| claim-stakenft.firebaseapp.com/ |  199.36.158.100 | 200 OK | 13 kB |
URL User Request GET HTTP/2claim-stakenft.firebaseapp.com/ IP199.36.158.100:443
CertificateIssuerGoogle Trust Services LLC Subjectfirebaseapp.com Fingerprint6D:BD:C9:A0:A6:73:A0:9B:87:1C:93:A6:7E:16:92:6F:B5:1B:FB:4D ValidityThu, 21 Mar 2024 15:15:15 GMT - Wed, 19 Jun 2024 15:15:14 GMT
File typeHTML document, Unicode text, UTF-8 text, with very long lines (2482) Hashed77fc648c4ff35d6f245938c5a809d5 b3074aaafb88c0618628a8be0ad317fcd034441f 46e5e9867e9c235bc4383868a8245c4cf95904085ebca62876bf137f7a53e8d2
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet | | Quad9 DNS | malicious | Sinkholed |
GET / HTTP/1.1
Host: claim-stakenft.firebaseapp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
cache-control: max-age=3600
content-encoding: br
content-type: text/html; charset=utf-8
etag: "afbe52d8af195eb00401c22ba7e90aa52f5c8e39549ace38afea7d53c6e7a199-br"
last-modified: Fri, 19 Apr 2024 15:56:05 GMT
strict-transport-security: max-age=31556926; includeSubDomains; preload
accept-ranges: bytes
date: Sat, 20 Apr 2024 07:59:02 GMT
x-served-by: cache-hel1410026-HEL
x-cache: HIT
x-cache-hits: 0
x-timer: S1713599942.153698,VS0,VE1
vary: x-fh-requested-host, accept-encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 12615
X-Firefox-Spdy: h2
|
|
| claim-stakenft.firebaseapp.com/js/slick-1.8.1/slick/slick.html | 199.36.158.100 | 404 Not Found | 852 B |
URL GET HTTP/3claim-stakenft.firebaseapp.com/js/slick-1.8.1/slick/slick.html IP199.36.158.100:443
Requested byhttps://claim-stakenft.firebaseapp.com/ CertificateIssuerGoogle Trust Services LLC Subjectfirebaseapp.com Fingerprint6D:BD:C9:A0:A6:73:A0:9B:87:1C:93:A6:7E:16:92:6F:B5:1B:FB:4D ValidityThu, 21 Mar 2024 15:15:15 GMT - Wed, 19 Jun 2024 15:15:14 GMT
File typeHTML document, ASCII text Hash0a27a4163254fc8fce870c8cc3a3f94f f27cf04699668916346eee510eab7e5a17e83997 b77b97fe780d35d18248abd1d2f42f444afbabe43f6abcd8fa8ebb3d47825eee
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet | | Quad9 DNS | malicious | Sinkholed |
GET /js/slick-1.8.1/slick/slick.html HTTP/1.1
Host: claim-stakenft.firebaseapp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://claim-stakenft.firebaseapp.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 404 Not Found
content-length: 852
cache-control: max-age=3600
content-encoding: gzip
content-type: text/html; charset=utf-8
etag: "b6abfbdc894d37c260154e281499dc6415bb6ad76b32f01ef94dee93aa897ac4"
last-modified: Fri, 19 Apr 2024 15:56:05 GMT
strict-transport-security: max-age=31556926; includeSubDomains; preload
accept-ranges: bytes
date: Sat, 20 Apr 2024 07:59:02 GMT
x-served-by: cache-hel1410025-HEL
x-cache: HIT
x-cache-hits: 7
x-timer: S1713599943.516348,VS0,VE0
vary: x-fh-requested-host, accept-encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
|
|
| claim-stakenft.firebaseapp.com/80867ce1-c7ea-46c0-b18e-1926a71ba85c.js | 199.36.158.100 | 200 OK | 302 kB |
URL GET HTTP/3claim-stakenft.firebaseapp.com/80867ce1-c7ea-46c0-b18e-1926a71ba85c.js IP199.36.158.100:443
Requested byhttps://claim-stakenft.firebaseapp.com/ CertificateIssuerGoogle Trust Services LLC Subjectfirebaseapp.com Fingerprint6D:BD:C9:A0:A6:73:A0:9B:87:1C:93:A6:7E:16:92:6F:B5:1B:FB:4D ValidityThu, 21 Mar 2024 15:15:15 GMT - Wed, 19 Jun 2024 15:15:14 GMT
File typeASCII text, with very long lines (65536), with no line terminators Size302 kB (301931 bytes) Hashd62c30c4530b490990eaa21f312d7a6e 106ee8bbbacdca2b1e39a2067c91583d14a710f9 002f79c2a3a31f12b15430dae686ac18b39a204931e8b7121797bd58f49981d4
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet | | Quad9 DNS | malicious | Sinkholed |
GET /80867ce1-c7ea-46c0-b18e-1926a71ba85c.js HTTP/1.1
Host: claim-stakenft.firebaseapp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://claim-stakenft.firebaseapp.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 301931
cache-control: max-age=3600
content-encoding: br
content-type: text/javascript; charset=utf-8
etag: "a397be3569acbd23d304ffbd7865db5e01a76739a8365de7a041e08a2077ee16-br"
last-modified: Fri, 19 Apr 2024 15:56:05 GMT
strict-transport-security: max-age=31556926; includeSubDomains; preload
accept-ranges: bytes
date: Sat, 20 Apr 2024 07:59:02 GMT
x-served-by: cache-hel1410025-HEL
x-cache: HIT
x-cache-hits: 0
x-timer: S1713599943.515323,VS0,VE1
vary: x-fh-requested-host, accept-encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
|
|
| claim-stakenft.firebaseapp.com/css/drops.css | 199.36.158.100 | 200 OK | 310 B |
URL GET HTTP/3claim-stakenft.firebaseapp.com/css/drops.css IP199.36.158.100:443
Requested byhttps://claim-stakenft.firebaseapp.com/ CertificateIssuerGoogle Trust Services LLC Subjectfirebaseapp.com Fingerprint6D:BD:C9:A0:A6:73:A0:9B:87:1C:93:A6:7E:16:92:6F:B5:1B:FB:4D ValidityThu, 21 Mar 2024 15:15:15 GMT - Wed, 19 Jun 2024 15:15:14 GMT
Hashf2785d929e72ee822c03f3a5d9d953ee 6532c19276434337669c349a903d5fb4357cb552 417b6655bfb887f5aa86d902f7e2ed9c82b36ae74a3a00a7bc34288cead3606a
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet | | Quad9 DNS | malicious | Sinkholed |
GET /css/drops.css HTTP/1.1
Host: claim-stakenft.firebaseapp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://claim-stakenft.firebaseapp.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 310
cache-control: max-age=3600
content-encoding: br
content-type: text/css; charset=utf-8
etag: "560c4b126502c25f479669b62bd7c6b4d88b8561beea11b84a993759e2b1a06f-br"
last-modified: Fri, 19 Apr 2024 15:56:05 GMT
strict-transport-security: max-age=31556926; includeSubDomains; preload
accept-ranges: bytes
date: Sat, 20 Apr 2024 07:59:02 GMT
x-served-by: cache-hel1410025-HEL
x-cache: HIT
x-cache-hits: 0
x-timer: S1713599943.517203,VS0,VE1
vary: x-fh-requested-host, accept-encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
|
|
| claim-stakenft.firebaseapp.com/css/fonts.css | 199.36.158.100 | 200 OK | 141 B |
URL GET HTTP/3claim-stakenft.firebaseapp.com/css/fonts.css IP199.36.158.100:443
Requested byhttps://claim-stakenft.firebaseapp.com/ CertificateIssuerGoogle Trust Services LLC Subjectfirebaseapp.com Fingerprint6D:BD:C9:A0:A6:73:A0:9B:87:1C:93:A6:7E:16:92:6F:B5:1B:FB:4D ValidityThu, 21 Mar 2024 15:15:15 GMT - Wed, 19 Jun 2024 15:15:14 GMT
Hashb032dbbc3bbb93ca80d2f189570da51c ce3f373c28e1d35a7adb9dca8f6db95cb24fbccc 41503bfbefe3bc434e1eacc84da2af0e27c9101874345d6c5fb15cf5a6db528a
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet | | Quad9 DNS | malicious | Sinkholed |
GET /css/fonts.css HTTP/1.1
Host: claim-stakenft.firebaseapp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://claim-stakenft.firebaseapp.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 141
cache-control: max-age=3600
content-encoding: br
content-type: text/css; charset=utf-8
etag: "4a019b0a31bd783478add223cde3a72f0d28d78bb9613f7ff8e20fed4709fccd-br"
last-modified: Fri, 19 Apr 2024 15:56:05 GMT
strict-transport-security: max-age=31556926; includeSubDomains; preload
accept-ranges: bytes
date: Sat, 20 Apr 2024 07:59:02 GMT
x-served-by: cache-hel1410025-HEL
x-cache: HIT
x-cache-hits: 0
x-timer: S1713599943.518201,VS0,VE1
vary: x-fh-requested-host, accept-encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
|
|
| claim-stakenft.firebaseapp.com/css/index.css | 199.36.158.100 | 200 OK | 2.6 kB |
URL GET HTTP/3claim-stakenft.firebaseapp.com/css/index.css IP199.36.158.100:443
Requested byhttps://claim-stakenft.firebaseapp.com/ CertificateIssuerGoogle Trust Services LLC Subjectfirebaseapp.com Fingerprint6D:BD:C9:A0:A6:73:A0:9B:87:1C:93:A6:7E:16:92:6F:B5:1B:FB:4D ValidityThu, 21 Mar 2024 15:15:15 GMT - Wed, 19 Jun 2024 15:15:14 GMT
Hash0d1cbffac1b292933c6b6c156cf44ec4 aea170f8f5ae69ef91922bdc831c3c09a12deb1c 50661deac406d37c3e721284c67bd936899238da1bb297052a71ce6498f61ada
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet | | Quad9 DNS | malicious | Sinkholed |
GET /css/index.css HTTP/1.1
Host: claim-stakenft.firebaseapp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://claim-stakenft.firebaseapp.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 2611
cache-control: max-age=3600
content-encoding: br
content-type: text/css; charset=utf-8
etag: "33ce0b1623399c0eeedaab4fc81d002752f473a0c9e2ec4de0cfba942120a57c-br"
last-modified: Fri, 19 Apr 2024 15:56:05 GMT
strict-transport-security: max-age=31556926; includeSubDomains; preload
accept-ranges: bytes
date: Sat, 20 Apr 2024 07:59:02 GMT
x-served-by: cache-hel1410025-HEL
x-cache: HIT
x-cache-hits: 0
x-timer: S1713599943.518933,VS0,VE1
vary: x-fh-requested-host, accept-encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
|
|
| claim-stakenft.firebaseapp.com/js/jquery-3.6.1.min.html | 199.36.158.100 | 404 Not Found | 852 B |
URL GET HTTP/3claim-stakenft.firebaseapp.com/js/jquery-3.6.1.min.html IP199.36.158.100:443
Requested byhttps://claim-stakenft.firebaseapp.com/ CertificateIssuerGoogle Trust Services LLC Subjectfirebaseapp.com Fingerprint6D:BD:C9:A0:A6:73:A0:9B:87:1C:93:A6:7E:16:92:6F:B5:1B:FB:4D ValidityThu, 21 Mar 2024 15:15:15 GMT - Wed, 19 Jun 2024 15:15:14 GMT
File typeHTML document, ASCII text Hash0a27a4163254fc8fce870c8cc3a3f94f f27cf04699668916346eee510eab7e5a17e83997 b77b97fe780d35d18248abd1d2f42f444afbabe43f6abcd8fa8ebb3d47825eee
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet | | Quad9 DNS | malicious | Sinkholed |
GET /js/jquery-3.6.1.min.html HTTP/1.1
Host: claim-stakenft.firebaseapp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://claim-stakenft.firebaseapp.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 404 Not Found
content-length: 852
cache-control: max-age=3600
content-encoding: gzip
content-type: text/html; charset=utf-8
etag: "b6abfbdc894d37c260154e281499dc6415bb6ad76b32f01ef94dee93aa897ac4"
last-modified: Fri, 19 Apr 2024 15:56:05 GMT
strict-transport-security: max-age=31556926; includeSubDomains; preload
accept-ranges: bytes
date: Sat, 20 Apr 2024 07:59:02 GMT
x-served-by: cache-hel1410025-HEL
x-cache: HIT
x-cache-hits: 2
x-timer: S1713599943.524699,VS0,VE0
vary: x-fh-requested-host, accept-encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
|
|
| claim-stakenft.firebaseapp.com/js/slick-1.8.1/slick/slick.min.html | 199.36.158.100 | 404 Not Found | 852 B |
URL GET HTTP/3claim-stakenft.firebaseapp.com/js/slick-1.8.1/slick/slick.min.html IP199.36.158.100:443
Requested byhttps://claim-stakenft.firebaseapp.com/ CertificateIssuerGoogle Trust Services LLC Subjectfirebaseapp.com Fingerprint6D:BD:C9:A0:A6:73:A0:9B:87:1C:93:A6:7E:16:92:6F:B5:1B:FB:4D ValidityThu, 21 Mar 2024 15:15:15 GMT - Wed, 19 Jun 2024 15:15:14 GMT
File typeHTML document, ASCII text Hash0a27a4163254fc8fce870c8cc3a3f94f f27cf04699668916346eee510eab7e5a17e83997 b77b97fe780d35d18248abd1d2f42f444afbabe43f6abcd8fa8ebb3d47825eee
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet | | Quad9 DNS | malicious | Sinkholed |
GET /js/slick-1.8.1/slick/slick.min.html HTTP/1.1
Host: claim-stakenft.firebaseapp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://claim-stakenft.firebaseapp.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 404 Not Found
content-length: 852
cache-control: max-age=3600
content-encoding: gzip
content-type: text/html; charset=utf-8
etag: "b6abfbdc894d37c260154e281499dc6415bb6ad76b32f01ef94dee93aa897ac4"
last-modified: Fri, 19 Apr 2024 15:56:05 GMT
strict-transport-security: max-age=31556926; includeSubDomains; preload
accept-ranges: bytes
date: Sat, 20 Apr 2024 07:59:02 GMT
x-served-by: cache-hel1410025-HEL
x-cache: HIT
x-cache-hits: 0
x-timer: S1713599943.525907,VS0,VE1
vary: x-fh-requested-host, accept-encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
|
|
| claim-stakenft.firebaseapp.com/js/index.html | 199.36.158.100 | 404 Not Found | 852 B |
URL GET HTTP/3claim-stakenft.firebaseapp.com/js/index.html IP199.36.158.100:443
Requested byhttps://claim-stakenft.firebaseapp.com/ CertificateIssuerGoogle Trust Services LLC Subjectfirebaseapp.com Fingerprint6D:BD:C9:A0:A6:73:A0:9B:87:1C:93:A6:7E:16:92:6F:B5:1B:FB:4D ValidityThu, 21 Mar 2024 15:15:15 GMT - Wed, 19 Jun 2024 15:15:14 GMT
File typeHTML document, ASCII text Hash0a27a4163254fc8fce870c8cc3a3f94f f27cf04699668916346eee510eab7e5a17e83997 b77b97fe780d35d18248abd1d2f42f444afbabe43f6abcd8fa8ebb3d47825eee
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet | | Quad9 DNS | malicious | Sinkholed |
GET /js/index.html HTTP/1.1
Host: claim-stakenft.firebaseapp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://claim-stakenft.firebaseapp.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 404 Not Found
content-length: 852
cache-control: max-age=3600
content-encoding: gzip
content-type: text/html; charset=utf-8
etag: "b6abfbdc894d37c260154e281499dc6415bb6ad76b32f01ef94dee93aa897ac4"
last-modified: Fri, 19 Apr 2024 15:56:05 GMT
strict-transport-security: max-age=31556926; includeSubDomains; preload
accept-ranges: bytes
date: Sat, 20 Apr 2024 07:59:02 GMT
x-served-by: cache-hel1410025-HEL
x-cache: HIT
x-cache-hits: 0
x-timer: S1713599943.526393,VS0,VE1
vary: x-fh-requested-host, accept-encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
|
|
| claim-stakenft.firebaseapp.com/img/load%202.gif | 199.36.158.100 | 200 OK | 34 kB |
URL GET HTTP/3claim-stakenft.firebaseapp.com/img/load%202.gif IP199.36.158.100:443
Requested byhttps://claim-stakenft.firebaseapp.com/ CertificateIssuerGoogle Trust Services LLC Subjectfirebaseapp.com Fingerprint6D:BD:C9:A0:A6:73:A0:9B:87:1C:93:A6:7E:16:92:6F:B5:1B:FB:4D ValidityThu, 21 Mar 2024 15:15:15 GMT - Wed, 19 Jun 2024 15:15:14 GMT
File typeGIF image data, version 89a, 178 x 178 Hash1e9028a3ca980be63e7a0b7ff86223a3 fb795c53f646947550416ace4d870a4825d96863 b1c2a203ad9d2d0a22c70bf7a162d8440b2905f724b29b373e8aa52612220639
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet | | Quad9 DNS | malicious | Sinkholed |
GET /img/load%202.gif HTTP/1.1
Host: claim-stakenft.firebaseapp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://claim-stakenft.firebaseapp.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 34484
cache-control: max-age=3600
content-encoding: br
content-type: image/gif
etag: "8ed0fbb671cda6bf5cd61bb1390409d4a77e8f80e45df16ba866d0dfb2e223e6-br"
last-modified: Fri, 19 Apr 2024 15:56:05 GMT
strict-transport-security: max-age=31556926; includeSubDomains; preload
accept-ranges: bytes
date: Sat, 20 Apr 2024 07:59:02 GMT
x-served-by: cache-hel1410025-HEL
x-cache: HIT
x-cache-hits: 0
x-timer: S1713599943.519805,VS0,VE1
vary: x-fh-requested-host, accept-encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
|
|
| claim-stakenft.firebaseapp.com/img/1.jpg | 199.36.158.100 | 200 OK | 79 kB |
URL GET HTTP/3claim-stakenft.firebaseapp.com/img/1.jpg IP199.36.158.100:443
Requested byhttps://claim-stakenft.firebaseapp.com/ CertificateIssuerGoogle Trust Services LLC Subjectfirebaseapp.com Fingerprint6D:BD:C9:A0:A6:73:A0:9B:87:1C:93:A6:7E:16:92:6F:B5:1B:FB:4D ValidityThu, 21 Mar 2024 15:15:15 GMT - Wed, 19 Jun 2024 15:15:14 GMT
File typeJPEG image data, baseline, precision 8, 2048x2048, components 3 Hash45ba137f084cfef082d4987955c80371 987a9ad295bfa6126ee55e98a5f59e7c8e5d7b78 9927d7bd10d01982147d311ed9c0fff7066f3389985804e5cea8b6f3eeaa6610
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet | | Quad9 DNS | malicious | Sinkholed |
GET /img/1.jpg HTTP/1.1
Host: claim-stakenft.firebaseapp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://claim-stakenft.firebaseapp.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 79415
cache-control: max-age=3600
content-encoding: br
content-type: image/jpeg
etag: "b509ddda751f52d94d658e096290932cc1770c9d0ecd70aed9061941d4a5d52a-br"
last-modified: Fri, 19 Apr 2024 15:56:05 GMT
strict-transport-security: max-age=31556926; includeSubDomains; preload
accept-ranges: bytes
date: Sat, 20 Apr 2024 07:59:02 GMT
x-served-by: cache-hel1410025-HEL
x-cache: HIT
x-cache-hits: 4
x-timer: S1713599943.520785,VS0,VE0
vary: x-fh-requested-host, accept-encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
|
|
| claim-stakenft.firebaseapp.com/img/2.jpg | 199.36.158.100 | 200 OK | 74 kB |
URL GET HTTP/3claim-stakenft.firebaseapp.com/img/2.jpg IP199.36.158.100:443
Requested byhttps://claim-stakenft.firebaseapp.com/ CertificateIssuerGoogle Trust Services LLC Subjectfirebaseapp.com Fingerprint6D:BD:C9:A0:A6:73:A0:9B:87:1C:93:A6:7E:16:92:6F:B5:1B:FB:4D ValidityThu, 21 Mar 2024 15:15:15 GMT - Wed, 19 Jun 2024 15:15:14 GMT
File typeJPEG image data, baseline, precision 8, 2048x2048, components 3 Hashb332377a8c696ba08b13419e4ce02e12 e9fc8643b3259d50417e377106361bd188fc054f e32d53f1bc3e89014a167c97dd865a56a548242b96eab4330f12e5196dd44b15
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet | | Quad9 DNS | malicious | Sinkholed |
GET /img/2.jpg HTTP/1.1
Host: claim-stakenft.firebaseapp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://claim-stakenft.firebaseapp.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 74399
cache-control: max-age=3600
content-encoding: br
content-type: image/jpeg
etag: "9fdcf3a0f47cfec224c5f4ebc23251c1b21931af6b72aeeb707d4cae828c485e-br"
last-modified: Fri, 19 Apr 2024 15:56:05 GMT
strict-transport-security: max-age=31556926; includeSubDomains; preload
accept-ranges: bytes
date: Sat, 20 Apr 2024 07:59:02 GMT
x-served-by: cache-hel1410025-HEL
x-cache: HIT
x-cache-hits: 2
x-timer: S1713599943.522114,VS0,VE0
vary: x-fh-requested-host, accept-encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
|
|
| claim-stakenft.firebaseapp.com/img/3.jpg | 199.36.158.100 | 200 OK | 65 kB |
URL GET HTTP/3claim-stakenft.firebaseapp.com/img/3.jpg IP199.36.158.100:443
Requested byhttps://claim-stakenft.firebaseapp.com/ CertificateIssuerGoogle Trust Services LLC Subjectfirebaseapp.com Fingerprint6D:BD:C9:A0:A6:73:A0:9B:87:1C:93:A6:7E:16:92:6F:B5:1B:FB:4D ValidityThu, 21 Mar 2024 15:15:15 GMT - Wed, 19 Jun 2024 15:15:14 GMT
File typeJPEG image data, baseline, precision 8, 2048x2048, components 3 Hash771f140bde258a487bc21351400ffa64 fa67b66ed8750974e577e06c02b6fc03bcff9bc7 70c339af14ed704d438838a1f18d59997c615b85fe463333a37eb1c964c9f568
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet | | Quad9 DNS | malicious | Sinkholed |
GET /img/3.jpg HTTP/1.1
Host: claim-stakenft.firebaseapp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://claim-stakenft.firebaseapp.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 64673
cache-control: max-age=3600
content-encoding: br
content-type: image/jpeg
etag: "f2a842d81c01b581fcb23534686acae41b5023380b3589ae8d2f939fc210a8c1-br"
last-modified: Fri, 19 Apr 2024 15:56:05 GMT
strict-transport-security: max-age=31556926; includeSubDomains; preload
accept-ranges: bytes
date: Sat, 20 Apr 2024 07:59:02 GMT
x-served-by: cache-hel1410025-HEL
x-cache: HIT
x-cache-hits: 0
x-timer: S1713599943.523040,VS0,VE2
vary: x-fh-requested-host, accept-encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
|
|
| claim-stakenft.firebaseapp.com/389-9bec97c22fa2e411.gif | 199.36.158.100 | 200 OK | 646 kB |
URL GET HTTP/3claim-stakenft.firebaseapp.com/389-9bec97c22fa2e411.gif IP199.36.158.100:443
Requested byhttps://claim-stakenft.firebaseapp.com/ CertificateIssuerGoogle Trust Services LLC Subjectfirebaseapp.com Fingerprint6D:BD:C9:A0:A6:73:A0:9B:87:1C:93:A6:7E:16:92:6F:B5:1B:FB:4D ValidityThu, 21 Mar 2024 15:15:15 GMT - Wed, 19 Jun 2024 15:15:14 GMT
File typeGIF image data, version 87a, 750 x 750 Size646 kB (646106 bytes) Hashb9f393bd75705f60c29e15ceddfd2db9 9b3c4261f673b54903d47a5df6b6c981cdd1276e 09268325243816ed6fe7a556c9e33ff179eae6e4a1e9de2194f590aef36d905e
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet | | Quad9 DNS | malicious | Sinkholed |
GET /389-9bec97c22fa2e411.gif HTTP/1.1
Host: claim-stakenft.firebaseapp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://claim-stakenft.firebaseapp.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 646106
cache-control: max-age=3600
content-encoding: br
content-type: image/gif
etag: "5e716bcc9ed9223e932cc83c2998533087c95e316c6d2cd3784810afcf280ef9-br"
last-modified: Fri, 19 Apr 2024 15:56:05 GMT
strict-transport-security: max-age=31556926; includeSubDomains; preload
accept-ranges: bytes
date: Sat, 20 Apr 2024 07:59:02 GMT
x-served-by: cache-hel1410025-HEL
x-cache: HIT
x-cache-hits: 0
x-timer: S1713599943.523779,VS0,VE1
vary: x-fh-requested-host, accept-encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
|
|
| claim-stakenft.firebaseapp.com/cdn-icons-png.flaticon.com/512/1828/1828640.png | 199.36.158.100 | 404 Not Found | 852 B |
URL GET HTTP/3claim-stakenft.firebaseapp.com/cdn-icons-png.flaticon.com/512/1828/1828640.png IP199.36.158.100:443
Requested byhttps://claim-stakenft.firebaseapp.com/ CertificateIssuerGoogle Trust Services LLC Subjectfirebaseapp.com Fingerprint6D:BD:C9:A0:A6:73:A0:9B:87:1C:93:A6:7E:16:92:6F:B5:1B:FB:4D ValidityThu, 21 Mar 2024 15:15:15 GMT - Wed, 19 Jun 2024 15:15:14 GMT
File typeHTML document, ASCII text Hash0a27a4163254fc8fce870c8cc3a3f94f f27cf04699668916346eee510eab7e5a17e83997 b77b97fe780d35d18248abd1d2f42f444afbabe43f6abcd8fa8ebb3d47825eee
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet | | Quad9 DNS | malicious | Sinkholed |
GET /cdn-icons-png.flaticon.com/512/1828/1828640.png HTTP/1.1
Host: claim-stakenft.firebaseapp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://claim-stakenft.firebaseapp.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 404 Not Found
content-length: 852
cache-control: max-age=3600
content-encoding: gzip
content-type: text/html; charset=utf-8
etag: "b6abfbdc894d37c260154e281499dc6415bb6ad76b32f01ef94dee93aa897ac4"
last-modified: Fri, 19 Apr 2024 15:56:05 GMT
strict-transport-security: max-age=31556926; includeSubDomains; preload
accept-ranges: bytes
date: Sat, 20 Apr 2024 07:59:02 GMT
x-served-by: cache-hel1410025-HEL
x-cache: HIT
x-cache-hits: 0
x-timer: S1713599943.527569,VS0,VE1
vary: x-fh-requested-host, accept-encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
|
|
| normandy.cdn.mozilla.net/api/v1/ | 35.201.103.21 | | 598 B |
URL normandy.cdn.mozilla.net/api/v1/ IP35.201.103.21:0 ASN#396982 GOOGLE-CLOUD-PLATFORM
Hash3076f9a5cb273105528b893ff7111e41 b8990c145fe71b9a2410eea41a60a712b43b82bf 69c578fb0c03a28141a975833f660f4571e7991dc28ae7f9cead37672ee2c9b3
GET /api/v1/ HTTP/1.1
Host: normandy.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 598
allow: GET, HEAD, OPTIONS
content-security-policy: block-all-mixed-content; default-src 'self' https://normandy.cdn.mozilla.net/; base-uri 'none'; frame-src 'none'; worker-src 'none'; form-action 'self'; object-src 'none'; report-uri /__cspreport__
x-frame-options: DENY
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
strict-transport-security: max-age=31536000
via: 1.1 google
date: Fri, 19 Apr 2024 23:22:34 GMT
cache-control: public, max-age=86400
content-type: application/json
vary: Accept, Origin
age: 31008
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| classify-client.services.mozilla.com/api/v1/classify_client/ | 34.98.75.36 | | 64 B |
URL classify-client.services.mozilla.com/api/v1/classify_client/ IP34.98.75.36:0 ASN#396982 GOOGLE-CLOUD-PLATFORM
Hash3e96255ecc631f155145ecd382da8ea1 667a833abd4f80d8a6c12fa454f388c166588fc6 1e4f42efae2ad11e6d9f3ef51374b279e739bbc9a1dece25c21296e1455af825
GET /api/v1/classify_client/ HTTP/1.1
Host: classify-client.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sat, 20 Apr 2024 07:59:22 GMT
content-type: application/json
content-length: 64
cache-control: max-age=0, no-cache, no-store, must-revalidate
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
|
|