Report - swisspassw.web.app/

Report Overview

Submitted URL
swisspassw.web.app/
IP
199.36.158.100
ASN
#54113 FASTLY
Submitted
2024-05-05 04:32:46
Access
public
Website Title
SwissPass
Final URL
swisspassw.web.app/
Tags
swosspass phishing transport suspicious
urlquery detections
Phishing - SwissPass
Suspicious - Suspicious Javascript code

Detections

urlquery
22
Network Intrusion Detection
0
Threat Detection Systems
74

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
www.gstatic.com	unknown	2008-02-11	2016-07-26	2024-05-04	3.4 kB	880 kB	142.250.74.35
fonts.gstatic.com	unknown	2008-02-11	2014-09-09	2024-05-04	1.0 kB	32 kB	216.58.207.227
swisspassw.web.app	unknown	2019-01-08	2023-07-01	2024-03-13	6.0 kB	348 kB	199.36.158.100
www.google.com	7	1997-09-15	2015-05-10	2024-03-23	4.2 kB	488 kB	142.250.74.132
cdn.app.sbb.ch	610967	unknown	2018-04-04	2024-04-26	513 B	15 kB	35.158.198.127
ocsp.swisssign.ch	unknown	unknown	2023-01-12	2024-05-04	748 B	14 kB	23.36.79.11
www.swisspass.ch	501260	unknown	2015-03-10	2024-04-29	902 B	149 kB	193.203.121.166

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

Scan Date	Severity	Indicator	Alert
2024-05-04	medium	swisspassw.web.app/	SBB
2024-05-04	medium	swisspassw.web.app/	SBB
2024-05-04	medium	swisspassw.web.app/	SBB
2024-05-04	medium	swisspassw.web.app/	SBB
2024-05-04	medium	swisspassw.web.app/	SBB
2024-05-04	medium	swisspassw.web.app/	SBB
2024-05-04	medium	swisspassw.web.app/	SBB
2024-05-04	medium	swisspassw.web.app/	SBB
2024-05-04	medium	swisspassw.web.app/	SBB
2024-05-04	medium	swisspassw.web.app/	SBB
2024-05-04	medium	swisspassw.web.app/	SBB
2024-05-04	medium	swisspassw.web.app/	SBB

PhishTank

Scan Date	Severity	Indicator	Alert
2023-07-01	medium	swisspassw.web.app/	Other
2023-07-01	medium	swisspassw.web.app/runtime.e924d9a47904ada6.js	Other
2023-07-01	medium	swisspassw.web.app/scripts.091d6b0ce5fdf8b6.js	Other
2023-07-01	medium	swisspassw.web.app/styles.ef46db3751d8e999.css	Other
2023-07-01	medium	swisspassw.web.app/polyfills.32d5f514e297e910.js	Other
2023-07-01	medium	swisspassw.web.app/main.be424fe2253682fd.js	Other
2023-07-01	medium	swisspassw.web.app/fonts/icomoon/icomoon.woff2?7m5yri	Other
2023-07-01	medium	swisspassw.web.app/fonts/icomoon/icomoon.woff?7m5yri	Other
2023-07-01	medium	swisspassw.web.app/favicon.ico	Other
2023-07-01	medium	swisspassw.web.app/assets/css/sso.min-20200819.css	Other
2023-07-01	medium	swisspassw.web.app/logo_text_de-20200819.png	Other
2023-07-01	medium	swisspassw.web.app/logo-20200819.png	Other

mnemonic secure dns

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2024-05-05	medium	swisspassw.web.app	Sinkholed
2024-05-05	medium	swisspassw.web.app	Sinkholed
2024-05-05	medium	swisspassw.web.app	Sinkholed
2024-05-05	medium	swisspassw.web.app	Sinkholed
2024-05-05	medium	swisspassw.web.app	Sinkholed
2024-05-05	medium	swisspassw.web.app	Sinkholed
2024-05-05	medium	swisspassw.web.app	Sinkholed
2024-05-05	medium	swisspassw.web.app	Sinkholed
2024-05-05	medium	swisspassw.web.app	Sinkholed
2024-05-05	medium	swisspassw.web.app	Sinkholed
2024-05-05	medium	swisspassw.web.app	Sinkholed
2024-05-05	medium	swisspassw.web.app	Sinkholed
2024-05-05	medium	swisspassw.web.app	Sinkholed

ThreatFox

No alerts detected

JavaScript (15)

	URL	Size	First Seen	Last Seen
	swisspassw.web.app/runtime.e924d9a47904ada6.js	906 B	2023-06-27	2024-05-05
Pretty URL swisspassw.web.app/runtime.e924d9a47904ada6.js IP 199.36.158.100 ASN #54113 FASTLY Introduced by scriptElement Embedded in HTML false Observations First Seen2023-06-27 13:35:03 Last Seen2024-05-05 06:32:48 Times Seen62 Hash a4b2d19b8ec7528417767d8f2216c434 c6a189113cbbe4af348ae4a79f0d19c7eabc89f5 c5f551fe89e8cf17079581655a25f6f98278e2af45acba28bf4459ee381381bc Loading...

	www.google.com/recaptcha/api2/anchor?ar=1&k=6LeWd-MmAAAAAOeCl5Zh40uEkfyrZL5Zb5bD99eS&co=aHR0cHM6Ly9zd2lzc3Bhc3N3LndlYi5hcHA6NDQz&hl=en&type=image&v=V6_85qpc2Xf2sbe3xTnRte7m&theme=light&size=normal&cb=k2nv7cppxjes	69 B	2023-03-07	2024-05-18
Pretty URL www.google.com/recaptcha/api2/anchor?ar=1&k=6LeWd-MmAAAAAOeCl5Zh40uEkfyrZL5Zb5bD99eS&co=aHR0cHM6Ly9zd2lzc3Bhc3N3LndlYi5hcHA6NDQz&hl=en&type=image&v=V6_85qpc2Xf2sbe3xTnRte7m&theme=light&size=normal&cb=k2nv7cppxjes IP 142.250.74.132 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 01:02:05 Last Seen2024-05-18 17:26:55 Times Seen102448 Hash 45ecf7458f42da80ac248ad42d610372 a5b3edf8328769bc754e6e616a957ceed4fdadd7 75867e75b209895995014b43c3d711476e3437481e5fbec91a4da674302558bf Loading...

	www.google.com/recaptcha/api.js?render=6Le1atImAAAAAOoqgPj15ERYT74xIEi9mAOZJ3UB	884 B	2024-05-05	2024-05-05
Pretty URL www.google.com/recaptcha/api.js?render=6Le1atImAAAAAOoqgPj15ERYT74xIEi9mAOZJ3UB IP 142.250.74.132 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML false Observations First Seen2024-05-05 06:32:47 Last Seen2024-05-05 06:32:47 Times Seen1 Hash 1fb158c59ed53d1acaeeb042d104e8e7 4bfe02347677f8eb7528d835529a2f7c76b8a34f 7965d6f3e90497bca2cdf03105a1f3800f4420c05f4be1000f2bfed3abb49313 Loading...

	swisspassw.web.app/scripts.091d6b0ce5fdf8b6.js	243 kB	2023-06-27	2024-05-05
Pretty URL swisspassw.web.app/scripts.091d6b0ce5fdf8b6.js IP 199.36.158.100 ASN #54113 FASTLY Introduced by scriptElement Embedded in HTML false Observations First Seen2023-06-27 13:35:03 Last Seen2024-05-05 06:32:48 Times Seen62 Hash b827453b7770ac4c69da35c01d8944ec 0d9a85d5d6630ea22f80fa1a2a43e4a1ae398dbb b186b727b5ce7c7b8f2ffb4bf0fc810c7081777e187ca1c9120054af21f2e9bd Loading...

	www.gstatic.com/recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/recaptcha__en.js	518 kB	2024-04-24	2024-05-15
Pretty URL www.gstatic.com/recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/recaptcha__en.js IP 142.250.74.35 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML false Observations First Seen2024-04-24 09:18:30 Last Seen2024-05-15 19:10:18 Times Seen9003 Hash e2e79d6b927169d9e0e57e3baecc0993 1299473950b2999ba0b7f39bd5e4a60eafd1819d 231336ed913a5ebd4445b85486e053caf2b81cab91318241375f3f7a245b6c6b Loading...

	www.google.com/recaptcha/api2/anchor?ar=1&k=6Le1atImAAAAAOoqgPj15ERYT74xIEi9mAOZJ3UB&co=aHR0cHM6Ly9zd2lzc3Bhc3N3LndlYi5hcHA6NDQz&hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&size=invisible&cb=ih3p6zp4xru3	0 B	2023-03-07	2024-05-18
Pretty URL www.google.com/recaptcha/api2/anchor?ar=1&k=6Le1atImAAAAAOoqgPj15ERYT74xIEi9mAOZJ3UB&co=aHR0cHM6Ly9zd2lzc3Bhc3N3LndlYi5hcHA6NDQz&hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&size=invisible&cb=ih3p6zp4xru3 IP 142.250.74.132 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 01:01:59 Last Seen2024-05-18 18:07:18 Times Seen37792530 Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Loading...

	www.google.com/recaptcha/api2/anchor?ar=1&k=6LeWd-MmAAAAAOeCl5Zh40uEkfyrZL5Zb5bD99eS&co=aHR0cHM6Ly9zd2lzc3Bhc3N3LndlYi5hcHA6NDQz&hl=en&type=image&v=V6_85qpc2Xf2sbe3xTnRte7m&theme=light&size=normal&cb=k2nv7cppxjes	37 kB	2024-05-05	2024-05-05
Pretty URL www.google.com/recaptcha/api2/anchor?ar=1&k=6LeWd-MmAAAAAOeCl5Zh40uEkfyrZL5Zb5bD99eS&co=aHR0cHM6Ly9zd2lzc3Bhc3N3LndlYi5hcHA6NDQz&hl=en&type=image&v=V6_85qpc2Xf2sbe3xTnRte7m&theme=light&size=normal&cb=k2nv7cppxjes IP 142.250.74.132 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML true Observations First Seen2024-05-05 06:32:47 Last Seen2024-05-05 06:32:47 Times Seen1 Hash a5a81840b4060003a07f7d36a0867be3 79db8a2a6f354e2a454416c3a3e68a59880c384e 224fdffda9b9974b226a5783ab8b358ee7419cfa6d5d4e942b4aa097f2363537 Loading...

	www.google.com/recaptcha/api.js?onload=ngx_captcha_onload_callback&render=explicit	922 B	2024-04-29	2024-05-05
Pretty URL www.google.com/recaptcha/api.js?onload=ngx_captcha_onload_callback&render=explicit IP 142.250.74.132 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML false Observations First Seen2024-04-29 11:50:12 Last Seen2024-05-05 06:32:47 Times Seen2 Hash 74c845a35b2074635a14c8dde911586d 558414679f27543341df3fec8d594c990952a8cb a0f066e20549998bcc54a66136a479a4cece77d4ba02bcdeae2bf96465968e16 Loading...

	swisspassw.web.app/polyfills.32d5f514e297e910.js	34 kB	2023-06-27	2024-05-05
Pretty URL swisspassw.web.app/polyfills.32d5f514e297e910.js IP 199.36.158.100 ASN #54113 FASTLY Introduced by scriptElement Embedded in HTML false Observations First Seen2023-06-27 13:35:03 Last Seen2024-05-05 06:32:48 Times Seen62 Hash 4abde9d9176a195d0d7cb4f831aa53ba 45a8db30f20d826ee7b7dc03dd62df7dc8a99e0e dac04789e3aae2d5ca56624b7c1678f3b2003d1df6e1bb450d66b827f1d4274b Loading...

	swisspassw.web.app/main.be424fe2253682fd.js	410 kB	2023-07-02	2024-05-05
Pretty URL swisspassw.web.app/main.be424fe2253682fd.js IP 199.36.158.100 ASN #54113 FASTLY Introduced by scriptElement Embedded in HTML false Observations First Seen2023-07-02 02:31:11 Last Seen2024-05-05 06:32:48 Times Seen44 Hash 0c6f0e3cdc0e0631c5b51d7833bd42eb 238a620e6b3f7a62e5d2d17816110287187c6ed2 c0695695a3255532f5ca7f5ff925f0540b0dd4644dcd59c1cafb70b90ea12e00 Loading...

	www.google.com/js/bg/bUdxsAjTAIzRSD77hvzEWafZZa_dWpPwAsOs2AXeH2g.js	18 kB	2024-05-04	2024-05-07
Pretty URL www.google.com/js/bg/bUdxsAjTAIzRSD77hvzEWafZZa_dWpPwAsOs2AXeH2g.js IP 142.250.74.132 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML false Observations First Seen2024-05-04 09:24:38 Last Seen2024-05-07 08:50:39 Times Seen404 Hash 85eff967b6703760e0e562179e7ef0ef a4567db32ae2ea7049209561d2edde3d26fbef88 6d4771b008d3008cd1483efb86fcc459a7d965afdd5a93f002c3acd805de1f68 Loading...

		Size	First Seen	Last Seen
	#1 Eval - d9999ad74f6dcd7921cdd3c6ff94d667	22 kB	2024-05-05	2024-05-05
Pretty Observations First Seen2024-05-05 06:32:47 Last Seen2024-05-05 06:32:48 Times Seen1 Hash d9999ad74f6dcd7921cdd3c6ff94d667 a583d79af995967e4e1aeb29e3ddc41836259ab9 3ee462ed4ffc44cfba4ef3241fa2fd9acb926ffa3bc16fe73fe466870410f2b2 Loading...

	#2 Eval - 152170d0c4271e22b55c58e901f1f72f	22 B	2024-05-04	2024-05-07
Pretty Observations First Seen2024-05-04 09:24:39 Last Seen2024-05-07 08:50:39 Times Seen185 Hash 152170d0c4271e22b55c58e901f1f72f 7cc7ea9a692c3628a6e190fc83264e21edde0e83 d326f2ef57bd940263696cf3fe3e14550533c05aff6c49b57344194ef5020098 Loading...

	#3 Eval - d1000527aabb87c257f29a793d5266fe	22 B	2024-05-04	2024-05-07
Pretty Observations First Seen2024-05-04 09:24:39 Last Seen2024-05-07 08:50:39 Times Seen183 Hash d1000527aabb87c257f29a793d5266fe d86e2c79142dfb993c45975a641d6802db5f3ebc d11bcb7fb83f4a8ca60b457ea7c21ed9404fe1be9456d83a4920d0727dc5f997 Loading...

	#4 Eval - 7e90d6445aa6a3fc19f5b588039165e6	62 B	2024-05-04	2024-05-07
Pretty Observations First Seen2024-05-04 09:24:39 Last Seen2024-05-07 08:50:39 Times Seen183 Hash 7e90d6445aa6a3fc19f5b588039165e6 2f452470a6de5fe335a30304a12011698a93abd9 6afe1ae264e963d39e836f69f62c410a066a104935fd188bda3d98d71e0e5c06 Loading...

HTTP Transactions (34)

URL IP Response Size

swisspassw.web.app/

199.36.158.100

200 OK

298 B

URL User Request GET HTTP/2
swisspassw.web.app/
IP
199.36.158.100:443
ASN
#54113 FASTLY

Certificate
IssuerGoogle Trust Services LLC
Subjectweb.app
Fingerprint6C:B8:FC:5E:5B:DF:AB:31:E6:02:C5:A6:D8:E2:D0:77:BB:5D:BC:7B
ValidityThu, 21 Mar 2024 15:14:42 GMT - Wed, 19 Jun 2024 15:14:41 GMT

File type
HTML document, ASCII text
Size
298 B (298 bytes)
Hash
8cab72510a54b7baa0271a0f69b09a9f
c175428b1e4dd558fa379f781feb5bb367b23280
5cbfc168172cb3b0b88a281e154bf685d07b6ac6bfea4d4bebaf75c196e68566

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - SwissPass
OpenPhish	phishing	SBB
PhishTank	phishing	Other
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET / HTTP/1.1
Host: swisspassw.web.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
cache-control: max-age=3600
content-encoding: br
content-type: text/html; charset=utf-8
etag: "472172384de5e7e752672e575a5920352461186915cc2382dba660c7f902aca1-br"
last-modified: Fri, 30 Jun 2023 14:56:02 GMT
strict-transport-security: max-age=31556926; includeSubDomains; preload
accept-ranges: bytes
date: Sun, 05 May 2024 04:32:18 GMT
x-served-by: cache-hel1410027-HEL
x-cache: MISS
x-cache-hits: 0
x-timer: S1714883538.249767,VS0,VE216
vary: x-fh-requested-host, accept-encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 298
X-Firefox-Spdy: h2

swisspassw.web.app/runtime.e924d9a47904ada6.js

199.36.158.100

200 OK

517 B

URL GET HTTP/3
swisspassw.web.app/runtime.e924d9a47904ada6.js
IP
199.36.158.100:443
ASN
#54113 FASTLY

Requested by
https://swisspassw.web.app/
Certificate
IssuerGoogle Trust Services LLC
Subjectweb.app
Fingerprint6C:B8:FC:5E:5B:DF:AB:31:E6:02:C5:A6:D8:E2:D0:77:BB:5D:BC:7B
ValidityThu, 21 Mar 2024 15:14:42 GMT - Wed, 19 Jun 2024 15:14:41 GMT

File type
JavaScript source, ASCII text, with very long lines (906), with no line terminators
Size
517 B (517 bytes)
Hash
a4b2d19b8ec7528417767d8f2216c434
c6a189113cbbe4af348ae4a79f0d19c7eabc89f5
c5f551fe89e8cf17079581655a25f6f98278e2af45acba28bf4459ee381381bc

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - SwissPass
OpenPhish	phishing	SBB
PhishTank	phishing	Other
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /runtime.e924d9a47904ada6.js HTTP/1.1
Host: swisspassw.web.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://swisspassw.web.app/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
content-length: 517
cache-control: max-age=3600
content-encoding: br
content-type: text/javascript; charset=utf-8
etag: "358c76d39989f5f101f5e4584023812f15e15de5a5abfc4b723aedb2410d112f-br"
last-modified: Fri, 30 Jun 2023 14:56:02 GMT
strict-transport-security: max-age=31556926; includeSubDomains; preload
accept-ranges: bytes
date: Sun, 05 May 2024 04:32:18 GMT
x-served-by: cache-hel1410034-HEL
x-cache: MISS
x-cache-hits: 0
x-timer: S1714883539.793886,VS0,VE104
vary: x-fh-requested-host, accept-encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400

swisspassw.web.app/scripts.091d6b0ce5fdf8b6.js

199.36.158.100

200 OK

55 kB

URL GET HTTP/3
swisspassw.web.app/scripts.091d6b0ce5fdf8b6.js
IP
199.36.158.100:443
ASN
#54113 FASTLY

Requested by
https://swisspassw.web.app/
Certificate
IssuerGoogle Trust Services LLC
Subjectweb.app
Fingerprint6C:B8:FC:5E:5B:DF:AB:31:E6:02:C5:A6:D8:E2:D0:77:BB:5D:BC:7B
ValidityThu, 21 Mar 2024 15:14:42 GMT - Wed, 19 Jun 2024 15:14:41 GMT

File type
JavaScript source, ASCII text, with very long lines (65536), with no line terminators
Size
55 kB (54777 bytes)
Hash
b827453b7770ac4c69da35c01d8944ec
0d9a85d5d6630ea22f80fa1a2a43e4a1ae398dbb
b186b727b5ce7c7b8f2ffb4bf0fc810c7081777e187ca1c9120054af21f2e9bd

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - SwissPass
OpenPhish	phishing	SBB
PhishTank	phishing	Other
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /scripts.091d6b0ce5fdf8b6.js HTTP/1.1
Host: swisspassw.web.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://swisspassw.web.app/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
content-length: 54777
cache-control: max-age=3600
content-encoding: br
content-type: text/javascript; charset=utf-8
etag: "e97a4a98f46a4c72b9769a677b6d916c8bd0cdb8e8e444ec266c2aae8f2f1a34-br"
last-modified: Fri, 30 Jun 2023 14:56:02 GMT
strict-transport-security: max-age=31556926; includeSubDomains; preload
accept-ranges: bytes
date: Sun, 05 May 2024 04:32:18 GMT
x-served-by: cache-hel1410034-HEL
x-cache: MISS
x-cache-hits: 0
x-timer: S1714883539.795867,VS0,VE115
vary: x-fh-requested-host, accept-encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400

swisspassw.web.app/styles.ef46db3751d8e999.css

199.36.158.100

200 OK

0 B

URL GET HTTP/3
swisspassw.web.app/styles.ef46db3751d8e999.css
IP
199.36.158.100:443
ASN
#54113 FASTLY

Requested by
https://swisspassw.web.app/
Certificate
IssuerGoogle Trust Services LLC
Subjectweb.app
Fingerprint6C:B8:FC:5E:5B:DF:AB:31:E6:02:C5:A6:D8:E2:D0:77:BB:5D:BC:7B
ValidityThu, 21 Mar 2024 15:14:42 GMT - Wed, 19 Jun 2024 15:14:41 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - SwissPass
OpenPhish	phishing	SBB
PhishTank	phishing	Other
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /styles.ef46db3751d8e999.css HTTP/1.1
Host: swisspassw.web.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://swisspassw.web.app/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
content-length: 0
cache-control: max-age=3600
content-type: text/css; charset=utf-8
etag: "46b50c321b39e89a491b6727a01628c34245605a30beb3e7414c5e01cff90e6e"
last-modified: Fri, 30 Jun 2023 14:56:02 GMT
strict-transport-security: max-age=31556926; includeSubDomains; preload
accept-ranges: bytes
date: Sun, 05 May 2024 04:32:18 GMT
x-served-by: cache-hel1410034-HEL
x-cache: MISS
x-cache-hits: 0
x-timer: S1714883539.793391,VS0,VE164
vary: x-fh-requested-host, accept-encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400

swisspassw.web.app/polyfills.32d5f514e297e910.js

199.36.158.100

200 OK

11 kB

URL GET HTTP/3
swisspassw.web.app/polyfills.32d5f514e297e910.js
IP
199.36.158.100:443
ASN
#54113 FASTLY

Requested by
https://swisspassw.web.app/
Certificate
IssuerGoogle Trust Services LLC
Subjectweb.app
Fingerprint6C:B8:FC:5E:5B:DF:AB:31:E6:02:C5:A6:D8:E2:D0:77:BB:5D:BC:7B
ValidityThu, 21 Mar 2024 15:14:42 GMT - Wed, 19 Jun 2024 15:14:41 GMT

File type
JavaScript source, ASCII text, with very long lines (33790), with no line terminators
Size
11 kB (10921 bytes)
Hash
4abde9d9176a195d0d7cb4f831aa53ba
45a8db30f20d826ee7b7dc03dd62df7dc8a99e0e
dac04789e3aae2d5ca56624b7c1678f3b2003d1df6e1bb450d66b827f1d4274b

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - SwissPass
OpenPhish	phishing	SBB
PhishTank	phishing	Other
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /polyfills.32d5f514e297e910.js HTTP/1.1
Host: swisspassw.web.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://swisspassw.web.app/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
content-length: 10921
cache-control: max-age=3600
content-encoding: br
content-type: text/javascript; charset=utf-8
etag: "6046eeef263174ba8df79019f06523726de35d6a7b34b9b5dffc2b88bf2dfb6b-br"
last-modified: Fri, 30 Jun 2023 14:56:02 GMT
strict-transport-security: max-age=31556926; includeSubDomains; preload
accept-ranges: bytes
date: Sun, 05 May 2024 04:32:18 GMT
x-served-by: cache-hel1410034-HEL
x-cache: MISS
x-cache-hits: 0
x-timer: S1714883539.794797,VS0,VE191
vary: x-fh-requested-host, accept-encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400

swisspassw.web.app/main.be424fe2253682fd.js

199.36.158.100

200 OK

89 kB

URL GET HTTP/3
swisspassw.web.app/main.be424fe2253682fd.js
IP
199.36.158.100:443
ASN
#54113 FASTLY

Requested by
https://swisspassw.web.app/
Certificate
IssuerGoogle Trust Services LLC
Subjectweb.app
Fingerprint6C:B8:FC:5E:5B:DF:AB:31:E6:02:C5:A6:D8:E2:D0:77:BB:5D:BC:7B
ValidityThu, 21 Mar 2024 15:14:42 GMT - Wed, 19 Jun 2024 15:14:41 GMT

File type
JavaScript source, ASCII text, with very long lines (65536), with no line terminators
Size
89 kB (89141 bytes)
Hash
0c6f0e3cdc0e0631c5b51d7833bd42eb
238a620e6b3f7a62e5d2d17816110287187c6ed2
c0695695a3255532f5ca7f5ff925f0540b0dd4644dcd59c1cafb70b90ea12e00

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - SwissPass
urlquery	suspicious	Suspicious - Suspicious Javascript code
OpenPhish	phishing	SBB
PhishTank	phishing	Other
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /main.be424fe2253682fd.js HTTP/1.1
Host: swisspassw.web.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://swisspassw.web.app/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
content-length: 89141
cache-control: max-age=3600
content-encoding: br
content-type: text/javascript; charset=utf-8
etag: "0d30076589bfafd526776408dffb14196af1a9026e0786c4bf570061c9aed86e-br"
last-modified: Fri, 30 Jun 2023 14:56:02 GMT
strict-transport-security: max-age=31556926; includeSubDomains; preload
accept-ranges: bytes
date: Sun, 05 May 2024 04:32:18 GMT
x-served-by: cache-hel1410034-HEL
x-cache: MISS
x-cache-hits: 0
x-timer: S1714883539.796872,VS0,VE192
vary: x-fh-requested-host, accept-encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400

www.google.com/recaptcha/api.js?render=6Le1atImAAAAAOoqgPj15ERYT74xIEi9mAOZJ3UB

142.250.74.132

200 OK

20 kB

URL GET HTTP/2
www.google.com/recaptcha/api.js?render=6Le1atImAAAAAOoqgPj15ERYT74xIEi9mAOZJ3UB
IP
142.250.74.132:443
ASN
#15169 GOOGLE

Requested by
https://swisspassw.web.app/
Certificate
IssuerGoogle Trust Services LLC
Subjectwww.google.com
FingerprintC6:A2:DC:31:5A:53:FA:DD:55:71:A3:F4:DD:43:3D:16:71:B8:B3:99
ValidityTue, 16 Apr 2024 04:20:32 GMT - Tue, 09 Jul 2024 04:20:31 GMT

File type
gzip compressed data
Size
20 kB (20035 bytes)
Hash
bf5fcdeb61ebbe8107e0fc73b2a11739
4edd37f167cf87d6ae7e6a06bda009a453da0780
73a1d11f8ac314aea18b5560e7ad6097b698755f4ad220df2f7c1badaa31f479

HTTP Headers

GET /recaptcha/api.js?render=6Le1atImAAAAAOoqgPj15ERYT74xIEi9mAOZJ3UB HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://swisspassw.web.app/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: text/javascript; charset=utf-8
expires: Sun, 05 May 2024 04:32:18 GMT
date: Sun, 05 May 2024 04:32:18 GMT
cache-control: private, max-age=300
cross-origin-resource-policy: cross-origin
content-encoding: gzip
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
x-xss-protection: 1; mode=block
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

swisspassw.web.app/fonts/icomoon/icomoon.woff2?7m5yri

199.36.158.100

200 OK

716 B

URL GET HTTP/3
swisspassw.web.app/fonts/icomoon/icomoon.woff2?7m5yri
IP
199.36.158.100:443
ASN
#54113 FASTLY

Requested by
https://swisspassw.web.app/
Certificate
IssuerGoogle Trust Services LLC
Subjectweb.app
Fingerprint6C:B8:FC:5E:5B:DF:AB:31:E6:02:C5:A6:D8:E2:D0:77:BB:5D:BC:7B
ValidityThu, 21 Mar 2024 15:14:42 GMT - Wed, 19 Jun 2024 15:14:41 GMT

File type
HTML document, ASCII text
Size
716 B (716 bytes)
Hash
8cab72510a54b7baa0271a0f69b09a9f
c175428b1e4dd558fa379f781feb5bb367b23280
5cbfc168172cb3b0b88a281e154bf685d07b6ac6bfea4d4bebaf75c196e68566

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - SwissPass
OpenPhish	phishing	SBB
PhishTank	phishing	Other
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /fonts/icomoon/icomoon.woff2?7m5yri HTTP/1.1
Host: swisspassw.web.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://swisspassw.web.app/assets/css/sso.min-20200819.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
content-length: 716
cache-control: max-age=3600
content-type: text/html; charset=utf-8
etag: "472172384de5e7e752672e575a5920352461186915cc2382dba660c7f902aca1"
last-modified: Fri, 30 Jun 2023 14:56:02 GMT
strict-transport-security: max-age=31556926; includeSubDomains; preload
accept-ranges: bytes
date: Sun, 05 May 2024 04:32:19 GMT
x-served-by: cache-hel1410034-HEL
x-cache: MISS
x-cache-hits: 0
x-timer: S1714883540.524429,VS0,VE89
vary: x-fh-requested-host, accept-encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400

cdn.app.sbb.ch/fonts/v1_6_subset/SBBWeb-Light.woff2

35.158.198.127

200 OK

14 kB

URL GET HTTP/2
cdn.app.sbb.ch/fonts/v1_6_subset/SBBWeb-Light.woff2
IP
35.158.198.127:443
ASN
#16509 AMAZON-02

Requested by
https://swisspassw.web.app/
Certificate
IssuerAmazon
Subject*.app.sbb.ch
Fingerprint91:97:68:15:9B:1D:9F:0F:5B:C1:DB:F4:EE:DC:A6:EC:4A:2A:09:71
ValidityWed, 16 Aug 2023 00:00:00 GMT - Fri, 13 Sep 2024 23:59:59 GMT

File type
Web Open Font Format (Version 2), TrueType, length 14212, version 1.0
Size
14 kB (14212 bytes)
Hash
8b70a44a98a0ac5d721df7d8f5136f7b
10e10c01e732f3d35a78e1051bfcc9fe2589ddda
5c7f0e173844556da7ca5eb8936fa3dab1c00206960920a49a1eea9cde2bfaaf

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - SwissPass

HTTP Headers

GET /fonts/v1_6_subset/SBBWeb-Light.woff2 HTTP/1.1
Host: cdn.app.sbb.ch
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://swisspassw.web.app
DNT: 1
Connection: keep-alive
Referer: https://swisspassw.web.app/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Sun, 05 May 2024 04:32:19 GMT
content-type: application/font-woff2
content-length: 14212
server: nginx/1.25.5
last-modified: Wed, 31 Jan 2024 10:14:44 GMT
vary: Accept-Encoding
etag: "65ba1d94-3784"
expires: Mon, 05 May 2025 04:32:19 GMT
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS
access-control-allow-headers: Accept,Authorization,Cache-Control,Content-Type,DNT,If-Modified-Since,Keep-Alive,Origin,User-Agent,X-Mx-ReqToken,X-Requested-With
cache-control: max-age=31536000, public, private
accept-ranges: bytes
set-cookie: 9527f1a32486d650b0687919ffd41c2b=a3ed87b2dc9abb853daf697c7a2ecf62; path=/; HttpOnly; Secure; SameSite=None
X-Firefox-Spdy: h2

swisspassw.web.app/fonts/icomoon/icomoon.ttf?7m5yri

199.36.158.100

200 OK

298 B

URL GET HTTP/3
swisspassw.web.app/fonts/icomoon/icomoon.ttf?7m5yri
IP
199.36.158.100:443
ASN
#54113 FASTLY

Requested by
https://swisspassw.web.app/
Certificate
IssuerGoogle Trust Services LLC
Subjectweb.app
Fingerprint6C:B8:FC:5E:5B:DF:AB:31:E6:02:C5:A6:D8:E2:D0:77:BB:5D:BC:7B
ValidityThu, 21 Mar 2024 15:14:42 GMT - Wed, 19 Jun 2024 15:14:41 GMT

File type
HTML document, ASCII text
Size
298 B (298 bytes)
Hash
8cab72510a54b7baa0271a0f69b09a9f
c175428b1e4dd558fa379f781feb5bb367b23280
5cbfc168172cb3b0b88a281e154bf685d07b6ac6bfea4d4bebaf75c196e68566

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - SwissPass
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /fonts/icomoon/icomoon.ttf?7m5yri HTTP/1.1
Host: swisspassw.web.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://swisspassw.web.app/assets/css/sso.min-20200819.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
content-length: 298
cache-control: max-age=3600
content-encoding: br
content-type: text/html; charset=utf-8
etag: "472172384de5e7e752672e575a5920352461186915cc2382dba660c7f902aca1-br"
last-modified: Fri, 30 Jun 2023 14:56:02 GMT
strict-transport-security: max-age=31556926; includeSubDomains; preload
accept-ranges: bytes
date: Sun, 05 May 2024 04:32:19 GMT
x-served-by: cache-hel1410034-HEL
x-cache: MISS
x-cache-hits: 0
x-timer: S1714883540.637010,VS0,VE88
vary: x-fh-requested-host, accept-encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400

ocsp.swisssign.ch/sign/ocs-aaccced5-66e8-4069-9b1b-fd29ab73efec

23.36.79.11

6.9 kB

URL
ocsp.swisssign.ch/sign/ocs-aaccced5-66e8-4069-9b1b-fd29ab73efec
IP
23.36.79.11:0
ASN
#20940 Akamai International B.V.

File type
data
Size
6.9 kB (6897 bytes)
Hash
56a801dccfcbfc1ec75d21c0ce3bb92f
2c4c4e6e964c88af97a2b7223016dbc92dfc599a
a3ced486a0086d2f458951fe5127e74a980763839eb730db311759bcd9f87012

HTTP Headers

POST /sign/ocs-aaccced5-66e8-4069-9b1b-fd29ab73efec HTTP/1.1
Host: ocsp.swisssign.ch
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 87
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 6897
Strict-Transport-Security: max-age=31536000; includeSubDomains
Cache-Control: max-age=3600
Expires: Sun, 05 May 2024 05:32:19 GMT
Date: Sun, 05 May 2024 04:32:19 GMT
Connection: keep-alive

swisspassw.web.app/fonts/icomoon/icomoon.woff?7m5yri

199.36.158.100

200 OK

716 B

URL GET HTTP/3
swisspassw.web.app/fonts/icomoon/icomoon.woff?7m5yri
IP
199.36.158.100:443
ASN
#54113 FASTLY

Requested by
https://swisspassw.web.app/
Certificate
IssuerGoogle Trust Services LLC
Subjectweb.app
Fingerprint6C:B8:FC:5E:5B:DF:AB:31:E6:02:C5:A6:D8:E2:D0:77:BB:5D:BC:7B
ValidityThu, 21 Mar 2024 15:14:42 GMT - Wed, 19 Jun 2024 15:14:41 GMT

File type
HTML document, ASCII text
Size
716 B (716 bytes)
Hash
8cab72510a54b7baa0271a0f69b09a9f
c175428b1e4dd558fa379f781feb5bb367b23280
5cbfc168172cb3b0b88a281e154bf685d07b6ac6bfea4d4bebaf75c196e68566

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - SwissPass
OpenPhish	phishing	SBB
PhishTank	phishing	Other
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /fonts/icomoon/icomoon.woff?7m5yri HTTP/1.1
Host: swisspassw.web.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://swisspassw.web.app/assets/css/sso.min-20200819.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
content-length: 716
cache-control: max-age=3600
content-type: text/html; charset=utf-8
etag: "472172384de5e7e752672e575a5920352461186915cc2382dba660c7f902aca1"
last-modified: Fri, 30 Jun 2023 14:56:02 GMT
strict-transport-security: max-age=31556926; includeSubDomains; preload
accept-ranges: bytes
date: Sun, 05 May 2024 04:32:19 GMT
x-served-by: cache-hel1410034-HEL
x-cache: MISS
x-cache-hits: 0
x-timer: S1714883540.765884,VS0,VE70
vary: x-fh-requested-host, accept-encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400

www.swisspass.ch//resources/img/logo-20200819.svg

193.203.121.166

200 OK

7.4 kB

URL GET HTTP/1.1
www.swisspass.ch//resources/img/logo-20200819.svg
IP
193.203.121.166:443
ASN
#31004 Schweizerische Bundesbahnen SBB

Requested by
https://swisspassw.web.app/
Certificate
IssuerSwissSign AG
Subjectswisspass.ch
Fingerprint0F:CC:F3:F9:E7:22:13:51:BD:03:15:EE:A8:31:BE:24:0B:CA:37:16
ValidityThu, 14 Mar 2024 05:50:58 GMT - Fri, 14 Mar 2025 05:50:58 GMT

File type
SVG Scalable Vector Graphics image
Size
7.4 kB (7374 bytes)
Hash
795242580bfa3135028bd0750fdc1654
2c344b6662e62ddbdba49f635e1c33a827fe75d4
deeee170c3759a6ed35c0c05c5b935d0e7638f1c0c5677166918ecff6edb1909

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - SwissPass

HTTP Headers

GET //resources/img/logo-20200819.svg HTTP/1.1
Host: www.swisspass.ch
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://swisspassw.web.app/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Sun, 05 May 2024 04:32:19 GMT
Server: Apache
Content-Length: 7374
last-modified: Fri, 26 Apr 2024 10:42:00 GMT
etag: "662b84f8-1cce"
expires: Mon, 05 May 2025 04:32:19 GMT
accept-ranges: bytes
cache-control: max-age=31536000, private
X-Frame-Options: SAMEORIGIN
Strict-Transport-Security: max-age=16070400
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Referrer-Policy: same-origin
Feature-Policy: autoplay 'self'; camera 'self'; display-capture 'self'; document-domain 'self'; encrypted-media 'self'; fullscreen 'self'; geolocation 'self'; microphone 'self'; midi 'self'; payment 'self'; xr-spatial-tracking 'self'
Set-Cookie: AL_SESS-S=AZy7yevN5zqEC7veHVCfYNSvd_PsOhJeAu8m6sqYmiAdNFVv7LnR46FYbp13TtqNhRgE; Path=/; Domain=.swisspass.ch; Secure; HttpOnly; SameSite=None
Keep-Alive: timeout=10, max=500
Connection: Keep-Alive
Content-Type: image/svg+xml

ocsp.swisssign.ch/sign/ocs-aaccced5-66e8-4069-9b1b-fd29ab73efec

23.36.79.11

6.9 kB

URL
ocsp.swisssign.ch/sign/ocs-aaccced5-66e8-4069-9b1b-fd29ab73efec
IP
23.36.79.11:0
ASN
#20940 Akamai International B.V.

File type
data
Size
6.9 kB (6897 bytes)
Hash
56a801dccfcbfc1ec75d21c0ce3bb92f
2c4c4e6e964c88af97a2b7223016dbc92dfc599a
a3ced486a0086d2f458951fe5127e74a980763839eb730db311759bcd9f87012

HTTP Headers

POST /sign/ocs-aaccced5-66e8-4069-9b1b-fd29ab73efec HTTP/1.1
Host: ocsp.swisssign.ch
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 87
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 6897
Strict-Transport-Security: max-age=31536000; includeSubDomains
Cache-Control: max-age=3600
Expires: Sun, 05 May 2024 05:32:19 GMT
Date: Sun, 05 May 2024 04:32:19 GMT
Connection: keep-alive

www.swisspass.ch//resources/img/logo_text_de-20200819.svg

193.203.121.166

200 OK

140 kB

URL GET HTTP/1.1
www.swisspass.ch//resources/img/logo_text_de-20200819.svg
IP
193.203.121.166:443
ASN
#31004 Schweizerische Bundesbahnen SBB

Requested by
https://swisspassw.web.app/
Certificate
IssuerSwissSign AG
Subjectswisspass.ch
Fingerprint0F:CC:F3:F9:E7:22:13:51:BD:03:15:EE:A8:31:BE:24:0B:CA:37:16
ValidityThu, 14 Mar 2024 05:50:58 GMT - Fri, 14 Mar 2025 05:50:58 GMT

File type
SVG Scalable Vector Graphics image
Size
140 kB (139971 bytes)
Hash
512410d9227bb0c2481e175dce0eda72
1deb5d9f09592101e632a8351865d54b1d6a27f7
c337d42ed7979c6be0282900bd957dd9d112a430dc7761463d655eb8f0d9bc07

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - SwissPass

HTTP Headers

GET //resources/img/logo_text_de-20200819.svg HTTP/1.1
Host: www.swisspass.ch
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://swisspassw.web.app/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Sun, 05 May 2024 04:32:19 GMT
Server: Apache
Content-Length: 139971
last-modified: Fri, 26 Apr 2024 10:42:00 GMT
etag: "662b84f8-222c3"
expires: Mon, 05 May 2025 04:32:19 GMT
accept-ranges: bytes
cache-control: max-age=31536000, private
X-Frame-Options: SAMEORIGIN
Strict-Transport-Security: max-age=16070400
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Referrer-Policy: same-origin
Feature-Policy: autoplay 'self'; camera 'self'; display-capture 'self'; document-domain 'self'; encrypted-media 'self'; fullscreen 'self'; geolocation 'self'; microphone 'self'; midi 'self'; payment 'self'; xr-spatial-tracking 'self'
Set-Cookie: AL_SESS-S=AQXbPf2OVY8rEuGHcgbqto4f1k88IKZHTZc2a1A4nTvUS4L0cuhX3lS7gWt!uI_FxCCw; Path=/; Domain=.swisspass.ch; Secure; HttpOnly; SameSite=None
Keep-Alive: timeout=10, max=500
Connection: Keep-Alive
Content-Type: image/svg+xml

www.google.com/recaptcha/api.js?onload=ngx_captcha_onload_callback&render=explicit

142.250.74.132

200 OK

1.1 kB

URL GET HTTP/3
www.google.com/recaptcha/api.js?onload=ngx_captcha_onload_callback&render=explicit
IP
142.250.74.132:443
ASN
#15169 GOOGLE

Requested by
https://swisspassw.web.app/
Certificate
IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint7C:B7:E1:97:03:6E:82:B6:52:F8:EC:C6:C6:50:D9:DD:80:47:E6:A0
ValidityTue, 16 Apr 2024 03:18:53 GMT - Tue, 09 Jul 2024 03:18:52 GMT

File type
gzip compressed data
Size
1.1 kB (1055 bytes)
Hash
84347bc89bae44374a270d7892e68ea9
6ba7259fa9cc4b4eedfd79a4f94de9cc68fab76f
db4e2174e346215d9bfdfe1e243b2c0c26c9a1cd0f34e6b5b5cb7d41b873cfe8

HTTP Headers

GET /recaptcha/api.js?onload=ngx_captcha_onload_callback&render=explicit HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://swisspassw.web.app/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
content-type: text/javascript; charset=utf-8
expires: Sun, 05 May 2024 04:32:19 GMT
date: Sun, 05 May 2024 04:32:19 GMT
cache-control: private, max-age=300
cross-origin-resource-policy: cross-origin
content-encoding: gzip
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
x-xss-protection: 1; mode=block
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

www.gstatic.com/recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/recaptcha__en.js

142.250.74.35

200 OK

206 kB

URL GET HTTP/3
www.gstatic.com/recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/recaptcha__en.js
IP
142.250.74.35:443
ASN
#15169 GOOGLE

Requested by
https://www.google.com/recaptcha/api2/webworker.js?hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m
Certificate
IssuerGoogle Trust Services LLC
Subject*.gstatic.com
Fingerprint15:DD:05:B3:2F:D8:E3:54:C9:B4:FA:E4:AC:01:ED:C8:E1:EA:A7:AD
ValidityTue, 16 Apr 2024 04:17:07 GMT - Tue, 09 Jul 2024 04:17:06 GMT

File type
JavaScript source, ASCII text, with very long lines (631)
Size
206 kB (205803 bytes)
Hash
e2e79d6b927169d9e0e57e3baecc0993
1299473950b2999ba0b7f39bd5e4a60eafd1819d
231336ed913a5ebd4445b85486e053caf2b81cab91318241375f3f7a245b6c6b

HTTP Headers

GET /recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/recaptcha__en.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://swisspassw.web.app
DNT: 1
Connection: keep-alive
Referer: https://swisspassw.web.app/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 205803
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 02 May 2024 01:56:11 GMT
expires: Fri, 02 May 2025 01:56:11 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 22 Apr 2024 21:03:35 GMT
content-type: text/javascript
vary: Accept-Encoding
age: 268569
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

swisspassw.web.app/favicon.ico

199.36.158.100

200 OK

154 B

URL GET HTTP/3
swisspassw.web.app/favicon.ico
IP
199.36.158.100:443
ASN
#54113 FASTLY

Requested by
https://swisspassw.web.app/
Certificate
IssuerGoogle Trust Services LLC
Subjectweb.app
Fingerprint6C:B8:FC:5E:5B:DF:AB:31:E6:02:C5:A6:D8:E2:D0:77:BB:5D:BC:7B
ValidityThu, 21 Mar 2024 15:14:42 GMT - Wed, 19 Jun 2024 15:14:41 GMT

File type
MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel
Size
154 B (154 bytes)
Hash
6d866d9c4568bf7fc03e597e74ce7e28
e1b3d9f0e9cdcb785a94b6c1e1fe651a4ff98dcb
7c1925da382279a72f94990d0a1456f78918619f35780ea0905e4ae0db684677

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - SwissPass
OpenPhish	phishing	SBB
PhishTank	phishing	Other
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: swisspassw.web.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://swisspassw.web.app/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
content-length: 154
cache-control: max-age=3600
content-encoding: br
content-type: image/x-icon
etag: "a1c4bac984d1742493fe67c55c528bebd5b1db85e4afac0bd7027735bc225bee-br"
last-modified: Fri, 30 Jun 2023 14:56:02 GMT
strict-transport-security: max-age=31556926; includeSubDomains; preload
accept-ranges: bytes
date: Sun, 05 May 2024 04:32:20 GMT
x-served-by: cache-hel1410034-HEL
x-cache: MISS
x-cache-hits: 0
x-timer: S1714883540.997292,VS0,VE84
vary: x-fh-requested-host, accept-encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400

www.gstatic.com/recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/recaptcha__en.js

142.250.74.35

200 OK

206 kB

URL GET HTTP/3
www.gstatic.com/recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/recaptcha__en.js
IP
142.250.74.35:443
ASN
#15169 GOOGLE

Requested by
https://www.google.com/recaptcha/api2/webworker.js?hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m
Certificate
IssuerGoogle Trust Services LLC
Subject*.gstatic.com
Fingerprint15:DD:05:B3:2F:D8:E3:54:C9:B4:FA:E4:AC:01:ED:C8:E1:EA:A7:AD
ValidityTue, 16 Apr 2024 04:17:07 GMT - Tue, 09 Jul 2024 04:17:06 GMT

File type
JavaScript source, ASCII text, with very long lines (631)
Size
206 kB (205803 bytes)
Hash
e2e79d6b927169d9e0e57e3baecc0993
1299473950b2999ba0b7f39bd5e4a60eafd1819d
231336ed913a5ebd4445b85486e053caf2b81cab91318241375f3f7a245b6c6b

HTTP Headers

GET /recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/recaptcha__en.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://swisspassw.web.app
DNT: 1
Connection: keep-alive
Referer: https://swisspassw.web.app/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 205803
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 02 May 2024 01:56:11 GMT
expires: Fri, 02 May 2025 01:56:11 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 22 Apr 2024 21:03:35 GMT
content-type: text/javascript
vary: Accept-Encoding
age: 268569
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

www.gstatic.com/recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/styles__ltr.css

142.250.74.35

200 OK

25 kB

URL GET HTTP/3
www.gstatic.com/recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/styles__ltr.css
IP
142.250.74.35:443
ASN
#15169 GOOGLE

Requested by
https://www.google.com/recaptcha/api2/bframe?hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&k=6LeWd-MmAAAAAOeCl5Zh40uEkfyrZL5Zb5bD99eS
Certificate
IssuerGoogle Trust Services LLC
Subject*.gstatic.com
Fingerprint15:DD:05:B3:2F:D8:E3:54:C9:B4:FA:E4:AC:01:ED:C8:E1:EA:A7:AD
ValidityTue, 16 Apr 2024 04:17:07 GMT - Tue, 09 Jul 2024 04:17:06 GMT

File type
ASCII text, with very long lines (56412), with no line terminators
Size
25 kB (24617 bytes)
Hash
2c00b9f417b688224937053cd0c284a5
17b4c18ebc129055dd25f214c3f11e03e9df2d82
1e754b107428162c65a26d399b66db3daaea09616bf8620d9de4bc689ce48eed

HTTP Headers

GET /recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/styles__ltr.css HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 24617
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 03 May 2024 01:09:29 GMT
expires: Sat, 03 May 2025 01:09:29 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 22 Apr 2024 21:03:35 GMT
content-type: text/css
vary: Accept-Encoding
age: 184971
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

www.gstatic.com/recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/recaptcha__en.js

142.250.74.35

200 OK

206 kB

URL GET HTTP/3
www.gstatic.com/recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/recaptcha__en.js
IP
142.250.74.35:443
ASN
#15169 GOOGLE

Requested by
https://www.google.com/recaptcha/api2/webworker.js?hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m
Certificate
IssuerGoogle Trust Services LLC
Subject*.gstatic.com
Fingerprint15:DD:05:B3:2F:D8:E3:54:C9:B4:FA:E4:AC:01:ED:C8:E1:EA:A7:AD
ValidityTue, 16 Apr 2024 04:17:07 GMT - Tue, 09 Jul 2024 04:17:06 GMT

File type
JavaScript source, ASCII text, with very long lines (631)
Size
206 kB (205803 bytes)
Hash
e2e79d6b927169d9e0e57e3baecc0993
1299473950b2999ba0b7f39bd5e4a60eafd1819d
231336ed913a5ebd4445b85486e053caf2b81cab91318241375f3f7a245b6c6b

HTTP Headers

GET /recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/recaptcha__en.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 205803
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 02 May 2024 01:56:11 GMT
expires: Fri, 02 May 2025 01:56:11 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 22 Apr 2024 21:03:35 GMT
content-type: text/javascript
vary: Accept-Encoding
age: 268569
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

www.google.com/recaptcha/api2/anchor?ar=1&k=6LeWd-MmAAAAAOeCl5Zh40uEkfyrZL5Zb5bD99eS&co=aHR0cHM6Ly9zd2lzc3Bhc3N3LndlYi5hcHA6NDQz&hl=en&type=image&v=V6_85qpc2Xf2sbe3xTnRte7m&theme=light&size=normal&cb=k2nv7cppxjes

142.250.74.132

200 OK

234 kB

URL GET HTTP/3
www.google.com/recaptcha/api2/anchor?ar=1&k=6LeWd-MmAAAAAOeCl5Zh40uEkfyrZL5Zb5bD99eS&co=aHR0cHM6Ly9zd2lzc3Bhc3N3LndlYi5hcHA6NDQz&hl=en&type=image&v=V6_85qpc2Xf2sbe3xTnRte7m&theme=light&size=normal&cb=k2nv7cppxjes
IP
142.250.74.132:443
ASN
#15169 GOOGLE

Requested by
https://swisspassw.web.app/
Certificate
IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint7C:B7:E1:97:03:6E:82:B6:52:F8:EC:C6:C6:50:D9:DD:80:47:E6:A0
ValidityTue, 16 Apr 2024 03:18:53 GMT - Tue, 09 Jul 2024 03:18:52 GMT

File type
HTML document, ASCII text, with very long lines (37158)
Size
234 kB (234184 bytes)
Hash
2c081b73d00d8f2331fb737d0d477907
cde626639e013eb0869922575754430858af5cc3
22fc2aae07053fb9374b41de05a6a9718418b201d03eaefc02a3fd5a80f41582

HTTP Headers

GET /recaptcha/api2/anchor?ar=1&k=6LeWd-MmAAAAAOeCl5Zh40uEkfyrZL5Zb5bD99eS&co=aHR0cHM6Ly9zd2lzc3Bhc3N3LndlYi5hcHA6NDQz&hl=en&type=image&v=V6_85qpc2Xf2sbe3xTnRte7m&theme=light&size=normal&cb=k2nv7cppxjes HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://swisspassw.web.app/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
content-type: text/html; charset=utf-8
cross-origin-resource-policy: cross-origin
cross-origin-embedder-policy: require-corp
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Sun, 05 May 2024 04:32:20 GMT
content-security-policy: script-src 'nonce-FEP8TgoNQwvQtLd7RKZQ1Q' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2

216.58.207.227

200 OK

15 kB

URL GET HTTP/2
fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
IP
216.58.207.227:443
ASN
#15169 GOOGLE

Requested by
https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LeWd-MmAAAAAOeCl5Zh40uEkfyrZL5Zb5bD99eS&co=aHR0cHM6Ly9zd2lzc3Bhc3N3LndlYi5hcHA6NDQz&hl=en&type=image&v=V6_85qpc2Xf2sbe3xTnRte7m&theme=light&size=normal&cb=k2nv7cppxjes
Certificate
IssuerGoogle Trust Services LLC
Subject*.gstatic.com
Fingerprint15:DD:05:B3:2F:D8:E3:54:C9:B4:FA:E4:AC:01:ED:C8:E1:EA:A7:AD
ValidityTue, 16 Apr 2024 04:17:07 GMT - Tue, 09 Jul 2024 04:17:06 GMT

File type
Web Open Font Format (Version 2), TrueType, length 15344, version 1.0
Size
15 kB (15344 bytes)
Hash
5d4aeb4e5f5ef754e307d7ffaef688bd
06db651cdf354c64a7383ea9c77024ef4fb4cef8
3e253b66056519aa065b00a453bac37ac5ed8f3e6fe7b542e93a9dcdcc11d0bc

HTTP Headers

GET /s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.google.com
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15344
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 03 May 2024 16:31:04 GMT
expires: Sat, 03 May 2025 16:31:04 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 16 Oct 2017 17:32:55 GMT
content-type: font/woff2
age: 129676
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

www.gstatic.com/recaptcha/api2/logo_48.png

142.250.74.35

200 OK

2.2 kB

URL GET HTTP/3
www.gstatic.com/recaptcha/api2/logo_48.png
IP
142.250.74.35:443
ASN
#15169 GOOGLE

Requested by
https://www.google.com/recaptcha/api2/anchor?ar=1&k=6Le1atImAAAAAOoqgPj15ERYT74xIEi9mAOZJ3UB&co=aHR0cHM6Ly9zd2lzc3Bhc3N3LndlYi5hcHA6NDQz&hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&size=invisible&cb=ih3p6zp4xru3
Certificate
IssuerGoogle Trust Services LLC
Subject*.gstatic.com
Fingerprint15:DD:05:B3:2F:D8:E3:54:C9:B4:FA:E4:AC:01:ED:C8:E1:EA:A7:AD
ValidityTue, 16 Apr 2024 04:17:07 GMT - Tue, 09 Jul 2024 04:17:06 GMT

File type
PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Size
2.2 kB (2228 bytes)
Hash
ef9941290c50cd3866e2ba6b793f010d
4736508c795667dcea21f8d864233031223b7832
1b9efb22c938500971aac2b2130a475fa23684dd69e43103894968df83145b8a

HTTP Headers

GET /recaptcha/api2/logo_48.png HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.gstatic.com/recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/styles__ltr.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
accept-ranges: bytes
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 2228
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 02 May 2024 02:54:07 GMT
expires: Thu, 09 May 2024 02:54:07 GMT
cache-control: public, max-age=604800
age: 265093
last-modified: Tue, 03 Mar 2020 20:15:00 GMT
content-type: image/png
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2

216.58.207.227

200 OK

15 kB

URL GET HTTP/2
fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
IP
216.58.207.227:443
ASN
#15169 GOOGLE

Requested by
https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LeWd-MmAAAAAOeCl5Zh40uEkfyrZL5Zb5bD99eS&co=aHR0cHM6Ly9zd2lzc3Bhc3N3LndlYi5hcHA6NDQz&hl=en&type=image&v=V6_85qpc2Xf2sbe3xTnRte7m&theme=light&size=normal&cb=k2nv7cppxjes
Certificate
IssuerGoogle Trust Services LLC
Subject*.gstatic.com
Fingerprint15:DD:05:B3:2F:D8:E3:54:C9:B4:FA:E4:AC:01:ED:C8:E1:EA:A7:AD
ValidityTue, 16 Apr 2024 04:17:07 GMT - Tue, 09 Jul 2024 04:17:06 GMT

File type
Web Open Font Format (Version 2), TrueType, length 15344, version 1.0
Size
15 kB (15344 bytes)
Hash
5d4aeb4e5f5ef754e307d7ffaef688bd
06db651cdf354c64a7383ea9c77024ef4fb4cef8
3e253b66056519aa065b00a453bac37ac5ed8f3e6fe7b542e93a9dcdcc11d0bc

HTTP Headers

GET /s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.google.com
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15344
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 03 May 2024 16:31:04 GMT
expires: Sat, 03 May 2025 16:31:04 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 16 Oct 2017 17:32:55 GMT
content-type: font/woff2
age: 129676
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

www.google.com/js/bg/bUdxsAjTAIzRSD77hvzEWafZZa_dWpPwAsOs2AXeH2g.js

142.250.74.132

200 OK

7.5 kB

URL GET HTTP/3
www.google.com/js/bg/bUdxsAjTAIzRSD77hvzEWafZZa_dWpPwAsOs2AXeH2g.js
IP
142.250.74.132:443
ASN
#15169 GOOGLE

Requested by
https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LeWd-MmAAAAAOeCl5Zh40uEkfyrZL5Zb5bD99eS&co=aHR0cHM6Ly9zd2lzc3Bhc3N3LndlYi5hcHA6NDQz&hl=en&type=image&v=V6_85qpc2Xf2sbe3xTnRte7m&theme=light&size=normal&cb=k2nv7cppxjes
Certificate
IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint7C:B7:E1:97:03:6E:82:B6:52:F8:EC:C6:C6:50:D9:DD:80:47:E6:A0
ValidityTue, 16 Apr 2024 03:18:53 GMT - Tue, 09 Jul 2024 03:18:52 GMT

File type
JavaScript source, ASCII text, with very long lines (17649)
Size
7.5 kB (7493 bytes)
Hash
85eff967b6703760e0e562179e7ef0ef
a4567db32ae2ea7049209561d2edde3d26fbef88
6d4771b008d3008cd1483efb86fcc459a7d965afdd5a93f002c3acd805de1f68

HTTP Headers

GET /js/bg/bUdxsAjTAIzRSD77hvzEWafZZa_dWpPwAsOs2AXeH2g.js HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LeWd-MmAAAAAOeCl5Zh40uEkfyrZL5Zb5bD99eS&co=aHR0cHM6Ly9zd2lzc3Bhc3N3LndlYi5hcHA6NDQz&hl=en&type=image&v=V6_85qpc2Xf2sbe3xTnRte7m&theme=light&size=normal&cb=k2nv7cppxjes
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
accept-ranges: bytes
content-encoding: br
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/botguard-scs
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="botguard-scs"
report-to: {"group":"botguard-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/botguard-scs"}]}
content-length: 7493
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 02 May 2024 01:57:44 GMT
expires: Fri, 02 May 2025 01:57:44 GMT
cache-control: public, max-age=31536000
last-modified: Tue, 23 Apr 2024 17:30:00 GMT
content-type: text/javascript
vary: Accept-Encoding
age: 268476
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

www.google.com/recaptcha/api2/webworker.js?hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m

142.250.74.132

200 OK

206 kB

URL GET HTTP/3
www.google.com/recaptcha/api2/webworker.js?hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m
IP
142.250.74.132:443
ASN
#15169 GOOGLE

Requested by
https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LeWd-MmAAAAAOeCl5Zh40uEkfyrZL5Zb5bD99eS&co=aHR0cHM6Ly9zd2lzc3Bhc3N3LndlYi5hcHA6NDQz&hl=en&type=image&v=V6_85qpc2Xf2sbe3xTnRte7m&theme=light&size=normal&cb=k2nv7cppxjes
Certificate
IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint7C:B7:E1:97:03:6E:82:B6:52:F8:EC:C6:C6:50:D9:DD:80:47:E6:A0
ValidityTue, 16 Apr 2024 03:18:53 GMT - Tue, 09 Jul 2024 03:18:52 GMT

File type
JavaScript source, ASCII text, with very long lines (631)
Size
206 kB (205913 bytes)
Hash
e4eb924eec164dfe5fb43e5d8e6b2a2f
582bad0eac6440aa49632ca1e24d7a52a89d7d92
428ed37cf336160c986f3c470a345bd9790e95d119cfb794767637df59eb3a59

HTTP Headers

GET /recaptcha/api2/webworker.js?hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LeWd-MmAAAAAOeCl5Zh40uEkfyrZL5Zb5bD99eS&co=aHR0cHM6Ly9zd2lzc3Bhc3N3LndlYi5hcHA6NDQz&hl=en&type=image&v=V6_85qpc2Xf2sbe3xTnRte7m&theme=light&size=normal&cb=k2nv7cppxjes
Sec-Fetch-Dest: worker
Sec-Fetch-Mode: same-origin
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
content-type: text/javascript; charset=utf-8
cross-origin-embedder-policy: require-corp
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
expires: Sun, 05 May 2024 04:32:20 GMT
date: Sun, 05 May 2024 04:32:20 GMT
cache-control: private, max-age=300
content-encoding: gzip
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
x-xss-protection: 1; mode=block
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

www.gstatic.com/recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/styles__ltr.css

142.250.74.35

200 OK

25 kB

URL GET HTTP/3
www.gstatic.com/recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/styles__ltr.css
IP
142.250.74.35:443
ASN
#15169 GOOGLE

Requested by
https://www.google.com/recaptcha/api2/bframe?hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&k=6LeWd-MmAAAAAOeCl5Zh40uEkfyrZL5Zb5bD99eS
Certificate
IssuerGoogle Trust Services LLC
Subject*.gstatic.com
Fingerprint15:DD:05:B3:2F:D8:E3:54:C9:B4:FA:E4:AC:01:ED:C8:E1:EA:A7:AD
ValidityTue, 16 Apr 2024 04:17:07 GMT - Tue, 09 Jul 2024 04:17:06 GMT

File type
ASCII text, with very long lines (56412), with no line terminators
Size
25 kB (24617 bytes)
Hash
2c00b9f417b688224937053cd0c284a5
17b4c18ebc129055dd25f214c3f11e03e9df2d82
1e754b107428162c65a26d399b66db3daaea09616bf8620d9de4bc689ce48eed

HTTP Headers

GET /recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/styles__ltr.css HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 24617
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 03 May 2024 01:09:29 GMT
expires: Sat, 03 May 2025 01:09:29 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 22 Apr 2024 21:03:35 GMT
content-type: text/css
vary: Accept-Encoding
age: 184972
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

www.gstatic.com/recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/recaptcha__en.js

142.250.74.35

200 OK

206 kB

URL GET HTTP/3
www.gstatic.com/recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/recaptcha__en.js
IP
142.250.74.35:443
ASN
#15169 GOOGLE

Requested by
https://www.google.com/recaptcha/api2/webworker.js?hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m
Certificate
IssuerGoogle Trust Services LLC
Subject*.gstatic.com
Fingerprint15:DD:05:B3:2F:D8:E3:54:C9:B4:FA:E4:AC:01:ED:C8:E1:EA:A7:AD
ValidityTue, 16 Apr 2024 04:17:07 GMT - Tue, 09 Jul 2024 04:17:06 GMT

File type
JavaScript source, ASCII text, with very long lines (631)
Size
206 kB (205803 bytes)
Hash
e2e79d6b927169d9e0e57e3baecc0993
1299473950b2999ba0b7f39bd5e4a60eafd1819d
231336ed913a5ebd4445b85486e053caf2b81cab91318241375f3f7a245b6c6b

HTTP Headers

GET /recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/recaptcha__en.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 205803
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 02 May 2024 01:56:11 GMT
expires: Fri, 02 May 2025 01:56:11 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 22 Apr 2024 21:03:35 GMT
content-type: text/javascript
vary: Accept-Encoding
age: 268570
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

swisspassw.web.app/assets/css/sso.min-20200819.css

199.36.158.100

200 OK

184 kB

URL GET HTTP/3
swisspassw.web.app/assets/css/sso.min-20200819.css
IP
199.36.158.100:443
ASN
#54113 FASTLY

Requested by
https://swisspassw.web.app/
Certificate
IssuerGoogle Trust Services LLC
Subjectweb.app
Fingerprint6C:B8:FC:5E:5B:DF:AB:31:E6:02:C5:A6:D8:E2:D0:77:BB:5D:BC:7B
ValidityThu, 21 Mar 2024 15:14:42 GMT - Wed, 19 Jun 2024 15:14:41 GMT

File type
ASCII text, with very long lines (65536), with no line terminators
Size
184 kB (184065 bytes)
Hash
2bbf7f3318c47af5e7612c00944fad2e
3c1974c80924829ef60ad41f10e6c24e1299f2ec
fd23aeccc08239852a5ac678a7cc5b29c723987a0287674000b930cf606b115e

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - SwissPass
OpenPhish	phishing	SBB
PhishTank	phishing	Other
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /assets/css/sso.min-20200819.css HTTP/1.1
Host: swisspassw.web.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://swisspassw.web.app/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
content-length: 19451
cache-control: max-age=3600
content-encoding: br
content-type: text/css; charset=utf-8
etag: "1c360dfcb4d72b7d142079a9716274a56c7326ec03fe16418762b425e44249a6-br"
last-modified: Fri, 30 Jun 2023 14:56:02 GMT
strict-transport-security: max-age=31556926; includeSubDomains; preload
accept-ranges: bytes
date: Sun, 05 May 2024 04:32:19 GMT
x-served-by: cache-hel1410034-HEL
x-cache: MISS
x-cache-hits: 0
x-timer: S1714883539.279458,VS0,VE98
vary: x-fh-requested-host, accept-encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400

www.google.com/recaptcha/api2/anchor?ar=1&k=6Le1atImAAAAAOoqgPj15ERYT74xIEi9mAOZJ3UB&co=aHR0cHM6Ly9zd2lzc3Bhc3N3LndlYi5hcHA6NDQz&hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&size=invisible&cb=ih3p6zp4xru3

142.250.74.132

200 OK

7.3 kB

URL GET HTTP/3
www.google.com/recaptcha/api2/anchor?ar=1&k=6Le1atImAAAAAOoqgPj15ERYT74xIEi9mAOZJ3UB&co=aHR0cHM6Ly9zd2lzc3Bhc3N3LndlYi5hcHA6NDQz&hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&size=invisible&cb=ih3p6zp4xru3
IP
142.250.74.132:443
ASN
#15169 GOOGLE

Requested by
https://swisspassw.web.app/
Certificate
IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint7C:B7:E1:97:03:6E:82:B6:52:F8:EC:C6:C6:50:D9:DD:80:47:E6:A0
ValidityTue, 16 Apr 2024 03:18:53 GMT - Tue, 09 Jul 2024 03:18:52 GMT

File type
HTML document, ASCII text, with very long lines (7494), with no line terminators
Size
7.3 kB (7277 bytes)
Hash
528db1bf7b4a6dc668e58d2c40780670
440dd8777216413841460ad38e8a676594bd7a13
f5a78f2c9fa3eb055a2e56dbcb0176a313b0fe2cd8c1d621ed87483ac607fc9a

HTTP Headers

GET /recaptcha/api2/anchor?ar=1&k=6Le1atImAAAAAOoqgPj15ERYT74xIEi9mAOZJ3UB&co=aHR0cHM6Ly9zd2lzc3Bhc3N3LndlYi5hcHA6NDQz&hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&size=invisible&cb=ih3p6zp4xru3 HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://swisspassw.web.app/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
content-type: text/html; charset=utf-8
cross-origin-resource-policy: cross-origin
cross-origin-embedder-policy: require-corp
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-security-policy: script-src 'nonce-SwBJXi973pQYNdUX4eGHVA' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1
content-encoding: gzip
date: Sun, 05 May 2024 04:32:20 GMT
expires: Sun, 05 May 2024 04:32:20 GMT
cache-control: private, max-age=0
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

www.google.com/recaptcha/api2/bframe?hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&k=6LeWd-MmAAAAAOeCl5Zh40uEkfyrZL5Zb5bD99eS

142.250.74.132

200 OK

7.4 kB

URL GET HTTP/3
www.google.com/recaptcha/api2/bframe?hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&k=6LeWd-MmAAAAAOeCl5Zh40uEkfyrZL5Zb5bD99eS
IP
142.250.74.132:443
ASN
#15169 GOOGLE

Requested by
https://swisspassw.web.app/
Certificate
IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint7C:B7:E1:97:03:6E:82:B6:52:F8:EC:C6:C6:50:D9:DD:80:47:E6:A0
ValidityTue, 16 Apr 2024 03:18:53 GMT - Tue, 09 Jul 2024 03:18:52 GMT

File type
HTML document, ASCII text, with very long lines (7675), with no line terminators
Size
7.4 kB (7444 bytes)
Hash
26251fb5af4a18793eca62117c677b8b
06f887dabe82e0dc12dd9876592a3c639b8c4172
401dc4f9ddec723a0040a4c39016641f41819f9ebdeb925f996e198fc8a1381f

HTTP Headers

GET /recaptcha/api2/bframe?hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&k=6LeWd-MmAAAAAOeCl5Zh40uEkfyrZL5Zb5bD99eS HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://swisspassw.web.app/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
content-type: text/html; charset=utf-8
cross-origin-resource-policy: cross-origin
cross-origin-embedder-policy: require-corp
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Sun, 05 May 2024 04:32:21 GMT
content-security-policy: script-src 'nonce-HUByajYODbB4R2WDuum7Zg' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

swisspassw.web.app/logo_text_de-20200819.png

0.0.0.0

0 B

URL GET
swisspassw.web.app/logo_text_de-20200819.png
IP
0.0.0.0:0
ASN
#0

Requested by
https://swisspassw.web.app/
Certificate
IssuerGoogle Trust Services LLC
Subjectweb.app
Fingerprint6C:B8:FC:5E:5B:DF:AB:31:E6:02:C5:A6:D8:E2:D0:77:BB:5D:BC:7B
ValidityThu, 21 Mar 2024 15:14:42 GMT - Wed, 19 Jun 2024 15:14:41 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - SwissPass
OpenPhish	phishing	SBB
PhishTank	phishing	Other
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /logo_text_de-20200819.png HTTP/1.1
Host: swisspassw.web.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://swisspassw.web.app/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

swisspassw.web.app/logo-20200819.png

0.0.0.0

0 B

URL GET
swisspassw.web.app/logo-20200819.png
IP
0.0.0.0:0
ASN
#0

Requested by
https://swisspassw.web.app/
Certificate
IssuerGoogle Trust Services LLC
Subjectweb.app
Fingerprint6C:B8:FC:5E:5B:DF:AB:31:E6:02:C5:A6:D8:E2:D0:77:BB:5D:BC:7B
ValidityThu, 21 Mar 2024 15:14:42 GMT - Wed, 19 Jun 2024 15:14:41 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - SwissPass
OpenPhish	phishing	SBB
PhishTank	phishing	Other
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /logo-20200819.png HTTP/1.1
Host: swisspassw.web.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://swisspassw.web.app/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (15)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML