG%2BROUoq5kHMOh7voiLQRNg%2BQE0QUH%2Fgbtz1YDYog736LtR0OjYpKdXM2GuhCZpVBzVyACpmHkbmJv3BPzw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7d1c643a5f25fac0-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

fb-g18t-245.getfile.cfd/login.php/assets/img/meta.png

104.21.13.67

200 OK

6.5 kB

URL GET HTTP/3
fb-g18t-245.getfile.cfd/login.php/assets/img/meta.png
IP
104.21.13.67:443
ASN
#13335 CLOUDFLARENET

Requested by
https://fb-g18t-245.getfile.cfd/login.php/
Certificate
IssuerGoogle Trust Services LLC
Subjectgetfile.cfd
Fingerprint12:3A:EB:DC:73:05:55:87:B2:98:2E:FE:16:24:DB:4F:C5:B3:19:8A
ValidityThu, 18 May 2023 02:33:37 GMT - Wed, 16 Aug 2023 02:33:36 GMT

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (6900), with no line terminators
Size
6.5 kB (6469 bytes)
Hash
d6facd7db122adb6153fa5d4d5f75ac8
6e791636267a50974c667025c24c2052fa10c5d1
ae24bd6560c86b8ce661824e5cab0cbe362b981280c3c68bdb7d9d12d4652307

HTTP Headers

GET /login.php/assets/img/meta.png HTTP/1.1
Host: fb-g18t-245.getfile.cfd
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fb-g18t-245.getfile.cfd/login.php/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Sun, 04 Jun 2023 01:27:07 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
x-turbo-charged-by: LiteSpeed
cache-control: max-age=14400
cf-cache-status: EXPIRED
last-modified: Fri, 02 Jun 2023 23:56:52 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=V2AxBDO6elXeHHDI8txqpooF83b7IH5icevMqspxIhcNtDaw%2BiWlKBDxLMZJ5HdIF9ffscOU91keksCKO%2B3K3nctprOhmn5ZEdNzMYSAtODLPOmSGn%2FlHF%2BOWzenJ3SE58pfM2o8O%2B8JQg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7d1c643a6f2afac0-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

ka-f.fontawesome.com/releases/v6.4.0/css/free-v4-shims.min.css?token=08380760ee

172.64.203.28

200 OK

28 kB

URL GET HTTP/2
ka-f.fontawesome.com/releases/v6.4.0/css/free-v4-shims.min.css?token=08380760ee
IP
172.64.203.28:443
ASN
#13335 CLOUDFLARENET

Requested by
https://fb-g18t-245.getfile.cfd/login.php/
Certificate
IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint49:14:F2:7A:2C:AE:36:01:38:B7:F7:3D:DB:44:3E:3F:5C:FB:6B:15
ValidityFri, 12 Aug 2022 00:00:00 GMT - Sat, 12 Aug 2023 23:59:59 GMT

File type
ASCII text, with very long lines (27377)
Size
28 kB (27592 bytes)
Hash
5193a6de5225940ae4ef5f7c82126be9
fa2c2bdb52e9923ccf3387c5908459c9d11bff63
425741cc35824b5b3b18d4135fbef6afca30662d23638366af151f7e74ba2575

HTTP Headers

GET /releases/v6.4.0/css/free-v4-shims.min.css?token=08380760ee HTTP/1.1
Host: ka-f.fontawesome.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://fb-g18t-245.getfile.cfd/
Origin: https://fb-g18t-245.getfile.cfd
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Sun, 04 Jun 2023 01:27:07 GMT
content-type: text/css
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-max-age: 3000
last-modified: Thu, 23 Mar 2023 21:29:20 GMT
etag: W/"5193a6de5225940ae4ef5f7c82126be9"
x-amz-server-side-encryption: AES256
cache-control: max-age=31556926
access-control-allow-headers: fa-kit-token
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 c58391b07051938ceda6615614fbabb0.cloudfront.net (CloudFront)
x-amz-cf-pop: LHR50-P1
x-amz-cf-id: -fvmijn-4UmBAmIlsRky_kFa_r-fQPvM2xiP-PejPQnYnyB4H7pgWw==
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2BiOL5M4%2FTcvDIZkAN9Cn%2Fn6pOszbCor%2Fb75Ds5O6jGySA%2BRlAZkK2z1PwD%2BNWRBknCwD7jv2F%2FTR9VKlQ7bu0S6yZdt0%2B2UooU4OW3%2FPburdI0qs%2BJOHNX3ypvlcUiypl0MACQ0YZQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7d1c643ebd1c496d-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

ka-f.fontawesome.com/releases/v6.4.0/css/free-v5-font-face.min.css?token=08380760ee

172.64.203.28

200 OK

823 B

URL GET HTTP/2
ka-f.fontawesome.com/releases/v6.4.0/css/free-v5-font-face.min.css?token=08380760ee
IP
172.64.203.28:443
ASN
#13335 CLOUDFLARENET

Requested by
https://fb-g18t-245.getfile.cfd/login.php/
Certificate
IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint49:14:F2:7A:2C:AE:36:01:38:B7:F7:3D:DB:44:3E:3F:5C:FB:6B:15
ValidityFri, 12 Aug 2022 00:00:00 GMT - Sat, 12 Aug 2023 23:59:59 GMT

File type
ASCII text, with very long lines (845), with no line terminators
Size
823 B (823 bytes)
Hash
2294fec50bebe1dc04d4936722c3c08e
05902d67eb724a4569ceeadb7b4e1eef75c0efee
1a0aefc152cf12c1e6ea5027b3449b301fddc172a581b382ff69216cd2c26781

HTTP Headers

GET /releases/v6.4.0/css/free-v5-font-face.min.css?token=08380760ee HTTP/1.1
Host: ka-f.fontawesome.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://fb-g18t-245.getfile.cfd/
Origin: https://fb-g18t-245.getfile.cfd
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Sun, 04 Jun 2023 01:27:07 GMT
content-type: text/css
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-max-age: 3000
last-modified: Thu, 23 Mar 2023 21:29:20 GMT
etag: W/"5856e3f07fbc36fc4d430a95a577a87f"
x-amz-server-side-encryption: AES256
cache-control: max-age=31556926
access-control-allow-headers: fa-kit-token
x-cache: Hit from cloudfront
via: 1.1 329cb27be8d7871661ed5a94ecaacb28.cloudfront.net (CloudFront)
x-amz-cf-pop: LHR50-P1
x-amz-cf-id: SSVNeYgEHdtTXxYRabe029K2JivbfFjTIe-kcxHW4dDMol2Xe2YZBQ==
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=JbQLkDJukJAl0weU4HCZz5KkGR%2FzndAhoVenJktcxFr5Hjlwrt82HxRM7WTmq54eyz0FXZbQKfDnmOv5lJ9jG2SGrQVpN8d2RfGXKjOiqTfsIFy0bLzsR%2FqJD51vJYvIN7RQOOB%2Biw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7d1c643ebd1a496d-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

fb-g18t-245.getfile.cfd/login.php/

104.21.13.67

200 OK

6.5 kB

URL User Request GET HTTP/2
fb-g18t-245.getfile.cfd/login.php/
IP
104.21.13.67:443
ASN
#13335 CLOUDFLARENET

Certificate
IssuerGoogle Trust Services LLC
Subjectgetfile.cfd
Fingerprint12:3A:EB:DC:73:05:55:87:B2:98:2E:FE:16:24:DB:4F:C5:B3:19:8A
ValidityThu, 18 May 2023 02:33:37 GMT - Wed, 16 Aug 2023 02:33:36 GMT

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (6900), with no line terminators
Size
6.5 kB (6469 bytes)
Hash
d6facd7db122adb6153fa5d4d5f75ac8
6e791636267a50974c667025c24c2052fa10c5d1
ae24bd6560c86b8ce661824e5cab0cbe362b981280c3c68bdb7d9d12d4652307

Detections

Analyzer	Verdict	Alert
openphish	Facebook, Inc.

HTTP Headers

GET /login.php/ HTTP/1.1
Host: fb-g18t-245.getfile.cfd
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Sun, 04 Jun 2023 01:27:06 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
x-turbo-charged-by: LiteSpeed
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=tQ6fPHVGlgdJPGof5I4ijKdH07Ou7kFqZqEjfnAyf2yLUmufIhj7RQF2Imw4VLK8LGtTQtH3eqNc2w9FRBjbSCHlRRWgY5qFbHL%2FgDZQy%2FJuHFl8mcCSY560TP1neS83WyvWw2BOGspvNw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7d1c64357fa80b45-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

kit.fontawesome.com/08380760ee.js

104.18.23.52

200 OK

12 kB

URL GET HTTP/2
kit.fontawesome.com/08380760ee.js
IP
104.18.23.52:443
ASN
#13335 CLOUDFLARENET

Requested by
https://fb-g18t-245.getfile.cfd/login.php/
Certificate
IssuerDigiCert Inc
Subject*.fontawesome.com
Fingerprint6C:69:02:A7:9B:07:84:8E:D0:3D:0A:10:61:8E:01:80:88:37:EF:5E
ValidityTue, 22 Nov 2022 00:00:00 GMT - Sat, 23 Dec 2023 23:59:59 GMT

File type
ASCII text, with very long lines (11213)
Size
12 kB (11642 bytes)
Hash
566c6cb3c1e9e7fa6d5edc95f5ccfac8
c03a1a39e2fb157c2b90645f04980ded7a912e0c
9de1adcdc2d92f3ae6967d244c1996039a661f58857a965be25ca7c88ed9815b

HTTP Headers

GET /08380760ee.js HTTP/1.1
Host: kit.fontawesome.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://fb-g18t-245.getfile.cfd
DNT: 1
Connection: keep-alive
Referer: https://fb-g18t-245.getfile.cfd/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Sun, 04 Jun 2023 01:27:06 GMT
content-type: text/javascript
access-control-allow-headers: accept, accept-langauge, content-language, content-type, fa-kit-token
access-control-allow-methods: GET, OPTIONS
access-control-allow-origin: *
access-control-max-age: 3000
cache-control: max-age=60, public, must-revalidate
strict-transport-security: max-age=31536000; preload
vary: origin, accept-encoding, access-control-request-headers, access-control-request-method
x-request-id: F2Tu4ooDcYx6BM4XwSeD
cf-cache-status: REVALIDATED
server: cloudflare
cf-ray: 7d1c643aaf64b524-OSL
content-encoding: gzip
X-Firefox-Spdy: h2

ka-f.fontawesome.com/releases/v6.4.0/css/free.min.css?token=08380760ee

172.64.203.28

200 OK

103 kB

URL GET HTTP/2
ka-f.fontawesome.com/releases/v6.4.0/css/free.min.css?token=08380760ee
IP
172.64.203.28:443
ASN
#13335 CLOUDFLARENET

Requested by
https://fb-g18t-245.getfile.cfd/login.php/
Certificate
IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint49:14:F2:7A:2C:AE:36:01:38:B7:F7:3D:DB:44:3E:3F:5C:FB:6B:15
ValidityFri, 12 Aug 2022 00:00:00 GMT - Sat, 12 Aug 2023 23:59:59 GMT

File type
ASCII text, with very long lines (65321)
Size
103 kB (102557 bytes)
Hash
5febfb939e2fc4ddf14fffae53b72cf0
e0e62217708a9cfd0b78a8574e07a66d95cf1344
fd28ebf7bdffb45da731413ed6e6940dc60123aa120bfa5a3909a40b2a2ba7e1

HTTP Headers

GET /releases/v6.4.0/css/free.min.css?token=08380760ee HTTP/1.1
Host: ka-f.fontawesome.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://fb-g18t-245.getfile.cfd/
Origin: https://fb-g18t-245.getfile.cfd
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Sun, 04 Jun 2023 01:27:07 GMT
content-type: text/css
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-max-age: 3000
last-modified: Thu, 23 Mar 2023 21:29:21 GMT
etag: W/"5febfb939e2fc4ddf14fffae53b72cf0"
x-amz-server-side-encryption: AES256
cache-control: max-age=31556926
access-control-allow-headers: fa-kit-token
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 db92535f619848d07c0f5eb965b50adc.cloudfront.net (CloudFront)
x-amz-cf-pop: LHR50-P1
x-amz-cf-id: ufOHJ4dRIZJOb76dssG4t1o7YwgcuN64x5a4P72pKcUAWSLiFG3flw==
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=2%2BxRrochHeQz6F3T7BQbFNpErWYR4Dn6v%2B%2FIaDgatymYx%2FaXtAjeaDKI%2FEcUXDNi3MSX%2F7PrIWaUKJ%2Bwy%2Fh89dXH0pkzebN1Sv2WPd4yRacpg4kv0aFCeFUCa9Z0ygnT6%2FEPwaWHwg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7d1c643ead16496d-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

ka-f.fontawesome.com/releases/v6.4.0/css/free-v4-font-face.min.css?token=08380760ee

172.64.203.28

200 OK

1.8 kB

URL GET HTTP/2
ka-f.fontawesome.com/releases/v6.4.0/css/free-v4-font-face.min.css?token=08380760ee
IP
172.64.203.28:443
ASN
#13335 CLOUDFLARENET

Requested by
https://fb-g18t-245.getfile.cfd/login.php/
Certificate
IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint49:14:F2:7A:2C:AE:36:01:38:B7:F7:3D:DB:44:3E:3F:5C:FB:6B:15
ValidityFri, 12 Aug 2022 00:00:00 GMT - Sat, 12 Aug 2023 23:59:59 GMT

File type
ASCII text, with very long lines (1803), with no line terminators
Size
1.8 kB (1775 bytes)
Hash
97b548129a2bcf8588519009187c2c39
945ad038ab7f6ddaee01dda882fc07dbf3c56af0
7792fc000372bac02c70b61f4e98f5c0af19f74a07176bb2ff117cacf7752d81

HTTP Headers

GET /releases/v6.4.0/css/free-v4-font-face.min.css?token=08380760ee HTTP/1.1
Host: ka-f.fontawesome.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://fb-g18t-245.getfile.cfd/
Origin: https://fb-g18t-245.getfile.cfd
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Sun, 04 Jun 2023 01:27:07 GMT
content-type: text/css
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-max-age: 3000
last-modified: Thu, 23 Mar 2023 21:29:20 GMT
etag: W/"9e7f9f634ace089bcdacc3fcc5f23ce5"
x-amz-server-side-encryption: AES256
cache-control: max-age=31556926
access-control-allow-headers: fa-kit-token
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 7309328e91f012108061822748228b68.cloudfront.net (CloudFront)
x-amz-cf-pop: LHR50-P1
x-amz-cf-id: PNzuKaFLFYHF5k4DtNNVt1Mx6_Ee8krnbuMsQu3gWEUkx7jlzzJ7tA==
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=hIdRzSCrHo%2B87%2FxMS10P9X2BXHmmhwyR9%2BhR%2FizmTqYKRnwrBbquCDYYGGBB9y76rOm4ChUQoXXXJ3qv%2FO2iD5vr2vW5APCuWvcTKeq%2BmpGxjWkBeCSa4Hkj9jaX2jM4%2BSEqVjaiPA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7d1c643ebd1f496d-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

fb-g18t-245.getfile.cfd/login.php/assets/img/favfb.png

104.21.13.67

200 OK

6.5 kB

URL GET HTTP/3
fb-g18t-245.getfile.cfd/login.php/assets/img/favfb.png
IP
104.21.13.67:443
ASN
#13335 CLOUDFLARENET

Requested by
https://fb-g18t-245.getfile.cfd/login.php/
Certificate
IssuerGoogle Trust Services LLC
Subjectgetfile.cfd
Fingerprint12:3A:EB:DC:73:05:55:87:B2:98:2E:FE:16:24:DB:4F:C5:B3:19:8A
ValidityThu, 18 May 2023 02:33:37 GMT - Wed, 16 Aug 2023 02:33:36 GMT

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (6900), with no line terminators
Size
6.5 kB (6469 bytes)
Hash
d6facd7db122adb6153fa5d4d5f75ac8
6e791636267a50974c667025c24c2052fa10c5d1
ae24bd6560c86b8ce661824e5cab0cbe362b981280c3c68bdb7d9d12d4652307

HTTP Headers

GET /login.php/assets/img/favfb.png HTTP/1.1
Host: fb-g18t-245.getfile.cfd
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fb-g18t-245.getfile.cfd/login.php/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Sun, 04 Jun 2023 01:27:08 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
x-turbo-charged-by: LiteSpeed
cache-control: max-age=14400
cf-cache-status: EXPIRED
last-modified: Fri, 02 Jun 2023 23:56:53 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=rG3pCMdzdE8P3BY4UlCWsEUc%2B9bZa%2FC2uEFMVjOXjrjqX0HOuXr%2FzMPL2mzMQDOX%2FIESFYcwRQufRLz%2Fdxx3a%2BT9vboyhxWVcRrw38sfwZ6%2Bh5qtK6D3gggNX1NHLN93fS82sczJ%2BedUOQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7d1c643fb867fac0-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

OpenPhish

PhishTank

Fortinet's Web Filter

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (2)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (12)

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL GET HTTP/3

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/3

IP

ASN

Requested by

Certificate