Report - warning-user-security-764ba.firebaseapp.com/

Report Overview

Visited public
2023-09-26 11:38:13
Tags
meta facebook phishing social
URL
warning-user-security-764ba.firebaseapp.com/
Finishing URL
warning-user-security-764ba.firebaseapp.com/
IP / ASN
199.36.158.100
#54113 FASTLY
Title
Meta For Business
Phishing - Facebook

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
warning-user-security-764ba.firebaseapp.com	unknown	2012-10-15	2023-09-26 02:09:11	2023-09-26 09:45:58	6.0 kB	371 kB	199.36.158.100
ocsp.pki.goog	175	2016-06-13	2018-07-01 08:43:07	2023-09-25 18:12:03	350 B	711 B	142.250.74.131
tracking-protection.cdn.mozilla.net	9282	1998-01-31	2015-09-17 19:00:28	2023-09-25 14:56:50	5.3 kB	1.9 MB	34.120.158.37
get.geojs.io	17418	2017-02-18	2017-03-30 20:44:25	2023-09-26 08:43:46	520 B	1.2 kB	172.67.70.233

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Timestamp	Severity	Source IP	Destination IP	Alert
2023-09-26 11:37:57	medium	Client IP	Internal IP	ET INFO External IP Address Lookup Domain (get .geojs .io) in DNS Lookup
2023-09-26 11:37:57	medium	Client IP	Internal IP	ET INFO External IP Address Lookup Domain (get .geojs .io) in DNS Lookup
2023-09-26 11:37:57	medium	Client IP	172.67.70.233	ET INFO External IP Address Lookup Domain (get .geojs .io) in TLS SNI

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

Scan Date	Severity	Indicator	Alert
2023-09-25	medium	warning-user-security-764ba.firebaseapp.com/	Facebook, Inc.
2023-09-25	medium	warning-user-security-764ba.firebaseapp.com/	Facebook, Inc.
2023-09-25	medium	warning-user-security-764ba.firebaseapp.com/	Facebook, Inc.
2023-09-25	medium	warning-user-security-764ba.firebaseapp.com/	Facebook, Inc.
2023-09-25	medium	warning-user-security-764ba.firebaseapp.com/	Facebook, Inc.
2023-09-25	medium	warning-user-security-764ba.firebaseapp.com/	Facebook, Inc.
2023-09-25	medium	warning-user-security-764ba.firebaseapp.com/	Facebook, Inc.
2023-09-25	medium	warning-user-security-764ba.firebaseapp.com/	Facebook, Inc.
2023-09-25	medium	warning-user-security-764ba.firebaseapp.com/	Facebook, Inc.
2023-09-25	medium	warning-user-security-764ba.firebaseapp.com/	Facebook, Inc.
2023-09-25	medium	warning-user-security-764ba.firebaseapp.com/	Facebook, Inc.
2023-09-25	medium	warning-user-security-764ba.firebaseapp.com/	Facebook, Inc.

PhishTank

Scan Date	Severity	Indicator	Alert
2023-09-25	medium	warning-user-security-764ba.firebaseapp.com/	Other
2023-09-25	medium	warning-user-security-764ba.firebaseapp.com/runtime.458052addb514b0e.js	Other
2023-09-25	medium	warning-user-security-764ba.firebaseapp.com/styles.b126e8e6caf1f0f2.css	Other
2023-09-25	medium	warning-user-security-764ba.firebaseapp.com/main.96531530217ca8da.js	Other
2023-09-25	medium	warning-user-security-764ba.firebaseapp.com/polyfills.e26111d8cb175e34.js	Other
2023-09-25	medium	warning-user-security-764ba.firebaseapp.com/scripts.d47fdc26107e01f2.js	Other
2023-09-25	medium	warning-user-security-764ba.firebaseapp.com/assets/images/metav2.svg	Other
2023-09-25	medium	warning-user-security-764ba.firebaseapp.com/assets/images/fbv2.jpg	Other
2023-09-25	medium	warning-user-security-764ba.firebaseapp.com/assets/images/mail.png	Other
2023-09-25	medium	warning-user-security-764ba.firebaseapp.com/assets/images/avatar.png	Other
2023-09-25	medium	warning-user-security-764ba.firebaseapp.com/assets/images/bg.jpg	Other
2023-09-25	medium	warning-user-security-764ba.firebaseapp.com/favicon.ico	Other

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (5)

	URL	From	Size	First Seen	Last Seen
	warning-user-security-764ba.firebaseapp.com/polyfills.e26111d8cb175e34.js	ScriptElement	34 kB	2023-08-11	2024-12-06
Pretty URL warning-user-security-764ba.firebaseapp.com/polyfills.e26111d8cb175e34.js IP 199.36.158.100 ASN #54113 FASTLY Introduced by scriptElement Embedded in HTML false Observations First Seen2023-08-11 07:47 Last Seen2024-12-06 10:16 Times Seen104 Hash 18c47078c97fdd46790abcb8bdc594dd fc77fbd21326f08e09c87cd170b703945bfef127 956d35c5bec6112f3816aa7bc6d53fcefb68d8972168347dd37b5c1bf69e8ff0 Loading...

	warning-user-security-764ba.firebaseapp.com/scripts.d47fdc26107e01f2.js	ScriptElement	147 kB	2023-08-11	2024-12-06
Pretty URL warning-user-security-764ba.firebaseapp.com/scripts.d47fdc26107e01f2.js IP 199.36.158.100 ASN #54113 FASTLY Introduced by scriptElement Embedded in HTML false Observations First Seen2023-08-11 07:47 Last Seen2024-12-06 10:16 Times Seen104 Hash 5e7429550d2dc78f876e578fdd475120 f55fbf853c72b42b42ea33afbeea0ce238f2d6e2 f6b38cdde3ce1d2c03087042af8867eb12ff0fe242974767b089304afbd6a085 Loading...

	warning-user-security-764ba.firebaseapp.com/main.96531530217ca8da.js	ScriptElement	354 kB	2023-09-19	2023-09-26
Pretty URL warning-user-security-764ba.firebaseapp.com/main.96531530217ca8da.js IP 199.36.158.100 ASN #54113 FASTLY Introduced by scriptElement Embedded in HTML false Observations First Seen2023-09-19 08:51 Last Seen2023-09-26 13:38 Times Seen8 Hash 012c7fa9c7787a8af70c49988bcfaea9 35a3af275fdc0994a781921f3a45d2bb50e72a77 e328b70fe5da202d7c2cf0824b0a177e9796d8edd05b196b9faa7d487ae6525c Loading...

	warning-user-security-764ba.firebaseapp.com/runtime.458052addb514b0e.js	ScriptElement	929 B	2023-07-01	2024-12-06
Pretty URL warning-user-security-764ba.firebaseapp.com/runtime.458052addb514b0e.js IP 199.36.158.100 ASN #54113 FASTLY Introduced by scriptElement Embedded in HTML false Observations First Seen2023-07-01 12:55 Last Seen2024-12-06 10:16 Times Seen109 Hash a1f89d4627633cb53d875df273e65a2a 0757ecb4c893f2468c799286853bd1b1d3feeee1 514651024b3ee42f52719fbd2f91da9dfa920d9dd72c63795d41987d7a9a61dd Loading...

	unknown	EventHandler	16 B	2023-04-10	2025-05-09
Pretty Introduced by eventHandler Embedded in HTML false Observations First Seen2023-04-10 15:57 Last Seen2025-05-09 11:27 Times Seen56570 Hash 7c3c3ddeb80438dcbb3d081d2d00e152 5a4016732ee72ec77b4f6ab17047bcea6d2ea34d 321b4f657afbf8ba49518e6ab4cbad07ea967d0b4c68f71c7deed05ed09c1187 Loading...

HTTP Transactions (27)

URL IP Response Size

warning-user-security-764ba.firebaseapp.com/

199.36.158.100

200 OK

1.7 kB

URL User Request GET HTTP/2
warning-user-security-764ba.firebaseapp.com/
IP
199.36.158.100:443
ASN
#54113 FASTLY

Certificate
IssuerGoogle Trust Services LLC
Subjectfirebaseapp.com
Fingerprint04:74:6E:47:BF:94:51:56:F9:27:7E:1F:07:A6:D0:AA:1F:2B:20:9D
ValidityMon, 11 Sep 2023 19:28:58 GMT - Sun, 10 Dec 2023 19:28:57 GMT

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (4819), with CRLF, LF line terminators
Size
1.7 kB (1715 bytes)
Hash
d726670db1fba8392278d3bb3bf1b13a
80eadb7dca5001697a57ba8589cae8f8eb0f559b
e228e1ba161bd2a29994371726efa0aa74404c0caf2077b0cfb315a9f7641176

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Facebook, Inc.
PhishTank	phishing	Other

HTTP Headers

GET / HTTP/1.1
Host: warning-user-security-764ba.firebaseapp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
cache-control: max-age=3600
content-encoding: br
content-type: text/html; charset=utf-8
etag: "c1bee7981601f48a85fd189c385d93278106a35ef398cfabcde4d4fbc1e6a888-br"
last-modified: Mon, 25 Sep 2023 14:42:15 GMT
strict-transport-security: max-age=31556926; includeSubDomains; preload
accept-ranges: bytes
date: Tue, 26 Sep 2023 11:37:56 GMT
x-served-by: cache-bma1649-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1695728276.916609,VS0,VE275
vary: x-fh-requested-host, accept-encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 1715
X-Firefox-Spdy: h2

ocsp.pki.goog/s/gts1d4int/ZsGyiHvsOQA

142.250.74.131

471 B

URL
ocsp.pki.goog/s/gts1d4int/ZsGyiHvsOQA
IP
142.250.74.131:0
ASN
#15169 GOOGLE

File type
data
Size
471 B (471 bytes)
Hash
ee6dbc6ac938868663253797ae40cf91
1bc16a924b3b88035f8693be80874ecb4faf3669
5b26ed555ef9b75aee8a69ed420d98ba11201339bc656699c33053ca810f6489

HTTP Headers

POST /s/gts1d4int/ZsGyiHvsOQA HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 26 Sep 2023 11:37:56 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

tracking-protection.cdn.mozilla.net/ads-track-digest256/111.0/1684443982

34.120.158.37

56 kB

URL
tracking-protection.cdn.mozilla.net/ads-track-digest256/111.0/1684443982
IP
34.120.158.37:0
ASN
#15169 GOOGLE

File type
data
Size
56 kB (56118 bytes)
Hash
eccf8436aa08de0d355cd2c068568453
e05e69cb2970888f00770ab772d77354df830f05
71a2d75150b4656ff17a9589a66e9e03661fa4ea1dfdf16c1d848efaae082439

HTTP Headers

GET /ads-track-digest256/111.0/1684443982 HTTP/1.1
Host: tracking-protection.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: close
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: none
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
x-amz-id-2: 6fXfGbXW1SScReBSDUX07pwJY41lTNcFqeN3tvZbQKXtRECzI2eKAWLdfEdnUXF1fyOEyYrcd8jW+hUNGlTLyb0ZZ8dwvdSm
x-amz-request-id: E2R9J63QEKCKQ448
x-amz-server-side-encryption: AES256
accept-ranges: bytes
server: AmazonS3
content-length: 56118
via: 1.1 google
date: Mon, 25 Sep 2023 21:28:50 GMT
age: 50946
last-modified: Thu, 18 May 2023 21:16:40 GMT
etag: "eccf8436aa08de0d355cd2c068568453"
content-type: application/octet-stream
cache-control: public,max-age=86400
alt-svc: clear
X-Firefox-Spdy: h2

tracking-protection.cdn.mozilla.net/analytics-track-digest256/111.0/1683905755

34.120.158.37

10 kB

URL
tracking-protection.cdn.mozilla.net/analytics-track-digest256/111.0/1683905755
IP
34.120.158.37:0
ASN
#15169 GOOGLE

File type
data
Size
10 kB (10262 bytes)
Hash
27ca7a562ad626165a25126b5975bc58
de8e9d89b673f3e1375e2a70f3c9d696726dfbe4
405d79f4b44125a2147ac70652ea7e7a544c1a5b34b376f683ea3e90445e7e42

HTTP Headers

GET /analytics-track-digest256/111.0/1683905755 HTTP/1.1
Host: tracking-protection.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: close
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: none
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
x-amz-id-2: +7C2tMxn7LuiJjzOPCZftbN/SIuGhS5iOyG+WwDR4PGdPzOVp1Dfc78x7Dm5J0WywWRpYeBBass=
x-amz-request-id: WGB5TNG7ZPV4NJ7T
x-amz-server-side-encryption: AES256
accept-ranges: bytes
server: AmazonS3
content-length: 10262
via: 1.1 google
date: Tue, 26 Sep 2023 10:57:29 GMT
age: 2427
last-modified: Fri, 12 May 2023 15:46:41 GMT
etag: "27ca7a562ad626165a25126b5975bc58"
content-type: application/octet-stream
cache-control: public,max-age=86400
alt-svc: clear
X-Firefox-Spdy: h2

tracking-protection.cdn.mozilla.net/base-cryptomining-track-digest256/111.0/1683905755

34.120.158.37

2.3 kB

URL
tracking-protection.cdn.mozilla.net/base-cryptomining-track-digest256/111.0/1683905755
IP
34.120.158.37:0
ASN
#15169 GOOGLE

File type
data
Size
2.3 kB (2293 bytes)
Hash
7938ce04b9288ce2553c06df7544718e
0f6bcdb2770858cfc9018dd76d3ac16386afd3e0
efedbe30e6f1ac7617b022b31ccd2920f0d518e9a7f8818447e117fbc7cd30ee

HTTP Headers

GET /base-cryptomining-track-digest256/111.0/1683905755 HTTP/1.1
Host: tracking-protection.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: close
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: none
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
x-amz-id-2: fM5ruwGS6ah2woHAHKGzQ0tgpTmPI9Lbfr36oaN4uxwPqS0tl1V6PJmovmSMr0uqetWsmro87+xbaKlWKrdoxQRPhZTk1yWbBWIFXGrsPrA=
x-amz-request-id: J7CQPDERK4G6JZT7
x-amz-server-side-encryption: AES256
accept-ranges: bytes
server: AmazonS3
content-length: 2293
via: 1.1 google
date: Mon, 25 Sep 2023 21:41:21 GMT
age: 50195
last-modified: Fri, 12 May 2023 15:46:54 GMT
etag: "7938ce04b9288ce2553c06df7544718e"
content-type: application/octet-stream
cache-control: public,max-age=86400
alt-svc: clear
X-Firefox-Spdy: h2

warning-user-security-764ba.firebaseapp.com/runtime.458052addb514b0e.js

199.36.158.100

200 OK

524 B

URL GET HTTP/3
warning-user-security-764ba.firebaseapp.com/runtime.458052addb514b0e.js
IP
199.36.158.100:443
ASN
#54113 FASTLY

Requested by
https://warning-user-security-764ba.firebaseapp.com/
Certificate
IssuerGoogle Trust Services LLC
Subjectfirebaseapp.com
Fingerprint04:74:6E:47:BF:94:51:56:F9:27:7E:1F:07:A6:D0:AA:1F:2B:20:9D
ValidityMon, 11 Sep 2023 19:28:58 GMT - Sun, 10 Dec 2023 19:28:57 GMT

File type
ASCII text, with very long lines (929), with no line terminators
Size
524 B (524 bytes)
Hash
a1f89d4627633cb53d875df273e65a2a
0757ecb4c893f2468c799286853bd1b1d3feeee1
514651024b3ee42f52719fbd2f91da9dfa920d9dd72c63795d41987d7a9a61dd

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Facebook
OpenPhish	phishing	Facebook, Inc.
PhishTank	phishing	Other

HTTP Headers

GET /runtime.458052addb514b0e.js HTTP/1.1
Host: warning-user-security-764ba.firebaseapp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://warning-user-security-764ba.firebaseapp.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
content-length: 524
cache-control: max-age=3600
content-encoding: br
content-type: text/javascript; charset=utf-8
etag: "76ef77f23478ccbf8a65785c50b3f1bd662e0931ec2796c0f56b15f5fa4bd134-br"
last-modified: Mon, 25 Sep 2023 14:42:15 GMT
strict-transport-security: max-age=31556926; includeSubDomains; preload
accept-ranges: bytes
date: Tue, 26 Sep 2023 11:37:56 GMT
x-served-by: cache-bma1648-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1695728277.692538,VS0,VE162
vary: x-fh-requested-host, accept-encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400

warning-user-security-764ba.firebaseapp.com/styles.b126e8e6caf1f0f2.css

199.36.158.100

200 OK

23 kB

URL GET HTTP/3
warning-user-security-764ba.firebaseapp.com/styles.b126e8e6caf1f0f2.css
IP
199.36.158.100:443
ASN
#54113 FASTLY

Requested by
https://warning-user-security-764ba.firebaseapp.com/
Certificate
IssuerGoogle Trust Services LLC
Subjectfirebaseapp.com
Fingerprint04:74:6E:47:BF:94:51:56:F9:27:7E:1F:07:A6:D0:AA:1F:2B:20:9D
ValidityMon, 11 Sep 2023 19:28:58 GMT - Sun, 10 Dec 2023 19:28:57 GMT

File type
ASCII text, with very long lines (65348)
Size
23 kB (22596 bytes)
Hash
1f38901ce98e1e4424b6a7cb3d400c08
ba6e7f3a441117b697ec0e1b8c59b3186c2b3682
c2b63ba523797b09b10f313823bd44b7e2ed806213b10699b4c4d0c7da56e4e0

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Facebook, Inc.
PhishTank	phishing	Other

HTTP Headers

GET /styles.b126e8e6caf1f0f2.css HTTP/1.1
Host: warning-user-security-764ba.firebaseapp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://warning-user-security-764ba.firebaseapp.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
content-length: 22596
cache-control: max-age=3600
content-encoding: br
content-type: text/css; charset=utf-8
etag: "0895c4cf7118e782748094da20a2d8213e6c22a6f460be9bdf3b166213982703-br"
last-modified: Mon, 25 Sep 2023 14:42:15 GMT
strict-transport-security: max-age=31556926; includeSubDomains; preload
accept-ranges: bytes
date: Tue, 26 Sep 2023 11:37:56 GMT
x-served-by: cache-bma1648-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1695728277.694975,VS0,VE189
vary: x-fh-requested-host, accept-encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400

tracking-protection.cdn.mozilla.net/base-email-track-digest256/111.0/1683905755

34.120.158.37

7.0 kB

URL
tracking-protection.cdn.mozilla.net/base-email-track-digest256/111.0/1683905755
IP
34.120.158.37:0
ASN
#15169 GOOGLE

File type
data
Size
7.0 kB (6965 bytes)
Hash
02560eef6a3e694713d21ba526dbf2d2
c300dbaeeb367bd302eaf2941a97cdd54c84bde9
6796e1d3ffc1d5316c498c022fd22be9e15842a3b3166f664d14042b614e491c

HTTP Headers

GET /base-email-track-digest256/111.0/1683905755 HTTP/1.1
Host: tracking-protection.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: close
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: none
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
x-amz-id-2: hNJQX7UE5Qx9wBe4ieXo5Efif8n+dqj9TVJTK/iZHIKBR5cmvs3Snygemwrs3dynNnTUC+YdrZ4=
x-amz-request-id: 2HVR1WQHHA72J9WN
x-amz-server-side-encryption: AES256
accept-ranges: bytes
server: AmazonS3
content-length: 6965
via: 1.1 google
date: Mon, 25 Sep 2023 18:15:50 GMT
age: 62526
last-modified: Fri, 12 May 2023 15:46:56 GMT
etag: "02560eef6a3e694713d21ba526dbf2d2"
content-type: application/octet-stream
cache-control: public,max-age=86400
alt-svc: clear
X-Firefox-Spdy: h2

warning-user-security-764ba.firebaseapp.com/main.96531530217ca8da.js

199.36.158.100

200 OK

98 kB

URL GET HTTP/3
warning-user-security-764ba.firebaseapp.com/main.96531530217ca8da.js
IP
199.36.158.100:443
ASN
#54113 FASTLY

Requested by
https://warning-user-security-764ba.firebaseapp.com/
Certificate
IssuerGoogle Trust Services LLC
Subjectfirebaseapp.com
Fingerprint04:74:6E:47:BF:94:51:56:F9:27:7E:1F:07:A6:D0:AA:1F:2B:20:9D
ValidityMon, 11 Sep 2023 19:28:58 GMT - Sun, 10 Dec 2023 19:28:57 GMT

File type
ASCII text, with very long lines (65536), with no line terminators
Size
98 kB (97977 bytes)
Hash
012c7fa9c7787a8af70c49988bcfaea9
35a3af275fdc0994a781921f3a45d2bb50e72a77
e328b70fe5da202d7c2cf0824b0a177e9796d8edd05b196b9faa7d487ae6525c

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Facebook, Inc.
PhishTank	phishing	Other

HTTP Headers

GET /main.96531530217ca8da.js HTTP/1.1
Host: warning-user-security-764ba.firebaseapp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://warning-user-security-764ba.firebaseapp.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
content-length: 97977
cache-control: max-age=3600
content-encoding: br
content-type: text/javascript; charset=utf-8
etag: "a9348f4d5303d19174ff7d1c820b273773f91a54ad574f820b71b30a821048be-br"
last-modified: Mon, 25 Sep 2023 14:42:15 GMT
strict-transport-security: max-age=31556926; includeSubDomains; preload
accept-ranges: bytes
date: Tue, 26 Sep 2023 11:37:56 GMT
x-served-by: cache-bma1648-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1695728277.693995,VS0,VE231
vary: x-fh-requested-host, accept-encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400

tracking-protection.cdn.mozilla.net/base-fingerprinting-track-digest256/111.0/1683905755

34.120.158.37

3.6 kB

URL
tracking-protection.cdn.mozilla.net/base-fingerprinting-track-digest256/111.0/1683905755
IP
34.120.158.37:0
ASN
#15169 GOOGLE

File type
data
Size
3.6 kB (3637 bytes)
Hash
84a28e1e64a4aca618879e590fb29c47
ddea829bfd334fe48e25374f36119c6ce19bdfeb
e87ee13b3afbcefcfd7f87bdd26b12aa18b79437ebd4a3cf689f78aefa0a7d1e

HTTP Headers

GET /base-fingerprinting-track-digest256/111.0/1683905755 HTTP/1.1
Host: tracking-protection.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: close
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: none
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
x-amz-id-2: Rrm1vRAzhw71TyY7SrSHQ2KWfkejQR1G7NThdhV4293tpQDc5JFlnLijYJgQGWmncXdiIn84XlM=
x-amz-request-id: 6G938ZM3X28Q1G2F
x-amz-server-side-encryption: AES256
accept-ranges: bytes
server: AmazonS3
content-length: 3637
via: 1.1 google
date: Mon, 25 Sep 2023 16:19:52 GMT
age: 69484
last-modified: Fri, 12 May 2023 15:46:52 GMT
etag: "84a28e1e64a4aca618879e590fb29c47"
content-type: application/octet-stream
cache-control: public,max-age=86400
alt-svc: clear
X-Firefox-Spdy: h2

warning-user-security-764ba.firebaseapp.com/polyfills.e26111d8cb175e34.js

199.36.158.100

200 OK

11 kB

URL GET HTTP/3
warning-user-security-764ba.firebaseapp.com/polyfills.e26111d8cb175e34.js
IP
199.36.158.100:443
ASN
#54113 FASTLY

Requested by
https://warning-user-security-764ba.firebaseapp.com/
Certificate
IssuerGoogle Trust Services LLC
Subjectfirebaseapp.com
Fingerprint04:74:6E:47:BF:94:51:56:F9:27:7E:1F:07:A6:D0:AA:1F:2B:20:9D
ValidityMon, 11 Sep 2023 19:28:58 GMT - Sun, 10 Dec 2023 19:28:57 GMT

File type
ASCII text, with very long lines (33825), with no line terminators
Size
11 kB (10886 bytes)
Hash
18c47078c97fdd46790abcb8bdc594dd
fc77fbd21326f08e09c87cd170b703945bfef127
956d35c5bec6112f3816aa7bc6d53fcefb68d8972168347dd37b5c1bf69e8ff0

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Facebook, Inc.
PhishTank	phishing	Other

HTTP Headers

GET /polyfills.e26111d8cb175e34.js HTTP/1.1
Host: warning-user-security-764ba.firebaseapp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://warning-user-security-764ba.firebaseapp.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
content-length: 10886
cache-control: max-age=3600
content-encoding: br
content-type: text/javascript; charset=utf-8
etag: "fb31046df0f5d649edb32f21775fb20a82133a779721eb1b3a209b4d7b07ce9d-br"
last-modified: Mon, 25 Sep 2023 14:42:15 GMT
strict-transport-security: max-age=31556926; includeSubDomains; preload
accept-ranges: bytes
date: Tue, 26 Sep 2023 11:37:56 GMT
x-served-by: cache-bma1648-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1695728277.692845,VS0,VE264
vary: x-fh-requested-host, accept-encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400

warning-user-security-764ba.firebaseapp.com/scripts.d47fdc26107e01f2.js

199.36.158.100

200 OK

43 kB

URL GET HTTP/3
warning-user-security-764ba.firebaseapp.com/scripts.d47fdc26107e01f2.js
IP
199.36.158.100:443
ASN
#54113 FASTLY

Requested by
https://warning-user-security-764ba.firebaseapp.com/
Certificate
IssuerGoogle Trust Services LLC
Subjectfirebaseapp.com
Fingerprint04:74:6E:47:BF:94:51:56:F9:27:7E:1F:07:A6:D0:AA:1F:2B:20:9D
ValidityMon, 11 Sep 2023 19:28:58 GMT - Sun, 10 Dec 2023 19:28:57 GMT

File type
ASCII text, with very long lines (65536), with no line terminators
Size
43 kB (42807 bytes)
Hash
5e7429550d2dc78f876e578fdd475120
f55fbf853c72b42b42ea33afbeea0ce238f2d6e2
f6b38cdde3ce1d2c03087042af8867eb12ff0fe242974767b089304afbd6a085

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Facebook, Inc.
PhishTank	phishing	Other

HTTP Headers

GET /scripts.d47fdc26107e01f2.js HTTP/1.1
Host: warning-user-security-764ba.firebaseapp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://warning-user-security-764ba.firebaseapp.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
content-length: 42807
cache-control: max-age=3600
content-encoding: br
content-type: text/javascript; charset=utf-8
etag: "86f220e1f38820501549a667fd14575fde74d8b483732cca0af1744d84ab275e-br"
last-modified: Mon, 25 Sep 2023 14:42:15 GMT
strict-transport-security: max-age=31556926; includeSubDomains; preload
accept-ranges: bytes
date: Tue, 26 Sep 2023 11:37:56 GMT
x-served-by: cache-bma1648-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1695728277.693186,VS0,VE293
vary: x-fh-requested-host, accept-encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400

tracking-protection.cdn.mozilla.net/content-email-track-digest256/111.0/1683905755

34.120.158.37

8.9 kB

URL
tracking-protection.cdn.mozilla.net/content-email-track-digest256/111.0/1683905755
IP
34.120.158.37:0
ASN
#15169 GOOGLE

File type
data
Size
8.9 kB (8853 bytes)
Hash
b9c2809ffc057abb94df0750c8cb57dd
e8ab5e486a0b53147eb8d66ca4585a06c5bbd210
b9816319448d2ccb8ef6a6e2aaefe13a9fa96335bdc1fd57c281dfe7ff95ede9

HTTP Headers

GET /content-email-track-digest256/111.0/1683905755 HTTP/1.1
Host: tracking-protection.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: close
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: none
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
x-amz-id-2: mRZlwUsQ1rP+nRJkBRWrOczBiiHALMi8fd9ENkAQgcndGcpjy+UGdxKtegAkAAhrvippyTbtyOE=
x-amz-request-id: M4C3NS99BMADTD0Z
x-amz-server-side-encryption: AES256
accept-ranges: bytes
server: AmazonS3
content-length: 8853
via: 1.1 google
date: Tue, 26 Sep 2023 08:12:21 GMT
age: 12336
last-modified: Fri, 12 May 2023 15:46:57 GMT
etag: "b9c2809ffc057abb94df0750c8cb57dd"
content-type: application/octet-stream
cache-control: public,max-age=86400
alt-svc: clear
X-Firefox-Spdy: h2

tracking-protection.cdn.mozilla.net/content-track-digest256/111.0/1683905755

34.120.158.37

15 kB

URL
tracking-protection.cdn.mozilla.net/content-track-digest256/111.0/1683905755
IP
34.120.158.37:0
ASN
#15169 GOOGLE

File type
data
Size
15 kB (15382 bytes)
Hash
d78d9f71f82fcce3a0d9079ec988ed05
13f8a07b0437728b11cefeda36b6211262d3af16
7449b095579811871ecad49889db2ae188486b18ab96f903a20941e34cfef7ee

HTTP Headers

GET /content-track-digest256/111.0/1683905755 HTTP/1.1
Host: tracking-protection.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: close
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: none
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
x-amz-id-2: k/EissplBymAm8DrVedreKZOEr5Xumq24oLUprx1+IEt4YD5WllvGmKzD2HlQu24oqyX43Uqr+HPycEOCZbyMw==
x-amz-request-id: ZVGM6TY54TYS9NVX
x-amz-server-side-encryption: AES256
accept-ranges: bytes
server: AmazonS3
content-length: 15382
via: 1.1 google
date: Mon, 25 Sep 2023 16:19:23 GMT
age: 69514
last-modified: Fri, 12 May 2023 15:46:39 GMT
etag: "d78d9f71f82fcce3a0d9079ec988ed05"
content-type: application/octet-stream
cache-control: public,max-age=86400
alt-svc: clear
X-Firefox-Spdy: h2

tracking-protection.cdn.mozilla.net/google-trackwhite-digest256/111.0/1683905755

34.120.158.37

1.5 MB

URL
tracking-protection.cdn.mozilla.net/google-trackwhite-digest256/111.0/1683905755
IP
34.120.158.37:0
ASN
#15169 GOOGLE

File type
data
Size
1.5 MB (1470328 bytes)
Hash
2146c997750a1c7e55eb69a5a1a5e5b4
69ba29aca5c6a4bea1365e895b3c5b31df31220a
507d674f59748ff86ff629a2eb98b3cd343aec0a21e58089793341dc96361188

HTTP Headers

GET /google-trackwhite-digest256/111.0/1683905755 HTTP/1.1
Host: tracking-protection.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: close
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: none
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
x-amz-id-2: YW+WRBz7ZvuSEe1qarW5A5DlIaPdujVKlpk9AhyudMhb20oZZAuKpDiwhUnVvDxUVoZ2/xBicyk=
x-amz-request-id: MMV8JMY606WN12G1
x-amz-server-side-encryption: AES256
accept-ranges: bytes
server: AmazonS3
via: 1.1 google
date: Tue, 26 Sep 2023 00:18:32 GMT
age: 40765
last-modified: Fri, 12 May 2023 15:46:50 GMT
etag: "2146c997750a1c7e55eb69a5a1a5e5b4"
content-type: application/octet-stream
content-length: 1470328
cache-control: public,max-age=86400
alt-svc: clear
X-Firefox-Spdy: h2

warning-user-security-764ba.firebaseapp.com/assets/images/metav2.svg

199.36.158.100

200 OK

1.5 kB

URL GET HTTP/3
warning-user-security-764ba.firebaseapp.com/assets/images/metav2.svg
IP
199.36.158.100:443
ASN
#54113 FASTLY

Requested by
https://warning-user-security-764ba.firebaseapp.com/
Certificate
IssuerGoogle Trust Services LLC
Subjectfirebaseapp.com
Fingerprint04:74:6E:47:BF:94:51:56:F9:27:7E:1F:07:A6:D0:AA:1F:2B:20:9D
ValidityMon, 11 Sep 2023 19:28:58 GMT - Sun, 10 Dec 2023 19:28:57 GMT

File type
SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document, ASCII text, with very long lines (1065), with CRLF line terminators
Size
1.5 kB (1513 bytes)
Hash
9b335949f31c71ece0fd3d452d9db168
4b3df4457435d62846f471d1f5be3e873b01e82f
3957151c7a511ea40978ce0d6244d7d20335eb91be7acfb2256f1d0397b293bf

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Facebook
OpenPhish	phishing	Facebook, Inc.
PhishTank	phishing	Other

HTTP Headers

GET /assets/images/metav2.svg HTTP/1.1
Host: warning-user-security-764ba.firebaseapp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://warning-user-security-764ba.firebaseapp.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
content-length: 1513
cache-control: max-age=3600
content-encoding: br
content-type: image/svg+xml
etag: "a8677fe3c157f66f3d6775e5e224bd42430dd445c6d9a39423cfc4c2669355d7-br"
last-modified: Mon, 25 Sep 2023 14:42:15 GMT
strict-transport-security: max-age=31556926; includeSubDomains; preload
accept-ranges: bytes
date: Tue, 26 Sep 2023 11:37:57 GMT
x-served-by: cache-bma1648-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1695728277.319165,VS0,VE50
vary: x-fh-requested-host, accept-encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400

warning-user-security-764ba.firebaseapp.com/assets/images/fbv2.jpg

199.36.158.100

200 OK

2.6 kB

URL GET HTTP/3
warning-user-security-764ba.firebaseapp.com/assets/images/fbv2.jpg
IP
199.36.158.100:443
ASN
#54113 FASTLY

Requested by
https://warning-user-security-764ba.firebaseapp.com/
Certificate
IssuerGoogle Trust Services LLC
Subjectfirebaseapp.com
Fingerprint04:74:6E:47:BF:94:51:56:F9:27:7E:1F:07:A6:D0:AA:1F:2B:20:9D
ValidityMon, 11 Sep 2023 19:28:58 GMT - Sun, 10 Dec 2023 19:28:57 GMT

File type
JPEG image data, JFIF standard 1.01, resolution (DPCM), density 236x236, segment length 16, progressive, precision 8, 236x236, components 3\012- data
Size
2.6 kB (2598 bytes)
Hash
e165af495d51ef5b46cad3d602a2a5f8
e3d73bf45f360750678f666b4fa51553aad7090d
171f1b3ac7b11ef605b96f91537ed2cc32ab21d7233733114a923d21d552b021

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Facebook
OpenPhish	phishing	Facebook, Inc.
PhishTank	phishing	Other

HTTP Headers

GET /assets/images/fbv2.jpg HTTP/1.1
Host: warning-user-security-764ba.firebaseapp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://warning-user-security-764ba.firebaseapp.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
content-length: 2598
cache-control: max-age=3600
content-encoding: br
content-type: image/jpeg
etag: "67d395abf7e22d73484f5ce7e074dbcffe57cb4e0106c282080f3869571c7489-br"
last-modified: Mon, 25 Sep 2023 14:42:15 GMT
strict-transport-security: max-age=31556926; includeSubDomains; preload
accept-ranges: bytes
date: Tue, 26 Sep 2023 11:37:57 GMT
x-served-by: cache-bma1648-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1695728277.319104,VS0,VE56
vary: x-fh-requested-host, accept-encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400

warning-user-security-764ba.firebaseapp.com/assets/images/mail.png

199.36.158.100

200 OK

35 kB

URL GET HTTP/3
warning-user-security-764ba.firebaseapp.com/assets/images/mail.png
IP
199.36.158.100:443
ASN
#54113 FASTLY

Requested by
https://warning-user-security-764ba.firebaseapp.com/
Certificate
IssuerGoogle Trust Services LLC
Subjectfirebaseapp.com
Fingerprint04:74:6E:47:BF:94:51:56:F9:27:7E:1F:07:A6:D0:AA:1F:2B:20:9D
ValidityMon, 11 Sep 2023 19:28:58 GMT - Sun, 10 Dec 2023 19:28:57 GMT

File type
PNG image data, 980 x 980, 8-bit/color RGBA, non-interlaced\012- data
Size
35 kB (34701 bytes)
Hash
fcc1a02c43f8b747800efad74e216e10
04f58768630dbec54244fb92f763f498a5847300
959efe16cdf285e6e9152f5eda5494c2dfc5bc23ce250380f6ee7a9b511e97d1

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Facebook, Inc.
PhishTank	phishing	Other

HTTP Headers

GET /assets/images/mail.png HTTP/1.1
Host: warning-user-security-764ba.firebaseapp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://warning-user-security-764ba.firebaseapp.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
content-length: 34701
cache-control: max-age=3600
content-encoding: gzip
content-type: image/png
etag: "05818032630223eef23d3a21f51ede5294f9932f9e1620771bce713bd60d2ab8"
last-modified: Mon, 25 Sep 2023 14:42:15 GMT
strict-transport-security: max-age=31556926; includeSubDomains; preload
accept-ranges: bytes
date: Tue, 26 Sep 2023 11:37:57 GMT
x-served-by: cache-bma1648-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1695728277.319115,VS0,VE79
vary: x-fh-requested-host, accept-encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400

warning-user-security-764ba.firebaseapp.com/assets/images/avatar.png

199.36.158.100

200 OK

57 kB

URL GET HTTP/3
warning-user-security-764ba.firebaseapp.com/assets/images/avatar.png
IP
199.36.158.100:443
ASN
#54113 FASTLY

Requested by
https://warning-user-security-764ba.firebaseapp.com/
Certificate
IssuerGoogle Trust Services LLC
Subjectfirebaseapp.com
Fingerprint04:74:6E:47:BF:94:51:56:F9:27:7E:1F:07:A6:D0:AA:1F:2B:20:9D
ValidityMon, 11 Sep 2023 19:28:58 GMT - Sun, 10 Dec 2023 19:28:57 GMT

File type
PNG image data, 662 x 664, 8-bit/color RGBA, non-interlaced\012- data
Size
57 kB (57170 bytes)
Hash
02fb04256d936e0d83a6340a1d1f3af4
b8bfe3b59f0dc0d7841d17f4352ac2ce0feb2238
0734468737b7eaf71a997b518a6b70a4ec17d136f41bf3bb562429bbea1de8cb

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Facebook
OpenPhish	phishing	Facebook, Inc.
PhishTank	phishing	Other

HTTP Headers

GET /assets/images/avatar.png HTTP/1.1
Host: warning-user-security-764ba.firebaseapp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://warning-user-security-764ba.firebaseapp.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
content-length: 57170
cache-control: max-age=3600
content-encoding: gzip
content-type: image/png
etag: "0abff7c492d5592d85ce2d6bafe5a86ffcbd23e430576049555a99773d24d4c0"
last-modified: Mon, 25 Sep 2023 14:42:15 GMT
strict-transport-security: max-age=31556926; includeSubDomains; preload
accept-ranges: bytes
date: Tue, 26 Sep 2023 11:37:57 GMT
x-served-by: cache-bma1648-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1695728277.319093,VS0,VE96
vary: x-fh-requested-host, accept-encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400

warning-user-security-764ba.firebaseapp.com/assets/images/bg.jpg

199.36.158.100

200 OK

76 kB

URL GET HTTP/3
warning-user-security-764ba.firebaseapp.com/assets/images/bg.jpg
IP
199.36.158.100:443
ASN
#54113 FASTLY

Requested by
https://warning-user-security-764ba.firebaseapp.com/
Certificate
IssuerGoogle Trust Services LLC
Subjectfirebaseapp.com
Fingerprint04:74:6E:47:BF:94:51:56:F9:27:7E:1F:07:A6:D0:AA:1F:2B:20:9D
ValidityMon, 11 Sep 2023 19:28:58 GMT - Sun, 10 Dec 2023 19:28:57 GMT

File type
JPEG image data, baseline, precision 8, 1920x175, components 3\012- data
Size
76 kB (76203 bytes)
Hash
49a366b72644f04ea8efccf9550fb0a5
54492aa337fc8ee34297a04fd789d202fba78d58
289d99b21fae145c868238c0c499dcf8e84bea445b63e47e3406acfe98e20a34

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Facebook
OpenPhish	phishing	Facebook, Inc.
PhishTank	phishing	Other

HTTP Headers

GET /assets/images/bg.jpg HTTP/1.1
Host: warning-user-security-764ba.firebaseapp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://warning-user-security-764ba.firebaseapp.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
content-length: 76203
cache-control: max-age=3600
content-encoding: br
content-type: image/jpeg
etag: "7f1f63f4fcd132f1b4eaa76b9572f90894bb86906ab87a9b26ab162eed168b15-br"
last-modified: Mon, 25 Sep 2023 14:42:15 GMT
strict-transport-security: max-age=31556926; includeSubDomains; preload
accept-ranges: bytes
date: Tue, 26 Sep 2023 11:37:57 GMT
x-served-by: cache-bma1648-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1695728277.319075,VS0,VE112
vary: x-fh-requested-host, accept-encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400

tracking-protection.cdn.mozilla.net/mozstd-trackwhite-digest256/111.0/1684443982

34.120.158.37

345 kB

URL
tracking-protection.cdn.mozilla.net/mozstd-trackwhite-digest256/111.0/1684443982
IP
34.120.158.37:0
ASN
#15169 GOOGLE

File type
data
Size
345 kB (344663 bytes)
Hash
aacf54fd5b2994c73b3e4e5e13f4b5a2
10494f54553c768432a556492e655aa774456927
bee12d3c1d013147f78ee8ce7d9fa5e83679cc650763c6f4f49a10ff2d4537e5

HTTP Headers

GET /mozstd-trackwhite-digest256/111.0/1684443982 HTTP/1.1
Host: tracking-protection.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: close
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: none
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
x-amz-id-2: EoHlnQAe4ClOJdLcuD3a36gHziSDikvO0GO1lCcUH0EErNma2ubTZb5aOM8qFj0TOL99g1vWYTA=
x-amz-request-id: WC92RWWKQ23RPPG8
x-amz-server-side-encryption: AES256
accept-ranges: bytes
server: AmazonS3
content-length: 344663
via: 1.1 google
date: Mon, 25 Sep 2023 21:43:26 GMT
age: 50071
last-modified: Thu, 18 May 2023 21:16:46 GMT
etag: "aacf54fd5b2994c73b3e4e5e13f4b5a2"
content-type: application/octet-stream
cache-control: public,max-age=86400
alt-svc: clear
X-Firefox-Spdy: h2

tracking-protection.cdn.mozilla.net/social-track-digest256/111.0/1683905755

34.120.158.37

2.2 kB

URL
tracking-protection.cdn.mozilla.net/social-track-digest256/111.0/1683905755
IP
34.120.158.37:0
ASN
#15169 GOOGLE

File type
data
Size
2.2 kB (2197 bytes)
Hash
f901679cf935d4b6067610a7287d0b99
fffa5389bec50a175f18deaf8933401edc4bd262
d553a4537f796d580ea8f696062c19540f1d332e2b478942f6ddea3952c6df4c

HTTP Headers

GET /social-track-digest256/111.0/1683905755 HTTP/1.1
Host: tracking-protection.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: close
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: none
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
x-amz-id-2: XXwD/w+LMoRsdKjLoaKPtQNrQGTLQb55Z4C878kGzitXKTeWBYWByiu26EQEBzCOPG01GB8RkVM=
x-amz-request-id: M9NNV19NPHTJW2DX
x-amz-server-side-encryption: AES256
accept-ranges: bytes
server: AmazonS3
content-length: 2197
via: 1.1 google
date: Tue, 26 Sep 2023 06:01:31 GMT
age: 20186
last-modified: Fri, 12 May 2023 15:46:42 GMT
etag: "f901679cf935d4b6067610a7287d0b99"
content-type: application/octet-stream
cache-control: public,max-age=86400
alt-svc: clear
X-Firefox-Spdy: h2

warning-user-security-764ba.firebaseapp.com/favicon.ico

199.36.158.100

200 OK

15 kB

URL GET HTTP/3
warning-user-security-764ba.firebaseapp.com/favicon.ico
IP
199.36.158.100:443
ASN
#54113 FASTLY

Requested by
https://warning-user-security-764ba.firebaseapp.com/
Certificate
IssuerGoogle Trust Services LLC
Subjectfirebaseapp.com
Fingerprint04:74:6E:47:BF:94:51:56:F9:27:7E:1F:07:A6:D0:AA:1F:2B:20:9D
ValidityMon, 11 Sep 2023 19:28:58 GMT - Sun, 10 Dec 2023 19:28:57 GMT

File type
MS Windows icon resource - 6 icons, 256x256 with PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced, 32 bits/pixel, -128x-128, 32 bits/pixel\012- data
Size
15 kB (15277 bytes)
Hash
d651c1d04dff0a7bfd8dbd30102780de
111f776ec0200627ac99f088af0edd163c435914
05f09d3d9a4ef961bcf72ee012b6739bd823e04e894f5f4c04218237b56d7189

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Facebook
OpenPhish	phishing	Facebook, Inc.
PhishTank	phishing	Other

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: warning-user-security-764ba.firebaseapp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://warning-user-security-764ba.firebaseapp.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
content-length: 15277
cache-control: max-age=3600
content-encoding: br
content-type: image/x-icon
etag: "cb92d0a0461c2b8b9c8b3069b9369dae6089c331b6dbc04e6080a309fd7863ee-br"
last-modified: Mon, 25 Sep 2023 14:42:15 GMT
strict-transport-security: max-age=31556926; includeSubDomains; preload
accept-ranges: bytes
date: Tue, 26 Sep 2023 11:37:57 GMT
x-served-by: cache-bma1648-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1695728278.509850,VS0,VE106
vary: x-fh-requested-host, accept-encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400

tracking-protection.cdn.mozilla.net/social-tracking-protection-facebook-digest256/111.0/1683905755

34.120.158.37

468 B

URL
tracking-protection.cdn.mozilla.net/social-tracking-protection-facebook-digest256/111.0/1683905755
IP
34.120.158.37:0
ASN
#15169 GOOGLE

File type
data
Size
468 B (468 bytes)
Hash
092bf11bed810e853f65d296f1e8b9e3
fed3b3a85aaf2bf1790fb115201b0dfdefe3982c
8c89c977f2c3f91b1050c645843453edc3d5bfcbe5e4af4b945b385f1b60046f

HTTP Headers

GET /social-tracking-protection-facebook-digest256/111.0/1683905755 HTTP/1.1
Host: tracking-protection.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: close
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: none
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
x-amz-id-2: rHkGfbCrSdQwdWXMVOSRE2P9uwwO5aBEXnZSi8L0bEsowMWdXHvzYZT/uVDlppzH3GmQJp9e0XU=
x-amz-request-id: 8S2RKARHSFJ0SJ0M
x-amz-server-side-encryption: AES256
accept-ranges: bytes
server: AmazonS3
content-length: 468
via: 1.1 google
date: Mon, 25 Sep 2023 16:14:59 GMT
age: 69778
last-modified: Fri, 12 May 2023 15:46:44 GMT
etag: "092bf11bed810e853f65d296f1e8b9e3"
content-type: application/octet-stream
cache-control: public,max-age=86400
alt-svc: clear
X-Firefox-Spdy: h2

tracking-protection.cdn.mozilla.net/social-tracking-protection-linkedin-digest256/111.0/1683905755

34.120.158.37

148 B

URL
tracking-protection.cdn.mozilla.net/social-tracking-protection-linkedin-digest256/111.0/1683905755
IP
34.120.158.37:0
ASN
#15169 GOOGLE

File type
data
Size
148 B (148 bytes)
Hash
90a72e82e4192224c509d557fd1d0d0c
19fe3346057c74364b7a2a2c1de0011a19c153d8
1024a91771abf18dd0a4de9dcc166ba7f9d224c803b6a5854f3f2db8d9a3c4a2

HTTP Headers

GET /social-tracking-protection-linkedin-digest256/111.0/1683905755 HTTP/1.1
Host: tracking-protection.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: close
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: none
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
x-amz-id-2: PJOp4f8B8hWJtzXRovnlyvkChCvqiumV7E4PF2cP0fLfflqVdTDGw1o5f+D7h1Yc9XJNxFTn3bkqOS/qzSx5hQ==
x-amz-request-id: RZ2V4WFDEAZRX4QC
x-amz-server-side-encryption: AES256
accept-ranges: bytes
server: AmazonS3
content-length: 148
via: 1.1 google
date: Mon, 25 Sep 2023 21:40:14 GMT
age: 50263
last-modified: Fri, 12 May 2023 15:46:46 GMT
etag: "90a72e82e4192224c509d557fd1d0d0c"
content-type: application/octet-stream
cache-control: public,max-age=86400
alt-svc: clear
X-Firefox-Spdy: h2

tracking-protection.cdn.mozilla.net/social-tracking-protection-twitter-digest256/111.0/1683905755

34.120.158.37

244 B

URL
tracking-protection.cdn.mozilla.net/social-tracking-protection-twitter-digest256/111.0/1683905755
IP
34.120.158.37:0
ASN
#15169 GOOGLE

File type
data
Size
244 B (244 bytes)
Hash
44186218fd668b3ffe6d95bc9c2acf06
e5b11bad035d82c42f2783024bb40fb2fa00d7e6
6d7715ed174a8438063ca39237b2e0c7e204dd68d0396866bc898a7e7aa70372

HTTP Headers

GET /social-tracking-protection-twitter-digest256/111.0/1683905755 HTTP/1.1
Host: tracking-protection.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: close
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: none
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
x-amz-id-2: ObviZFZd8C3KaOrKcFE0OW7np9XuerVsuDwNK/43GLSeAY052WNR9DQiVB8BLscPyGqE6VePjdw=
x-amz-request-id: 3BMBMTTG95Z64V95
x-amz-server-side-encryption: AES256
accept-ranges: bytes
server: AmazonS3
content-length: 244
via: 1.1 google
date: Mon, 25 Sep 2023 16:20:21 GMT
age: 69456
last-modified: Fri, 12 May 2023 15:46:45 GMT
etag: "44186218fd668b3ffe6d95bc9c2acf06"
content-type: application/octet-stream
cache-control: public,max-age=86400
alt-svc: clear
X-Firefox-Spdy: h2

get.geojs.io/v1/ip/geo.json

172.67.70.233

200 OK

335 B

URL GET HTTP/2
get.geojs.io/v1/ip/geo.json
IP
172.67.70.233:443
ASN
#13335 CLOUDFLARENET

Requested by
https://warning-user-security-764ba.firebaseapp.com/
Certificate
IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintEB:CA:6A:D8:FF:32:A1:B5:BE:F9:8E:E2:0F:EE:72:9C:7C:EF:7E:C3
ValidityTue, 11 Apr 2023 00:00:00 GMT - Wed, 10 Apr 2024 23:59:59 GMT

File type
troff or preprocessor input, ASCII text, with very long lines (393), with no line terminators
Size
335 B (335 bytes)
Hash
5e0912ac085491670f30687914352893
16edd49964a5e91e01e662beb10fe388a9b7ab60
aaacf880f054aa8aea935059706bf7f99b7aee8c8fd0f96723a77da6fe1e7080

HTTP Headers

GET /v1/ip/geo.json HTTP/1.1
Host: get.geojs.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://warning-user-security-764ba.firebaseapp.com
DNT: 1
Connection: keep-alive
Referer: https://warning-user-security-764ba.firebaseapp.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Tue, 26 Sep 2023 11:37:57 GMT
content-type: application/json
x-request-id: 9aad64cdafd5f0e3c7b98a132cd83720-AMS
strict-transport-security: max-age=15552000; includeSubDomains; preload
access-control-allow-origin: *
access-control-allow-methods: GET
pragma: no-cache
cache-control: no-store, no-cache, must-revalidate, private, max-age=0
x-geojs-location: AMS
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=H7QdjMzCp%2BW05KHEqQj%2BOw6rwr%2B9lNqp79YE62oxdQxGQCf2TzPfGZavHs6uPC36Rcfu4HwcOQQKTbaGfyAUURuAHsaj%2F3fmZBZUMhTigikArSSwwQyP%2B8v0GpGljw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
x-content-type-options: nosniff
server: cloudflare
cf-ray: 80cb37c55dee56cb-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

Report Overview

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (5)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (27)

URL User Request GET HTTP/2

IP

ASN

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type