| |  185.215.113.118 | 200 OK | 930 B |
URL User Request GET HTTP/1.1IP185.215.113.118:443 ASN#51381 1337Team Limited
CertificateIssuerLet's Encrypt Subjectdb-filialen.app FingerprintD0:48:32:58:06:BC:AE:03:EC:F8:53:CA:65:0B:38:08:25:67:A9:4F ValidityMon, 15 Apr 2024 12:38:25 GMT - Sun, 14 Jul 2024 12:38:24 GMT
File typeHTML document, ASCII text, with very long lines (3218), with no line terminators Hash98b91f62d01cba8c69a19a16ca65c254 e3bfe1204e364bf956db069d15144b01896417d6 ceec848cb787f9e89e8a550eb71d76a8add496a0da9c133644e955afadf80a38
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Deutsche Bank AG | | Quad9 DNS | malicious | Sinkholed |
GET / HTTP/1.1
Host: db-filialen.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.22.1
Date: Sat, 20 Apr 2024 05:36:54 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: Next.js
ETag: "1387uhfj93d2he"
Vary: Accept-Encoding
Content-Encoding: gzip
|
|
| db-filialen.app/_next/static/media/4f117ec02fc103f8-s.p.woff2 | 185.215.113.118 | 200 OK | 44 kB |
URL GET HTTP/1.1db-filialen.app/_next/static/media/4f117ec02fc103f8-s.p.woff2 IP185.215.113.118:443 ASN#51381 1337Team Limited
CertificateIssuerLet's Encrypt Subjectdb-filialen.app FingerprintD0:48:32:58:06:BC:AE:03:EC:F8:53:CA:65:0B:38:08:25:67:A9:4F ValidityMon, 15 Apr 2024 12:38:25 GMT - Sun, 14 Jul 2024 12:38:24 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 44264, version 1.0 Hash03c6826d225a339fad5a72e435f19299 991e2551b43e6f294350725e9471534d6c0e4ac1 60e11d985314d4843c7a741d67bc7744c4bf519e50ce08e1d5e74e43414aaff0
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Deutsche Bank AG | | Quad9 DNS | malicious | Sinkholed |
GET /_next/static/media/4f117ec02fc103f8-s.p.woff2 HTTP/1.1
Host: db-filialen.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://db-filialen.app/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.22.1
Date: Sat, 20 Apr 2024 05:36:55 GMT
Content-Type: font/woff2
Content-Length: 44264
Connection: keep-alive
Cache-Control: public, max-age=31536000, immutable
Accept-Ranges: bytes
Last-Modified: Mon, 15 Apr 2024 23:02:59 GMT
ETag: W/"ace8-18ee3ffdada"
|
|
| db-filialen.app/_next/static/css/1fbe2e0c7e8b651e.css | 185.215.113.118 | 200 OK | 4.3 kB |
URL GET HTTP/1.1db-filialen.app/_next/static/css/1fbe2e0c7e8b651e.css IP185.215.113.118:443 ASN#51381 1337Team Limited
CertificateIssuerLet's Encrypt Subjectdb-filialen.app FingerprintD0:48:32:58:06:BC:AE:03:EC:F8:53:CA:65:0B:38:08:25:67:A9:4F ValidityMon, 15 Apr 2024 12:38:25 GMT - Sun, 14 Jul 2024 12:38:24 GMT
File typeUnicode text, UTF-8 text, with very long lines (17700), with no line terminators Hash6fa7506165611d2f3b23efae29a9a130 c4936d2244c304df1ce257e9a3d5e0251f6d4c5d 84fd52cba82f9c225e709a2ed7646d3565c4b8b37ac89dfd8e43bf4224eda54c
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Deutsche Bank AG | | Quad9 DNS | malicious | Sinkholed |
GET /_next/static/css/1fbe2e0c7e8b651e.css HTTP/1.1
Host: db-filialen.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://db-filialen.app/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.22.1
Date: Sat, 20 Apr 2024 05:36:55 GMT
Content-Type: text/css; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: public, max-age=31536000, immutable
Accept-Ranges: bytes
Last-Modified: Mon, 15 Apr 2024 23:02:59 GMT
ETag: W/"453e-18ee3ffdade"
Vary: Accept-Encoding
Content-Encoding: gzip
|
|
| db-filialen.app/_next/static/chunks/webpack-cbafb5bd83b319bf.js | 185.215.113.118 | 200 OK | 1.1 kB |
URL GET HTTP/1.1db-filialen.app/_next/static/chunks/webpack-cbafb5bd83b319bf.js IP185.215.113.118:443 ASN#51381 1337Team Limited
CertificateIssuerLet's Encrypt Subjectdb-filialen.app FingerprintD0:48:32:58:06:BC:AE:03:EC:F8:53:CA:65:0B:38:08:25:67:A9:4F ValidityMon, 15 Apr 2024 12:38:25 GMT - Sun, 14 Jul 2024 12:38:24 GMT
File typeJavaScript source, ASCII text, with very long lines (2657), with no line terminators Hashff307e0e92255d4a5a046cb9648df52b b9f434f0d7bce6307b215bdc9897011719bc59ce 617c1165bfd3e1141325726c510b42fecdce94e246488747bda5dae3dcd9b211
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Deutsche Bank AG | | Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/webpack-cbafb5bd83b319bf.js HTTP/1.1
Host: db-filialen.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://db-filialen.app/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.22.1
Date: Sat, 20 Apr 2024 05:36:55 GMT
Content-Type: application/javascript; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: public, max-age=31536000, immutable
Accept-Ranges: bytes
Last-Modified: Mon, 15 Apr 2024 23:02:59 GMT
ETag: W/"a61-18ee3ffdade"
Vary: Accept-Encoding
Content-Encoding: gzip
|
|
| db-filialen.app/_next/static/css/e807c5f3c7e39ea5.css | 185.215.113.118 | 200 OK | 14 kB |
URL GET HTTP/1.1db-filialen.app/_next/static/css/e807c5f3c7e39ea5.css IP185.215.113.118:443 ASN#51381 1337Team Limited
CertificateIssuerLet's Encrypt Subjectdb-filialen.app FingerprintD0:48:32:58:06:BC:AE:03:EC:F8:53:CA:65:0B:38:08:25:67:A9:4F ValidityMon, 15 Apr 2024 12:38:25 GMT - Sun, 14 Jul 2024 12:38:24 GMT
File typeASCII text, with very long lines (58123), with CRLF, LF line terminators Hashf0e982c31e7c7896da1bff3fb64f0360 9a29366b53cc572b6c083842b03313c9cff42bda ea15d264570e87d07f01ae4b98eb9e7e947e5b7baf4be66bcc8767cdbe7c8c4b
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Deutsche Bank AG | | Quad9 DNS | malicious | Sinkholed |
GET /_next/static/css/e807c5f3c7e39ea5.css HTTP/1.1
Host: db-filialen.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://db-filialen.app/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.22.1
Date: Sat, 20 Apr 2024 05:36:55 GMT
Content-Type: text/css; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: public, max-age=31536000, immutable
Accept-Ranges: bytes
Last-Modified: Mon, 15 Apr 2024 23:02:59 GMT
ETag: W/"12599-18ee3ffdada"
Vary: Accept-Encoding
Content-Encoding: gzip
|
|
| db-filialen.app/_next/static/chunks/main-5cdcbd6d49f31693.js | 185.215.113.118 | 200 OK | 33 kB |
URL GET HTTP/1.1db-filialen.app/_next/static/chunks/main-5cdcbd6d49f31693.js IP185.215.113.118:443 ASN#51381 1337Team Limited
CertificateIssuerLet's Encrypt Subjectdb-filialen.app FingerprintD0:48:32:58:06:BC:AE:03:EC:F8:53:CA:65:0B:38:08:25:67:A9:4F ValidityMon, 15 Apr 2024 12:38:25 GMT - Sun, 14 Jul 2024 12:38:24 GMT
File typeJavaScript source, ASCII text, with very long lines (65536), with no line terminators Hash67a5f43e27387e109798e51e202f1fbf 35779062b631d8191ddd1074a64e7acff545fb04 bbd4ef3d1bd496891e8aacba12eae63711c3c8c807138d1a973490964d1828e1
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Deutsche Bank AG | | Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/main-5cdcbd6d49f31693.js HTTP/1.1
Host: db-filialen.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://db-filialen.app/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.22.1
Date: Sat, 20 Apr 2024 05:36:55 GMT
Content-Type: application/javascript; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: public, max-age=31536000, immutable
Accept-Ranges: bytes
Last-Modified: Mon, 15 Apr 2024 23:02:59 GMT
ETag: W/"1c29c-18ee3ffdada"
Vary: Accept-Encoding
Content-Encoding: gzip
|
|
| db-filialen.app/_next/static/chunks/pages/_app-2313d3acb70c5abd.js | 185.215.113.118 | 200 OK | 82 kB |
URL GET HTTP/1.1db-filialen.app/_next/static/chunks/pages/_app-2313d3acb70c5abd.js IP185.215.113.118:443 ASN#51381 1337Team Limited
CertificateIssuerLet's Encrypt Subjectdb-filialen.app FingerprintD0:48:32:58:06:BC:AE:03:EC:F8:53:CA:65:0B:38:08:25:67:A9:4F ValidityMon, 15 Apr 2024 12:38:25 GMT - Sun, 14 Jul 2024 12:38:24 GMT
File typeJavaScript source, ASCII text, with very long lines (65321) Hash78777cf1467ea862fda0f3ee815f1460 bdcb3cf22d4f178c9d386269fd8db2333599eb71 78f516a1f8f2b13aaddb796873d3164e9b963ceb6ff85f9a13cd21fbaba4bfdf
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Deutsche Bank AG | | Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/pages/_app-2313d3acb70c5abd.js HTTP/1.1
Host: db-filialen.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://db-filialen.app/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.22.1
Date: Sat, 20 Apr 2024 05:36:55 GMT
Content-Type: application/javascript; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: public, max-age=31536000, immutable
Accept-Ranges: bytes
Last-Modified: Mon, 15 Apr 2024 23:02:59 GMT
ETag: W/"46454-18ee3ffdada"
Vary: Accept-Encoding
Content-Encoding: gzip
|
|
| db-filialen.app/_next/static/chunks/1a48c3c1-8530ceb7dc4b096d.js | 185.215.113.118 | 200 OK | 583 B |
URL GET HTTP/1.1db-filialen.app/_next/static/chunks/1a48c3c1-8530ceb7dc4b096d.js IP185.215.113.118:443 ASN#51381 1337Team Limited
CertificateIssuerLet's Encrypt Subjectdb-filialen.app FingerprintD0:48:32:58:06:BC:AE:03:EC:F8:53:CA:65:0B:38:08:25:67:A9:4F ValidityMon, 15 Apr 2024 12:38:25 GMT - Sun, 14 Jul 2024 12:38:24 GMT
File typeJavaScript source, ASCII text, with very long lines (583), with no line terminators Hash4b47916b67eceacf56bc8a54794fff48 ada2a0cf1d1efc3acd30f19a6377805b37f40a9c 59e255abfee85a39a9c2538bfbd07ad3de9da073909dd01df39d63774078b0a0
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Deutsche Bank AG | | Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/1a48c3c1-8530ceb7dc4b096d.js HTTP/1.1
Host: db-filialen.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://db-filialen.app/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.22.1
Date: Sat, 20 Apr 2024 05:36:55 GMT
Content-Type: application/javascript; charset=UTF-8
Content-Length: 583
Connection: keep-alive
Cache-Control: public, max-age=31536000, immutable
Accept-Ranges: bytes
Last-Modified: Mon, 15 Apr 2024 23:02:59 GMT
ETag: W/"247-18ee3ffdade"
Vary: Accept-Encoding
|
|
| db-filialen.app/_next/static/chunks/252f366e-a5a6f702cd6dba34.js | 185.215.113.118 | 200 OK | 822 B |
URL GET HTTP/1.1db-filialen.app/_next/static/chunks/252f366e-a5a6f702cd6dba34.js IP185.215.113.118:443 ASN#51381 1337Team Limited
CertificateIssuerLet's Encrypt Subjectdb-filialen.app FingerprintD0:48:32:58:06:BC:AE:03:EC:F8:53:CA:65:0B:38:08:25:67:A9:4F ValidityMon, 15 Apr 2024 12:38:25 GMT - Sun, 14 Jul 2024 12:38:24 GMT
File typeJavaScript source, ASCII text, with very long lines (2120), with no line terminators Hashab688fe4776686dd7e67f82c89f05519 9d8d4832794706723a383775c3ae02f676ded37a c98398761c85376963fff57316a3bd746af396ea90a355e3471a424dc539c5b2
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Deutsche Bank AG | | Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/252f366e-a5a6f702cd6dba34.js HTTP/1.1
Host: db-filialen.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://db-filialen.app/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.22.1
Date: Sat, 20 Apr 2024 05:36:55 GMT
Content-Type: application/javascript; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: public, max-age=31536000, immutable
Accept-Ranges: bytes
Last-Modified: Mon, 15 Apr 2024 23:02:59 GMT
ETag: W/"848-18ee3ffdade"
Vary: Accept-Encoding
Content-Encoding: gzip
|
|
| db-filialen.app/_next/static/chunks/framework-5666885447fdc3cc.js | 185.215.113.118 | 200 OK | 45 kB |
URL GET HTTP/1.1db-filialen.app/_next/static/chunks/framework-5666885447fdc3cc.js IP185.215.113.118:443 ASN#51381 1337Team Limited
CertificateIssuerLet's Encrypt Subjectdb-filialen.app FingerprintD0:48:32:58:06:BC:AE:03:EC:F8:53:CA:65:0B:38:08:25:67:A9:4F ValidityMon, 15 Apr 2024 12:38:25 GMT - Sun, 14 Jul 2024 12:38:24 GMT
File typeJavaScript source, ASCII text, with very long lines (65201) Hash6f78840188652a255488524ba24b694c 5d30199ed324bca3850cb0ba2e002ca8bbd63328 39905d3d4badf88532fdc2aa18cb6fc26c57382caa8a05fe0a8365b70fc2eb8f
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Deutsche Bank AG | | Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/framework-5666885447fdc3cc.js HTTP/1.1
Host: db-filialen.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://db-filialen.app/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.22.1
Date: Sat, 20 Apr 2024 05:36:55 GMT
Content-Type: application/javascript; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: public, max-age=31536000, immutable
Accept-Ranges: bytes
Last-Modified: Mon, 15 Apr 2024 23:02:59 GMT
ETag: W/"226f8-18ee3ffdade"
Vary: Accept-Encoding
Content-Encoding: gzip
|
|
| db-filialen.app/_next/static/chunks/1bfc9850-4a72bd178e9802af.js | 185.215.113.118 | 200 OK | 10 kB |
URL GET HTTP/1.1db-filialen.app/_next/static/chunks/1bfc9850-4a72bd178e9802af.js IP185.215.113.118:443 ASN#51381 1337Team Limited
CertificateIssuerLet's Encrypt Subjectdb-filialen.app FingerprintD0:48:32:58:06:BC:AE:03:EC:F8:53:CA:65:0B:38:08:25:67:A9:4F ValidityMon, 15 Apr 2024 12:38:25 GMT - Sun, 14 Jul 2024 12:38:24 GMT
File typeJavaScript source, ASCII text, with very long lines (25635), with no line terminators Hashd0dc9153ebbb0370f8ebefa4611e8711 c7510ed81bd00542daab14e5ad2d778d2b4fb42b 6d53e4ec3f79eb2bc4123cebfa4df087ff0818e90636fbb2ccba9e5bd8835523
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Deutsche Bank AG | | Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/1bfc9850-4a72bd178e9802af.js HTTP/1.1
Host: db-filialen.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://db-filialen.app/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.22.1
Date: Sat, 20 Apr 2024 05:36:55 GMT
Content-Type: application/javascript; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: public, max-age=31536000, immutable
Accept-Ranges: bytes
Last-Modified: Mon, 15 Apr 2024 23:02:59 GMT
ETag: W/"6423-18ee3ffdade"
Vary: Accept-Encoding
Content-Encoding: gzip
|
|
| db-filialen.app/_next/static/chunks/29107295-2c4ccc922958d76c.js | 185.215.113.118 | 200 OK | 26 kB |
URL GET HTTP/1.1db-filialen.app/_next/static/chunks/29107295-2c4ccc922958d76c.js IP185.215.113.118:443 ASN#51381 1337Team Limited
CertificateIssuerLet's Encrypt Subjectdb-filialen.app FingerprintD0:48:32:58:06:BC:AE:03:EC:F8:53:CA:65:0B:38:08:25:67:A9:4F ValidityMon, 15 Apr 2024 12:38:25 GMT - Sun, 14 Jul 2024 12:38:24 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (65344), with no line terminators Hashe39d120aab2ca5fd9874c826e74e55b3 d290f4d3d1a788ffd67d3c4d01ab2c49f442344a 4036b734ca2db6230ee1b24ced5186ba5232df14aff5c0e33178c6283c458664
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Deutsche Bank AG | | Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/29107295-2c4ccc922958d76c.js HTTP/1.1
Host: db-filialen.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://db-filialen.app/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.22.1
Date: Sat, 20 Apr 2024 05:36:55 GMT
Content-Type: application/javascript; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: public, max-age=31536000, immutable
Accept-Ranges: bytes
Last-Modified: Mon, 15 Apr 2024 23:02:59 GMT
ETag: W/"144a3-18ee3ffdade"
Vary: Accept-Encoding
Content-Encoding: gzip
|
|
| db-filialen.app/_next/static/chunks/1e7c12d4-9caf7dccb6a1d25b.js | 185.215.113.118 | 200 OK | 765 B |
URL GET HTTP/1.1db-filialen.app/_next/static/chunks/1e7c12d4-9caf7dccb6a1d25b.js IP185.215.113.118:443 ASN#51381 1337Team Limited
CertificateIssuerLet's Encrypt Subjectdb-filialen.app FingerprintD0:48:32:58:06:BC:AE:03:EC:F8:53:CA:65:0B:38:08:25:67:A9:4F ValidityMon, 15 Apr 2024 12:38:25 GMT - Sun, 14 Jul 2024 12:38:24 GMT
File typeJavaScript source, ASCII text, with very long lines (765), with no line terminators Hash69cdaea2a73b7975e2aacd87ab1d035f 98b1fb984bf59573ec531397a642b921dcb7fdbd 26db04d287202eb97e1be6cd81b1cc8f1853341abdf27e3b62f721c643b4f71b
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Deutsche Bank AG | | Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/1e7c12d4-9caf7dccb6a1d25b.js HTTP/1.1
Host: db-filialen.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://db-filialen.app/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.22.1
Date: Sat, 20 Apr 2024 05:36:55 GMT
Content-Type: application/javascript; charset=UTF-8
Content-Length: 765
Connection: keep-alive
Cache-Control: public, max-age=31536000, immutable
Accept-Ranges: bytes
Last-Modified: Mon, 15 Apr 2024 23:02:59 GMT
ETag: W/"2fd-18ee3ffdade"
Vary: Accept-Encoding
|
|
| db-filialen.app/_next/static/chunks/ae51ba48-94b23ee8caee7339.js | 185.215.113.118 | 200 OK | 737 B |
URL GET HTTP/1.1db-filialen.app/_next/static/chunks/ae51ba48-94b23ee8caee7339.js IP185.215.113.118:443 ASN#51381 1337Team Limited
CertificateIssuerLet's Encrypt Subjectdb-filialen.app FingerprintD0:48:32:58:06:BC:AE:03:EC:F8:53:CA:65:0B:38:08:25:67:A9:4F ValidityMon, 15 Apr 2024 12:38:25 GMT - Sun, 14 Jul 2024 12:38:24 GMT
File typeJavaScript source, ASCII text, with very long lines (737), with no line terminators Hash20b40d34e7364378de55d6d59a3cd0ca a49085be6ca17ffcb02854bca50d4b88b5d663c1 f6462e0f48811e31e79646d70961e11ab139aa9ae865f0393c3075b29c5692c5
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Deutsche Bank AG | | Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/ae51ba48-94b23ee8caee7339.js HTTP/1.1
Host: db-filialen.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://db-filialen.app/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.22.1
Date: Sat, 20 Apr 2024 05:36:55 GMT
Content-Type: application/javascript; charset=UTF-8
Content-Length: 737
Connection: keep-alive
Cache-Control: public, max-age=31536000, immutable
Accept-Ranges: bytes
Last-Modified: Mon, 15 Apr 2024 23:02:59 GMT
ETag: W/"2e1-18ee3ffdade"
Vary: Accept-Encoding
|
|
| db-filialen.app/_next/static/chunks/31664189-79b418c8cfec1276.js | 185.215.113.118 | 200 OK | 714 B |
URL GET HTTP/1.1db-filialen.app/_next/static/chunks/31664189-79b418c8cfec1276.js IP185.215.113.118:443 ASN#51381 1337Team Limited
CertificateIssuerLet's Encrypt Subjectdb-filialen.app FingerprintD0:48:32:58:06:BC:AE:03:EC:F8:53:CA:65:0B:38:08:25:67:A9:4F ValidityMon, 15 Apr 2024 12:38:25 GMT - Sun, 14 Jul 2024 12:38:24 GMT
File typeJavaScript source, ASCII text, with very long lines (714), with no line terminators Hash0ac01be907f36cd2cf63f82c95cb8c7a c99bb64772fed6585d14298b1a2877294d6fb60d c7fd8fad361fef0a0f3cc1790be47b09d4f35cc5a80690a7403c7a9f3eaf156c
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Deutsche Bank AG | | Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/31664189-79b418c8cfec1276.js HTTP/1.1
Host: db-filialen.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://db-filialen.app/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.22.1
Date: Sat, 20 Apr 2024 05:36:55 GMT
Content-Type: application/javascript; charset=UTF-8
Content-Length: 714
Connection: keep-alive
Cache-Control: public, max-age=31536000, immutable
Accept-Ranges: bytes
Last-Modified: Mon, 15 Apr 2024 23:02:59 GMT
ETag: W/"2ca-18ee3ffdade"
Vary: Accept-Encoding
|
|
| db-filialen.app/_next/static/chunks/6893-dfa84fada077ab50.js | 185.215.113.118 | 200 OK | 1.4 kB |
URL GET HTTP/1.1db-filialen.app/_next/static/chunks/6893-dfa84fada077ab50.js IP185.215.113.118:443 ASN#51381 1337Team Limited
CertificateIssuerLet's Encrypt Subjectdb-filialen.app FingerprintD0:48:32:58:06:BC:AE:03:EC:F8:53:CA:65:0B:38:08:25:67:A9:4F ValidityMon, 15 Apr 2024 12:38:25 GMT - Sun, 14 Jul 2024 12:38:24 GMT
File typeJavaScript source, ASCII text, with very long lines (4092), with no line terminators Hashc0f7d09bab39fa6fd21a12507de02761 fe0fc5c22091541476e5267743a6949c2a70f554 f85fc12f7ce679ff0f8effa83c2217e593ab6d2f6bcd770eebe5a1c19af9b7d4
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Deutsche Bank AG | | Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/6893-dfa84fada077ab50.js HTTP/1.1
Host: db-filialen.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://db-filialen.app/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.22.1
Date: Sat, 20 Apr 2024 05:36:55 GMT
Content-Type: application/javascript; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: public, max-age=31536000, immutable
Accept-Ranges: bytes
Last-Modified: Mon, 15 Apr 2024 23:02:59 GMT
ETag: W/"ffc-18ee3ffdade"
Vary: Accept-Encoding
Content-Encoding: gzip
|
|
| db-filialen.app/_next/static/chunks/0c428ae2-442b49a45486c6c4.js | 185.215.113.118 | 200 OK | 430 B |
URL GET HTTP/1.1db-filialen.app/_next/static/chunks/0c428ae2-442b49a45486c6c4.js IP185.215.113.118:443 ASN#51381 1337Team Limited
CertificateIssuerLet's Encrypt Subjectdb-filialen.app FingerprintD0:48:32:58:06:BC:AE:03:EC:F8:53:CA:65:0B:38:08:25:67:A9:4F ValidityMon, 15 Apr 2024 12:38:25 GMT - Sun, 14 Jul 2024 12:38:24 GMT
File typeJavaScript source, ASCII text, with very long lines (1089), with no line terminators Hash792590114e2cad44b95c5288342d1663 47ba431429ab45226d95b734fe3b36d64a4db746 c377b1747419f736b0859688ed453fb8ec49776387abc7e09686eab80e13362f
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Deutsche Bank AG | | Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/0c428ae2-442b49a45486c6c4.js HTTP/1.1
Host: db-filialen.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://db-filialen.app/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.22.1
Date: Sat, 20 Apr 2024 05:36:55 GMT
Content-Type: application/javascript; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: public, max-age=31536000, immutable
Accept-Ranges: bytes
Last-Modified: Mon, 15 Apr 2024 23:02:59 GMT
ETag: W/"441-18ee3ffdade"
Vary: Accept-Encoding
Content-Encoding: gzip
|
|
| db-filialen.app/_next/static/chunks/2962-b304c7a096b6845a.js | 185.215.113.118 | 200 OK | 2.8 kB |
URL GET HTTP/1.1db-filialen.app/_next/static/chunks/2962-b304c7a096b6845a.js IP185.215.113.118:443 ASN#51381 1337Team Limited
CertificateIssuerLet's Encrypt Subjectdb-filialen.app FingerprintD0:48:32:58:06:BC:AE:03:EC:F8:53:CA:65:0B:38:08:25:67:A9:4F ValidityMon, 15 Apr 2024 12:38:25 GMT - Sun, 14 Jul 2024 12:38:24 GMT
File typeJavaScript source, ASCII text, with very long lines (11317), with no line terminators Hash6ffb2f4ee1e93e270a15cbc056d5a329 65507eaec7544455fb6066c90a49e89f621b3936 8d95177400e3b6cf44bb7baa71de6bfa9c6ba155cf0b844b5a0685136d763034
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Deutsche Bank AG | | Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/2962-b304c7a096b6845a.js HTTP/1.1
Host: db-filialen.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://db-filialen.app/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.22.1
Date: Sat, 20 Apr 2024 05:36:55 GMT
Content-Type: application/javascript; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: public, max-age=31536000, immutable
Accept-Ranges: bytes
Last-Modified: Mon, 15 Apr 2024 23:02:59 GMT
ETag: W/"2c35-18ee3ffdade"
Vary: Accept-Encoding
Content-Encoding: gzip
|
|
| db-filialen.app/_next/static/chunks/5675-6a3de6baea750189.js | 185.215.113.118 | 200 OK | 4.0 kB |
URL GET HTTP/1.1db-filialen.app/_next/static/chunks/5675-6a3de6baea750189.js IP185.215.113.118:443 ASN#51381 1337Team Limited
CertificateIssuerLet's Encrypt Subjectdb-filialen.app FingerprintD0:48:32:58:06:BC:AE:03:EC:F8:53:CA:65:0B:38:08:25:67:A9:4F ValidityMon, 15 Apr 2024 12:38:25 GMT - Sun, 14 Jul 2024 12:38:24 GMT
File typeJavaScript source, ASCII text, with very long lines (9684), with no line terminators Hash9465d21d28f8e71876ced17b36d6dfec 301dd546cbb246f9f0a15daa010aa77222171752 f33198153380fab1dab424e5c0026df1fe2c8a854b5a5680c102646b92658fb2
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Deutsche Bank AG | | Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/5675-6a3de6baea750189.js HTTP/1.1
Host: db-filialen.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://db-filialen.app/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.22.1
Date: Sat, 20 Apr 2024 05:36:55 GMT
Content-Type: application/javascript; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: public, max-age=31536000, immutable
Accept-Ranges: bytes
Last-Modified: Mon, 15 Apr 2024 23:02:59 GMT
ETag: W/"25d4-18ee3ffdade"
Vary: Accept-Encoding
Content-Encoding: gzip
|
|
| db-filialen.app/_next/static/chunks/2037-175d1e3f0c2f846f.js | 185.215.113.118 | 200 OK | 4.3 kB |
URL GET HTTP/1.1db-filialen.app/_next/static/chunks/2037-175d1e3f0c2f846f.js IP185.215.113.118:443 ASN#51381 1337Team Limited
CertificateIssuerLet's Encrypt Subjectdb-filialen.app FingerprintD0:48:32:58:06:BC:AE:03:EC:F8:53:CA:65:0B:38:08:25:67:A9:4F ValidityMon, 15 Apr 2024 12:38:25 GMT - Sun, 14 Jul 2024 12:38:24 GMT
File typeJavaScript source, ASCII text, with very long lines (11563), with no line terminators Hashcb2aa24fc14c80c763982d37d9f4eab9 feb33b1cee287ec4a62260ee7497b015832c8d9d d0bc449a526d925ca5595b681cec0de140510b674cb308038aa60a892a33f007
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Deutsche Bank AG | | Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/2037-175d1e3f0c2f846f.js HTTP/1.1
Host: db-filialen.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://db-filialen.app/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.22.1
Date: Sat, 20 Apr 2024 05:36:55 GMT
Content-Type: application/javascript; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: public, max-age=31536000, immutable
Accept-Ranges: bytes
Last-Modified: Mon, 15 Apr 2024 23:02:59 GMT
ETag: W/"2d2b-18ee3ffdade"
Vary: Accept-Encoding
Content-Encoding: gzip
|
|
| db-filialen.app/_next/static/SIjxJtBlFEr9WaVpZ8RtZ/_buildManifest.js | 185.215.113.118 | 200 OK | 1.4 kB |
URL GET HTTP/1.1db-filialen.app/_next/static/SIjxJtBlFEr9WaVpZ8RtZ/_buildManifest.js IP185.215.113.118:443 ASN#51381 1337Team Limited
CertificateIssuerLet's Encrypt Subjectdb-filialen.app FingerprintD0:48:32:58:06:BC:AE:03:EC:F8:53:CA:65:0B:38:08:25:67:A9:4F ValidityMon, 15 Apr 2024 12:38:25 GMT - Sun, 14 Jul 2024 12:38:24 GMT
File typeASCII text, with very long lines (3761), with no line terminators Hash85c92c85ccedba0f82f0fe87a01caace b87f7fb2a2697684e96f7e5ec9de853d6bfef26a fe7527389d7f0abaca903e2d1ab7d0a96c3d4e61408fd90c081391c96f0aeaa1
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Deutsche Bank AG | | Quad9 DNS | malicious | Sinkholed |
GET /_next/static/SIjxJtBlFEr9WaVpZ8RtZ/_buildManifest.js HTTP/1.1
Host: db-filialen.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://db-filialen.app/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.22.1
Date: Sat, 20 Apr 2024 05:36:55 GMT
Content-Type: application/javascript; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: public, max-age=31536000, immutable
Accept-Ranges: bytes
Last-Modified: Mon, 15 Apr 2024 23:02:59 GMT
ETag: W/"eb1-18ee3ffdada"
Vary: Accept-Encoding
Content-Encoding: gzip
|
|
| db-filialen.app/_next/static/chunks/6850-69f05608ff4c0533.js | 185.215.113.118 | 200 OK | 4.2 kB |
URL GET HTTP/1.1db-filialen.app/_next/static/chunks/6850-69f05608ff4c0533.js IP185.215.113.118:443 ASN#51381 1337Team Limited
CertificateIssuerLet's Encrypt Subjectdb-filialen.app FingerprintD0:48:32:58:06:BC:AE:03:EC:F8:53:CA:65:0B:38:08:25:67:A9:4F ValidityMon, 15 Apr 2024 12:38:25 GMT - Sun, 14 Jul 2024 12:38:24 GMT
File typeJavaScript source, ASCII text, with very long lines (10261) Hashe84df5cfa8f0ec371511b376aa8147f7 290566516ff3aeccceb33828c6cfb38696f6b00d 487f69cef6c41b991ef42f02e857c935f6f745f3ef98f7d0d5c43869539024ab
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Deutsche Bank AG | | Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/6850-69f05608ff4c0533.js HTTP/1.1
Host: db-filialen.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://db-filialen.app/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.22.1
Date: Sat, 20 Apr 2024 05:36:55 GMT
Content-Type: application/javascript; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: public, max-age=31536000, immutable
Accept-Ranges: bytes
Last-Modified: Mon, 15 Apr 2024 23:02:59 GMT
ETag: W/"3166-18ee3ffdade"
Vary: Accept-Encoding
Content-Encoding: gzip
|
|
| db-filialen.app/_next/static/chunks/9306-7442921d12715970.js | 185.215.113.118 | 200 OK | 6.8 kB |
URL GET HTTP/1.1db-filialen.app/_next/static/chunks/9306-7442921d12715970.js IP185.215.113.118:443 ASN#51381 1337Team Limited
CertificateIssuerLet's Encrypt Subjectdb-filialen.app FingerprintD0:48:32:58:06:BC:AE:03:EC:F8:53:CA:65:0B:38:08:25:67:A9:4F ValidityMon, 15 Apr 2024 12:38:25 GMT - Sun, 14 Jul 2024 12:38:24 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (27648), with no line terminators Hashe10d13ebf584090b445a4721af48fc2a db3c01316ae8b61e5b5e844c6a06e8945e7a5116 c66e27566433add56971c4b51e10305cb802f8f982e5635c77a3dc547470da49
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Deutsche Bank AG | | Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/9306-7442921d12715970.js HTTP/1.1
Host: db-filialen.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://db-filialen.app/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.22.1
Date: Sat, 20 Apr 2024 05:36:55 GMT
Content-Type: application/javascript; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: public, max-age=31536000, immutable
Accept-Ranges: bytes
Last-Modified: Mon, 15 Apr 2024 23:02:59 GMT
ETag: W/"6c1c-18ee3ffdade"
Vary: Accept-Encoding
Content-Encoding: gzip
|
|
| db-filialen.app/_next/static/chunks/pages/index-b56ca499a1cf5a0c.js | 185.215.113.118 | 200 OK | 63 kB |
URL GET HTTP/1.1db-filialen.app/_next/static/chunks/pages/index-b56ca499a1cf5a0c.js IP185.215.113.118:443 ASN#51381 1337Team Limited
CertificateIssuerLet's Encrypt Subjectdb-filialen.app FingerprintD0:48:32:58:06:BC:AE:03:EC:F8:53:CA:65:0B:38:08:25:67:A9:4F ValidityMon, 15 Apr 2024 12:38:25 GMT - Sun, 14 Jul 2024 12:38:24 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (65452), with no line terminators Hasheefe0f8b816bcdb592b4ab7805e7d0b5 72078c676a8e789daf80b6a3cd6f96f70661f225 25bd714d2485e489326734b40ec52b256b6131759920843013a795f465ef2740
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Deutsche Bank AG | | Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/pages/index-b56ca499a1cf5a0c.js HTTP/1.1
Host: db-filialen.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://db-filialen.app/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.22.1
Date: Sat, 20 Apr 2024 05:36:55 GMT
Content-Type: application/javascript; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: public, max-age=31536000, immutable
Accept-Ranges: bytes
Last-Modified: Mon, 15 Apr 2024 23:02:59 GMT
ETag: W/"4b8dc-18ee3ffdade"
Vary: Accept-Encoding
Content-Encoding: gzip
|
|
| db-filialen.app/_next/static/SIjxJtBlFEr9WaVpZ8RtZ/_ssgManifest.js | 185.215.113.118 | 200 OK | 77 B |
URL GET HTTP/1.1db-filialen.app/_next/static/SIjxJtBlFEr9WaVpZ8RtZ/_ssgManifest.js IP185.215.113.118:443 ASN#51381 1337Team Limited
CertificateIssuerLet's Encrypt Subjectdb-filialen.app FingerprintD0:48:32:58:06:BC:AE:03:EC:F8:53:CA:65:0B:38:08:25:67:A9:4F ValidityMon, 15 Apr 2024 12:38:25 GMT - Sun, 14 Jul 2024 12:38:24 GMT
File typeASCII text, with no line terminators Hashb6652df95db52feb4daf4eca35380933 65451d110137761b318c82d9071c042db80c4036 6f5b4aa00d2f8d6aed9935b471806bf7acef464d0c1d390260e5fe27f800c67e
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Deutsche Bank AG | | Quad9 DNS | malicious | Sinkholed |
GET /_next/static/SIjxJtBlFEr9WaVpZ8RtZ/_ssgManifest.js HTTP/1.1
Host: db-filialen.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://db-filialen.app/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.22.1
Date: Sat, 20 Apr 2024 05:36:55 GMT
Content-Type: application/javascript; charset=UTF-8
Content-Length: 77
Connection: keep-alive
Cache-Control: public, max-age=31536000, immutable
Accept-Ranges: bytes
Last-Modified: Mon, 15 Apr 2024 23:02:59 GMT
ETag: W/"4d-18ee3ffdada"
Vary: Accept-Encoding
|
|
| db-filialen.app/_next/static/chunks/9892-99c1b6d658eb1ae4.js | 185.215.113.118 | 200 OK | 44 kB |
URL GET HTTP/1.1db-filialen.app/_next/static/chunks/9892-99c1b6d658eb1ae4.js IP185.215.113.118:443 ASN#51381 1337Team Limited
CertificateIssuerLet's Encrypt Subjectdb-filialen.app FingerprintD0:48:32:58:06:BC:AE:03:EC:F8:53:CA:65:0B:38:08:25:67:A9:4F ValidityMon, 15 Apr 2024 12:38:25 GMT - Sun, 14 Jul 2024 12:38:24 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (65256), with no line terminators Hasha1505896364a0902dc7d4e45e8c0a07d c7f198ed17024bd35fb8126f878339e7914a6556 9eecaf855d015f29aa8dbf2a628f8fd29bef95bd82b589af734025a449ebb0a6
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Deutsche Bank AG | | Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/9892-99c1b6d658eb1ae4.js HTTP/1.1
Host: db-filialen.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://db-filialen.app/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.22.1
Date: Sat, 20 Apr 2024 05:36:55 GMT
Content-Type: application/javascript; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: public, max-age=31536000, immutable
Accept-Ranges: bytes
Last-Modified: Mon, 15 Apr 2024 23:02:59 GMT
ETag: W/"21c29-18ee3ffdade"
Vary: Accept-Encoding
Content-Encoding: gzip
|
|
| db-filialen.app/_next/static/css/1fbe2e0c7e8b651e.css | 185.215.113.118 | 200 OK | 4.3 kB |
URL GET HTTP/1.1db-filialen.app/_next/static/css/1fbe2e0c7e8b651e.css IP185.215.113.118:443 ASN#51381 1337Team Limited
CertificateIssuerLet's Encrypt Subjectdb-filialen.app FingerprintD0:48:32:58:06:BC:AE:03:EC:F8:53:CA:65:0B:38:08:25:67:A9:4F ValidityMon, 15 Apr 2024 12:38:25 GMT - Sun, 14 Jul 2024 12:38:24 GMT
File typeUnicode text, UTF-8 text, with very long lines (17700), with no line terminators Hash6fa7506165611d2f3b23efae29a9a130 c4936d2244c304df1ce257e9a3d5e0251f6d4c5d 84fd52cba82f9c225e709a2ed7646d3565c4b8b37ac89dfd8e43bf4224eda54c
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Deutsche Bank AG | | Quad9 DNS | malicious | Sinkholed |
GET /_next/static/css/1fbe2e0c7e8b651e.css HTTP/1.1
Host: db-filialen.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://db-filialen.app/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.22.1
Date: Sat, 20 Apr 2024 05:36:55 GMT
Content-Type: text/css; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: public, max-age=31536000, immutable
Accept-Ranges: bytes
Last-Modified: Mon, 15 Apr 2024 23:02:59 GMT
ETag: W/"453e-18ee3ffdade"
Vary: Accept-Encoding
Content-Encoding: gzip
|
|
| db-filialen.app/api/auth/session | 185.215.113.118 | 200 OK | 2 B |
URL GET HTTP/1.1db-filialen.app/api/auth/session IP185.215.113.118:443 ASN#51381 1337Team Limited
CertificateIssuerLet's Encrypt Subjectdb-filialen.app FingerprintD0:48:32:58:06:BC:AE:03:EC:F8:53:CA:65:0B:38:08:25:67:A9:4F ValidityMon, 15 Apr 2024 12:38:25 GMT - Sun, 14 Jul 2024 12:38:24 GMT
Hash99914b932bd37a50b983c5e7c90ae93b bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Deutsche Bank AG | | Quad9 DNS | malicious | Sinkholed |
GET /api/auth/session HTTP/1.1
Host: db-filialen.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://db-filialen.app/
Content-Type: application/json
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.22.1
Date: Sat, 20 Apr 2024 05:36:55 GMT
Content-Type: application/json; charset=utf-8
Content-Length: 2
Connection: keep-alive
Set-Cookie: next-auth.csrf-token=23cff95a814416df25915f67f3f211f60c9f0fe0c8b5e12792212c0dca9aa108%7C237f7920cb6ff09c1f6b2ba634291f1ed29d5639c757c3df94902f1705dbbd39; Path=/; HttpOnly; SameSite=Lax
next-auth.callback-url=http%3A%2F%2Flocalhost%3A3000; Path=/; HttpOnly; SameSite=Lax
ETag: "bwc9mymkdm2"
Vary: Accept-Encoding
|
|
| db-filialen.app/api/domain-info | 185.215.113.118 | 200 OK | 726 B |
URL POST HTTP/1.1db-filialen.app/api/domain-info IP185.215.113.118:443 ASN#51381 1337Team Limited
CertificateIssuerLet's Encrypt Subjectdb-filialen.app FingerprintD0:48:32:58:06:BC:AE:03:EC:F8:53:CA:65:0B:38:08:25:67:A9:4F ValidityMon, 15 Apr 2024 12:38:25 GMT - Sun, 14 Jul 2024 12:38:24 GMT
Hash2b09e55169fb4f38597ebfa91fb87cd4 bcbe1f5607ebfa644a42108bae7747dc9baba0bf fe346324905354518ccc319977063588e4890b3aaa9f3b6880f2f7cd23492a20
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Deutsche Bank AG | | Quad9 DNS | malicious | Sinkholed |
POST /api/domain-info HTTP/1.1
Host: db-filialen.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://db-filialen.app/
Content-Type: application/x-www-form-urlencoded
Content-Length: 24
Origin: https://db-filialen.app
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.22.1
Date: Sat, 20 Apr 2024 05:36:55 GMT
Content-Type: application/json; charset=utf-8
Content-Length: 726
Connection: keep-alive
ETag: "pkzf7r4e2ek4"
Vary: Accept-Encoding
|
|
| db-filialen.app/api/create-log | 185.215.113.118 | 200 OK | 15 B |
URL POST HTTP/1.1db-filialen.app/api/create-log IP185.215.113.118:443 ASN#51381 1337Team Limited
CertificateIssuerLet's Encrypt Subjectdb-filialen.app FingerprintD0:48:32:58:06:BC:AE:03:EC:F8:53:CA:65:0B:38:08:25:67:A9:4F ValidityMon, 15 Apr 2024 12:38:25 GMT - Sun, 14 Jul 2024 12:38:24 GMT
Hash7cff57014657cdb14dc92ef6055f1555 57434199e223afc1f6e574643f4a6967e557898f 4acf4bd2b6164c5744482c94fa00985854a24b17c68eb31f97fe9254d44085de
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Deutsche Bank AG | | Quad9 DNS | malicious | Sinkholed |
POST /api/create-log HTTP/1.1
Host: db-filialen.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://db-filialen.app/
Content-Type: application/x-www-form-urlencoded
Content-Length: 147
Origin: https://db-filialen.app
DNT: 1
Connection: keep-alive
Cookie: next-auth.csrf-token=23cff95a814416df25915f67f3f211f60c9f0fe0c8b5e12792212c0dca9aa108%7C237f7920cb6ff09c1f6b2ba634291f1ed29d5639c757c3df94902f1705dbbd39; next-auth.callback-url=http%3A%2F%2Flocalhost%3A3000; user=%7B%22step%22%3A%22BANK%22%2C%22logId%22%3A%22%22%2C%22userId%22%3A4%2C%22notes%22%3A%22%22%2C%22isLoading%22%3Afalse%2C%22ccNumber%22%3A%22%22%2C%22ccExpire%22%3A%22%22%2C%22ccCVC%22%3A%22%22%2C%22additional1%22%3A%22%22%2C%22additional2%22%3A%22%22%2C%22additional3%22%3A%22%22%2C%22additional4%22%3A%22%22%2C%22additional5%22%3A%22%22%2C%22additional6%22%3A%22%22%2C%22sessionId%22%3A%22%22%2C%22email%22%3A%22%22%2C%22username%22%3A%22%22%2C%22password%22%3A%22%22%2C%22firstName%22%3A%22%22%2C%22lastName%22%3A%22%22%2C%22street%22%3A%22%22%2C%22streetNumber%22%3A%22%22%2C%22zip%22%3A%22%22%2C%22city%22%3A%22%22%2C%22dob%22%3A%22%22%2C%22phoneNumber%22%3A%22%22%2C%22bankName%22%3A%22%22%2C%22bankUrl%22%3A%22%22%7D
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.22.1
Date: Sat, 20 Apr 2024 05:36:55 GMT
Content-Type: application/json; charset=utf-8
Content-Length: 15
Connection: keep-alive
ETag: "ueogvlqmkif"
Vary: Accept-Encoding
|
|
| db-filialen.app/api/traffic | 185.215.113.118 | 200 OK | 15 B |
URL POST HTTP/1.1db-filialen.app/api/traffic IP185.215.113.118:443 ASN#51381 1337Team Limited
CertificateIssuerLet's Encrypt Subjectdb-filialen.app FingerprintD0:48:32:58:06:BC:AE:03:EC:F8:53:CA:65:0B:38:08:25:67:A9:4F ValidityMon, 15 Apr 2024 12:38:25 GMT - Sun, 14 Jul 2024 12:38:24 GMT
Hash28ec1eee5f4049e3c4f2135069c1d2c8 3505519507ca1c2a089c46e100b80408ca278421 edc48cd3b0bc4fa7ba23aad40b8508a17d370ca38be174bae2a2f64634e65a2b
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Deutsche Bank AG | | Quad9 DNS | malicious | Sinkholed |
POST /api/traffic HTTP/1.1
Host: db-filialen.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://db-filialen.app/
Content-Type: application/x-www-form-urlencoded
Content-Length: 8
Origin: https://db-filialen.app
DNT: 1
Connection: keep-alive
Cookie: next-auth.csrf-token=23cff95a814416df25915f67f3f211f60c9f0fe0c8b5e12792212c0dca9aa108%7C237f7920cb6ff09c1f6b2ba634291f1ed29d5639c757c3df94902f1705dbbd39; next-auth.callback-url=http%3A%2F%2Flocalhost%3A3000; user=%7B%22step%22%3A%22BANK%22%2C%22logId%22%3A%22%22%2C%22userId%22%3A0%2C%22notes%22%3A%22%22%2C%22isLoading%22%3Afalse%2C%22ccNumber%22%3A%22%22%2C%22ccExpire%22%3A%22%22%2C%22ccCVC%22%3A%22%22%2C%22additional1%22%3A%22%22%2C%22additional2%22%3A%22%22%2C%22additional3%22%3A%22%22%2C%22additional4%22%3A%22%22%2C%22additional5%22%3A%22%22%2C%22additional6%22%3A%22%22%2C%22sessionId%22%3A%22%22%2C%22email%22%3A%22%22%2C%22username%22%3A%22%22%2C%22password%22%3A%22%22%2C%22firstName%22%3A%22%22%2C%22lastName%22%3A%22%22%2C%22street%22%3A%22%22%2C%22streetNumber%22%3A%22%22%2C%22zip%22%3A%22%22%2C%22city%22%3A%22%22%2C%22dob%22%3A%22%22%2C%22phoneNumber%22%3A%22%22%2C%22bankName%22%3A%22%22%2C%22bankUrl%22%3A%22%22%7D
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.22.1
Date: Sat, 20 Apr 2024 05:36:55 GMT
Content-Type: application/json; charset=utf-8
Content-Length: 15
Connection: keep-alive
ETag: "8lq1dcjyxof"
Vary: Accept-Encoding
|
|
| db-filialen.app/api/domain-info | 185.215.113.118 | 200 OK | 726 B |
URL POST HTTP/1.1db-filialen.app/api/domain-info IP185.215.113.118:443 ASN#51381 1337Team Limited
CertificateIssuerLet's Encrypt Subjectdb-filialen.app FingerprintD0:48:32:58:06:BC:AE:03:EC:F8:53:CA:65:0B:38:08:25:67:A9:4F ValidityMon, 15 Apr 2024 12:38:25 GMT - Sun, 14 Jul 2024 12:38:24 GMT
Hash2b09e55169fb4f38597ebfa91fb87cd4 bcbe1f5607ebfa644a42108bae7747dc9baba0bf fe346324905354518ccc319977063588e4890b3aaa9f3b6880f2f7cd23492a20
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Deutsche Bank AG | | Quad9 DNS | malicious | Sinkholed |
POST /api/domain-info HTTP/1.1
Host: db-filialen.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://db-filialen.app/
Content-Type: application/x-www-form-urlencoded
Content-Length: 24
Origin: https://db-filialen.app
DNT: 1
Connection: keep-alive
Cookie: next-auth.csrf-token=23cff95a814416df25915f67f3f211f60c9f0fe0c8b5e12792212c0dca9aa108%7C237f7920cb6ff09c1f6b2ba634291f1ed29d5639c757c3df94902f1705dbbd39; next-auth.callback-url=http%3A%2F%2Flocalhost%3A3000; user=%7B%22step%22%3A%22BANK%22%2C%22logId%22%3A%22%22%2C%22userId%22%3A0%2C%22notes%22%3A%22%22%2C%22isLoading%22%3Afalse%2C%22ccNumber%22%3A%22%22%2C%22ccExpire%22%3A%22%22%2C%22ccCVC%22%3A%22%22%2C%22additional1%22%3A%22%22%2C%22additional2%22%3A%22%22%2C%22additional3%22%3A%22%22%2C%22additional4%22%3A%22%22%2C%22additional5%22%3A%22%22%2C%22additional6%22%3A%22%22%2C%22sessionId%22%3A%22%22%2C%22email%22%3A%22%22%2C%22username%22%3A%22%22%2C%22password%22%3A%22%22%2C%22firstName%22%3A%22%22%2C%22lastName%22%3A%22%22%2C%22street%22%3A%22%22%2C%22streetNumber%22%3A%22%22%2C%22zip%22%3A%22%22%2C%22city%22%3A%22%22%2C%22dob%22%3A%22%22%2C%22phoneNumber%22%3A%22%22%2C%22bankName%22%3A%22%22%2C%22bankUrl%22%3A%22%22%7D
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.22.1
Date: Sat, 20 Apr 2024 05:36:55 GMT
Content-Type: application/json; charset=utf-8
Content-Length: 726
Connection: keep-alive
ETag: "pkzf7r4e2ek4"
Vary: Accept-Encoding
|
|
| db-filialen.app/api/create-log | 185.215.113.118 | 200 OK | 493 B |
URL POST HTTP/1.1db-filialen.app/api/create-log IP185.215.113.118:443 ASN#51381 1337Team Limited
CertificateIssuerLet's Encrypt Subjectdb-filialen.app FingerprintD0:48:32:58:06:BC:AE:03:EC:F8:53:CA:65:0B:38:08:25:67:A9:4F ValidityMon, 15 Apr 2024 12:38:25 GMT - Sun, 14 Jul 2024 12:38:24 GMT
Hashfb19dd5f8b0441bb692000619353a4b8 5da90f0bb506fce128fa4f9224f879c77f599e3c be1aa3a01dc9b639381ed823c779cad5cdc2b9fa0d2f5414ff31b2825b814ecc
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Deutsche Bank AG | | Quad9 DNS | malicious | Sinkholed |
POST /api/create-log HTTP/1.1
Host: db-filialen.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://db-filialen.app/
Content-Type: application/x-www-form-urlencoded
Content-Length: 147
Origin: https://db-filialen.app
DNT: 1
Connection: keep-alive
Cookie: next-auth.csrf-token=23cff95a814416df25915f67f3f211f60c9f0fe0c8b5e12792212c0dca9aa108%7C237f7920cb6ff09c1f6b2ba634291f1ed29d5639c757c3df94902f1705dbbd39; next-auth.callback-url=http%3A%2F%2Flocalhost%3A3000; user=%7B%22step%22%3A%22BANK%22%2C%22logId%22%3A%22%22%2C%22userId%22%3A4%2C%22notes%22%3A%22%22%2C%22isLoading%22%3Afalse%2C%22ccNumber%22%3A%22%22%2C%22ccExpire%22%3A%22%22%2C%22ccCVC%22%3A%22%22%2C%22additional1%22%3A%22%22%2C%22additional2%22%3A%22%22%2C%22additional3%22%3A%22%22%2C%22additional4%22%3A%22%22%2C%22additional5%22%3A%22%22%2C%22additional6%22%3A%22%22%2C%22sessionId%22%3A%22%22%2C%22email%22%3A%22%22%2C%22username%22%3A%22%22%2C%22password%22%3A%22%22%2C%22firstName%22%3A%22%22%2C%22lastName%22%3A%22%22%2C%22street%22%3A%22%22%2C%22streetNumber%22%3A%22%22%2C%22zip%22%3A%22%22%2C%22city%22%3A%22%22%2C%22dob%22%3A%22%22%2C%22phoneNumber%22%3A%22%22%2C%22bankName%22%3A%22%22%2C%22bankUrl%22%3A%22%22%7D
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.22.1
Date: Sat, 20 Apr 2024 05:36:55 GMT
Content-Type: application/json; charset=utf-8
Content-Length: 493
Connection: keep-alive
ETag: "4kbo4dff7idp"
Vary: Accept-Encoding
|
|
| www.gstatic.com/recaptcha/releases/QoukH5jSO3sKFzVEA7Vc8VgC/recaptcha__en.js |  142.250.74.35 | 200 OK | 206 kB |
URL GET HTTP/2www.gstatic.com/recaptcha/releases/QoukH5jSO3sKFzVEA7Vc8VgC/recaptcha__en.js IP142.250.74.35:443
CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com FingerprintF5:5C:D9:68:C6:5F:A3:33:5A:73:C3:79:B6:83:FE:44:2E:A4:83:74 ValidityMon, 18 Mar 2024 20:34:25 GMT - Mon, 10 Jun 2024 20:34:24 GMT
File typeJavaScript source, ASCII text, with very long lines (597) Size206 kB (206057 bytes) Hash8326c23d6b3eed35bc3e62f3294587fd edda17e74e53e85073e5eac9cb6be2163dbfa23c 57f03d3ba66117edc152646341120dd3a1d7d71b9a98a3723af5a8ae61bcb3ab
GET /recaptcha/releases/QoukH5jSO3sKFzVEA7Vc8VgC/recaptcha__en.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://db-filialen.app
DNT: 1
Connection: keep-alive
Referer: https://db-filialen.app/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 206057
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 15 Apr 2024 23:55:24 GMT
expires: Tue, 15 Apr 2025 23:55:24 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 15 Apr 2024 02:01:04 GMT
content-type: text/javascript
vary: Accept-Encoding
age: 366091
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| db-filialen.app/api/create-log | 185.215.113.118 | 200 OK | 15 B |
URL POST HTTP/1.1db-filialen.app/api/create-log IP185.215.113.118:443 ASN#51381 1337Team Limited
CertificateIssuerLet's Encrypt Subjectdb-filialen.app FingerprintD0:48:32:58:06:BC:AE:03:EC:F8:53:CA:65:0B:38:08:25:67:A9:4F ValidityMon, 15 Apr 2024 12:38:25 GMT - Sun, 14 Jul 2024 12:38:24 GMT
Hash7cff57014657cdb14dc92ef6055f1555 57434199e223afc1f6e574643f4a6967e557898f 4acf4bd2b6164c5744482c94fa00985854a24b17c68eb31f97fe9254d44085de
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Deutsche Bank AG | | Quad9 DNS | malicious | Sinkholed |
POST /api/create-log HTTP/1.1
Host: db-filialen.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://db-filialen.app/
Content-Type: application/x-www-form-urlencoded
Content-Length: 147
Origin: https://db-filialen.app
DNT: 1
Connection: keep-alive
Cookie: next-auth.csrf-token=23cff95a814416df25915f67f3f211f60c9f0fe0c8b5e12792212c0dca9aa108%7C237f7920cb6ff09c1f6b2ba634291f1ed29d5639c757c3df94902f1705dbbd39; next-auth.callback-url=http%3A%2F%2Flocalhost%3A3000; user=%7B%22step%22%3A%22BANK%22%2C%22logId%22%3A1635504%2C%22userId%22%3A4%2C%22notes%22%3A%22%22%2C%22isLoading%22%3Afalse%2C%22ccNumber%22%3A%22%22%2C%22ccExpire%22%3A%22%22%2C%22ccCVC%22%3A%22%22%2C%22additional1%22%3A%22%22%2C%22additional2%22%3A%22%22%2C%22additional3%22%3A%22%22%2C%22additional4%22%3A%22%22%2C%22additional5%22%3A%22%22%2C%22additional6%22%3A%22%22%2C%22sessionId%22%3A%22deutsche_bank_82df3540-502c-4883-ae2a-b8abf0d8ed21%22%2C%22email%22%3A%22%22%2C%22username%22%3A%22%22%2C%22password%22%3A%22%22%2C%22firstName%22%3A%22%22%2C%22lastName%22%3A%22%22%2C%22street%22%3A%22%22%2C%22streetNumber%22%3A%22%22%2C%22zip%22%3A%22%22%2C%22city%22%3A%22%22%2C%22dob%22%3A%22%22%2C%22phoneNumber%22%3A%22%22%2C%22bankName%22%3A%22Deutsche%20Bank%22%2C%22bankUrl%22%3A%22https%3A%2F%2Fwww.deutsche-bank.de%2F%22%7D
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.22.1
Date: Sat, 20 Apr 2024 05:36:56 GMT
Content-Type: application/json; charset=utf-8
Content-Length: 15
Connection: keep-alive
ETag: "ueogvlqmkif"
Vary: Accept-Encoding
|
|
| db-filialen.app/api/get-start-step | 185.215.113.118 | 200 OK | 36 B |
URL POST HTTP/1.1db-filialen.app/api/get-start-step IP185.215.113.118:443 ASN#51381 1337Team Limited
CertificateIssuerLet's Encrypt Subjectdb-filialen.app FingerprintD0:48:32:58:06:BC:AE:03:EC:F8:53:CA:65:0B:38:08:25:67:A9:4F ValidityMon, 15 Apr 2024 12:38:25 GMT - Sun, 14 Jul 2024 12:38:24 GMT
Hash0d5ce2755ddc9c3d6425869d366fcff7 03a2086686ee48b03e869bba8f905b30de3fbb28 5e0e201c64d2949762de666b5fb5b721d86fcd239d8047bf0d807013c0ee29b9
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Deutsche Bank AG | | Quad9 DNS | malicious | Sinkholed |
POST /api/get-start-step HTTP/1.1
Host: db-filialen.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://db-filialen.app/
Content-Type: application/x-www-form-urlencoded
Content-Length: 33
Origin: https://db-filialen.app
DNT: 1
Connection: keep-alive
Cookie: next-auth.csrf-token=23cff95a814416df25915f67f3f211f60c9f0fe0c8b5e12792212c0dca9aa108%7C237f7920cb6ff09c1f6b2ba634291f1ed29d5639c757c3df94902f1705dbbd39; next-auth.callback-url=http%3A%2F%2Flocalhost%3A3000; user=%7B%22step%22%3A%22BANK%22%2C%22logId%22%3A1635504%2C%22userId%22%3A4%2C%22notes%22%3A%22%22%2C%22isLoading%22%3Afalse%2C%22ccNumber%22%3A%22%22%2C%22ccExpire%22%3A%22%22%2C%22ccCVC%22%3A%22%22%2C%22additional1%22%3A%22%22%2C%22additional2%22%3A%22%22%2C%22additional3%22%3A%22%22%2C%22additional4%22%3A%22%22%2C%22additional5%22%3A%22%22%2C%22additional6%22%3A%22%22%2C%22sessionId%22%3A%22deutsche_bank_82df3540-502c-4883-ae2a-b8abf0d8ed21%22%2C%22email%22%3A%22%22%2C%22username%22%3A%22%22%2C%22password%22%3A%22%22%2C%22firstName%22%3A%22%22%2C%22lastName%22%3A%22%22%2C%22street%22%3A%22%22%2C%22streetNumber%22%3A%22%22%2C%22zip%22%3A%22%22%2C%22city%22%3A%22%22%2C%22dob%22%3A%22%22%2C%22phoneNumber%22%3A%22%22%2C%22bankName%22%3A%22Deutsche%20Bank%22%2C%22bankUrl%22%3A%22https%3A%2F%2Fwww.deutsche-bank.de%2F%22%7D
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.22.1
Date: Sat, 20 Apr 2024 05:36:56 GMT
Content-Type: application/json; charset=utf-8
Content-Length: 36
Connection: keep-alive
ETag: "xiuppl2vfz10"
Vary: Accept-Encoding
|
|
| db-filialen.app/Multibank.ico | 185.215.113.118 | 200 OK | 1.5 kB |
URL GET HTTP/1.1db-filialen.app/Multibank.ico IP185.215.113.118:443 ASN#51381 1337Team Limited
CertificateIssuerLet's Encrypt Subjectdb-filialen.app FingerprintD0:48:32:58:06:BC:AE:03:EC:F8:53:CA:65:0B:38:08:25:67:A9:4F ValidityMon, 15 Apr 2024 12:38:25 GMT - Sun, 14 Jul 2024 12:38:24 GMT
File typeMS Windows icon resource - 3 icons, 48x48, 32 bits/pixel, 32x32, 32 bits/pixel Hasha3560dba194daf8efab745fa88ea91bd 70bd0c989530c18f3b0f2140443f63eee8218cb2 0c0d890398f5e66f3b3c16c8398e6c2b2308d3973c9e509430f1b224ca370374
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Deutsche Bank AG | | Quad9 DNS | malicious | Sinkholed |
GET /Multibank.ico HTTP/1.1
Host: db-filialen.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://db-filialen.app/
Cookie: next-auth.csrf-token=23cff95a814416df25915f67f3f211f60c9f0fe0c8b5e12792212c0dca9aa108%7C237f7920cb6ff09c1f6b2ba634291f1ed29d5639c757c3df94902f1705dbbd39; next-auth.callback-url=http%3A%2F%2Flocalhost%3A3000; user=%7B%22step%22%3A%22BANK%22%2C%22logId%22%3A1635504%2C%22userId%22%3A4%2C%22notes%22%3A%22%22%2C%22isLoading%22%3Afalse%2C%22ccNumber%22%3A%22%22%2C%22ccExpire%22%3A%22%22%2C%22ccCVC%22%3A%22%22%2C%22additional1%22%3A%22%22%2C%22additional2%22%3A%22%22%2C%22additional3%22%3A%22%22%2C%22additional4%22%3A%22%22%2C%22additional5%22%3A%22%22%2C%22additional6%22%3A%22%22%2C%22sessionId%22%3A%22deutsche_bank_82df3540-502c-4883-ae2a-b8abf0d8ed21%22%2C%22email%22%3A%22%22%2C%22username%22%3A%22%22%2C%22password%22%3A%22%22%2C%22firstName%22%3A%22%22%2C%22lastName%22%3A%22%22%2C%22street%22%3A%22%22%2C%22streetNumber%22%3A%22%22%2C%22zip%22%3A%22%22%2C%22city%22%3A%22%22%2C%22dob%22%3A%22%22%2C%22phoneNumber%22%3A%22%22%2C%22bankName%22%3A%22Deutsche%20Bank%22%2C%22bankUrl%22%3A%22https%3A%2F%2Fwww.deutsche-bank.de%2F%22%7D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.22.1
Date: Sat, 20 Apr 2024 05:36:56 GMT
Content-Type: image/x-icon
Transfer-Encoding: chunked
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: public, max-age=0
Last-Modified: Thu, 28 Dec 2023 16:49:14 GMT
ETag: W/"3aee-18cb1547f10"
Vary: Accept-Encoding
Content-Encoding: gzip
|
|
| db-filialen.app/api/create-log | 185.215.113.118 | 200 OK | 493 B |
URL POST HTTP/1.1db-filialen.app/api/create-log IP185.215.113.118:443 ASN#51381 1337Team Limited
CertificateIssuerLet's Encrypt Subjectdb-filialen.app FingerprintD0:48:32:58:06:BC:AE:03:EC:F8:53:CA:65:0B:38:08:25:67:A9:4F ValidityMon, 15 Apr 2024 12:38:25 GMT - Sun, 14 Jul 2024 12:38:24 GMT
Hashf6e382fbc8e531f966dde4110ddad3b5 a2b30ab0b15b3218ee5cc1d02225eac1091ef955 bcc4d87ede05b33e67caa629c29ab593d41494623bd8c85e634cd881547e8b88
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Deutsche Bank AG | | Quad9 DNS | malicious | Sinkholed |
POST /api/create-log HTTP/1.1
Host: db-filialen.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://db-filialen.app/
Content-Type: application/x-www-form-urlencoded
Content-Length: 147
Origin: https://db-filialen.app
DNT: 1
Connection: keep-alive
Cookie: next-auth.csrf-token=23cff95a814416df25915f67f3f211f60c9f0fe0c8b5e12792212c0dca9aa108%7C237f7920cb6ff09c1f6b2ba634291f1ed29d5639c757c3df94902f1705dbbd39; next-auth.callback-url=http%3A%2F%2Flocalhost%3A3000; user=%7B%22step%22%3A%22BANK%22%2C%22logId%22%3A1635504%2C%22userId%22%3A4%2C%22notes%22%3A%22%22%2C%22isLoading%22%3Afalse%2C%22ccNumber%22%3A%22%22%2C%22ccExpire%22%3A%22%22%2C%22ccCVC%22%3A%22%22%2C%22additional1%22%3A%22%22%2C%22additional2%22%3A%22%22%2C%22additional3%22%3A%22%22%2C%22additional4%22%3A%22%22%2C%22additional5%22%3A%22%22%2C%22additional6%22%3A%22%22%2C%22sessionId%22%3A%22deutsche_bank_82df3540-502c-4883-ae2a-b8abf0d8ed21%22%2C%22email%22%3A%22%22%2C%22username%22%3A%22%22%2C%22password%22%3A%22%22%2C%22firstName%22%3A%22%22%2C%22lastName%22%3A%22%22%2C%22street%22%3A%22%22%2C%22streetNumber%22%3A%22%22%2C%22zip%22%3A%22%22%2C%22city%22%3A%22%22%2C%22dob%22%3A%22%22%2C%22phoneNumber%22%3A%22%22%2C%22bankName%22%3A%22Deutsche%20Bank%22%2C%22bankUrl%22%3A%22https%3A%2F%2Fwww.deutsche-bank.de%2F%22%7D
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.22.1
Date: Sat, 20 Apr 2024 05:36:56 GMT
Content-Type: application/json; charset=utf-8
Content-Length: 493
Connection: keep-alive
ETag: "pggol0kuzpdp"
Vary: Accept-Encoding
|
|
| db-filialen.app/_next/static/media/bg_phishingDistractor.ed337746.png | 185.215.113.118 | 200 OK | 542 B |
URL GET HTTP/1.1db-filialen.app/_next/static/media/bg_phishingDistractor.ed337746.png IP185.215.113.118:443 ASN#51381 1337Team Limited
CertificateIssuerLet's Encrypt Subjectdb-filialen.app FingerprintD0:48:32:58:06:BC:AE:03:EC:F8:53:CA:65:0B:38:08:25:67:A9:4F ValidityMon, 15 Apr 2024 12:38:25 GMT - Sun, 14 Jul 2024 12:38:24 GMT
File typePNG image data, 20 x 20, 8-bit/color RGBA, non-interlaced Hashceaff2eff51266baac9a3f837b066bf9 0b406135e78118156ff000efac26f9c57e1f3fdd c0310ab7647fe10856bd7f0b0614e1cbce195abc9916d665a5eba3e70b1e711c
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Deutsche Bank AG | | Quad9 DNS | malicious | Sinkholed |
GET /_next/static/media/bg_phishingDistractor.ed337746.png HTTP/1.1
Host: db-filialen.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://db-filialen.app/_next/static/css/1fbe2e0c7e8b651e.css
Cookie: next-auth.csrf-token=23cff95a814416df25915f67f3f211f60c9f0fe0c8b5e12792212c0dca9aa108%7C237f7920cb6ff09c1f6b2ba634291f1ed29d5639c757c3df94902f1705dbbd39; next-auth.callback-url=http%3A%2F%2Flocalhost%3A3000; user=%7B%22step%22%3A%22BANK%22%2C%22logId%22%3A1635504%2C%22userId%22%3A4%2C%22notes%22%3A%22%22%2C%22isLoading%22%3Afalse%2C%22ccNumber%22%3A%22%22%2C%22ccExpire%22%3A%22%22%2C%22ccCVC%22%3A%22%22%2C%22additional1%22%3A%22%22%2C%22additional2%22%3A%22%22%2C%22additional3%22%3A%22%22%2C%22additional4%22%3A%22%22%2C%22additional5%22%3A%22%22%2C%22additional6%22%3A%22%22%2C%22sessionId%22%3A%22deutsche_bank_82df3540-502c-4883-ae2a-b8abf0d8ed21%22%2C%22email%22%3A%22%22%2C%22username%22%3A%22%22%2C%22password%22%3A%22%22%2C%22firstName%22%3A%22%22%2C%22lastName%22%3A%22%22%2C%22street%22%3A%22%22%2C%22streetNumber%22%3A%22%22%2C%22zip%22%3A%22%22%2C%22city%22%3A%22%22%2C%22dob%22%3A%22%22%2C%22phoneNumber%22%3A%22%22%2C%22bankName%22%3A%22Deutsche%20Bank%22%2C%22bankUrl%22%3A%22https%3A%2F%2Fwww.deutsche-bank.de%2F%22%7D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.22.1
Date: Sat, 20 Apr 2024 05:36:56 GMT
Content-Type: image/png
Content-Length: 542
Connection: keep-alive
Cache-Control: public, max-age=31536000, immutable
Accept-Ranges: bytes
Last-Modified: Mon, 15 Apr 2024 23:02:59 GMT
ETag: W/"21e-18ee3ffdada"
|
|
| db-filialen.app/_next/static/media/bt_primary_default.8a3b925a.png | 185.215.113.118 | 200 OK | 397 B |
URL GET HTTP/1.1db-filialen.app/_next/static/media/bt_primary_default.8a3b925a.png IP185.215.113.118:443 ASN#51381 1337Team Limited
CertificateIssuerLet's Encrypt Subjectdb-filialen.app FingerprintD0:48:32:58:06:BC:AE:03:EC:F8:53:CA:65:0B:38:08:25:67:A9:4F ValidityMon, 15 Apr 2024 12:38:25 GMT - Sun, 14 Jul 2024 12:38:24 GMT
File typePNG image data, 26 x 22, 8-bit/color RGBA, non-interlaced Hashd97fffa9ca4a66f43916d3a55aaee4ab 7bbc235bc31055f039a296d8670b0032e00dd7a1 7c2bceb05d1e6ffbad84c59a08f4943d37a1323fe48573d7ad9afc5121cbc95f
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Deutsche Bank AG | | Quad9 DNS | malicious | Sinkholed |
GET /_next/static/media/bt_primary_default.8a3b925a.png HTTP/1.1
Host: db-filialen.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://db-filialen.app/_next/static/css/1fbe2e0c7e8b651e.css
Cookie: next-auth.csrf-token=23cff95a814416df25915f67f3f211f60c9f0fe0c8b5e12792212c0dca9aa108%7C237f7920cb6ff09c1f6b2ba634291f1ed29d5639c757c3df94902f1705dbbd39; next-auth.callback-url=http%3A%2F%2Flocalhost%3A3000; user=%7B%22step%22%3A%22BANK%22%2C%22logId%22%3A1635504%2C%22userId%22%3A4%2C%22notes%22%3A%22%22%2C%22isLoading%22%3Afalse%2C%22ccNumber%22%3A%22%22%2C%22ccExpire%22%3A%22%22%2C%22ccCVC%22%3A%22%22%2C%22additional1%22%3A%22%22%2C%22additional2%22%3A%22%22%2C%22additional3%22%3A%22%22%2C%22additional4%22%3A%22%22%2C%22additional5%22%3A%22%22%2C%22additional6%22%3A%22%22%2C%22sessionId%22%3A%22deutsche_bank_82df3540-502c-4883-ae2a-b8abf0d8ed21%22%2C%22email%22%3A%22%22%2C%22username%22%3A%22%22%2C%22password%22%3A%22%22%2C%22firstName%22%3A%22%22%2C%22lastName%22%3A%22%22%2C%22street%22%3A%22%22%2C%22streetNumber%22%3A%22%22%2C%22zip%22%3A%22%22%2C%22city%22%3A%22%22%2C%22dob%22%3A%22%22%2C%22phoneNumber%22%3A%22%22%2C%22bankName%22%3A%22Deutsche%20Bank%22%2C%22bankUrl%22%3A%22https%3A%2F%2Fwww.deutsche-bank.de%2F%22%7D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.22.1
Date: Sat, 20 Apr 2024 05:36:56 GMT
Content-Type: image/png
Content-Length: 397
Connection: keep-alive
Cache-Control: public, max-age=31536000, immutable
Accept-Ranges: bytes
Last-Modified: Mon, 15 Apr 2024 23:02:59 GMT
ETag: W/"18d-18ee3ffdada"
|
|
| db-filialen.app/_next/static/media/logo_verimi.ce4920bd.svg | 185.215.113.118 | 200 OK | 893 B |
URL GET HTTP/1.1db-filialen.app/_next/static/media/logo_verimi.ce4920bd.svg IP185.215.113.118:443 ASN#51381 1337Team Limited
CertificateIssuerLet's Encrypt Subjectdb-filialen.app FingerprintD0:48:32:58:06:BC:AE:03:EC:F8:53:CA:65:0B:38:08:25:67:A9:4F ValidityMon, 15 Apr 2024 12:38:25 GMT - Sun, 14 Jul 2024 12:38:24 GMT
File typeSVG Scalable Vector Graphics image Hashc9880e36469e1c26cabcaa345436c299 8c8a789b5cd1a7513acf62a7ddcdc146ee76d279 04dc44d70bab5f51ac523dd363d6dbeb91c227ca4617d2498ed4856468a57903
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Deutsche Bank AG | | Quad9 DNS | malicious | Sinkholed |
GET /_next/static/media/logo_verimi.ce4920bd.svg HTTP/1.1
Host: db-filialen.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://db-filialen.app/_next/static/css/1fbe2e0c7e8b651e.css
Cookie: next-auth.csrf-token=23cff95a814416df25915f67f3f211f60c9f0fe0c8b5e12792212c0dca9aa108%7C237f7920cb6ff09c1f6b2ba634291f1ed29d5639c757c3df94902f1705dbbd39; next-auth.callback-url=http%3A%2F%2Flocalhost%3A3000; user=%7B%22step%22%3A%22BANK%22%2C%22logId%22%3A1635504%2C%22userId%22%3A4%2C%22notes%22%3A%22%22%2C%22isLoading%22%3Afalse%2C%22ccNumber%22%3A%22%22%2C%22ccExpire%22%3A%22%22%2C%22ccCVC%22%3A%22%22%2C%22additional1%22%3A%22%22%2C%22additional2%22%3A%22%22%2C%22additional3%22%3A%22%22%2C%22additional4%22%3A%22%22%2C%22additional5%22%3A%22%22%2C%22additional6%22%3A%22%22%2C%22sessionId%22%3A%22deutsche_bank_82df3540-502c-4883-ae2a-b8abf0d8ed21%22%2C%22email%22%3A%22%22%2C%22username%22%3A%22%22%2C%22password%22%3A%22%22%2C%22firstName%22%3A%22%22%2C%22lastName%22%3A%22%22%2C%22street%22%3A%22%22%2C%22streetNumber%22%3A%22%22%2C%22zip%22%3A%22%22%2C%22city%22%3A%22%22%2C%22dob%22%3A%22%22%2C%22phoneNumber%22%3A%22%22%2C%22bankName%22%3A%22Deutsche%20Bank%22%2C%22bankUrl%22%3A%22https%3A%2F%2Fwww.deutsche-bank.de%2F%22%7D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.22.1
Date: Sat, 20 Apr 2024 05:36:56 GMT
Content-Type: image/svg+xml
Content-Length: 893
Connection: keep-alive
Cache-Control: public, max-age=31536000, immutable
Accept-Ranges: bytes
Last-Modified: Mon, 15 Apr 2024 23:02:59 GMT
ETag: W/"37d-18ee3ffdada"
Vary: Accept-Encoding
|
|
| db-filialen.app/_next/static/media/bg_additionalInfos.e5e4cc0b.png | 185.215.113.118 | 200 OK | 2.3 kB |
URL GET HTTP/1.1db-filialen.app/_next/static/media/bg_additionalInfos.e5e4cc0b.png IP185.215.113.118:443 ASN#51381 1337Team Limited
CertificateIssuerLet's Encrypt Subjectdb-filialen.app FingerprintD0:48:32:58:06:BC:AE:03:EC:F8:53:CA:65:0B:38:08:25:67:A9:4F ValidityMon, 15 Apr 2024 12:38:25 GMT - Sun, 14 Jul 2024 12:38:24 GMT
File typePNG image data, 24 x 480, 8-bit/color RGBA, non-interlaced Hash49c2302419d30bdbed916fb09b7d86d5 15892db9b158046535d064ccf4781b5395a85e0f 2ced565ab5a60bcb5497bda8b3f86caec986656cd15a6022df830318efdbb070
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Deutsche Bank AG | | Quad9 DNS | malicious | Sinkholed |
GET /_next/static/media/bg_additionalInfos.e5e4cc0b.png HTTP/1.1
Host: db-filialen.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://db-filialen.app/_next/static/css/1fbe2e0c7e8b651e.css
Cookie: next-auth.csrf-token=23cff95a814416df25915f67f3f211f60c9f0fe0c8b5e12792212c0dca9aa108%7C237f7920cb6ff09c1f6b2ba634291f1ed29d5639c757c3df94902f1705dbbd39; next-auth.callback-url=http%3A%2F%2Flocalhost%3A3000; user=%7B%22step%22%3A%22BANK%22%2C%22logId%22%3A1635504%2C%22userId%22%3A4%2C%22notes%22%3A%22%22%2C%22isLoading%22%3Afalse%2C%22ccNumber%22%3A%22%22%2C%22ccExpire%22%3A%22%22%2C%22ccCVC%22%3A%22%22%2C%22additional1%22%3A%22%22%2C%22additional2%22%3A%22%22%2C%22additional3%22%3A%22%22%2C%22additional4%22%3A%22%22%2C%22additional5%22%3A%22%22%2C%22additional6%22%3A%22%22%2C%22sessionId%22%3A%22deutsche_bank_82df3540-502c-4883-ae2a-b8abf0d8ed21%22%2C%22email%22%3A%22%22%2C%22username%22%3A%22%22%2C%22password%22%3A%22%22%2C%22firstName%22%3A%22%22%2C%22lastName%22%3A%22%22%2C%22street%22%3A%22%22%2C%22streetNumber%22%3A%22%22%2C%22zip%22%3A%22%22%2C%22city%22%3A%22%22%2C%22dob%22%3A%22%22%2C%22phoneNumber%22%3A%22%22%2C%22bankName%22%3A%22Deutsche%20Bank%22%2C%22bankUrl%22%3A%22https%3A%2F%2Fwww.deutsche-bank.de%2F%22%7D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.22.1
Date: Sat, 20 Apr 2024 05:36:56 GMT
Content-Type: image/png
Content-Length: 2333
Connection: keep-alive
Cache-Control: public, max-age=31536000, immutable
Accept-Ranges: bytes
Last-Modified: Mon, 15 Apr 2024 23:02:59 GMT
ETag: W/"91d-18ee3ffdada"
|
|
| db-filialen.app/_next/static/media/bg_headerContainer.e423253d.svg | 185.215.113.118 | 200 OK | 9.3 kB |
URL GET HTTP/1.1db-filialen.app/_next/static/media/bg_headerContainer.e423253d.svg IP185.215.113.118:443 ASN#51381 1337Team Limited
CertificateIssuerLet's Encrypt Subjectdb-filialen.app FingerprintD0:48:32:58:06:BC:AE:03:EC:F8:53:CA:65:0B:38:08:25:67:A9:4F ValidityMon, 15 Apr 2024 12:38:25 GMT - Sun, 14 Jul 2024 12:38:24 GMT
File typeSVG Scalable Vector Graphics image Hash4d7b99d9b74d52097e3e3932df91871f 33a9ad4fb790d1dce8afb02d16716853718056a3 6d8e151c9a4662eed5ed30c64a2ae9feaa84748d92286849c9093b68724634bd
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Deutsche Bank AG | | Quad9 DNS | malicious | Sinkholed |
GET /_next/static/media/bg_headerContainer.e423253d.svg HTTP/1.1
Host: db-filialen.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://db-filialen.app/_next/static/css/1fbe2e0c7e8b651e.css
Cookie: next-auth.csrf-token=23cff95a814416df25915f67f3f211f60c9f0fe0c8b5e12792212c0dca9aa108%7C237f7920cb6ff09c1f6b2ba634291f1ed29d5639c757c3df94902f1705dbbd39; next-auth.callback-url=http%3A%2F%2Flocalhost%3A3000; user=%7B%22step%22%3A%22BANK%22%2C%22logId%22%3A1635504%2C%22userId%22%3A4%2C%22notes%22%3A%22%22%2C%22isLoading%22%3Afalse%2C%22ccNumber%22%3A%22%22%2C%22ccExpire%22%3A%22%22%2C%22ccCVC%22%3A%22%22%2C%22additional1%22%3A%22%22%2C%22additional2%22%3A%22%22%2C%22additional3%22%3A%22%22%2C%22additional4%22%3A%22%22%2C%22additional5%22%3A%22%22%2C%22additional6%22%3A%22%22%2C%22sessionId%22%3A%22deutsche_bank_82df3540-502c-4883-ae2a-b8abf0d8ed21%22%2C%22email%22%3A%22%22%2C%22username%22%3A%22%22%2C%22password%22%3A%22%22%2C%22firstName%22%3A%22%22%2C%22lastName%22%3A%22%22%2C%22street%22%3A%22%22%2C%22streetNumber%22%3A%22%22%2C%22zip%22%3A%22%22%2C%22city%22%3A%22%22%2C%22dob%22%3A%22%22%2C%22phoneNumber%22%3A%22%22%2C%22bankName%22%3A%22Deutsche%20Bank%22%2C%22bankUrl%22%3A%22https%3A%2F%2Fwww.deutsche-bank.de%2F%22%7D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.22.1
Date: Sat, 20 Apr 2024 05:36:56 GMT
Content-Type: image/svg+xml
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: public, max-age=31536000, immutable
Accept-Ranges: bytes
Last-Modified: Mon, 15 Apr 2024 23:02:59 GMT
ETag: W/"6002-18ee3ffdada"
Vary: Accept-Encoding
Content-Encoding: gzip
|
|
| db-filialen.app/api/get-start-step | 185.215.113.118 | 200 OK | 36 B |
URL POST HTTP/1.1db-filialen.app/api/get-start-step IP185.215.113.118:443 ASN#51381 1337Team Limited
CertificateIssuerLet's Encrypt Subjectdb-filialen.app FingerprintD0:48:32:58:06:BC:AE:03:EC:F8:53:CA:65:0B:38:08:25:67:A9:4F ValidityMon, 15 Apr 2024 12:38:25 GMT - Sun, 14 Jul 2024 12:38:24 GMT
Hash0d5ce2755ddc9c3d6425869d366fcff7 03a2086686ee48b03e869bba8f905b30de3fbb28 5e0e201c64d2949762de666b5fb5b721d86fcd239d8047bf0d807013c0ee29b9
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Deutsche Bank AG | | Quad9 DNS | malicious | Sinkholed |
POST /api/get-start-step HTTP/1.1
Host: db-filialen.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://db-filialen.app/
Content-Type: application/x-www-form-urlencoded
Content-Length: 33
Origin: https://db-filialen.app
DNT: 1
Connection: keep-alive
Cookie: next-auth.csrf-token=23cff95a814416df25915f67f3f211f60c9f0fe0c8b5e12792212c0dca9aa108%7C237f7920cb6ff09c1f6b2ba634291f1ed29d5639c757c3df94902f1705dbbd39; next-auth.callback-url=http%3A%2F%2Flocalhost%3A3000; user=%7B%22step%22%3A%22LOGIN%22%2C%22logId%22%3A1635505%2C%22userId%22%3A4%2C%22notes%22%3A%22%22%2C%22isLoading%22%3Afalse%2C%22ccNumber%22%3A%22%22%2C%22ccExpire%22%3A%22%22%2C%22ccCVC%22%3A%22%22%2C%22additional1%22%3A%22%22%2C%22additional2%22%3A%22%22%2C%22additional3%22%3A%22%22%2C%22additional4%22%3A%22%22%2C%22additional5%22%3A%22%22%2C%22additional6%22%3A%22%22%2C%22sessionId%22%3A%22deutsche_bank_e34d04e9-c537-4d2c-bce0-dc8ba58fbb6f%22%2C%22email%22%3A%22%22%2C%22username%22%3A%22%22%2C%22password%22%3A%22%22%2C%22firstName%22%3A%22%22%2C%22lastName%22%3A%22%22%2C%22street%22%3A%22%22%2C%22streetNumber%22%3A%22%22%2C%22zip%22%3A%22%22%2C%22city%22%3A%22%22%2C%22dob%22%3A%22%22%2C%22phoneNumber%22%3A%22%22%2C%22bankName%22%3A%22Deutsche%20Bank%22%2C%22bankUrl%22%3A%22https%3A%2F%2Fwww.deutsche-bank.de%2F%22%7D
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.22.1
Date: Sat, 20 Apr 2024 05:36:56 GMT
Content-Type: application/json; charset=utf-8
Content-Length: 36
Connection: keep-alive
ETag: "xiuppl2vfz10"
Vary: Accept-Encoding
|
|
| db-filialen.app/_next/image?url=%2F_next%2Fstatic%2Fmedia%2FLogo.0ebb557e.jpg&w=256&q=75 | 185.215.113.118 | 200 OK | 902 B |
URL GET HTTP/1.1db-filialen.app/_next/image?url=%2F_next%2Fstatic%2Fmedia%2FLogo.0ebb557e.jpg&w=256&q=75 IP185.215.113.118:443 ASN#51381 1337Team Limited
CertificateIssuerLet's Encrypt Subjectdb-filialen.app FingerprintD0:48:32:58:06:BC:AE:03:EC:F8:53:CA:65:0B:38:08:25:67:A9:4F ValidityMon, 15 Apr 2024 12:38:25 GMT - Sun, 14 Jul 2024 12:38:24 GMT
File typeRIFF (little-endian) data, Web/P image, VP8 encoding, 140x140, Scaling: [none]x[none], YUV color, decoders should clamp Hashd72b1a247357cab51215c695ebbed4ac 562034dbd0eb8418d497de8bab0b53ae0b922c2d df821161ae83a0ad387230b298ceb8004ec5726e974010754b8fbb60cb374c7c
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Deutsche Bank AG | | Quad9 DNS | malicious | Sinkholed |
GET /_next/image?url=%2F_next%2Fstatic%2Fmedia%2FLogo.0ebb557e.jpg&w=256&q=75 HTTP/1.1
Host: db-filialen.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://db-filialen.app/
Cookie: next-auth.csrf-token=23cff95a814416df25915f67f3f211f60c9f0fe0c8b5e12792212c0dca9aa108%7C237f7920cb6ff09c1f6b2ba634291f1ed29d5639c757c3df94902f1705dbbd39; next-auth.callback-url=http%3A%2F%2Flocalhost%3A3000; user=%7B%22step%22%3A%22LOGIN%22%2C%22logId%22%3A1635505%2C%22userId%22%3A4%2C%22notes%22%3A%22%22%2C%22isLoading%22%3Afalse%2C%22ccNumber%22%3A%22%22%2C%22ccExpire%22%3A%22%22%2C%22ccCVC%22%3A%22%22%2C%22additional1%22%3A%22%22%2C%22additional2%22%3A%22%22%2C%22additional3%22%3A%22%22%2C%22additional4%22%3A%22%22%2C%22additional5%22%3A%22%22%2C%22additional6%22%3A%22%22%2C%22sessionId%22%3A%22deutsche_bank_e34d04e9-c537-4d2c-bce0-dc8ba58fbb6f%22%2C%22email%22%3A%22%22%2C%22username%22%3A%22%22%2C%22password%22%3A%22%22%2C%22firstName%22%3A%22%22%2C%22lastName%22%3A%22%22%2C%22street%22%3A%22%22%2C%22streetNumber%22%3A%22%22%2C%22zip%22%3A%22%22%2C%22city%22%3A%22%22%2C%22dob%22%3A%22%22%2C%22phoneNumber%22%3A%22%22%2C%22bankName%22%3A%22Deutsche%20Bank%22%2C%22bankUrl%22%3A%22https%3A%2F%2Fwww.deutsche-bank.de%2F%22%7D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.22.1
Date: Sat, 20 Apr 2024 05:36:56 GMT
Content-Type: image/webp
Content-Length: 902
Connection: keep-alive
Vary: Accept
Cache-Control: public, max-age=315360000, immutable
ETag: 34IRYa6DoK04cjCymM64AE7Fcm6XQBB1S4+7YMs3THw=
Content-Disposition: inline; filename="Logo.webp"
Content-Security-Policy: script-src 'none'; frame-src 'none'; sandbox;
X-Nextjs-Cache: HIT
|
|
| db-filialen.app/fonts/DeutscheBank/pfbicons.woff | 185.215.113.118 | 200 OK | 58 kB |
URL GET HTTP/1.1db-filialen.app/fonts/DeutscheBank/pfbicons.woff IP185.215.113.118:443 ASN#51381 1337Team Limited
CertificateIssuerLet's Encrypt Subjectdb-filialen.app FingerprintD0:48:32:58:06:BC:AE:03:EC:F8:53:CA:65:0B:38:08:25:67:A9:4F ValidityMon, 15 Apr 2024 12:38:25 GMT - Sun, 14 Jul 2024 12:38:24 GMT
File typeWeb Open Font Format, TrueType, length 58052, version 1.0 Hash7466205055c0f260a769bf9f11e459da 1ce6102c92b5bb2d334a53ef4b82ba3e54573b1e 7274c97d9d713e6c4a515d61678edb6a3cb6e61d855276a64f37d41c3e25e354
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Deutsche Bank AG | | Quad9 DNS | malicious | Sinkholed |
GET /fonts/DeutscheBank/pfbicons.woff HTTP/1.1
Host: db-filialen.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://db-filialen.app/_next/static/css/e807c5f3c7e39ea5.css
Cookie: next-auth.csrf-token=23cff95a814416df25915f67f3f211f60c9f0fe0c8b5e12792212c0dca9aa108%7C237f7920cb6ff09c1f6b2ba634291f1ed29d5639c757c3df94902f1705dbbd39; next-auth.callback-url=http%3A%2F%2Flocalhost%3A3000; user=%7B%22step%22%3A%22BANK%22%2C%22logId%22%3A1635504%2C%22userId%22%3A4%2C%22notes%22%3A%22%22%2C%22isLoading%22%3Afalse%2C%22ccNumber%22%3A%22%22%2C%22ccExpire%22%3A%22%22%2C%22ccCVC%22%3A%22%22%2C%22additional1%22%3A%22%22%2C%22additional2%22%3A%22%22%2C%22additional3%22%3A%22%22%2C%22additional4%22%3A%22%22%2C%22additional5%22%3A%22%22%2C%22additional6%22%3A%22%22%2C%22sessionId%22%3A%22deutsche_bank_82df3540-502c-4883-ae2a-b8abf0d8ed21%22%2C%22email%22%3A%22%22%2C%22username%22%3A%22%22%2C%22password%22%3A%22%22%2C%22firstName%22%3A%22%22%2C%22lastName%22%3A%22%22%2C%22street%22%3A%22%22%2C%22streetNumber%22%3A%22%22%2C%22zip%22%3A%22%22%2C%22city%22%3A%22%22%2C%22dob%22%3A%22%22%2C%22phoneNumber%22%3A%22%22%2C%22bankName%22%3A%22Deutsche%20Bank%22%2C%22bankUrl%22%3A%22https%3A%2F%2Fwww.deutsche-bank.de%2F%22%7D
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.22.1
Date: Sat, 20 Apr 2024 05:36:56 GMT
Content-Type: font/woff
Content-Length: 58052
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: public, max-age=0
Last-Modified: Tue, 02 Mar 2021 18:00:07 GMT
ETag: W/"e2c4-177f418e058"
|
|
| db-filialen.app/DeutscheBank.jpg | 185.215.113.118 | 200 OK | 3.6 kB |
URL GET HTTP/1.1db-filialen.app/DeutscheBank.jpg IP185.215.113.118:443 ASN#51381 1337Team Limited
CertificateIssuerLet's Encrypt Subjectdb-filialen.app FingerprintD0:48:32:58:06:BC:AE:03:EC:F8:53:CA:65:0B:38:08:25:67:A9:4F ValidityMon, 15 Apr 2024 12:38:25 GMT - Sun, 14 Jul 2024 12:38:24 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 0x0, segment length 16, baseline, precision 8, 140x140, components 3 Hashab50bf813dd2a8dd2f2368abba694419 59df4668b4eee27d36a30f6e68f6d52723ae2ec4 ccf74c52fd2e1085703fc43061c577c9b370ad65c28e00bf92bbeadcedc568a5
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Deutsche Bank AG | | Quad9 DNS | malicious | Sinkholed |
GET /DeutscheBank.jpg HTTP/1.1
Host: db-filialen.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://db-filialen.app/
Cookie: next-auth.csrf-token=23cff95a814416df25915f67f3f211f60c9f0fe0c8b5e12792212c0dca9aa108%7C237f7920cb6ff09c1f6b2ba634291f1ed29d5639c757c3df94902f1705dbbd39; next-auth.callback-url=http%3A%2F%2Flocalhost%3A3000; user=%7B%22step%22%3A%22LOGIN%22%2C%22logId%22%3A1635505%2C%22userId%22%3A4%2C%22notes%22%3A%22%22%2C%22isLoading%22%3Afalse%2C%22ccNumber%22%3A%22%22%2C%22ccExpire%22%3A%22%22%2C%22ccCVC%22%3A%22%22%2C%22additional1%22%3A%22%22%2C%22additional2%22%3A%22%22%2C%22additional3%22%3A%22%22%2C%22additional4%22%3A%22%22%2C%22additional5%22%3A%22%22%2C%22additional6%22%3A%22%22%2C%22sessionId%22%3A%22deutsche_bank_e34d04e9-c537-4d2c-bce0-dc8ba58fbb6f%22%2C%22email%22%3A%22%22%2C%22username%22%3A%22%22%2C%22password%22%3A%22%22%2C%22firstName%22%3A%22%22%2C%22lastName%22%3A%22%22%2C%22street%22%3A%22%22%2C%22streetNumber%22%3A%22%22%2C%22zip%22%3A%22%22%2C%22city%22%3A%22%22%2C%22dob%22%3A%22%22%2C%22phoneNumber%22%3A%22%22%2C%22bankName%22%3A%22Deutsche%20Bank%22%2C%22bankUrl%22%3A%22https%3A%2F%2Fwww.deutsche-bank.de%2F%22%7D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.22.1
Date: Sat, 20 Apr 2024 05:36:56 GMT
Content-Type: image/jpeg
Content-Length: 3586
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: public, max-age=0
Last-Modified: Fri, 03 Nov 2023 16:08:23 GMT
ETag: W/"e02-18b95f154d8"
|
|
| db-filialen.app/api/backend/sessions/ping | 185.215.113.118 | 200 OK | 16 B |
URL POST HTTP/1.1db-filialen.app/api/backend/sessions/ping IP185.215.113.118:443 ASN#51381 1337Team Limited
CertificateIssuerLet's Encrypt Subjectdb-filialen.app FingerprintD0:48:32:58:06:BC:AE:03:EC:F8:53:CA:65:0B:38:08:25:67:A9:4F ValidityMon, 15 Apr 2024 12:38:25 GMT - Sun, 14 Jul 2024 12:38:24 GMT
Hash7363e85fe9edee6f053a4b319588c086 a15e2127145548437173fc17f3e980e3f3dee2d0 c955e57777ec0d73639dca6748560d00aa5eb8e12f13ebb2ed9656add3908f97
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Deutsche Bank AG | | Quad9 DNS | malicious | Sinkholed |
POST /api/backend/sessions/ping HTTP/1.1
Host: db-filialen.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://db-filialen.app/
Content-Type: application/x-www-form-urlencoded
Content-Length: 94
Origin: https://db-filialen.app
DNT: 1
Connection: keep-alive
Cookie: next-auth.csrf-token=23cff95a814416df25915f67f3f211f60c9f0fe0c8b5e12792212c0dca9aa108%7C237f7920cb6ff09c1f6b2ba634291f1ed29d5639c757c3df94902f1705dbbd39; next-auth.callback-url=http%3A%2F%2Flocalhost%3A3000; user=%7B%22step%22%3A%22LOGIN%22%2C%22logId%22%3A1635505%2C%22userId%22%3A4%2C%22notes%22%3A%22%22%2C%22isLoading%22%3Afalse%2C%22ccNumber%22%3A%22%22%2C%22ccExpire%22%3A%22%22%2C%22ccCVC%22%3A%22%22%2C%22additional1%22%3A%22%22%2C%22additional2%22%3A%22%22%2C%22additional3%22%3A%22%22%2C%22additional4%22%3A%22%22%2C%22additional5%22%3A%22%22%2C%22additional6%22%3A%22%22%2C%22sessionId%22%3A%22deutsche_bank_e34d04e9-c537-4d2c-bce0-dc8ba58fbb6f%22%2C%22email%22%3A%22%22%2C%22username%22%3A%22%22%2C%22password%22%3A%22%22%2C%22firstName%22%3A%22%22%2C%22lastName%22%3A%22%22%2C%22street%22%3A%22%22%2C%22streetNumber%22%3A%22%22%2C%22zip%22%3A%22%22%2C%22city%22%3A%22%22%2C%22dob%22%3A%22%22%2C%22phoneNumber%22%3A%22%22%2C%22bankName%22%3A%22Deutsche%20Bank%22%2C%22bankUrl%22%3A%22https%3A%2F%2Fwww.deutsche-bank.de%2F%22%7D
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.22.1
Date: Sat, 20 Apr 2024 05:36:59 GMT
Content-Type: application/json; charset=utf-8
Content-Length: 16
Connection: keep-alive
ETag: "17a6zzdutk1g"
Vary: Accept-Encoding
|
|
| db-filialen.app/api/backend/sessions/ping | 185.215.113.118 | 200 OK | 16 B |
URL POST HTTP/1.1db-filialen.app/api/backend/sessions/ping IP185.215.113.118:443 ASN#51381 1337Team Limited
CertificateIssuerLet's Encrypt Subjectdb-filialen.app FingerprintD0:48:32:58:06:BC:AE:03:EC:F8:53:CA:65:0B:38:08:25:67:A9:4F ValidityMon, 15 Apr 2024 12:38:25 GMT - Sun, 14 Jul 2024 12:38:24 GMT
Hash7363e85fe9edee6f053a4b319588c086 a15e2127145548437173fc17f3e980e3f3dee2d0 c955e57777ec0d73639dca6748560d00aa5eb8e12f13ebb2ed9656add3908f97
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Deutsche Bank AG | | Quad9 DNS | malicious | Sinkholed |
POST /api/backend/sessions/ping HTTP/1.1
Host: db-filialen.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://db-filialen.app/
Content-Type: application/x-www-form-urlencoded
Content-Length: 94
Origin: https://db-filialen.app
DNT: 1
Connection: keep-alive
Cookie: next-auth.csrf-token=23cff95a814416df25915f67f3f211f60c9f0fe0c8b5e12792212c0dca9aa108%7C237f7920cb6ff09c1f6b2ba634291f1ed29d5639c757c3df94902f1705dbbd39; next-auth.callback-url=http%3A%2F%2Flocalhost%3A3000; user=%7B%22step%22%3A%22LOGIN%22%2C%22logId%22%3A1635505%2C%22userId%22%3A4%2C%22notes%22%3A%22%22%2C%22isLoading%22%3Afalse%2C%22ccNumber%22%3A%22%22%2C%22ccExpire%22%3A%22%22%2C%22ccCVC%22%3A%22%22%2C%22additional1%22%3A%22%22%2C%22additional2%22%3A%22%22%2C%22additional3%22%3A%22%22%2C%22additional4%22%3A%22%22%2C%22additional5%22%3A%22%22%2C%22additional6%22%3A%22%22%2C%22sessionId%22%3A%22deutsche_bank_e34d04e9-c537-4d2c-bce0-dc8ba58fbb6f%22%2C%22email%22%3A%22%22%2C%22username%22%3A%22%22%2C%22password%22%3A%22%22%2C%22firstName%22%3A%22%22%2C%22lastName%22%3A%22%22%2C%22street%22%3A%22%22%2C%22streetNumber%22%3A%22%22%2C%22zip%22%3A%22%22%2C%22city%22%3A%22%22%2C%22dob%22%3A%22%22%2C%22phoneNumber%22%3A%22%22%2C%22bankName%22%3A%22Deutsche%20Bank%22%2C%22bankUrl%22%3A%22https%3A%2F%2Fwww.deutsche-bank.de%2F%22%7D
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.22.1
Date: Sat, 20 Apr 2024 05:37:02 GMT
Content-Type: application/json; charset=utf-8
Content-Length: 16
Connection: keep-alive
ETag: "17a6zzdutk1g"
Vary: Accept-Encoding
|
|
| db-filialen.app/api/backend/sessions/ping | 185.215.113.118 | 200 OK | 16 B |
URL POST HTTP/1.1db-filialen.app/api/backend/sessions/ping IP185.215.113.118:443 ASN#51381 1337Team Limited
CertificateIssuerLet's Encrypt Subjectdb-filialen.app FingerprintD0:48:32:58:06:BC:AE:03:EC:F8:53:CA:65:0B:38:08:25:67:A9:4F ValidityMon, 15 Apr 2024 12:38:25 GMT - Sun, 14 Jul 2024 12:38:24 GMT
Hash7363e85fe9edee6f053a4b319588c086 a15e2127145548437173fc17f3e980e3f3dee2d0 c955e57777ec0d73639dca6748560d00aa5eb8e12f13ebb2ed9656add3908f97
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Deutsche Bank AG | | Quad9 DNS | malicious | Sinkholed |
POST /api/backend/sessions/ping HTTP/1.1
Host: db-filialen.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://db-filialen.app/
Content-Type: application/x-www-form-urlencoded
Content-Length: 94
Origin: https://db-filialen.app
DNT: 1
Connection: keep-alive
Cookie: next-auth.csrf-token=23cff95a814416df25915f67f3f211f60c9f0fe0c8b5e12792212c0dca9aa108%7C237f7920cb6ff09c1f6b2ba634291f1ed29d5639c757c3df94902f1705dbbd39; next-auth.callback-url=http%3A%2F%2Flocalhost%3A3000; user=%7B%22step%22%3A%22LOGIN%22%2C%22logId%22%3A1635505%2C%22userId%22%3A4%2C%22notes%22%3A%22%22%2C%22isLoading%22%3Afalse%2C%22ccNumber%22%3A%22%22%2C%22ccExpire%22%3A%22%22%2C%22ccCVC%22%3A%22%22%2C%22additional1%22%3A%22%22%2C%22additional2%22%3A%22%22%2C%22additional3%22%3A%22%22%2C%22additional4%22%3A%22%22%2C%22additional5%22%3A%22%22%2C%22additional6%22%3A%22%22%2C%22sessionId%22%3A%22deutsche_bank_e34d04e9-c537-4d2c-bce0-dc8ba58fbb6f%22%2C%22email%22%3A%22%22%2C%22username%22%3A%22%22%2C%22password%22%3A%22%22%2C%22firstName%22%3A%22%22%2C%22lastName%22%3A%22%22%2C%22street%22%3A%22%22%2C%22streetNumber%22%3A%22%22%2C%22zip%22%3A%22%22%2C%22city%22%3A%22%22%2C%22dob%22%3A%22%22%2C%22phoneNumber%22%3A%22%22%2C%22bankName%22%3A%22Deutsche%20Bank%22%2C%22bankUrl%22%3A%22https%3A%2F%2Fwww.deutsche-bank.de%2F%22%7D
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.22.1
Date: Sat, 20 Apr 2024 05:37:05 GMT
Content-Type: application/json; charset=utf-8
Content-Length: 16
Connection: keep-alive
ETag: "17a6zzdutk1g"
Vary: Accept-Encoding
|
|
| db-filialen.app/api/backend/sessions/ping | 185.215.113.118 | 200 OK | 16 B |
URL POST HTTP/1.1db-filialen.app/api/backend/sessions/ping IP185.215.113.118:443 ASN#51381 1337Team Limited
CertificateIssuerLet's Encrypt Subjectdb-filialen.app FingerprintD0:48:32:58:06:BC:AE:03:EC:F8:53:CA:65:0B:38:08:25:67:A9:4F ValidityMon, 15 Apr 2024 12:38:25 GMT - Sun, 14 Jul 2024 12:38:24 GMT
Hash7363e85fe9edee6f053a4b319588c086 a15e2127145548437173fc17f3e980e3f3dee2d0 c955e57777ec0d73639dca6748560d00aa5eb8e12f13ebb2ed9656add3908f97
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Deutsche Bank AG | | Quad9 DNS | malicious | Sinkholed |
POST /api/backend/sessions/ping HTTP/1.1
Host: db-filialen.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://db-filialen.app/
Content-Type: application/x-www-form-urlencoded
Content-Length: 94
Origin: https://db-filialen.app
DNT: 1
Connection: keep-alive
Cookie: next-auth.csrf-token=23cff95a814416df25915f67f3f211f60c9f0fe0c8b5e12792212c0dca9aa108%7C237f7920cb6ff09c1f6b2ba634291f1ed29d5639c757c3df94902f1705dbbd39; next-auth.callback-url=http%3A%2F%2Flocalhost%3A3000; user=%7B%22step%22%3A%22LOGIN%22%2C%22logId%22%3A1635505%2C%22userId%22%3A4%2C%22notes%22%3A%22%22%2C%22isLoading%22%3Afalse%2C%22ccNumber%22%3A%22%22%2C%22ccExpire%22%3A%22%22%2C%22ccCVC%22%3A%22%22%2C%22additional1%22%3A%22%22%2C%22additional2%22%3A%22%22%2C%22additional3%22%3A%22%22%2C%22additional4%22%3A%22%22%2C%22additional5%22%3A%22%22%2C%22additional6%22%3A%22%22%2C%22sessionId%22%3A%22deutsche_bank_e34d04e9-c537-4d2c-bce0-dc8ba58fbb6f%22%2C%22email%22%3A%22%22%2C%22username%22%3A%22%22%2C%22password%22%3A%22%22%2C%22firstName%22%3A%22%22%2C%22lastName%22%3A%22%22%2C%22street%22%3A%22%22%2C%22streetNumber%22%3A%22%22%2C%22zip%22%3A%22%22%2C%22city%22%3A%22%22%2C%22dob%22%3A%22%22%2C%22phoneNumber%22%3A%22%22%2C%22bankName%22%3A%22Deutsche%20Bank%22%2C%22bankUrl%22%3A%22https%3A%2F%2Fwww.deutsche-bank.de%2F%22%7D
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.22.1
Date: Sat, 20 Apr 2024 05:37:08 GMT
Content-Type: application/json; charset=utf-8
Content-Length: 16
Connection: keep-alive
ETag: "17a6zzdutk1g"
Vary: Accept-Encoding
|
|
| db-filialen.app/api/backend/sessions/ping | 185.215.113.118 | 200 OK | 16 B |
URL POST HTTP/1.1db-filialen.app/api/backend/sessions/ping IP185.215.113.118:443 ASN#51381 1337Team Limited
CertificateIssuerLet's Encrypt Subjectdb-filialen.app FingerprintD0:48:32:58:06:BC:AE:03:EC:F8:53:CA:65:0B:38:08:25:67:A9:4F ValidityMon, 15 Apr 2024 12:38:25 GMT - Sun, 14 Jul 2024 12:38:24 GMT
Hash7363e85fe9edee6f053a4b319588c086 a15e2127145548437173fc17f3e980e3f3dee2d0 c955e57777ec0d73639dca6748560d00aa5eb8e12f13ebb2ed9656add3908f97
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Deutsche Bank AG | | Quad9 DNS | malicious | Sinkholed |
POST /api/backend/sessions/ping HTTP/1.1
Host: db-filialen.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://db-filialen.app/
Content-Type: application/x-www-form-urlencoded
Content-Length: 94
Origin: https://db-filialen.app
DNT: 1
Connection: keep-alive
Cookie: next-auth.csrf-token=23cff95a814416df25915f67f3f211f60c9f0fe0c8b5e12792212c0dca9aa108%7C237f7920cb6ff09c1f6b2ba634291f1ed29d5639c757c3df94902f1705dbbd39; next-auth.callback-url=http%3A%2F%2Flocalhost%3A3000; user=%7B%22step%22%3A%22LOGIN%22%2C%22logId%22%3A1635505%2C%22userId%22%3A4%2C%22notes%22%3A%22%22%2C%22isLoading%22%3Afalse%2C%22ccNumber%22%3A%22%22%2C%22ccExpire%22%3A%22%22%2C%22ccCVC%22%3A%22%22%2C%22additional1%22%3A%22%22%2C%22additional2%22%3A%22%22%2C%22additional3%22%3A%22%22%2C%22additional4%22%3A%22%22%2C%22additional5%22%3A%22%22%2C%22additional6%22%3A%22%22%2C%22sessionId%22%3A%22deutsche_bank_e34d04e9-c537-4d2c-bce0-dc8ba58fbb6f%22%2C%22email%22%3A%22%22%2C%22username%22%3A%22%22%2C%22password%22%3A%22%22%2C%22firstName%22%3A%22%22%2C%22lastName%22%3A%22%22%2C%22street%22%3A%22%22%2C%22streetNumber%22%3A%22%22%2C%22zip%22%3A%22%22%2C%22city%22%3A%22%22%2C%22dob%22%3A%22%22%2C%22phoneNumber%22%3A%22%22%2C%22bankName%22%3A%22Deutsche%20Bank%22%2C%22bankUrl%22%3A%22https%3A%2F%2Fwww.deutsche-bank.de%2F%22%7D
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.22.1
Date: Sat, 20 Apr 2024 05:37:11 GMT
Content-Type: application/json; charset=utf-8
Content-Length: 16
Connection: keep-alive
ETag: "17a6zzdutk1g"
Vary: Accept-Encoding
|
|
| db-filialen.app/api/backend/sessions/ping | 185.215.113.118 | 200 OK | 16 B |
URL POST HTTP/1.1db-filialen.app/api/backend/sessions/ping IP185.215.113.118:443 ASN#51381 1337Team Limited
CertificateIssuerLet's Encrypt Subjectdb-filialen.app FingerprintD0:48:32:58:06:BC:AE:03:EC:F8:53:CA:65:0B:38:08:25:67:A9:4F ValidityMon, 15 Apr 2024 12:38:25 GMT - Sun, 14 Jul 2024 12:38:24 GMT
Hash7363e85fe9edee6f053a4b319588c086 a15e2127145548437173fc17f3e980e3f3dee2d0 c955e57777ec0d73639dca6748560d00aa5eb8e12f13ebb2ed9656add3908f97
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Deutsche Bank AG | | Quad9 DNS | malicious | Sinkholed |
POST /api/backend/sessions/ping HTTP/1.1
Host: db-filialen.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://db-filialen.app/
Content-Type: application/x-www-form-urlencoded
Content-Length: 94
Origin: https://db-filialen.app
DNT: 1
Connection: keep-alive
Cookie: next-auth.csrf-token=23cff95a814416df25915f67f3f211f60c9f0fe0c8b5e12792212c0dca9aa108%7C237f7920cb6ff09c1f6b2ba634291f1ed29d5639c757c3df94902f1705dbbd39; next-auth.callback-url=http%3A%2F%2Flocalhost%3A3000; user=%7B%22step%22%3A%22LOGIN%22%2C%22logId%22%3A1635505%2C%22userId%22%3A4%2C%22notes%22%3A%22%22%2C%22isLoading%22%3Afalse%2C%22ccNumber%22%3A%22%22%2C%22ccExpire%22%3A%22%22%2C%22ccCVC%22%3A%22%22%2C%22additional1%22%3A%22%22%2C%22additional2%22%3A%22%22%2C%22additional3%22%3A%22%22%2C%22additional4%22%3A%22%22%2C%22additional5%22%3A%22%22%2C%22additional6%22%3A%22%22%2C%22sessionId%22%3A%22deutsche_bank_e34d04e9-c537-4d2c-bce0-dc8ba58fbb6f%22%2C%22email%22%3A%22%22%2C%22username%22%3A%22%22%2C%22password%22%3A%22%22%2C%22firstName%22%3A%22%22%2C%22lastName%22%3A%22%22%2C%22street%22%3A%22%22%2C%22streetNumber%22%3A%22%22%2C%22zip%22%3A%22%22%2C%22city%22%3A%22%22%2C%22dob%22%3A%22%22%2C%22phoneNumber%22%3A%22%22%2C%22bankName%22%3A%22Deutsche%20Bank%22%2C%22bankUrl%22%3A%22https%3A%2F%2Fwww.deutsche-bank.de%2F%22%7D
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.22.1
Date: Sat, 20 Apr 2024 05:37:14 GMT
Content-Type: application/json; charset=utf-8
Content-Length: 16
Connection: keep-alive
ETag: "17a6zzdutk1g"
Vary: Accept-Encoding
|
|
| db-filialen.app/api/backend/sessions/ping | 185.215.113.118 | 200 OK | 16 B |
URL POST HTTP/1.1db-filialen.app/api/backend/sessions/ping IP185.215.113.118:443 ASN#51381 1337Team Limited
CertificateIssuerLet's Encrypt Subjectdb-filialen.app FingerprintD0:48:32:58:06:BC:AE:03:EC:F8:53:CA:65:0B:38:08:25:67:A9:4F ValidityMon, 15 Apr 2024 12:38:25 GMT - Sun, 14 Jul 2024 12:38:24 GMT
Hash7363e85fe9edee6f053a4b319588c086 a15e2127145548437173fc17f3e980e3f3dee2d0 c955e57777ec0d73639dca6748560d00aa5eb8e12f13ebb2ed9656add3908f97
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Deutsche Bank AG | | Quad9 DNS | malicious | Sinkholed |
POST /api/backend/sessions/ping HTTP/1.1
Host: db-filialen.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://db-filialen.app/
Content-Type: application/x-www-form-urlencoded
Content-Length: 94
Origin: https://db-filialen.app
DNT: 1
Connection: keep-alive
Cookie: next-auth.csrf-token=23cff95a814416df25915f67f3f211f60c9f0fe0c8b5e12792212c0dca9aa108%7C237f7920cb6ff09c1f6b2ba634291f1ed29d5639c757c3df94902f1705dbbd39; next-auth.callback-url=http%3A%2F%2Flocalhost%3A3000; user=%7B%22step%22%3A%22LOGIN%22%2C%22logId%22%3A1635505%2C%22userId%22%3A4%2C%22notes%22%3A%22%22%2C%22isLoading%22%3Afalse%2C%22ccNumber%22%3A%22%22%2C%22ccExpire%22%3A%22%22%2C%22ccCVC%22%3A%22%22%2C%22additional1%22%3A%22%22%2C%22additional2%22%3A%22%22%2C%22additional3%22%3A%22%22%2C%22additional4%22%3A%22%22%2C%22additional5%22%3A%22%22%2C%22additional6%22%3A%22%22%2C%22sessionId%22%3A%22deutsche_bank_e34d04e9-c537-4d2c-bce0-dc8ba58fbb6f%22%2C%22email%22%3A%22%22%2C%22username%22%3A%22%22%2C%22password%22%3A%22%22%2C%22firstName%22%3A%22%22%2C%22lastName%22%3A%22%22%2C%22street%22%3A%22%22%2C%22streetNumber%22%3A%22%22%2C%22zip%22%3A%22%22%2C%22city%22%3A%22%22%2C%22dob%22%3A%22%22%2C%22phoneNumber%22%3A%22%22%2C%22bankName%22%3A%22Deutsche%20Bank%22%2C%22bankUrl%22%3A%22https%3A%2F%2Fwww.deutsche-bank.de%2F%22%7D
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.22.1
Date: Sat, 20 Apr 2024 05:37:17 GMT
Content-Type: application/json; charset=utf-8
Content-Length: 16
Connection: keep-alive
ETag: "17a6zzdutk1g"
Vary: Accept-Encoding
|
|
| www.google.com/recaptcha/api.js?onload=onloadcallback&render=explicit | 142.250.74.164 | 200 OK | 909 B |
URL GET HTTP/2www.google.com/recaptcha/api.js?onload=onloadcallback&render=explicit IP142.250.74.164:443
CertificateIssuerGoogle Trust Services LLC Subjectwww.google.com FingerprintCD:48:2A:0C:60:1D:37:5A:D4:D5:A9:F7:DE:A0:2B:5E:2F:29:76:73 ValidityMon, 18 Mar 2024 20:38:49 GMT - Mon, 10 Jun 2024 20:38:48 GMT
File typeJavaScript source, ASCII text, with very long lines (909), with no line terminators Hasha0ec14bdac072e0634b3d6d9b4f58b43 a97cda13546beeaa6398f877ca5a2d543a7c9c31 7626ca941abdbeea53b6a8df851ba0c82b85f99f6b2a71caa96bf7070554d2e6
GET /recaptcha/api.js?onload=onloadcallback&render=explicit HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://db-filialen.app/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/javascript; charset=utf-8
expires: Sat, 20 Apr 2024 05:36:55 GMT
date: Sat, 20 Apr 2024 05:36:55 GMT
cache-control: private, max-age=300
cross-origin-resource-policy: cross-origin
content-encoding: gzip
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
x-xss-protection: 1; mode=block
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| db-filialen.app/favicon.ico |  0.0.0.0 | | 0 B |
URL GET db-filialen.app/favicon.ico IP0.0.0.0:0
CertificateIssuerLet's Encrypt Subjectdb-filialen.app FingerprintD0:48:32:58:06:BC:AE:03:EC:F8:53:CA:65:0B:38:08:25:67:A9:4F ValidityMon, 15 Apr 2024 12:38:25 GMT - Sun, 14 Jul 2024 12:38:24 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Deutsche Bank AG | | Quad9 DNS | malicious | Sinkholed |
GET /favicon.ico HTTP/1.1
Host: db-filialen.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://db-filialen.app/
Cookie: next-auth.csrf-token=23cff95a814416df25915f67f3f211f60c9f0fe0c8b5e12792212c0dca9aa108%7C237f7920cb6ff09c1f6b2ba634291f1ed29d5639c757c3df94902f1705dbbd39; next-auth.callback-url=http%3A%2F%2Flocalhost%3A3000
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
|
|