GET www.filesusr.com/html/3b1138_6ab0e340e2cf793ede5a17a6371fbcc9.html?397080%2AcmFzcHV0aXRhM0BnbWFpbC5jb20=%2Ahttps%3A%2F%2Fwww.facebook.com%2Fprofile.php%3Fid%3D100081147955135%2A%2AFacebook-Latino
54.240.174.124200 OK 765 kB URL User Request GET www.filesusr.com/html/3b1138_6ab0e340e2cf793ede5a17a6371fbcc9.html?397080%2AcmFzcHV0aXRhM0BnbWFpbC5jb20=%2Ahttps%3A%2F%2Fwww.facebook.com%2Fprofile.php%3Fid%3D100081147955135%2A%2AFacebook-Latino
IP 54.240.174.124:443
Certificate IssuerLet's Encrypt
Subject*.filesusr.com
FingerprintBD:44:53:9F:27:31:24:A1:72:33:C9:BE:D9:63:E0:EC:99:72:BA:56
ValidityTue, 01 Apr 2025 11:02:39 GMT - Mon, 30 Jun 2025 11:02:38 GMT
File type HTML document, ASCII text, with very long lines (64615)
Size 765 kB (765109 bytes)
Hash 6ab0e340e2cf793ede5a17a6371fbcc9
a5621c276150005fe766fa424dda1b522fb15e2e
282ddd4ae1c9b4a2b3f5db796d9d649c1315f2cb2f5ad4572dd17d7b9f9f7298
Analyzer Verdict Alert urlquery phishing Phishing - Facebook
urlquery suspicious Suspicious - Suspicious Javascript code
PhishTank phishing Other
GET /html/3b1138_6ab0e340e2cf793ede5a17a6371fbcc9.html?397080%2AcmFzcHV0aXRhM0BnbWFpbC5jb20=%2Ahttps%3A%2F%2Fwww.facebook.com%2Fprofile.php%3Fid%3D100081147955135%2A%2AFacebook-Latino HTTP/1.1
Host: www.filesusr.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/html; charset=utf-8
content-length: 765109
server: openresty/1.27.1.1
date: Mon, 21 Apr 2025 10:30:30 GMT
expires: Mon, 21 Apr 2025 11:30:30 GMT
cache-control: public, max-age=15552000, immutable
last-modified: Mon, 27 Jan 2025 12:33:03 GMT
etag: "6ab0e340e2cf793ede5a17a6371fbcc9"
accept-ranges: bytes
access-control-allow-origin: *
timing-allow-origin: *
x-seen-by: gcp.us-central-1.media-router-549f5bfdd-9zm7l
via: 1.1 google, 1.1 6a0f63864791329e89a4b233ec4c3a36.cloudfront.net (CloudFront)
x-cache: Hit from cloudfront
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: zVJUyZ-DLOULLz1mUuIYhNoCwdWWeCSEXVrnP5RWhdr9PKH8PX8ySg==
age: 1133033
X-Firefox-Spdy: h2
GET ajax.googleapis.com/ajax/libs/jquery/1.12.4/jquery.min.js
142.250.74.42200 OK 97 kB URL GET ajax.googleapis.com/ajax/libs/jquery/1.12.4/jquery.min.js
IP 142.250.74.42:443
Requested by https://www.filesusr.com/html/3b1138_6ab0e340e2cf793ede5a17a6371fbcc9.html?397080%2AcmFzcHV0aXRhM0BnbWFpbC5jb20=%2Ahttps%3A%2F%2Fwww.facebook.com%2Fprofile.php%3Fid%3D100081147955135%2A%2AFacebook-Latino
Certificate IssuerGoogle Trust Services
Subjectupload.video.google.com
Fingerprint06:13:4C:49:F4:23:BB:58:C3:31:41:0E:F9:E0:C5:EF:74:A9:0C:67
ValidityMon, 31 Mar 2025 08:55:35 GMT - Mon, 23 Jun 2025 08:55:34 GMT
File type JavaScript source, ASCII text, with very long lines (32077)
Hash 4f252523d4af0b478c810c2547a63e19
5a9dcfbef655a2668e78baebeaa8dc6f41d8dabb
668b046d12db350ccba6728890476b3efee53b2f42dbb84743e5e9f1ae0cc404
GET /ajax/libs/jquery/1.12.4/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.filesusr.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 33951
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 01 May 2025 10:38:55 GMT
expires: Fri, 01 May 2026 10:38:55 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
last-modified: Tue, 03 Mar 2020 19:15:00 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
age: 268529
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET unpkg.com/vue@next
104.18.0.22404 Not Found 0 B IP 104.18.0.22:443
Requested by https://www.filesusr.com/html/3b1138_6ab0e340e2cf793ede5a17a6371fbcc9.html?397080%2AcmFzcHV0aXRhM0BnbWFpbC5jb20=%2Ahttps%3A%2F%2Fwww.facebook.com%2Fprofile.php%3Fid%3D100081147955135%2A%2AFacebook-Latino
Certificate IssuerGoogle Trust Services
Subjectunpkg.com
Fingerprint6A:50:E9:D4:F9:DB:BA:3A:76:D2:D3:E2:A2:6D:16:12:07:9D:D4:DA
ValidityTue, 29 Apr 2025 07:12:06 GMT - Mon, 28 Jul 2025 08:12:03 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /vue@next HTTP/1.1
Host: unpkg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.filesusr.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 404 Not Found
date: Sun, 04 May 2025 13:14:24 GMT
content-type: text/plain;charset=UTF-8
content-length: 35
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 93a842ccfa7d56be-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET static.xx.fbcdn.net/rsrc.php/y1/r/4lCu2zih0ca.svg
31.13.72.12200 OK 2.5 kB URL GET static.xx.fbcdn.net/rsrc.php/y1/r/4lCu2zih0ca.svg
IP 31.13.72.12:443
Requested by https://www.filesusr.com/html/3b1138_6ab0e340e2cf793ede5a17a6371fbcc9.html?397080%2AcmFzcHV0aXRhM0BnbWFpbC5jb20=%2Ahttps%3A%2F%2Fwww.facebook.com%2Fprofile.php%3Fid%3D100081147955135%2A%2AFacebook-Latino
Certificate IssuerDigiCert Inc
Subject*.facebook.com
FingerprintE4:FF:1E:0A:2E:7F:EE:AB:09:06:AD:F5:BE:6D:7E:07:3E:BE:1B:93
ValidityMon, 10 Feb 2025 00:00:00 GMT - Sun, 11 May 2025 23:59:59 GMT
File type SVG Scalable Vector Graphics image
Hash ecd94021d2c853c3b8deb8203ba17300
6f0e24baf66ae386041e8faf42363418a4c96144
0d6f8d206a6bd8b60a2048a3df206ac956a2f633786e4af1c02057f81758ad7a
GET /rsrc.php/y1/r/4lCu2zih0ca.svg HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.filesusr.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: br
content-type: image/svg+xml
access-control-allow-origin: *
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
expires: Wed, 22 Apr 2026 20:27:27 GMT
cache-control: public,max-age=31536000,immutable
report-to: {"max_age":21600,"endpoints":[{"url":"https:\/\/www.xx.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
timing-allow-origin: *
document-policy: force-load-at-top
permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewport-width=(), ch-width=(), clipboard-read=(), clipboard-write=(), compute-pressure=(), display-capture=(), encrypted-media=(), fullscreen=(self), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), interest-cohort=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), otp-credentials=(), payment=(), picture-in-picture=(), private-state-token-issuance=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), shared-storage=(), shared-storage-select-url=(), private-state-token-redemption=(), usb=(), unload=(self), window-management=(), xr-spatial-tracking=();report-to="permissions_policy"
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
reporting-endpoints: permissions_policy="https://www.xx.facebook.com/ajax/browser_error_reports/"
origin-agent-cluster: ?1
x-fb-optimizer: 0
content-md5: mOuWB7wXlE6XUTOVRHYuCQ==
x-fb-debug: bM6K75TT1zA5FA1X70d/mkYvx8z6rb63XPGuvLEDXtFRjprOClz8/Awkzaq7EsEMvMYf8AodY9hb0wPOpMoM1w==
content-length: 956
date: Sun, 04 May 2025 13:14:25 GMT
x-fb-connection-quality: EXCELLENT; q=0.9, rtt=7, rtx=0, c=13, mss=1380, tbw=3955, tp=-1, tpl=-1, uplat=3, ullat=-1
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET www.blogger.com/static/v1/widgets/55013136-widget_css_bundle.css
172.217.21.169200 OK 31 kB URL GET www.blogger.com/static/v1/widgets/55013136-widget_css_bundle.css
IP 172.217.21.169:443
Requested by https://www.filesusr.com/html/3b1138_6ab0e340e2cf793ede5a17a6371fbcc9.html?397080%2AcmFzcHV0aXRhM0BnbWFpbC5jb20=%2Ahttps%3A%2F%2Fwww.facebook.com%2Fprofile.php%3Fid%3D100081147955135%2A%2AFacebook-Latino
Certificate IssuerGoogle Trust Services
Subject*.blogger.com
FingerprintF7:18:B6:53:79:BE:7E:D6:F5:BE:FF:C5:AA:D8:4C:45:A0:A3:E9:8B
ValidityMon, 31 Mar 2025 08:54:13 GMT - Mon, 23 Jun 2025 08:54:12 GMT
File type ASCII text, with very long lines (30596)
Hash e3f09df1bc175f411d1ec3dfb5afb17b
3994ec3efe3c2447e7bbfdd97bb7e190dd1658f9
1a2eca9e492e3a21e02dd77ad44d7af45c4091d35ede79e948b7a3f23e5b3617
GET /static/v1/widgets/55013136-widget_css_bundle.css HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.filesusr.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 6620
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 01 May 2025 10:23:28 GMT
expires: Fri, 01 May 2026 10:23:28 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 01 May 2025 08:53:28 GMT
content-type: text/css
vary: Accept-Encoding
age: 269456
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET www.blogger.com/static/v1/widgets/1938605287-css_bundle_v2.css
172.217.21.169200 OK 37 kB URL GET www.blogger.com/static/v1/widgets/1938605287-css_bundle_v2.css
IP 172.217.21.169:443
Requested by https://www.filesusr.com/html/3b1138_6ab0e340e2cf793ede5a17a6371fbcc9.html?397080%2AcmFzcHV0aXRhM0BnbWFpbC5jb20=%2Ahttps%3A%2F%2Fwww.facebook.com%2Fprofile.php%3Fid%3D100081147955135%2A%2AFacebook-Latino
Certificate IssuerGoogle Trust Services
Subject*.blogger.com
FingerprintF7:18:B6:53:79:BE:7E:D6:F5:BE:FF:C5:AA:D8:4C:45:A0:A3:E9:8B
ValidityMon, 31 Mar 2025 08:54:13 GMT - Mon, 23 Jun 2025 08:54:12 GMT
File type ASCII text, with very long lines (37011)
Hash 3595533b94ff638c9ffe28fddffa0deb
8238b852178ead799dc55bf11752494f6dd75cc6
765601709b703cd426bea3c604efc4a3efcf22e886eb8b78f4521b5d5f8d0482
GET /static/v1/widgets/1938605287-css_bundle_v2.css HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.filesusr.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 7999
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 01 May 2025 11:56:34 GMT
expires: Fri, 01 May 2026 11:56:34 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 27 Mar 2019 18:23:10 GMT
content-type: text/css
vary: Accept-Encoding
age: 263870
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET www.filesusr.com/v3/yO/r/YQNfPR9MJfx.png
54.240.174.124403 Forbidden 9 B URL GET www.filesusr.com/v3/yO/r/YQNfPR9MJfx.png
IP 54.240.174.124:443
Requested by https://www.filesusr.com/html/3b1138_6ab0e340e2cf793ede5a17a6371fbcc9.html?397080%2AcmFzcHV0aXRhM0BnbWFpbC5jb20=%2Ahttps%3A%2F%2Fwww.facebook.com%2Fprofile.php%3Fid%3D100081147955135%2A%2AFacebook-Latino
Certificate IssuerLet's Encrypt
Subject*.filesusr.com
FingerprintBD:44:53:9F:27:31:24:A1:72:33:C9:BE:D9:63:E0:EC:99:72:BA:56
ValidityTue, 01 Apr 2025 11:02:39 GMT - Mon, 30 Jun 2025 11:02:38 GMT
File type ASCII text, with no line terminators
Hash 722969577a96ca3953e84e3d949dee81
3dab5f6012e3e149b5a939b9cebba4a0b84dc8f5
78342a0905a72ce44da083dcb5d23b8ea0c16992ba2a82eece97e033d76ba3d3
Analyzer Verdict Alert urlquery phishing Phishing - Facebook
GET /v3/yO/r/YQNfPR9MJfx.png HTTP/1.1
Host: www.filesusr.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.filesusr.com/html/3b1138_6ab0e340e2cf793ede5a17a6371fbcc9.html?397080%2AcmFzcHV0aXRhM0BnbWFpbC5jb20=%2Ahttps%3A%2F%2Fwww.facebook.com%2Fprofile.php%3Fid%3D100081147955135%2A%2AFacebook-Latino
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 403 Forbidden
content-type: text/plain
content-length: 9
alt-svc: h3=":443"; ma=86400
server: openresty/1.27.1.1
date: Sun, 04 May 2025 13:14:24 GMT
access-control-allow-origin: *
cache-control: no-cache, private, must-revalidate, proxy-revalidate, no-store
timing-allow-origin: *
x-seen-by: gcp.us-central-1.media-router-549f5bfdd-hp6vk
via: 1.1 google, 1.1 0c35b89cb607eddb1b7cc5d6ada865d6.cloudfront.net (CloudFront)
x-cache: Error from cloudfront
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 8DbTXFwsO6987jN9Grwacf05NFOw_YnjQNfF3140W6ICLWY68Y-7pQ==
GET exploits-de.com/blogger/assets/images/7eIprq01c1g.png
188.114.96.1200 OK 7.8 kB URL GET exploits-de.com/blogger/assets/images/7eIprq01c1g.png
IP 188.114.96.1:443
Requested by https://www.filesusr.com/html/3b1138_6ab0e340e2cf793ede5a17a6371fbcc9.html?397080%2AcmFzcHV0aXRhM0BnbWFpbC5jb20=%2Ahttps%3A%2F%2Fwww.facebook.com%2Fprofile.php%3Fid%3D100081147955135%2A%2AFacebook-Latino
Certificate IssuerGoogle Trust Services
Subjectexploits-de.com
Fingerprint3A:BB:C6:A3:09:D2:72:B5:A8:1E:78:11:F3:2D:B4:6F:16:05:EC:43
ValiditySun, 20 Apr 2025 15:14:40 GMT - Sat, 19 Jul 2025 16:14:38 GMT
File type PNG image data, 171 x 84, 8-bit/color RGBA, non-interlaced
Hash 226d0af0a681de80fc27af4e3b35c353
1ed81335a82ccba1d1cd4c25286530eeb5c488f4
ba1597ec9317219ba5a2bfde2e75f6c5fb7dc185c695073c7166ea09bc29056b
GET /blogger/assets/images/7eIprq01c1g.png HTTP/1.1
Host: exploits-de.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.filesusr.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 04 May 2025 13:14:24 GMT
content-type: image/png
content-length: 7798
server: cloudflare
last-modified: Fri, 10 Dec 2021 01:54:59 GMT
accept-ranges: bytes
cache-control: max-age=14400
cf-cache-status: REVALIDATED
cf-ray: 93a842d04caefeb7-AMS
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2