Report - vww-facebook.com.vn/eoNU6Gxve82A9M09szVJ.html?nH8F876uHO=dZgKwdiRkxIdsPo&fin=s

Report Overview

Visited public
2024-05-14 06:31:33
Tags
URL
vww-facebook.com.vn/eoNU6Gxve82A9M09szVJ.html?nH8F876uHO=dZgKwdiRkxIdsPo&fin=s_in
Finishing URL
vww-facebook.com.vn/eoNU6Gxve82A9M09szVJ.html?nH8F876uHO=dZgKwdiRkxIdsPo&fin=s_in
IP / ASN
188.114.97.1
#13335 CLOUDFLARENET
Title
BIẾN TẠI LONG AN

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
ajax.googleapis.com	12905	2005-01-25	2013-08-16 11:51:31	2024-05-14 07:03:59	434 B	32 kB	142.250.74.106
vww-facebook.com.vn	unknown	unknown	2024-04-08 14:50:58	2024-04-18 02:02:48	2.2 kB	14 kB	188.114.96.1

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

Scan Date	Severity	Indicator	Alert
2024-05-13	medium	vww-facebook.com.vn/eoNU6Gxve82A9M09szVJ.html?nH8F876uHO=dZgKwdiRkxIdsPo&fin=s_in	Facebook, Inc.

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (2)

	URL	From	Size	First Seen	Last Seen
	ajax.googleapis.com/ajax/libs/jquery/3.6.4/jquery.min.js	ScriptElement	90 kB	2023-03-26	2025-06-13
Pretty URL ajax.googleapis.com/ajax/libs/jquery/3.6.4/jquery.min.js IP 142.250.74.106 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-26 04:59 Last Seen2025-06-13 19:42 Times Seen7904 Hash 641dd14370106e992d352166f5a07e99 eda46747c71d38a880bee44f9a439c3858bb8f99 a0fe8723dcf55da64d06b25446d0a8513e52527c45afcb37073465f9c6f352af Loading...

	vww-facebook.com.vn/eoNU6Gxve82A9M09szVJ.html?nH8F876uHO=dZgKwdiRkxIdsPo&fin=s_in	ScriptElement	0 B	0001-01-01	2025-06-13
Pretty URL vww-facebook.com.vn/eoNU6Gxve82A9M09szVJ.html?nH8F876uHO=dZgKwdiRkxIdsPo&fin=s_in IP 188.114.96.1 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen0001-01-01 00:00 Last Seen2025-06-13 19:48 Times Seen4948173 Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Loading...

HTTP Transactions (5)

URL IP Response Size

ajax.googleapis.com/ajax/libs/jquery/3.6.4/jquery.min.js

142.250.74.106

200 OK

31 kB

URL GET HTTP/2
ajax.googleapis.com/ajax/libs/jquery/3.6.4/jquery.min.js
IP
142.250.74.106:443
ASN
#15169 GOOGLE

Requested by
https://vww-facebook.com.vn/eoNU6Gxve82A9M09szVJ.html?nH8F876uHO=dZgKwdiRkxIdsPo&fin=s_in
Certificate
IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
Fingerprint36:49:20:36:0C:4D:DA:55:65:64:23:0F:49:3E:FA:78:87:35:A3:79
ValidityTue, 16 Apr 2024 04:17:12 GMT - Tue, 09 Jul 2024 04:17:11 GMT

File type
JavaScript source, ASCII text, with very long lines (65447)
Size
31 kB (31154 bytes)
Hash
641dd14370106e992d352166f5a07e99
eda46747c71d38a880bee44f9a439c3858bb8f99
a0fe8723dcf55da64d06b25446d0a8513e52527c45afcb37073465f9c6f352af

HTTP Headers

GET /ajax/libs/jquery/3.6.4/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://vww-facebook.com.vn/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 31154
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 10 May 2024 06:12:15 GMT
expires: Sat, 10 May 2025 06:12:15 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
age: 346733
last-modified: Tue, 04 Apr 2023 03:27:01 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

vww-facebook.com.vn/eoNU6Gxve82A9M09szVJ.html?nH8F876uHO=dZgKwdiRkxIdsPo&fin=s_in

188.114.96.1

200 OK

5.2 kB

URL User Request GET HTTP/2
vww-facebook.com.vn/eoNU6Gxve82A9M09szVJ.html?nH8F876uHO=dZgKwdiRkxIdsPo&fin=s_in
IP
188.114.96.1:443
ASN
#13335 CLOUDFLARENET

Certificate
IssuerGoogle Trust Services LLC
Subjectvww-facebook.com.vn
Fingerprint94:B6:C1:BE:87:0C:AA:5A:A4:67:0D:EB:8D:B5:25:3B:37:DB:13:6B
ValidityWed, 03 Apr 2024 10:31:54 GMT - Tue, 02 Jul 2024 10:31:53 GMT

File type
HTML document, Unicode text, UTF-8 text, with very long lines (5489), with no line terminators
Size
5.2 kB (5231 bytes)
Hash
11ffa5271531a57f2a27b7363fd2b988
070bb7b42d1ce4dbdc61c2eb2a413af2e6b356e5
b474ba2f896ccb09a520479e14e1e3831452cfc4de7145ce2db5aef7155caa4b

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Facebook, Inc.

HTTP Headers

GET /eoNU6Gxve82A9M09szVJ.html?nH8F876uHO=dZgKwdiRkxIdsPo&fin=s_in HTTP/1.1
Host: vww-facebook.com.vn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Tue, 14 May 2024 06:31:08 GMT
content-type: text/html; charset=UTF-8
x-powered-by: PHP/7.4.33
set-cookie: PHPSESSID=065nalbhqsle8dqn5du22di3tu; path=/
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
vary: Accept-Encoding
x-turbo-charged-by: LiteSpeed
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=p42yeP8adUEfqKD%2BEMmRYSdFnFpmkUI0VV2KMvx3FHw0gnRgafirHfJooWtaeHtwhI6EWe07Ig%2FUs2TWl%2FNtRDOnsvGNcv%2FBQbPfbfHEfom%2FTHy85ABHQSg7lm%2BV%2FfeftJ7mX2sI"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8838d7f2cb9f1c02-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

vww-facebook.com.vn/theme/fbweb1/fbstyle.css

188.114.96.1

200 OK

2.9 kB

URL GET HTTP/3
vww-facebook.com.vn/theme/fbweb1/fbstyle.css
IP
188.114.96.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://vww-facebook.com.vn/eoNU6Gxve82A9M09szVJ.html?nH8F876uHO=dZgKwdiRkxIdsPo&fin=s_in
Certificate
IssuerGoogle Trust Services LLC
Subjectvww-facebook.com.vn
Fingerprint94:B6:C1:BE:87:0C:AA:5A:A4:67:0D:EB:8D:B5:25:3B:37:DB:13:6B
ValidityWed, 03 Apr 2024 10:31:54 GMT - Tue, 02 Jul 2024 10:31:53 GMT

File type
ASCII text, with very long lines (3096), with no line terminators
Size
2.9 kB (2918 bytes)
Hash
18aba9dd9028df468af70f8d6f561339
a0c24824653a4866ce6d42ac1fd25f1786bfaadb
893a71e75ddb2fa88929c204b58eedc81400a90497f16e2d585e8afeec9f987b

HTTP Headers

GET /theme/fbweb1/fbstyle.css HTTP/1.1
Host: vww-facebook.com.vn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://vww-facebook.com.vn/eoNU6Gxve82A9M09szVJ.html?nH8F876uHO=dZgKwdiRkxIdsPo&fin=s_in
Cookie: PHPSESSID=065nalbhqsle8dqn5du22di3tu
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Tue, 14 May 2024 06:31:09 GMT
content-type: text/css
cache-control: public, max-age=43200
expires: Tue, 14 May 2024 00:21:49 GMT
etag: W/"b66-65b6bf70-3803fbf;br"
last-modified: Sun, 28 Jan 2024 20:56:16 GMT
vary: Accept-Encoding
x-turbo-charged-by: LiteSpeed
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Bbg9hTOW84pliWWIAOwAtSzZDRc1Z6vfjYB827xMs8d1wnudv7H2dMPrvXpen%2Beb4Ao71fYrjOPzrW03mvwlS9clj6Nn0Y%2FVdpn%2BWThuNDZcGQxs4XaApuLpEP%2Fk7el4P9EuSsnG"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8838d7f6ea0e5684-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

vww-facebook.com.vn/theme/fbweb1/logo.svg

188.114.96.1

200 OK

2.4 kB

URL GET HTTP/3
vww-facebook.com.vn/theme/fbweb1/logo.svg
IP
188.114.96.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://vww-facebook.com.vn/eoNU6Gxve82A9M09szVJ.html?nH8F876uHO=dZgKwdiRkxIdsPo&fin=s_in
Certificate
IssuerGoogle Trust Services LLC
Subjectvww-facebook.com.vn
Fingerprint94:B6:C1:BE:87:0C:AA:5A:A4:67:0D:EB:8D:B5:25:3B:37:DB:13:6B
ValidityWed, 03 Apr 2024 10:31:54 GMT - Tue, 02 Jul 2024 10:31:53 GMT

File type
SVG Scalable Vector Graphics image
Size
2.4 kB (2385 bytes)
Hash
eb0a14e57c75805425e06bc50456a61c
a7c045d08836b0a70a986d2af5a2fc0424f0950b
ba6c92cb2d954d476bb4ebe83719b8ab5f9abff03d85d5644ff922066715fae6

HTTP Headers

GET /theme/fbweb1/logo.svg HTTP/1.1
Host: vww-facebook.com.vn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://vww-facebook.com.vn/eoNU6Gxve82A9M09szVJ.html?nH8F876uHO=dZgKwdiRkxIdsPo&fin=s_in
Cookie: PHPSESSID=065nalbhqsle8dqn5du22di3tu
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Tue, 14 May 2024 06:31:09 GMT
content-type: image/svg+xml
cache-control: public, max-age=43200
expires: Tue, 14 May 2024 03:14:12 GMT
etag: W/"951-65b6d6da-3803fc0;br"
last-modified: Sun, 28 Jan 2024 22:36:10 GMT
vary: Accept-Encoding
x-turbo-charged-by: LiteSpeed
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=OEVOjsTAVQ3FjUIKGdf6v5TpdzKfEp1YjPWnhW5n1w4L%2FFPTsor2OdFw6zXL5O2nK8mrNV0kN3IrlPiIjs3Wsy%2B0%2B8N%2BIbMo%2Fvi0bnF4qNAXpbT6P%2BwifYNvlHdw1S4Jb9zJpADI"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8838d7f6fa1d5684-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

vww-facebook.com.vn/favicon.ico

188.114.96.1

200 OK

0 B

URL GET HTTP/3
vww-facebook.com.vn/favicon.ico
IP
188.114.96.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://vww-facebook.com.vn/eoNU6Gxve82A9M09szVJ.html?nH8F876uHO=dZgKwdiRkxIdsPo&fin=s_in
Certificate
IssuerGoogle Trust Services LLC
Subjectvww-facebook.com.vn
Fingerprint94:B6:C1:BE:87:0C:AA:5A:A4:67:0D:EB:8D:B5:25:3B:37:DB:13:6B
ValidityWed, 03 Apr 2024 10:31:54 GMT - Tue, 02 Jul 2024 10:31:53 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: vww-facebook.com.vn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://vww-facebook.com.vn/eoNU6Gxve82A9M09szVJ.html?nH8F876uHO=dZgKwdiRkxIdsPo&fin=s_in
Cookie: PHPSESSID=065nalbhqsle8dqn5du22di3tu
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Tue, 14 May 2024 06:31:09 GMT
content-type: text/html; charset=UTF-8
x-powered-by: PHP/7.4.33
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
x-turbo-charged-by: LiteSpeed
cf-cache-status: BYPASS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ecjocBnQeFIcAvdL2HCA%2FGCEAwO0cNmB0udKmaPfdfFtLOFNCPnljDQQTBuwah8Bdu7TCg0XTeEiG%2F4o0dJgsX0LptZdb3qN%2FlqcyHhV6gnN75VYm5NAdYfVSd97hEqVX5ShRohn"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8838d7fa4cf85684-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

Report Overview

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (2)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (5)

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL User Request GET HTTP/2

IP

ASN

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/3

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/3

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/3

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers