Report - dropboxupload1.firebaseapp.com/

Report Overview

Visited public
2023-11-04 21:52:44
Tags
URL
dropboxupload1.firebaseapp.com/
Finishing URL
dl.dropboxusercontent.com/s/izxun5apo4zh1c4/2021-FILES-MY1040-w2-IRS-letter-1099r.zip?dl=0
IP / ASN
199.36.158.100
#54113 FASTLY
Title
Dropbox - 404

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
dropboxupload1.firebaseapp.com	unknown	2012-10-15	2023-02-23 01:38:38	2023-10-22 15:23:50	487 B	802 B	199.36.158.100
assets.dropbox.com	100595	1995-06-28	2017-02-02 12:02:15	2023-10-30 13:42:12	494 B	5.7 kB	143.204.55.43
cfl.dropboxstatic.com	13598	2012-09-10	2017-01-30 05:53:29	2023-11-04 00:44:19	2.0 kB	367 kB	104.16.100.29
dl.dropbox.com	27815	1995-06-28	2012-05-21 00:26:56	2023-11-04 16:35:50	587 B	2.1 kB	162.125.71.15
dl.dropboxusercontent.com	12831	2012-01-13	2019-02-11 02:24:40	2019-03-28 09:18:21	598 B	2.0 kB	162.125.71.15

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Timestamp	Severity	Source IP	Destination IP	Alert
2023-11-04 21:52:27	low	162.125.71.15	Client IP	ET INFO DropBox User Content Download Access over SSL M2
2023-11-04 21:52:27	low	Client IP	162.125.71.15	ET INFO DropBox User Content Domain (dl .dropboxusercontent .com in TLS SNI)
2023-11-04 21:52:27	low	162.125.71.15	Client IP	ET INFO DropBox User Content Download Access over SSL M2

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

Scan Date	Severity	Indicator	Alert
2023-02-23	medium	dropboxupload1.firebaseapp.com/	Other

mnemonic secure dns

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2023-11-04	medium	dropboxupload1.firebaseapp.com	Sinkholed

ThreatFox

No alerts detected

JavaScript (0)

HTTP Transactions (8)

URL IP Response Size

dropboxupload1.firebaseapp.com/

199.36.158.100

180 B

URL
dropboxupload1.firebaseapp.com/
IP
199.36.158.100:0
ASN
#54113 FASTLY

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Size
180 B (180 bytes)
Hash
1b9706ada5bba4ca7a943d5d71094970
f84120ec61e9cbaedff9227d32e4e0867c71ca23
ffc08f8d88a687af7f4275ffd2f56bd3eeefa710247c9630d0f0b86b56842a32

Detections

Analyzer	Verdict	Alert
PhishTank	phishing	Other
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET / HTTP/1.1
Host: dropboxupload1.firebaseapp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
cache-control: max-age=3600
content-encoding: br
content-type: text/html; charset=utf-8
etag: "047f921d10f75073d6c74e01847862f8dc00b2d56bfc88d6d6905db07fe92acf-br"
last-modified: Thu, 16 Feb 2023 19:56:18 GMT
strict-transport-security: max-age=31556926; includeSubDomains; preload
accept-ranges: bytes
date: Sat, 04 Nov 2023 21:52:27 GMT
x-served-by: cache-bma1679-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1699134747.781500,VS0,VE231
vary: x-fh-requested-host, accept-encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 180
X-Firefox-Spdy: h2

assets.dropbox.com/www/en-us/illustrations/spot/look-magnifying-glass.svg

143.204.55.43

200 OK

4.9 kB

URL GET HTTP/2
assets.dropbox.com/www/en-us/illustrations/spot/look-magnifying-glass.svg
IP
143.204.55.43:443
ASN
#16509 AMAZON-02

Requested by
moz-nullprincipal:{631c1333-7dfe-44ed-9f8e-765aa030b4d2}?https://dl.dropboxusercontent.com
Certificate
IssuerDigiCert Inc
Subjectenterprise.dropbox.com
FingerprintF1:1D:C4:75:34:A2:50:B0:7F:05:75:06:33:A6:93:84:6A:5D:A5:D2
ValidityTue, 14 Feb 2023 00:00:00 GMT - Thu, 29 Feb 2024 23:59:59 GMT

File type
SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (10635), with no line terminators
Size
4.9 kB (4938 bytes)
Hash
91be8bb57512787aea2a3765fd9850a5
422d9e3c077d09b9d8cec7c2f4273506203ec696
51cf6ce31001dd4d93e4c6b873f734f64522948a804f75d03104c1dd8a95d616

HTTP Headers

GET /www/en-us/illustrations/spot/look-magnifying-glass.svg HTTP/1.1
Host: assets.dropbox.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dl.dropboxusercontent.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
content-type: image/svg+xml
content-length: 4938
date: Sat, 04 Nov 2023 10:59:00 GMT
server: Apache
x-dispatcher: dispatcher2uswest1
x-vhost: dropbox-prod.adobemsbasic.com
content-disposition: attachment; filename="look-magnifying-glass.svg"
x-content-type-options: nosniff
last-modified: Tue, 08 Jun 2021 16:59:13 GMT
accept-ranges: bytes
cache-control: max-age=86400
expires: Sun, 05 Nov 2023 10:59:00 GMT
content-encoding: gzip
x-frame-options: SAMEORIGIN
etag: "298b"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 dbfaae0db03f11cf713bbcbdb25be4a2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: OzOuUdoWk9qUSbj6y9b1dMMnbmLluqq4eNwNg9lIyYORmaLM4kIhlQ==
age: 39208
X-Firefox-Spdy: h2

cfl.dropboxstatic.com/static/metaserver/static/fonts/opensans/OpenSans-Regular-webfont.ttf

104.16.100.29

200 OK

164 kB

URL GET HTTP/3
cfl.dropboxstatic.com/static/metaserver/static/fonts/opensans/OpenSans-Regular-webfont.ttf
IP
104.16.100.29:443
ASN
#13335 CLOUDFLARENET

Requested by
moz-nullprincipal:{631c1333-7dfe-44ed-9f8e-765aa030b4d2}?https://dl.dropboxusercontent.com
Certificate
IssuerDigiCert Inc
Subjectcfl.dropboxstatic.com
FingerprintF2:23:53:E3:9A:02:F7:52:57:BA:E1:14:A7:03:E9:77:48:AF:87:03
ValidityTue, 14 Feb 2023 00:00:00 GMT - Sat, 24 Feb 2024 23:59:59 GMT

File type
TrueType Font data, 19 tables, 1st "FFTM", 15 names, Microsoft, language 0x409, Digitized data copyright \251 2010-2011, Google Corporation.Open SansRegularAscender - Open Sans\012- data
Size
164 kB (164032 bytes)
Hash
3cbf4d3ed22e458af0d14d76cb4777d3
8571ae75f6dbb4055ec2b61d4dabd03b38e03764
ab6dda86c87f61e7ad1af2e733e04ca83fdcd43edbd57f88e35acc1878078223

HTTP Headers

GET /static/metaserver/static/fonts/opensans/OpenSans-Regular-webfont.ttf HTTP/1.1
Host: cfl.dropboxstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
DNT: 1
Connection: keep-alive
Referer: https://cfl.dropboxstatic.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Sat, 04 Nov 2023 21:52:28 GMT
content-type: font/ttf
last-modified: Fri, 03 Nov 2023 14:22:09 GMT
x-dropbox-request-id: 4fb3516efd6ba39e43dc4b04814663ef
x-content-type-options: nosniff
x-cached: HIT
expires: Sun, 05 Nov 2023 03:34:17 GMT
cache-control: max-age=86400
access-control-allow-origin: *
timing-allow-origin: https://www.dropbox.com
cf-cache-status: HIT
age: 48828
vary: Accept-Encoding
server: cloudflare
cf-ray: 821015901d68b517-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

cfl.dropboxstatic.com/static/metaserver/static/fonts/opensans/OpenSans-Light-webfont.ttf

104.16.100.29

200 OK

160 kB

URL GET HTTP/3
cfl.dropboxstatic.com/static/metaserver/static/fonts/opensans/OpenSans-Light-webfont.ttf
IP
104.16.100.29:443
ASN
#13335 CLOUDFLARENET

Requested by
moz-nullprincipal:{631c1333-7dfe-44ed-9f8e-765aa030b4d2}?https://dl.dropboxusercontent.com
Certificate
IssuerDigiCert Inc
Subjectcfl.dropboxstatic.com
FingerprintF2:23:53:E3:9A:02:F7:52:57:BA:E1:14:A7:03:E9:77:48:AF:87:03
ValidityTue, 14 Feb 2023 00:00:00 GMT - Sat, 24 Feb 2024 23:59:59 GMT

File type
TrueType Font data, 19 tables, 1st "FFTM", 17 names, Microsoft, language 0x409, Digitized data copyright \251 2010-2011, Google Corporation.Open Sans LightRegularAscender - Ope\012- data
Size
160 kB (159776 bytes)
Hash
b202959a841a37b5bfb12fe69b6bf0d1
7d93db5cd86efd91cfb9c61ff66b210d049d5014
01e40ebaa4275bc99729d90b4ea47b977b88b8d734850eae816b9037a32c825a

HTTP Headers

GET /static/metaserver/static/fonts/opensans/OpenSans-Light-webfont.ttf HTTP/1.1
Host: cfl.dropboxstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
DNT: 1
Connection: keep-alive
Referer: https://cfl.dropboxstatic.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Sat, 04 Nov 2023 21:52:28 GMT
content-type: font/ttf
last-modified: Sat, 04 Nov 2023 07:22:12 GMT
x-dropbox-request-id: 4872134d07626032db5a06e5a1c45fa2
x-content-type-options: nosniff
x-cached: HIT
expires: Sun, 05 Nov 2023 08:04:50 GMT
cache-control: max-age=86400
access-control-allow-origin: *
timing-allow-origin: https://www.dropbox.com
cf-cache-status: HIT
age: 25962
vary: Accept-Encoding
server: cloudflare
cf-ray: 821015901d6ab517-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

dl.dropbox.com/s/izxun5apo4zh1c4/2021-FILES-MY1040-w2-IRS-letter-1099r.zip?dl=0

162.125.71.15

302 Found

1.5 kB

URL User Request GET HTTP/2
dl.dropbox.com/s/izxun5apo4zh1c4/2021-FILES-MY1040-w2-IRS-letter-1099r.zip?dl=0
IP
162.125.71.15:443
ASN
#19679 DROPBOX

Certificate
IssuerDigiCert Inc
Subjectdl.dropbox.com
FingerprintF7:BA:5F:D1:73:A5:04:E6:AC:52:C4:92:6F:20:23:8D:FD:B3:3F:D0
ValidityTue, 14 Feb 2023 00:00:00 GMT - Sat, 16 Mar 2024 23:59:59 GMT

File type

Size
1.5 kB (1513 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /s/izxun5apo4zh1c4/2021-FILES-MY1040-w2-IRS-letter-1099r.zip?dl=0 HTTP/1.1
Host: dl.dropbox.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dropboxupload1.firebaseapp.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 302 Found
cache-control: no-cache
content-security-policy: sandbox
location: https://dl.dropboxusercontent.com/s/izxun5apo4zh1c4/2021-FILES-MY1040-w2-IRS-letter-1099r.zip?dl=0
content-type: text/html; charset=utf-8
date: Sat, 04 Nov 2023 21:52:27 GMT
server: envoy
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-robots-tag: noindex, nofollow, noimageindex
content-encoding: gzip
vary: Accept-Encoding
x-dropbox-response-origin: far_remote
x-dropbox-request-id: fc21c2e6afa2444d9de6689eb47410a0
X-Firefox-Spdy: h2

dl.dropboxusercontent.com/s/izxun5apo4zh1c4/2021-FILES-MY1040-w2-IRS-letter-1099r.zip?dl=0

162.125.71.15

404 Not Found

1.5 kB

URL User Request GET HTTP/2
dl.dropboxusercontent.com/s/izxun5apo4zh1c4/2021-FILES-MY1040-w2-IRS-letter-1099r.zip?dl=0
IP
162.125.71.15:443
ASN
#19679 DROPBOX

Certificate
IssuerDigiCert Inc
Subjectdl.dropbox.com
FingerprintF7:BA:5F:D1:73:A5:04:E6:AC:52:C4:92:6F:20:23:8D:FD:B3:3F:D0
ValidityTue, 14 Feb 2023 00:00:00 GMT - Sat, 16 Mar 2024 23:59:59 GMT

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (1587), with no line terminators
Size
1.5 kB (1513 bytes)
Hash
6624355430323b2665abb171fcc31496
84cf4d8626bda7d19ec3c1a6a2974e97625e4b39
baebfba9d67409d7925e89be4a2aa0660a59b816e4e50eba484958b1d5ccf464

HTTP Headers

GET /s/izxun5apo4zh1c4/2021-FILES-MY1040-w2-IRS-letter-1099r.zip?dl=0 HTTP/1.1
Host: dl.dropboxusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://dropboxupload1.firebaseapp.com/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 404 Not Found
content-security-policy: sandbox allow-forms allow-scripts
content-type: text/html
date: Sat, 04 Nov 2023 21:52:27 GMT
server: envoy
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-robots-tag: noindex, nofollow, noimageindex
content-encoding: gzip
vary: Accept-Encoding
x-dropbox-response-origin: far_remote
x-dropbox-request-id: 71916b463c01481b9755fac4ec5b1eb9
X-Firefox-Spdy: h2

cfl.dropboxstatic.com/static/metaserver/static/css/error.css

104.16.100.29

200 OK

41 kB

URL GET HTTP/2
cfl.dropboxstatic.com/static/metaserver/static/css/error.css
IP
104.16.100.29:443
ASN
#13335 CLOUDFLARENET

Requested by
moz-nullprincipal:{631c1333-7dfe-44ed-9f8e-765aa030b4d2}?https://dl.dropboxusercontent.com
Certificate
IssuerDigiCert Inc
Subjectcfl.dropboxstatic.com
FingerprintF2:23:53:E3:9A:02:F7:52:57:BA:E1:14:A7:03:E9:77:48:AF:87:03
ValidityTue, 14 Feb 2023 00:00:00 GMT - Sat, 24 Feb 2024 23:59:59 GMT

File type
ASCII text, with very long lines (24618)
Size
41 kB (40729 bytes)
Hash
8d46b8702e1938a19c093b3c40ede288
8f179e8a36ec506559d9c01c08c6b936daaf041a
0fe00ec19c65e07ab42c5080796b5c6a5b0819e80a11126f191c246c846d1407

HTTP Headers

GET /static/metaserver/static/css/error.css HTTP/1.1
Host: cfl.dropboxstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dl.dropboxusercontent.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Sat, 04 Nov 2023 21:52:28 GMT
content-type: text/css; charset=utf-8
vary: Accept-Encoding
last-modified: Thu, 02 Nov 2023 11:26:47 GMT
x-dropbox-request-id: a88a8f27347f052dc85d245197fd88a3
x-content-type-options: nosniff
x-cached: HIT
expires: Sat, 04 Nov 2023 11:46:12 GMT
cache-control: max-age=86400
access-control-allow-origin: *
timing-allow-origin: https://www.dropbox.com
cf-cache-status: HIT
age: 56612
server: cloudflare
cf-ray: 8210158f78fe56c4-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

cfl.dropboxstatic.com/static/images/favicon.ico

0.0.0.0

0 B

URL GET
cfl.dropboxstatic.com/static/images/favicon.ico
IP
0.0.0.0:0
ASN
#0

Requested by
moz-nullprincipal:{631c1333-7dfe-44ed-9f8e-765aa030b4d2}?https://dl.dropboxusercontent.com
Certificate
IssuerDigiCert Inc
Subjectcfl.dropboxstatic.com
FingerprintF2:23:53:E3:9A:02:F7:52:57:BA:E1:14:A7:03:E9:77:48:AF:87:03
ValidityTue, 14 Feb 2023 00:00:00 GMT - Sat, 24 Feb 2024 23:59:59 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /static/images/favicon.ico HTTP/1.1
Host: cfl.dropboxstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dl.dropboxusercontent.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Sat, 04 Nov 2023 21:52:28 GMT
content-type: image/vnd.microsoft.icon
last-modified: Thu, 21 Jul 2022 07:31:20 GMT
x-dropbox-request-id: 60ea25438767079c528fa1b4f6068115
x-content-type-options: nosniff
x-cached: HIT
expires: Sat, 04 Nov 2023 17:48:10 GMT
cache-control: max-age=86400
access-control-allow-origin: *
timing-allow-origin: https://www.dropbox.com
cf-cache-status: HIT
age: 51923
vary: Accept-Encoding
server: cloudflare
cf-ray: 8210158ffd50b517-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

Report Overview

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (0)

HTTP Transactions (8)

URL

IP

ASN

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/3

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/3

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL User Request GET HTTP/2

IP

ASN

Certificate

File type

Size

Hash

HTTP Headers

URL User Request GET HTTP/2

IP

ASN

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET

IP

ASN

Requested by

Certificate

File type