| facebook-login-clone.pages.dev/img/fb.png |  188.114.96.1 | 200 OK | 3.6 kB |
URL GET HTTP/3facebook-login-clone.pages.dev/img/fb.png IP188.114.96.1:443
Requested byhttps://facebook-login-clone.pages.dev/ CertificateIssuerGoogle Trust Services LLC Subjectfacebook-login-clone.pages.dev Fingerprint6F:7B:65:30:17:0E:32:2B:18:7D:F4:CC:70:6F:3A:BA:1E:B5:77:F4 ValiditySat, 16 Mar 2024 22:47:23 GMT - Fri, 14 Jun 2024 22:47:22 GMT
File typePNG image data, 248 x 53, 8-bit/color RGBA, non-interlaced Hashe0aa27d3f9304fbbc1e17e7010d5cd71 fac90d20e23a19ed97bdf40bec3b7a8355987308 4560ba620bca6609d79383cfb689afbee178651deaca28cdaa88dda68ad191f3
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Facebook | | OpenPhish | phishing | Facebook, Inc. | | PhishTank | phishing | Facebook | | Quad9 DNS | malicious | Sinkholed |
GET /img/fb.png HTTP/1.1
Host: facebook-login-clone.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://facebook-login-clone.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 26 Apr 2024 17:25:23 GMT
content-type: image/png
content-length: 3620
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "70fb72acb02d98535596982103c158f4"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=EJv1Nk07iRFmn4FtE%2BtNZoTyS2nioz%2B%2FqXd%2FAU4rcYCzC1xX8wYAk58DFyNAY1%2Bdb0M%2F1lV9nx6HGtwrKk2NgnkrBX%2F2VMOf3LtHAAiAJxcahCGeshWAeSBm6nNCGOVoUdBLNL9i10n6du622q2vQeg%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a84595299e56cb-OSL
alt-svc: h3=":443"; ma=86400
|
|
| facebook-login-clone.pages.dev/ | 188.114.96.1 | 200 OK | 2.1 kB |
URL User Request GET HTTP/2facebook-login-clone.pages.dev/ IP188.114.96.1:443
CertificateIssuerGoogle Trust Services LLC Subjectfacebook-login-clone.pages.dev Fingerprint6F:7B:65:30:17:0E:32:2B:18:7D:F4:CC:70:6F:3A:BA:1E:B5:77:F4 ValiditySat, 16 Mar 2024 22:47:23 GMT - Fri, 14 Jun 2024 22:47:22 GMT
File typeHTML document, Unicode text, UTF-8 text, with very long lines (2254), with no line terminators Hash868516892c732464bc241ae236c9ae9e 2a82ff8eeac6121fb892168d78f33addf188c7ca 52ab563a11c924f78737cf3925335ee8b0ec9b8c6455ddf302b91e77a295b54e
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Facebook | | OpenPhish | phishing | Facebook, Inc. | | PhishTank | phishing | Facebook | | Quad9 DNS | malicious | Sinkholed |
GET / HTTP/1.1
Host: facebook-login-clone.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 26 Apr 2024 17:25:23 GMT
content-type: text/html; charset=utf-8
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: W/"46ad12fc144a5877151f5f937e608530"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=epXCm4cUqYl22f7Oz0hdpOoFXtxxOI4uWb6yF0orQKYRqD4%2F5GgHmxJNwEnLEnawnC76u59EXrhWobQzVH1zxTwN1WGo7lAyqYcuLRHjukEkNw8EBczsc4%2BmXpq%2BERzpQHRufYaX68o0Gpy4dW2g1Ek%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a8459218c71bfe-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| facebook-login-clone.pages.dev/default.css | 188.114.96.1 | 200 OK | 1.1 kB |
URL GET HTTP/3facebook-login-clone.pages.dev/default.css IP188.114.96.1:443
Requested byhttps://facebook-login-clone.pages.dev/ CertificateIssuerGoogle Trust Services LLC Subjectfacebook-login-clone.pages.dev Fingerprint6F:7B:65:30:17:0E:32:2B:18:7D:F4:CC:70:6F:3A:BA:1E:B5:77:F4 ValiditySat, 16 Mar 2024 22:47:23 GMT - Fri, 14 Jun 2024 22:47:22 GMT
File typeASCII text, with very long lines (1139), with no line terminators Hash8a6394806e881369223568c530d5e1e2 5f7e4b6524236f1a63819e4f8127297451005e69 a8582c238110846fe39a4fee588a5df9bd7ff8535a5beefbbf75443fe1dda3e5
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Facebook | | OpenPhish | phishing | Facebook, Inc. | | PhishTank | phishing | Facebook | | Quad9 DNS | malicious | Sinkholed |
GET /default.css HTTP/1.1
Host: facebook-login-clone.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://facebook-login-clone.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 26 Apr 2024 17:25:23 GMT
content-type: text/css; charset=utf-8
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: W/"3548b23b8b8b1636d84325ca51ca92fe"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=x8MTtoa1TrQbxdCAAIEVLOWbjW7HpRxcIaR0RhB7jMvbBTuE0hycGM%2B69zOV%2F%2FsrRJGwH%2BDTwfFh0UJkkIy638VZ5%2BWPLQAu0MORhVQGr%2BaVLo64QOaplsJA9nTeamlolBVY%2FCLl%2Ff52pfFVKkMHqfQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a84595299156cb-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| facebook-login-clone.pages.dev/style.css | 188.114.96.1 | 200 OK | 2.5 kB |
URL GET HTTP/3facebook-login-clone.pages.dev/style.css IP188.114.96.1:443
Requested byhttps://facebook-login-clone.pages.dev/ CertificateIssuerGoogle Trust Services LLC Subjectfacebook-login-clone.pages.dev Fingerprint6F:7B:65:30:17:0E:32:2B:18:7D:F4:CC:70:6F:3A:BA:1E:B5:77:F4 ValiditySat, 16 Mar 2024 22:47:23 GMT - Fri, 14 Jun 2024 22:47:22 GMT
File typeASCII text, with very long lines (2609), with no line terminators Hash83dfeaf090ca620dd3682fc39ff8ab82 67b47c2ece0d3232f542856c1cf555806e9f33c7 694b6dc031d065b237e8cdc257ae889d20b5e04e05b554ee65b17073bd90337e
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Facebook | | OpenPhish | phishing | Facebook, Inc. | | PhishTank | phishing | Facebook | | Quad9 DNS | malicious | Sinkholed |
GET /style.css HTTP/1.1
Host: facebook-login-clone.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://facebook-login-clone.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 26 Apr 2024 17:25:23 GMT
content-type: text/css; charset=utf-8
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: W/"5bd2a55e02a998416922cd1fd5d45fbf"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=IP2Y7HLSnIaybJGElXJWpaBsk8SP51hZCj%2FpbtaiA0PE5NbFbjxtlqaRMUzImZd%2FBqsSs54a7VNtxtcUaeXr8lKKAji1jJzo8V1P2Jh2LVRTGST9DZzlotAS6SWXYK1evq3DWBf%2Fd63H40CcE3vpdq0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a84595299956cb-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| facebook-login-clone.pages.dev/script.js | 188.114.96.1 | 200 OK | 625 B |
URL GET HTTP/3facebook-login-clone.pages.dev/script.js IP188.114.96.1:443
Requested byhttps://facebook-login-clone.pages.dev/ CertificateIssuerGoogle Trust Services LLC Subjectfacebook-login-clone.pages.dev Fingerprint6F:7B:65:30:17:0E:32:2B:18:7D:F4:CC:70:6F:3A:BA:1E:B5:77:F4 ValiditySat, 16 Mar 2024 22:47:23 GMT - Fri, 14 Jun 2024 22:47:22 GMT
File typeASCII text, with very long lines (665), with no line terminators Hash2a66da6dc90ab88e740b25bb9be2a10b afbb4383ccf38a736b0d51c8ece7f9b45a7db920 90e5aa1f0752214c93b909145a3773c45038aa9b0635c0f0acc26f284a09cafd
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Facebook | | OpenPhish | phishing | Facebook, Inc. | | PhishTank | phishing | Facebook | | Quad9 DNS | malicious | Sinkholed |
GET /script.js HTTP/1.1
Host: facebook-login-clone.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://facebook-login-clone.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 26 Apr 2024 17:25:23 GMT
content-type: application/javascript
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: W/"f454d0b46dfc8ace92ac5cd0104761b0"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=MJEUsiivd%2BxAH%2BiYw4kCSS2EsgOy0kgo1vyn6yFCeAIc1tVLDrQxfcEmiknaHfAMTxMPVlG1WhNXBLYW%2F5ta%2BAhdIYkzumC83l7Tl%2FuLwgNei1SjZF46MIEM%2FzSZ1Q2QyB60c%2FseZyaT8addCU3HOus%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a8459529a356cb-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| facebook-login-clone.pages.dev/favicon.ico | 188.114.96.1 | 200 OK | 5.4 kB |
URL GET HTTP/3facebook-login-clone.pages.dev/favicon.ico IP188.114.96.1:443
Requested byhttps://facebook-login-clone.pages.dev/ CertificateIssuerGoogle Trust Services LLC Subjectfacebook-login-clone.pages.dev Fingerprint6F:7B:65:30:17:0E:32:2B:18:7D:F4:CC:70:6F:3A:BA:1E:B5:77:F4 ValiditySat, 16 Mar 2024 22:47:23 GMT - Fri, 14 Jun 2024 22:47:22 GMT
File typeMS Windows icon resource - 2 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel Hash3e764f0f737767b30a692fab1de3ce49 58fa0755a8ee455819769ee0e77c23829bf488dd 88ae5454a7c32c630703440849d35c58f570d8eecc23c071dbe68d63ce6a40d7
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Facebook | | OpenPhish | phishing | Facebook, Inc. | | PhishTank | phishing | Facebook | | Quad9 DNS | malicious | Sinkholed |
GET /favicon.ico HTTP/1.1
Host: facebook-login-clone.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://facebook-login-clone.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 26 Apr 2024 17:25:23 GMT
content-type: image/vnd.microsoft.icon
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: W/"01fc5705ffa32ca5004f5f44ed88eb34"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=BDc6cqOaMb%2BUtixBFeQsjZZfnEXcL6GozZmAg4sz9o%2FTh1hY%2B08B8N36a78Bgxn2XIb8%2Fecdym1O%2F1DyiSxdQmTiDztAWQn1EHG%2FDg2x5H4PCsFJuligdmBiZCncmsp4Uz2QNotGCex%2BkRVcUkw4czM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a84595faeb56cb-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| facebook-login-clone.pages.dev/fonts/Helvetica.ttf | 188.114.96.1 | 200 OK | 318 kB |
URL GET HTTP/3facebook-login-clone.pages.dev/fonts/Helvetica.ttf IP188.114.96.1:443
Requested byhttps://facebook-login-clone.pages.dev/ CertificateIssuerGoogle Trust Services LLC Subjectfacebook-login-clone.pages.dev Fingerprint6F:7B:65:30:17:0E:32:2B:18:7D:F4:CC:70:6F:3A:BA:1E:B5:77:F4 ValiditySat, 16 Mar 2024 22:47:23 GMT - Fri, 14 Jun 2024 22:47:22 GMT
File typeTrueType Font data, 18 tables, 1st "FFTM", 59 names, Macintosh Size318 kB (317968 bytes) Hash1b580d980532792578c54897ca387e2c 53cb59bdb997dd39dc70b95d50133583e66ebdcb 5f865ddf37549ae44630b13a501f813086e2ae974adc86b97337cd9ee4b1e4ff
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Facebook | | OpenPhish | phishing | Facebook, Inc. | | PhishTank | phishing | Facebook | | Quad9 DNS | malicious | Sinkholed |
GET /fonts/Helvetica.ttf HTTP/1.1
Host: facebook-login-clone.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://facebook-login-clone.pages.dev/default.css
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 26 Apr 2024 17:25:23 GMT
content-type: font/ttf
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: W/"ae045ad90e3d66ace72688f293475708"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=nrpcngKTXjnNYuSaVC2Y%2F2YTEQ3DhNzZ%2FhRKD4S733YF3nBDq67zRP1htlnyR5DIzl0hX1sMpGiTZFlV92IAWDzT4q9auuv%2F7sKQt5xLy%2Bd%2BcvvzEvUHa531VQ2KSBo2xv8B2wuwrmqnc39gydDFjZM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a845960afb56cb-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|