| |  199.36.158.100 | 200 OK | 13 kB |
URL User Request GET HTTP/2IP199.36.158.100:443
CertificateIssuerGoogle Trust Services LLC Subjectweb.app Fingerprint6C:B8:FC:5E:5B:DF:AB:31:E6:02:C5:A6:D8:E2:D0:77:BB:5D:BC:7B ValidityThu, 21 Mar 2024 15:14:42 GMT - Wed, 19 Jun 2024 15:14:41 GMT
File typeHTML document, Unicode text, UTF-8 text, with very long lines (2482) Hashed77fc648c4ff35d6f245938c5a809d5 b3074aaafb88c0618628a8be0ad317fcd034441f 46e5e9867e9c235bc4383868a8245c4cf95904085ebca62876bf137f7a53e8d2
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet | | Quad9 DNS | malicious | Sinkholed |
GET / HTTP/1.1
Host: claim-0penmint.web.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
cache-control: max-age=3600
content-encoding: br
content-type: text/html; charset=utf-8
etag: "afbe52d8af195eb00401c22ba7e90aa52f5c8e39549ace38afea7d53c6e7a199-br"
last-modified: Wed, 24 Apr 2024 18:12:56 GMT
strict-transport-security: max-age=31556926; includeSubDomains; preload
accept-ranges: bytes
date: Thu, 25 Apr 2024 04:10:53 GMT
x-served-by: cache-hel1410029-HEL
x-cache: HIT
x-cache-hits: 0
x-timer: S1714018253.393767,VS0,VE1
vary: x-fh-requested-host, accept-encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 12615
X-Firefox-Spdy: h2
|
|
| claim-0penmint.web.app/80867ce1-c7ea-46c0-b18e-1926a71ba85c.js | 199.36.158.100 | 200 OK | 302 kB |
URL GET HTTP/3claim-0penmint.web.app/80867ce1-c7ea-46c0-b18e-1926a71ba85c.js IP199.36.158.100:443
Requested byhttps://claim-0penmint.web.app/ CertificateIssuerGoogle Trust Services LLC Subjectweb.app Fingerprint6C:B8:FC:5E:5B:DF:AB:31:E6:02:C5:A6:D8:E2:D0:77:BB:5D:BC:7B ValidityThu, 21 Mar 2024 15:14:42 GMT - Wed, 19 Jun 2024 15:14:41 GMT
File typeASCII text, with very long lines (65536), with no line terminators Size302 kB (301931 bytes) Hashd62c30c4530b490990eaa21f312d7a6e 106ee8bbbacdca2b1e39a2067c91583d14a710f9 002f79c2a3a31f12b15430dae686ac18b39a204931e8b7121797bd58f49981d4
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet | | Quad9 DNS | malicious | Sinkholed |
GET /80867ce1-c7ea-46c0-b18e-1926a71ba85c.js HTTP/1.1
Host: claim-0penmint.web.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://claim-0penmint.web.app/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 301931
cache-control: max-age=3600
content-encoding: br
content-type: text/javascript; charset=utf-8
etag: "a397be3569acbd23d304ffbd7865db5e01a76739a8365de7a041e08a2077ee16-br"
last-modified: Wed, 24 Apr 2024 18:12:56 GMT
strict-transport-security: max-age=31556926; includeSubDomains; preload
accept-ranges: bytes
date: Thu, 25 Apr 2024 04:10:53 GMT
x-served-by: cache-hel1410033-HEL
x-cache: HIT
x-cache-hits: 0
x-timer: S1714018254.815991,VS0,VE1
vary: x-fh-requested-host, accept-encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
|
|
| claim-0penmint.web.app/js/slick-1.8.1/slick/slick.html | 199.36.158.100 | 404 Not Found | 852 B |
URL GET HTTP/3claim-0penmint.web.app/js/slick-1.8.1/slick/slick.html IP199.36.158.100:443
Requested byhttps://claim-0penmint.web.app/ CertificateIssuerGoogle Trust Services LLC Subjectweb.app Fingerprint6C:B8:FC:5E:5B:DF:AB:31:E6:02:C5:A6:D8:E2:D0:77:BB:5D:BC:7B ValidityThu, 21 Mar 2024 15:14:42 GMT - Wed, 19 Jun 2024 15:14:41 GMT
File typeHTML document, ASCII text Hash0a27a4163254fc8fce870c8cc3a3f94f f27cf04699668916346eee510eab7e5a17e83997 b77b97fe780d35d18248abd1d2f42f444afbabe43f6abcd8fa8ebb3d47825eee
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet | | Quad9 DNS | malicious | Sinkholed |
GET /js/slick-1.8.1/slick/slick.html HTTP/1.1
Host: claim-0penmint.web.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://claim-0penmint.web.app/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 404 Not Found
content-length: 852
cache-control: max-age=3600
content-encoding: gzip
content-type: text/html; charset=utf-8
etag: "b6abfbdc894d37c260154e281499dc6415bb6ad76b32f01ef94dee93aa897ac4"
last-modified: Wed, 24 Apr 2024 18:12:56 GMT
strict-transport-security: max-age=31556926; includeSubDomains; preload
accept-ranges: bytes
date: Thu, 25 Apr 2024 04:10:53 GMT
x-served-by: cache-hel1410033-HEL
x-cache: HIT
x-cache-hits: 0
x-timer: S1714018254.816324,VS0,VE1
vary: x-fh-requested-host, accept-encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
|
|
| claim-0penmint.web.app/css/drops.css | 199.36.158.100 | 200 OK | 310 B |
URL GET HTTP/3claim-0penmint.web.app/css/drops.css IP199.36.158.100:443
Requested byhttps://claim-0penmint.web.app/ CertificateIssuerGoogle Trust Services LLC Subjectweb.app Fingerprint6C:B8:FC:5E:5B:DF:AB:31:E6:02:C5:A6:D8:E2:D0:77:BB:5D:BC:7B ValidityThu, 21 Mar 2024 15:14:42 GMT - Wed, 19 Jun 2024 15:14:41 GMT
Hashf2785d929e72ee822c03f3a5d9d953ee 6532c19276434337669c349a903d5fb4357cb552 417b6655bfb887f5aa86d902f7e2ed9c82b36ae74a3a00a7bc34288cead3606a
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet | | Quad9 DNS | malicious | Sinkholed |
GET /css/drops.css HTTP/1.1
Host: claim-0penmint.web.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://claim-0penmint.web.app/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 310
cache-control: max-age=3600
content-encoding: br
content-type: text/css; charset=utf-8
etag: "560c4b126502c25f479669b62bd7c6b4d88b8561beea11b84a993759e2b1a06f-br"
last-modified: Wed, 24 Apr 2024 18:12:56 GMT
strict-transport-security: max-age=31556926; includeSubDomains; preload
accept-ranges: bytes
date: Thu, 25 Apr 2024 04:10:53 GMT
x-served-by: cache-hel1410033-HEL
x-cache: HIT
x-cache-hits: 0
x-timer: S1714018254.817010,VS0,VE1
vary: x-fh-requested-host, accept-encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
|
|
| claim-0penmint.web.app/css/fonts.css | 199.36.158.100 | 200 OK | 141 B |
URL GET HTTP/3claim-0penmint.web.app/css/fonts.css IP199.36.158.100:443
Requested byhttps://claim-0penmint.web.app/ CertificateIssuerGoogle Trust Services LLC Subjectweb.app Fingerprint6C:B8:FC:5E:5B:DF:AB:31:E6:02:C5:A6:D8:E2:D0:77:BB:5D:BC:7B ValidityThu, 21 Mar 2024 15:14:42 GMT - Wed, 19 Jun 2024 15:14:41 GMT
Hashb032dbbc3bbb93ca80d2f189570da51c ce3f373c28e1d35a7adb9dca8f6db95cb24fbccc 41503bfbefe3bc434e1eacc84da2af0e27c9101874345d6c5fb15cf5a6db528a
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet | | Quad9 DNS | malicious | Sinkholed |
GET /css/fonts.css HTTP/1.1
Host: claim-0penmint.web.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://claim-0penmint.web.app/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 141
cache-control: max-age=3600
content-encoding: br
content-type: text/css; charset=utf-8
etag: "4a019b0a31bd783478add223cde3a72f0d28d78bb9613f7ff8e20fed4709fccd-br"
last-modified: Wed, 24 Apr 2024 18:12:56 GMT
strict-transport-security: max-age=31556926; includeSubDomains; preload
accept-ranges: bytes
date: Thu, 25 Apr 2024 04:10:53 GMT
x-served-by: cache-hel1410033-HEL
x-cache: HIT
x-cache-hits: 0
x-timer: S1714018254.818388,VS0,VE1
vary: x-fh-requested-host, accept-encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
|
|
| claim-0penmint.web.app/css/index.css | 199.36.158.100 | 200 OK | 2.6 kB |
URL GET HTTP/3claim-0penmint.web.app/css/index.css IP199.36.158.100:443
Requested byhttps://claim-0penmint.web.app/ CertificateIssuerGoogle Trust Services LLC Subjectweb.app Fingerprint6C:B8:FC:5E:5B:DF:AB:31:E6:02:C5:A6:D8:E2:D0:77:BB:5D:BC:7B ValidityThu, 21 Mar 2024 15:14:42 GMT - Wed, 19 Jun 2024 15:14:41 GMT
Hash0d1cbffac1b292933c6b6c156cf44ec4 aea170f8f5ae69ef91922bdc831c3c09a12deb1c 50661deac406d37c3e721284c67bd936899238da1bb297052a71ce6498f61ada
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet | | Quad9 DNS | malicious | Sinkholed |
GET /css/index.css HTTP/1.1
Host: claim-0penmint.web.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://claim-0penmint.web.app/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 2611
cache-control: max-age=3600
content-encoding: br
content-type: text/css; charset=utf-8
etag: "33ce0b1623399c0eeedaab4fc81d002752f473a0c9e2ec4de0cfba942120a57c-br"
last-modified: Wed, 24 Apr 2024 18:12:56 GMT
strict-transport-security: max-age=31556926; includeSubDomains; preload
accept-ranges: bytes
date: Thu, 25 Apr 2024 04:10:53 GMT
x-served-by: cache-hel1410033-HEL
x-cache: HIT
x-cache-hits: 0
x-timer: S1714018254.819238,VS0,VE1
vary: x-fh-requested-host, accept-encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
|
|
| claim-0penmint.web.app/js/jquery-3.6.1.min.html | 199.36.158.100 | 404 Not Found | 852 B |
URL GET HTTP/3claim-0penmint.web.app/js/jquery-3.6.1.min.html IP199.36.158.100:443
Requested byhttps://claim-0penmint.web.app/ CertificateIssuerGoogle Trust Services LLC Subjectweb.app Fingerprint6C:B8:FC:5E:5B:DF:AB:31:E6:02:C5:A6:D8:E2:D0:77:BB:5D:BC:7B ValidityThu, 21 Mar 2024 15:14:42 GMT - Wed, 19 Jun 2024 15:14:41 GMT
File typeHTML document, ASCII text Hash0a27a4163254fc8fce870c8cc3a3f94f f27cf04699668916346eee510eab7e5a17e83997 b77b97fe780d35d18248abd1d2f42f444afbabe43f6abcd8fa8ebb3d47825eee
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet | | Quad9 DNS | malicious | Sinkholed |
GET /js/jquery-3.6.1.min.html HTTP/1.1
Host: claim-0penmint.web.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://claim-0penmint.web.app/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 404 Not Found
content-length: 852
cache-control: max-age=3600
content-encoding: gzip
content-type: text/html; charset=utf-8
etag: "b6abfbdc894d37c260154e281499dc6415bb6ad76b32f01ef94dee93aa897ac4"
last-modified: Wed, 24 Apr 2024 18:12:56 GMT
strict-transport-security: max-age=31556926; includeSubDomains; preload
accept-ranges: bytes
date: Thu, 25 Apr 2024 04:10:53 GMT
x-served-by: cache-hel1410033-HEL
x-cache: HIT
x-cache-hits: 1
x-timer: S1714018254.824457,VS0,VE1
vary: x-fh-requested-host, accept-encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
|
|
| claim-0penmint.web.app/js/slick-1.8.1/slick/slick.min.html | 199.36.158.100 | 404 Not Found | 852 B |
URL GET HTTP/3claim-0penmint.web.app/js/slick-1.8.1/slick/slick.min.html IP199.36.158.100:443
Requested byhttps://claim-0penmint.web.app/ CertificateIssuerGoogle Trust Services LLC Subjectweb.app Fingerprint6C:B8:FC:5E:5B:DF:AB:31:E6:02:C5:A6:D8:E2:D0:77:BB:5D:BC:7B ValidityThu, 21 Mar 2024 15:14:42 GMT - Wed, 19 Jun 2024 15:14:41 GMT
File typeHTML document, ASCII text Hash0a27a4163254fc8fce870c8cc3a3f94f f27cf04699668916346eee510eab7e5a17e83997 b77b97fe780d35d18248abd1d2f42f444afbabe43f6abcd8fa8ebb3d47825eee
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet | | Quad9 DNS | malicious | Sinkholed |
GET /js/slick-1.8.1/slick/slick.min.html HTTP/1.1
Host: claim-0penmint.web.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://claim-0penmint.web.app/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 404 Not Found
content-length: 852
cache-control: max-age=3600
content-encoding: gzip
content-type: text/html; charset=utf-8
etag: "b6abfbdc894d37c260154e281499dc6415bb6ad76b32f01ef94dee93aa897ac4"
last-modified: Wed, 24 Apr 2024 18:12:56 GMT
strict-transport-security: max-age=31556926; includeSubDomains; preload
accept-ranges: bytes
date: Thu, 25 Apr 2024 04:10:53 GMT
x-served-by: cache-hel1410033-HEL
x-cache: HIT
x-cache-hits: 0
x-timer: S1714018254.825036,VS0,VE1
vary: x-fh-requested-host, accept-encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
|
|
| claim-0penmint.web.app/js/index.html | 199.36.158.100 | 404 Not Found | 852 B |
URL GET HTTP/3claim-0penmint.web.app/js/index.html IP199.36.158.100:443
Requested byhttps://claim-0penmint.web.app/ CertificateIssuerGoogle Trust Services LLC Subjectweb.app Fingerprint6C:B8:FC:5E:5B:DF:AB:31:E6:02:C5:A6:D8:E2:D0:77:BB:5D:BC:7B ValidityThu, 21 Mar 2024 15:14:42 GMT - Wed, 19 Jun 2024 15:14:41 GMT
File typeHTML document, ASCII text Hash0a27a4163254fc8fce870c8cc3a3f94f f27cf04699668916346eee510eab7e5a17e83997 b77b97fe780d35d18248abd1d2f42f444afbabe43f6abcd8fa8ebb3d47825eee
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet | | Quad9 DNS | malicious | Sinkholed |
GET /js/index.html HTTP/1.1
Host: claim-0penmint.web.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://claim-0penmint.web.app/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 404 Not Found
content-length: 852
cache-control: max-age=3600
content-encoding: gzip
content-type: text/html; charset=utf-8
etag: "b6abfbdc894d37c260154e281499dc6415bb6ad76b32f01ef94dee93aa897ac4"
last-modified: Wed, 24 Apr 2024 18:12:56 GMT
strict-transport-security: max-age=31556926; includeSubDomains; preload
accept-ranges: bytes
date: Thu, 25 Apr 2024 04:10:53 GMT
x-served-by: cache-hel1410033-HEL
x-cache: HIT
x-cache-hits: 0
x-timer: S1714018254.826878,VS0,VE1
vary: x-fh-requested-host, accept-encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
|
|
| claim-0penmint.web.app/img/load%202.gif | 199.36.158.100 | 200 OK | 34 kB |
URL GET HTTP/3claim-0penmint.web.app/img/load%202.gif IP199.36.158.100:443
Requested byhttps://claim-0penmint.web.app/ CertificateIssuerGoogle Trust Services LLC Subjectweb.app Fingerprint6C:B8:FC:5E:5B:DF:AB:31:E6:02:C5:A6:D8:E2:D0:77:BB:5D:BC:7B ValidityThu, 21 Mar 2024 15:14:42 GMT - Wed, 19 Jun 2024 15:14:41 GMT
File typeGIF image data, version 89a, 178 x 178 Hash1e9028a3ca980be63e7a0b7ff86223a3 fb795c53f646947550416ace4d870a4825d96863 b1c2a203ad9d2d0a22c70bf7a162d8440b2905f724b29b373e8aa52612220639
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet | | Quad9 DNS | malicious | Sinkholed |
GET /img/load%202.gif HTTP/1.1
Host: claim-0penmint.web.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://claim-0penmint.web.app/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 34484
cache-control: max-age=3600
content-encoding: br
content-type: image/gif
etag: "8ed0fbb671cda6bf5cd61bb1390409d4a77e8f80e45df16ba866d0dfb2e223e6-br"
last-modified: Wed, 24 Apr 2024 18:12:56 GMT
strict-transport-security: max-age=31556926; includeSubDomains; preload
accept-ranges: bytes
date: Thu, 25 Apr 2024 04:10:53 GMT
x-served-by: cache-hel1410033-HEL
x-cache: HIT
x-cache-hits: 0
x-timer: S1714018254.819939,VS0,VE1
vary: x-fh-requested-host, accept-encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
|
|
| claim-0penmint.web.app/img/1.jpg | 199.36.158.100 | 200 OK | 79 kB |
URL GET HTTP/3claim-0penmint.web.app/img/1.jpg IP199.36.158.100:443
Requested byhttps://claim-0penmint.web.app/ CertificateIssuerGoogle Trust Services LLC Subjectweb.app Fingerprint6C:B8:FC:5E:5B:DF:AB:31:E6:02:C5:A6:D8:E2:D0:77:BB:5D:BC:7B ValidityThu, 21 Mar 2024 15:14:42 GMT - Wed, 19 Jun 2024 15:14:41 GMT
File typeJPEG image data, baseline, precision 8, 2048x2048, components 3 Hash45ba137f084cfef082d4987955c80371 987a9ad295bfa6126ee55e98a5f59e7c8e5d7b78 9927d7bd10d01982147d311ed9c0fff7066f3389985804e5cea8b6f3eeaa6610
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet | | Quad9 DNS | malicious | Sinkholed |
GET /img/1.jpg HTTP/1.1
Host: claim-0penmint.web.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://claim-0penmint.web.app/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 79415
cache-control: max-age=3600
content-encoding: br
content-type: image/jpeg
etag: "b509ddda751f52d94d658e096290932cc1770c9d0ecd70aed9061941d4a5d52a-br"
last-modified: Wed, 24 Apr 2024 18:12:56 GMT
strict-transport-security: max-age=31556926; includeSubDomains; preload
accept-ranges: bytes
date: Thu, 25 Apr 2024 04:10:53 GMT
x-served-by: cache-hel1410033-HEL
x-cache: HIT
x-cache-hits: 0
x-timer: S1714018254.820574,VS0,VE1
vary: x-fh-requested-host, accept-encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
|
|
| claim-0penmint.web.app/img/2.jpg | 199.36.158.100 | 200 OK | 74 kB |
URL GET HTTP/3claim-0penmint.web.app/img/2.jpg IP199.36.158.100:443
Requested byhttps://claim-0penmint.web.app/ CertificateIssuerGoogle Trust Services LLC Subjectweb.app Fingerprint6C:B8:FC:5E:5B:DF:AB:31:E6:02:C5:A6:D8:E2:D0:77:BB:5D:BC:7B ValidityThu, 21 Mar 2024 15:14:42 GMT - Wed, 19 Jun 2024 15:14:41 GMT
File typeJPEG image data, baseline, precision 8, 2048x2048, components 3 Hashb332377a8c696ba08b13419e4ce02e12 e9fc8643b3259d50417e377106361bd188fc054f e32d53f1bc3e89014a167c97dd865a56a548242b96eab4330f12e5196dd44b15
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet | | Quad9 DNS | malicious | Sinkholed |
GET /img/2.jpg HTTP/1.1
Host: claim-0penmint.web.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://claim-0penmint.web.app/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 74399
cache-control: max-age=3600
content-encoding: br
content-type: image/jpeg
etag: "9fdcf3a0f47cfec224c5f4ebc23251c1b21931af6b72aeeb707d4cae828c485e-br"
last-modified: Wed, 24 Apr 2024 18:12:56 GMT
strict-transport-security: max-age=31556926; includeSubDomains; preload
accept-ranges: bytes
date: Thu, 25 Apr 2024 04:10:53 GMT
x-served-by: cache-hel1410033-HEL
x-cache: HIT
x-cache-hits: 0
x-timer: S1714018254.821176,VS0,VE1
vary: x-fh-requested-host, accept-encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
|
|
| claim-0penmint.web.app/img/3.jpg | 199.36.158.100 | 200 OK | 65 kB |
URL GET HTTP/3claim-0penmint.web.app/img/3.jpg IP199.36.158.100:443
Requested byhttps://claim-0penmint.web.app/ CertificateIssuerGoogle Trust Services LLC Subjectweb.app Fingerprint6C:B8:FC:5E:5B:DF:AB:31:E6:02:C5:A6:D8:E2:D0:77:BB:5D:BC:7B ValidityThu, 21 Mar 2024 15:14:42 GMT - Wed, 19 Jun 2024 15:14:41 GMT
File typeJPEG image data, baseline, precision 8, 2048x2048, components 3 Hash771f140bde258a487bc21351400ffa64 fa67b66ed8750974e577e06c02b6fc03bcff9bc7 70c339af14ed704d438838a1f18d59997c615b85fe463333a37eb1c964c9f568
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet | | Quad9 DNS | malicious | Sinkholed |
GET /img/3.jpg HTTP/1.1
Host: claim-0penmint.web.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://claim-0penmint.web.app/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 64673
cache-control: max-age=3600
content-encoding: br
content-type: image/jpeg
etag: "f2a842d81c01b581fcb23534686acae41b5023380b3589ae8d2f939fc210a8c1-br"
last-modified: Wed, 24 Apr 2024 18:12:56 GMT
strict-transport-security: max-age=31556926; includeSubDomains; preload
accept-ranges: bytes
date: Thu, 25 Apr 2024 04:10:53 GMT
x-served-by: cache-hel1410033-HEL
x-cache: HIT
x-cache-hits: 0
x-timer: S1714018254.822339,VS0,VE1
vary: x-fh-requested-host, accept-encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
|
|
| claim-0penmint.web.app/cdn-icons-png.flaticon.com/512/1828/1828640.png | 199.36.158.100 | 404 Not Found | 852 B |
URL GET HTTP/3claim-0penmint.web.app/cdn-icons-png.flaticon.com/512/1828/1828640.png IP199.36.158.100:443
Requested byhttps://claim-0penmint.web.app/ CertificateIssuerGoogle Trust Services LLC Subjectweb.app Fingerprint6C:B8:FC:5E:5B:DF:AB:31:E6:02:C5:A6:D8:E2:D0:77:BB:5D:BC:7B ValidityThu, 21 Mar 2024 15:14:42 GMT - Wed, 19 Jun 2024 15:14:41 GMT
File typeHTML document, ASCII text Hash0a27a4163254fc8fce870c8cc3a3f94f f27cf04699668916346eee510eab7e5a17e83997 b77b97fe780d35d18248abd1d2f42f444afbabe43f6abcd8fa8ebb3d47825eee
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet | | Quad9 DNS | malicious | Sinkholed |
GET /cdn-icons-png.flaticon.com/512/1828/1828640.png HTTP/1.1
Host: claim-0penmint.web.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://claim-0penmint.web.app/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 404 Not Found
content-length: 852
cache-control: max-age=3600
content-encoding: gzip
content-type: text/html; charset=utf-8
etag: "b6abfbdc894d37c260154e281499dc6415bb6ad76b32f01ef94dee93aa897ac4"
last-modified: Wed, 24 Apr 2024 18:12:56 GMT
strict-transport-security: max-age=31556926; includeSubDomains; preload
accept-ranges: bytes
date: Thu, 25 Apr 2024 04:10:53 GMT
x-served-by: cache-hel1410033-HEL
x-cache: HIT
x-cache-hits: 0
x-timer: S1714018254.826861,VS0,VE1
vary: x-fh-requested-host, accept-encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
|
|
| claim-0penmint.web.app/389-9bec97c22fa2e411.gif | 199.36.158.100 | 200 OK | 646 kB |
URL GET HTTP/3claim-0penmint.web.app/389-9bec97c22fa2e411.gif IP199.36.158.100:443
Requested byhttps://claim-0penmint.web.app/ CertificateIssuerGoogle Trust Services LLC Subjectweb.app Fingerprint6C:B8:FC:5E:5B:DF:AB:31:E6:02:C5:A6:D8:E2:D0:77:BB:5D:BC:7B ValidityThu, 21 Mar 2024 15:14:42 GMT - Wed, 19 Jun 2024 15:14:41 GMT
File typeGIF image data, version 87a, 750 x 750 Size646 kB (646106 bytes) Hashb9f393bd75705f60c29e15ceddfd2db9 9b3c4261f673b54903d47a5df6b6c981cdd1276e 09268325243816ed6fe7a556c9e33ff179eae6e4a1e9de2194f590aef36d905e
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet | | Quad9 DNS | malicious | Sinkholed |
GET /389-9bec97c22fa2e411.gif HTTP/1.1
Host: claim-0penmint.web.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://claim-0penmint.web.app/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 646106
cache-control: max-age=3600
content-encoding: br
content-type: image/gif
etag: "5e716bcc9ed9223e932cc83c2998533087c95e316c6d2cd3784810afcf280ef9-br"
last-modified: Wed, 24 Apr 2024 18:12:56 GMT
strict-transport-security: max-age=31556926; includeSubDomains; preload
accept-ranges: bytes
date: Thu, 25 Apr 2024 04:10:53 GMT
x-served-by: cache-hel1410033-HEL
x-cache: HIT
x-cache-hits: 5
x-timer: S1714018254.823600,VS0,VE0
vary: x-fh-requested-host, accept-encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
|
|
| aus5.mozilla.org/update/3/GMP/111.0a1/20240129201730/Linux_x86_64-gcc3/null/default/Linux%205.15.0-102-generic%20(GTK%203.24.37%2Clibpulse%20not-available)/default/default/update.xml | 35.244.181.201 | | 444 B |
URL aus5.mozilla.org/update/3/GMP/111.0a1/20240129201730/Linux_x86_64-gcc3/null/default/Linux%205.15.0-102-generic%20(GTK%203.24.37%2Clibpulse%20not-available)/default/default/update.xml IP35.244.181.201:0 ASN#396982 GOOGLE-CLOUD-PLATFORM
File typeXML 1.0 document, ASCII text, with very long lines (332) Hash3b324dec137a87ef7e24a30a65b13dd0 c0faa95b2f1018e264b3a14aaf50d1003e6c27b3 6cd0b591d9239fc8564627e92a804fc261951b1cbaf5fa58a8ada3cc13f51463
GET /update/3/GMP/111.0a1/20240129201730/Linux_x86_64-gcc3/null/default/Linux%205.15.0-102-generic%20(GTK%203.24.37%2Clibpulse%20not-available)/default/default/update.xml HTTP/1.1
Host: aus5.mozilla.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Cache-Control: no-cache
Pragma: no-cache
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
rule-id: unknown
rule-data-version: unknown
content-signature: x5u=https://content-signature-2.cdn.mozilla.net/chains/aus.content-signature.mozilla.org-2024-06-09-11-51-10.chain; p384ecdsa=JXEEhSBQiG40HZglPOnyA_XScRnQ3Epnojwo5WHeYll-rYqblpphInU1_DKj_ol6gw7Qk4NNQiDIqR-CJ1nKbQjb_0kv_sCED3X4QWOd5aingbouYzF4sUX2p1wABjNt
strict-transport-security: max-age=31536000;
x-content-type-options: nosniff
content-security-policy: default-src 'none'; frame-ancestors 'none'
x-proxy-cache-status: EXPIRED
content-encoding: gzip
via: 1.1 google
date: Thu, 25 Apr 2024 04:09:49 GMT
content-type: text/xml; charset=utf-8
vary: Accept-Encoding
content-length: 444
age: 83
cache-control: public,max-age=90
alt-svc: clear
X-Firefox-Spdy: h2
|
|