Report - getcollectsb.pages.dev/

Report Overview

Submitted URL
getcollectsb.pages.dev/
IP
172.66.47.53
ASN
#13335 CLOUDFLARENET
Submitted
2024-03-28 17:22:52
Access
public
Website Title
State Bank of India | PAN Update
Final URL
getcollectsb.pages.dev/
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
24

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
getcollectsb.pages.dev	unknown	unknown	No data	No data	5.5 kB	262 kB	172.66.47.53
fonts.googleapis.com	8877	2005-01-25	2013-06-10	2024-03-28	475 B	2.9 kB	142.250.74.170
fonts.gstatic.com	unknown	2008-02-11	2014-09-09	2024-03-28	1.6 kB	147 kB	216.58.207.227
www.gstatic.com	unknown	2008-02-11	2016-07-26	2024-03-28	1.4 kB	102 kB	142.250.74.163
firebase.googleapis.com	4897	2005-01-25	2018-10-19	2024-03-27	1.2 kB	1.4 kB	142.250.74.74

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

Scan Date	Severity	Indicator	Alert
2024-03-28	medium	getcollectsb.pages.dev/	State Bank of India
2024-03-28	medium	getcollectsb.pages.dev/	State Bank of India
2024-03-28	medium	getcollectsb.pages.dev/	State Bank of India
2024-03-28	medium	getcollectsb.pages.dev/	State Bank of India
2024-03-28	medium	getcollectsb.pages.dev/	State Bank of India
2024-03-28	medium	getcollectsb.pages.dev/	State Bank of India
2024-03-28	medium	getcollectsb.pages.dev/	State Bank of India
2024-03-28	medium	getcollectsb.pages.dev/	State Bank of India
2024-03-28	medium	getcollectsb.pages.dev/	State Bank of India
2024-03-28	medium	getcollectsb.pages.dev/	State Bank of India
2024-03-28	medium	getcollectsb.pages.dev/	State Bank of India
2024-03-28	medium	getcollectsb.pages.dev/	State Bank of India

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (8)

	URL	Size	First Seen	Last Seen
	www.gstatic.com/firebasejs/10.1.0/firebase-database.js	186 kB	2023-11-07	2024-04-14
Pretty URL www.gstatic.com/firebasejs/10.1.0/firebase-database.js IP 142.250.74.163 ASN #15169 GOOGLE Introduced by importedModule Embedded in HTML false Observations First Seen2023-11-07 20:48:43 Last Seen2024-04-14 07:13:18 Times Seen64 Hash 4d3bcb0e14c06e6ac0f126993f5ddd11 f75e5ea942d684f92bdc4ca1443060b665fdb045 b1116ecf93db2a2661a469cb6d1b342ce5cba037e8b3e04e57b4cbe1ae9ba8eb Loading...

	getcollectsb.pages.dev/	615 B	2023-12-14	2024-04-14
Pretty URL getcollectsb.pages.dev/ IP 172.66.47.53 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2023-12-14 08:52:23 Last Seen2024-04-14 07:13:18 Times Seen37 Hash 60072f0508a11314c2ca4ab8688d0409 82954e4b4c0e920081ffb559eb146257ae00bad3 a78a3e65b299a2711c03614cb73a21aa93f17dff5dad4fc29b94d35f6855f3ae Loading...

	unknown	49 B	2023-07-02	2024-04-14
Pretty Introduced by eventHandler Embedded in HTML false Observations First Seen2023-07-02 22:20:23 Last Seen2024-04-14 07:13:18 Times Seen35 Hash 564476b1ac459e026390660c16c04225 f770c82f52656875bc88cdfc8d78a1058542ffca 234faefbf17791076b5a34832255ad02315975d1137a8aaeef16e011d4eabdd7 Loading...

	www.gstatic.com/firebasejs/10.1.0/firebase-app.js	93 kB	2023-08-03	2024-04-14
Pretty URL www.gstatic.com/firebasejs/10.1.0/firebase-app.js IP 142.250.74.163 ASN #15169 GOOGLE Introduced by importedModule Embedded in HTML false Observations First Seen2023-08-03 11:27:56 Last Seen2024-04-14 07:13:18 Times Seen113 Hash 33b671a69d0f7404344f9ac97a76b515 fab7aece001fa1a37a1b6012c4697ffdc1e85788 d9f9f281e6a6da60cb229c80cf118a1dce9d47149584a21d097f542a9c8a3a96 Loading...

	www.gstatic.com/firebasejs/10.1.0/firebase-analytics.js	30 kB	2023-08-15	2024-04-14
Pretty URL www.gstatic.com/firebasejs/10.1.0/firebase-analytics.js IP 142.250.74.163 ASN #15169 GOOGLE Introduced by importedModule Embedded in HTML false Observations First Seen2023-08-15 11:03:47 Last Seen2024-04-14 07:13:18 Times Seen81 Hash deedb3d03f9851a0a2f95787caa44fe1 1e40872ba9dd445b61566864c6afbf2f36e00a1e e67b045d4b762e7e2ba2db72a11db7c955db1be93692c06f1e317798d3f52529 Loading...

	getcollectsb.pages.dev/main.js	21 kB	2024-03-28	2024-03-28
Pretty URL getcollectsb.pages.dev/main.js IP 172.66.47.53 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2024-03-28 18:22:58 Last Seen2024-03-28 18:22:58 Times Seen2 Hash a5a327ca011a907bf23ebbf06fdbab05 c255fed4f30899d569bf3c50f3bd833df465b5d8 2fe20846b98522fff31cb29980c173597f3d4aa1c22f82faa1614f0197e8d51c Loading...

	unknown	54 B	2023-05-17	2024-04-14
Pretty Introduced by Function Embedded in HTML false Observations First Seen2023-05-17 03:14:02 Last Seen2024-04-14 07:13:18 Times Seen49 Hash 4619f5264ce3f175df8a833aa0adc5b4 d0d462c955da620d07d070a8644b5636efade20d 1ca1059cb88fb8dd56dab9ec57a136e58e7fb1f70710c0aca5326711ef6f9a17 Loading...

	getcollectsb.pages.dev/	0 B	2023-03-07	2024-04-27
Pretty URL getcollectsb.pages.dev/ IP 172.66.47.53 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 01:01:59 Last Seen2024-04-27 17:15:11 Times Seen37123892 Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Loading...

HTTP Transactions (21)

URL IP Response Size

getcollectsb.pages.dev/assets/Menu.png

172.66.47.53

200 OK

6.1 kB

URL GET HTTP/3
getcollectsb.pages.dev/assets/Menu.png
IP
172.66.47.53:443
ASN
#13335 CLOUDFLARENET

Requested by
https://getcollectsb.pages.dev/
Certificate
IssuerGoogle Trust Services LLC
Subjectgetcollectsb.pages.dev
Fingerprint54:52:E2:F4:5B:02:8D:7C:1C:18:E3:95:77:38:AD:F2:7E:9A:3A:C0
ValiditySun, 03 Mar 2024 11:23:41 GMT - Sat, 01 Jun 2024 11:23:40 GMT

File type
PNG image data, 768 x 768, 8-bit/color RGBA, non-interlaced
Size
6.1 kB (6095 bytes)
Hash
205e4d0fb8f17b9eb3ffc70bd775c355
72c3da009f16f2cf2359672c285ecfa7e932359b
c70622ae897db583c1854311b48a99ed7666f4506870bdf736bb053dd013d846

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	State Bank of India

HTTP Headers

GET /assets/Menu.png HTTP/1.1
Host: getcollectsb.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://getcollectsb.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Thu, 28 Mar 2024 17:22:27 GMT
content-type: image/png
content-length: 6095
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "31487192cfd43adb088cb7f76194e32c"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=AyD9EBwFMDkGDu2bAyZL16mUb7CBbw2OYjc0eGDUVhwpGN4ld6b%2FRWVFo1i%2FGkQDklopd6s40s5uo7CpBb2gVgji0zFdxxg3VFyYvFHCIJKZy%2BXQeDErn2o%2F8CTKhB7NplnbD9EAC%2Bbs"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 86b94d675f78b511-OSL
alt-svc: h3=":443"; ma=86400

getcollectsb.pages.dev/assets/Captcha.jpg

172.66.47.53

200 OK

30 kB

URL GET HTTP/3
getcollectsb.pages.dev/assets/Captcha.jpg
IP
172.66.47.53:443
ASN
#13335 CLOUDFLARENET

Requested by
https://getcollectsb.pages.dev/
Certificate
IssuerGoogle Trust Services LLC
Subjectgetcollectsb.pages.dev
Fingerprint54:52:E2:F4:5B:02:8D:7C:1C:18:E3:95:77:38:AD:F2:7E:9A:3A:C0
ValiditySun, 03 Mar 2024 11:23:41 GMT - Sat, 01 Jun 2024 11:23:40 GMT

File type
JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=5, height=0, orientation=upper-left, datetime=2023:11:26 16:23:25, width=0], baseline, precision 8, 650x144, components 3
Size
30 kB (30123 bytes)
Hash
40b6aa3e03e759606bfb6ac2b17ea2b8
8001566f610412b2cbbc030f361845240f6b14f3
b2dabedca78701a111daf52b2195b5c8819479d1e6f20480c48d67381741802d

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	State Bank of India

HTTP Headers

GET /assets/Captcha.jpg HTTP/1.1
Host: getcollectsb.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://getcollectsb.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Thu, 28 Mar 2024 17:22:27 GMT
content-type: image/jpeg
content-length: 30123
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "84db00c976b46c03a19afff3461a0e01"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=DGEUleeA6MtlKMkZw8QPqHKvieyBRow9GX1N5zBo9zNRv9SRvJf0dZ1hg7ehwYox19%2BL3cgffY3DEaNQJSl0Fs1E6aaLWqkF4fD3%2FNI%2FYWfP9LqmGSnCt5DD%2FlLQbHhSgYo4q0ez76vA"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 86b94d675f80b511-OSL
alt-svc: h3=":443"; ma=86400

getcollectsb.pages.dev/assets/Header.png

172.66.47.53

200 OK

29 kB

URL GET HTTP/3
getcollectsb.pages.dev/assets/Header.png
IP
172.66.47.53:443
ASN
#13335 CLOUDFLARENET

Requested by
https://getcollectsb.pages.dev/
Certificate
IssuerGoogle Trust Services LLC
Subjectgetcollectsb.pages.dev
Fingerprint54:52:E2:F4:5B:02:8D:7C:1C:18:E3:95:77:38:AD:F2:7E:9A:3A:C0
ValiditySun, 03 Mar 2024 11:23:41 GMT - Sat, 01 Jun 2024 11:23:40 GMT

File type
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=6], baseline, precision 8, 720x86, components 3
Size
29 kB (28856 bytes)
Hash
2b4081c852bc041b299e5a8e8f42f0ca
57f90101cee0b74f65d35fc654cba276bec3628f
83c892de120304d45f34d5338687edb7166c5721e6aeb852583e7bb8bbb40c88

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	State Bank of India

HTTP Headers

GET /assets/Header.png HTTP/1.1
Host: getcollectsb.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://getcollectsb.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Thu, 28 Mar 2024 17:22:27 GMT
content-type: image/png
content-length: 28856
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "99524888c9275cb89addbf76fd2e1987"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=rowIMEZdhNEAZ2uBUbql%2FUM%2BmeYIl%2FApKHPh0HDJZo%2B7TqPeWhsjWgJMwsaTs8q%2BUJG2SVQ9UN2r%2FwotQPwTmQ9JSoMdiTe%2FAPehk0OefBcaCZfJhHbjao%2FHLBBY0wpR8PhN6Bsx2K9p"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 86b94d675f76b511-OSL
alt-svc: h3=":443"; ma=86400

getcollectsb.pages.dev/assets/YONO_Logo.png

172.66.47.53

200 OK

6.6 kB

URL GET HTTP/3
getcollectsb.pages.dev/assets/YONO_Logo.png
IP
172.66.47.53:443
ASN
#13335 CLOUDFLARENET

Requested by
https://getcollectsb.pages.dev/
Certificate
IssuerGoogle Trust Services LLC
Subjectgetcollectsb.pages.dev
Fingerprint54:52:E2:F4:5B:02:8D:7C:1C:18:E3:95:77:38:AD:F2:7E:9A:3A:C0
ValiditySun, 03 Mar 2024 11:23:41 GMT - Sat, 01 Jun 2024 11:23:40 GMT

File type
PNG image data, 509 x 99, 8-bit colormap, non-interlaced
Size
6.6 kB (6619 bytes)
Hash
79fc8803dd897e1b2928a5c4e23a0354
203754ded541848cfdf979a1b9770dc22faaea15
8c58ba744e72432b14a82846756d3de5bedca9e88403eea10e1fa38fdc4d44fc

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	State Bank of India

HTTP Headers

GET /assets/YONO_Logo.png HTTP/1.1
Host: getcollectsb.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://getcollectsb.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Thu, 28 Mar 2024 17:22:27 GMT
content-type: image/png
content-length: 6619
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "a1cd38b8f71251bbee3d93645de2397b"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=sPsI35F0bGMlVZucSNc1A7KWLBWWvqt9ZhuiMUlpEbaIE5804L4H7vLI9Gc7X0TRK2T6Bjy31bjRMQJdoa7wF7DVgk31PgpkQTc7ZZSvNNMSYkVIOQOuxnjSB%2FP83djjCDWbvYCRPfYJ"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 86b94d675f7cb511-OSL
alt-svc: h3=":443"; ma=86400

getcollectsb.pages.dev/assets/Footer.png

172.66.47.53

200 OK

28 kB

URL GET HTTP/3
getcollectsb.pages.dev/assets/Footer.png
IP
172.66.47.53:443
ASN
#13335 CLOUDFLARENET

Requested by
https://getcollectsb.pages.dev/
Certificate
IssuerGoogle Trust Services LLC
Subjectgetcollectsb.pages.dev
Fingerprint54:52:E2:F4:5B:02:8D:7C:1C:18:E3:95:77:38:AD:F2:7E:9A:3A:C0
ValiditySun, 03 Mar 2024 11:23:41 GMT - Sat, 01 Jun 2024 11:23:40 GMT

File type
JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=6, height=0, orientation=upper-left, datetime=2022:02:17 17:58:23, GPS-Data, width=0], baseline, precision 8, 1080x189, components 3
Size
28 kB (28365 bytes)
Hash
c010adba6b5cf38e5209371b872a1409
57472ed8326951113187e014a9a03eb682520ba6
127724b9264e03352b4321b468361f3b0ed3cfe06da96f7c189c4feaecb4f325

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	State Bank of India

HTTP Headers

GET /assets/Footer.png HTTP/1.1
Host: getcollectsb.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://getcollectsb.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Thu, 28 Mar 2024 17:22:27 GMT
content-type: image/png
content-length: 28365
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "934c7e28a27cfc1845b12a23ea89e4ab"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=pFKMwQMFHf%2Bkkc37SCkBIhrHe4BO93YjmBeYs7Ni%2BWMUfV3Ob1Xyqj5pl144irUn698LGfpMc6%2BpK7aIttcNjgKq6hek4BjIQ8cV4DxVEZMweK1dYb%2B2JEYCXQiOwE18Ym5xUIvnEAzL"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 86b94d675f83b511-OSL
alt-svc: h3=":443"; ma=86400

getcollectsb.pages.dev/assets/SecurityA.jpg

172.66.47.53

200 OK

72 kB

URL GET HTTP/3
getcollectsb.pages.dev/assets/SecurityA.jpg
IP
172.66.47.53:443
ASN
#13335 CLOUDFLARENET

Requested by
https://getcollectsb.pages.dev/
Certificate
IssuerGoogle Trust Services LLC
Subjectgetcollectsb.pages.dev
Fingerprint54:52:E2:F4:5B:02:8D:7C:1C:18:E3:95:77:38:AD:F2:7E:9A:3A:C0
ValiditySun, 03 Mar 2024 11:23:41 GMT - Sat, 01 Jun 2024 11:23:40 GMT

File type
JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=5, height=0, orientation=upper-left, datetime=2023:12:02 07:20:44, width=0], baseline, precision 8, 1080x769, components 3
Size
72 kB (72538 bytes)
Hash
99f3b6cec44a748ad8608b0f4183f5fe
743a5e9ba5f8f72cc09b2436ef687f9ee14f4dd1
233b1f73b381f6fd0cd061a45ff5b8f454c7039b0e32a8c4bcc72614caae5a18

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	State Bank of India

HTTP Headers

GET /assets/SecurityA.jpg HTTP/1.1
Host: getcollectsb.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://getcollectsb.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Thu, 28 Mar 2024 17:22:27 GMT
content-type: image/jpeg
content-length: 72538
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "0fdd71bbf1c156771aea9cbcb7c7dde6"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=5d7y5v7Y0tRyfxz%2BoxXrE5l0jzfRG8EWFWSrkXB7vwaW%2FRJbRl0JpghXpyb6mhMFImvURGgFDOFPn%2BjWDHxrPXoHaycOy8tDDv%2B8EvcqJ7TQAvW2snyGPw4FV1sXnxR0sqLDHU%2FcNKqV"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 86b94d675f81b511-OSL
alt-svc: h3=":443"; ma=86400

fonts.googleapis.com/css2?family=Open+Sans:wght@300;400;500;600;700&display=swap

142.250.74.170

200 OK

2.3 kB

URL GET HTTP/2
fonts.googleapis.com/css2?family=Open+Sans:wght@300;400;500;600;700&display=swap
IP
142.250.74.170:443
ASN
#15169 GOOGLE

Requested by
https://getcollectsb.pages.dev/
Certificate
IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
Fingerprint04:B9:D9:E0:01:DB:5E:AB:5A:FF:F0:D9:ED:39:0F:C1:63:18:51:0B
ValidityMon, 26 Feb 2024 08:18:27 GMT - Mon, 20 May 2024 08:18:26 GMT

File type
gzip compressed data, max compression
Size
2.3 kB (2315 bytes)
Hash
cbda569cbbd3b43184dd5d6ad0a94155
84b3a19c67abdf81d13cd7ba345cdec9a6d3e283
1f8251bc77e97d80763f1b04aeed5abf556bcbc135585e2c489531b55366a12b

HTTP Headers

GET /css2?family=Open+Sans:wght@300;400;500;600;700&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://getcollectsb.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Thu, 28 Mar 2024 17:22:27 GMT
date: Thu, 28 Mar 2024 17:22:27 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2

216.58.207.227

200 OK

48 kB

URL GET HTTP/2
fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
IP
216.58.207.227:443
ASN
#15169 GOOGLE

Requested by
https://getcollectsb.pages.dev/
Certificate
IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintF3:56:10:42:A8:3C:BF:F5:89:9C:4C:C0:F8:E3:DC:C4:1C:E9:34:9E
ValidityMon, 26 Feb 2024 08:18:21 GMT - Mon, 20 May 2024 08:18:20 GMT

File type
Web Open Font Format (Version 2), TrueType, length 48236, version 1.0
Size
48 kB (48236 bytes)
Hash
015c126a3520c9a8f6a27979d0266e96
2acf956561d44434a6d84204670cf849d3215d5f
3c4d6a1421c7ddb7e404521fe8c4cd5be5af446d7689cd880be26612eaad3cfa

HTTP Headers

GET /s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://getcollectsb.pages.dev
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 48236
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 28 Mar 2024 17:20:50 GMT
expires: Fri, 28 Mar 2025 17:20:50 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 14 Dec 2023 02:08:40 GMT
content-type: font/woff2
age: 97
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

www.gstatic.com/firebasejs/10.1.0/firebase-app.js

142.250.74.163

200 OK

21 kB

URL GET HTTP/2
www.gstatic.com/firebasejs/10.1.0/firebase-app.js
IP
142.250.74.163:443
ASN
#15169 GOOGLE

Requested by
https://getcollectsb.pages.dev/
Certificate
IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintF3:56:10:42:A8:3C:BF:F5:89:9C:4C:C0:F8:E3:DC:C4:1C:E9:34:9E
ValidityMon, 26 Feb 2024 08:18:21 GMT - Mon, 20 May 2024 08:18:20 GMT

File type
JavaScript source, ASCII text, with CRLF, LF line terminators
Size
21 kB (20776 bytes)
Hash
33b671a69d0f7404344f9ac97a76b515
fab7aece001fa1a37a1b6012c4697ffdc1e85788
d9f9f281e6a6da60cb229c80cf118a1dce9d47149584a21d097f542a9c8a3a96

HTTP Headers

GET /firebasejs/10.1.0/firebase-app.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://getcollectsb.pages.dev/
Origin: https://getcollectsb.pages.dev
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/firebase-js
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="firebase-js"
report-to: {"group":"firebase-js","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/firebase-js"}]}
content-length: 20776
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 28 Mar 2024 02:39:06 GMT
expires: Fri, 28 Mar 2025 02:39:06 GMT
cache-control: public, max-age=31536000
age: 53001
last-modified: Thu, 20 Jul 2023 21:05:08 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

www.gstatic.com/firebasejs/10.1.0/firebase-database.js

142.250.74.163

200 OK

49 kB

URL GET HTTP/2
www.gstatic.com/firebasejs/10.1.0/firebase-database.js
IP
142.250.74.163:443
ASN
#15169 GOOGLE

Requested by
https://getcollectsb.pages.dev/
Certificate
IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintF3:56:10:42:A8:3C:BF:F5:89:9C:4C:C0:F8:E3:DC:C4:1C:E9:34:9E
ValidityMon, 26 Feb 2024 08:18:21 GMT - Mon, 20 May 2024 08:18:20 GMT

File type
JavaScript source, ASCII text, with very long lines (65536), with no line terminators
Size
49 kB (48724 bytes)
Hash
4d3bcb0e14c06e6ac0f126993f5ddd11
f75e5ea942d684f92bdc4ca1443060b665fdb045
b1116ecf93db2a2661a469cb6d1b342ce5cba037e8b3e04e57b4cbe1ae9ba8eb

HTTP Headers

GET /firebasejs/10.1.0/firebase-database.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://getcollectsb.pages.dev/
Origin: https://getcollectsb.pages.dev
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/firebase-js
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="firebase-js"
report-to: {"group":"firebase-js","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/firebase-js"}]}
content-length: 48724
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 27 Mar 2024 16:04:34 GMT
expires: Thu, 27 Mar 2025 16:04:34 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 20 Jul 2023 21:04:42 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
age: 91073
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2

216.58.207.227

200 OK

48 kB

URL GET HTTP/2
fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
IP
216.58.207.227:443
ASN
#15169 GOOGLE

Requested by
https://getcollectsb.pages.dev/
Certificate
IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintF3:56:10:42:A8:3C:BF:F5:89:9C:4C:C0:F8:E3:DC:C4:1C:E9:34:9E
ValidityMon, 26 Feb 2024 08:18:21 GMT - Mon, 20 May 2024 08:18:20 GMT

File type
Web Open Font Format (Version 2), TrueType, length 48236, version 1.0
Size
48 kB (48236 bytes)
Hash
015c126a3520c9a8f6a27979d0266e96
2acf956561d44434a6d84204670cf849d3215d5f
3c4d6a1421c7ddb7e404521fe8c4cd5be5af446d7689cd880be26612eaad3cfa

HTTP Headers

GET /s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://getcollectsb.pages.dev
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 48236
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 28 Mar 2024 17:20:50 GMT
expires: Fri, 28 Mar 2025 17:20:50 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 14 Dec 2023 02:08:40 GMT
content-type: font/woff2
age: 97
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

getcollectsb.pages.dev/

172.66.47.53

200 OK

12 kB

URL User Request GET HTTP/2
getcollectsb.pages.dev/
IP
172.66.47.53:443
ASN
#13335 CLOUDFLARENET

Certificate
IssuerGoogle Trust Services LLC
Subjectgetcollectsb.pages.dev
Fingerprint54:52:E2:F4:5B:02:8D:7C:1C:18:E3:95:77:38:AD:F2:7E:9A:3A:C0
ValiditySun, 03 Mar 2024 11:23:41 GMT - Sat, 01 Jun 2024 11:23:40 GMT

File type
HTML document, ASCII text, with very long lines (674)
Size
12 kB (11777 bytes)
Hash
293a50b5ad6b40ce703643faf8ba2324
29409458f2672b0e6021760a724fa940cd540bcc
3bc20ed504dcbaf8b8d796927955de4ee4eae0b3aab6bb21ee99df2554239c7a

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	State Bank of India

HTTP Headers

GET / HTTP/1.1
Host: getcollectsb.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Thu, 28 Mar 2024 17:22:26 GMT
content-type: text/html; charset=utf-8
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: W/"09eaafdcad8edf0839e7255bf282cef6"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=n2MzRbSe2Z5EsQ44sBNcs9eFT%2BW%2BCbsZqpoKKuPCympB5ReG1MT36OeLRZSWqNr3iYiiPxHFIN060y4QYFwPclRBg5Ro7Q6l8Gf%2Fb%2FesNHWa1xM6D8BFD66ktJNkCBuO4GiZxqrB2X0T"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 86b94d63ec6db503-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2

216.58.207.227

200 OK

48 kB

URL GET HTTP/2
fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
IP
216.58.207.227:443
ASN
#15169 GOOGLE

Requested by
https://getcollectsb.pages.dev/
Certificate
IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintF3:56:10:42:A8:3C:BF:F5:89:9C:4C:C0:F8:E3:DC:C4:1C:E9:34:9E
ValidityMon, 26 Feb 2024 08:18:21 GMT - Mon, 20 May 2024 08:18:20 GMT

File type
Web Open Font Format (Version 2), TrueType, length 48236, version 1.0
Size
48 kB (48236 bytes)
Hash
015c126a3520c9a8f6a27979d0266e96
2acf956561d44434a6d84204670cf849d3215d5f
3c4d6a1421c7ddb7e404521fe8c4cd5be5af446d7689cd880be26612eaad3cfa

HTTP Headers

GET /s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://getcollectsb.pages.dev
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 48236
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 28 Mar 2024 17:20:50 GMT
expires: Fri, 28 Mar 2025 17:20:50 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 14 Dec 2023 02:08:40 GMT
content-type: font/woff2
age: 97
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

getcollectsb.pages.dev/Style_Main.css

172.66.47.53

200 OK

49 kB

URL GET HTTP/3
getcollectsb.pages.dev/Style_Main.css
IP
172.66.47.53:443
ASN
#13335 CLOUDFLARENET

Requested by
https://getcollectsb.pages.dev/
Certificate
IssuerGoogle Trust Services LLC
Subjectgetcollectsb.pages.dev
Fingerprint54:52:E2:F4:5B:02:8D:7C:1C:18:E3:95:77:38:AD:F2:7E:9A:3A:C0
ValiditySun, 03 Mar 2024 11:23:41 GMT - Sat, 01 Jun 2024 11:23:40 GMT

File type
ASCII text
Size
49 kB (49238 bytes)
Hash
4a3b89eb98c9e484bd8da77ee63b4ad5
76b052e13e97ad12d3ad749206a1e94486291550
5e49b65f22625743e144ed2ec0177bc0c50d2f7b15ecb186022e2ddadb1812c9

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	State Bank of India

HTTP Headers

GET /Style_Main.css HTTP/1.1
Host: getcollectsb.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://getcollectsb.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Thu, 28 Mar 2024 17:22:27 GMT
content-type: text/css; charset=utf-8
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: W/"3c980a5e62ec9829eaa01b2d211c3ce8"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=uLQyva6S3TqPhedX1s1613ewVGnutGGYP7ZCFxmKwls6mv4tYasIKzyyQUmRV9hmlHHaHhErg2TsseLWAiiqCTNy0YPGt%2FEPRrptnoRRf60MTdzVxoHDw2QJmVHTI6%2B2F8F75ksvu9P7"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 86b94d675f6fb511-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

firebase.googleapis.com/v1alpha/projects/-/apps/1:1070498912042:web:c129e67fad017687713053/webConfig

142.250.74.74

200 OK

0 B

URL OPTIONS HTTP/2
firebase.googleapis.com/v1alpha/projects/-/apps/1:1070498912042:web:c129e67fad017687713053/webConfig
IP
142.250.74.74:443
ASN
#15169 GOOGLE

Requested by
https://getcollectsb.pages.dev/
Certificate
IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
Fingerprint04:B9:D9:E0:01:DB:5E:AB:5A:FF:F0:D9:ED:39:0F:C1:63:18:51:0B
ValidityMon, 26 Feb 2024 08:18:27 GMT - Mon, 20 May 2024 08:18:26 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

OPTIONS /v1alpha/projects/-/apps/1:1070498912042:web:c129e67fad017687713053/webConfig HTTP/1.1
Host: firebase.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: x-goog-api-key
Referer: https://getcollectsb.pages.dev/
Origin: https://getcollectsb.pages.dev
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
access-control-allow-origin: https://getcollectsb.pages.dev
vary: origin, referer, x-origin
access-control-allow-methods: DELETE,GET,HEAD,OPTIONS,PATCH,POST,PUT
access-control-allow-headers: x-goog-api-key
access-control-max-age: 3600
date: Thu, 28 Mar 2024 17:22:27 GMT
content-type: text/html
server: ESF
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

firebase.googleapis.com/v1alpha/projects/-/apps/1:1070498912042:web:c129e67fad017687713053/webConfig

142.250.74.74

200 OK

323 B

URL OPTIONS HTTP/2
firebase.googleapis.com/v1alpha/projects/-/apps/1:1070498912042:web:c129e67fad017687713053/webConfig
IP
142.250.74.74:443
ASN
#15169 GOOGLE

Requested by
https://getcollectsb.pages.dev/
Certificate
IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
Fingerprint04:B9:D9:E0:01:DB:5E:AB:5A:FF:F0:D9:ED:39:0F:C1:63:18:51:0B
ValidityMon, 26 Feb 2024 08:18:27 GMT - Mon, 20 May 2024 08:18:26 GMT

File type
JSON text data
Size
323 B (323 bytes)
Hash
dcd8c9a7053f1e5632c6d194f91ad4e9
6828bf5a93bd8e58eeb4973bd514cf7a4a6d5c39
abb6d8fbfb769c699ca069a15dd0cecd38233101ce1f905def52684514215752

HTTP Headers

GET /v1alpha/projects/-/apps/1:1070498912042:web:c129e67fad017687713053/webConfig HTTP/1.1
Host: firebase.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://getcollectsb.pages.dev/
x-goog-api-key: AIzaSyDxh7HxnuZSdVNlXXZ9kBWckmXJH7BDUdQ
Origin: https://getcollectsb.pages.dev
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 403 Forbidden
vary: Origin, X-Origin, Referer
content-type: application/json; charset=UTF-8
content-encoding: gzip
date: Thu, 28 Mar 2024 17:22:27 GMT
server: ESF
cache-control: private
content-length: 323
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
access-control-allow-origin: https://getcollectsb.pages.dev
access-control-expose-headers: vary,vary,vary,content-encoding,date,server,content-length
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

getcollectsb.pages.dev/main.js

172.66.47.53

200 OK

3.4 kB

URL GET HTTP/3
getcollectsb.pages.dev/main.js
IP
172.66.47.53:443
ASN
#13335 CLOUDFLARENET

Requested by
https://getcollectsb.pages.dev/
Certificate
IssuerGoogle Trust Services LLC
Subjectgetcollectsb.pages.dev
Fingerprint54:52:E2:F4:5B:02:8D:7C:1C:18:E3:95:77:38:AD:F2:7E:9A:3A:C0
ValiditySun, 03 Mar 2024 11:23:41 GMT - Sat, 01 Jun 2024 11:23:40 GMT

File type
JavaScript source, ASCII text, with CRLF line terminators
Size
3.4 kB (3402 bytes)
Hash
a5a327ca011a907bf23ebbf06fdbab05
c255fed4f30899d569bf3c50f3bd833df465b5d8
2fe20846b98522fff31cb29980c173597f3d4aa1c22f82faa1614f0197e8d51c

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	State Bank of India

HTTP Headers

GET /main.js HTTP/1.1
Host: getcollectsb.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://getcollectsb.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Thu, 28 Mar 2024 17:22:27 GMT
content-type: application/javascript
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: W/"1c6bd80996c55cd61e4e5b51e0e20b2c"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ZAf7X59a3i4YcizikRRpchRa%2Fh35R1PJEdPOgAVmD3RdbzWYQOwC%2F%2FfrwZifbk4FgNiYgs1wPj8IuhxJv91etOTSZb82m3gK9Ah7kYnCxVWrB5%2F%2Bt3iK2tNfc3sti%2BFqW7iNGCaVJo4h"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 86b94d675f75b511-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

getcollectsb.pages.dev/apple-touch-icon.png

172.66.47.53

404 Not Found

6.5 kB

URL GET HTTP/3
getcollectsb.pages.dev/apple-touch-icon.png
IP
172.66.47.53:443
ASN
#13335 CLOUDFLARENET

Requested by
https://getcollectsb.pages.dev/
Certificate
IssuerGoogle Trust Services LLC
Subjectgetcollectsb.pages.dev
Fingerprint54:52:E2:F4:5B:02:8D:7C:1C:18:E3:95:77:38:AD:F2:7E:9A:3A:C0
ValiditySun, 03 Mar 2024 11:23:41 GMT - Sat, 01 Jun 2024 11:23:40 GMT

File type
HTML document, ASCII text
Size
6.5 kB (6520 bytes)
Hash
0a27a4163254fc8fce870c8cc3a3f94f
f27cf04699668916346eee510eab7e5a17e83997
b77b97fe780d35d18248abd1d2f42f444afbabe43f6abcd8fa8ebb3d47825eee

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	State Bank of India

HTTP Headers

GET /apple-touch-icon.png HTTP/1.1
Host: getcollectsb.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://getcollectsb.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 404 Not Found
date: Thu, 28 Mar 2024 17:22:27 GMT
content-type: text/html; charset=utf-8
access-control-allow-origin: *
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=U5tWWnx6jr3PFueR8OMfqdZdY8lDhAiUHpStsakcfMDLyWPS0rX%2F1a%2Bwms3MshXEQcykd6g%2BsjLOieVEf9bzYg6HswtD7wtmAXOrYbKeEC2utsrcL7YVcfjQW88C3EW2D7osW%2FktELWJ"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 86b94d69d98ab511-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

getcollectsb.pages.dev/favicon-16x16.png

172.66.47.53

404 Not Found

7.7 kB

URL GET HTTP/3
getcollectsb.pages.dev/favicon-16x16.png
IP
172.66.47.53:443
ASN
#13335 CLOUDFLARENET

Requested by
https://getcollectsb.pages.dev/
Certificate
IssuerGoogle Trust Services LLC
Subjectgetcollectsb.pages.dev
Fingerprint54:52:E2:F4:5B:02:8D:7C:1C:18:E3:95:77:38:AD:F2:7E:9A:3A:C0
ValiditySun, 03 Mar 2024 11:23:41 GMT - Sat, 01 Jun 2024 11:23:40 GMT

File type
HTML document, ASCII text
Size
7.7 kB (7664 bytes)
Hash
0a27a4163254fc8fce870c8cc3a3f94f
f27cf04699668916346eee510eab7e5a17e83997
b77b97fe780d35d18248abd1d2f42f444afbabe43f6abcd8fa8ebb3d47825eee

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	State Bank of India

HTTP Headers

GET /favicon-16x16.png HTTP/1.1
Host: getcollectsb.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://getcollectsb.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 404 Not Found
date: Thu, 28 Mar 2024 17:22:27 GMT
content-type: text/html; charset=utf-8
access-control-allow-origin: *
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=7hbFB8G6UNmpjST3k1DjRN3Z22o06tKrZhNZ6JkjrUPXNlYDv%2BVZyCK6Fl%2F%2Bkv%2FNyVhLFtA2p3aQ%2FGNaNy67znSJTzgsJnfQvb8As4FIyxzjbu27dXM%2F1If%2BeIktPNtRQxTYbwlCVPjY"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 86b94d69d98cb511-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

getcollectsb.pages.dev/ipl.svg

172.66.47.53

404 Not Found

1.8 kB

URL GET HTTP/3
getcollectsb.pages.dev/ipl.svg
IP
172.66.47.53:443
ASN
#13335 CLOUDFLARENET

Requested by
https://getcollectsb.pages.dev/
Certificate
IssuerGoogle Trust Services LLC
Subjectgetcollectsb.pages.dev
Fingerprint54:52:E2:F4:5B:02:8D:7C:1C:18:E3:95:77:38:AD:F2:7E:9A:3A:C0
ValiditySun, 03 Mar 2024 11:23:41 GMT - Sat, 01 Jun 2024 11:23:40 GMT

File type
HTML document, ASCII text, with very long lines (1851), with no line terminators
Size
1.8 kB (1808 bytes)
Hash
f39fe64384d3f06712ca448bb2eebca7
b3f9acf0a688d9f7eec09529d40299544f2aea60
c06db50f7daac0e73fec312cf6969ae348ca6572f84021d1ee56b8f7a450ed9d

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	State Bank of India

HTTP Headers

GET /ipl.svg HTTP/1.1
Host: getcollectsb.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://getcollectsb.pages.dev/Style_Main.css
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 404 Not Found
date: Thu, 28 Mar 2024 17:22:27 GMT
content-type: text/html; charset=utf-8
access-control-allow-origin: *
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=1WDiutmaiHX4cgyry1IedBbtxRRyPaV6HP8%2F%2FKn7i3A1a%2F7E4PFSbeEjv%2FHS1WjU6sGeKIOG5nvkYbzZq5ogSU7%2BzbaTfwUbqK4u4BJrpSN5abbrLDo4P9IwpqPtaNY3Q2aN08AYelw9"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 86b94d684856b511-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

www.gstatic.com/firebasejs/10.1.0/firebase-analytics.js

142.250.74.163

200 OK

30 kB

URL GET HTTP/2
www.gstatic.com/firebasejs/10.1.0/firebase-analytics.js
IP
142.250.74.163:443
ASN
#15169 GOOGLE

Requested by
https://getcollectsb.pages.dev/
Certificate
IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintF3:56:10:42:A8:3C:BF:F5:89:9C:4C:C0:F8:E3:DC:C4:1C:E9:34:9E
ValidityMon, 26 Feb 2024 08:18:21 GMT - Mon, 20 May 2024 08:18:20 GMT

File type
JavaScript source, ASCII text, with very long lines (29671)
Size
30 kB (29720 bytes)
Hash
deedb3d03f9851a0a2f95787caa44fe1
1e40872ba9dd445b61566864c6afbf2f36e00a1e
e67b045d4b762e7e2ba2db72a11db7c955db1be93692c06f1e317798d3f52529

HTTP Headers

GET /firebasejs/10.1.0/firebase-analytics.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://getcollectsb.pages.dev/
Origin: https://getcollectsb.pages.dev
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/firebase-js
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="firebase-js"
report-to: {"group":"firebase-js","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/firebase-js"}]}
content-length: 9401
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 26 Mar 2024 17:34:04 GMT
expires: Wed, 26 Mar 2025 17:34:04 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 20 Jul 2023 21:05:01 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
age: 172103
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (8)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (21)

URL GET HTTP/3

IP

ASN