| pub-29a74f49f4734786b372ca257eb7eccb.r2.dev/EM.html |  104.18.3.35 | 200 OK | 1.2 MB |
URL User Request GET HTTP/1.1pub-29a74f49f4734786b372ca257eb7eccb.r2.dev/EM.html IP104.18.3.35:443
CertificateIssuerLet's Encrypt Subject*.r2.dev Fingerprint48:74:F0:98:E0:A1:57:3E:86:18:BF:B3:DC:C9:7A:5B:53:50:FE:E0 ValidityFri, 05 Apr 2024 15:25:24 GMT - Thu, 04 Jul 2024 15:25:23 GMT
File typeHTML document, ASCII text, with very long lines (64855) Size1.2 MB (1221439 bytes) Hashfa5a6545c343efcb0d1852ebcfd0b22c 16f8868e2af60ee19a628e000e9de04881c4bee5 9dfbfb2e269ed37f799d1f9089b559931fe16384e994b8d83825ff340b8d358f
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Chase | | OpenPhish | phishing | Chase Personal Banking | | PhishTank | phishing | Other | | Quad9 DNS | malicious | Sinkholed |
GET /EM.html HTTP/1.1
Host: pub-29a74f49f4734786b372ca257eb7eccb.r2.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 24 Apr 2024 16:26:51 GMT
Content-Type: text/html
Content-Length: 1221439
Connection: keep-alive
Accept-Ranges: bytes
ETag: "fa5a6545c343efcb0d1852ebcfd0b22c"
Last-Modified: Mon, 08 Apr 2024 13:27:44 GMT
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 879775176a185699-OSL
|
| b4bc221a-d6d0-46a4-929c-0bb146ebeb86-00-h5bhpjt290ks.picard.replit.dev/init.php |  35.226.206.236 | 503 Service Unavailable | 7.5 kB |
URL GET HTTP/1.1b4bc221a-d6d0-46a4-929c-0bb146ebeb86-00-h5bhpjt290ks.picard.replit.dev/init.php IP35.226.206.236:443 ASN#396982 GOOGLE-CLOUD-PLATFORM
Requested byhttps://pub-29a74f49f4734786b372ca257eb7eccb.r2.dev/EM.html CertificateIssuerLet's Encrypt Subject*.picard.replit.dev FingerprintD3:07:8D:AF:E2:3A:8E:44:E6:6A:1B:D0:F7:EF:40:EE:05:05:3E:C5 ValidityThu, 28 Mar 2024 17:29:05 GMT - Wed, 26 Jun 2024 17:29:04 GMT
File typeHTML document, ASCII text, with very long lines (867) Hash1c5a0e6341b0661831a4d37d0c7739b0 4a339ea2ab5d87a945030ba3ee72dfab19a42d02 b29a798f46cb41a7c7132e5b3c91baddf4012ea7d4cd3389e427dc345c6700f3
GET /init.php HTTP/1.1
Host: b4bc221a-d6d0-46a4-929c-0bb146ebeb86-00-h5bhpjt290ks.picard.replit.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://pub-29a74f49f4734786b372ca257eb7eccb.r2.dev
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 503 Service Unavailable
Replit-Cluster: picard
Retry-After: 86400
X-Robots-Tag: none, noindex, noarchive, nofollow, nositelinkssearchbox, noimageindex
Date: Wed, 24 Apr 2024 16:26:52 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
|
| aus5.mozilla.org/update/3/GMP/111.0a1/20240129201730/Linux_x86_64-gcc3/null/default/Linux%205.15.0-102-generic%20(GTK%203.24.37%2Clibpulse%20not-available)/default/default/update.xml | 35.244.181.201 | | 444 B |
URL aus5.mozilla.org/update/3/GMP/111.0a1/20240129201730/Linux_x86_64-gcc3/null/default/Linux%205.15.0-102-generic%20(GTK%203.24.37%2Clibpulse%20not-available)/default/default/update.xml IP35.244.181.201:0 ASN#396982 GOOGLE-CLOUD-PLATFORM
File typeXML 1.0 document, ASCII text, with very long lines (332) Hash3b324dec137a87ef7e24a30a65b13dd0 c0faa95b2f1018e264b3a14aaf50d1003e6c27b3 6cd0b591d9239fc8564627e92a804fc261951b1cbaf5fa58a8ada3cc13f51463
GET /update/3/GMP/111.0a1/20240129201730/Linux_x86_64-gcc3/null/default/Linux%205.15.0-102-generic%20(GTK%203.24.37%2Clibpulse%20not-available)/default/default/update.xml HTTP/1.1
Host: aus5.mozilla.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Cache-Control: no-cache
Pragma: no-cache
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
rule-id: unknown
rule-data-version: unknown
content-signature: x5u=https://content-signature-2.cdn.mozilla.net/chains/aus.content-signature.mozilla.org-2024-06-09-11-51-10.chain; p384ecdsa=TFiwFyjvfalHXH2rOPTrIsB31A0eBtwdmNyraSmTOH4prfgEDyt785x4zW06gwZv2qMn1mHeWLhVG_8bk-KqA5JxlerXPopCEtPM4kBA9HGCQihzQXxhhRlIQkZlANn1
strict-transport-security: max-age=31536000;
x-content-type-options: nosniff
content-security-policy: default-src 'none'; frame-ancestors 'none'
x-proxy-cache-status: MISS
content-encoding: gzip
via: 1.1 google
date: Wed, 24 Apr 2024 16:26:37 GMT
content-type: text/xml; charset=utf-8
vary: Accept-Encoding
content-length: 444
age: 33
cache-control: public,max-age=90
alt-svc: clear
X-Firefox-Spdy: h2
|