| |  199.36.158.100 | 200 OK | 887 B |
URL User Request GET HTTP/2IP199.36.158.100:443
CertificateIssuerGoogle Trust Services LLC Subjectfirebaseapp.com Fingerprint6D:BD:C9:A0:A6:73:A0:9B:87:1C:93:A6:7E:16:92:6F:B5:1B:FB:4D ValidityThu, 21 Mar 2024 15:15:15 GMT - Wed, 19 Jun 2024 15:15:14 GMT
File typeHTML document, ASCII text, with very long lines (2294), with no line terminators Hash7643b0d3ba2c89b631e7412df0037f85 05abca737cae681e68c11fc1a067d8533b3b2cf0 6b605e26befda14ebfe4667884fe540a80cc5f10c81969a16b471dad02db9ae5
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Fifth Third Bank | | PhishTank | phishing | Other | | Quad9 DNS | malicious | Sinkholed |
GET / HTTP/1.1
Host: ri53rd.firebaseapp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
cache-control: max-age=3600
content-encoding: br
content-type: text/html; charset=utf-8
etag: "12220b3ef28914e454e053635f4d6c1a63758cd5a6438e99ed6730d252debd5e-br"
last-modified: Thu, 14 Apr 2022 18:54:37 GMT
strict-transport-security: max-age=31556926; includeSubDomains; preload
accept-ranges: bytes
date: Wed, 24 Apr 2024 04:25:26 GMT
x-served-by: cache-hel1410024-HEL
x-cache: HIT
x-cache-hits: 0
x-timer: S1713932726.291173,VS0,VE1
vary: x-fh-requested-host, accept-encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 887
X-Firefox-Spdy: h2
|
|
| ri53rd.firebaseapp.com/static/css/main.4df28bc4.chunk.css | 199.36.158.100 | 200 OK | 46 kB |
URL GET HTTP/2ri53rd.firebaseapp.com/static/css/main.4df28bc4.chunk.css IP199.36.158.100:443
Requested byhttps://ri53rd.firebaseapp.com/ CertificateIssuerGoogle Trust Services LLC Subjectfirebaseapp.com Fingerprint6D:BD:C9:A0:A6:73:A0:9B:87:1C:93:A6:7E:16:92:6F:B5:1B:FB:4D ValidityThu, 21 Mar 2024 15:15:15 GMT - Wed, 19 Jun 2024 15:15:14 GMT
File typeASCII text, with very long lines (65536), with no line terminators Hash60840b7cd7b229028f42e1c939925e91 2d73b7c1988f05c339ac9f447c82e648a16ce543 f8e29469383905c6f55cce0d72d171dd64ff758f79ede32b35cb74bdb082a12d
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Fifth Third Bank | | PhishTank | phishing | Other | | Quad9 DNS | malicious | Sinkholed |
GET /static/css/main.4df28bc4.chunk.css HTTP/1.1
Host: ri53rd.firebaseapp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ri53rd.firebaseapp.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: max-age=3600
content-encoding: br
content-type: text/css; charset=utf-8
etag: "21d2b53b6747df602636b053c28c679032385576b2732fa0b20aca31e84c199d-br"
last-modified: Thu, 14 Apr 2022 18:54:37 GMT
strict-transport-security: max-age=31556926; includeSubDomains; preload
accept-ranges: bytes
date: Wed, 24 Apr 2024 04:25:26 GMT
x-served-by: cache-hel1410024-HEL
x-cache: HIT
x-cache-hits: 0
x-timer: S1713932726.488584,VS0,VE1
vary: x-fh-requested-host, accept-encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 45474
X-Firefox-Spdy: h2
|
|
| ri53rd.firebaseapp.com/static/js/2.345f7fbf.chunk.js | 199.36.158.100 | 200 OK | 62 kB |
URL GET HTTP/2ri53rd.firebaseapp.com/static/js/2.345f7fbf.chunk.js IP199.36.158.100:443
Requested byhttps://ri53rd.firebaseapp.com/ CertificateIssuerGoogle Trust Services LLC Subjectfirebaseapp.com Fingerprint6D:BD:C9:A0:A6:73:A0:9B:87:1C:93:A6:7E:16:92:6F:B5:1B:FB:4D ValidityThu, 21 Mar 2024 15:15:15 GMT - Wed, 19 Jun 2024 15:15:14 GMT
File typeJavaScript source, ASCII text, with very long lines (65462) Hash92ac29a3fb2b0bbb79918aaee00d5094 ec224a109b6437a0cccd153bc59b32bfe0ede121 db8f557d4ebbfb2a8d0c31e8e2f5030e49290a8aa5cf207f8e1148a7597255ae
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Fifth Third Bank | | PhishTank | phishing | Other | | Quad9 DNS | malicious | Sinkholed |
GET /static/js/2.345f7fbf.chunk.js HTTP/1.1
Host: ri53rd.firebaseapp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ri53rd.firebaseapp.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: max-age=3600
content-encoding: br
content-type: text/javascript; charset=utf-8
etag: "f2f56ff1b4286b7e16d4d90d72ca038da64977e15e2afbf2875e2174c1d9f02d-br"
last-modified: Thu, 14 Apr 2022 18:54:37 GMT
strict-transport-security: max-age=31556926; includeSubDomains; preload
accept-ranges: bytes
date: Wed, 24 Apr 2024 04:25:26 GMT
x-served-by: cache-hel1410024-HEL
x-cache: HIT
x-cache-hits: 0
x-timer: S1713932726.489357,VS0,VE1
vary: x-fh-requested-host, accept-encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 61819
X-Firefox-Spdy: h2
|
|
| ri53rd.firebaseapp.com/static/js/main.712691ae.chunk.js | 199.36.158.100 | 200 OK | 11 kB |
URL GET HTTP/2ri53rd.firebaseapp.com/static/js/main.712691ae.chunk.js IP199.36.158.100:443
Requested byhttps://ri53rd.firebaseapp.com/ CertificateIssuerGoogle Trust Services LLC Subjectfirebaseapp.com Fingerprint6D:BD:C9:A0:A6:73:A0:9B:87:1C:93:A6:7E:16:92:6F:B5:1B:FB:4D ValidityThu, 21 Mar 2024 15:15:15 GMT - Wed, 19 Jun 2024 15:15:14 GMT
File typeJavaScript source, ASCII text, with very long lines (65536), with no line terminators Hash0e6d11bda5b1ef23d1ef97fc01d8fbed 9b2de30982316ae7f1574202db96920b17b8e00b 343a6e2decaea1a7fe10d227c539fcc24e459483ca3ca5f19ae904e837787919
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Fifth Third Bank | | PhishTank | phishing | Other | | Quad9 DNS | malicious | Sinkholed |
GET /static/js/main.712691ae.chunk.js HTTP/1.1
Host: ri53rd.firebaseapp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ri53rd.firebaseapp.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: max-age=3600
content-encoding: br
content-type: text/javascript; charset=utf-8
etag: "38099d1b4b4fcbebd7d70229b0c7c78acd500194badb41345f54b49df01e92fd-br"
last-modified: Thu, 14 Apr 2022 18:54:37 GMT
strict-transport-security: max-age=31556926; includeSubDomains; preload
accept-ranges: bytes
date: Wed, 24 Apr 2024 04:25:26 GMT
x-served-by: cache-hel1410024-HEL
x-cache: HIT
x-cache-hits: 0
x-timer: S1713932726.490165,VS0,VE1
vary: x-fh-requested-host, accept-encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 10722
X-Firefox-Spdy: h2
|
|
| ri53rd.firebaseapp.com/favicon.ico | 199.36.158.100 | 200 OK | 3.1 kB |
URL GET HTTP/3ri53rd.firebaseapp.com/favicon.ico IP199.36.158.100:443
Requested byhttps://ri53rd.firebaseapp.com/ CertificateIssuerGoogle Trust Services LLC Subjectfirebaseapp.com Fingerprint6D:BD:C9:A0:A6:73:A0:9B:87:1C:93:A6:7E:16:92:6F:B5:1B:FB:4D ValidityThu, 21 Mar 2024 15:15:15 GMT - Wed, 19 Jun 2024 15:15:14 GMT
File typeMS Windows icon resource - 3 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel Hashee8c959566e89b1e044143fe5bdfeed8 79ba80deae0ccf94ded62b60123dfd271a0e1086 872759f946a42b895fb8867d2ba09067f8d6653eb1a5eaad82e2831eb14353b7
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Fifth Third Bank | | PhishTank | phishing | Other | | Quad9 DNS | malicious | Sinkholed |
GET /favicon.ico HTTP/1.1
Host: ri53rd.firebaseapp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ri53rd.firebaseapp.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 3118
cache-control: max-age=3600
content-encoding: br
content-type: image/x-icon
etag: "ee8eec144b67cb371380d641c5c40cd80402c16656acb9edd635762fce9cc413-br"
last-modified: Thu, 14 Apr 2022 18:54:37 GMT
strict-transport-security: max-age=31556926; includeSubDomains; preload
accept-ranges: bytes
date: Wed, 24 Apr 2024 04:25:26 GMT
x-served-by: cache-hel1410033-HEL
x-cache: HIT
x-cache-hits: 0
x-timer: S1713932727.774913,VS0,VE1
vary: x-fh-requested-host, accept-encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
|
|
| emcnt.herokuapp.com/count | 18.211.231.38 | 404 Not Found | 563 B |
URL OPTIONS HTTP/1.1emcnt.herokuapp.com/count IP18.211.231.38:443
Requested byhttps://ri53rd.firebaseapp.com/ CertificateIssuerAmazon Subject*.herokuapp.com Fingerprint3B:29:54:6C:7D:F7:0A:37:A4:57:D7:95:85:10:EA:20:C4:29:FB:F6 ValiditySat, 02 Mar 2024 00:00:00 GMT - Mon, 31 Mar 2025 23:59:59 GMT
File typeHTML document, ASCII text Hash6971f594a8d84022b2b6199b9e52fdc1 2f5c25f2b53d35078bdb7e28006590adf7e701a2 237711b3823b87a4b4e26963fe5576ebed08ba9efbf9b8cdb5d9762eaf01ff1f
OPTIONS /count HTTP/1.1
Host: emcnt.herokuapp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://ri53rd.firebaseapp.com/
Origin: https://ri53rd.firebaseapp.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Content-Length: 563
Cache-Control: no-cache, no-store
Content-Type: text/html; charset=utf-8
Date: 2024-04-24 04:25:27.263445061 +0000 UTC
Server: heroku-router
|
|
| geolocation-db.com/json/ef6c41a0-9d3c-11eb-8f3b-e1f5536499e7 |  159.89.102.253 | 200 OK | 157 B |
URL GET HTTP/2geolocation-db.com/json/ef6c41a0-9d3c-11eb-8f3b-e1f5536499e7 IP159.89.102.253:443 ASN#14061 DIGITALOCEAN-ASN
Requested byhttps://ri53rd.firebaseapp.com/ CertificateIssuerLet's Encrypt Subjectgeolocation-db.com Fingerprint34:F4:1F:5A:FD:B3:5D:D8:24:9F:E2:5C:00:54:2B:83:DA:5A:0A:1A ValidityThu, 11 Apr 2024 03:27:48 GMT - Wed, 10 Jul 2024 03:27:47 GMT
File typetroff or preprocessor input, ASCII text, with no line terminators Hash756577606efeb0ff376c1db7424bb0d7 576e9aea13474e4571cbe504c82f07d6e4a83e36 3d40cc0891d8f98712269fbb48f69185ce50697fdad8cf6fc76a8ffea1bcc017
GET /json/ef6c41a0-9d3c-11eb-8f3b-e1f5536499e7 HTTP/1.1
Host: geolocation-db.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://ri53rd.firebaseapp.com
DNT: 1
Connection: keep-alive
Referer: https://ri53rd.firebaseapp.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.14.0 (Ubuntu)
date: Wed, 24 Apr 2024 04:25:26 GMT
content-type: text/html; charset=UTF-8
access-control-allow-origin: *
content-encoding: gzip
X-Firefox-Spdy: h2
|
|