Report - claim-opennftsea.web.app/

Report Overview

Submitted URL
claim-opennftsea.web.app/
IP
199.36.158.100
ASN
#54113 FASTLY
Submitted
2024-04-25 03:38:49
Access
public
Website Title
claim-opennftsea.web.app/
Final URL
claim-opennftsea.web.app/
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
30

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
claim-opennftsea.web.app	unknown	unknown	No data	No data	6.9 kB	1.2 MB	199.36.158.100

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2024-04-25	medium	claim-opennftsea.web.app	Sinkholed
2024-04-25	medium	claim-opennftsea.web.app	Sinkholed
2024-04-25	medium	claim-opennftsea.web.app	Sinkholed
2024-04-25	medium	claim-opennftsea.web.app	Sinkholed
2024-04-25	medium	claim-opennftsea.web.app	Sinkholed
2024-04-25	medium	claim-opennftsea.web.app	Sinkholed
2024-04-25	medium	claim-opennftsea.web.app	Sinkholed
2024-04-25	medium	claim-opennftsea.web.app	Sinkholed
2024-04-25	medium	claim-opennftsea.web.app	Sinkholed
2024-04-25	medium	claim-opennftsea.web.app	Sinkholed
2024-04-25	medium	claim-opennftsea.web.app	Sinkholed
2024-04-25	medium	claim-opennftsea.web.app	Sinkholed
2024-04-25	medium	claim-opennftsea.web.app	Sinkholed
2024-04-25	medium	claim-opennftsea.web.app	Sinkholed
2024-04-25	medium	claim-opennftsea.web.app	Sinkholed

ThreatFox

No alerts detected

JavaScript (2)

	URL	Size	First Seen	Last Seen
	claim-opennftsea.web.app/80867ce1-c7ea-46c0-b18e-1926a71ba85c.js	2.2 MB	2024-04-12	2024-04-30
Pretty URL claim-opennftsea.web.app/80867ce1-c7ea-46c0-b18e-1926a71ba85c.js IP 199.36.158.100 ASN #54113 FASTLY Introduced by scriptElement Embedded in HTML false Observations First Seen2024-04-12 05:38:54 Last Seen2024-04-30 20:11:43 Times Seen136 Hash d62c30c4530b490990eaa21f312d7a6e 106ee8bbbacdca2b1e39a2067c91583d14a710f9 002f79c2a3a31f12b15430dae686ac18b39a204931e8b7121797bd58f49981d4 Loading...

	unknown	34 B	2023-04-11	2024-05-04
Pretty Introduced by Function Embedded in HTML false Observations First Seen2023-04-11 21:16:40 Last Seen2024-05-04 13:40:54 Times Seen76126 Hash 572cb94037fffc2a0a53b465972e15f1 0d679b041a7c1ca45cc99e2d229fc2b86762838d 6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35 Loading...

HTTP Transactions (15)

URL IP Response Size

claim-opennftsea.web.app/

199.36.158.100

200 OK

13 kB

URL User Request GET HTTP/2
claim-opennftsea.web.app/
IP
199.36.158.100:443
ASN
#54113 FASTLY

Certificate
IssuerGoogle Trust Services LLC
Subjectweb.app
Fingerprint6C:B8:FC:5E:5B:DF:AB:31:E6:02:C5:A6:D8:E2:D0:77:BB:5D:BC:7B
ValidityThu, 21 Mar 2024 15:14:42 GMT - Wed, 19 Jun 2024 15:14:41 GMT

File type
HTML document, Unicode text, UTF-8 text, with very long lines (2482)
Size
13 kB (12615 bytes)
Hash
ed77fc648c4ff35d6f245938c5a809d5
b3074aaafb88c0618628a8be0ad317fcd034441f
46e5e9867e9c235bc4383868a8245c4cf95904085ebca62876bf137f7a53e8d2

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET / HTTP/1.1
Host: claim-opennftsea.web.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
cache-control: max-age=3600
content-encoding: br
content-type: text/html; charset=utf-8
etag: "afbe52d8af195eb00401c22ba7e90aa52f5c8e39549ace38afea7d53c6e7a199-br"
last-modified: Wed, 24 Apr 2024 18:20:28 GMT
strict-transport-security: max-age=31556926; includeSubDomains; preload
accept-ranges: bytes
date: Thu, 25 Apr 2024 03:38:22 GMT
x-served-by: cache-hel1410022-HEL
x-cache: HIT
x-cache-hits: 0
x-timer: S1714016303.929196,VS0,VE1
vary: x-fh-requested-host, accept-encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 12615
X-Firefox-Spdy: h2

claim-opennftsea.web.app/80867ce1-c7ea-46c0-b18e-1926a71ba85c.js

199.36.158.100

200 OK

302 kB

URL GET HTTP/3
claim-opennftsea.web.app/80867ce1-c7ea-46c0-b18e-1926a71ba85c.js
IP
199.36.158.100:443
ASN
#54113 FASTLY

Requested by
https://claim-opennftsea.web.app/
Certificate
IssuerGoogle Trust Services LLC
Subjectweb.app
Fingerprint6C:B8:FC:5E:5B:DF:AB:31:E6:02:C5:A6:D8:E2:D0:77:BB:5D:BC:7B
ValidityThu, 21 Mar 2024 15:14:42 GMT - Wed, 19 Jun 2024 15:14:41 GMT

File type
ASCII text, with very long lines (65536), with no line terminators
Size
302 kB (301931 bytes)
Hash
d62c30c4530b490990eaa21f312d7a6e
106ee8bbbacdca2b1e39a2067c91583d14a710f9
002f79c2a3a31f12b15430dae686ac18b39a204931e8b7121797bd58f49981d4

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /80867ce1-c7ea-46c0-b18e-1926a71ba85c.js HTTP/1.1
Host: claim-opennftsea.web.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://claim-opennftsea.web.app/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
content-length: 301931
cache-control: max-age=3600
content-encoding: br
content-type: text/javascript; charset=utf-8
etag: "a397be3569acbd23d304ffbd7865db5e01a76739a8365de7a041e08a2077ee16-br"
last-modified: Wed, 24 Apr 2024 18:20:28 GMT
strict-transport-security: max-age=31556926; includeSubDomains; preload
accept-ranges: bytes
date: Thu, 25 Apr 2024 03:38:23 GMT
x-served-by: cache-hel1410023-HEL
x-cache: HIT
x-cache-hits: 0
x-timer: S1714016303.253619,VS0,VE1
vary: x-fh-requested-host, accept-encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400

claim-opennftsea.web.app/js/slick-1.8.1/slick/slick.html

199.36.158.100

404 Not Found

852 B

URL GET HTTP/3
claim-opennftsea.web.app/js/slick-1.8.1/slick/slick.html
IP
199.36.158.100:443
ASN
#54113 FASTLY

Requested by
https://claim-opennftsea.web.app/
Certificate
IssuerGoogle Trust Services LLC
Subjectweb.app
Fingerprint6C:B8:FC:5E:5B:DF:AB:31:E6:02:C5:A6:D8:E2:D0:77:BB:5D:BC:7B
ValidityThu, 21 Mar 2024 15:14:42 GMT - Wed, 19 Jun 2024 15:14:41 GMT

File type
HTML document, ASCII text
Size
852 B (852 bytes)
Hash
0a27a4163254fc8fce870c8cc3a3f94f
f27cf04699668916346eee510eab7e5a17e83997
b77b97fe780d35d18248abd1d2f42f444afbabe43f6abcd8fa8ebb3d47825eee

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /js/slick-1.8.1/slick/slick.html HTTP/1.1
Host: claim-opennftsea.web.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://claim-opennftsea.web.app/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 404 Not Found
content-length: 852
cache-control: max-age=3600
content-encoding: gzip
content-type: text/html; charset=utf-8
etag: "b6abfbdc894d37c260154e281499dc6415bb6ad76b32f01ef94dee93aa897ac4"
last-modified: Wed, 24 Apr 2024 18:20:28 GMT
strict-transport-security: max-age=31556926; includeSubDomains; preload
accept-ranges: bytes
date: Thu, 25 Apr 2024 03:38:23 GMT
x-served-by: cache-hel1410023-HEL
x-cache: HIT
x-cache-hits: 2
x-timer: S1714016303.254177,VS0,VE0
vary: x-fh-requested-host, accept-encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400

claim-opennftsea.web.app/css/drops.css

199.36.158.100

200 OK

310 B

URL GET HTTP/3
claim-opennftsea.web.app/css/drops.css
IP
199.36.158.100:443
ASN
#54113 FASTLY

Requested by
https://claim-opennftsea.web.app/
Certificate
IssuerGoogle Trust Services LLC
Subjectweb.app
Fingerprint6C:B8:FC:5E:5B:DF:AB:31:E6:02:C5:A6:D8:E2:D0:77:BB:5D:BC:7B
ValidityThu, 21 Mar 2024 15:14:42 GMT - Wed, 19 Jun 2024 15:14:41 GMT

File type
Unicode text, UTF-8 text
Size
310 B (310 bytes)
Hash
f2785d929e72ee822c03f3a5d9d953ee
6532c19276434337669c349a903d5fb4357cb552
417b6655bfb887f5aa86d902f7e2ed9c82b36ae74a3a00a7bc34288cead3606a

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /css/drops.css HTTP/1.1
Host: claim-opennftsea.web.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://claim-opennftsea.web.app/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
content-length: 310
cache-control: max-age=3600
content-encoding: br
content-type: text/css; charset=utf-8
etag: "560c4b126502c25f479669b62bd7c6b4d88b8561beea11b84a993759e2b1a06f-br"
last-modified: Wed, 24 Apr 2024 18:20:28 GMT
strict-transport-security: max-age=31556926; includeSubDomains; preload
accept-ranges: bytes
date: Thu, 25 Apr 2024 03:38:23 GMT
x-served-by: cache-hel1410023-HEL
x-cache: HIT
x-cache-hits: 0
x-timer: S1714016303.254501,VS0,VE1
vary: x-fh-requested-host, accept-encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400

claim-opennftsea.web.app/css/fonts.css

199.36.158.100

200 OK

141 B

URL GET HTTP/3
claim-opennftsea.web.app/css/fonts.css
IP
199.36.158.100:443
ASN
#54113 FASTLY

Requested by
https://claim-opennftsea.web.app/
Certificate
IssuerGoogle Trust Services LLC
Subjectweb.app
Fingerprint6C:B8:FC:5E:5B:DF:AB:31:E6:02:C5:A6:D8:E2:D0:77:BB:5D:BC:7B
ValidityThu, 21 Mar 2024 15:14:42 GMT - Wed, 19 Jun 2024 15:14:41 GMT

File type
ASCII text
Size
141 B (141 bytes)
Hash
b032dbbc3bbb93ca80d2f189570da51c
ce3f373c28e1d35a7adb9dca8f6db95cb24fbccc
41503bfbefe3bc434e1eacc84da2af0e27c9101874345d6c5fb15cf5a6db528a

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /css/fonts.css HTTP/1.1
Host: claim-opennftsea.web.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://claim-opennftsea.web.app/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
content-length: 141
cache-control: max-age=3600
content-encoding: br
content-type: text/css; charset=utf-8
etag: "4a019b0a31bd783478add223cde3a72f0d28d78bb9613f7ff8e20fed4709fccd-br"
last-modified: Wed, 24 Apr 2024 18:20:28 GMT
strict-transport-security: max-age=31556926; includeSubDomains; preload
accept-ranges: bytes
date: Thu, 25 Apr 2024 03:38:23 GMT
x-served-by: cache-hel1410023-HEL
x-cache: HIT
x-cache-hits: 0
x-timer: S1714016303.255876,VS0,VE1
vary: x-fh-requested-host, accept-encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400

claim-opennftsea.web.app/css/index.css

199.36.158.100

200 OK

2.6 kB

URL GET HTTP/3
claim-opennftsea.web.app/css/index.css
IP
199.36.158.100:443
ASN
#54113 FASTLY

Requested by
https://claim-opennftsea.web.app/
Certificate
IssuerGoogle Trust Services LLC
Subjectweb.app
Fingerprint6C:B8:FC:5E:5B:DF:AB:31:E6:02:C5:A6:D8:E2:D0:77:BB:5D:BC:7B
ValidityThu, 21 Mar 2024 15:14:42 GMT - Wed, 19 Jun 2024 15:14:41 GMT

File type
Unicode text, UTF-8 text
Size
2.6 kB (2611 bytes)
Hash
0d1cbffac1b292933c6b6c156cf44ec4
aea170f8f5ae69ef91922bdc831c3c09a12deb1c
50661deac406d37c3e721284c67bd936899238da1bb297052a71ce6498f61ada

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /css/index.css HTTP/1.1
Host: claim-opennftsea.web.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://claim-opennftsea.web.app/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
content-length: 2611
cache-control: max-age=3600
content-encoding: br
content-type: text/css; charset=utf-8
etag: "33ce0b1623399c0eeedaab4fc81d002752f473a0c9e2ec4de0cfba942120a57c-br"
last-modified: Wed, 24 Apr 2024 18:20:28 GMT
strict-transport-security: max-age=31556926; includeSubDomains; preload
accept-ranges: bytes
date: Thu, 25 Apr 2024 03:38:23 GMT
x-served-by: cache-hel1410023-HEL
x-cache: HIT
x-cache-hits: 0
x-timer: S1714016303.256475,VS0,VE0
vary: x-fh-requested-host, accept-encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400

claim-opennftsea.web.app/js/jquery-3.6.1.min.html

199.36.158.100

404 Not Found

852 B

URL GET HTTP/3
claim-opennftsea.web.app/js/jquery-3.6.1.min.html
IP
199.36.158.100:443
ASN
#54113 FASTLY

Requested by
https://claim-opennftsea.web.app/
Certificate
IssuerGoogle Trust Services LLC
Subjectweb.app
Fingerprint6C:B8:FC:5E:5B:DF:AB:31:E6:02:C5:A6:D8:E2:D0:77:BB:5D:BC:7B
ValidityThu, 21 Mar 2024 15:14:42 GMT - Wed, 19 Jun 2024 15:14:41 GMT

File type
HTML document, ASCII text
Size
852 B (852 bytes)
Hash
0a27a4163254fc8fce870c8cc3a3f94f
f27cf04699668916346eee510eab7e5a17e83997
b77b97fe780d35d18248abd1d2f42f444afbabe43f6abcd8fa8ebb3d47825eee

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /js/jquery-3.6.1.min.html HTTP/1.1
Host: claim-opennftsea.web.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://claim-opennftsea.web.app/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 404 Not Found
content-length: 852
cache-control: max-age=3600
content-encoding: gzip
content-type: text/html; charset=utf-8
etag: "b6abfbdc894d37c260154e281499dc6415bb6ad76b32f01ef94dee93aa897ac4"
last-modified: Wed, 24 Apr 2024 18:20:28 GMT
strict-transport-security: max-age=31556926; includeSubDomains; preload
accept-ranges: bytes
date: Thu, 25 Apr 2024 03:38:23 GMT
x-served-by: cache-hel1410023-HEL
x-cache: HIT
x-cache-hits: 2
x-timer: S1714016303.262580,VS0,VE0
vary: x-fh-requested-host, accept-encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400

claim-opennftsea.web.app/js/slick-1.8.1/slick/slick.min.html

199.36.158.100

404 Not Found

852 B

URL GET HTTP/3
claim-opennftsea.web.app/js/slick-1.8.1/slick/slick.min.html
IP
199.36.158.100:443
ASN
#54113 FASTLY

Requested by
https://claim-opennftsea.web.app/
Certificate
IssuerGoogle Trust Services LLC
Subjectweb.app
Fingerprint6C:B8:FC:5E:5B:DF:AB:31:E6:02:C5:A6:D8:E2:D0:77:BB:5D:BC:7B
ValidityThu, 21 Mar 2024 15:14:42 GMT - Wed, 19 Jun 2024 15:14:41 GMT

File type
HTML document, ASCII text
Size
852 B (852 bytes)
Hash
0a27a4163254fc8fce870c8cc3a3f94f
f27cf04699668916346eee510eab7e5a17e83997
b77b97fe780d35d18248abd1d2f42f444afbabe43f6abcd8fa8ebb3d47825eee

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /js/slick-1.8.1/slick/slick.min.html HTTP/1.1
Host: claim-opennftsea.web.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://claim-opennftsea.web.app/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 404 Not Found
content-length: 852
cache-control: max-age=3600
content-encoding: gzip
content-type: text/html; charset=utf-8
etag: "b6abfbdc894d37c260154e281499dc6415bb6ad76b32f01ef94dee93aa897ac4"
last-modified: Wed, 24 Apr 2024 18:20:28 GMT
strict-transport-security: max-age=31556926; includeSubDomains; preload
accept-ranges: bytes
date: Thu, 25 Apr 2024 03:38:23 GMT
x-served-by: cache-hel1410023-HEL
x-cache: HIT
x-cache-hits: 2
x-timer: S1714016303.263188,VS0,VE0
vary: x-fh-requested-host, accept-encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400

claim-opennftsea.web.app/js/index.html

199.36.158.100

404 Not Found

852 B

URL GET HTTP/3
claim-opennftsea.web.app/js/index.html
IP
199.36.158.100:443
ASN
#54113 FASTLY

Requested by
https://claim-opennftsea.web.app/
Certificate
IssuerGoogle Trust Services LLC
Subjectweb.app
Fingerprint6C:B8:FC:5E:5B:DF:AB:31:E6:02:C5:A6:D8:E2:D0:77:BB:5D:BC:7B
ValidityThu, 21 Mar 2024 15:14:42 GMT - Wed, 19 Jun 2024 15:14:41 GMT

File type
HTML document, ASCII text
Size
852 B (852 bytes)
Hash
0a27a4163254fc8fce870c8cc3a3f94f
f27cf04699668916346eee510eab7e5a17e83997
b77b97fe780d35d18248abd1d2f42f444afbabe43f6abcd8fa8ebb3d47825eee

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /js/index.html HTTP/1.1
Host: claim-opennftsea.web.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://claim-opennftsea.web.app/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 404 Not Found
content-length: 852
cache-control: max-age=3600
content-encoding: gzip
content-type: text/html; charset=utf-8
etag: "b6abfbdc894d37c260154e281499dc6415bb6ad76b32f01ef94dee93aa897ac4"
last-modified: Wed, 24 Apr 2024 18:20:28 GMT
strict-transport-security: max-age=31556926; includeSubDomains; preload
accept-ranges: bytes
date: Thu, 25 Apr 2024 03:38:23 GMT
x-served-by: cache-hel1410023-HEL
x-cache: HIT
x-cache-hits: 2
x-timer: S1714016303.264102,VS0,VE0
vary: x-fh-requested-host, accept-encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400

claim-opennftsea.web.app/img/load%202.gif

199.36.158.100

200 OK

34 kB

URL GET HTTP/3
claim-opennftsea.web.app/img/load%202.gif
IP
199.36.158.100:443
ASN
#54113 FASTLY

Requested by
https://claim-opennftsea.web.app/
Certificate
IssuerGoogle Trust Services LLC
Subjectweb.app
Fingerprint6C:B8:FC:5E:5B:DF:AB:31:E6:02:C5:A6:D8:E2:D0:77:BB:5D:BC:7B
ValidityThu, 21 Mar 2024 15:14:42 GMT - Wed, 19 Jun 2024 15:14:41 GMT

File type
GIF image data, version 89a, 178 x 178
Size
34 kB (34484 bytes)
Hash
1e9028a3ca980be63e7a0b7ff86223a3
fb795c53f646947550416ace4d870a4825d96863
b1c2a203ad9d2d0a22c70bf7a162d8440b2905f724b29b373e8aa52612220639

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /img/load%202.gif HTTP/1.1
Host: claim-opennftsea.web.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://claim-opennftsea.web.app/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
content-length: 34484
cache-control: max-age=3600
content-encoding: br
content-type: image/gif
etag: "8ed0fbb671cda6bf5cd61bb1390409d4a77e8f80e45df16ba866d0dfb2e223e6-br"
last-modified: Wed, 24 Apr 2024 18:20:28 GMT
strict-transport-security: max-age=31556926; includeSubDomains; preload
accept-ranges: bytes
date: Thu, 25 Apr 2024 03:38:23 GMT
x-served-by: cache-hel1410023-HEL
x-cache: HIT
x-cache-hits: 5
x-timer: S1714016303.256746,VS0,VE0
vary: x-fh-requested-host, accept-encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400

claim-opennftsea.web.app/img/1.jpg

199.36.158.100

200 OK

79 kB

URL GET HTTP/3
claim-opennftsea.web.app/img/1.jpg
IP
199.36.158.100:443
ASN
#54113 FASTLY

Requested by
https://claim-opennftsea.web.app/
Certificate
IssuerGoogle Trust Services LLC
Subjectweb.app
Fingerprint6C:B8:FC:5E:5B:DF:AB:31:E6:02:C5:A6:D8:E2:D0:77:BB:5D:BC:7B
ValidityThu, 21 Mar 2024 15:14:42 GMT - Wed, 19 Jun 2024 15:14:41 GMT

File type
JPEG image data, baseline, precision 8, 2048x2048, components 3
Size
79 kB (79415 bytes)
Hash
45ba137f084cfef082d4987955c80371
987a9ad295bfa6126ee55e98a5f59e7c8e5d7b78
9927d7bd10d01982147d311ed9c0fff7066f3389985804e5cea8b6f3eeaa6610

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /img/1.jpg HTTP/1.1
Host: claim-opennftsea.web.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://claim-opennftsea.web.app/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
content-length: 79415
cache-control: max-age=3600
content-encoding: br
content-type: image/jpeg
etag: "b509ddda751f52d94d658e096290932cc1770c9d0ecd70aed9061941d4a5d52a-br"
last-modified: Wed, 24 Apr 2024 18:20:28 GMT
strict-transport-security: max-age=31556926; includeSubDomains; preload
accept-ranges: bytes
date: Thu, 25 Apr 2024 03:38:23 GMT
x-served-by: cache-hel1410023-HEL
x-cache: HIT
x-cache-hits: 0
x-timer: S1714016303.258144,VS0,VE0
vary: x-fh-requested-host, accept-encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400

claim-opennftsea.web.app/img/2.jpg

199.36.158.100

200 OK

74 kB

URL GET HTTP/3
claim-opennftsea.web.app/img/2.jpg
IP
199.36.158.100:443
ASN
#54113 FASTLY

Requested by
https://claim-opennftsea.web.app/
Certificate
IssuerGoogle Trust Services LLC
Subjectweb.app
Fingerprint6C:B8:FC:5E:5B:DF:AB:31:E6:02:C5:A6:D8:E2:D0:77:BB:5D:BC:7B
ValidityThu, 21 Mar 2024 15:14:42 GMT - Wed, 19 Jun 2024 15:14:41 GMT

File type
JPEG image data, baseline, precision 8, 2048x2048, components 3
Size
74 kB (74399 bytes)
Hash
b332377a8c696ba08b13419e4ce02e12
e9fc8643b3259d50417e377106361bd188fc054f
e32d53f1bc3e89014a167c97dd865a56a548242b96eab4330f12e5196dd44b15

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /img/2.jpg HTTP/1.1
Host: claim-opennftsea.web.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://claim-opennftsea.web.app/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
content-length: 74399
cache-control: max-age=3600
content-encoding: br
content-type: image/jpeg
etag: "9fdcf3a0f47cfec224c5f4ebc23251c1b21931af6b72aeeb707d4cae828c485e-br"
last-modified: Wed, 24 Apr 2024 18:20:28 GMT
strict-transport-security: max-age=31556926; includeSubDomains; preload
accept-ranges: bytes
date: Thu, 25 Apr 2024 03:38:23 GMT
x-served-by: cache-hel1410023-HEL
x-cache: HIT
x-cache-hits: 5
x-timer: S1714016303.259426,VS0,VE0
vary: x-fh-requested-host, accept-encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400

claim-opennftsea.web.app/img/3.jpg

199.36.158.100

200 OK

65 kB

URL GET HTTP/3
claim-opennftsea.web.app/img/3.jpg
IP
199.36.158.100:443
ASN
#54113 FASTLY

Requested by
https://claim-opennftsea.web.app/
Certificate
IssuerGoogle Trust Services LLC
Subjectweb.app
Fingerprint6C:B8:FC:5E:5B:DF:AB:31:E6:02:C5:A6:D8:E2:D0:77:BB:5D:BC:7B
ValidityThu, 21 Mar 2024 15:14:42 GMT - Wed, 19 Jun 2024 15:14:41 GMT

File type
JPEG image data, baseline, precision 8, 2048x2048, components 3
Size
65 kB (64673 bytes)
Hash
771f140bde258a487bc21351400ffa64
fa67b66ed8750974e577e06c02b6fc03bcff9bc7
70c339af14ed704d438838a1f18d59997c615b85fe463333a37eb1c964c9f568

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /img/3.jpg HTTP/1.1
Host: claim-opennftsea.web.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://claim-opennftsea.web.app/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
content-length: 64673
cache-control: max-age=3600
content-encoding: br
content-type: image/jpeg
etag: "f2a842d81c01b581fcb23534686acae41b5023380b3589ae8d2f939fc210a8c1-br"
last-modified: Wed, 24 Apr 2024 18:20:28 GMT
strict-transport-security: max-age=31556926; includeSubDomains; preload
accept-ranges: bytes
date: Thu, 25 Apr 2024 03:38:23 GMT
x-served-by: cache-hel1410023-HEL
x-cache: HIT
x-cache-hits: 0
x-timer: S1714016303.259728,VS0,VE1
vary: x-fh-requested-host, accept-encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400

claim-opennftsea.web.app/cdn-icons-png.flaticon.com/512/1828/1828640.png

199.36.158.100

404 Not Found

852 B

URL GET HTTP/3
claim-opennftsea.web.app/cdn-icons-png.flaticon.com/512/1828/1828640.png
IP
199.36.158.100:443
ASN
#54113 FASTLY

Requested by
https://claim-opennftsea.web.app/
Certificate
IssuerGoogle Trust Services LLC
Subjectweb.app
Fingerprint6C:B8:FC:5E:5B:DF:AB:31:E6:02:C5:A6:D8:E2:D0:77:BB:5D:BC:7B
ValidityThu, 21 Mar 2024 15:14:42 GMT - Wed, 19 Jun 2024 15:14:41 GMT

File type
HTML document, ASCII text
Size
852 B (852 bytes)
Hash
0a27a4163254fc8fce870c8cc3a3f94f
f27cf04699668916346eee510eab7e5a17e83997
b77b97fe780d35d18248abd1d2f42f444afbabe43f6abcd8fa8ebb3d47825eee

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /cdn-icons-png.flaticon.com/512/1828/1828640.png HTTP/1.1
Host: claim-opennftsea.web.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://claim-opennftsea.web.app/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 404 Not Found
content-length: 852
cache-control: max-age=3600
content-encoding: gzip
content-type: text/html; charset=utf-8
etag: "b6abfbdc894d37c260154e281499dc6415bb6ad76b32f01ef94dee93aa897ac4"
last-modified: Wed, 24 Apr 2024 18:20:28 GMT
strict-transport-security: max-age=31556926; includeSubDomains; preload
accept-ranges: bytes
date: Thu, 25 Apr 2024 03:38:23 GMT
x-served-by: cache-hel1410023-HEL
x-cache: HIT
x-cache-hits: 2
x-timer: S1714016303.268104,VS0,VE0
vary: x-fh-requested-host, accept-encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400

claim-opennftsea.web.app/389-9bec97c22fa2e411.gif

199.36.158.100

200 OK

646 kB

URL GET HTTP/3
claim-opennftsea.web.app/389-9bec97c22fa2e411.gif
IP
199.36.158.100:443
ASN
#54113 FASTLY

Requested by
https://claim-opennftsea.web.app/
Certificate
IssuerGoogle Trust Services LLC
Subjectweb.app
Fingerprint6C:B8:FC:5E:5B:DF:AB:31:E6:02:C5:A6:D8:E2:D0:77:BB:5D:BC:7B
ValidityThu, 21 Mar 2024 15:14:42 GMT - Wed, 19 Jun 2024 15:14:41 GMT

File type
GIF image data, version 87a, 750 x 750
Size
646 kB (646106 bytes)
Hash
b9f393bd75705f60c29e15ceddfd2db9
9b3c4261f673b54903d47a5df6b6c981cdd1276e
09268325243816ed6fe7a556c9e33ff179eae6e4a1e9de2194f590aef36d905e

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /389-9bec97c22fa2e411.gif HTTP/1.1
Host: claim-opennftsea.web.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://claim-opennftsea.web.app/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
content-length: 646106
cache-control: max-age=3600
content-encoding: br
content-type: image/gif
etag: "5e716bcc9ed9223e932cc83c2998533087c95e316c6d2cd3784810afcf280ef9-br"
last-modified: Wed, 24 Apr 2024 18:20:28 GMT
strict-transport-security: max-age=31556926; includeSubDomains; preload
accept-ranges: bytes
date: Thu, 25 Apr 2024 03:38:23 GMT
x-served-by: cache-hel1410023-HEL
x-cache: HIT
x-cache-hits: 0
x-timer: S1714016303.261480,VS0,VE1
vary: x-fh-requested-host, accept-encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (2)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (15)

URL User Request GET HTTP/2

IP

ASN

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/3

IP

ASN

Requested by

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/3

IP

ASN

Requested by

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/3

IP

ASN

Requested by

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/3

IP

ASN