# my-ingdibabank.firebaseapp.com: Redirection page with search | PhishDestroy Content language: English Canonical HTML report: https://phishdestroy.io/domain/my-ingdibabank.firebaseapp.com/ Machine-readable companion: https://phishdestroy.io/domain/my-ingdibabank.firebaseapp.com/llm.txt ## Summary PhishDestroy stores a threat-intelligence record for this domain. This document reports the latest stored fields; it is not a real-time guarantee of availability or safety. ## Stored observations - Listed by PhishDestroy: yes - Availability at last stored check: observed active - First observed by PhishDestroy: 2026-11-01 00:47:10 UTC - Last availability or vendor check: 2026-11-01 00:47:10 UTC - Stored record updated: 2026-11-01 01:06:32 UTC - VirusTotal detections in the stored snapshot: 16/92 - Independent public blocklist matches in the stored snapshot: 0 - Google Safe Browsing stored result: checked_clean ## Stored infrastructure - Observed IP address: 199.36.158.100 - Registrar in stored WHOIS data: Google LLC - Last stored HTTP status: 200 - Registration date (registry RDAP, firebaseapp.com): 2012-10-15 18:12:22 UTC ## Evidence links - URLScan report: https://urlscan.io/result/01a19491-7da1-74c9-9eef-f0bc9a9ac7f4/ - VirusTotal domain view: https://www.virustotal.com/gui/domain/my-ingdibabank.firebaseapp.com - Certificate Transparency search: https://crt.sh/?q=%25.my-ingdibabank.firebaseapp.com - Web Archive lookup: https://web.archive.org/web/*/https://my-ingdibabank.firebaseapp.com/ ## Corrections - Appeal or correct this record: https://phishdestroy.io/appeals/ - Methodology and help: https://phishdestroy.io/faq ## Public report package PhishDestroy describes my-ingdibabank.firebaseapp.com, a captured page titled Redirection that displays a missing-page message and a search box. The captured page for my-ingdibabank.firebaseapp.com carries the HTML title "Redirection" but displays a missing-page notice reading "This page doesn't seem to exist," followed by a suggestion that the link pointing here was faulty. The main interaction is a single search box inviting the visitor to try searching, while the surrounding content is branded as the Townsville Kayak Club, with an About Us section, links and a photo gallery. The stored VirusTotal domain result reports 16 detections out of 92 engines. DNS8 reported "phishing"; ESET reported "phishing". Package revision: d29a63eaaecc6476aac7e82158f76bdd5fe5386d59e613766d962aabf12efa54 Text generated (not scan time): 2026-11-01 02:01:02 Reviewed evidence snapshot: {"domain":"my-ingdibabank.firebaseapp.com","screenshot_available":true,"page_title":"Redirection","virustotal":{"detections":16,"engines":92,"malicious":16,"suspicious":0,"retrieved_date":"2026-11-01","analysis_date":"2026-10-13","flagging_vendors":["DNS8","ESET","VIPRE","G-Data","Lionic","Sophos","CyRadar","Webroot","Fortinet","SOCRadar","Seclookup","Gridinsoft","ADMINUSLabs","BitDefender","Chong Lua Dao","alphaMountain.ai"],"vendor_labels":{"DNS8":"phishing","ESET":"phishing","VIPRE":"malware","G-Data":"phishing","Lionic":"phishing","Sophos":"phishing","CyRadar":"phishing","Webroot":"malicious","Fortinet":"phishing","SOCRadar":"phishing","Seclookup":"malicious","Gridinsoft":"phishing","ADMINUSLabs":"malicious","BitDefender":"phishing","Chong Lua Dao":"malicious","alphaMountain.ai":"phishing"},"scope":"domain"},"capture_context":{"relationship":"screenshot associated with this domain record","captured_at":"2026-11-01T00:58:20Z","final_host":"townsvillekayakclub.com","captured_on":"2026-11-01"},"virustotal_public_summary":"The stored VirusTotal domain result reports 16 detections out of 92 engines. DNS8 reported \"phishing\"; ESET reported \"phishing\".","page_paragraph_target_characters":520} Source facts (timestamps as stored): {"record_id":1725508,"first_recorded_at":"2026-11-01 01:47:10","virustotal":{"source":"VirusTotal","scope":"unknown","result_state":"complete","numerator":16,"denominator":92,"malicious":16,"suspicious":0,"vendors":{"DNS8":"phishing","ESET":"phishing","VIPRE":"malware","G-Data":"phishing","Lionic":"phishing","Sophos":"phishing","CyRadar":"phishing","Webroot":"malicious","Fortinet":"phishing","SOCRadar":"phishing","Seclookup":"malicious","Gridinsoft":"phishing","ADMINUSLabs":"malicious","BitDefender":"phishing","Chong Lua Dao":"malicious","alphaMountain.ai":"phishing"},"observed_at":"2026-10-13T09:40:45Z","checked_at":"2026-11-01 01:56:46","fetched_at":"2026-11-01T00:56:41Z","time_basis":"UTC (provider ISO timestamps)","stored_summary":{"source":"VirusTotal","scope":"unknown","result_state":"observed","numerator":16,"denominator":92,"malicious":null,"suspicious":null,"vendors":["ADMINUSLabs","alphaMountain.ai","BitDefender","Chong Lua Dao","CyRadar","DNS8","ESET","Fortinet","G-Data","Gridinsoft","Lionic","Seclookup","SOCRadar","Sophos","VIPRE","Webroot"],"observed_at":"2026-10-13 09:40:45","checked_at":"2026-11-01 01:56:46","fetched_at":"2026-11-01 00:56:47","time_basis":"as stored; legacy timezone not established"}},"google_safe_browsing":{"source":"Google Safe Browsing","state":"checked_clean","verdict":0,"checked_at":"2026-11-01 01:57:15"},"spamhaus":{"source":"Spamhaus","verdict":null,"checked_at":null},"availability":{"source":"stored HTTP observation","state":"alive","observed_at":"2026-11-01 01:47:10"}} ## Stored page captures - Primary capture: https://i.ibb.co/d4yfC6bs/779bd9ffad41.png Captured: 2026-11-01 00:47:10 UTC - URLScan capture 1: https://screenshots.phishdestroy.io/01a19491-7da1-74c9-9eef-f0bc9a9ac7f4.png Captured: 2026-11-01 00:47:10 UTC Source report: https://urlscan.io/result/01a19491-7da1-74c9-9eef-f0bc9a9ac7f4/ - URLScan · 2026-03-21: https://screenshots.phishdestroy.io/us/019d0dc6-eee7-7225-ad7e-ea629e2302d8.png Captured: 2026-03-21 00:24:09 UTC Source report: https://urlscan.io/result/019d0dc6-eee7-7225-ad7e-ea629e2302d8/ SHA-256: b01a12543f57d43eb2694a40aecc453d5c3ec723f3522d1872f150c2fe3ef87a - URLScan · 2026-07-01: https://screenshots.phishdestroy.io/us/019f1c7c-d787-771b-ae4f-f79227f75d80.png Captured: 2026-07-01 07:03:00 UTC Source report: https://urlscan.io/result/019f1c7c-d787-771b-ae4f-f79227f75d80/ SHA-256: fe4493ed6f9f3bbaff98fd7ddd4faaac06f5ac1c868cbb046d0d984b3dbaef1d - URLScan · 2026-11-01: https://screenshots.phishdestroy.io/us/01a1948d-32ac-764e-ada7-b0a8936e67ce.png Captured: 2026-11-01 00:40:53 UTC Source report: https://urlscan.io/result/01a1948d-32ac-764e-ada7-b0a8936e67ce/ SHA-256: 9e9bea0e57830bcd95071c13f63c253d79e77bb2055a5957d311aae6f606a6eb - URLScan · 2026-11-01: https://screenshots.phishdestroy.io/us/01a1948d-ff25-71d5-bf8b-4cb29dd4e18c.png Captured: 2026-11-01 00:41:44 UTC Source report: https://urlscan.io/result/01a1948d-ff25-71d5-bf8b-4cb29dd4e18c/ SHA-256: 9e9bea0e57830bcd95071c13f63c253d79e77bb2055a5957d311aae6f606a6eb - Cloudflare Radar: https://screenshots.phishdestroy.io/cf/d5682973-d744-45a6-ac58-4986bc1b46a9.png Captured: 2026-11-01 00:58:20 UTC Source report: https://radar.cloudflare.com/scan/d5682973-d744-45a6-ac58-4986bc1b46a9 SHA-256: eec5f732371cfc43142047013d932056545d7e408508f46cbe91933738235791 ## Collected source observations Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator. ```json { "urlscan": { "v": 1, "fetched_at": "2026-11-01T00:56:34Z", "uuid": "01a19491-7da1-74c9-9eef-f0bc9a9ac7f4", "scanned_at": "2026-11-01T00:45:38Z", "final_url": "https://townsvillekayakclub.com/wp-admin/js/auth", "status": 404, "redirected": "off-domain", "redirects": [ { "to": "https://my-ingdibabank.firebaseapp.com/", "from": "http://my-ingdibabank.firebaseapp.com/", "status": 307 }, { "to": "https://townsvillekayakclub.com/wp-admin/js/auth", "from": "https://my-ingdibabank.firebaseapp.com/" } ], "ip": "170.64.186.101", "ptr": "1197666.cloudwaysapps.com", "domains": [ "fonts.gstatic.com", "fonts.googleapis.com", "my-ingdibabank.firebaseapp.com" ], "ips": [ "64.233.180.94", "192.178.155.95", "170.64.186.101", "199.36.158.100" ], "asns": [ "15169", "14061", "54113" ], "countries": [ "US", "AU" ], "link_domains": [ "www.facebook.com" ], "social": [ "https://www.facebook.com/groups/480502332285425/events" ], "doc_hash": "5bdcc46958c091a2aa9491e8c1ccadb725fd765363c91d1db8f5b2bf502428c2", "script_hashes": [ "cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf", "c4fada4accfa24704b54248bc5ce84acac50b6a059828b7714fe3006786c80c1", "fc774906082b59dedcfc55b8ef127783b6d056578ff4586a8ebbdb81bbe286f1", "5083905862c2b7aa8a84c4f2313d359d2288fb25fbe1ff577fa7325eff2ed2d9", "7cff9ca038a1b5fa4ca57d0d9b8d18a58115f3ea046a1895312e2535836e53e1", "813e816a1b807a4e4794e5636073848e62373b66b79d4601efb9e34a86f64521", "f9067c125b307e5a7886707e016736015eb15a165f4bd66b6cf81943fa45f426", "30770e96ca66d9f13e483db507cef243b0602cbd356bc98a0b5aebf89717bcd2", "1030dee6b293cd2f1331f5355130a5db48929f961ba7409a4d4ce83c73caefdd", "55922883b583583787dd3e36a6ee97b5bedc12eec38a24b6bd271d53b8ebf1c2" ], "globals": [ "jQuery", "astra", "dlmXHRtranslations", "dlmXHRinstance", "dlmXHRgif", "elementorFrontendConfig", "smushLazyLoadOptions", "wp", "ElementorProFrontendConfig", "_wpemojiSettings", "lazySizes", "astraGetParents", "astraToggleClass", "astraTriggerEvent", "astraSmoothScroll", "astScrollToTopHandler", "popupTriggerClick", "AstraToggleSubMenu", "AstraToggleSetup", "astraNavMenuToggle", "webpackChunkelementorFrontend", "elementorModules", "elementorFrontend", "Sticky", "Swiper", "lazySizesConfig", "webpackChunkelementor_pro", "elementorProFrontend", "ShareLink", "DialogsManager", "twemoji", "lazyloadRunObserver", "events", "dlmXHR", "dlmXHRGlobalLinks", "dlmNonXHRGlobalLinks", "dlmXHRProgress", "DLM_XHR_Download" ], "storage_keys": [ "wpEmojiSettingsSupports" ], "tls": { "san": [ "firebaseapp.com", "*.firebaseapp.com" ], "cipher": "AES_128_GCM", "issuer": "WR3", "subject": "firebaseapp.com", "protocol": "TLS 1.3", "valid_to": "2027-01-25T22:54:13Z", "valid_from": "2026-10-27T22:54:14Z" }, "domain_age_days": 2098, "apex_age_days": 2098, "tls_age_days": 33, "tls_valid_days": 89, "requests": 41, "verdicts": { "engines": { "tags": [ "urlscan-ml", "urlscan-ml-60c5e22" ], "score": 85, "malicious": true }, "overall": { "score": 0, "malicious": false } }, "headers": { "content-type": "text/html; charset=utf-8", "strict-transport-security": "max-age=31556926; includeSubDomains; preload" } }, "cf": { "v": 1, "fetched_at": "2026-11-01T01:00:24Z", "uuid": "d5682973-d744-45a6-ac58-4986bc1b46a9", "scanned_at": "2026-11-01T00:58:20Z", "final_url": "https://townsvillekayakclub.com/wp-admin/js/auth", "status": 404, "history": [ { "url": "https://my-ingdibabank.firebaseapp.com/", "status": 200 }, { "url": "https://townsvillekayakclub.com/wp-admin/js/auth", "status": 404 } ], "dom_hash": "56537a5432ac3d822f9d64fdc3da5089b31b8f41a39cd033b5d0683f7c886cbd", "doc_hash": "5bdcc46958c091a2aa9491e8c1ccadb725fd765363c91d1db8f5b2bf502428c2", "domain_risks": [ "Politics, Advocacy, and Government-Related", "Government & Politics" ], "radar_rank": { "bucket": ">200000" }, "dns": [ { "name": "townsvillekayakclub.com", "type": "A", "value": "170.64.186.101" } ], "dnssec_valid": false, "ip": "127.0.1.29", "whois": { "registrar": "Dreamscape Networks International Pte Ltd", "created": "2021-01-31T21:34:55Z", "updated": "2024-05-23T11:29:32Z", "expires": "2031-01-31T21:34:55Z", "nameservers": [ "ns10.digicertdns.com", "ns11.digicertdns.com", "ns12.digicertdns.com", "ns13.digicertdns.net", "ns14.digicertdns.net", "ns15.digicertdns.net" ] } }, "vt": { "v": 1, "fetched_at": "2026-11-01T00:56:41Z", "analysis_at": "2026-10-13T09:40:45Z", "stats": { "timeout": 0, "harmless": 46, "malicious": 16, "suspicious": 0, "undetected": 30 }, "detections": { "DNS8": "phishing", "ESET": "phishing", "VIPRE": "malware", "G-Data": "phishing", "Lionic": "phishing", "Sophos": "phishing", "CyRadar": "phishing", "Webroot": "malicious", "Fortinet": "phishing", "SOCRadar": "phishing", "Seclookup": "malicious", "Gridinsoft": "phishing", "ADMINUSLabs": "malicious", "BitDefender": "phishing", "Chong Lua Dao": "malicious", "alphaMountain.ai": "phishing" }, "reputation": 0, "registrar": "MarkMonitor Inc.", "created": "2012-10-15T18:12:22Z", "expires": "2027-10-15T18:12:22Z", "updated": "2026-09-13T10:18:21Z", "first_seen": "2024-07-21T18:37:17Z", "dns": [ { "ttl": 300, "type": "AAAA", "value": "2620:0:890::100" }, { "ttl": 300, "type": "TXT", "value": "v=DKIM1; k=rsa; t=s; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDPtW5iwpXVPiH5FzJ7Nrl8USzuY9zqqzjE0D1r04xDN6qwziDnmgcFNNfMewVKN2D1O+2J9N14hRprzByFwfQW76yojh54Xu3uSbQ3JP0A7k8o8GutRF8zbFUA8n0ZH2y0cIEjMliXY4W4LwPA7m4q0ObmvSjhd63O9d8z1XkUBwIDAQAB" }, { "ttl": 300, "type": "A", "value": "199.36.158.100" }, { "ttl": 300, "type": "TXT", "value": "v=spf1 redirect=_spf.google.com" } ], "dns_at": "2026-10-13T09:47:21Z", "jarm": "29d3fd00029d29d00041d41d00041d6b5eefa2404a56c2ced79a0d16afe36c", "cert": { "san": [ "firebaseapp.com", "*.firebaseapp.com" ], "issuer": "Google Trust Services / WR4", "serial": "6739a2897e2a0d3b0ae167cf7c0ccf9f", "sha256": "044f879fc66c5b0ffe5f059867a14d1245a8f289de612e1dadc662f7cfbf44a6", "subject": "firebaseapp.com", "valid_to": "2026-12-22T18:00:28Z", "valid_from": "2026-09-23T18:00:29Z" }, "whois": { "registrar": "MarkMonitor Inc.", "registrar_iana_id": "292", "registrar_url": "http://www.markmonitor.com", "created": "2012-10-15T18:12:22Z", "updated": "2026-09-13T10:18:21Z", "expires": "2027-10-15T00:00:00Z", "status": [ "clientDeleteProhibited", "clientTransferProhibited", "clientUpdateProhibited" ], "nameservers": [ "ns-cloud-c1.googledomains.com", "ns-cloud-c2.googledomains.com", "ns-cloud-c3.googledomains.com", "ns-cloud-c4.googledomains.com" ], "dnssec": "unsigned" } }, "webcheck": { "v": 1, "fetched_at": "2026-11-01T01:00:40Z", "mail_config": { "spf": "v=spf1 redirect=_spf.google.com", "dkim": [ "default", "google", "selector1", "selector2", "k1", "k2", "k3", "s1" ], "dkim_bits": 1024, "spf_lookups": 1 }, "caa_records": { "count": 1, "domain": "firebaseapp.com", "issuers": [ "pki.goog" ] }, "block_lists": { "resolvers": 12, "blocked_by": [ "CloudFlare Family" ], "blocked_count": 1 }, "social_tags": { "title": "Redirection" }, "trackers": { "requests": 0 }, "mixed_content": { "third_party_scripts": 0 }, "status": { "up": true, "code": 200, "timings": { "dns": 36, "tls": 43, "wait": 84, "connect": 16, "download": 0 }, "response_ms": 179 }, "tls_connection": { "alpn": "h2", "cipher": "TLS_AES_128_GCM_SHA256", "protocol": "TLSv1.3", "versions": [ "TLSv1.2", "TLSv1.3" ], "authorized": true, "forward_secrecy": true }, "ports": { "open": [ 80, 443 ] }, "carbon": { "bytes": 414, "co2_grams": 0, "cleaner_than": 95 }, "dns_server": { "ns": [ { "ip": "216.239.36.108", "host": "ns-cloud-c3.googledomains.com" }, { "ip": "216.239.38.108", "host": "ns-cloud-c4.googledomains.com" }, { "ip": "216.239.34.108", "host": "ns-cloud-c2.googledomains.com" }, { "ip": "216.239.32.108", "host": "ns-cloud-c1.googledomains.com" } ], "zone": "firebaseapp.com" }, "location": { "ip": "2620:0:890::100", "asn": "54113", "org": "Fastly, Inc.", "city": "Mountain View", "country": "US" }, "ssl": { "issuer": "Google Trust Services / WR3", "subject": "firebaseapp.com" }, "dns": { "A": [ "199.36.158.100" ], "TXT": [ "v=spf1 redirect=_spf.google.com", "v=DKIM1; k=rsa; t=s; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDPtW5iwpXVPiH5FzJ7Nrl8USzuY9zqqzjE0D1r04xDN6qwziDnmgcFNNfMewVKN2D1O+2J9N14hRprzByFwfQW76yojh54Xu3uSbQ3JP0A7k8o8GutRF8zbFUA8n0ZH2y0cIEjMliXY4W4LwPA7m4q0ObmvSjhd63O9d8z1XkUBwIDAQAB" ], "AAAA": [ "2620:0:890::100" ] }, "dnssec": { "ds": false, "rrsig": false, "dnskey": false }, "hsts": { "header": "max-age=31556926; includeSubDomains; preload", "message": "Site is compatible with the HSTS preload list!", "compatible": true }, "http_security": { "xFrameOptions": false, "referrerPolicy": false, "xXSSProtection": false, "permissionsPolicy": false, "xContentTypeOptions": false, "contentSecurityPolicy": false, "strictTransportPolicy": "max-age=31556926; includeSubDomains; preload", "crossOriginOpenerPolicy": false, "crossOriginEmbedderPolicy": false, "crossOriginResourcePolicy": false }, "get_ip": { "ip": "2620:0:890::100", "family": 6 }, "redirects": { "chain": [ "https://my-ingdibabank.firebaseapp.com" ] }, "headers": { "headers": { "content-type": "text/html; charset=utf-8", "strict-transport-security": "max-age=31556926; includeSubDomains; preload" } } } } ```